akm-cli 0.8.0-rc2 → 0.8.0

package/dist/registry/build-index.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Build the v2 JSON registry index consumed by the `static-index` registry
  * provider. This module emits artifacts that conform to the v2 schema; the

package/dist/registry/create-provider-registry.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Generic factory-map utility.
  *

package/dist/registry/factory.js

@@ -1,10 +1,13 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Registry provider factory map.
  *
  * Maps registry provider type identifiers (e.g. "static-index", "skills-sh")
  * to factory functions that create RegistryProvider instances.
  *
- * "Registry" here refers to the kit discovery registries (static index files,
+ * "Registry" here refers to the stash discovery registries (static index files,
  * skills.sh API) — not to be confused with the source provider factory map in
  * `sources/provider-factory.ts` or the installed-source operations in
  * `installed-stashes.ts`.

package/dist/registry/origin-resolve.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import path from "node:path";
 import { parseRegistryRef } from "./resolve";
 /**

package/dist/registry/providers/index.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Centralized registry provider registration.
  *

package/dist/registry/providers/skills-sh.js

@@ -1,4 +1,8 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { fetchWithRetry } from "../../core/common";
+import { rethrowIfTestIsolationError } from "../../core/errors";
 import { closeDatabase, getRegistryIndexCache, openDatabase, upsertRegistryIndexCache } from "../../indexer/db";
 import { registerProvider } from "../factory";
 // ── Constants ───────────────────────────────────────────────────────────────
@@ -60,7 +64,7 @@ class SkillsShProvider {
     /**
      * skills.sh has no `getKit` API — every entry corresponds to a GitHub
      * repository whose metadata we already include in the search result. We
-     * synthesize a manifest from the search hit when the caller knows the kit
+     * synthesize a manifest from the search hit when the caller knows the stash
      * id; if not present in the most recent results, return null.
      */
     async getKit(id) {
@@ -94,7 +98,12 @@ class SkillsShProvider {
             db = openDatabase();
             dbCacheResult = getRegistryIndexCache(db, dbCacheKey, QUERY_CACHE_TTL_MS);
         }
-        catch {
+        catch (err) {
+            // Never mask the bun-test isolation guard as "DB unavailable" — see
+            // rethrowIfTestIsolationError in src/core/errors.ts. Without this,
+            // a leaky test silently gets a cold cache + fresh fetch instead of
+            // the loud TEST_ISOLATION_MISSING failure the guard intends.
+            rethrowIfTestIsolationError(err);
             // index.db not available yet (pre-migration install or test env) — fall through
         }
         if (dbCacheResult) {

package/dist/registry/providers/static-index.js

@@ -1,4 +1,8 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { fetchWithRetry, jsonWithByteCap, toErrorMessage } from "../../core/common";
+import { rethrowIfTestIsolationError } from "../../core/errors";
 import { closeDatabase, getRegistryIndexCache, openDatabase, upsertRegistryIndexCache } from "../../indexer/db";
 import { asString } from "../../integrations/github";
 import { registerProvider } from "../factory";
@@ -119,7 +123,12 @@ async function loadIndex(entry) {
         db = openDatabase();
         dbCacheResult = getRegistryIndexCache(db, entry.url, CACHE_TTL_MS);
     }
-    catch {
+    catch (err) {
+        // Never mask the bun-test isolation guard as "DB unavailable" — see
+        // rethrowIfTestIsolationError in src/core/errors.ts. Without this, a
+        // leaky test silently gets a cold cache instead of the loud
+        // TEST_ISOLATION_MISSING failure the guard intends.
+        rethrowIfTestIsolationError(err);
         // index.db not available yet (pre-migration install or test env) — fall through
     }
     if (dbCacheResult) {

package/dist/registry/providers/types.js

@@ -1,25 +1,4 @@
-/**
- * Registry provider interface (v1 architecture spec §3.1).
- *
- * A `RegistryProvider` is a read-only catalog that lists installable kits and
- * (optionally) previews assets within them. It is *not* a `SourceProvider`:
- * registry providers do not materialise files to disk — they only answer
- * discovery queries.
- *
- * The two built-in registry providers at v1 are:
- *
- * - `static-index` — reads the v2 JSON index schema (the official akm registry
- *   and any static-hosted team registry). The v2 schema is owned by this
- *   provider, not by core akm.
- * - `skills-sh` — wraps the skills.sh REST API.
- *
- * Context Hub is **not** a registry provider — it is an ordinary git repository
- * recommended via the official static-index registry (see CLAUDE.md).
- *
- * Note: the simple `search()` method is the v0.6 surface and remains the
- * primary entry point used by the orchestrator. The `searchKits` /
- * `searchAssets` / `getKit` / `canHandle` methods are the v1-spec contract
- * (§3.1) which built-in providers also implement so the orchestrator can be
- * iterated cleanly post-Phase 6 without reaching into provider-specific shapes.
- */
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 export {};

package/dist/registry/resolve.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
@@ -340,6 +343,7 @@ async function resolveNpmArtifact(parsed) {
 }
 async function resolveGithubArtifact(parsed) {
     const gitUrl = `https://github.com/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}.git`;
+    const repoBase = `${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}`;
     // Prefer git-backed installs so private GitHub repos work with the user's
     // normal git credential helper rather than requiring API-specific auth.
     const gitResolvedRevision = resolveGitRevisionFromRemote(gitUrl, parsed.requestedRef);
@@ -355,18 +359,18 @@ async function resolveGithubArtifact(parsed) {
     }
     const headers = githubHeaders();
     if (parsed.requestedRef) {
-        const commit = await tryFetchJson(`${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}/commits/${encodeURIComponent(parsed.requestedRef)}`, headers);
+        const commit = await tryFetchJson(`${repoBase}/commits/${encodeURIComponent(parsed.requestedRef)}`, headers);
         const resolvedRevision = asString(commit?.sha) ?? parsed.requestedRef;
         return {
             id: parsed.id,
             source: parsed.source,
             ref: parsed.ref,
-            artifactUrl: `${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}/tarball/${encodeURIComponent(parsed.requestedRef)}`,
+            artifactUrl: `${repoBase}/tarball/${encodeURIComponent(parsed.requestedRef)}`,
             resolvedRevision,
             resolvedVersion: parsed.requestedRef,
         };
     }
-    const latestRelease = await tryFetchJson(`${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}/releases/latest`, headers);
+    const latestRelease = await tryFetchJson(`${repoBase}/releases/latest`, headers);
     if (latestRelease) {
         const tarballUrl = asString(latestRelease.tarball_url);
         if (tarballUrl) {
@@ -380,17 +384,17 @@ async function resolveGithubArtifact(parsed) {
             };
         }
     }
-    const repoMeta = await fetchJson(`${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}`, headers);
+    const repoMeta = await fetchJson(repoBase, headers);
     const defaultBranch = asString(repoMeta.default_branch);
     if (!defaultBranch) {
         throw new Error(`Unable to resolve default branch for ${parsed.owner}/${parsed.repo}.`);
     }
-    const commit = await tryFetchJson(`${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}/commits/${encodeURIComponent(defaultBranch)}`, headers);
+    const commit = await tryFetchJson(`${repoBase}/commits/${encodeURIComponent(defaultBranch)}`, headers);
     return {
         id: parsed.id,
         source: parsed.source,
         ref: parsed.ref,
-        artifactUrl: `${GITHUB_API_BASE}/repos/${encodeURIComponent(parsed.owner)}/${encodeURIComponent(parsed.repo)}/tarball/${encodeURIComponent(defaultBranch)}`,
+        artifactUrl: `${repoBase}/tarball/${encodeURIComponent(defaultBranch)}`,
         resolvedVersion: defaultBranch,
         resolvedRevision: asString(commit?.sha) ?? defaultBranch,
     };
@@ -407,16 +411,7 @@ function resolveGitRevisionFromRemote(url, requestedRef) {
     return firstLine?.split(/\s/)[0] || undefined;
 }
 async function resolveGitArtifact(parsed) {
-    validateGitUrl(parsed.url);
-    const ref = parsed.requestedRef ?? "HEAD";
-    if (parsed.requestedRef)
-        validateGitRef(parsed.requestedRef);
-    const result = spawnSync("git", ["ls-remote", parsed.url, ref], { encoding: "utf8", timeout: 30_000 });
-    let resolvedRevision;
-    if (result.status === 0) {
-        const firstLine = result.stdout.trim().split(/\r?\n/)[0];
-        resolvedRevision = firstLine?.split(/\s/)[0] || undefined;
-    }
+    const resolvedRevision = resolveGitRevisionFromRemote(parsed.url, parsed.requestedRef);
     return {
         id: parsed.id,
         source: parsed.source,

package/dist/registry/types.js

@@ -1 +1,4 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 export {};