agents-inc 0.159.0 → 0.161.0

package/dist/chunk-NS5COBTT.js

@@ -1,254 +0,0 @@
-#!/usr/bin/env node
-import {
-  claimSlug,
-  computeFileHash,
-  glob,
-  injectForkedFromMetadata,
-  readFile,
-  readLocalSkillMetadata,
-  readSkillMetadata,
-  resolveInstallPaths,
-  seedExternalSkillSchema,
-  seedPayloadSchema,
-  validateSkillPath,
-  writeFile,
-  writeMetadataYaml
-} from "./chunk-V625APR6.js";
-import {
-  getCategoryDomain,
-  typedEntries
-} from "./chunk-7Z4N4JWQ.js";
-import {
-  GITHUB_SOURCE,
-  LOCAL_SKILLS_PATH,
-  STANDARD_FILES
-} from "./chunk-5KB4I5J7.js";
-
-// src/cli/lib/seed/external-skills.ts
-import path from "path";
-function pluginInstallError(ids) {
-  return [
-    "This configuration cannot be installed: these skills travel inside it, so no marketplace serves them and they cannot be installed as plugins:",
-    ...ids.map((id) => `  ${id}`),
-    "Re-share it with each skill above set to eject, which is the only way a carried skill installs."
-  ].join("\n");
-}
-function selectedExternals(payload) {
-  return typedEntries(payload.external ?? {}).flatMap(([id, skill]) => {
-    const entry = payload.skills[id];
-    return entry ? [{ id, skill, entry }] : [];
-  });
-}
-function askedForAsPlugin(externals) {
-  return externals.filter(({ entry }) => entry.install !== "eject").map(({ id }) => id);
-}
-function externalSlug(id) {
-  return id;
-}
-function skillAuthor(repo) {
-  const [owner = repo] = repo.split("/");
-  return `@${owner}`;
-}
-function repoRef(repo) {
-  return `${GITHUB_SOURCE.GITHUB_PREFIX}${repo}`;
-}
-function externalSkillDir(id, scope, projectDir) {
-  return path.join(resolveInstallPaths(projectDir, scope).skillsDir, id);
-}
-function externalCatalogueEntry(install) {
-  return {
-    id: install.id,
-    slug: externalSlug(install.id),
-    displayName: install.skill.displayName,
-    description: install.skill.description,
-    // Boundary cast held by the guard above it: the category was confirmed against the catalogue
-    // the payload names, and this one has just been shown to declare it too.
-    category: install.skill.categoryId,
-    author: skillAuthor(install.skill.repo),
-    path: `${LOCAL_SKILLS_PATH}/${install.id}/`,
-    conflictsWith: [],
-    requires: [],
-    alternatives: [],
-    discourages: [],
-    // Local and custom for the same reason: the bytes are on this machine and nowhere else, and
-    // the skill was authored outside the vocabulary this catalogue ships.
-    local: true,
-    custom: true,
-    localPath: install.skillDir
-  };
-}
-function seatExternalSkill({ id, skill, entry }, matrix, projectDir) {
-  const domain = getCategoryDomain(skill.categoryId);
-  if (domain === void 0) return [];
-  const install = {
-    id,
-    skill,
-    domain,
-    scope: entry.scope,
-    skillDir: externalSkillDir(id, entry.scope, projectDir)
-  };
-  matrix.skills[id] = externalCatalogueEntry(install);
-  claimSlug(matrix.slugMap, externalSlug(id), id);
-  return [install];
-}
-function registerExternalSkills(payload, matrix, projectDir) {
-  const externals = selectedExternals(payload);
-  const asPlugin = askedForAsPlugin(externals);
-  if (asPlugin.length > 0) throw new Error(pluginInstallError(asPlugin));
-  return externals.flatMap((external) => seatExternalSkill(external, matrix, projectDir));
-}
-async function writeExternalSkills(installs) {
-  for (const install of installs) {
-    await writeSkillTree(install);
-    await writeSkillManifest(install);
-    await registerSkillOnDisk(install);
-  }
-}
-async function writeSkillTree(install) {
-  for (const [relativePath, contents] of Object.entries(install.skill.files)) {
-    const filePath = path.join(install.skillDir, relativePath);
-    validateSkillPath(filePath, install.skillDir, relativePath);
-    await writeFile(filePath, contents);
-  }
-}
-var FRONTMATTER_BLOCK = /^---\r?\n([\s\S]*?)\r?\n---/;
-var NAME_FIELD = /^name:.*$/m;
-function withInstalledName(manifest, install) {
-  const named = `name: ${install.id}`;
-  const block = FRONTMATTER_BLOCK.exec(manifest);
-  if (!block) {
-    return `---
-${named}
-description: ${install.skill.description}
----
-
-${manifest}`;
-  }
-  const [whole, fields = ""] = block;
-  const renamed = NAME_FIELD.test(fields) ? fields.replace(NAME_FIELD, named) : `${named}
-${fields}`;
-  return `---
-${renamed}
----${manifest.slice(whole.length)}`;
-}
-async function writeSkillManifest(install) {
-  const manifestPath = path.join(install.skillDir, STANDARD_FILES.SKILL_MD);
-  await writeFile(manifestPath, withInstalledName(await readFile(manifestPath), install));
-}
-function externalSkillMetadata(install, shipped) {
-  return {
-    author: skillAuthor(install.skill.repo),
-    usageGuidance: `Use when working with ${install.skill.displayName}`,
-    ...shipped,
-    displayName: install.skill.displayName,
-    slug: install.id,
-    category: install.skill.categoryId,
-    domain: install.domain,
-    cliDescription: install.skill.description,
-    custom: true
-  };
-}
-async function registerSkillOnDisk(install) {
-  const metadataPath = path.join(install.skillDir, STANDARD_FILES.METADATA_YAML);
-  const shipped = await readLocalSkillMetadata(install.skillDir);
-  await writeMetadataYaml(metadataPath, externalSkillMetadata(install, shipped));
-  await injectForkedFromMetadata(
-    install.skillDir,
-    install.id,
-    await computeFileHash(path.join(install.skillDir, STANDARD_FILES.SKILL_MD)),
-    { source: repoRef(install.skill.repo), path: install.skill.path }
-  );
-}
-function unnameableRepoMessage(id) {
-  return `${id} travels inside a shared configuration, and this installation does not record the repository its content came from`;
-}
-function uncarryableContentMessage(id, reason) {
-  return `${id} travels inside a shared configuration, and ${reason}`;
-}
-function repoFromRef(ref) {
-  if (ref === void 0 || !ref.startsWith(GITHUB_SOURCE.GITHUB_PREFIX)) return void 0;
-  return ref.slice(GITHUB_SOURCE.GITHUB_PREFIX.length);
-}
-async function readSkillTree(skillDir) {
-  const files = await glob("**/*", skillDir, { dot: true });
-  const entries = await Promise.all(
-    files.map(async (file) => [file, await readFile(path.join(skillDir, file))])
-  );
-  return Object.fromEntries(entries);
-}
-async function readCarriedSkill({ id, skillDir, provenance }) {
-  if (provenance.path === void 0) return { carries: "nothing" };
-  const repo = repoFromRef(provenance.source);
-  if (repo === void 0) return { carries: "unshareable", line: unnameableRepoMessage(id) };
-  const described = await readSkillMetadata(path.join(skillDir, STANDARD_FILES.METADATA_YAML));
-  if (!described.usable) {
-    return { carries: "unshareable", line: uncarryableContentMessage(id, described.reason) };
-  }
-  const parsed = seedExternalSkillSchema.safeParse({
-    displayName: described.metadata.displayName,
-    description: described.metadata.cliDescription,
-    categoryId: described.metadata.category,
-    repo,
-    path: provenance.path,
-    files: await readSkillTree(skillDir)
-  });
-  if (!parsed.success) {
-    const reason = parsed.error.issues.map((issue) => issue.message).join("; ");
-    return { carries: "unshareable", line: uncarryableContentMessage(id, reason) };
-  }
-  return { carries: "content", id, skill: parsed.data };
-}
-async function readCarriedSkills(owned) {
-  const reads = await Promise.all(owned.map(readCarriedSkill));
-  return {
-    external: Object.fromEntries(
-      reads.flatMap((read) => read.carries === "content" ? [[read.id, read.skill]] : [])
-    ),
-    uncarryable: reads.flatMap((read) => read.carries === "unshareable" ? [read.line] : [])
-  };
-}
-
-// src/cli/lib/seed/fetch-seed.ts
-var SEED_API_URL = process.env.AGENTS_INC_API_URL ?? "https://api.agentsinc.sh";
-var SEED_USER_AGENT = "agents-inc-cli";
-async function fetchSeedConfig(id) {
-  const url = `${SEED_API_URL}/configs/${encodeURIComponent(id)}`;
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: { accept: "application/json", "user-agent": SEED_USER_AGENT }
-    });
-  } catch {
-    return { ok: false, error: `Could not reach ${SEED_API_URL} \u2014 check your connection.` };
-  }
-  if (response.status === 404) {
-    return { ok: false, error: `No configuration found for id '${id}'.` };
-  }
-  if (!response.ok) {
-    return { ok: false, error: `Fetching configuration failed (HTTP ${response.status}).` };
-  }
-  let body;
-  try {
-    body = await response.json();
-  } catch {
-    return { ok: false, error: "The configuration store returned something that is not JSON." };
-  }
-  const parsed = seedPayloadSchema.safeParse(body);
-  if (!parsed.success) {
-    return {
-      ok: false,
-      error: `Configuration '${id}' is not in a format this version of the CLI can install. Shared ids are never migrated \u2014 re-share the configuration to mint a current one, or update the CLI if that id came from a newer version.`
-    };
-  }
-  return { ok: true, payload: parsed.data };
-}
-
-export {
-  registerExternalSkills,
-  writeExternalSkills,
-  readCarriedSkills,
-  SEED_API_URL,
-  SEED_USER_AGENT,
-  fetchSeedConfig
-};
-//# sourceMappingURL=chunk-NS5COBTT.js.map

package/dist/chunk-NS5COBTT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli/lib/seed/external-skills.ts","../src/cli/lib/seed/fetch-seed.ts"],"sourcesContent":["import path from \"path\";\n\nimport { seedExternalSkillSchema } from \"@workspace/matrix/seed\";\n\nimport { GITHUB_SOURCE, LOCAL_SKILLS_PATH, STANDARD_FILES } from \"../../consts.js\";\nimport { resolveInstallPaths } from \"../installation/install-base-dir.js\";\nimport { readSkillMetadata } from \"../loading/loader.js\";\nimport { getCategoryDomain } from \"../matrix/matrix-provider.js\";\nimport { claimSlug } from \"../matrix/skill-resolution.js\";\nimport { validateSkillPath } from \"../skills/skill-copier.js\";\nimport {\n  injectForkedFromMetadata,\n  readLocalSkillMetadata,\n  writeMetadataYaml,\n} from \"../skills/skill-metadata.js\";\nimport { computeFileHash } from \"../versioning.js\";\nimport { glob, readFile, writeFile } from \"../../utils/fs.js\";\nimport { typedEntries } from \"../../utils/typed-object.js\";\n\nimport type { SkillScope } from \"../../types/config.js\";\nimport type { Domain, MergedSkillsMatrix, ResolvedSkill } from \"../../types/matrix.js\";\nimport type { CategoryPath, SkillId, SkillSlug } from \"../../types/skills.js\";\nimport type { ForkedFromMetadata, LocalSkillMetadata } from \"../skills/skill-metadata.js\";\nimport type {\n  SeedExternalSkill,\n  SeedPayload,\n  SeedSkill,\n  SeedSkillTree,\n} from \"@workspace/matrix/seed\";\n\n/**\n * One skill the payload carries rather than names, seated and ready to be written.\n *\n * `skillDir` and `domain` are resolved once, where the checks that make them safe already are:\n * the directory has to be the one the catalogue entry points at, because that is what tells the\n * copy step this skill is already where it belongs, and the domain is what the category guard has\n * just proved this catalogue declares.\n */\nexport type ExternalSkillInstall = {\n  id: SkillId;\n  scope: SkillScope;\n  skill: SeedExternalSkill;\n  domain: Domain;\n  skillDir: string;\n};\n\n/** One external entry with the skill row that selected it — what the payload says about it. */\ntype SelectedExternal = { id: SkillId; skill: SeedExternalSkill; entry: SeedSkill };\n\n/**\n * Names every carried skill a payload asks to install as a plugin, not just the first.\n *\n * There is nothing to install them FROM: the payload is the source, so no marketplace serves\n * these ids. Coercing them to eject would install something the payload did not ask for, under a\n * mode the sharer's own screen still shows as plugin — so the ids are named and the run stops.\n */\nfunction pluginInstallError(ids: SkillId[]): string {\n  return [\n    \"This configuration cannot be installed: these skills travel inside it, so no marketplace \" +\n      \"serves them and they cannot be installed as plugins:\",\n    ...ids.map((id) => `  ${id}`),\n    \"Re-share it with each skill above set to eject, which is the only way a carried skill installs.\",\n  ].join(\"\\n\");\n}\n\n/**\n * The external entries this selection actually names.\n *\n * Presence in `skills` is selection and `external` is only where the bytes are, so content nobody\n * picked installs nothing — seating it would put a skill in the catalogue no part of the\n * configuration asked for.\n */\nfunction selectedExternals(payload: SeedPayload): SelectedExternal[] {\n  return typedEntries<SkillId, SeedExternalSkill>(payload.external ?? {}).flatMap(([id, skill]) => {\n    const entry = payload.skills[id];\n    return entry ? [{ id, skill, entry }] : [];\n  });\n}\n\nfunction askedForAsPlugin(externals: SelectedExternal[]): SkillId[] {\n  return externals.filter(({ entry }) => entry.install !== \"eject\").map(({ id }) => id);\n}\n\n/**\n * Boundary cast: a carried skill's id is minted at intake and belongs to no generated union,\n * which is exactly what makes it external. It is its own slug too — a skill outside every\n * catalogue has no shorter name anything else would recognise, and the sending side says the same.\n */\nfunction externalSlug(id: SkillId): SkillSlug {\n  return id as SkillSlug;\n}\n\n/** The repository's owner as a handle, which is all the authorship a carried skill records. */\nfunction skillAuthor(repo: string): string {\n  const [owner = repo] = repo.split(\"/\");\n  return `@${owner}`;\n}\n\n/** The repository ref a carried skill's provenance records, in the form every other ref wears. */\nfunction repoRef(repo: string): string {\n  return `${GITHUB_SOURCE.GITHUB_PREFIX}${repo}`;\n}\n\n/** Where a carried skill's directory goes: under the skills directory of the scope it names. */\nfunction externalSkillDir(id: SkillId, scope: SkillScope, projectDir: string): string {\n  return path.join(resolveInstallPaths(projectDir, scope).skillsDir, id);\n}\n\n/**\n * The catalogue entry a carried skill becomes on arrival.\n *\n * It declares no relationships and is named by none, which is honest: nothing outside the\n * catalogue can say what this skill conflicts with, and nothing inside it knows the skill exists.\n */\nfunction externalCatalogueEntry(install: ExternalSkillInstall): ResolvedSkill {\n  return {\n    id: install.id,\n    slug: externalSlug(install.id),\n    displayName: install.skill.displayName,\n    description: install.skill.description,\n    // Boundary cast held by the guard above it: the category was confirmed against the catalogue\n    // the payload names, and this one has just been shown to declare it too.\n    category: install.skill.categoryId as CategoryPath,\n    author: skillAuthor(install.skill.repo),\n    path: `${LOCAL_SKILLS_PATH}/${install.id}/`,\n    conflictsWith: [],\n    requires: [],\n    alternatives: [],\n    discourages: [],\n    // Local and custom for the same reason: the bytes are on this machine and nowhere else, and\n    // the skill was authored outside the vocabulary this catalogue ships.\n    local: true,\n    custom: true,\n    localPath: install.skillDir,\n  };\n}\n\n/**\n * Seats one carried skill in the catalogue, or leaves it unseated.\n *\n * A skill is PLACED in the taxonomy and never extends it, so a category this catalogue has no\n * definition for belongs to no domain, renders in no tab and reaches no sub-agent. Left unseated,\n * the id falls to the decode's own skip, which reports it by name.\n */\nfunction seatExternalSkill(\n  { id, skill, entry }: SelectedExternal,\n  matrix: MergedSkillsMatrix,\n  projectDir: string,\n): ExternalSkillInstall[] {\n  const domain = getCategoryDomain(skill.categoryId);\n  if (domain === undefined) return [];\n\n  const install: ExternalSkillInstall = {\n    id,\n    skill,\n    domain,\n    scope: entry.scope,\n    skillDir: externalSkillDir(id, entry.scope, projectDir),\n  };\n\n  matrix.skills[id] = externalCatalogueEntry(install);\n  // Completes the map over the matrix: an entry the slug map does not carry is invisible to\n  // anything that addresses a skill by slug.\n  claimSlug(matrix.slugMap, externalSlug(id), id);\n\n  return [install];\n}\n\n/**\n * Seats the catalogue entries a payload carries, and says where each one's bytes go.\n *\n * Every other id in a payload is resolved against a catalogue the receiver already has, so one it\n * does not know is skipped and reported. A carried skill answers to no catalogue at all — which is\n * why its whole directory travels — so it has to BECOME a catalogue entry before the decode reads\n * the selection, or it is skipped like any other unknown id and the configuration installs\n * quietly smaller than it was shared.\n *\n * The entries are written into `matrix` in place, exactly as the local-skill merge writes the\n * skills it discovers on disk. That matrix is the object `initializeMatrix` seated, which is what\n * {@link getCategoryDomain} reads — every caller passes the loaded source's own.\n *\n * @throws {Error} If any carried skill asks to be installed as a plugin — see\n *   {@link pluginInstallError}.\n */\nexport function registerExternalSkills(\n  payload: SeedPayload,\n  matrix: MergedSkillsMatrix,\n  projectDir: string,\n): ExternalSkillInstall[] {\n  const externals = selectedExternals(payload);\n  const asPlugin = askedForAsPlugin(externals);\n\n  if (asPlugin.length > 0) throw new Error(pluginInstallError(asPlugin));\n\n  return externals.flatMap((external) => seatExternalSkill(external, matrix, projectDir));\n}\n\n/**\n * Writes each carried skill's directory where its own entry said, and registers it on disk.\n *\n * Three things have to be true afterwards, and each is a separate act: the files are there, the\n * skill answers to the id the configuration recorded, and a metadata.yaml describes it well\n * enough for the next `edit`, `compile` or `list` to find it again. The seat above lasts one run;\n * this is what makes the install survive.\n */\nexport async function writeExternalSkills(installs: ExternalSkillInstall[]): Promise<void> {\n  for (const install of installs) {\n    await writeSkillTree(install);\n    await writeSkillManifest(install);\n    await registerSkillOnDisk(install);\n  }\n}\n\n/**\n * The directory as the payload holds it, keys and all.\n *\n * The keys came off the wire, so a payload may ask for any path it likes — including one that\n * climbs out of the skill's own directory. They answer to the same guard a marketplace's own\n * paths do.\n */\nasync function writeSkillTree(install: ExternalSkillInstall): Promise<void> {\n  for (const [relativePath, contents] of Object.entries(install.skill.files)) {\n    const filePath = path.join(install.skillDir, relativePath);\n    validateSkillPath(filePath, install.skillDir, relativePath);\n    await writeFile(filePath, contents);\n  }\n}\n\n/** The frontmatter block at the head of a SKILL.md, and the `name` field inside it. */\nconst FRONTMATTER_BLOCK = /^---\\r?\\n([\\s\\S]*?)\\r?\\n---/;\nconst NAME_FIELD = /^name:.*$/m;\n\n/**\n * Names the skill by the id it installs under.\n *\n * Every loader reads a skill's id off this one field, and a compiled sub-agent references the id\n * the configuration recorded — the one minted at intake, which is also this directory's name. The\n * repository the skill came from knew about neither, so left as it was written the two never\n * meet: the sub-agent names a skill Claude Code knows as something else, and the next load\n * registers an id no configuration carries.\n *\n * Only the name. Everything else in the block is the author's and travels untouched.\n */\nfunction withInstalledName(manifest: string, install: ExternalSkillInstall): string {\n  const named = `name: ${install.id}`;\n  const block = FRONTMATTER_BLOCK.exec(manifest);\n\n  // A manifest with no frontmatter at all describes no skill to Claude Code either. The payload\n  // carries both fields one needs, so it is given one rather than installed unreadable.\n  if (!block) {\n    return `---\\n${named}\\ndescription: ${install.skill.description}\\n---\\n\\n${manifest}`;\n  }\n\n  const [whole, fields = \"\"] = block;\n  const renamed = NAME_FIELD.test(fields)\n    ? fields.replace(NAME_FIELD, named)\n    : `${named}\\n${fields}`;\n\n  // The block is anchored at the head of the file, so what follows it is the rest verbatim.\n  return `---\\n${renamed}\\n---${manifest.slice(whole.length)}`;\n}\n\nasync function writeSkillManifest(install: ExternalSkillInstall): Promise<void> {\n  const manifestPath = path.join(install.skillDir, STANDARD_FILES.SKILL_MD);\n  await writeFile(manifestPath, withInstalledName(await readFile(manifestPath), install));\n}\n\n/**\n * What the payload confirmed, over what the repository shipped, over what neither says.\n *\n * The order is the whole of it. The taxonomy is the placement the user chose against the\n * catalogue this configuration names, and the repository's own idea of where its skill belongs\n * answers to a taxonomy nobody here shares — so that is written over the file. Everything else\n * the repository wrote is kept, because its author knows more about their skill than a default\n * does.\n *\n * The defaults underneath exist because `doctor` validates every installed metadata.yaml, and a\n * file this command writes that that command reports as an error is the CLI disagreeing with\n * itself — in a file the user cannot fix, since the skill is somebody else's repository. Neither\n * is invented: the authorship is the repository's owner, and the usage line is the same words the\n * stack loader already writes for every skill reference it has nothing more specific for.\n */\nfunction externalSkillMetadata(\n  install: ExternalSkillInstall,\n  shipped: LocalSkillMetadata | null,\n): LocalSkillMetadata {\n  return {\n    author: skillAuthor(install.skill.repo),\n    usageGuidance: `Use when working with ${install.skill.displayName}`,\n    ...shipped,\n    displayName: install.skill.displayName,\n    slug: install.id,\n    category: install.skill.categoryId,\n    domain: install.domain,\n    cliDescription: install.skill.description,\n    custom: true,\n  };\n}\n\n/**\n * Registers the skill on disk, where the next command will look for it.\n *\n * `forkedFrom` is stamped through the one writer that stamps it, because it is the package's\n * single answer to \"did the CLI put this directory here?\" — `uninstall` reads it to decide what it\n * may delete, and the producer reads it to decide what the round trip owns. A carried skill IS the\n * round trip's; a skill the user wrote by hand is not, and carries nothing.\n *\n * The repository AND the directory inside it, because this is the only record of where these bytes\n * came from. Sharing this installation has to rebuild the entry the payload carried, and a\n * repository alone cannot say which of its directories travelled — see {@link readCarriedSkills}.\n */\nasync function registerSkillOnDisk(install: ExternalSkillInstall): Promise<void> {\n  const metadataPath = path.join(install.skillDir, STANDARD_FILES.METADATA_YAML);\n  const shipped = await readLocalSkillMetadata(install.skillDir);\n\n  await writeMetadataYaml(metadataPath, externalSkillMetadata(install, shipped));\n  await injectForkedFromMetadata(\n    install.skillDir,\n    install.id,\n    await computeFileHash(path.join(install.skillDir, STANDARD_FILES.SKILL_MD)),\n    { source: repoRef(install.skill.repo), path: install.skill.path },\n  );\n}\n\n/**\n * One installed skill directory the round trip owns, and what its install recorded about it.\n *\n * Read by the caller rather than here: whether a directory is the CLI's copy or the user's own\n * work is a question about ownership, which `installation-payload.ts` already asks of every entry\n * before anything else. This module answers only the next one — whether the bytes have to travel.\n */\nexport type OwnedSkillDir = { id: string; skillDir: string; provenance: ForkedFromMetadata };\n\n/**\n * What one installation carries rather than names.\n *\n * The same shape the mapper's other readings wear: what can travel, and the lines naming what\n * cannot. Both halves matter — a payload quietly missing content it could not read still mints an\n * id, and that id installs a configuration nobody chose.\n */\nexport type ContentReading = {\n  /** Skill id -> the entry a receiver seats it from. Keyed exactly as the wire keys `external`. */\n  external: Record<string, SeedExternalSkill>;\n  /** One line per skill whose content this installation cannot carry, for the refusal. */\n  uncarryable: string[];\n};\n\n/** What one owned directory turns out to carry: content, a reason it cannot, or nothing. */\ntype CarriedRead =\n  | { carries: \"content\"; id: string; skill: SeedExternalSkill }\n  | { carries: \"nothing\" }\n  | { carries: \"unshareable\"; line: string };\n\nfunction unnameableRepoMessage(id: string): string {\n  return `${id} travels inside a shared configuration, and this installation does not record the repository its content came from`;\n}\n\nfunction uncarryableContentMessage(id: string, reason: string): string {\n  return `${id} travels inside a shared configuration, and ${reason}`;\n}\n\n/**\n * The inverse of {@link repoRef}: the repository a ref names, or nothing when it names none this\n * contract can state.\n *\n * Provenance is written as a ref because that is the form every other source in a configuration\n * wears; the wire wants GitHub's own `owner/name`. Any other ref is a repository this contract has\n * no word for, which is a refusal rather than something to guess at.\n */\nfunction repoFromRef(ref: string | undefined): string | undefined {\n  if (ref === undefined || !ref.startsWith(GITHUB_SOURCE.GITHUB_PREFIX)) return undefined;\n  return ref.slice(GITHUB_SOURCE.GITHUB_PREFIX.length);\n}\n\n/** Every file under the skill, keyed by its path relative to it — dotfiles and nesting included. */\nasync function readSkillTree(skillDir: string): Promise<SeedSkillTree> {\n  const files = await glob(\"**/*\", skillDir, { dot: true });\n  const entries = await Promise.all(\n    files.map(async (file) => [file, await readFile(path.join(skillDir, file))] as const),\n  );\n  return Object.fromEntries(entries);\n}\n\n/**\n * Rebuilds the entry a carried skill arrived as, from the directory the install wrote.\n *\n * The bytes as they stand rather than as they arrived: the manifest was renamed to the id this\n * install recorded, and a user may have edited the skill since. Both are what is installed here,\n * and what is installed here is what a share carries.\n *\n * Validated against the contract's own schema rather than by rules restated here — that is what\n * makes the weight limit, the manifest requirement and every field's shape one definition rather\n * than two that can drift.\n */\nasync function readCarriedSkill({ id, skillDir, provenance }: OwnedSkillDir): Promise<CarriedRead> {\n  // The directory is what marks a skill as one no catalogue can resolve. Without it there is a\n  // catalogue behind this id, so the receiver installs it from there and the bytes stay home.\n  if (provenance.path === undefined) return { carries: \"nothing\" };\n\n  const repo = repoFromRef(provenance.source);\n  if (repo === undefined) return { carries: \"unshareable\", line: unnameableRepoMessage(id) };\n\n  const described = await readSkillMetadata(path.join(skillDir, STANDARD_FILES.METADATA_YAML));\n  if (!described.usable) {\n    return { carries: \"unshareable\", line: uncarryableContentMessage(id, described.reason) };\n  }\n\n  const parsed = seedExternalSkillSchema.safeParse({\n    displayName: described.metadata.displayName,\n    description: described.metadata.cliDescription,\n    categoryId: described.metadata.category,\n    repo,\n    path: provenance.path,\n    files: await readSkillTree(skillDir),\n  });\n  if (!parsed.success) {\n    const reason = parsed.error.issues.map((issue) => issue.message).join(\"; \");\n    return { carries: \"unshareable\", line: uncarryableContentMessage(id, reason) };\n  }\n\n  return { carries: \"content\", id, skill: parsed.data };\n}\n\n/**\n * What a set of owned skill directories carries, and what it cannot.\n *\n * The mirror of {@link registerExternalSkills}: that seats an entry a payload carried and writes\n * its bytes, this reads those bytes back into the entry a payload carries. Every other id in a\n * configuration is resolved by the receiver against a catalogue it already has, so its content has\n * nothing to add; an added skill answers to no catalogue in either direction, and a share that\n * named it without carrying it would mint an id that installs a configuration missing it.\n */\nexport async function readCarriedSkills(owned: OwnedSkillDir[]): Promise<ContentReading> {\n  const reads = await Promise.all(owned.map(readCarriedSkill));\n\n  return {\n    external: Object.fromEntries(\n      reads.flatMap((read) => (read.carries === \"content\" ? [[read.id, read.skill]] : [])),\n    ),\n    uncarryable: reads.flatMap((read) => (read.carries === \"unshareable\" ? [read.line] : [])),\n  };\n}\n","import { seedPayloadSchema, type SeedPayload } from \"@workspace/matrix/seed\";\n\n/** The config store behind agentsinc.sh. Overridable so tests never touch the network. */\nexport const SEED_API_URL = process.env.AGENTS_INC_API_URL ?? \"https://api.agentsinc.sh\";\n\n/**\n * Identifies this fetch as the CLI rather than a browser.\n *\n * `GET /configs/:id` is the only place either side can observe a config being *installed* rather\n * than merely built, and the worker can only separate that from someone opening a share link if\n * we say so. Without this the conversion signal does not exist.\n */\nexport const SEED_USER_AGENT = \"agents-inc-cli\";\n\nexport type FetchSeedResult = { ok: true; payload: SeedPayload } | { ok: false; error: string };\n\n/**\n * Fetches and validates a shared configuration.\n *\n * Every failure is a message rather than a throw: this runs before anything has been written, so\n * there is nothing to roll back and the caller's job is to explain rather than recover.\n */\nexport async function fetchSeedConfig(id: string): Promise<FetchSeedResult> {\n  const url = `${SEED_API_URL}/configs/${encodeURIComponent(id)}`;\n\n  let response: Response;\n  try {\n    response = await fetch(url, {\n      headers: { accept: \"application/json\", \"user-agent\": SEED_USER_AGENT },\n    });\n  } catch {\n    return { ok: false, error: `Could not reach ${SEED_API_URL} — check your connection.` };\n  }\n\n  if (response.status === 404) {\n    return { ok: false, error: `No configuration found for id '${id}'.` };\n  }\n  if (!response.ok) {\n    return { ok: false, error: `Fetching configuration failed (HTTP ${response.status}).` };\n  }\n\n  let body: unknown;\n  try {\n    body = await response.json();\n  } catch {\n    return { ok: false, error: \"The configuration store returned something that is not JSON.\" };\n  }\n\n  const parsed = seedPayloadSchema.safeParse(body);\n  if (!parsed.success) {\n    // Names the remedy rather than a cause it cannot observe. The payload was validated by the\n    // store on the way IN, so a stored payload that no longer parses means the contract moved\n    // underneath it — and every way that happens lands in this one `safeParse`: an id minted\n    // before a version bump, an id minted after one, and a body that is simply broken. The CLI\n    // cannot tell them apart, and the one thing true of all three is that re-sharing fixes it,\n    // because the store content-addresses an id and a fresh share mints one under this version.\n    return {\n      ok: false,\n      error: `Configuration '${id}' is not in a format this version of the CLI can install. Shared ids are never migrated — re-share the configuration to mint a current one, or update the CLI if that id came from a newer version.`,\n    };\n  }\n\n  return { ok: true, payload: parsed.data };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AAwDjB,SAAS,mBAAmB,KAAwB;AAClD,SAAO;AAAA,IACL;AAAA,IAEA,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE;AAAA,IAC5B;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AASA,SAAS,kBAAkB,SAA0C;AACnE,SAAO,aAAyC,QAAQ,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM;AAC/F,UAAM,QAAQ,QAAQ,OAAO,EAAE;AAC/B,WAAO,QAAQ,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC;AAAA,EAC3C,CAAC;AACH;AAEA,SAAS,iBAAiB,WAA0C;AAClE,SAAO,UAAU,OAAO,CAAC,EAAE,MAAM,MAAM,MAAM,YAAY,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE;AACtF;AAOA,SAAS,aAAa,IAAwB;AAC5C,SAAO;AACT;AAGA,SAAS,YAAY,MAAsB;AACzC,QAAM,CAAC,QAAQ,IAAI,IAAI,KAAK,MAAM,GAAG;AACrC,SAAO,IAAI,KAAK;AAClB;AAGA,SAAS,QAAQ,MAAsB;AACrC,SAAO,GAAG,cAAc,aAAa,GAAG,IAAI;AAC9C;AAGA,SAAS,iBAAiB,IAAa,OAAmB,YAA4B;AACpF,SAAO,KAAK,KAAK,oBAAoB,YAAY,KAAK,EAAE,WAAW,EAAE;AACvE;AAQA,SAAS,uBAAuB,SAA8C;AAC5E,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,MAAM,aAAa,QAAQ,EAAE;AAAA,IAC7B,aAAa,QAAQ,MAAM;AAAA,IAC3B,aAAa,QAAQ,MAAM;AAAA;AAAA;AAAA,IAG3B,UAAU,QAAQ,MAAM;AAAA,IACxB,QAAQ,YAAY,QAAQ,MAAM,IAAI;AAAA,IACtC,MAAM,GAAG,iBAAiB,IAAI,QAAQ,EAAE;AAAA,IACxC,eAAe,CAAC;AAAA,IAChB,UAAU,CAAC;AAAA,IACX,cAAc,CAAC;AAAA,IACf,aAAa,CAAC;AAAA;AAAA;AAAA,IAGd,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW,QAAQ;AAAA,EACrB;AACF;AASA,SAAS,kBACP,EAAE,IAAI,OAAO,MAAM,GACnB,QACA,YACwB;AACxB,QAAM,SAAS,kBAAkB,MAAM,UAAU;AACjD,MAAI,WAAW,OAAW,QAAO,CAAC;AAElC,QAAM,UAAgC;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,MAAM;AAAA,IACb,UAAU,iBAAiB,IAAI,MAAM,OAAO,UAAU;AAAA,EACxD;AAEA,SAAO,OAAO,EAAE,IAAI,uBAAuB,OAAO;AAGlD,YAAU,OAAO,SAAS,aAAa,EAAE,GAAG,EAAE;AAE9C,SAAO,CAAC,OAAO;AACjB;AAkBO,SAAS,uBACd,SACA,QACA,YACwB;AACxB,QAAM,YAAY,kBAAkB,OAAO;AAC3C,QAAM,WAAW,iBAAiB,SAAS;AAE3C,MAAI,SAAS,SAAS,EAAG,OAAM,IAAI,MAAM,mBAAmB,QAAQ,CAAC;AAErE,SAAO,UAAU,QAAQ,CAAC,aAAa,kBAAkB,UAAU,QAAQ,UAAU,CAAC;AACxF;AAUA,eAAsB,oBAAoB,UAAiD;AACzF,aAAW,WAAW,UAAU;AAC9B,UAAM,eAAe,OAAO;AAC5B,UAAM,mBAAmB,OAAO;AAChC,UAAM,oBAAoB,OAAO;AAAA,EACnC;AACF;AASA,eAAe,eAAe,SAA8C;AAC1E,aAAW,CAAC,cAAc,QAAQ,KAAK,OAAO,QAAQ,QAAQ,MAAM,KAAK,GAAG;AAC1E,UAAM,WAAW,KAAK,KAAK,QAAQ,UAAU,YAAY;AACzD,sBAAkB,UAAU,QAAQ,UAAU,YAAY;AAC1D,UAAM,UAAU,UAAU,QAAQ;AAAA,EACpC;AACF;AAGA,IAAM,oBAAoB;AAC1B,IAAM,aAAa;AAanB,SAAS,kBAAkB,UAAkB,SAAuC;AAClF,QAAM,QAAQ,SAAS,QAAQ,EAAE;AACjC,QAAM,QAAQ,kBAAkB,KAAK,QAAQ;AAI7C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EAAQ,KAAK;AAAA,eAAkB,QAAQ,MAAM,WAAW;AAAA;AAAA;AAAA,EAAY,QAAQ;AAAA,EACrF;AAEA,QAAM,CAAC,OAAO,SAAS,EAAE,IAAI;AAC7B,QAAM,UAAU,WAAW,KAAK,MAAM,IAClC,OAAO,QAAQ,YAAY,KAAK,IAChC,GAAG,KAAK;AAAA,EAAK,MAAM;AAGvB,SAAO;AAAA,EAAQ,OAAO;AAAA,KAAQ,SAAS,MAAM,MAAM,MAAM,CAAC;AAC5D;AAEA,eAAe,mBAAmB,SAA8C;AAC9E,QAAM,eAAe,KAAK,KAAK,QAAQ,UAAU,eAAe,QAAQ;AACxE,QAAM,UAAU,cAAc,kBAAkB,MAAM,SAAS,YAAY,GAAG,OAAO,CAAC;AACxF;AAiBA,SAAS,sBACP,SACA,SACoB;AACpB,SAAO;AAAA,IACL,QAAQ,YAAY,QAAQ,MAAM,IAAI;AAAA,IACtC,eAAe,yBAAyB,QAAQ,MAAM,WAAW;AAAA,IACjE,GAAG;AAAA,IACH,aAAa,QAAQ,MAAM;AAAA,IAC3B,MAAM,QAAQ;AAAA,IACd,UAAU,QAAQ,MAAM;AAAA,IACxB,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,QAAQ,MAAM;AAAA,IAC9B,QAAQ;AAAA,EACV;AACF;AAcA,eAAe,oBAAoB,SAA8C;AAC/E,QAAM,eAAe,KAAK,KAAK,QAAQ,UAAU,eAAe,aAAa;AAC7E,QAAM,UAAU,MAAM,uBAAuB,QAAQ,QAAQ;AAE7D,QAAM,kBAAkB,cAAc,sBAAsB,SAAS,OAAO,CAAC;AAC7E,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,MAAM,gBAAgB,KAAK,KAAK,QAAQ,UAAU,eAAe,QAAQ,CAAC;AAAA,IAC1E,EAAE,QAAQ,QAAQ,QAAQ,MAAM,IAAI,GAAG,MAAM,QAAQ,MAAM,KAAK;AAAA,EAClE;AACF;AA+BA,SAAS,sBAAsB,IAAoB;AACjD,SAAO,GAAG,EAAE;AACd;AAEA,SAAS,0BAA0B,IAAY,QAAwB;AACrE,SAAO,GAAG,EAAE,+CAA+C,MAAM;AACnE;AAUA,SAAS,YAAY,KAA6C;AAChE,MAAI,QAAQ,UAAa,CAAC,IAAI,WAAW,cAAc,aAAa,EAAG,QAAO;AAC9E,SAAO,IAAI,MAAM,cAAc,cAAc,MAAM;AACrD;AAGA,eAAe,cAAc,UAA0C;AACrE,QAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,EAAE,KAAK,KAAK,CAAC;AACxD,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,MAAM,IAAI,OAAO,SAAS,CAAC,MAAM,MAAM,SAAS,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,CAAU;AAAA,EACtF;AACA,SAAO,OAAO,YAAY,OAAO;AACnC;AAaA,eAAe,iBAAiB,EAAE,IAAI,UAAU,WAAW,GAAwC;AAGjG,MAAI,WAAW,SAAS,OAAW,QAAO,EAAE,SAAS,UAAU;AAE/D,QAAM,OAAO,YAAY,WAAW,MAAM;AAC1C,MAAI,SAAS,OAAW,QAAO,EAAE,SAAS,eAAe,MAAM,sBAAsB,EAAE,EAAE;AAEzF,QAAM,YAAY,MAAM,kBAAkB,KAAK,KAAK,UAAU,eAAe,aAAa,CAAC;AAC3F,MAAI,CAAC,UAAU,QAAQ;AACrB,WAAO,EAAE,SAAS,eAAe,MAAM,0BAA0B,IAAI,UAAU,MAAM,EAAE;AAAA,EACzF;AAEA,QAAM,SAAS,wBAAwB,UAAU;AAAA,IAC/C,aAAa,UAAU,SAAS;AAAA,IAChC,aAAa,UAAU,SAAS;AAAA,IAChC,YAAY,UAAU,SAAS;AAAA,IAC/B;AAAA,IACA,MAAM,WAAW;AAAA,IACjB,OAAO,MAAM,cAAc,QAAQ;AAAA,EACrC,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI;AAC1E,WAAO,EAAE,SAAS,eAAe,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAAA,EAC/E;AAEA,SAAO,EAAE,SAAS,WAAW,IAAI,OAAO,OAAO,KAAK;AACtD;AAWA,eAAsB,kBAAkB,OAAiD;AACvF,QAAM,QAAQ,MAAM,QAAQ,IAAI,MAAM,IAAI,gBAAgB,CAAC;AAE3D,SAAO;AAAA,IACL,UAAU,OAAO;AAAA,MACf,MAAM,QAAQ,CAAC,SAAU,KAAK,YAAY,YAAY,CAAC,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAE;AAAA,IACrF;AAAA,IACA,aAAa,MAAM,QAAQ,CAAC,SAAU,KAAK,YAAY,gBAAgB,CAAC,KAAK,IAAI,IAAI,CAAC,CAAE;AAAA,EAC1F;AACF;;;ACtbO,IAAM,eAAe,QAAQ,IAAI,sBAAsB;AASvD,IAAM,kBAAkB;AAU/B,eAAsB,gBAAgB,IAAsC;AAC1E,QAAM,MAAM,GAAG,YAAY,YAAY,mBAAmB,EAAE,CAAC;AAE7D,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,KAAK;AAAA,MAC1B,SAAS,EAAE,QAAQ,oBAAoB,cAAc,gBAAgB;AAAA,IACvE,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,OAAO,mBAAmB,YAAY,iCAA4B;AAAA,EACxF;AAEA,MAAI,SAAS,WAAW,KAAK;AAC3B,WAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC,EAAE,KAAK;AAAA,EACtE;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,WAAO,EAAE,IAAI,OAAO,OAAO,uCAAuC,SAAS,MAAM,KAAK;AAAA,EACxF;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,OAAO,+DAA+D;AAAA,EAC5F;AAEA,QAAM,SAAS,kBAAkB,UAAU,IAAI;AAC/C,MAAI,CAAC,OAAO,SAAS;AAOnB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,kBAAkB,EAAE;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,SAAS,OAAO,KAAK;AAC1C;","names":[]}