skilld 1.2.0 → 1.2.2

package/dist/_chunks/skills.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"skills.mjs","names":["agents"],"sources":["../../src/core/lockfile.ts","../../src/core/skills.ts"],"sourcesContent":["import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'\nimport { join } from 'pathe'\nimport { parseFrontmatter } from './markdown.ts'\nimport { yamlEscape, yamlParseKV } from './yaml.ts'\n\nexport interface SkillInfo {\n  packageName?: string\n  version?: string\n  /** All tracked packages as comma-separated \"name@version\" pairs (multi-package skills) */\n  packages?: string\n  repo?: string\n  source?: string\n  syncedAt?: string\n  generator?: string\n  /** Skill path within repo (git-sourced skills) */\n  path?: string\n  /** Git ref tracked for updates */\n  ref?: string\n  /** Git commit SHA at install time */\n  commit?: string\n}\n\nexport function parsePackages(packages?: string): Array<{ name: string, version: string }> {\n  if (!packages)\n    return []\n  return packages.split(',').map((s) => {\n    const trimmed = s.trim()\n    const atIdx = trimmed.lastIndexOf('@')\n    if (atIdx <= 0)\n      return { name: trimmed, version: '' }\n    return { name: trimmed.slice(0, atIdx), version: trimmed.slice(atIdx + 1) }\n  }).filter(p => p.name)\n}\n\nexport function serializePackages(pkgs: Array<{ name: string, version: string }>): string {\n  return pkgs.map(p => `${p.name}@${p.version}`).join(', ')\n}\n\nexport interface SkilldLock {\n  skills: Record<string, SkillInfo>\n}\n\nconst SKILL_FM_KEYS: (keyof SkillInfo)[] = ['packageName', 'version', 'packages', 'repo', 'source', 'syncedAt', 'generator', 'path', 'ref', 'commit']\n\nexport function parseSkillFrontmatter(skillPath: string): SkillInfo | null {\n  if (!existsSync(skillPath))\n    return null\n  const content = readFileSync(skillPath, 'utf-8')\n  const fm = parseFrontmatter(content)\n  if (Object.keys(fm).length === 0)\n    return null\n\n  const info: SkillInfo = {}\n  for (const key of SKILL_FM_KEYS) {\n    if (fm[key])\n      info[key] = fm[key]\n  }\n  return info\n}\n\nexport function readLock(skillsDir: string): SkilldLock | null {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  if (!existsSync(lockPath))\n    return null\n  const content = readFileSync(lockPath, 'utf-8')\n\n  const skills: Record<string, SkillInfo> = {}\n  let currentSkill: string | null = null\n\n  for (const line of content.split('\\n')) {\n    const skillMatch = line.match(/^ {2}(\\S+):$/)\n    if (skillMatch) {\n      currentSkill = skillMatch[1]\n      skills[currentSkill] = {}\n      continue\n    }\n    if (currentSkill && line.startsWith('    ')) {\n      const kv = yamlParseKV(line)\n      if (kv)\n        (skills[currentSkill] as any)[kv[0]] = kv[1]\n    }\n  }\n  return { skills }\n}\n\nfunction serializeLock(lock: SkilldLock): string {\n  let yaml = 'skills:\\n'\n  for (const [name, skill] of Object.entries(lock.skills)) {\n    yaml += `  ${name}:\\n`\n    if (skill.packageName)\n      yaml += `    packageName: ${yamlEscape(skill.packageName)}\\n`\n    if (skill.version)\n      yaml += `    version: ${yamlEscape(skill.version)}\\n`\n    if (skill.packages)\n      yaml += `    packages: ${yamlEscape(skill.packages)}\\n`\n    if (skill.repo)\n      yaml += `    repo: ${yamlEscape(skill.repo)}\\n`\n    if (skill.source)\n      yaml += `    source: ${yamlEscape(skill.source)}\\n`\n    if (skill.syncedAt)\n      yaml += `    syncedAt: ${yamlEscape(skill.syncedAt)}\\n`\n    if (skill.generator)\n      yaml += `    generator: ${yamlEscape(skill.generator)}\\n`\n    if (skill.path)\n      yaml += `    path: ${yamlEscape(skill.path)}\\n`\n    if (skill.ref)\n      yaml += `    ref: ${yamlEscape(skill.ref)}\\n`\n    if (skill.commit)\n      yaml += `    commit: ${yamlEscape(skill.commit)}\\n`\n  }\n  return yaml\n}\n\nexport function writeLock(skillsDir: string, skillName: string, info: SkillInfo): void {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  let lock: SkilldLock = { skills: {} }\n  if (existsSync(lockPath)) {\n    lock = readLock(skillsDir) || { skills: {} }\n  }\n\n  const existing = lock.skills[skillName]\n  if (existing && info.packageName) {\n    // Merge packages list\n    const existingPkgs = parsePackages(existing.packages)\n    // Also include existing primary if not yet in packages list\n    if (existing.packageName && !existingPkgs.some(p => p.name === existing.packageName)) {\n      existingPkgs.unshift({ name: existing.packageName, version: existing.version || '' })\n    }\n    // Add/update new package\n    const idx = existingPkgs.findIndex(p => p.name === info.packageName)\n    if (idx >= 0) {\n      existingPkgs[idx]!.version = info.version || ''\n    }\n    else {\n      existingPkgs.push({ name: info.packageName, version: info.version || '' })\n    }\n    info.packages = serializePackages(existingPkgs)\n    // Keep primary as first package\n    info.packageName = existingPkgs[0]!.name\n    info.version = existingPkgs[0]!.version\n    // Preserve fields from existing entry that aren't in new info\n    if (!info.repo && existing.repo)\n      info.repo = existing.repo\n    if (!info.source && existing.source)\n      info.source = existing.source\n    if (!info.generator && existing.generator)\n      info.generator = existing.generator\n  }\n\n  lock.skills[skillName] = info\n  writeFileSync(lockPath, serializeLock(lock))\n}\n\n/**\n * Merge multiple lockfiles, preferring the most recently synced entry per skill.\n */\nexport function mergeLocks(locks: SkilldLock[]): SkilldLock {\n  const merged: Record<string, SkillInfo> = {}\n  for (const lock of locks) {\n    for (const [name, info] of Object.entries(lock.skills)) {\n      const existing = merged[name]\n      if (!existing || (info.syncedAt && (!existing.syncedAt || info.syncedAt > existing.syncedAt)))\n        merged[name] = info\n    }\n  }\n  return { skills: merged }\n}\n\n/**\n * Sync a lockfile to all other dirs that already have a skilld-lock.yaml.\n * Only updates existing lockfiles — does not create new ones.\n */\nexport function syncLockfilesToDirs(sourceLock: SkilldLock, dirs: string[]): void {\n  for (const dir of dirs) {\n    const lockPath = join(dir, 'skilld-lock.yaml')\n    if (!existsSync(lockPath))\n      continue\n    const existing = readLock(dir)\n    if (!existing)\n      continue\n    // Merge source into existing\n    const merged = mergeLocks([existing, sourceLock])\n    writeFileSync(lockPath, serializeLock(merged))\n  }\n}\n\nexport function removeLockEntry(skillsDir: string, skillName: string): void {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  const lock = readLock(skillsDir)\n  if (!lock)\n    return\n\n  delete lock.skills[skillName]\n\n  if (Object.keys(lock.skills).length === 0) {\n    unlinkSync(lockPath)\n    return\n  }\n\n  writeFileSync(lockPath, serializeLock(lock))\n}\n","import type { AgentType } from '../agent/index.ts'\nimport type { SkillInfo } from './lockfile.ts'\nimport { existsSync, readdirSync } from 'node:fs'\nimport { join } from 'pathe'\nimport { agents } from '../agent/index.ts'\nimport { readLocalDependencies } from '../sources/index.ts'\nimport { parsePackages, parseSkillFrontmatter, readLock } from './lockfile.ts'\nimport { getSharedSkillsDir, semverGt } from './shared.ts'\n\nexport interface SkillEntry {\n  name: string\n  dir: string\n  agent: AgentType\n  info: SkillInfo | null\n  scope: 'local' | 'global'\n  /** Original package name from package.json (e.g., @scope/pkg) */\n  packageName?: string\n  /** Latest version from package.json deps */\n  latestVersion?: string\n}\n\nexport interface ProjectState {\n  skills: SkillEntry[]\n  deps: Map<string, string>\n  missing: string[]\n  outdated: SkillEntry[]\n  synced: SkillEntry[]\n  /** Skills in lockfile but not matched to any local dep */\n  unmatched: SkillEntry[]\n}\n\nexport interface IterateSkillsOptions {\n  scope?: 'local' | 'global' | 'all'\n  agents?: AgentType[]\n  cwd?: string\n}\n\nexport function* iterateSkills(opts: IterateSkillsOptions = {}): Generator<SkillEntry> {\n  const { scope = 'all', cwd = process.cwd() } = opts\n  const agentTypes = opts.agents ?? (Object.keys(agents) as AgentType[])\n\n  // When shared dir exists, read local skills from there (avoid duplicates from agent symlinks)\n  const sharedDir = getSharedSkillsDir(cwd)\n  let yieldedLocal = false\n\n  if (sharedDir && (scope === 'local' || scope === 'all')) {\n    yieldedLocal = true\n    const lock = readLock(sharedDir)\n    const entries = readdirSync(sharedDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n    // Use first detected agent as the representative\n    const firstAgent = agentTypes[0] ?? (Object.keys(agents) as AgentType[])[0]!\n    for (const name of entries) {\n      const dir = join(sharedDir, name)\n      if (lock?.skills[name]) {\n        yield { name, dir, agent: firstAgent, info: lock.skills[name], scope: 'local' }\n      }\n      else {\n        const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n        if (info?.generator === 'skilld') {\n          yield { name, dir, agent: firstAgent, info, scope: 'local' }\n        }\n      }\n    }\n  }\n\n  for (const agentType of agentTypes) {\n    const agent = agents[agentType]\n\n    // Local skills (skip if already yielded from shared dir)\n    if (!yieldedLocal && (scope === 'local' || scope === 'all')) {\n      const localDir = join(cwd, agent.skillsDir)\n      if (existsSync(localDir)) {\n        const lock = readLock(localDir)\n        const entries = readdirSync(localDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n        for (const name of entries) {\n          const dir = join(localDir, name)\n          // Only track skills in lockfile OR with generator: \"skilld\"\n          if (lock?.skills[name]) {\n            yield { name, dir, agent: agentType, info: lock.skills[name], scope: 'local' }\n          }\n          else {\n            const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n            if (info?.generator === 'skilld') {\n              yield { name, dir, agent: agentType, info, scope: 'local' }\n            }\n          }\n        }\n      }\n    }\n\n    // Global skills\n    if ((scope === 'global' || scope === 'all') && agent.globalSkillsDir) {\n      const globalDir = agent.globalSkillsDir\n      if (existsSync(globalDir)) {\n        const lock = readLock(globalDir)\n        const entries = readdirSync(globalDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n        for (const name of entries) {\n          const dir = join(globalDir, name)\n          // Only track skills in lockfile OR with generator: \"skilld\"\n          if (lock?.skills[name]) {\n            yield { name, dir, agent: agentType, info: lock.skills[name], scope: 'global' }\n          }\n          else {\n            const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n            if (info?.generator === 'skilld') {\n              yield { name, dir, agent: agentType, info, scope: 'global' }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n\nexport function isOutdated(skill: SkillEntry, depVersion: string): boolean {\n  if (!skill.info?.version)\n    return true\n\n  const depClean = depVersion.replace(/^[\\^~]/, '')\n\n  return semverGt(depClean, skill.info.version)\n}\n\nexport async function getProjectState(cwd: string = process.cwd()): Promise<ProjectState> {\n  const skills = [...iterateSkills({ scope: 'local', cwd })]\n\n  // Get package.json deps\n  const localDeps = await readLocalDependencies(cwd).catch(() => [])\n  const deps = new Map(localDeps.map(d => [d.name, d.version]))\n\n  // Build skill name -> entry map (for lookup by package name)\n  const skillByName = new Map(skills.map(s => [s.name, s]))\n\n  // Secondary lookup: packageName from lockfile (shipped skills have different names)\n  // Also includes all packages from multi-package skills\n  const skillByPkgName = new Map<string, SkillEntry>()\n  for (const s of skills) {\n    if (s.info?.packageName)\n      skillByPkgName.set(s.info.packageName, s)\n    for (const pkg of parsePackages(s.info?.packages))\n      skillByPkgName.set(pkg.name, s)\n  }\n\n  const missing: string[] = []\n  const outdated: SkillEntry[] = []\n  const synced: SkillEntry[] = []\n  const matchedSkillNames = new Set<string>()\n\n  for (const [pkgName, version] of deps) {\n    // Normalize package name (e.g., @scope/pkg -> scope-pkg)\n    const normalizedName = pkgName.replace(/^@/, '').replace(/\\//g, '-')\n    const skill = skillByName.get(`${normalizedName}-skilld`) || skillByName.get(normalizedName) || skillByName.get(pkgName) || skillByPkgName.get(pkgName)\n\n    if (!skill) {\n      missing.push(pkgName)\n    }\n    else {\n      matchedSkillNames.add(skill.name)\n      if (isOutdated(skill, version)) {\n        outdated.push({ ...skill, packageName: pkgName, latestVersion: version })\n      }\n      else {\n        synced.push({ ...skill, packageName: pkgName, latestVersion: version })\n      }\n    }\n  }\n\n  // Skills in lockfile but not matched to any local dep\n  const unmatched = skills.filter(s => !matchedSkillNames.has(s.name))\n\n  return { skills, deps, missing, outdated, synced, unmatched }\n}\n\nexport function getSkillsDir(agent: AgentType, scope: 'local' | 'global', cwd: string = process.cwd()): string {\n  const agentConfig = agents[agent]\n  if (scope === 'global') {\n    if (!agentConfig.globalSkillsDir) {\n      throw new Error(`Agent ${agent} does not support global skills`)\n    }\n    return agentConfig.globalSkillsDir\n  }\n  return getSharedSkillsDir(cwd) || join(cwd, agentConfig.skillsDir)\n}\n"],"mappings":";;;;;;;;AAsBA,SAAgB,cAAc,UAA6D;AACzF,KAAI,CAAC,SACH,QAAO,EAAE;AACX,QAAO,SAAS,MAAM,IAAI,CAAC,KAAK,MAAM;EACpC,MAAM,UAAU,EAAE,MAAM;EACxB,MAAM,QAAQ,QAAQ,YAAY,IAAI;AACtC,MAAI,SAAS,EACX,QAAO;GAAE,MAAM;GAAS,SAAS;GAAI;AACvC,SAAO;GAAE,MAAM,QAAQ,MAAM,GAAG,MAAM;GAAE,SAAS,QAAQ,MAAM,QAAQ,EAAA;GAAI;GAC3E,CAAC,QAAO,MAAK,EAAE,KAAK;;AAGxB,SAAgB,kBAAkB,MAAwD;AACxF,QAAO,KAAK,KAAI,MAAK,GAAG,EAAE,KAAK,GAAG,EAAE,UAAU,CAAC,KAAK,KAAK;;AAO3D,MAAM,gBAAqC;CAAC;CAAe;CAAW;CAAY;CAAQ;CAAU;CAAY;CAAa;CAAQ;CAAO;CAAS;AAErJ,SAAgB,sBAAsB,WAAqC;AACzE,KAAI,CAAC,WAAW,UAAU,CACxB,QAAO;CAET,MAAM,KAAK,iBADK,aAAa,WAAW,QAAQ,CACZ;AACpC,KAAI,OAAO,KAAK,GAAG,CAAC,WAAW,EAC7B,QAAO;CAET,MAAM,OAAkB,EAAE;AAC1B,MAAK,MAAM,OAAO,cAChB,KAAI,GAAG,KACL,MAAK,OAAO,GAAG;AAEnB,QAAO;;AAGT,SAAgB,SAAS,WAAsC;CAC7D,MAAM,WAAW,KAAK,WAAW,mBAAmB;AACpD,KAAI,CAAC,WAAW,SAAS,CACvB,QAAO;CACT,MAAM,UAAU,aAAa,UAAU,QAAQ;CAE/C,MAAM,SAAoC,EAAE;CAC5C,IAAI,eAA8B;AAElC,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,aAAa,KAAK,MAAM,eAAe;AAC7C,MAAI,YAAY;AACd,kBAAe,WAAW;AAC1B,UAAO,gBAAgB,EAAE;AACzB;;AAEF,MAAI,gBAAgB,KAAK,WAAW,OAAO,EAAE;GAC3C,MAAM,KAAK,YAAY,KAAK;AAC5B,OAAI,GACD,QAAO,cAAsB,GAAG,MAAM,GAAG;;;AAGhD,QAAO,EAAE,QAAQ;;AAGnB,SAAS,cAAc,MAA0B;CAC/C,IAAI,OAAO;AACX,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,EAAE;AACvD,UAAQ,KAAK,KAAK;AAClB,MAAI,MAAM,YACR,SAAQ,oBAAoB,WAAW,MAAM,YAAY,CAAC;AAC5D,MAAI,MAAM,QACR,SAAQ,gBAAgB,WAAW,MAAM,QAAQ,CAAC;AACpD,MAAI,MAAM,SACR,SAAQ,iBAAiB,WAAW,MAAM,SAAS,CAAC;AACtD,MAAI,MAAM,KACR,SAAQ,aAAa,WAAW,MAAM,KAAK,CAAC;AAC9C,MAAI,MAAM,OACR,SAAQ,eAAe,WAAW,MAAM,OAAO,CAAC;AAClD,MAAI,MAAM,SACR,SAAQ,iBAAiB,WAAW,MAAM,SAAS,CAAC;AACtD,MAAI,MAAM,UACR,SAAQ,kBAAkB,WAAW,MAAM,UAAU,CAAC;AACxD,MAAI,MAAM,KACR,SAAQ,aAAa,WAAW,MAAM,KAAK,CAAC;AAC9C,MAAI,MAAM,IACR,SAAQ,YAAY,WAAW,MAAM,IAAI,CAAC;AAC5C,MAAI,MAAM,OACR,SAAQ,eAAe,WAAW,MAAM,OAAO,CAAC;;AAEpD,QAAO;;AAGT,SAAgB,UAAU,WAAmB,WAAmB,MAAuB;CACrF,MAAM,WAAW,KAAK,WAAW,mBAAmB;CACpD,IAAI,OAAmB,EAAE,QAAQ,EAAE,EAAE;AACrC,KAAI,WAAW,SAAS,CACtB,QAAO,SAAS,UAAU,IAAI,EAAE,QAAQ,EAAE,EAAE;CAG9C,MAAM,WAAW,KAAK,OAAO;AAC7B,KAAI,YAAY,KAAK,aAAa;EAEhC,MAAM,eAAe,cAAc,SAAS,SAAS;AAErD,MAAI,SAAS,eAAe,CAAC,aAAa,MAAK,MAAK,EAAE,SAAS,SAAS,YAAY,CAClF,cAAa,QAAQ;GAAE,MAAM,SAAS;GAAa,SAAS,SAAS,WAAW;GAAI,CAAC;EAGvF,MAAM,MAAM,aAAa,WAAU,MAAK,EAAE,SAAS,KAAK,YAAY;AACpE,MAAI,OAAO,EACT,cAAa,KAAM,UAAU,KAAK,WAAW;MAG7C,cAAa,KAAK;GAAE,MAAM,KAAK;GAAa,SAAS,KAAK,WAAW;GAAI,CAAC;AAE5E,OAAK,WAAW,kBAAkB,aAAa;AAE/C,OAAK,cAAc,aAAa,GAAI;AACpC,OAAK,UAAU,aAAa,GAAI;AAEhC,MAAI,CAAC,KAAK,QAAQ,SAAS,KACzB,MAAK,OAAO,SAAS;AACvB,MAAI,CAAC,KAAK,UAAU,SAAS,OAC3B,MAAK,SAAS,SAAS;AACzB,MAAI,CAAC,KAAK,aAAa,SAAS,UAC9B,MAAK,YAAY,SAAS;;AAG9B,MAAK,OAAO,aAAa;AACzB,eAAc,UAAU,cAAc,KAAK,CAAC;;;;;AAM9C,SAAgB,WAAW,OAAiC;CAC1D,MAAM,SAAoC,EAAE;AAC5C,MAAK,MAAM,QAAQ,MACjB,MAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,OAAO,EAAE;EACtD,MAAM,WAAW,OAAO;AACxB,MAAI,CAAC,YAAa,KAAK,aAAa,CAAC,SAAS,YAAY,KAAK,WAAW,SAAS,UACjF,QAAO,QAAQ;;AAGrB,QAAO,EAAE,QAAQ,QAAQ;;;;;;AAO3B,SAAgB,oBAAoB,YAAwB,MAAsB;AAChF,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,KAAK,KAAK,mBAAmB;AAC9C,MAAI,CAAC,WAAW,SAAS,CACvB;EACF,MAAM,WAAW,SAAS,IAAI;AAC9B,MAAI,CAAC,SACH;AAGF,gBAAc,UAAU,cADT,WAAW,CAAC,UAAU,WAAW,CAAC,CACJ,CAAC;;;AAIlD,SAAgB,gBAAgB,WAAmB,WAAyB;CAC1E,MAAM,WAAW,KAAK,WAAW,mBAAmB;CACpD,MAAM,OAAO,SAAS,UAAU;AAChC,KAAI,CAAC,KACH;AAEF,QAAO,KAAK,OAAO;AAEnB,KAAI,OAAO,KAAK,KAAK,OAAO,CAAC,WAAW,GAAG;AACzC,aAAW,SAAS;AACpB;;AAGF,eAAc,UAAU,cAAc,KAAK,CAAC;;;;AClK9C,UAAiB,cAAc,OAA6B,EAAE,EAAyB;CACrF,MAAM,EAAE,QAAQ,OAAO,MAAM,QAAQ,KAAK,KAAK;CAC/C,MAAM,aAAa,KAAK,UAAW,OAAO,KAAKA,QAAO;CAGtD,MAAM,YAAY,mBAAmB,IAAI;CACzC,IAAI,eAAe;AAEnB,KAAI,cAAc,UAAU,WAAW,UAAU,QAAQ;AACvD,iBAAe;EACf,MAAM,OAAO,SAAS,UAAU;EAChC,MAAM,UAAU,YAAY,UAAU,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;EAElG,MAAM,aAAa,WAAW,MAAO,OAAO,KAAKA,QAAO,CAAiB;AACzE,OAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,MAAM,KAAK,WAAW,KAAK;AACjC,OAAI,MAAM,OAAO,MACf,OAAM;IAAE;IAAM;IAAK,OAAO;IAAY,MAAM,KAAK,OAAO;IAAO,OAAO;IAAS;QAE5E;IACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,QAAI,MAAM,cAAc,SACtB,OAAM;KAAE;KAAM;KAAK,OAAO;KAAY;KAAM,OAAO;KAAS;;;;AAMpE,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,QAAQA,QAAO;AAGrB,MAAI,CAAC,iBAAiB,UAAU,WAAW,UAAU,QAAQ;GAC3D,MAAM,WAAW,KAAK,KAAK,MAAM,UAAU;AAC3C,OAAI,WAAW,SAAS,EAAE;IACxB,MAAM,OAAO,SAAS,SAAS;IAC/B,MAAM,UAAU,YAAY,SAAS,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;AACjG,SAAK,MAAM,QAAQ,SAAS;KAC1B,MAAM,MAAM,KAAK,UAAU,KAAK;AAEhC,SAAI,MAAM,OAAO,MACf,OAAM;MAAE;MAAM;MAAK,OAAO;MAAW,MAAM,KAAK,OAAO;MAAO,OAAO;MAAS;UAE3E;MACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,UAAI,MAAM,cAAc,SACtB,OAAM;OAAE;OAAM;OAAK,OAAO;OAAW;OAAM,OAAO;OAAS;;;;;AAQrE,OAAK,UAAU,YAAY,UAAU,UAAU,MAAM,iBAAiB;GACpE,MAAM,YAAY,MAAM;AACxB,OAAI,WAAW,UAAU,EAAE;IACzB,MAAM,OAAO,SAAS,UAAU;IAChC,MAAM,UAAU,YAAY,UAAU,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;AAClG,SAAK,MAAM,QAAQ,SAAS;KAC1B,MAAM,MAAM,KAAK,WAAW,KAAK;AAEjC,SAAI,MAAM,OAAO,MACf,OAAM;MAAE;MAAM;MAAK,OAAO;MAAW,MAAM,KAAK,OAAO;MAAO,OAAO;MAAU;UAE5E;MACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,UAAI,MAAM,cAAc,SACtB,OAAM;OAAE;OAAM;OAAK,OAAO;OAAW;OAAM,OAAO;OAAU;;;;;;;AAS1E,SAAgB,WAAW,OAAmB,YAA6B;AACzE,KAAI,CAAC,MAAM,MAAM,QACf,QAAO;AAIT,QAAO,SAFU,WAAW,QAAQ,UAAU,GAAG,EAEvB,MAAM,KAAK,QAAQ;;AAG/C,eAAsB,gBAAgB,MAAc,QAAQ,KAAK,EAAyB;CACxF,MAAM,SAAS,CAAC,GAAG,cAAc;EAAE,OAAO;EAAS;EAAK,CAAC,CAAC;CAG1D,MAAM,YAAY,MAAM,sBAAsB,IAAI,CAAC,YAAY,EAAE,CAAC;CAClE,MAAM,OAAO,IAAI,IAAI,UAAU,KAAI,MAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CAG7D,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;CAIzD,MAAM,iCAAiB,IAAI,KAAyB;AACpD,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,MAAM,YACV,gBAAe,IAAI,EAAE,KAAK,aAAa,EAAE;AAC3C,OAAK,MAAM,OAAO,cAAc,EAAE,MAAM,SAAS,CAC/C,gBAAe,IAAI,IAAI,MAAM,EAAE;;CAGnC,MAAM,UAAoB,EAAE;CAC5B,MAAM,WAAyB,EAAE;CACjC,MAAM,SAAuB,EAAE;CAC/B,MAAM,oCAAoB,IAAI,KAAa;AAE3C,MAAK,MAAM,CAAC,SAAS,YAAY,MAAM;EAErC,MAAM,iBAAiB,QAAQ,QAAQ,MAAM,GAAG,CAAC,QAAQ,OAAO,IAAI;EACpE,MAAM,QAAQ,YAAY,IAAI,GAAG,eAAe,SAAS,IAAI,YAAY,IAAI,eAAe,IAAI,YAAY,IAAI,QAAQ,IAAI,eAAe,IAAI,QAAQ;AAEvJ,MAAI,CAAC,MACH,SAAQ,KAAK,QAAQ;OAElB;AACH,qBAAkB,IAAI,MAAM,KAAK;AACjC,OAAI,WAAW,OAAO,QAAQ,CAC5B,UAAS,KAAK;IAAE,GAAG;IAAO,aAAa;IAAS,eAAe;IAAS,CAAC;OAGzE,QAAO,KAAK;IAAE,GAAG;IAAO,aAAa;IAAS,eAAe;IAAS,CAAC;;;AAQ7E,QAAO;EAAE;EAAQ;EAAM;EAAS;EAAU;EAAQ,WAFhC,OAAO,QAAO,MAAK,CAAC,kBAAkB,IAAI,EAAE,KAAK,CAAA;EAEN;;AAG/D,SAAgB,aAAa,OAAkB,OAA2B,MAAc,QAAQ,KAAK,EAAU;CAC7G,MAAM,cAAcA,QAAO;AAC3B,KAAI,UAAU,UAAU;AACtB,MAAI,CAAC,YAAY,gBACf,OAAM,IAAI,MAAM,SAAS,MAAM,iCAAiC;AAElE,SAAO,YAAY;;AAErB,QAAO,mBAAmB,IAAI,IAAI,KAAK,KAAK,YAAY,UAAU"}
+{"version":3,"file":"skills.mjs","names":["agents"],"sources":["../../src/core/lockfile.ts","../../src/core/skills.ts"],"sourcesContent":["import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'\nimport { join } from 'pathe'\nimport { parseFrontmatter } from './markdown.ts'\nimport { yamlEscape, yamlParseKV } from './yaml.ts'\n\nexport interface SkillInfo {\n  packageName?: string\n  version?: string\n  /** All tracked packages as comma-separated \"name@version\" pairs (multi-package skills) */\n  packages?: string\n  repo?: string\n  source?: string\n  syncedAt?: string\n  generator?: string\n  /** Skill path within repo (git-sourced skills) */\n  path?: string\n  /** Git ref tracked for updates */\n  ref?: string\n  /** Git commit SHA at install time */\n  commit?: string\n}\n\nexport function parsePackages(packages?: string): Array<{ name: string, version: string }> {\n  if (!packages)\n    return []\n  return packages.split(',').map((s) => {\n    const trimmed = s.trim()\n    const atIdx = trimmed.lastIndexOf('@')\n    if (atIdx <= 0)\n      return { name: trimmed, version: '' }\n    return { name: trimmed.slice(0, atIdx), version: trimmed.slice(atIdx + 1) }\n  }).filter(p => p.name)\n}\n\nexport function serializePackages(pkgs: Array<{ name: string, version: string }>): string {\n  return pkgs.map(p => `${p.name}@${p.version}`).join(', ')\n}\n\nexport interface SkilldLock {\n  skills: Record<string, SkillInfo>\n}\n\nconst SKILL_FM_KEYS: (keyof SkillInfo)[] = ['packageName', 'version', 'packages', 'repo', 'source', 'syncedAt', 'generator', 'path', 'ref', 'commit']\n\nfunction isSkillInfoKey(key: string): key is keyof SkillInfo {\n  return (SKILL_FM_KEYS as readonly string[]).includes(key)\n}\n\nexport function parseSkillFrontmatter(skillPath: string): SkillInfo | null {\n  if (!existsSync(skillPath))\n    return null\n  const content = readFileSync(skillPath, 'utf-8')\n  const fm = parseFrontmatter(content)\n  if (Object.keys(fm).length === 0)\n    return null\n\n  const info: SkillInfo = {}\n  for (const key of SKILL_FM_KEYS) {\n    if (fm[key])\n      info[key] = fm[key]\n  }\n  return info\n}\n\nexport function readLock(skillsDir: string): SkilldLock | null {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  if (!existsSync(lockPath))\n    return null\n  const content = readFileSync(lockPath, 'utf-8')\n\n  const skills: Record<string, SkillInfo> = {}\n  let currentSkill: string | null = null\n\n  for (const line of content.split('\\n')) {\n    const skillMatch = line.match(/^ {2}(\\S+):$/)\n    if (skillMatch) {\n      currentSkill = skillMatch[1]\n      skills[currentSkill] = {}\n      continue\n    }\n    if (currentSkill && line.startsWith('    ')) {\n      const kv = yamlParseKV(line)\n      if (kv && isSkillInfoKey(kv[0]))\n        skills[currentSkill]![kv[0]] = kv[1]\n    }\n  }\n  return { skills }\n}\n\nfunction serializeLock(lock: SkilldLock): string {\n  let yaml = 'skills:\\n'\n  for (const [name, skill] of Object.entries(lock.skills)) {\n    yaml += `  ${name}:\\n`\n    for (const key of SKILL_FM_KEYS) {\n      if (skill[key])\n        yaml += `    ${key}: ${yamlEscape(skill[key])}\\n`\n    }\n  }\n  return yaml\n}\n\nexport function writeLock(skillsDir: string, skillName: string, info: SkillInfo): void {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  let lock: SkilldLock = { skills: {} }\n  if (existsSync(lockPath)) {\n    lock = readLock(skillsDir) || { skills: {} }\n  }\n\n  const existing = lock.skills[skillName]\n  if (existing && info.packageName) {\n    // Merge packages list\n    const existingPkgs = parsePackages(existing.packages)\n    // Also include existing primary if not yet in packages list\n    if (existing.packageName && !existingPkgs.some(p => p.name === existing.packageName)) {\n      existingPkgs.unshift({ name: existing.packageName, version: existing.version || '' })\n    }\n    // Add/update new package\n    const idx = existingPkgs.findIndex(p => p.name === info.packageName)\n    if (idx >= 0) {\n      existingPkgs[idx]!.version = info.version || ''\n    }\n    else {\n      existingPkgs.push({ name: info.packageName, version: info.version || '' })\n    }\n    info.packages = serializePackages(existingPkgs)\n    // Keep primary as first package\n    info.packageName = existingPkgs[0]!.name\n    info.version = existingPkgs[0]!.version\n    // Preserve fields from existing entry that aren't in new info\n    if (!info.repo && existing.repo)\n      info.repo = existing.repo\n    if (!info.source && existing.source)\n      info.source = existing.source\n    if (!info.generator && existing.generator)\n      info.generator = existing.generator\n  }\n\n  lock.skills[skillName] = info\n  writeFileSync(lockPath, serializeLock(lock))\n}\n\n/**\n * Merge multiple lockfiles, preferring the most recently synced entry per skill.\n */\nexport function mergeLocks(locks: SkilldLock[]): SkilldLock {\n  const merged: Record<string, SkillInfo> = {}\n  for (const lock of locks) {\n    for (const [name, info] of Object.entries(lock.skills)) {\n      const existing = merged[name]\n      if (!existing || (info.syncedAt && (!existing.syncedAt || info.syncedAt > existing.syncedAt)))\n        merged[name] = info\n    }\n  }\n  return { skills: merged }\n}\n\n/**\n * Sync a lockfile to all other dirs that already have a skilld-lock.yaml.\n * Only updates existing lockfiles — does not create new ones.\n */\nexport function syncLockfilesToDirs(sourceLock: SkilldLock, dirs: string[]): void {\n  for (const dir of dirs) {\n    const lockPath = join(dir, 'skilld-lock.yaml')\n    if (!existsSync(lockPath))\n      continue\n    const existing = readLock(dir)\n    if (!existing)\n      continue\n    // Merge source into existing\n    const merged = mergeLocks([existing, sourceLock])\n    writeFileSync(lockPath, serializeLock(merged))\n  }\n}\n\nexport function removeLockEntry(skillsDir: string, skillName: string): void {\n  const lockPath = join(skillsDir, 'skilld-lock.yaml')\n  const lock = readLock(skillsDir)\n  if (!lock)\n    return\n\n  delete lock.skills[skillName]\n\n  if (Object.keys(lock.skills).length === 0) {\n    unlinkSync(lockPath)\n    return\n  }\n\n  writeFileSync(lockPath, serializeLock(lock))\n}\n","import type { AgentType } from '../agent/index.ts'\nimport type { SkillInfo } from './lockfile.ts'\nimport { existsSync, readdirSync } from 'node:fs'\nimport { join } from 'pathe'\nimport { agents } from '../agent/index.ts'\nimport { readLocalDependencies } from '../sources/index.ts'\nimport { parsePackages, parseSkillFrontmatter, readLock } from './lockfile.ts'\nimport { getSharedSkillsDir, semverGt, semverValid } from './shared.ts'\n\nexport interface SkillEntry {\n  name: string\n  dir: string\n  agent: AgentType\n  info: SkillInfo | null\n  scope: 'local' | 'global'\n  /** Original package name from package.json (e.g., @scope/pkg) */\n  packageName?: string\n  /** Latest version from package.json deps */\n  latestVersion?: string\n}\n\nexport interface ProjectState {\n  skills: SkillEntry[]\n  deps: Map<string, string>\n  missing: string[]\n  outdated: SkillEntry[]\n  synced: SkillEntry[]\n  /** Skills in lockfile but not matched to any local dep */\n  unmatched: SkillEntry[]\n}\n\nexport interface IterateSkillsOptions {\n  scope?: 'local' | 'global' | 'all'\n  agents?: AgentType[]\n  cwd?: string\n}\n\nexport function* iterateSkills(opts: IterateSkillsOptions = {}): Generator<SkillEntry> {\n  const { scope = 'all', cwd = process.cwd() } = opts\n  const agentTypes = opts.agents ?? (Object.keys(agents) as AgentType[])\n\n  // When shared dir exists, read local skills from there (avoid duplicates from agent symlinks)\n  const sharedDir = getSharedSkillsDir(cwd)\n  let yieldedLocal = false\n\n  if (sharedDir && (scope === 'local' || scope === 'all')) {\n    yieldedLocal = true\n    const lock = readLock(sharedDir)\n    const entries = readdirSync(sharedDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n    // Use first detected agent as the representative\n    const firstAgent = agentTypes[0] ?? (Object.keys(agents) as AgentType[])[0]!\n    for (const name of entries) {\n      const dir = join(sharedDir, name)\n      if (lock?.skills[name]) {\n        yield { name, dir, agent: firstAgent, info: lock.skills[name], scope: 'local' }\n      }\n      else {\n        const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n        if (info?.generator === 'skilld') {\n          yield { name, dir, agent: firstAgent, info, scope: 'local' }\n        }\n      }\n    }\n  }\n\n  for (const agentType of agentTypes) {\n    const agent = agents[agentType]\n\n    // Local skills (skip if already yielded from shared dir)\n    if (!yieldedLocal && (scope === 'local' || scope === 'all')) {\n      const localDir = join(cwd, agent.skillsDir)\n      if (existsSync(localDir)) {\n        const lock = readLock(localDir)\n        const entries = readdirSync(localDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n        for (const name of entries) {\n          const dir = join(localDir, name)\n          // Only track skills in lockfile OR with generator: \"skilld\"\n          if (lock?.skills[name]) {\n            yield { name, dir, agent: agentType, info: lock.skills[name], scope: 'local' }\n          }\n          else {\n            const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n            if (info?.generator === 'skilld') {\n              yield { name, dir, agent: agentType, info, scope: 'local' }\n            }\n          }\n        }\n      }\n    }\n\n    // Global skills\n    if ((scope === 'global' || scope === 'all') && agent.globalSkillsDir) {\n      const globalDir = agent.globalSkillsDir\n      if (existsSync(globalDir)) {\n        const lock = readLock(globalDir)\n        const entries = readdirSync(globalDir).filter(f => !f.startsWith('.') && f !== 'skilld-lock.yaml')\n        for (const name of entries) {\n          const dir = join(globalDir, name)\n          // Only track skills in lockfile OR with generator: \"skilld\"\n          if (lock?.skills[name]) {\n            yield { name, dir, agent: agentType, info: lock.skills[name], scope: 'global' }\n          }\n          else {\n            const info = parseSkillFrontmatter(join(dir, '.skilld', '_SKILL.md'))\n            if (info?.generator === 'skilld') {\n              yield { name, dir, agent: agentType, info, scope: 'global' }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n\nexport function isOutdated(skill: SkillEntry, depVersion: string): boolean {\n  if (!skill.info?.version)\n    return true\n\n  const depClean = depVersion.replace(/^[\\^~>=<]+/, '')\n\n  // Non-semver versions (e.g. '*' from catalog:/workspace: specifiers) can't be compared\n  if (!semverValid(depClean))\n    return false\n\n  return semverGt(depClean, skill.info.version)\n}\n\nexport async function getProjectState(cwd: string = process.cwd()): Promise<ProjectState> {\n  const skills = [...iterateSkills({ scope: 'local', cwd })]\n\n  // Get package.json deps\n  const localDeps = await readLocalDependencies(cwd).catch(() => [])\n  const deps = new Map(localDeps.map(d => [d.name, d.version]))\n\n  // Build skill name -> entry map (for lookup by package name)\n  const skillByName = new Map(skills.map(s => [s.name, s]))\n\n  // Secondary lookup: packageName from lockfile (shipped skills have different names)\n  // Also includes all packages from multi-package skills\n  const skillByPkgName = new Map<string, SkillEntry>()\n  for (const s of skills) {\n    if (s.info?.packageName)\n      skillByPkgName.set(s.info.packageName, s)\n    for (const pkg of parsePackages(s.info?.packages))\n      skillByPkgName.set(pkg.name, s)\n  }\n\n  const missing: string[] = []\n  const outdated: SkillEntry[] = []\n  const synced: SkillEntry[] = []\n  const matchedSkillNames = new Set<string>()\n\n  for (const [pkgName, version] of deps) {\n    // Normalize package name (e.g., @scope/pkg -> scope-pkg)\n    const normalizedName = pkgName.replace(/^@/, '').replace(/\\//g, '-')\n    const skill = skillByName.get(`${normalizedName}-skilld`) || skillByName.get(normalizedName) || skillByName.get(pkgName) || skillByPkgName.get(pkgName)\n\n    if (!skill) {\n      missing.push(pkgName)\n    }\n    else {\n      matchedSkillNames.add(skill.name)\n      if (isOutdated(skill, version)) {\n        outdated.push({ ...skill, packageName: pkgName, latestVersion: version })\n      }\n      else {\n        synced.push({ ...skill, packageName: pkgName, latestVersion: version })\n      }\n    }\n  }\n\n  // Skills in lockfile but not matched to any local dep\n  const unmatched = skills.filter(s => !matchedSkillNames.has(s.name))\n\n  return { skills, deps, missing, outdated, synced, unmatched }\n}\n\nexport function getSkillsDir(agent: AgentType, scope: 'local' | 'global', cwd: string = process.cwd()): string {\n  const agentConfig = agents[agent]\n  if (scope === 'global') {\n    if (!agentConfig.globalSkillsDir) {\n      throw new Error(`Agent ${agent} does not support global skills`)\n    }\n    return agentConfig.globalSkillsDir\n  }\n  return getSharedSkillsDir(cwd) || join(cwd, agentConfig.skillsDir)\n}\n"],"mappings":";;;;;;;;AAsBA,SAAgB,cAAc,UAA6D;AACzF,KAAI,CAAC,SACH,QAAO,EAAE;AACX,QAAO,SAAS,MAAM,IAAI,CAAC,KAAK,MAAM;EACpC,MAAM,UAAU,EAAE,MAAM;EACxB,MAAM,QAAQ,QAAQ,YAAY,IAAI;AACtC,MAAI,SAAS,EACX,QAAO;GAAE,MAAM;GAAS,SAAS;GAAI;AACvC,SAAO;GAAE,MAAM,QAAQ,MAAM,GAAG,MAAM;GAAE,SAAS,QAAQ,MAAM,QAAQ,EAAA;GAAI;GAC3E,CAAC,QAAO,MAAK,EAAE,KAAK;;AAGxB,SAAgB,kBAAkB,MAAwD;AACxF,QAAO,KAAK,KAAI,MAAK,GAAG,EAAE,KAAK,GAAG,EAAE,UAAU,CAAC,KAAK,KAAK;;AAO3D,MAAM,gBAAqC;CAAC;CAAe;CAAW;CAAY;CAAQ;CAAU;CAAY;CAAa;CAAQ;CAAO;CAAS;AAErJ,SAAS,eAAe,KAAqC;AAC3D,QAAQ,cAAoC,SAAS,IAAI;;AAG3D,SAAgB,sBAAsB,WAAqC;AACzE,KAAI,CAAC,WAAW,UAAU,CACxB,QAAO;CAET,MAAM,KAAK,iBADK,aAAa,WAAW,QAAQ,CACZ;AACpC,KAAI,OAAO,KAAK,GAAG,CAAC,WAAW,EAC7B,QAAO;CAET,MAAM,OAAkB,EAAE;AAC1B,MAAK,MAAM,OAAO,cAChB,KAAI,GAAG,KACL,MAAK,OAAO,GAAG;AAEnB,QAAO;;AAGT,SAAgB,SAAS,WAAsC;CAC7D,MAAM,WAAW,KAAK,WAAW,mBAAmB;AACpD,KAAI,CAAC,WAAW,SAAS,CACvB,QAAO;CACT,MAAM,UAAU,aAAa,UAAU,QAAQ;CAE/C,MAAM,SAAoC,EAAE;CAC5C,IAAI,eAA8B;AAElC,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,aAAa,KAAK,MAAM,eAAe;AAC7C,MAAI,YAAY;AACd,kBAAe,WAAW;AAC1B,UAAO,gBAAgB,EAAE;AACzB;;AAEF,MAAI,gBAAgB,KAAK,WAAW,OAAO,EAAE;GAC3C,MAAM,KAAK,YAAY,KAAK;AAC5B,OAAI,MAAM,eAAe,GAAG,GAAG,CAC7B,QAAO,cAAe,GAAG,MAAM,GAAG;;;AAGxC,QAAO,EAAE,QAAQ;;AAGnB,SAAS,cAAc,MAA0B;CAC/C,IAAI,OAAO;AACX,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,EAAE;AACvD,UAAQ,KAAK,KAAK;AAClB,OAAK,MAAM,OAAO,cAChB,KAAI,MAAM,KACR,SAAQ,OAAO,IAAI,IAAI,WAAW,MAAM,KAAK,CAAC;;AAGpD,QAAO;;AAGT,SAAgB,UAAU,WAAmB,WAAmB,MAAuB;CACrF,MAAM,WAAW,KAAK,WAAW,mBAAmB;CACpD,IAAI,OAAmB,EAAE,QAAQ,EAAE,EAAE;AACrC,KAAI,WAAW,SAAS,CACtB,QAAO,SAAS,UAAU,IAAI,EAAE,QAAQ,EAAE,EAAE;CAG9C,MAAM,WAAW,KAAK,OAAO;AAC7B,KAAI,YAAY,KAAK,aAAa;EAEhC,MAAM,eAAe,cAAc,SAAS,SAAS;AAErD,MAAI,SAAS,eAAe,CAAC,aAAa,MAAK,MAAK,EAAE,SAAS,SAAS,YAAY,CAClF,cAAa,QAAQ;GAAE,MAAM,SAAS;GAAa,SAAS,SAAS,WAAW;GAAI,CAAC;EAGvF,MAAM,MAAM,aAAa,WAAU,MAAK,EAAE,SAAS,KAAK,YAAY;AACpE,MAAI,OAAO,EACT,cAAa,KAAM,UAAU,KAAK,WAAW;MAG7C,cAAa,KAAK;GAAE,MAAM,KAAK;GAAa,SAAS,KAAK,WAAW;GAAI,CAAC;AAE5E,OAAK,WAAW,kBAAkB,aAAa;AAE/C,OAAK,cAAc,aAAa,GAAI;AACpC,OAAK,UAAU,aAAa,GAAI;AAEhC,MAAI,CAAC,KAAK,QAAQ,SAAS,KACzB,MAAK,OAAO,SAAS;AACvB,MAAI,CAAC,KAAK,UAAU,SAAS,OAC3B,MAAK,SAAS,SAAS;AACzB,MAAI,CAAC,KAAK,aAAa,SAAS,UAC9B,MAAK,YAAY,SAAS;;AAG9B,MAAK,OAAO,aAAa;AACzB,eAAc,UAAU,cAAc,KAAK,CAAC;;;;;AAM9C,SAAgB,WAAW,OAAiC;CAC1D,MAAM,SAAoC,EAAE;AAC5C,MAAK,MAAM,QAAQ,MACjB,MAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,OAAO,EAAE;EACtD,MAAM,WAAW,OAAO;AACxB,MAAI,CAAC,YAAa,KAAK,aAAa,CAAC,SAAS,YAAY,KAAK,WAAW,SAAS,UACjF,QAAO,QAAQ;;AAGrB,QAAO,EAAE,QAAQ,QAAQ;;;;;;AAO3B,SAAgB,oBAAoB,YAAwB,MAAsB;AAChF,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,KAAK,KAAK,mBAAmB;AAC9C,MAAI,CAAC,WAAW,SAAS,CACvB;EACF,MAAM,WAAW,SAAS,IAAI;AAC9B,MAAI,CAAC,SACH;AAGF,gBAAc,UAAU,cADT,WAAW,CAAC,UAAU,WAAW,CAAC,CACJ,CAAC;;;AAIlD,SAAgB,gBAAgB,WAAmB,WAAyB;CAC1E,MAAM,WAAW,KAAK,WAAW,mBAAmB;CACpD,MAAM,OAAO,SAAS,UAAU;AAChC,KAAI,CAAC,KACH;AAEF,QAAO,KAAK,OAAO;AAEnB,KAAI,OAAO,KAAK,KAAK,OAAO,CAAC,WAAW,GAAG;AACzC,aAAW,SAAS;AACpB;;AAGF,eAAc,UAAU,cAAc,KAAK,CAAC;;;;ACtJ9C,UAAiB,cAAc,OAA6B,EAAE,EAAyB;CACrF,MAAM,EAAE,QAAQ,OAAO,MAAM,QAAQ,KAAK,KAAK;CAC/C,MAAM,aAAa,KAAK,UAAW,OAAO,KAAKA,QAAO;CAGtD,MAAM,YAAY,mBAAmB,IAAI;CACzC,IAAI,eAAe;AAEnB,KAAI,cAAc,UAAU,WAAW,UAAU,QAAQ;AACvD,iBAAe;EACf,MAAM,OAAO,SAAS,UAAU;EAChC,MAAM,UAAU,YAAY,UAAU,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;EAElG,MAAM,aAAa,WAAW,MAAO,OAAO,KAAKA,QAAO,CAAiB;AACzE,OAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,MAAM,KAAK,WAAW,KAAK;AACjC,OAAI,MAAM,OAAO,MACf,OAAM;IAAE;IAAM;IAAK,OAAO;IAAY,MAAM,KAAK,OAAO;IAAO,OAAO;IAAS;QAE5E;IACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,QAAI,MAAM,cAAc,SACtB,OAAM;KAAE;KAAM;KAAK,OAAO;KAAY;KAAM,OAAO;KAAS;;;;AAMpE,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,QAAQA,QAAO;AAGrB,MAAI,CAAC,iBAAiB,UAAU,WAAW,UAAU,QAAQ;GAC3D,MAAM,WAAW,KAAK,KAAK,MAAM,UAAU;AAC3C,OAAI,WAAW,SAAS,EAAE;IACxB,MAAM,OAAO,SAAS,SAAS;IAC/B,MAAM,UAAU,YAAY,SAAS,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;AACjG,SAAK,MAAM,QAAQ,SAAS;KAC1B,MAAM,MAAM,KAAK,UAAU,KAAK;AAEhC,SAAI,MAAM,OAAO,MACf,OAAM;MAAE;MAAM;MAAK,OAAO;MAAW,MAAM,KAAK,OAAO;MAAO,OAAO;MAAS;UAE3E;MACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,UAAI,MAAM,cAAc,SACtB,OAAM;OAAE;OAAM;OAAK,OAAO;OAAW;OAAM,OAAO;OAAS;;;;;AAQrE,OAAK,UAAU,YAAY,UAAU,UAAU,MAAM,iBAAiB;GACpE,MAAM,YAAY,MAAM;AACxB,OAAI,WAAW,UAAU,EAAE;IACzB,MAAM,OAAO,SAAS,UAAU;IAChC,MAAM,UAAU,YAAY,UAAU,CAAC,QAAO,MAAK,CAAC,EAAE,WAAW,IAAI,IAAI,MAAM,mBAAmB;AAClG,SAAK,MAAM,QAAQ,SAAS;KAC1B,MAAM,MAAM,KAAK,WAAW,KAAK;AAEjC,SAAI,MAAM,OAAO,MACf,OAAM;MAAE;MAAM;MAAK,OAAO;MAAW,MAAM,KAAK,OAAO;MAAO,OAAO;MAAU;UAE5E;MACH,MAAM,OAAO,sBAAsB,KAAK,KAAK,WAAW,YAAY,CAAC;AACrE,UAAI,MAAM,cAAc,SACtB,OAAM;OAAE;OAAM;OAAK,OAAO;OAAW;OAAM,OAAO;OAAU;;;;;;;AAS1E,SAAgB,WAAW,OAAmB,YAA6B;AACzE,KAAI,CAAC,MAAM,MAAM,QACf,QAAO;CAET,MAAM,WAAW,WAAW,QAAQ,cAAc,GAAG;AAGrD,KAAI,CAAC,YAAY,SAAS,CACxB,QAAO;AAET,QAAO,SAAS,UAAU,MAAM,KAAK,QAAQ;;AAG/C,eAAsB,gBAAgB,MAAc,QAAQ,KAAK,EAAyB;CACxF,MAAM,SAAS,CAAC,GAAG,cAAc;EAAE,OAAO;EAAS;EAAK,CAAC,CAAC;CAG1D,MAAM,YAAY,MAAM,sBAAsB,IAAI,CAAC,YAAY,EAAE,CAAC;CAClE,MAAM,OAAO,IAAI,IAAI,UAAU,KAAI,MAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CAG7D,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;CAIzD,MAAM,iCAAiB,IAAI,KAAyB;AACpD,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,MAAM,YACV,gBAAe,IAAI,EAAE,KAAK,aAAa,EAAE;AAC3C,OAAK,MAAM,OAAO,cAAc,EAAE,MAAM,SAAS,CAC/C,gBAAe,IAAI,IAAI,MAAM,EAAE;;CAGnC,MAAM,UAAoB,EAAE;CAC5B,MAAM,WAAyB,EAAE;CACjC,MAAM,SAAuB,EAAE;CAC/B,MAAM,oCAAoB,IAAI,KAAa;AAE3C,MAAK,MAAM,CAAC,SAAS,YAAY,MAAM;EAErC,MAAM,iBAAiB,QAAQ,QAAQ,MAAM,GAAG,CAAC,QAAQ,OAAO,IAAI;EACpE,MAAM,QAAQ,YAAY,IAAI,GAAG,eAAe,SAAS,IAAI,YAAY,IAAI,eAAe,IAAI,YAAY,IAAI,QAAQ,IAAI,eAAe,IAAI,QAAQ;AAEvJ,MAAI,CAAC,MACH,SAAQ,KAAK,QAAQ;OAElB;AACH,qBAAkB,IAAI,MAAM,KAAK;AACjC,OAAI,WAAW,OAAO,QAAQ,CAC5B,UAAS,KAAK;IAAE,GAAG;IAAO,aAAa;IAAS,eAAe;IAAS,CAAC;OAGzE,QAAO,KAAK;IAAE,GAAG;IAAO,aAAa;IAAS,eAAe;IAAS,CAAC;;;AAQ7E,QAAO;EAAE;EAAQ;EAAM;EAAS;EAAU;EAAQ,WAFhC,OAAO,QAAO,MAAK,CAAC,kBAAkB,IAAI,EAAE,KAAK,CAAA;EAEN;;AAG/D,SAAgB,aAAa,OAAkB,OAA2B,MAAc,QAAQ,KAAK,EAAU;CAC7G,MAAM,cAAcA,QAAO;AAC3B,KAAI,UAAU,UAAU;AACtB,MAAI,CAAC,YAAY,gBACf,OAAM,IAAI,MAAM,SAAS,MAAM,iCAAiC;AAElE,SAAO,YAAY;;AAErB,QAAO,mBAAmB,IAAI,IAAI,KAAK,KAAK,YAAY,UAAU"}

package/dist/_chunks/sources.mjs

@@ -1,9 +1,10 @@
 import { o as getCacheDir } from "./config.mjs";
+import { t as yamlEscape } from "./yaml.mjs";
 import { i as parseFrontmatter, n as extractLinks, r as extractTitle, t as extractDescription } from "./markdown.mjs";
-import { c as getDocOverride, o as getBlogPreset, r as mapInsert, s as getCrawlUrl } from "./shared.mjs";
+import { c as getCrawlUrl, l as getDocOverride, r as mapInsert, s as getBlogPreset } from "./shared.mjs";
 import { tmpdir } from "node:os";
 import { basename, dirname, join, resolve } from "pathe";
-import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, unlinkSync } from "node:fs";
+import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, rmSync } from "node:fs";
 import { htmlToMarkdown } from "mdream";
 import { spawnSync } from "node:child_process";
 import { ofetch } from "ofetch";
@@ -30,10 +31,39 @@ const isoDate = (iso) => iso.split("T")[0];
 /** Build YAML frontmatter from a key-value object, auto-quoting strings with special chars */
 function buildFrontmatter(fields) {
 	const lines = ["---"];
-	for (const [k, v] of Object.entries(fields)) if (v !== void 0) lines.push(`${k}: ${typeof v === "string" && /[:"[\]]/.test(v) ? `"${v.replace(/"/g, "\\\"")}"` : v}`);
+	for (const [k, v] of Object.entries(fields)) if (v !== void 0) lines.push(`${k}: ${typeof v === "string" ? yamlEscape(v) : v}`);
 	lines.push("---");
 	return lines.join("\n");
 }
+/** Check if body contains a code block */
+function hasCodeBlock(text) {
+	return /```[\s\S]*?```/.test(text) || /`[^`]+`/.test(text);
+}
+/** Noise patterns in comments — filter these out */
+const COMMENT_NOISE_RE = /^(?:\+1|👍|same here|any update|bump|following|is there any progress|when will this|me too|i have the same|same issue|thanks|thank you)[\s!?.]*$/i;
+/**
+* Smart body truncation — preserves code blocks and error messages.
+* Instead of slicing at a char limit, finds a safe break point.
+*/
+function truncateBody(body, limit) {
+	if (body.length <= limit) return body;
+	const codeBlockRe = /```[\s\S]*?```/g;
+	let lastSafeEnd = limit;
+	let match;
+	while ((match = codeBlockRe.exec(body)) !== null) {
+		const blockStart = match.index;
+		const blockEnd = blockStart + match[0].length;
+		if (blockStart < limit && blockEnd > limit) {
+			if (blockEnd <= limit + 500) lastSafeEnd = blockEnd;
+			else lastSafeEnd = blockStart;
+			break;
+		}
+	}
+	const slice = body.slice(0, lastSafeEnd);
+	const lastParagraph = slice.lastIndexOf("\n\n");
+	if (lastParagraph > lastSafeEnd * .6) return `${slice.slice(0, lastParagraph)}\n\n...`;
+	return `${slice}...`;
+}
 let _ghToken;
 /**
 * Get GitHub auth token from gh CLI (cached).
@@ -767,10 +797,6 @@ function isNoiseIssue(issue) {
 	if (issue.title.startsWith("☂️") || issue.title.startsWith("[META]") || issue.title.startsWith("[Tracking]")) return true;
 	return false;
 }
-/** Check if body contains a code block */
-function hasCodeBlock$1(text) {
-	return /```[\s\S]*?```/.test(text) || /`[^`]+`/.test(text);
-}
 /**
 * Detect non-technical issues: fan mail, showcases, sentiment.
 * Short body + no code + high reactions = likely non-technical.
@@ -778,8 +804,8 @@ function hasCodeBlock$1(text) {
 */
 function isNonTechnical(issue) {
 	const body = (issue.body || "").trim();
-	if (body.length < 200 && !hasCodeBlock$1(body) && issue.reactions > 50) return true;
-	if (/\b(?:love|thank|awesome|great work)\b/i.test(issue.title) && !hasCodeBlock$1(body)) return true;
+	if (body.length < 200 && !hasCodeBlock(body) && issue.reactions > 50) return true;
+	if (/\b(?:love|thank|awesome|great work)\b/i.test(issue.title) && !hasCodeBlock(body)) return true;
 	return false;
 }
 /**
@@ -836,29 +862,6 @@ function bodyLimit(reactions) {
 	return 800;
 }
 /**
-* Smart body truncation — preserves code blocks and error messages.
-* Instead of slicing at a char limit, finds a safe break point.
-*/
-function truncateBody$1(body, limit) {
-	if (body.length <= limit) return body;
-	const codeBlockRe = /```[\s\S]*?```/g;
-	let lastSafeEnd = limit;
-	let match;
-	while ((match = codeBlockRe.exec(body)) !== null) {
-		const blockStart = match.index;
-		const blockEnd = blockStart + match[0].length;
-		if (blockStart < limit && blockEnd > limit) {
-			if (blockEnd <= limit + 500) lastSafeEnd = blockEnd;
-			else lastSafeEnd = blockStart;
-			break;
-		}
-	}
-	const slice = body.slice(0, lastSafeEnd);
-	const lastParagraph = slice.lastIndexOf("\n\n");
-	if (lastParagraph > lastSafeEnd * .6) return `${slice.slice(0, lastParagraph)}\n\n...`;
-	return `${slice}...`;
-}
-/**
 * Fetch issues for a state using GitHub Search API sorted by reactions
 */
 function fetchIssuesByState(owner, repo, state, count, releasedAt, fromDate) {
@@ -905,8 +908,6 @@ function oneYearAgo() {
 	d.setFullYear(d.getFullYear() - 1);
 	return isoDate(d.toISOString());
 }
-/** Noise patterns in comments — filter these out */
-const COMMENT_NOISE_RE$1 = /^(?:\+1|👍|same here|any update|bump|following|is there any progress|when will this|me too|i have the same|same issue)[\s!?.]*$/i;
 /**
 * Batch-fetch top comments for issues via GraphQL.
 * Enriches the top N highest-score issues with their best comments.
@@ -938,7 +939,7 @@ function enrichWithComments(owner, repo, issues, topN = 15) {
 			const nodes = repo_[`i${i}`]?.comments?.nodes;
 			if (!Array.isArray(nodes)) continue;
 			const issue = worth[i];
-			const comments = nodes.filter((c) => c.author && !BOT_USERS.has(c.author.login)).filter((c) => !COMMENT_NOISE_RE$1.test((c.body || "").trim())).map((c) => {
+			const comments = nodes.filter((c) => c.author && !BOT_USERS.has(c.author.login)).filter((c) => !COMMENT_NOISE_RE.test((c.body || "").trim())).map((c) => {
 				const isMaintainer = [
 					"OWNER",
 					"MEMBER",
@@ -946,7 +947,7 @@ function enrichWithComments(owner, repo, issues, topN = 15) {
 				].includes(c.authorAssociation);
 				const body = c.body || "";
 				const reactions = c.reactions?.totalCount || 0;
-				const _score = (isMaintainer ? 3 : 1) * (hasCodeBlock$1(body) ? 2 : 1) * (1 + reactions);
+				const _score = (isMaintainer ? 3 : 1) * (hasCodeBlock(body) ? 2 : 1) * (1 + reactions);
 				return {
 					body,
 					author: c.author.login,
@@ -1017,7 +1018,7 @@ function formatIssueAsMarkdown(issue) {
 		`# ${issue.title}`
 	];
 	if (issue.body) {
-		const body = truncateBody$1(issue.body, limit);
+		const body = truncateBody(issue.body, limit);
 		lines.push("", body);
 	}
 	if (issue.topComments.length > 0) {
@@ -1025,7 +1026,7 @@ function formatIssueAsMarkdown(issue) {
 		for (const c of issue.topComments) {
 			const reactions = c.reactions > 0 ? ` (+${c.reactions})` : "";
 			const maintainer = c.isMaintainer ? " [maintainer]" : "";
-			const commentBody = truncateBody$1(c.body, 600);
+			const commentBody = truncateBody(c.body, 600);
 			lines.push("", `**@${c.author}**${maintainer}${reactions}:`, "", commentBody);
 		}
 	}
@@ -1098,35 +1099,6 @@ const LOW_VALUE_CATEGORIES = new Set([
 	"ideas",
 	"polls"
 ]);
-/** Noise patterns in comments — filter these out */
-const COMMENT_NOISE_RE = /^(?:\+1|👍|same here|any update|bump|following|is there any progress|when will this|me too|i have the same|same issue|thanks|thank you)[\s!?.]*$/i;
-/** Check if body contains a code block */
-function hasCodeBlock(text) {
-	return /```[\s\S]*?```/.test(text) || /`[^`]+`/.test(text);
-}
-/**
-* Smart body truncation — preserves code blocks and error messages.
-* Instead of slicing at a char limit, finds a safe break point.
-*/
-function truncateBody(body, limit) {
-	if (body.length <= limit) return body;
-	const codeBlockRe = /```[\s\S]*?```/g;
-	let lastSafeEnd = limit;
-	let match;
-	while ((match = codeBlockRe.exec(body)) !== null) {
-		const blockStart = match.index;
-		const blockEnd = blockStart + match[0].length;
-		if (blockStart < limit && blockEnd > limit) {
-			if (blockEnd <= limit + 500) lastSafeEnd = blockEnd;
-			else lastSafeEnd = blockStart;
-			break;
-		}
-	}
-	const slice = body.slice(0, lastSafeEnd);
-	const lastParagraph = slice.lastIndexOf("\n\n");
-	if (lastParagraph > lastSafeEnd * .6) return `${slice.slice(0, lastParagraph)}\n\n...`;
-	return `${slice}...`;
-}
 /** Off-topic or spam title patterns — instant reject */
 const TITLE_NOISE_RE = /looking .*(?:developer|engineer|freelanc)|hiring|job post|guide me to (?:complete|finish|build)|help me (?:complete|finish|build)|seeking .* tutorial|recommend.* course/i;
 /** Minimum score for a discussion to be included */
@@ -1716,10 +1688,9 @@ function isSafeUrl(url) {
 		const parsed = new URL(url);
 		if (parsed.protocol !== "https:") return false;
 		const host = parsed.hostname;
-		if (host === "localhost" || host === "127.0.0.1" || host === "::1") return false;
-		if (host === "169.254.169.254") return false;
-		if (/^(?:10\.|172\.(?:1[6-9]|2\d|3[01])\.|192\.168\.)/.test(host)) return false;
-		if (host.startsWith("[")) return false;
+		if (host === "localhost" || host === "0.0.0.0" || host === "[::1]") return false;
+		if (/^(?:127\.|10\.|172\.(?:1[6-9]|2\d|3[01])\.|192\.168\.|169\.254\.)/.test(host)) return false;
+		if (/^\[(?:f[cd]|fe[89ab]|::ffff:)/i.test(host)) return false;
 		return true;
 	} catch {
 		return false;
@@ -1731,8 +1702,8 @@ async function downloadLlmsDocs(llmsContent, baseUrl, onProgress) {
 	return (await Promise.all(llmsContent.links.map((link) => limit(async () => {
 		const url = link.url.startsWith("http") ? link.url : `${baseUrl.replace(/\/$/, "")}${link.url.startsWith("/") ? "" : "/"}${link.url}`;
 		if (!isSafeUrl(url)) return null;
-		onProgress?.(link.url, completed++, llmsContent.links.length);
 		const content = await fetchText(url);
+		onProgress?.(link.url, ++completed, llmsContent.links.length);
 		if (content && content.length > 100) return {
 			url: link.url.startsWith("http") ? new URL(link.url).pathname : link.url,
 			title: link.title,
@@ -2298,7 +2269,7 @@ async function fetchNpmPackage(packageName) {
 */
 async function fetchNpmRegistryMeta(packageName, version) {
 	const { name: barePackageName } = parsePackageSpec(packageName);
-	const data = await $fetch(`https://registry.npmjs.org/${barePackageName}`).catch(() => null);
+	const data = await $fetch(`https://registry.npmjs.org/${barePackageName}`, { headers: { Accept: "application/vnd.npm.install-v1+json" } }).catch(() => null);
 	if (!data) return {};
 	const distTags = data["dist-tags"] ? Object.fromEntries(Object.entries(data["dist-tags"]).map(([tag, ver]) => [tag, {
 		version: ver,
@@ -2545,7 +2516,7 @@ function parseVersionSpecifier(name, version, cwd) {
 	};
 	if (/^[\^~>=<\d]/.test(version)) return {
 		name,
-		version: version.replace(/^[\^~>=<]/, "")
+		version: version.replace(/^[\^~>=<]+/, "")
 	};
 	if (version.startsWith("catalog:") || version.startsWith("workspace:")) return {
 		name,
@@ -2567,7 +2538,9 @@ function resolveInstalledVersion(name, cwd) {
 			while (dir && basename(dir) !== "node_modules") {
 				const pkgPath = join(dir, "package.json");
 				if (existsSync(pkgPath)) return JSON.parse(readFileSync(pkgPath, "utf-8")).version || null;
-				dir = dirname(dir);
+				const parent = dirname(dir);
+				if (parent === dir) break;
+				dir = parent;
 			}
 		} catch {}
 		return null;
@@ -2661,50 +2634,67 @@ async function fetchPkgDist(name, version) {
 	mkdirSync(pkgDir, { recursive: true });
 	const tmpTarball = join(cacheDir, "_pkg.tgz");
 	const fileStream = createWriteStream(tmpTarball);
+	const fileClosed = new Promise((resolve) => fileStream.once("close", resolve));
 	const reader = tarballRes.body.getReader();
-	await new Promise((res, reject) => {
-		const writable = new Writable({ write(chunk, _encoding, callback) {
-			fileStream.write(chunk, callback);
-		} });
-		writable.on("finish", () => {
-			fileStream.end();
-			res();
+	try {
+		await new Promise((res, reject) => {
+			const writable = new Writable({ write(chunk, _encoding, callback) {
+				fileStream.write(chunk, callback);
+			} });
+			writable.on("finish", () => {
+				fileStream.end();
+			});
+			fileStream.on("close", () => res());
+			writable.on("error", reject);
+			fileStream.on("error", reject);
+			function pump() {
+				reader.read().then(({ done, value }) => {
+					if (done) {
+						writable.end();
+						return;
+					}
+					writable.write(value, () => pump());
+				}).catch(reject);
+			}
+			pump();
 		});
-		writable.on("error", reject);
-		function pump() {
-			reader.read().then(({ done, value }) => {
-				if (done) {
-					writable.end();
-					return;
-				}
-				writable.write(value, () => pump());
-			}).catch(reject);
+		const { status } = spawnSync("tar", [
+			"xzf",
+			tmpTarball,
+			"--strip-components=1",
+			"-C",
+			pkgDir
+		], { stdio: "ignore" });
+		if (status !== 0) {
+			rmSync(pkgDir, {
+				recursive: true,
+				force: true
+			});
+			return null;
 		}
-		pump();
-	});
-	const { status } = spawnSync("tar", [
-		"xzf",
-		tmpTarball,
-		"--strip-components=1",
-		"-C",
-		pkgDir
-	], { stdio: "ignore" });
-	if (status !== 0) {
+		return pkgDir;
+	} catch {
 		rmSync(pkgDir, {
 			recursive: true,
 			force: true
 		});
-		rmSync(tmpTarball, { force: true });
 		return null;
+	} finally {
+		reader.cancel().catch(() => {});
+		fileStream.destroy();
+		await fileClosed;
+		try {
+			rmSync(tmpTarball, { force: true });
+		} catch {}
 	}
-	unlinkSync(tmpTarball);
-	return pkgDir;
 }
 /**
 * Fetch just the latest version string from npm (lightweight)
 */
 async function fetchLatestVersion(packageName) {
-	return (await $fetch(`https://unpkg.com/${packageName}/package.json`).catch(() => null))?.version || null;
+	const data = await $fetch(`https://unpkg.com/${packageName}/package.json`).catch(() => null);
+	if (data?.version) return data.version;
+	return (await $fetch(`https://registry.npmjs.org/${packageName}`, { headers: { Accept: "application/vnd.npm.install-v1+json" } }).catch(() => null))?.["dist-tags"]?.latest || null;
 }
 /**
 * Get installed skill version from SKILL.md