manifest

type IndexConfig struct {
	// URLs is a list of custom index.yaml URLs to search.
	URLs []string `yaml:"urls,omitempty"`
	// PublicIndex, when false, suppresses the default public melon index so only
	// the custom URLs are searched. Defaults to true (public index included).
	PublicIndex *bool `yaml:"public_index,omitempty"`
}

type Manifest struct {
	Name         string            `yaml:"name"`
	Version      string            `yaml:"version"`
	Description  string            `yaml:"description,omitempty"`
	Entrypoint   string            `yaml:"entrypoint"`
	Dependencies map[string]string `yaml:"dependencies,omitempty"`
	// Outputs maps target filenames to glob patterns of dep names to include.
	// Example: "CLAUDE.md": "*"  or  ".claude/SKILL.md": "github.com/alice/*"
	Outputs    map[string]string `yaml:"outputs,omitempty"`
	Tags       []string          `yaml:"tags,omitempty"`
	ToolCompat []string          `yaml:"tool_compat,omitempty"`
	// Vendor controls whether melon manages .gitignore for its cache and symlinks.
	// When nil or true, melon never touches .gitignore (default: vendor everything).
	// When false, melon keeps .gitignore in sync across install/add/remove.
	Vendor *bool `yaml:"vendor,omitempty"`
	// Index configures a custom skill registry. When absent, the default public
	// melon index is used.
	Index *IndexConfig `yaml:"index,omitempty"`
	// Policy configures source restrictions. When absent, all sources are permitted.
	Policy *PolicyConfig `yaml:"policy,omitempty"`
}

type PolicyConfig struct {
	// AllowedSources is a list of glob patterns. Only dependency paths matching
	// at least one pattern are permitted by melon add and melon install.
	// When empty or absent, all sources are permitted.
	AllowedSources []string `yaml:"allowed_sources,omitempty"`
}