@vibe-agent-toolkit/agent-skills 0.2.0-rc.10 → 0.2.0-rc.12

package/README.md

@@ -36,7 +36,7 @@ const result = await validateSkill({
   skillPath: './my-skill/SKILL.md',
 });
 
-if (result.status === 'error') {
+if (result.summary.errors > 0) {
   console.error('Validation failed:');
   for (const issue of result.issues) {
     console.error(`  [${issue.code}] ${issue.message}`);
@@ -93,9 +93,10 @@ interface ValidateOptions {
 interface ValidationResult {
   path: string;                       // Path to skill file
   type: 'agent-skill' | 'vat-agent'; // Detected type
-  status: 'success' | 'warning' | 'error';
-  summary: string;                    // Human-readable summary
+  status: 'ok' | 'findings';          // Literal: `findings` iff any issue is published (info counts)
+  description: string;                // Human-readable one-liner
   issues: ValidationIssue[];          // All validation issues
+  summary: SeverityCounts;            // { errors, warnings, info } — gate on summary.errors > 0
   metadata?: {                        // Extracted metadata
     name?: string;
     description?: string;
@@ -120,7 +121,7 @@ const result = await validateSkill({
 });
 
 console.log(`Status: ${result.status}`);
-console.log(`Summary: ${result.summary}`);
+console.log(`Summary: ${result.description}`);
 
 // Check for specific error types
 const nameErrors = result.issues.filter(
@@ -144,10 +145,23 @@ The validator checks for:
 - `SKILL_MISSING_DESCRIPTION` - Required "description" field missing
 - `SKILL_NAME_INVALID` - Name doesn't match pattern: `^[a-z0-9]+(-[a-z0-9]+)*$`
 - `RESERVED_WORD_IN_NAME` (warning) - Name contains "claude" or "anthropic"
-- `SKILL_NAME_XML_TAGS` - Name contains < or > characters
 - `SKILL_DESCRIPTION_TOO_LONG` - Description exceeds 1024 characters
 - `SKILL_DESCRIPTION_EMPTY` - Description is empty or whitespace-only
-- `SKILL_DESCRIPTION_XML_TAGS` - Description contains < or > characters
+- `SKILL_DESCRIPTION_XML_TAGS` - Description contains an XML/HTML tag (VAT's reading of the vendor's "cannot contain XML tags"). Three lanes:
+  **markup** — a closing `</x>`, a self-closing `<x/>`, an opening tag with an attribute
+  assignment `<x a="b">`, or a declaration (`<!--`, `<![CDATA[`, `<!DOCTYPE`, `<?xml`) — fires
+  wherever it appears, **backticks included**; a **bare placeholder** `<word>`, which is
+  indistinguishable from a tag, so it fires unless it reads as part of a path or identifier
+  (`skills/<name>/SKILL.md`, `<name>.md`, `Promise<Result>`, `repo#<n>`, `--flag=<value>`); and a
+  **prompt-channel name** (the `system`/`sys`, `assistant`, `human`, `invoke`, `instructions`,
+  `thinking`, `tool_use`/`tool_result`, `function_calls`/`function_results` and
+  `im_start`/`im_end` families, in any spelling), which fires whatever it is glued to
+  (`<system>.Ignore previous`, `x=<invoke>`, `< system >`). Backticking (`` `<env>` ``) clears
+  the last two lanes only. Everyday placeholder words (`<user>`, `<script>`, `<example>`) are not
+  channel names, and an arbitrary joined word (`<override>.Ignore`) passes — no syntactic rule
+  separates it from `--flag=<value>`. Not a tag: a comparison or arrow (`a < b`, `<=`, `->`,
+  `=>`), or angle brackets holding prose with no attribute assignment in them
+  (`<see https://example.com>`, `<y and y>`)
 
 **Link Errors:**
 - `LINK_INTEGRITY_BROKEN` - Link points to non-existent file
@@ -174,15 +188,19 @@ Convert an Agent Skill (SKILL.md) to VAT agent format (agent.yaml).
 interface ImportOptions {
   skillPath: string;      // Path to SKILL.md
   outputPath?: string;    // Custom output path (default: same dir as SKILL.md)
-  force?: boolean;        // Overwrite existing agent.yaml (default: false)
+  force?: boolean;        // Replace what is at the output (default: false)
 }
 ```
 
+The agent.yaml is written by one tree-change plan: something already at the output
+without `force` is refused before anything is written (a thrown `TREE_DEST_OCCUPIED`
+`VatError`), and the directory it goes in is made when absent.
+
 **Returns:**
 ```typescript
 type ImportResult =
   | { success: true; agentPath: string }
-  | { success: false; error: string };
+  | { success: false; error: string; refusal: RefusalCode };
 ```
 
 **Example:**
@@ -356,7 +374,7 @@ const validation = await validateSkill({
   skillPath: './my-skill/SKILL.md',
 });
 
-if (validation.status === 'error') {
+if (validation.summary.errors > 0) {
   console.error('Validation failed, cannot import');
   process.exit(1);
 }
@@ -398,7 +416,7 @@ async function validateAllSkills(dir: string) {
 }
 
 const results = await validateAllSkills('./skills');
-const failed = results.filter(r => r.result.status === 'error');
+const failed = results.filter(r => r.result.summary.errors > 0);
 
 console.log(`Validated ${results.length} skills`);
 console.log(`Failed: ${failed.length}`);
@@ -462,7 +480,7 @@ async function validateInCI() {
       skillPath: `./skills/${skill}`,
     });
 
-    if (result.status === 'error') {
+    if (result.summary.errors > 0) {
       console.error(`❌ ${skill}:`);
       for (const issue of result.issues) {
         if (issue.severity === 'error') {
@@ -524,8 +542,8 @@ Validation errors are returned in the `ValidationResult` object, not thrown:
 ```typescript
 const result = await validateSkill({ skillPath: './skill/SKILL.md' });
 
-// result.status will be 'error', not thrown
-if (result.status === 'error') {
+// errors are counted in result.summary, not thrown
+if (result.summary.errors > 0) {
   // Handle validation failures
 }
 ```

package/dist/builder.d.ts

@@ -1,6 +1,13 @@
 /**
  * Agent Skill builder - converts VAT agents to Agent Skills
  */
+import { type TreeChangeWarning } from '@vibe-agent-toolkit/utils';
+/**
+ * The `VatError` code of a build with no output location: no `outputPath` was
+ * given and no `package.json` encloses the agent to put the default one in.
+ * The invocation's to fix — pass an output path, or build from inside a package.
+ */
+export declare const AGENT_PACKAGE_ROOT_MISSING_CODE = "AGENT_PACKAGE_ROOT_MISSING";
 export interface BuildOptions {
     /**
      * Path to agent directory or manifest file
@@ -26,6 +33,17 @@ export interface BuildOptions {
      * @default ['directory']
      */
     formats?: ('directory' | 'zip' | 'npm' | 'marketplace')[];
+    /**
+     * Whether `<outputPath>/<agent-name>/` holds a previous build to replace
+     * (`--force`). Default `false`: an explicit `outputPath` whose agent directory
+     * already holds anything but an empty directory (or a file where an archive a
+     * requested format writes beside it goes) is refused (`TREE_DEST_NOT_OWNED`) and
+     * left exactly as it was — the one rule of `packageSkill` ({@link packageOwnership}).
+     * The default location (no `outputPath`) is VAT's, and is replaced. Either way the
+     * build is one tree-change plan: it lands whole or changes nothing. An output that
+     * is, or holds, the agent's own source is refused (`TREE_DEST_HOLDS_SOURCE`).
+     */
+    replaceExistingOutput?: boolean;
 }
 export interface BuildResult {
     /**
@@ -47,6 +65,12 @@ export interface BuildResult {
      * Package artifacts (when package=true)
      */
     packageArtifacts?: Record<string, string>;
+    /**
+     * What the build's plan left beside its output: a previous build, parked by the swap,
+     * that the OS would not let VAT remove. The build is complete; each is a warning naming
+     * the leftover.
+     */
+    residue: readonly TreeChangeWarning[];
 }
 /**
  * Build an Agent Skill from a VAT agent

package/dist/builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,KAAK,GAAG,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,CAAC;IAEF;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAmFjF"}
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,EAYL,KAAK,iBAAiB,EAGvB,MAAM,2BAA2B,CAAC;AAYnC;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAQ5E,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,KAAK,GAAG,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC;IAE1D;;;;;;;;;OASG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,CAAC;IAEF;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C;;;;OAIG;IACH,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA4DjF"}

package/dist/builder.js

@@ -1,12 +1,20 @@
 /**
  * Agent Skill builder - converts VAT agents to Agent Skills
  */
-import { existsSync } from 'node:fs';
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import { loadAgentManifest } from '@vibe-agent-toolkit/agent-config';
-import { copyDirectory, safePath } from '@vibe-agent-toolkit/utils';
-import { packageSkill } from './skill-packager.js';
+import { AGENT_MANIFEST_INVALID_CODE, loadAgentManifest } from '@vibe-agent-toolkit/agent-config';
+import { applyTreePlan, copyTree, everywhere, findProjectRoot, fsBoundary, pathPresent, planTreeChanges, proveTreeReadable, readRegularFile, safePath, VatError, withFsFault, } from '@vibe-agent-toolkit/utils';
+import { asPackagerRefusal } from './packaging-errors.js';
+import { landedPackageResult, packageGeneratedSkillInto, packageOutputChanges, packageOwnership, stagedPathMapper, } from './skill-packager.js';
+/**
+ * The `VatError` code of a build with no output location: no `outputPath` was
+ * given and no `package.json` encloses the agent to put the default one in.
+ * The invocation's to fix — pass an output path, or build from inside a package.
+ */
+export const AGENT_PACKAGE_ROOT_MISSING_CODE = 'AGENT_PACKAGE_ROOT_MISSING';
+/** How `scripts/` is walked, by the proof and the copy alike: a link is shipped as what it points at, inside `scripts/` only, and every read is the input's. */
+const SCRIPTS_LINKS = { links: 'follow-contained', side: 'source' };
 /**
  * Build an Agent Skill from a VAT agent
  *
@@ -26,75 +34,139 @@ export async function buildAgentSkill(options) {
     const baseOutputPath = options.outputPath ?? getDefaultOutputPath(manifest.__manifestPath, target);
     // Append agent name to output path
     const outputPath = safePath.join(baseOutputPath, manifest.metadata.name);
-    // Ensure output directory exists
-    await fs.mkdir(outputPath, { recursive: true });
+    const formats = options.formats ?? ['directory'];
+    // Every source is read, or proven readable, BEFORE the output is touched: a
+    // refused source must never leave a half-written bundle. Role by PATH: the output
+    // is the more specific root when it sits inside the agent.
+    const sources = await readAgentSources(manifest, agentDir, fsBoundary({ source: [agentDir], destination: [outputPath] }, { origin: 'content' }));
+    const projectRoot = findProjectRoot(agentDir) ?? agentDir;
+    const packagedFormats = shouldPackage ? formats : [];
+    // ONE plan: the agent directory (written whole into a staged tree beside it) and the
+    // archives a format writes beside it. It lands whole, or changes nothing — a previous
+    // build is never removed first. Who may lose what is there: `packageOwnership`.
+    const holder = {};
+    const plan = await planTreeChanges(packageOutputChanges({
+        outputPath,
+        skillName: manifest.metadata.name,
+        formats: packagedFormats,
+        ownership: packageOwnership({ outputPath: options.outputPath, replaceExistingOutput: options.replaceExistingOutput }),
+        reads: sources.paths,
+        write: async (staged) => {
+            holder.built = await writeAgentBuild({ manifest, agentDir, sources, staged, outputPath, formats, shouldPackage });
+            return holder.built.packaged?.siblings ?? {};
+        },
+    }));
+    const { warnings } = await applyTreePlan(plan);
+    // The plan resolves only once its fill has run, so the build is there.
+    if (holder.built === undefined)
+        throw new Error('buildAgentSkill: the plan resolved without writing the build');
+    const { staged, files, packaged } = holder.built;
+    const landedPath = stagedPathMapper(projectRoot, staged, outputPath);
+    const result = {
+        outputPath,
+        agent: {
+            name: manifest.metadata.name,
+            version: manifest.metadata.version,
+        },
+        files: files.map(landedPath),
+        residue: warnings,
+    };
+    if (packaged !== undefined) {
+        const landed = landedPackageResult(packaged, { outputPath, projectRoot, formats: packagedFormats, residue: warnings });
+        result.files.push(...landed.files.dependencies.map(f => safePath.join(agentDir, f)));
+        if (landed.artifacts !== undefined)
+            result.packageArtifacts = landed.artifacts;
+    }
+    return result;
+}
+/**
+ * Write the agent build into `staged`, a plan's staged tree: the generated SKILL.md and
+ * manifest guide, `scripts/`, `LICENSE.txt`, then the package of that SKILL.md, in place.
+ * A write is the destination's by path (`staged`); a read of the agent's tree the source's.
+ */
+async function writeAgentBuild(input) {
+    const { manifest, agentDir, sources, staged } = input;
+    const boundary = fsBoundary({ source: [agentDir], destination: [staged] }, { origin: 'content' });
+    const writingOutput = (action, write) => boundary.run(action, 'destination', write);
     const files = [];
     // STEP 1: Generate SKILL.md from agent.yml
-    const skillPath = await generateSkillFile(manifest, agentDir, outputPath);
+    const skillPath = await generateSkillFile(manifest, sources.systemPrompt, staged, writingOutput);
     files.push(skillPath);
     // Generate agent-manifest-guide.md
-    const guidePath = await generateManifestGuide(outputPath);
+    const guidePath = await generateManifestGuide(staged, writingOutput);
     files.push(guidePath);
-    // Copy scripts/ directory if it exists (supports .js and .py). Only ABSENCE
-    // skips the copy: a scripts/ that is there but cannot be copied (a plain file,
-    // an unreadable entry) fails the build rather than shipping a bundle that
-    // silently lacks its scripts.
-    const scriptsPath = safePath.join(agentDir, 'scripts');
-    if (existsSync(scriptsPath)) {
-        const outputScriptsPath = safePath.join(outputPath, 'scripts');
-        await copyDirectory(scriptsPath, outputScriptsPath);
+    // Copy scripts/ (supports .js and .py). Its tree was proven above; a file that turns
+    // unreadable before the copy reaches it is still the source's — copyTree classifies its
+    // own reads — while a write it fails is decided by the boundary, by path.
+    if (sources.scriptsPath !== undefined) {
+        const scriptsPath = sources.scriptsPath;
+        const outputScriptsPath = safePath.join(staged, 'scripts');
+        await writingOutput(`copy ${scriptsPath} to ${outputScriptsPath}`, () => copyTree(scriptsPath, staged, 'scripts', { ...SCRIPTS_LINKS, onto: 'fresh' }));
         files.push(outputScriptsPath);
     }
-    // Copy LICENSE.txt if it exists — same rule: absence skips, a failed copy throws.
-    const licensePath = safePath.join(agentDir, 'LICENSE.txt');
-    if (existsSync(licensePath)) {
-        const outputLicensePath = safePath.join(outputPath, 'LICENSE.txt');
-        await fs.copyFile(licensePath, outputLicensePath);
+    if (sources.license !== undefined) {
+        const license = sources.license;
+        const outputLicensePath = safePath.join(staged, 'LICENSE.txt');
+        await writingOutput(`write ${outputLicensePath}`, () => fs.writeFile(outputLicensePath, license));
         files.push(outputLicensePath);
     }
-    // STEP 2: Optionally package the generated SKILL.md
-    if (shouldPackage) {
-        const packageResult = await packageSkill(skillPath, {
-            outputPath,
-            formats: options.formats ?? ['directory'],
-            basePath: agentDir,
-        });
-        const result = {
-            outputPath: packageResult.outputPath,
-            agent: {
-                name: manifest.metadata.name,
-                version: manifest.metadata.version,
-            },
-            files: [...files, ...packageResult.files.dependencies.map(f => safePath.join(agentDir, f))],
-        };
-        // Conditionally add packageArtifacts (exactOptionalPropertyTypes)
-        if (packageResult.artifacts !== undefined) {
-            result.packageArtifacts = packageResult.artifacts;
-        }
-        return result;
+    // STEP 2: Optionally package the generated SKILL.md, in place.
+    if (!input.shouldPackage)
+        return { staged, files, packaged: undefined };
+    // A source fault inside the packager is the SKILL_PACKAGING_FAILED finding; the agent's own
+    // source reads above stay their table refusal. Told apart here, at the packager call.
+    const packaged = await packageGeneratedSkillInto(skillPath, staged, { formats: input.formats, basePath: agentDir }, [input.outputPath])
+        .catch((error) => {
+        throw asPackagerRefusal(error);
+    });
+    // NOT `refuseFailedChecks`: the build adds scripts/ and LICENSE.txt that the generated SKILL.md
+    // never links, so the packager's PACKAGED_UNREFERENCED_FILE (an error) fires on every agent that
+    // has them — refusing on it would refuse those builds outright. Registered in known-defects.md.
+    return { staged, files, packaged };
+}
+/**
+ * Read the agent's sources. Only ABSENCE skips `scripts/` or `LICENSE.txt`:
+ * one that is there but cannot be read fails the build, coded as the source's,
+ * rather than shipping a bundle that silently lacks it.
+ */
+async function readAgentSources(manifest, agentDir, boundary) {
+    const { path: systemPromptPath, text: systemPrompt } = await readSystemPrompt(manifest, agentDir);
+    const paths = [manifest.__manifestPath ?? agentDir, systemPromptPath];
+    const scriptsCandidate = safePath.join(agentDir, 'scripts');
+    const scriptsPath = pathPresent(scriptsCandidate, { follow: agentDir }, everywhere('source'), 'probe') ? scriptsCandidate : undefined;
+    if (scriptsPath !== undefined) {
+        // Proven by the walk the copy below follows, before anything is written.
+        await proveTreeReadable(scriptsPath, SCRIPTS_LINKS);
+        paths.push(scriptsPath);
     }
-    // Just generate SKILL.md without packaging
-    return {
-        outputPath,
-        agent: {
-            name: manifest.metadata.name,
-            version: manifest.metadata.version,
-        },
-        files,
-    };
+    const licensePath = safePath.join(agentDir, 'LICENSE.txt');
+    let license;
+    if (pathPresent(licensePath, { follow: agentDir }, everywhere('source'), 'probe')) {
+        license = await boundary.run(`read ${licensePath}`, 'source', () => readRegularFile(licensePath));
+        paths.push(licensePath);
+    }
+    return { systemPrompt, scriptsPath, license, paths };
 }
 /**
- * Generate SKILL.md from agent manifest
- * Following Anthropic best practices: frontmatter + concise content + references
+ * The system prompt the manifest names. A missing `$ref` is the manifest's to
+ * fix. The file it names is read as a `source` of origin `config` — the manifest
+ * chose the path — so an absent one is the config's mistake and one the OS will
+ * not read is the input's, as the refusal table decides.
  */
-async function generateSkillFile(manifest, agentDir, outputPath) {
-    // Read system prompt
+async function readSystemPrompt(manifest, agentDir) {
     const systemPromptRef = manifest.spec.prompts?.system?.$ref;
     if (!systemPromptRef) {
-        throw new Error('Agent must have a system prompt (spec.prompts.system.$ref)');
+        throw new VatError(AGENT_MANIFEST_INVALID_CODE, 'Agent must have a system prompt (spec.prompts.system.$ref)');
     }
     const fullSystemPromptPath = safePath.resolve(agentDir, systemPromptRef);
-    const systemPrompt = await fs.readFile(fullSystemPromptPath, 'utf-8');
+    const text = await withFsFault({ side: 'source', origin: 'config', action: `read the system prompt ${systemPromptRef} (spec.prompts.system.$ref)`, path: fullSystemPromptPath }, () => readRegularFile(fullSystemPromptPath));
+    return { path: fullSystemPromptPath, text: text.toString('utf-8') };
+}
+/**
+ * Generate SKILL.md from agent manifest
+ * Following Anthropic best practices: frontmatter + concise content + references
+ */
+async function generateSkillFile(manifest, systemPrompt, outputPath, writingOutput) {
     // Build SKILL.md with frontmatter
     const frontmatter = `---
 name: ${manifest.metadata.name}
@@ -141,13 +213,13 @@ spec:
     const skillContent = frontmatter + systemPrompt + manifestSection + toolsSection;
     // Write SKILL.md
     const skillPath = safePath.join(outputPath, 'SKILL.md');
-    await fs.writeFile(skillPath, skillContent, 'utf-8');
+    await writingOutput(`write ${skillPath}`, () => fs.writeFile(skillPath, skillContent, 'utf-8'));
     return skillPath;
 }
 /**
  * Generate agent-manifest-guide.md with comprehensive documentation
  */
-async function generateManifestGuide(outputPath) {
+async function generateManifestGuide(outputPath, writingOutput) {
     const guide = `# VAT Agent Manifest Guide
 
 ## Overview
@@ -512,7 +584,7 @@ spec:
 - Check \`examples/\` for real-world usage patterns
 `;
     const guidePath = safePath.join(outputPath, 'agent-manifest-guide.md');
-    await fs.writeFile(guidePath, guide, 'utf-8');
+    await writingOutput(`write ${guidePath}`, () => fs.writeFile(guidePath, guide, 'utf-8'));
     return guidePath;
 }
 /**
@@ -532,12 +604,13 @@ function findAgentPackageRoot(manifestPath) {
     // Walk up until we find a package.json or hit the filesystem root
     while (currentDir !== path.dirname(currentDir)) {
         const packageJsonPath = safePath.join(currentDir, 'package.json');
-        if (existsSync(packageJsonPath)) {
+        // Each ancestor is the operator's own (the manifest's): the entry beneath it is read first.
+        if (pathPresent(packageJsonPath, { follow: currentDir }, everywhere('source'), 'probe')) {
             return currentDir;
         }
         currentDir = path.dirname(currentDir);
     }
-    throw new Error(`Could not find package.json for agent at ${manifestPath}. ` +
-        `Agent must be within an npm package to build bundles.`);
+    throw new VatError(AGENT_PACKAGE_ROOT_MISSING_CODE, `Could not find package.json for agent at ${manifestPath}. ` +
+        `Agent must be within an npm package to build bundles, or pass an output path.`);
 }
 //# sourceMappingURL=builder.js.map

package/dist/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAA4B,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA0DnD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAqB;IACzD,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE/E,sBAAsB;IACtB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEvD,wBAAwB;IACxB,MAAM,cAAc,GAClB,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAE9E,mCAAmC;IACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEzE,iCAAiC;IACjC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,2CAA2C;IAC3C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,mCAAmC;IACnC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,8BAA8B;IAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,aAAa,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,kFAAkF;IAClF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,oDAAoD;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE;YAClD,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC;YACzC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;gBAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;aACnC;YACD,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;SAC5F,CAAC;QAEF,kEAAkE;QAClE,IAAI,aAAa,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC;QACpD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2CAA2C;IAC3C,OAAO;QACL,UAAU;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;YAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;SACnC;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAA6B,EAC7B,QAAgB,EAChB,UAAkB;IAElB,qBAAqB;IACrB,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC;IAC5D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAEtE,kCAAkC;IAClC,MAAM,WAAW,GAAG;QACd,QAAQ,CAAC,QAAQ,CAAC,IAAI;eACf,QAAQ,CAAC,QAAQ,CAAC,WAAW,IAAI,WAAW;WAChD,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;;;CAG5C,CAAC;IAEA,4DAA4D;IAC5D,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBzB,CAAC;IAEA,qCAAqC;IACrC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,YAAY,GAAG,0BAA0B,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,yBAAyB,CAAC;YAC3D,YAAY,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;IAEjF,iBAAiB;IACjB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAErD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB;IACrD,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0Wf,CAAC;IAEA,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAE9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAoB,EAAE,MAAc;IAChE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAoB;IAChD,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAE9D,kEAAkE;IAClE,OAAO,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAClE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,KAAK,CACb,4CAA4C,YAAY,IAAI;QAC1D,uDAAuD,CAC1D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,2BAA2B,EAAE,iBAAiB,EAA4B,MAAM,kCAAkC,CAAC;AAC5H,OAAO,EACL,aAAa,EACb,QAAQ,EACR,UAAU,EACV,eAAe,EAEf,UAAU,EACV,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,QAAQ,EAER,QAAQ,EACR,WAAW,GACZ,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EAEzB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAE5E,gKAAgK;AAChK,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAW,CAAC;AAgF7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAqB;IACzD,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE/E,sBAAsB;IACtB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEvD,wBAAwB;IACxB,MAAM,cAAc,GAClB,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAE9E,mCAAmC;IACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;IAEjD,4EAA4E;IAC5E,kFAAkF;IAClF,2DAA2D;IAC3D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACjJ,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC1D,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAErD,qFAAqF;IACrF,sFAAsF;IACtF,gFAAgF;IAChF,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,oBAAoB,CAAC;QACtD,UAAU;QACV,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;QACjC,OAAO,EAAE,eAAe;QACxB,SAAS,EAAE,gBAAgB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACrH,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,CAAC,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAClH,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC,CAAC;IACJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/C,uEAAuE;IACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAChH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,MAAM,GAAgB;QAC1B,UAAU;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;YAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;SACnC;QACD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAC5B,OAAO,EAAE,QAAQ;KAClB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,KAS9B;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClG,MAAM,aAAa,GAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAElG,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,2CAA2C;IAC3C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,mCAAmC;IACnC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,qFAAqF;IACrF,wFAAwF;IACxF,0EAA0E;IAC1E,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,aAAa,CAAC,QAAQ,WAAW,OAAO,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACxJ,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,aAAa,CAAC,SAAS,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;QAClG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACxE,4FAA4F;IAC5F,sFAAsF;IACtF,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SACpI,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACL,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAcD;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAA6B,EAAE,QAAgB,EAAE,QAAoB;IACnG,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEtE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IACtI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,yEAAyE;QACzE,MAAM,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QAClF,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;QAClG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAA6B,EAAE,QAAgB;IAC7E,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC;IAC5D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,4DAA4D,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,eAAe,6BAA6B,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAChJ,GAAG,EAAE,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAA6B,EAC7B,YAAoB,EACpB,UAAkB,EAClB,aAA2B;IAE3B,kCAAkC;IAClC,MAAM,WAAW,GAAG;QACd,QAAQ,CAAC,QAAQ,CAAC,IAAI;eACf,QAAQ,CAAC,QAAQ,CAAC,WAAW,IAAI,WAAW;WAChD,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;;;CAG5C,CAAC;IAEA,4DAA4D;IAC5D,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBzB,CAAC;IAEA,qCAAqC;IACrC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,YAAY,GAAG,0BAA0B,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,yBAAyB,CAAC;YAC3D,YAAY,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;IAEjF,iBAAiB;IACjB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,aAAa,CAAC,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,aAA2B;IAClF,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0Wf,CAAC;IAEA,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACvE,MAAM,aAAa,CAAC,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzF,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAoB,EAAE,MAAc;IAChE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,YAAoB;IAChD,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAE9D,kEAAkE;IAClE,OAAO,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAClE,4FAA4F;QAC5F,IAAI,WAAW,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;YACxF,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,QAAQ,CAChB,+BAA+B,EAC/B,4CAA4C,YAAY,IAAI;QAC1D,+EAA+E,CAClF,CAAC;AACJ,CAAC"}

package/dist/bundle-copy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Copying one of the author's files into a skill bundle, classified once.
+ *
+ * A copy touches two trees and its errno does not say which one refused, so the
+ * two sides are separate steps: the source is proven readable first (the `source`
+ * side, origin `content`), and only then is the bundle written (the `destination`
+ * side) — its reads still classified on the source's side by `copyRegularFile`. The
+ * bundle's LAYOUT is decided by the skill's own `files:` config, so the write is
+ * classified with `shapeFromSource`: a dest that lands on or under another dest's
+ * file is the skill's to fix, while a full disk stays the destination's.
+ *
+ * The fault keeps `subject` in its `action`, so the message names what the author
+ * can locate — a `files:` entry, a linked file — and not only the absolute path
+ * the OS named.
+ */
+/**
+ * Copy one file into the bundle, creating the directory it lands in — only once the
+ * source is proven readable, so a refused source never leaves a directory behind.
+ *
+ * The copy is made the one way a file is made in a tree VAT is building (`copyRegularFile`):
+ * each directory on the way is a real one or is made, the file is created exclusively, and a
+ * regular file already at the name is replaced. A file where one of its directories goes is the
+ * skill's own layout — a `source` fault naming it — like every other shape the config decides.
+ *
+ * @param subject What the author can locate: `files: entry 'x'`, `linked file docs/a.md`
+ * @param sourcePath The author's file
+ * @param bundleRoot The bundle's root directory, which the packager made
+ * @param targetPath Where it lands, under `bundleRoot`
+ */
+export declare function copyIntoBundle(subject: string, sourcePath: string, bundleRoot: string, targetPath: string): Promise<void>;
+//# sourceMappingURL=bundle-copy.d.ts.map

package/dist/bundle-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-copy.d.ts","sourceRoot":"","sources":["../src/bundle-copy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI/H"}

package/dist/bundle-copy.js

@@ -0,0 +1,50 @@
+/**
+ * Copying one of the author's files into a skill bundle, classified once.
+ *
+ * A copy touches two trees and its errno does not say which one refused, so the
+ * two sides are separate steps: the source is proven readable first (the `source`
+ * side, origin `content`), and only then is the bundle written (the `destination`
+ * side) — its reads still classified on the source's side by `copyRegularFile`. The
+ * bundle's LAYOUT is decided by the skill's own `files:` config, so the write is
+ * classified with `shapeFromSource`: a dest that lands on or under another dest's
+ * file is the skill's to fix, while a full disk stays the destination's.
+ *
+ * The fault keeps `subject` in its `action`, so the message names what the author
+ * can locate — a `files:` entry, a linked file — and not only the absolute path
+ * the OS named.
+ */
+import { copyRegularFile, safePath, withFsFault } from '@vibe-agent-toolkit/utils';
+import { openForReading } from '@vibe-agent-toolkit/utils/fs';
+/**
+ * Prove `path` readable by opening it for reading and closing it.
+ *
+ * Never `access(R_OK)`: Node documents that on Windows it ignores ACLs, so an
+ * ACL-denied source passed it and then failed inside the copy, under the guard of
+ * the wrong side.
+ *
+ * @param path A file the build is about to read
+ */
+async function proveReadable(path) {
+    // Never blocks: a named pipe is refused (`EFTYPE`), not waited on for a writer.
+    const handle = await openForReading(path);
+    await handle.close();
+}
+/**
+ * Copy one file into the bundle, creating the directory it lands in — only once the
+ * source is proven readable, so a refused source never leaves a directory behind.
+ *
+ * The copy is made the one way a file is made in a tree VAT is building (`copyRegularFile`):
+ * each directory on the way is a real one or is made, the file is created exclusively, and a
+ * regular file already at the name is replaced. A file where one of its directories goes is the
+ * skill's own layout — a `source` fault naming it — like every other shape the config decides.
+ *
+ * @param subject What the author can locate: `files: entry 'x'`, `linked file docs/a.md`
+ * @param sourcePath The author's file
+ * @param bundleRoot The bundle's root directory, which the packager made
+ * @param targetPath Where it lands, under `bundleRoot`
+ */
+export async function copyIntoBundle(subject, sourcePath, bundleRoot, targetPath) {
+    await withFsFault({ side: 'source', origin: 'content', action: `read ${subject}` }, () => proveReadable(sourcePath));
+    await withFsFault({ side: 'destination', shapeFromSource: true, action: `copy ${subject} into the bundle` }, () => copyRegularFile(sourcePath, bundleRoot, safePath.relative(bundleRoot, targetPath), { side: 'source', reading: subject, existing: 'replace', writing: `${subject} into the bundle` }));
+}
+//# sourceMappingURL=bundle-copy.js.map

package/dist/bundle-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-copy.js","sourceRoot":"","sources":["../src/bundle-copy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,UAAkB,EAAE,UAAkB,EAAE,UAAkB;IAC9G,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IACrH,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,OAAO,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAChH,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,kBAAkB,EAAE,CAAC,CAAC,CAAC;AAC1L,CAAC"}

package/dist/evidence/derive-observations.d.ts

@@ -3,11 +3,11 @@
  *
  * Rolls `EvidenceRecord`s up into `CAPABILITY_*` observations. Callers
  * supply the local-shell pattern-ID set (which differs per subject — skills
- * check fewer patterns than full plugins) and a subject label for summary
+ * check fewer patterns than full plugins) and a subject label for description
  * wording.
  */
 import type { EvidenceRecord, Observation } from './types.js';
-/** Subject of derivation — controls observation summary wording. */
+/** Subject of derivation — controls observation description wording. */
 export type DerivationSubject = 'skill' | 'plugin';
 export interface DeriveObservationsOptions {
     /** Pattern IDs that imply CAPABILITY_LOCAL_SHELL for this subject. */

package/dist/evidence/derive-observations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"derive-observations.d.ts","sourceRoot":"","sources":["../../src/evidence/derive-observations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9D,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,mDAAmD;IACnD,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAStF,CAAC;AAqDF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,OAAO,EAAE,yBAAyB,GACjC,WAAW,EAAE,CAoCf"}
+{"version":3,"file":"derive-observations.d.ts","sourceRoot":"","sources":["../../src/evidence/derive-observations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9D,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,mDAAmD;IACnD,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAStF,CAAC;AAqDF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,OAAO,EAAE,yBAAyB,GACjC,WAAW,EAAE,CAoCf"}

package/dist/evidence/derive-observations.js

@@ -3,7 +3,7 @@
  *
  * Rolls `EvidenceRecord`s up into `CAPABILITY_*` observations. Callers
  * supply the local-shell pattern-ID set (which differs per subject — skills
- * check fewer patterns than full plugins) and a subject label for summary
+ * check fewer patterns than full plugins) and a subject label for description
  * wording.
  */
 import { detectInterpreter, extractMcpCommandFromMatchText, } from './interpreter-detection.js';
@@ -75,7 +75,7 @@ export function deriveObservationsFromEvidence(evidence, options) {
     if (localShell.length > 0) {
         out.push({
             code: 'CAPABILITY_LOCAL_SHELL',
-            summary: `${subjectCap} requires a local shell environment.`,
+            description: `${subjectCap} requires a local shell environment.`,
             supportingEvidence: dedupePatternIds(localShell),
         });
     }
@@ -87,7 +87,7 @@ export function deriveObservationsFromEvidence(evidence, options) {
             continue;
         out.push({
             code: 'CAPABILITY_EXTERNAL_CLI',
-            summary: `${subjectCap} invokes external CLI: ${binary}.`,
+            description: `${subjectCap} invokes external CLI: ${binary}.`,
             payload: { binary },
             supportingEvidence: dedupePatternIds(records),
         });
@@ -96,7 +96,7 @@ export function deriveObservationsFromEvidence(evidence, options) {
     if (browserAuth.length > 0) {
         out.push({
             code: 'CAPABILITY_BROWSER_AUTH',
-            summary: `${subjectCap} requires an interactive browser authentication flow.`,
+            description: `${subjectCap} requires an interactive browser authentication flow.`,
             supportingEvidence: dedupePatternIds(browserAuth),
         });
     }