curator

module

v0.14.0 Latest Latest Go to latest Published: Sep 6, 2026 License: Apache-2.0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/relux-works/curator

Links

Open Source Insights

README ¶

Curator

Curator is an agent environment manager (AEM). The software manages what an AI coding agent receives in a project environment: skill packages, transitive dependencies, executable command shims, MCP server requirements, per-agent delivery adapters, and security verification gates. Declarative configuration produces reproducible installations.

Curator implements the open Curator Specification. The specification defines skill packages, project manifests, installation semantics, and audit registry interactions; sections are cited across this repository as Spec §N.M.

Status

Version v0.1 development is complete: all twelve phases in docs/implementation-plan.md are done. Continuous integration validates schemas and conformance vectors from curator-spec on macOS, Linux, and Windows. Work tracking lives in .task-board/.

Install

Homebrew (macOS, Linux)

brew install relux-works/tap/curator

Installer script (macOS, Linux)

curl -fsSL https://raw.githubusercontent.com/relux-works/curator/main/install.sh | sh

Scoop (Windows)

scoop bucket add relux-works https://github.com/relux-works/scoop-bucket
scoop install curator

Go toolchain

go install github.com/relux-works/curator/cmd/curator@latest

Debian and RPM packages ship with every release alongside SBOMs and cosign signatures. macOS binaries are Developer ID signed (Relux Works, LLC). Run the verification command to check any downloaded artifact:

gh attestation verify <artifact> --owner relux-works

What Curator manages

Curator controls environment dependencies and runtime delivery:

Skill packages: SKILL.md plus context directories, with an implementation-neutral machine manifest (agent-skill.json, schemas 1 through 8) declaring commands, runtime layout, capabilities, and dependencies. The legacy csk-skill.json filename remains readable. See Authoring CLI commands for command declarations, drivers, and worked examples.
Project manifests: Skillfile.json with exact git references; non-committed development substitutions.
Resolution: Transitive dependency closures unified to one commit and one source identity per name, with activation modes.
Installation: Context and runtime separation, install markers with content hashes, a commit-keyed runtime store, command shims, managed per-agent adapters.
Scopes: Project, global, and hybrid (machine-stored, per-project activation).
MCP requirements: Read-only verification of declared MCP servers against agent configuration surfaces.
Security: Source allowlists, declared capability boundaries, zero code execution during install, and an audit registry client (Ed25519 signed records, deny-wins federation, snapshot verification).
Operator credentials: Per-repository SSH selection and scoped HTTPS token sources for external build repositories, matched by canonical source identity and never selectable by a package. Private HTTPS fetches use a manager-owned, host-pinned askpass broker; public HTTPS can remain anonymous. See SSH credentials and HTTPS credentials.

Registry client guarantees

Curator binds persisted rollback and equivocation state to the canonical registry URL, so signing-key rotation never resets the highest accepted snapshot. This durable state lives under the Curator home state/registry directory, outside the disposable cache/registry responses; upgrades migrate legacy state without lowering it, and corruption or write failure is fail-closed. A protected catalog distinguishes first use from deletion of a previously accepted registry state. Record pagination rejects repeated or oversized cursors, more than 10,000 records per artifact query, and responses larger than 16 MiB.

Registry requests use bounded per-attempt and total deadlines. GET requests retry network failures, 429, and 503 at most twice after the first attempt. Publication retries the exact body only with its deterministic Idempotency-Key; other client errors and unsafe requests are never retried. Redirects are rejected so a registry cannot move a request or bearer token to another endpoint.

Commands without profile setup

Shell profile changes are not required. After curator install, agents can invoke project commands through .agents/bin/<command> on Unix and .agents\bin\<command>.cmd on Windows. Global installation publishes non-destructive forwarding shims to a safe user directory already on PATH when one is available; otherwise Curator reports the canonical global bin location. Installed launchers carry the project command directory and resolved system dependency directories themselves, preserve the inherited PATH, and return the child command status.

Run bootstrap and upgrade to set up a repository:

curator bootstrap --if-missing --non-interactive --skills-root "$HOME/src/skills"
curator upgrade .

curator upgrade fetches dependency closures for the selected project. curator upgrade --dry-run plans updates without mutating disk state.

To enable shell integration, cache the optional hook once:

curator shell-init --install

Automatic detection selects zsh or bash from SHELL, preserves Git Bash on Windows, and otherwise selects PowerShell on Windows. The cached hook does not start Curator during later shell launches. Curator never edits a profile automatically. Set CURATOR_AUTO_ENV=0 to retain global activation while disabling project-directory scans.

Execution assurance

Compiled builds default to portable execution mode using an authenticated manager/worker session. Verified execution mode (execution.mode: verified) is an explicit non-fallback selection: because this release ships no platform provider, a missing, unhealthy, incompatible, or drifted provider fails closed rather than falling back to portable execution. Portable, verified, legacy assurance-blind, cross-provider, and capability-drifted cache entries occupy disjoint cache key identities, and every adopted or published artifact carries the exact build-session receipt used at dispatch. Language source-closure adapters (Rust, SwiftPM, npm, pnpm, Yarn Classic, and Modern Yarn) bind ecosystem toolchains and resolve immutable source snapshots. See docs/authoring-language-adapters.md for adapter authoring contracts and docs/source-closure-adapter-conformance.md for cross-adapter conformance.

Compiled-command status, diagnostics, and repair

curator status reports read-only diagnostics for project closures, reporting one status code per declared skill and one diagnostic line per active compiled command. The command accepts --check to fail on non-current states and --json for machine-readable output.

Supported currentness codes include up-to-date, current, not-installed, needs-install, content-drift, unresolvable, invalid-marker, unsupported-marker, build-command-drift, build-context-exposed, build-source-drift, build-input-drift, unsupported-build-driver, unusable-build-toolchain, missing-build-artifact, corrupt-build-receipt, build-artifact-drift, corrupt-build-cache, untrusted-build-cache, unsupported-build-platform, build-state-changed, and unknown-build-state. Cause subcodes for build-input-drift are build-root, target, and unattributed.

Run curator install or curator upgrade to reconcile drifted or missing build state. See docs/compiled-commands.md for status codes, cause subcodes, logical cache key derivation, and repair semantics. For troubleshooting procedures, see docs/troubleshooting.md.

Maintenance and the build-cache grace period

curator gc executes maintenance to sweep unreferenced runtime store entries and compiled build cache artifacts. Garbage collection acquires an exclusive lock on the manager home directory and enforces a 24-hour grace period for unreferenced cache items. See docs/compiled-commands.md for maintenance locking and garbage collection criteria.

Commands

See docs/cli.md for the complete CLI reference, command options, and flags.

Project lifecycle

curator bootstrap  # create machine configuration and default directories
curator init       # initialize Skillfile.json and managed gitignore entries
curator add        # add or replace a skill declaration and install
curator remove     # remove a skill declaration from the project
curator install    # apply Skillfile.json and materialize dependencies
curator update     # fetch source repositories under skills_root
curator upgrade    # fetch dependency closure and install updated packages
curator status     # report manifest, installed, and compiled command states
curator list       # list configured projects and declared skills

Project subcommands

curator project add      # register a project alias and path in the machine configuration
curator project resolve  # resolve transitive dependencies for a project closure

Skill package validation

curator skill check  # validate a skill package directory against schemas

Global scope

curator global init     # initialize global machine-wide configuration
curator global add      # add a global skill declaration
curator global remove   # remove a global skill declaration
curator global list     # list installed global skills
curator global status   # check global scope installation status
curator global install  # materialize global skills into machine storage
curator global update   # update global source repositories
curator global upgrade  # upgrade global skill packages

Environment profiles (agent-environments, stage a)

curator profile install <git-url|path> [--range|--tag|--revision] [--as <name>] [--use]
curator profile list    # installed profiles with locks and current markers
curator profile use <name> [--env <env-id>]  # linked switch with backups and marker
curator profile update [<name>|--all]  # re-resolve; blocking findings keep the old lock
curator profile remove <name> [--purge]  # refuse while current in any scope
curator profile sync    # re-materialize current profiles across adapters

Hybrid scope

curator hybrid add     # add a machine-stored hybrid skill declaration
curator hybrid remove  # remove a hybrid skill declaration
curator hybrid list    # list stored hybrid skills and activation targets
curator hybrid status  # check hybrid declaration status across projects

Audit and security

curator audit  # run security audit, pin trust, or publish audit records

Maintenance and shell integration

curator gc          # sweep unreferenced runtime store entries and build cache
curator shell-init  # print or install shell integration hooks
curator ui          # open interactive terminal status dashboard

Operator configuration

curator config show         # display active configuration parameters
curator config build-ssh    # configure SSH credentials for external build repos
curator config build-https  # configure HTTPS credentials for external build repos

An open protocol

Curator conforms to an open specification. Independent implementations include cocoaskills. The registry protocol is implemented by Curator Skill Registry.

Development

Curator uses an in-repository task board in .task-board/. Automated gates run under .github/ci/ and mirror Makefile targets; see docs/ci-gates.md for gate definitions, evidence paths, platform carve-out rules, and suite consumption requirements.

Contributing

See CONTRIBUTING.md for working agreements: board-first workflow, discrete signed commits, and spec-first rules.

License

Apache License 2.0. See LICENSE and NOTICE.

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
cmd
curator command Command curator is the agent environment manager CLI (Spec §15).	Command curator is the agent environment manager CLI (Spec §15).
curator-spec-pin command Command curator-spec-pin verifies Curator's immutable curator-spec release.	Command curator-spec-pin verifies Curator's immutable curator-spec release.
internal
adapters Package adapters mirrors installed context into the directories each agent reads, with a managed-entries ledger per adapter root (Spec §10).	Package adapters mirrors installed context into the directories each agent reads, with a managed-entries ledger per adapter root (Spec §10).
artifactpolicy Package artifactpolicy implements Curator's adapter-independent, fail-closed artifact admission policy.	Package artifactpolicy implements Curator's adapter-independent, fail-closed artifact admission policy.
artifactpolicy/conformance Package conformance publishes deterministic, reusable artifact-policy byte vectors.	Package conformance publishes deterministic, reusable artifact-policy byte vectors.
audit Package audit implements the machine-local audit gate (Spec §12): the decision semantics, local revocations, operator pins, a blocking canary, a small deterministic detector set, and a verdict cache.	Package audit implements the machine-local audit gate (Spec §12): the decision semantics, local revocations, operator pins, a blocking canary, a small deterministic detector set, and a verdict cache.
buildcache Package buildcache stores immutable, manager-protected go-v1 build outputs.	Package buildcache stores immutable, manager-protected go-v1 build outputs.
buildmeta Package buildmeta defines the portable logical go-v1 build input and strict receipt metadata.	Package buildmeta defines the portable logical go-v1 build input and strict receipt metadata.
buildrepo Package buildrepo owns the schema-7 external repository wire models.	Package buildrepo owns the schema-7 external repository wire models.
buildsource Package buildsource validates and identifies immutable raw skill snapshots.	Package buildsource validates and identifies immutable raw skill snapshots.
capabilities Package capabilities parses the capability declaration of Spec §5.5.	Package capabilities parses the capability declaration of Spec §5.5.
closure Package closure resolves the transitive dependency closure of a project manifest (Spec §8.3, §8.4).	Package closure resolves the transitive dependency closure of a project manifest (Spec §8.3, §8.4).
closureexec Package closureexec owns immutable intake, authorized pre-C5 derivation, protected offline execution evidence, and multi-output publication.	Package closureexec owns immutable intake, authorized pre-C5 derivation, protected offline execution evidence, and multi-output publication.
closuregraph Package closuregraph defines Curator's language-neutral source-closure graph, selection overlay, deterministic build projection, and checkpoint evidence records.	Package closuregraph defines Curator's language-neutral source-closure graph, selection overlay, deterministic build projection, and checkpoint evidence records.
config Package config loads the machine configuration (Spec §7.1) and applies the enforced system configuration with locked keys (Spec §7.2).	Package config loads the machine configuration (Spec §7.1) and applies the enforced system configuration with locked keys (Spec §7.2).
contextaudit Package contextaudit implements the two audit classes environments §9.1 adds for context and MCP snapshots: the unpinnable, always-blocking context-secret-material detector with its scoped waivers, and the always-warn context-system-module-present surfacing class.	Package contextaudit implements the two audit classes environments §9.1 adds for context and MCP snapshots: the unpinnable, always-blocking context-secret-material detector with its scoped waivers, and the always-warn context-system-module-present surfacing class.
contextlock Package contextlock is the profile lock of the agent-environments capability, context-lock-v1 (environments §1.3): the strict schema-1 object naming the root and every closure member, its canonical CCJ-1 bytes, and the lock hash that is the profile's effective pin.	Package contextlock is the profile lock of the agent-environments capability, context-lock-v1 (environments §1.3): the strict schema-1 object naming the root and every closure member, its canonical CCJ-1 bytes, and the lock hash that is the profile's effective pin.
contextmaterialize Package contextmaterialize assembles the deterministic root-context bytes of environments §5: the curator-root-context-v2 generation header (§5.1), the emitted order under both precedence primitives (§5, §6), chapter parts, the monolithic form (§5.2), the zero-module case (§5.4), the system-prompt output (§5.5), and the content-hash binding of a surface (§5.6).	Package contextmaterialize assembles the deterministic root-context bytes of environments §5: the curator-root-context-v2 generation header (§5.1), the emitted order under both precedence primitives (§5, §6), chapter parts, the monolithic form (§5.2), the zero-module case (§5.4), the system-prompt output (§5.5), and the content-hash binding of a surface (§5.6).
contextpkg Package contextpkg reads the two package manifests of the agent-environments capability — agent-context.json (environments §2, §3) and agent-mcp.json (environments §2.2) — under the strict reader discipline of core §1, and validates the module files a context package declares.	Package contextpkg reads the two package manifests of the agent-environments capability — agent-context.json (environments §2, §3) and agent-mcp.json (environments §2.2) — under the strict reader discipline of core §1, and validates the module files a context package declares.
contextresolve Package contextresolve implements the joint resolution of environments §1.4: the core §7 closure with its admission rule generalized from exact refs to version constraints, over context packages, skills, and MCP declaration packages together, producing the context-lock-v1 object of environments §1.3 and the effective weights of environments §6.	Package contextresolve implements the joint resolution of environments §1.4: the core §7 closure with its admission rule generalized from exact refs to version constraints, over context packages, skills, and MCP declaration packages together, producing the context-lock-v1 object of environments §1.3 and the effective weights of environments §6.
contextstore Package contextstore keeps the profile store of environments §4: one immutable regular-file tree per closure member below the manager home, keyed by the member's pin — the resolved commit of a git package, the state hash of a path package or the synthesized local root — on the runtime-store pattern, so two profiles whose locks name one member at one pin share its entry.	Package contextstore keeps the profile store of environments §4: one immutable regular-file tree per closure member below the manager home, keyed by the member's pin — the resolved commit of a git package, the state hash of a path package or the synthesized local root — on the runtime-store pattern, so two profiles whose locks name one member at one pin share its entry.
crossconformance Package crossconformance owns Curator's cross-adapter source-closure proof.	Package crossconformance owns Curator's cross-adapter source-closure proof.
devsub Package devsub parses Skillfile.dev.json, the non-committed development substitution manifest (Spec §6.2).	Package devsub parses Skillfile.dev.json, the non-committed development substitution manifest (Spec §6.2).
envfiles Package envfiles generates the PATH helper files of a project or the global scope (Spec §14.2).	Package envfiles generates the PATH helper files of a project or the global scope (Spec §14.2).
envfragment Package envfragment builds and renders the launch-env-fragment-v1 object (environments §10.2): the closed fragment a launcher consumes, with profile.lock_sha256, the precedence object, env, system_prompt, mcp (path, sorted env_names union, channel descriptor), and the reserved path_prepend.	Package envfragment builds and renders the launch-env-fragment-v1 object (environments §10.2): the closed fragment a launcher consumes, with profile.lock_sha256, the precedence object, env, system_prompt, mcp (path, sorted env_names union, channel descriptor), and the reserved path_prepend.
envmarker Package envmarker reads and writes the environment marker of environments §8.2, agent-environment-marker-v1: the per-home ledger of record for environment surfaces (.agent-environment.json).	Package envmarker reads and writes the environment marker of environments §8.2, agent-environment-marker-v1: the per-home ledger of record for environment surfaces (.agent-environment.json).
envprofile Package envprofile manages installed context profiles (environments §9.2, manager profile §12.3): the profile store below the manager home, installation from git and path sources through joint resolution and the always-strict audit, lock publication, and the builtin local default profile that carries the migrated global scope (environments §9.4).	Package envprofile manages installed context profiles (environments §9.2, manager profile §12.3): the profile store below the manager home, installation from git and path sources through joint resolution and the always-strict audit, lock publication, and the builtin local default profile that carries the migrated global scope (environments §9.4).
envregistry Package envregistry is the closed revision-1 environment adapter registry (environments §7).	Package envregistry is the closed revision-1 environment adapter registry (environments §7).
gitcred Package gitcred reads and writes operator credentials through the operator's own Git credential machinery.	Package gitcred reads and writes operator credentials through the operator's own Git credential machinery.
gitignore Package gitignore enforces the managed .gitignore block (Spec §6.3).	Package gitignore enforces the managed .gitignore block (Spec §6.3).
gitops Package gitops shells out to system git for clone, fetch, ref resolution, and snapshot extraction (Spec §8.2).	Package gitops shells out to system git for clone, fetch, ref resolution, and snapshot extraction (Spec §8.2).
globalbins Package globalbins publishes non-destructive forwarding shims for global commands into an existing user PATH directory.	Package globalbins publishes non-destructive forwarding shims for global commands into an existing user PATH directory.
godriver Package godriver implements the closed go-v1 build driver under the portable manager-worker-v1 execution policy of Protocol Core section 4.2.1.	Package godriver implements the closed go-v1 build driver under the portable manager-worker-v1 execution policy of Protocol Core section 4.2.1.
hashing Package hashing computes the deterministic content hash of an installed tree (Spec §8.5).	Package hashing computes the deterministic content hash of an installed tree (Spec §8.5).
identifiers Package identifiers validates the identifier alphabet of Spec §5.2 and the source path rule of Spec §6.1.	Package identifiers validates the identifier alphabet of Spec §5.2 and the source path rule of Spec §6.1.
identity Package identity computes the canonical source identity of git artifacts and matches identities against the machine allowlist (Spec §8.2).	Package identity computes the canonical source identity of git artifacts and matches identities against the machine allowlist (Spec §8.2).
install Package install orchestrates a project installation in the normative phase order of Spec §8.1.	Package install orchestrates a project installation in the normative phase order of Spec §8.1.
install/atomicity Package atomicity holds the cross-scope install commit acceptance suite.	Package atomicity holds the cross-scope install commit acceptance suite.
locale Package locale analyzes and renders skill localization (Spec §4.3).	Package locale analyzes and renders skill localization (Spec §4.3).
managerlock Package managerlock provides cross-process locks for Curator operations.	Package managerlock provides cross-process locks for Curator operations.
manifest Package manifest parses the project manifest Skillfile.json, schema 1 (Spec §6.1), and edits skill declarations in place.	Package manifest parses the project manifest Skillfile.json, schema 1 (Spec §6.1), and edits skill declarations in place.
marker Package marker reads and writes install markers (.csk-install.json) and implements the up-to-date and tamper-detection semantics of Spec §8.5.	Package marker reads and writes install markers (.csk-install.json) and implements the up-to-date and tamper-detection semantics of Spec §8.5.
mcp Package mcp verifies declared MCP server requirements against the configuration surfaces of the target agent environments (Spec §11).	Package mcp verifies declared MCP server requirements against the configuration surfaces of the target agent environments (Spec §11).
moduleroots Package moduleroots implements the schema-8 first-party module roots of Spec §4.2.3.	Package moduleroots implements the schema-8 first-party module roots of Spec §4.2.3.
nodesource Package nodesource implements the manager-independent, pure-source Node and TypeScript graph bridge.	Package nodesource implements the manager-independent, pure-source Node and TypeScript graph bridge.
npmsource Package npmsource implements the closed npm source-closure profile.	Package npmsource implements the closed npm source-closure profile.
pkgversion Package pkgversion implements the strict versions and the closed range grammar of the agent-environments capability (environments §1.4).	Package pkgversion implements the strict versions and the closed range grammar of the agent-environments capability (environments §1.4).
pnpmsource Package pnpmsource implements the pinned, fail-closed pnpm source profile.	Package pnpmsource implements the pinned, fail-closed pnpm source profile.
privatedir Package privatedir creates and validates owner-only private directories in a platform-faithful way.	Package privatedir creates and validates owner-only private directories in a platform-faithful way.
protocoljson Package protocoljson validates the common JSON transport requirements used by portable Curator Protocol objects before a package-specific schema parser decodes them.	Package protocoljson validates the common JSON transport requirements used by portable Curator Protocol objects before a package-specific schema parser decodes them.
registry Package registry implements the audit registry client (Spec §13): canonical bytes, Ed25519 verification against pinned keys, deny-wins federation, snapshot verification with persisted monotonic versions, record caching with TTL and offline grace, and record submission.	Package registry implements the audit registry client (Spec §13): canonical bytes, Ed25519 verification against pinned keys, deny-wins federation, snapshot verification with persisted monotonic versions, record caching with TTL and offline grace, and record submission.
runtimestore Package runtimestore keeps command runtimes once per machine, keyed by skill and commit, and writes command shims (Spec §8.6).	Package runtimestore keeps command runtimes once per machine, keyed by skill and commit, and writes command shims (Spec §8.6).
rustsource Package rustsource implements the fail-closed rust-source-v1 Cargo capture and cargo-vendor-transform-v1 boundary.	Package rustsource implements the fail-closed rust-source-v1 Cargo capture and cargo-vendor-transform-v1 boundary.
scopes Package scopes implements the global and hybrid install scopes, the consumer registry, and runtime garbage collection (Spec §8.7, §9).	Package scopes implements the global and hybrid install scopes, the consumer registry, and runtime garbage collection (Spec §8.7, §9).
scriptpolicy Package scriptpolicy implements the manager side of the schema-8 enforced script execution policy `script-worker-v1` (Spec §4.1.1, manager profile §3.6).	Package scriptpolicy implements the manager side of the schema-8 enforced script execution policy `script-worker-v1` (Spec §4.1.1, manager profile §3.6).
shell Package shell generates and caches the optional shell hooks of Spec §8: finite upward project search, PATH save and restore, and global activation.	Package shell generates and caches the optional shell hooks of Spec §8: finite upward project search, PATH save and restore, and global activation.
skillcheck Package skillcheck validates one skill package without a consuming project (Spec §15, curator skill check).	Package skillcheck validates one skill package without a consuming project (Spec §15, curator skill check).
skillspec Package skillspec parses and validates the portable skill machine manifest, schemas 1 through 8 (Spec §4), including legacy filename and runtime fallbacks.	Package skillspec parses and validates the portable skill machine manifest, schemas 1 through 8 (Spec §4), including legacy filename and runtime fallbacks.
snapshot Package snapshot maintains the commit-keyed immutable snapshot cache under the machine home: cache/<source>/<commit>/snapshot (Spec §8.2).	Package snapshot maintains the commit-keyed immutable snapshot cache under the machine home: cache/<source>/<commit>/snapshot (Spec §8.2).
staging Package staging describes operation-private replacements that the transaction layer publishes atomically.	Package staging describes operation-private replacements that the transaction layer publishes atomically.
swiftpmbuild Package swiftpmbuild implements the swiftpm-source-v1 C5 planning, C6 offline build, and C7 publication boundary.	Package swiftpmbuild implements the swiftpm-source-v1 C5 planning, C6 offline build, and C7 publication boundary.
swiftpminterop Package swiftpminterop implements the swiftpm-source-v1 C-family target, module-map, header, system-library, and interop-boundary validation stage.	Package swiftpminterop implements the swiftpm-source-v1 C-family target, module-map, header, system-library, and interop-boundary validation stage.
swiftpmsource Package swiftpmsource implements the restricted swiftpm-source-v1 source acquisition and graph-closure boundary.	Package swiftpmsource implements the restricted swiftpm-source-v1 source acquisition and graph-closure boundary.
testtoolchain Package testtoolchain coordinates tests that hold a whole-tree fingerprint of the host Go installation with tests that execute tools from that tree.	Package testtoolchain coordinates tests that hold a whole-tree fingerprint of the host Go installation with tests that execute tools from that tree.
transaction Package transaction provides durable, recoverable replacement transactions for manager-owned install targets.	Package transaction provides durable, recoverable replacement transactions for manager-owned install targets.
ui Package ui renders installed state as a terminal view (plan P11).	Package ui renders installed state as a terminal view (plan P11).
verr Package verr defines the validation error type shared by protocol parsers.	Package verr defines the validation error type shared by protocol parsers.
version Package version resolves the Curator build version.	Package version resolves the Curator build version.
whitelist Package whitelist copies the model-facing context of a skill snapshot (Spec §4.2).	Package whitelist copies the model-facing context of a skill snapshot (Spec §4.2).
yarnclassicsource Package yarnclassicsource implements the closed Yarn Classic source-closure profile.	Package yarnclassicsource implements the closed Yarn Classic source-closure profile.
yarnmodernsource Package yarnmodernsource implements the closed modern Yarn source-closure profile.	Package yarnmodernsource implements the closed modern Yarn source-closure profile.