@agentxm/extension-content 0.49.2 → 0.50.0

package/dist/src/lint/context.d.ts

@@ -16,9 +16,9 @@
 import type * as Effect from "effect/Effect";
 import type { KnowledgeInspection } from "../knowledge/okf.js";
 /**
- * Tagged error surfaced by `SkillFileAccessor` / `PackFileAccessor` when a
- * read fails for reasons other than "file not found" (which is represented
- * by `exists -> false`).
+ * Tagged error surfaced by an `ExtensionFileAccessor` when a read fails for
+ * reasons other than "file not found" (which is represented by
+ * `exists -> false`).
  *
  * This interface fixes the error shape rules can rely on.
  *
@@ -34,50 +34,36 @@ export interface FileAccessError {
     readonly message: string;
 }
 /**
- * Narrow skill-rooted file accessor.
+ * Narrow rooted file accessor shared by every extension type's rule context.
  *
- * Root is the directory containing `SKILL.md`. Paths are posix and relative
- * to the root; implementations MUST reject path-traversal attempts (`..`,
- * absolute paths, symlink escapes) by returning `false` from `exists` or
- * failing `readBytes` with `FileAccessError { reason: "path-escape" }`.
+ * The root is chosen by the caller: the directory containing the type's
+ * manifest (`pack.json`, `hook.json`, ...), or for a skill's `files` the
+ * directory containing `SKILL.md`. Paths are posix and relative to the root;
+ * implementations MUST reject path-traversal attempts (`..`, absolute paths,
+ * symlink escapes) by returning `false` from `exists` or failing `readBytes`
+ * with `FileAccessError { reason: "path-escape" }`.
  *
  * @experimental This API is unstable and may change without notice.
  */
-export interface SkillFileAccessor {
+export interface ExtensionFileAccessor {
     readonly exists: (path: string) => Effect.Effect<boolean>;
     readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
 }
 /**
- * Narrow pack-rooted file accessor.
+ * Context passed to every extension type's rules.
  *
- * Root is the directory containing `pack.json`. Same traversal
- * constraints as `SkillFileAccessor`.
+ * `subject` is the caller-decoded content for the type (for example
+ * {@link PackContent}). `files` is rooted at the directory containing the
+ * type's manifest. `displayRoot` is posix and relative; `""` means the
+ * accessor root is the rendering base. See `./compose-path.ts` for the four
+ * documented cases.
  *
  * @experimental This API is unstable and may change without notice.
  */
-export interface PackFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
-}
-export interface SubagentFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
-}
-export interface McpServerFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
-}
-export interface HookFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
-}
-export interface RuleFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
-}
-export interface KnowledgeFileAccessor {
-    readonly exists: (path: string) => Effect.Effect<boolean>;
-    readonly readBytes: (path: string) => Effect.Effect<Uint8Array, FileAccessError>;
+export interface ManifestRuleContext<S> {
+    readonly subject: S;
+    readonly files: ExtensionFileAccessor;
+    readonly displayRoot: string;
 }
 /**
  * Context passed to `skill/*` rules.
@@ -85,13 +71,9 @@ export interface KnowledgeFileAccessor {
  * `subject` is the caller-decoded skill content (SKILL.md frontmatter +
  * optional skill.json).
  *
- * `displayRoot` is posix and relative; `""` means the accessor root is the
- * rendering base. See `./compose-path.ts` for the four documented cases.
- *
  * @experimental This API is unstable and may change without notice.
  */
-export interface SkillRuleContext<S = SkillContent> {
-    readonly subject: S;
+export interface SkillRuleContext extends ManifestRuleContext<SkillContent> {
     /**
      * Content-root accessor. Rooted at the directory containing `SKILL.md`.
      * For native (registry-installed) skills this is the `src/` sub-directory
@@ -100,7 +82,7 @@ export interface SkillRuleContext<S = SkillContent> {
      * `frontmatter-parseable`, and any future rule evaluating files that
      * render into agent directories) read through this accessor.
      */
-    readonly files: SkillFileAccessor;
+    readonly files: ExtensionFileAccessor;
     /**
      * Package-root accessor. Rooted at the skill's package root —
      * the directory containing `skill.json` for native skills. For non-native
@@ -109,8 +91,7 @@ export interface SkillRuleContext<S = SkillContent> {
      * future rule inspecting files at or above the content root) read through
      * this accessor.
      */
-    readonly packageFiles: SkillFileAccessor;
-    readonly displayRoot: string;
+    readonly packageFiles: ExtensionFileAccessor;
 }
 /**
  * Concrete subject shape passed to `skill/*` rules.
@@ -121,16 +102,12 @@ export interface SkillRuleContext<S = SkillContent> {
  *
  * - `isNative` — whether the caller expects this skill to carry a
  *   `skill.json` manifest. Native (registry-installed) skills set this to
- *   `true`; non-native (managed external) skills set it to `false`. Rules
- *   that depend on `skill.json` (`skill/manifest-present`,
- *   `skill/manifest-schema-valid`, `skill/manifest-keys-recognized`)
- *   early-return `[]` when `isNative === false`, so the same catalog covers
- *   both.
+ *   `true`; non-native (managed external) skills set it to `false`. The
+ *   `skill.json` envelope rules produce no findings when
+ *   `isNative === false`, so the same catalog covers both.
  * - `skillJson` — the already-decoded `skill.json` contents when present
  *   (caller decodes once, rules don't re-read + re-parse). `undefined` when
- *   the file is absent. Schema-valid rules pipe this into
- *   `Schema.decodeUnknownResult(SkillManifestSchema)`; keys-recognized
- *   enumerates top-level keys after narrowing to `Record<string, unknown>`.
+ *   the file is absent.
  *
  * Workspace consumers build `SkillContent` via `buildSkillRuleContexts`
  * against the lint workspace view; publish builds one `SkillContent` per
@@ -145,91 +122,38 @@ export interface SkillContent {
     /** Agent-facing skill directory name used for the standard name-match check. */
     readonly expectedName?: string;
 }
-/**
- * Context passed to `pack/*` rules.
- *
- * `subject` is the caller-decoded pack content — concrete `PackContent` shape
- * defined below. Packs are registry-only at v1 (no non-native arm), so the
- * subject carries only the already-decoded manifest and rules read
- * `pack.json` bytes through `context.files` as needed.
- *
- * @experimental This API is unstable and may change without notice.
- */
-export interface PackRuleContext<S = PackContent> {
-    readonly subject: S;
-    readonly files: PackFileAccessor;
-    readonly displayRoot: string;
-}
 /**
  * Concrete subject shape passed to `pack/*` rules.
  *
- * Rules read `pack.json` bytes through `context.files` (the
- * authoritative source shared across publish and `axm lint`). The `subject`
- * carries only what rules can't efficiently re-derive from bytes:
- *
- * - `packJson` — the already-decoded `pack.json` contents when
- *   present (caller decodes once, rules don't re-read + re-parse).
- *   `undefined` when the file is absent. Schema-valid rules pipe this into
- *   `Schema.decodeUnknownResult(PackManifestSchema)`;
- *   keys-recognized enumerates top-level keys after narrowing to
- *   `Record<string, unknown>`.
- *
- * Unlike `SkillContent`, there is no `isNative` discriminator — packs are
- * registry-only and every pack context is expected to expose a manifest.
- * The presence rule (`pack/manifest-present`) owns the absence arm.
- *
- * Workspace consumers build `PackContent` via `buildPackRuleContexts`
- * against the lint workspace view; publish builds one `PackContent` per
- * incoming archive.
+ * `packJson` is the already-decoded `pack.json` contents when present
+ * (caller decodes once, rules don't re-read + re-parse), and `undefined`
+ * when the file is absent. Packs are registry-only, so there is no
+ * `isNative` discriminator; `pack/manifest-present` owns the absence arm.
  *
  * @experimental This API is unstable and may change without notice.
  */
 export interface PackContent {
     readonly packJson: unknown;
 }
-export interface SubagentRuleContext<S = SubagentContent> {
-    readonly subject: S;
-    readonly files: SubagentFileAccessor;
-    readonly displayRoot: string;
-}
 export interface SubagentContent {
     readonly subagentJson: unknown;
 }
-export interface McpServerRuleContext<S = McpServerContent> {
-    readonly subject: S;
-    readonly files: McpServerFileAccessor;
-    readonly displayRoot: string;
-}
 export interface McpServerContent {
     readonly mcpServerJson: unknown;
 }
-export interface HookRuleContext<S = HookContent> {
-    readonly subject: S;
-    readonly files: HookFileAccessor;
-    readonly displayRoot: string;
-}
 export interface HookContent {
     readonly hookJson: unknown;
 }
-/**
- * Context passed to `rule/*` rules.
- *
- * The doubled word is unavoidable: `rule` is an extension type and `rule` is
- * also the lint primitive, so the context for the `rule` extension type is a
- * `RuleRuleContext`. Every other name here follows `<Type>RuleContext`.
- */
-export interface RuleRuleContext<S = RuleContent> {
-    readonly subject: S;
-    readonly files: RuleFileAccessor;
-    readonly displayRoot: string;
-}
+/** Subject for the `rule` extension type's `rule/*` lint rules. */
 export interface RuleContent {
     readonly ruleJson: unknown;
 }
-export interface KnowledgeRuleContext<S = KnowledgeContent> {
-    readonly subject: S;
-    readonly files: KnowledgeFileAccessor;
-    readonly displayRoot: string;
+/**
+ * Context passed to `knowledge/*` rules.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface KnowledgeRuleContext extends ManifestRuleContext<KnowledgeContent> {
     /** Absolute package root used once while constructing the cached inspection. */
     readonly packageRoot?: string;
 }

package/dist/src/lint/describe-document.d.ts

@@ -8,7 +8,7 @@
  * `hook.json`, none knew `rule.json` or `knowledge.json`, and the parse-failure
  * copy defaulted to "Manifest" where the others defaulted to "Document".
  *
- * The manifest labels are derived from `MANIFEST_FILENAME_BY_TYPE` and
+ * The manifest labels are derived from `manifestFilenameForType` and
  * `extensionTypeSentenceLabels`, both of which are total over `ExtensionType`,
  * so a new extension type gets a label the moment its row lands in
  * `EXTENSION_TYPE_TABLE`.

package/dist/src/lint/describe-document.js

@@ -8,7 +8,7 @@
  * `hook.json`, none knew `rule.json` or `knowledge.json`, and the parse-failure
  * copy defaulted to "Manifest" where the others defaulted to "Document".
  *
- * The manifest labels are derived from `MANIFEST_FILENAME_BY_TYPE` and
+ * The manifest labels are derived from `manifestFilenameForType` and
  * `extensionTypeSentenceLabels`, both of which are total over `ExtensionType`,
  * so a new extension type gets a label the moment its row lands in
  * `EXTENSION_TYPE_TABLE`.
@@ -16,16 +16,15 @@
  * @experimental This API is unstable and may change without notice.
  * @packageDocumentation
  */
-import { extensionTypeSentenceLabels, extensionTypes, } from "@agentxm/extension-model/unstable/extensions/common";
+import { extensionTypeSentenceLabels, extensionTypes, manifestFilenameForType, } from "@agentxm/extension-model/unstable/extensions/common";
 import { LOCKFILE_NAME, SETTINGS_FILENAME, } from "@agentxm/extension-model/unstable/workspace-files";
-import { MANIFEST_FILENAME_BY_TYPE } from "../packaging/manifest-policy.js";
 /** Label used when a filename matches no known document. */
 export const UNKNOWN_DOCUMENT_LABEL = "Document";
 const capitalizeFirst = (value) => value.length === 0 ? value : `${value.charAt(0).toUpperCase()}${value.slice(1)}`;
 // eslint-disable-next-line no-restricted-syntax -- Immutable lookup over the closed manifest filename vocabulary.
 const documentLabels = new Map([
     ...extensionTypes.map((type) => [
-        MANIFEST_FILENAME_BY_TYPE[type],
+        manifestFilenameForType(type),
         `${capitalizeFirst(extensionTypeSentenceLabels[type])} manifest`,
     ]),
     [SETTINGS_FILENAME, "Workspace settings"],
@@ -46,4 +45,4 @@ const basename = (file) => {
  * @experimental This API is unstable and may change without notice.
  */
 export const describeSchemaDocument = (file) => documentLabels.get(basename(file)) ?? UNKNOWN_DOCUMENT_LABEL;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVzY3JpYmUtZG9jdW1lbnQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbGludC9kZXNjcmliZS1kb2N1bWVudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7Ozs7Ozs7Ozs7Ozs7Ozs7R0FpQkc7QUFFSCxPQUFPLEVBQ0wsMkJBQTJCLEVBQzNCLGNBQWMsR0FDZixNQUFNLHFEQUFxRCxDQUFDO0FBQzdELE9BQU8sRUFDTCxhQUFhLEVBQ2IsaUJBQWlCLEdBQ2xCLE1BQU0sbURBQW1ELENBQUM7QUFDM0QsT0FBTyxFQUFFLHlCQUF5QixFQUFFLE1BQU0saUNBQWlDLENBQUM7QUFFNUUsNERBQTREO0FBQzVELE1BQU0sQ0FBQyxNQUFNLHNCQUFzQixHQUFHLFVBQVUsQ0FBQztBQUVqRCxNQUFNLGVBQWUsR0FBRyxDQUFDLEtBQWEsRUFBVSxFQUFFLENBQ2hELEtBQUssQ0FBQyxNQUFNLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLEdBQUcsS0FBSyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxXQUFXLEVBQUUsR0FBRyxLQUFLLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7QUFFbkYsa0hBQWtIO0FBQ2xILE1BQU0sY0FBYyxHQUFnQyxJQUFJLEdBQUcsQ0FBaUI7SUFDMUUsR0FBRyxjQUFjLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxFQUE2QixFQUFFLENBQUM7UUFDekQseUJBQXlCLENBQUMsSUFBSSxDQUFDO1FBQy9CLEdBQUcsZUFBZSxDQUFDLDJCQUEyQixDQUFDLElBQUksQ0FBQyxDQUFDLFdBQVc7S0FDakUsQ0FBQztJQUNGLENBQUMsaUJBQWlCLEVBQUUsb0JBQW9CLENBQUM7SUFDekMsQ0FBQyxhQUFhLEVBQUUsVUFBVSxDQUFDO0NBQzVCLENBQUMsQ0FBQztBQUVILE1BQU0sUUFBUSxHQUFHLENBQUMsSUFBWSxFQUFVLEVBQUU7SUFDeEMsTUFBTSxVQUFVLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLLEVBQUUsR0FBRyxDQUFDLENBQUM7SUFDNUMsTUFBTSxLQUFLLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUNwQyxPQUFPLEtBQUssQ0FBQyxLQUFLLENBQUMsTUFBTSxHQUFHLENBQUMsQ0FBQyxJQUFJLFVBQVUsQ0FBQztBQUMvQyxDQUFDLENBQUM7QUFFRjs7Ozs7Ozs7R0FRRztBQUNILE1BQU0sQ0FBQyxNQUFNLHNCQUFzQixHQUFHLENBQUMsSUFBWSxFQUFVLEVBQUUsQ0FDN0QsY0FBYyxDQUFDLEdBQUcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUMsSUFBSSxzQkFBc0IsQ0FBQyJ9
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/lint/index.d.ts

@@ -10,7 +10,7 @@
  * @packageDocumentation
  */
 export type { AdvisoryFinding, AdvisoryRule, FindingBase, FindingLocation, LintFinding, LintRule, RuleBase, Severity, } from "./rule.js";
-export type { FileAccessError, HookContent, HookFileAccessor, HookRuleContext, KnowledgeContent, KnowledgeFileAccessor, KnowledgeRuleContext, McpServerContent, McpServerFileAccessor, McpServerRuleContext, PackContent, PackFileAccessor, PackRuleContext, RuleContent, RuleFileAccessor, RuleRuleContext, SkillContent, SkillFileAccessor, SkillRuleContext, SubagentContent, SubagentFileAccessor, SubagentRuleContext, } from "./context.js";
+export type { ExtensionFileAccessor, FileAccessError, HookContent, KnowledgeContent, KnowledgeRuleContext, ManifestRuleContext, McpServerContent, PackContent, RuleContent, SkillContent, SkillRuleContext, SubagentContent, } from "./context.js";
 export { type LintConfig, LintConfigSchema, type LintRuleSeverity, LintRuleSeveritySchema, type LintRulesMap, LintRulesMapSchema, platformCanonicalLintConfig, } from "./config.js";
 export { type LintCatalogGroup, type LintCatalogRuleMetadata, type LintCatalogView, allLintCatalogRuleIds, lintCatalogRuleMetadata, } from "./catalog-metadata.js";
 export { type Evaluated, evaluateContexts } from "./evaluate.js";
@@ -24,12 +24,10 @@ export { mcpServerRules } from "./catalog/mcp-server.js";
 export { hookRules } from "./catalog/hook.js";
 export { ruleRules } from "./catalog/rule.js";
 export { knowledgeDiagnosticRuleDefinitions, knowledgeDiagnosticRules, knowledgeRules, publishKnowledgeRules, } from "./catalog/knowledge.js";
-export { type InstalledSkillInfo, buildSkillRuleContexts, } from "./catalog/skill-accessor/contexts.js";
-export { type VFTNode, makeVftSkillFileAccessor, makeVftSkillFileAccessorScoped, } from "./catalog/skill-accessor/vft.js";
-export { type SkillAccessorPlatform, makePlatformSkillFileAccessor, } from "./catalog/skill-accessor/platform.js";
-export { type InstalledPackInfo, buildPackRuleContexts } from "./catalog/pack-accessor/contexts.js";
-export { type PackVFTNode, makeVftPackFileAccessor } from "./catalog/pack-accessor/vft.js";
-export { type PackAccessorPlatform, makePlatformPackFileAccessor, } from "./catalog/pack-accessor/platform.js";
+export { type InstalledSkillInfo, buildSkillRuleContexts } from "./catalog/skill/contexts.js";
+export { type InstalledPackInfo, buildPackRuleContexts } from "./catalog/pack/contexts.js";
+export { type VFTNode, makeVftFileAccessor } from "./accessor/vft.js";
+export { type FileAccessorPlatform, makePlatformFileAccessor } from "./accessor/platform.js";
 export { type ManifestJsonParseFailure, isManifestJsonParseFailure, makeManifestJsonParseFailure, manifestJsonParseFailureToFinding, } from "./catalog/shared/manifest-json.js";
 export { type ManifestEnvelopeOptions, type ManifestEnvelopeRules, type ManifestEnvelopeSchema, makeManifestEnvelopeRules, orderedEnvelopeRules, } from "./catalog/shared/envelope-rules.js";
 export { schemaDecodeFindings } from "./catalog/shared/schema-rule.js";

package/dist/src/lint/index.js

@@ -22,13 +22,11 @@ export { mcpServerRules } from "./catalog/mcp-server.js";
 export { hookRules } from "./catalog/hook.js";
 export { ruleRules } from "./catalog/rule.js";
 export { knowledgeDiagnosticRuleDefinitions, knowledgeDiagnosticRules, knowledgeRules, publishKnowledgeRules, } from "./catalog/knowledge.js";
-export { buildSkillRuleContexts, } from "./catalog/skill-accessor/contexts.js";
-export { makeVftSkillFileAccessor, makeVftSkillFileAccessorScoped, } from "./catalog/skill-accessor/vft.js";
-export { makePlatformSkillFileAccessor, } from "./catalog/skill-accessor/platform.js";
-export { buildPackRuleContexts } from "./catalog/pack-accessor/contexts.js";
-export { makeVftPackFileAccessor } from "./catalog/pack-accessor/vft.js";
-export { makePlatformPackFileAccessor, } from "./catalog/pack-accessor/platform.js";
+export { buildSkillRuleContexts } from "./catalog/skill/contexts.js";
+export { buildPackRuleContexts } from "./catalog/pack/contexts.js";
+export { makeVftFileAccessor } from "./accessor/vft.js";
+export { makePlatformFileAccessor } from "./accessor/platform.js";
 export { isManifestJsonParseFailure, makeManifestJsonParseFailure, manifestJsonParseFailureToFinding, } from "./catalog/shared/manifest-json.js";
 export { makeManifestEnvelopeRules, orderedEnvelopeRules, } from "./catalog/shared/envelope-rules.js";
 export { schemaDecodeFindings } from "./catalog/shared/schema-rule.js";
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/packaging/archive-guardrails.d.ts

@@ -11,17 +11,28 @@ export declare class ArchiveGuardrailError extends ArchiveGuardrailError_base<{
 export declare const ZIP_LOCAL_SIGNATURE = 67324752;
 export interface ZipEntry {
     readonly fileName: string;
+    /** Creator version; the high byte names the host system that wrote the attributes. */
+    readonly versionMadeBy: number;
+    readonly crc32: number;
     readonly compressedSize: number;
     readonly uncompressedSize: number;
     readonly compressionMethod: number;
     readonly externalAttributes: number;
     readonly localHeaderOffset: number;
+    /** First byte of the entry's stored data, past its verified local header. */
+    readonly localDataOffset: number;
 }
 export interface ArchiveGuardrailLimits {
     readonly maxEntries?: number;
     readonly maxDecompressedBytes?: number;
     readonly maxCompressionRatio?: number;
 }
+/**
+ * Read a single-disk ZIP v1 central directory and verify each entry's local
+ * header against it, so every reader of the returned entries sees the same
+ * names, methods and data ranges. Multi-disk, ZIP64 and encrypted archives are
+ * rejected.
+ */
 export declare const parseZipCentralDirectory: (buf: Uint8Array) => Effect.Effect<readonly ZipEntry[], ArchiveGuardrailError>;
 export declare const defaultReadEntry: (archiveBytes: Uint8Array, entry: ZipEntry) => Effect.Effect<Uint8Array, ArchiveGuardrailError>;
 /**