@aisy/core 0.1.0

package/dist/safety/types.d.ts

@@ -0,0 +1,254 @@
+export type Provenance = 'operator' | 'untrusted';
+export interface ContextSpan {
+    text: string;
+    /** Set by Core (01); Safety never sets it. Absent or unparsable → treat as 'untrusted'. */
+    provenance: Provenance;
+    /** e.g. mcp:<server> | url:<host> | file:<path> | voice | telegram */
+    source: string;
+}
+export interface ToolCall {
+    /** Canonical tool name, e.g. 'bash', 'telegram.send', 'mcp:write-file' */
+    tool: string;
+    args: Record<string, unknown>;
+    /** True when any arg value is derived from an untrusted span (taint tracking). */
+    argsTainted?: boolean;
+}
+/** Autonomy tier: property of the action class, never the model's confidence. */
+export type Tier = 0 | 1 | 2 | 3;
+/** Global autonomy level governs whether Tier-2 may auto-run. */
+export type AutonomyLevel = 'Supervised' | 'Delegation' | 'Autopilot';
+export interface AutonomyTier {
+    tier: Tier;
+    /** Glob / regex pattern matching tool names in this tier. */
+    toolPattern: string;
+    description: string;
+}
+/** Human-facing confirmation card rendered for Tier-3 (red card) and Tier-2 asks. */
+export interface ConfirmationCard {
+    tier: Tier;
+    actionSummary: string;
+    /** SHA-256 of the serialized ToolCall. */
+    actionHash: string;
+    nonce: string;
+    issuedAt: number;
+}
+export type Verdict = {
+    decision: 'allow';
+} | {
+    decision: 'deny';
+    rule: string;
+    reason: string;
+} | {
+    decision: 'ask';
+    tier: Tier;
+    card: ConfirmationCard;
+} | {
+    decision: 'modify';
+    rewritten: ToolCall;
+};
+export type HardDenyCategory = 'infra-destruction' | 'filesystem-destruction' | 'db-destruction' | 'history-rewrite' | 'money-op' | 'secret-file-read';
+export interface HardDenyRule {
+    id: string;
+    /** Tested against the *normalized* tool name + serialized args string. */
+    pattern: RegExp | string;
+    category: HardDenyCategory;
+}
+export type InjectionVerdict = 'clean' | 'suspicious' | 'injection';
+export interface InjectionClassifier {
+    /**
+     * Advisory only. Returns 'clean' | 'suspicious' | 'injection'.
+     * Can never downgrade a span from 'untrusted' to 'trusted'.
+     * If unavailable/timeout, caller defaults to quarantine — classifier is not load-bearing.
+     */
+    classify(span: ContextSpan): Promise<InjectionVerdict>;
+}
+export interface InputGuard {
+    /**
+     * Unconditional deterministic transforms — run 100 % of the time before
+     * the model sees untrusted text.  Strips markdown images / auto-loading
+     * resources, neutralizes foreign URLs, defangs known injection patterns.
+     */
+    defang(span: ContextSpan): ContextSpan;
+    /**
+     * Advisory escalation.  Can raise quarantine framing ('suspicious' →
+     * 'injection'), but can never return a span with provenance 'operator'.
+     */
+    classify(span: ContextSpan): Promise<InjectionVerdict>;
+}
+export interface SafetyPolicy {
+    /** Loaded and self-checked; false = cold-start fail-closed mode. */
+    readonly ready: boolean;
+    /** Pre-execution verdict for a resolved tool call given current context. */
+    evaluate(call: ToolCall, ctx: ContextSpan[]): Verdict;
+    /** True when any span in ctx is 'untrusted' → narrowed-capability mode. */
+    isNarrowed(ctx: ContextSpan[]): boolean;
+}
+export type GrantScope = 'session' | 'always';
+/** Persistence for "always" grants only; session grants live in-memory. */
+export interface GrantPersistencePort {
+    loadAlways(): string[];
+    saveAlways(tools: string[]): void;
+}
+export interface GrantStore {
+    /** True if a live session OR persisted always grant covers this tool. */
+    has(tool: string): boolean;
+    /** Record a grant. 'always' is promoted over an existing session grant. */
+    record(tool: string, scope: GrantScope): void;
+    revoke(tool: string): void;
+    revokeAll(): void;
+    list(): {
+        tool: string;
+        scope: GrantScope;
+    }[];
+}
+export interface SafetyClassifier {
+    classify(input: {
+        call: ToolCall;
+        ctx: ContextSpan[];
+    }): Promise<Verdict>;
+}
+export type EgressMode = 'read-only' | 'read-write';
+export interface EgressAllowlistEntry {
+    host: string;
+    methods: string[];
+    mode: EgressMode;
+}
+export interface OutboundRequest {
+    host: string;
+    method: string;
+    path: string;
+    queryString?: string;
+    body?: string | Uint8Array;
+    headers?: Record<string, string>;
+}
+export interface EgressGuard {
+    /**
+     * Data-side scan of an outbound body before it leaves the proxy.
+     * Checks: read-only destination with write/body, size/entropy/secret-pattern,
+     * and free-text in query string while narrowed.
+     */
+    inspectBody(req: OutboundRequest, ctx: ContextSpan[]): {
+        decision: 'allow' | 'deny';
+        reason?: string;
+    };
+}
+export type ApprovalStatus = 'approved' | 'rejected-replay' | 'rejected-stale' | 'rejected-hash-mismatch' | 'rejected-toctou' | 'rejected-second-factor';
+export interface ApprovalRecord {
+    nonce: string;
+    actionHash: string;
+    factId?: string;
+    op: string;
+    tapTimestamp: number;
+    secondFactorOk: boolean;
+    stagedHashAtAccept: string;
+    stagedHashAtPromote: string;
+}
+export interface ApprovalResult {
+    status: ApprovalStatus;
+    record?: ApprovalRecord;
+}
+export interface ApprovalHandler {
+    /**
+     * The ONLY setter of is_human_confirmed / permanence flags.
+     * Binds a human tap (nonce) to a hash-pinned action.
+     */
+    confirm(nonce: string, actionHash: string, secondFactor?: string): ApprovalResult;
+    /** Strip is_human_confirmed and all trust/permanence fields from arbitrary output. */
+    stripTrustFields(output: Record<string, unknown>): Record<string, unknown>;
+}
+export interface SecretRedactor {
+    /** Applied to every sink — logs, audit journal, morning card, model context, outbound bodies. */
+    redact(text: string): string;
+}
+export interface Vault {
+    /** Retrieve a named secret. Throws if not found. */
+    getSecret(name: string): Promise<string>;
+    /** List available secret names (no values). */
+    listSecrets(): Promise<string[]>;
+    /** Register a pattern to be redacted (in addition to built-in shapes). */
+    addRedactionPattern(pattern: RegExp): void;
+    readonly redactor: SecretRedactor;
+}
+export interface MountSpec {
+    hostPath: string;
+    containerPath: string;
+    readOnly: boolean;
+}
+export interface SandboxConfig {
+    image: string;
+    mounts: MountSpec[];
+    /** Absence → default-deny network. When present, per-task egress bridge host:port. */
+    egressBridge?: string;
+    /** True = gVisor (runsc) runtime available; false = degraded mode. */
+    gVisorAvailable: boolean;
+    /** Per-task unique id used to name/track the egress bridge. */
+    taskId: string;
+}
+export interface SandboxRunResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export type SandboxSecurityLevel = 'full' | 'degraded-no-gvisor';
+export interface SandboxRunner {
+    /**
+     * Validate mount spec against the allowlist (no docker.sock, own-worktree-only).
+     * Returns null on success, or an error string.
+     */
+    validateMounts(mounts: MountSpec[]): string | null;
+    /**
+     * Start a task container.  Returns an opaque container id.
+     * Throws if mount validation fails or gVisor absent + high-risk tool requested.
+     */
+    start(config: SandboxConfig): Promise<string>;
+    /** Execute a command inside a running container. */
+    exec(containerId: string, cmd: string, args: readonly string[]): Promise<SandboxRunResult>;
+    /**
+     * Tear down the container and the per-task egress bridge.
+     * Throws (marking the task failed) if teardown cannot be confirmed.
+     */
+    teardown(containerId: string, taskId: string): Promise<void>;
+    /** Security level reported at last probe. */
+    readonly securityLevel: SandboxSecurityLevel;
+}
+export type NightlyOpKind = 'vacuum' | 'fts5-optimize' | 'wal-checkpoint' | 'log-rotation' | 'docker-prune' | 'worktree-prune' | 'git-push-ff';
+export interface NightlyOp {
+    kind: NightlyOpKind;
+    params: Record<string, unknown>;
+}
+export interface NightlyCarveoutEntry {
+    kind: NightlyOpKind;
+    /** Predicate that must return true before the op may run. */
+    precondition(op: NightlyOp): boolean;
+    /** True = the op is reversible via pre-op DB snapshot. */
+    reversibleBySnapshot: boolean;
+}
+export interface NightlyCarveout {
+    /** Returns true if the op is on the allowlist and its precondition holds. */
+    isPermitted(op: NightlyOp): boolean;
+    /** Run the op unattended; throws if not permitted. */
+    run(op: NightlyOp): Promise<{
+        ran: true;
+    } | {
+        ran: false;
+        reason: string;
+    }>;
+}
+export interface LethalTrifectaState {
+    /** Untrusted span is in context. */
+    hasUntrustedContent: boolean;
+    /** Private / sensitive data identified in context. */
+    hasPrivateData: boolean;
+    /** An outbound channel (HTTP, Telegram send, git push, write MCP) is being attempted. */
+    hasOutboundChannel: boolean;
+}
+export interface LethalTrifectaResult {
+    triggered: boolean;
+    /** Which legs of the trifecta are active. */
+    state: LethalTrifectaState;
+}
+export interface LethalTrifectaDetector {
+    /** Evaluate whether opening this outbound call would complete the trifecta. */
+    evaluate(call: ToolCall, ctx: ContextSpan[]): LethalTrifectaResult;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/safety/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/safety/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,CAAA;AAEjD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,2FAA2F;IAC3F,UAAU,EAAE,UAAU,CAAA;IACtB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAA;CACf;AAMD,MAAM,WAAW,QAAQ;IACvB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAMD,iFAAiF;AACjF,MAAM,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEhC,iEAAiE;AACjE,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,CAAA;AAErE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,IAAI,CAAA;IACV,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,IAAI,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;CACjB;AAMD,MAAM,MAAM,OAAO,GACf;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GACrB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACvD;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,QAAQ,CAAA;CAAE,CAAA;AAM/C,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,GAChB,iBAAiB,GACjB,UAAU,GACV,kBAAkB,CAAA;AAEtB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,0EAA0E;IAC1E,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,QAAQ,EAAE,gBAAgB,CAAA;CAC3B;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,YAAY,GAAG,WAAW,CAAA;AAEnE,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACvD;AAMD,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAA;IAEtC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACvD;AAMD,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IAEvB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAErD,2EAA2E;IAC3E,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;CACxC;AAQD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE7C,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,UAAU,IAAI,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1B,2EAA2E;IAC3E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,IAAI,IAAI,CAAA;IACjB,IAAI,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,EAAE,CAAA;CAC9C;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,GAAG,EAAE,WAAW,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC1E;AAMD,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,YAAY,CAAA;AAEnD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,WAAW,CACT,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,WAAW,EAAE,GACjB;QAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACnD;AAMD,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,iBAAiB,GACjB,gBAAgB,GAChB,wBAAwB,GACxB,iBAAiB,GACjB,wBAAwB,CAAA;AAE5B,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,OAAO,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,CAAC,EAAE,cAAc,CAAA;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,OAAO,CACL,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,cAAc,CAAA;IAEjB,sFAAsF;IACtF,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3E;AAMD,MAAM,WAAW,cAAc;IAC7B,iGAAiG;IACjG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,KAAK;IACpB,oDAAoD;IACpD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,+CAA+C;IAC/C,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChC,0EAA0E;IAC1E,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAClC;AAMD,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,sEAAsE;IACtE,eAAe,EAAE,OAAO,CAAA;IACxB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,oBAAoB,CAAA;AAEhE,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA;IAElD;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAE7C,oDAAoD;IACpD,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE1F;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE5D,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAMD,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,aAAa,CAAA;AAEjB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAA;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAA;IACnB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAA;IACpC,0DAA0D;IAC1D,oBAAoB,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAA;IACnC,sDAAsD;IACtD,GAAG,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,GAAG,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5E;AAOD,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,mBAAmB,EAAE,OAAO,CAAA;IAC5B,sDAAsD;IACtD,cAAc,EAAE,OAAO,CAAA;IACvB,yFAAyF;IACzF,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,OAAO,CAAA;IAClB,6CAA6C;IAC7C,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAA;CACnE"}

package/dist/safety/types.js

@@ -0,0 +1,3 @@
+// §3 — Safety interfaces (illustrative; no external deps)
+export {};
+//# sourceMappingURL=types.js.map

package/dist/safety/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/safety/types.ts"],"names":[],"mappings":"AAAA,0DAA0D"}

package/dist/skills/index.d.ts

@@ -0,0 +1,4 @@
+export type { Provenance, SkillFrontmatter, SkillBody, ParsedSkill, ParseError, ParseResult, MenuEntry, SkillTrigger, ValidationReport, TriggerContext, StagedSkill, ReviewCard, ApprovalVerdict, PromoteResult, FailureClass, FailureSignal, NegativeSkillRecord, ProbeReport, Skills, SandboxPort, ObservabilityPort, GitPort, NonceStore, SkillsDeps, } from './types.js';
+import type { Skills, SkillsDeps } from './types.js';
+export declare function makeSkillRegistry(deps: SkillsDeps): Skills;
+//# sourceMappingURL=index.d.ts.map

package/dist/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,UAAU,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAA;AAEnB,OAAO,KAAK,EACV,MAAM,EACN,UAAU,EAgBX,MAAM,YAAY,CAAA;AAoPnB,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAgS1D"}