@autonomee/gohub 0.8.0

package/dist/schema/textFiles.js

@@ -0,0 +1,66 @@
+const RAW_TEXT_FILE_EXTENSIONS = [
+    'md',
+    'mdx',
+    'txt',
+    'json',
+    'json5',
+    'yaml',
+    'yml',
+    'toml',
+    'js',
+    'cjs',
+    'mjs',
+    'ts',
+    'tsx',
+    'jsx',
+    'py',
+    'sh',
+    'rb',
+    'go',
+    'rs',
+    'swift',
+    'kt',
+    'java',
+    'cs',
+    'cpp',
+    'c',
+    'h',
+    'hpp',
+    'sql',
+    'csv',
+    'ini',
+    'cfg',
+    'env',
+    'xml',
+    'html',
+    'css',
+    'scss',
+    'sass',
+    'svg',
+];
+export const TEXT_FILE_EXTENSIONS = RAW_TEXT_FILE_EXTENSIONS;
+export const TEXT_FILE_EXTENSION_SET = new Set(TEXT_FILE_EXTENSIONS);
+const RAW_TEXT_CONTENT_TYPES = [
+    'application/json',
+    'application/xml',
+    'application/yaml',
+    'application/x-yaml',
+    'application/toml',
+    'application/javascript',
+    'application/typescript',
+    'application/markdown',
+    'image/svg+xml',
+];
+export const TEXT_CONTENT_TYPES = RAW_TEXT_CONTENT_TYPES;
+export const TEXT_CONTENT_TYPE_SET = new Set(TEXT_CONTENT_TYPES);
+export function isTextContentType(contentType) {
+    if (!contentType)
+        return false;
+    const normalized = contentType.split(';', 1)[0]?.trim().toLowerCase() ?? '';
+    if (!normalized)
+        return false;
+    if (normalized.startsWith('text/'))
+        return true;
+    return TEXT_CONTENT_TYPE_SET.has(normalized);
+}
+//# sourceMappingURL=textFiles.js.map

package/dist/schema/textFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"textFiles.js","sourceRoot":"","sources":["../../src/schema/textFiles.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAAG;IAC/B,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,MAAM;IACN,IAAI;IACJ,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,KAAK;IACL,GAAG;IACH,GAAG;IACH,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACG,CAAA;AAEV,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAA;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAA;AAE5E,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,eAAe;CACP,CAAA;AAEV,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAA;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAA;AAExE,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAC3E,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,OAAO,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AAC9C,CAAC"}

package/dist/schema/textFiles.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/schema/textFiles.test.js

@@ -0,0 +1,20 @@
+/* @vitest-environment node */
+import { describe, expect, it } from 'vitest';
+import * as schema from '.';
+import { isTextContentType, TEXT_FILE_EXTENSION_SET } from './textFiles';
+describe('packages/gohub schema textFiles', () => {
+    it('exports text-file extension set', () => {
+        expect(TEXT_FILE_EXTENSION_SET.has('md')).toBe(true);
+        expect(TEXT_FILE_EXTENSION_SET.has('exe')).toBe(false);
+    });
+    it('detects text content types with parameters', () => {
+        expect(isTextContentType('text/plain; charset=utf-8')).toBe(true);
+        expect(isTextContentType('application/json; charset=utf-8')).toBe(true);
+        expect(isTextContentType('application/octet-stream')).toBe(false);
+    });
+    it('re-exports helpers from index', () => {
+        expect(typeof schema.isTextContentType).toBe('function');
+        expect(schema.isTextContentType('application/markdown')).toBe(true);
+    });
+});
+//# sourceMappingURL=textFiles.test.js.map

package/dist/schema/textFiles.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"textFiles.test.js","sourceRoot":"","sources":["../../src/schema/textFiles.test.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,KAAK,MAAM,MAAM,GAAG,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAExE,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjE,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxD,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/skills.d.ts

@@ -0,0 +1,43 @@
+import { type Lockfile } from './schema/index.js';
+export type SkillOrigin = {
+    version: 1;
+    registry: string;
+    slug: string;
+    installedVersion: string;
+    installedAt: number;
+};
+export declare function extractZipToDir(zipBytes: Uint8Array, targetDir: string): Promise<void>;
+export declare function listTextFiles(root: string): Promise<{
+    relPath: string;
+    bytes: Uint8Array;
+    contentType?: string;
+}[]>;
+export type SkillFileHash = {
+    path: string;
+    sha256: string;
+    size: number;
+};
+export declare function sha256Hex(bytes: Uint8Array): string;
+export declare function buildSkillFingerprint(files: Array<{
+    path: string;
+    sha256: string;
+}>): string;
+export declare function hashSkillFiles(files: Array<{
+    relPath: string;
+    bytes: Uint8Array;
+}>): {
+    files: {
+        path: string;
+        sha256: string;
+        size: number;
+    }[];
+    fingerprint: string;
+};
+export declare function hashSkillZip(zipBytes: Uint8Array): {
+    files: SkillFileHash[];
+    fingerprint: string;
+};
+export declare function readLockfile(workdir: string): Promise<Lockfile>;
+export declare function writeLockfile(workdir: string, lock: Lockfile): Promise<void>;
+export declare function readSkillOrigin(skillFolder: string): Promise<SkillOrigin | null>;
+export declare function writeSkillOrigin(skillFolder: string, origin: SkillOrigin): Promise<void>;

package/dist/skills.js

@@ -0,0 +1,178 @@
+import { createHash } from 'node:crypto';
+import { mkdir, readdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { unzipSync } from 'fflate';
+import ignore from 'ignore';
+import mime from 'mime';
+import { LockfileSchema, parseArk, TEXT_FILE_EXTENSION_SET } from './schema/index.js';
+const DOT_DIR = '.gohub';
+const LEGACY_DOT_DIR = '.clawhub';
+const DOT_IGNORE = '.gohubignore';
+const LEGACY_DOT_IGNORE = '.clawhubignore';
+export async function extractZipToDir(zipBytes, targetDir) {
+    const entries = unzipSync(zipBytes);
+    await mkdir(targetDir, { recursive: true });
+    for (const [rawPath, data] of Object.entries(entries)) {
+        const safePath = sanitizeRelPath(rawPath);
+        if (!safePath)
+            continue;
+        const outPath = join(targetDir, safePath);
+        await mkdir(dirname(outPath), { recursive: true });
+        await writeFile(outPath, data);
+    }
+}
+export async function listTextFiles(root) {
+    const files = [];
+    const absRoot = resolve(root);
+    const ig = ignore();
+    ig.add(['.git/', 'node_modules/', `${DOT_DIR}/`, `${LEGACY_DOT_DIR}/`]);
+    await addIgnoreFile(ig, join(absRoot, '.gitignore'));
+    await addIgnoreFile(ig, join(absRoot, DOT_IGNORE));
+    await addIgnoreFile(ig, join(absRoot, LEGACY_DOT_IGNORE));
+    await walk(absRoot, async (absPath) => {
+        const relPath = normalizePath(relative(absRoot, absPath));
+        if (!relPath)
+            return;
+        if (ig.ignores(relPath))
+            return;
+        const ext = relPath.split('.').at(-1)?.toLowerCase() ?? '';
+        if (!ext || !TEXT_FILE_EXTENSION_SET.has(ext))
+            return;
+        const buffer = await readFile(absPath);
+        const contentType = mime.getType(relPath) ?? 'text/plain';
+        files.push({ relPath, bytes: new Uint8Array(buffer), contentType });
+    });
+    return files;
+}
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+export function buildSkillFingerprint(files) {
+    const normalized = files
+        .filter((file) => Boolean(file.path) && Boolean(file.sha256))
+        .map((file) => ({ path: file.path, sha256: file.sha256 }))
+        .sort((a, b) => a.path.localeCompare(b.path));
+    const payload = normalized.map((file) => `${file.path}:${file.sha256}`).join('\n');
+    return createHash('sha256').update(payload).digest('hex');
+}
+export function hashSkillFiles(files) {
+    const hashed = files.map((file) => ({
+        path: file.relPath,
+        sha256: sha256Hex(file.bytes),
+        size: file.bytes.byteLength,
+    }));
+    return { files: hashed, fingerprint: buildSkillFingerprint(hashed) };
+}
+export function hashSkillZip(zipBytes) {
+    const entries = unzipSync(zipBytes);
+    const hashed = Object.entries(entries)
+        .map(([rawPath, bytes]) => {
+        const safePath = sanitizeZipPath(rawPath);
+        if (!safePath)
+            return null;
+        const ext = safePath.split('.').at(-1)?.toLowerCase() ?? '';
+        if (!ext || !TEXT_FILE_EXTENSION_SET.has(ext))
+            return null;
+        return { path: safePath, sha256: sha256Hex(bytes), size: bytes.byteLength };
+    })
+        .filter(Boolean);
+    return { files: hashed, fingerprint: buildSkillFingerprint(hashed) };
+}
+export async function readLockfile(workdir) {
+    const paths = [join(workdir, DOT_DIR, 'lock.json'), join(workdir, LEGACY_DOT_DIR, 'lock.json')];
+    for (const path of paths) {
+        try {
+            const raw = await readFile(path, 'utf8');
+            const parsed = JSON.parse(raw);
+            return parseArk(LockfileSchema, parsed, 'Lockfile');
+        }
+        catch {
+            // try next
+        }
+    }
+    return { version: 1, skills: {} };
+}
+export async function writeLockfile(workdir, lock) {
+    const path = join(workdir, DOT_DIR, 'lock.json');
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${JSON.stringify(lock, null, 2)}\n`, 'utf8');
+}
+export async function readSkillOrigin(skillFolder) {
+    const paths = [
+        join(skillFolder, DOT_DIR, 'origin.json'),
+        join(skillFolder, LEGACY_DOT_DIR, 'origin.json'),
+    ];
+    for (const path of paths) {
+        try {
+            const raw = await readFile(path, 'utf8');
+            const parsed = JSON.parse(raw);
+            if (parsed.version !== 1)
+                return null;
+            if (!parsed.registry || !parsed.slug || !parsed.installedVersion)
+                return null;
+            if (typeof parsed.installedAt !== 'number' || !Number.isFinite(parsed.installedAt)) {
+                return null;
+            }
+            return {
+                version: 1,
+                registry: String(parsed.registry),
+                slug: String(parsed.slug),
+                installedVersion: String(parsed.installedVersion),
+                installedAt: parsed.installedAt,
+            };
+        }
+        catch {
+            // try next
+        }
+    }
+    return null;
+}
+export async function writeSkillOrigin(skillFolder, origin) {
+    const path = join(skillFolder, DOT_DIR, 'origin.json');
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${JSON.stringify(origin, null, 2)}\n`, 'utf8');
+}
+function normalizePath(path) {
+    return path
+        .split(sep)
+        .join('/')
+        .replace(/^\.\/+/, '');
+}
+function sanitizeRelPath(path) {
+    const normalized = path.replace(/^\.\/+/, '').replace(/^\/+/, '');
+    if (!normalized || normalized.endsWith('/'))
+        return null;
+    if (normalized.includes('..') || normalized.includes('\\'))
+        return null;
+    return normalized;
+}
+function sanitizeZipPath(path) {
+    return sanitizeRelPath(path);
+}
+async function walk(dir, onFile) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (entry.name.startsWith('.'))
+            continue;
+        if (entry.name === 'node_modules')
+            continue;
+        const full = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            await walk(full, onFile);
+            continue;
+        }
+        if (!entry.isFile())
+            continue;
+        await onFile(full);
+    }
+}
+async function addIgnoreFile(ig, path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        ig.add(raw.split(/\r?\n/));
+    }
+    catch {
+        // optional
+    }
+}
+//# sourceMappingURL=skills.js.map

package/dist/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAiB,cAAc,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAEpG,MAAM,OAAO,GAAG,QAAQ,CAAA;AACxB,MAAM,cAAc,GAAG,UAAU,CAAA;AACjC,MAAM,UAAU,GAAG,cAAc,CAAA;AACjC,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAU1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAoB,EAAE,SAAiB;IAC3E,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ;YAAE,SAAQ;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACzC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAChC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAwE,EAAE,CAAA;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;IACnB,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,cAAc,GAAG,CAAC,CAAC,CAAA;IACvE,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;IACpD,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAA;IAClD,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAEzD,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QACzD,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAM;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC1D,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,YAAY,CAAA;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAA;AACd,CAAC;AAID,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAA8C;IAClF,MAAM,UAAU,GAAG,KAAK;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SAC5D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;SACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAoD;IACjF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;KAC5B,CAAC,CAAC,CAAA;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAoB;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAoB,CAAA;IAErC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAA;IAC/F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;YACzC,OAAO,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,IAAc;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IAChD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC;KACjD,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAA;YACtD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAA;YAC7E,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnF,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACjD,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB,EAAE,MAAmB;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACjE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACvE,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,MAAuC;IACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAQ;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAQ;QAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,EAA6B,EAAE,IAAY;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACxC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;AACH,CAAC"}

package/dist/skills.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/skills.test.js

@@ -0,0 +1,147 @@
+/* @vitest-environment node */
+import { mkdir, mkdtemp, readFile, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { strToU8, zipSync } from 'fflate';
+import { describe, expect, it } from 'vitest';
+import { buildSkillFingerprint, extractZipToDir, hashSkillFiles, hashSkillZip, listTextFiles, readLockfile, readSkillOrigin, sha256Hex, writeLockfile, writeSkillOrigin, } from './skills';
+describe('skills', () => {
+    it('extracts zip into directory and skips traversal', async () => {
+        const parent = await mkdtemp(join(tmpdir(), 'gohub-zip-'));
+        const dir = join(parent, 'dir');
+        await mkdir(dir);
+        const evilName = `evil-${Date.now()}-${Math.random().toString(16).slice(2)}.txt`;
+        const zip = zipSync({
+            'SKILL.md': strToU8('hello'),
+            [`../${evilName}`]: strToU8('nope'),
+        });
+        await extractZipToDir(new Uint8Array(zip), dir);
+        expect((await readFile(join(dir, 'SKILL.md'), 'utf8')).trim()).toBe('hello');
+        await expect(stat(join(parent, evilName))).rejects.toBeTruthy();
+    });
+    it('writes and reads lockfile', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-work-'));
+        await writeLockfile(workdir, {
+            version: 1,
+            skills: { demo: { version: '1.0.0', installedAt: 1 } },
+        });
+        const read = await readLockfile(workdir);
+        expect(read.skills.demo?.version).toBe('1.0.0');
+    });
+    it('returns empty lockfile on invalid json', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-work-bad-'));
+        await mkdir(join(workdir, '.gohub'), { recursive: true });
+        await writeFile(join(workdir, '.gohub', 'lock.json'), '{', 'utf8');
+        const read = await readLockfile(workdir);
+        expect(read).toEqual({ version: 1, skills: {} });
+    });
+    it('returns empty lockfile on schema mismatch', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-work-schema-'));
+        await mkdir(join(workdir, '.gohub'), { recursive: true });
+        await writeFile(join(workdir, '.gohub', 'lock.json'), JSON.stringify({ version: 1, skills: 'nope' }), 'utf8');
+        const read = await readLockfile(workdir);
+        expect(read).toEqual({ version: 1, skills: {} });
+    });
+    it('skips dotfiles and node_modules when listing text files', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-files-'));
+        await writeFile(join(workdir, 'SKILL.md'), 'hi', 'utf8');
+        await writeFile(join(workdir, '.secret.txt'), 'no', 'utf8');
+        await mkdir(join(workdir, 'node_modules'), { recursive: true });
+        await writeFile(join(workdir, 'node_modules', 'a.txt'), 'no', 'utf8');
+        const files = await listTextFiles(workdir);
+        expect(files.map((file) => file.relPath)).toEqual(['SKILL.md']);
+    });
+    it('respects .gitignore and .gohubignore', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-ignore-'));
+        await writeFile(join(workdir, '.gitignore'), 'ignored.md\n', 'utf8');
+        await writeFile(join(workdir, '.gohubignore'), 'private.md\n', 'utf8');
+        await writeFile(join(workdir, 'SKILL.md'), 'hi', 'utf8');
+        await writeFile(join(workdir, 'ignored.md'), 'no', 'utf8');
+        await writeFile(join(workdir, 'private.md'), 'no', 'utf8');
+        await writeFile(join(workdir, 'public.json'), '{}', 'utf8');
+        const files = await listTextFiles(workdir);
+        const paths = files.map((file) => file.relPath).sort();
+        expect(paths).toEqual(['SKILL.md', 'public.json']);
+        expect(files.find((file) => file.relPath === 'SKILL.md')?.contentType).toMatch(/^text\//);
+        expect(files.find((file) => file.relPath === 'public.json')?.contentType).toBe('application/json');
+    });
+    it('falls back to text/plain for unknown text extensions', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-env-'));
+        await writeFile(join(workdir, 'SKILL.md'), 'hi', 'utf8');
+        await writeFile(join(workdir, 'config.env'), 'TOKEN=demo', 'utf8');
+        const files = await listTextFiles(workdir);
+        expect(files.find((file) => file.relPath === 'config.env')?.contentType).toBe('text/plain');
+    });
+    it('hashes skill files deterministically', async () => {
+        const { fingerprint } = hashSkillFiles([
+            { relPath: 'b.txt', bytes: strToU8('b') },
+            { relPath: 'a.txt', bytes: strToU8('a') },
+        ]);
+        const expected = buildSkillFingerprint([
+            { path: 'a.txt', sha256: sha256Hex(strToU8('a')) },
+            { path: 'b.txt', sha256: sha256Hex(strToU8('b')) },
+        ]);
+        expect(fingerprint).toBe(expected);
+    });
+    it('hashes text files inside a downloaded zip deterministically', () => {
+        const zip = zipSync({
+            'SKILL.md': strToU8('hello'),
+            'notes.md': strToU8('world'),
+            'image.png': strToU8('nope'),
+        });
+        const { fingerprint } = hashSkillZip(new Uint8Array(zip));
+        const expected = buildSkillFingerprint([
+            { path: 'SKILL.md', sha256: sha256Hex(strToU8('hello')) },
+            { path: 'notes.md', sha256: sha256Hex(strToU8('world')) },
+        ]);
+        expect(fingerprint).toBe(expected);
+    });
+    it('ignores unsafe or non-text entries when hashing zips', () => {
+        const zip = zipSync({
+            'SKILL.md': strToU8('hello'),
+            'folder/': strToU8(''),
+            '../evil.txt': strToU8('nope'),
+            'bad\\path.txt': strToU8('nope'),
+            'image.png': strToU8('nope'),
+        });
+        const { files } = hashSkillZip(new Uint8Array(zip));
+        expect(files).toEqual([{ path: 'SKILL.md', sha256: sha256Hex(strToU8('hello')), size: 5 }]);
+    });
+    it('builds fingerprints from valid entries only', () => {
+        const fingerprint = buildSkillFingerprint([
+            { path: '', sha256: '' },
+            { path: 'valid.txt', sha256: sha256Hex(strToU8('ok')) },
+        ]);
+        const expected = buildSkillFingerprint([
+            { path: 'valid.txt', sha256: sha256Hex(strToU8('ok')) },
+        ]);
+        expect(fingerprint).toBe(expected);
+    });
+    it('returns null for invalid skill origin metadata', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'gohub-origin-'));
+        expect(await readSkillOrigin(workdir)).toBeNull();
+        await mkdir(join(workdir, '.gohub'), { recursive: true });
+        await writeFile(join(workdir, '.gohub', 'origin.json'), JSON.stringify({ version: 2 }), 'utf8');
+        expect(await readSkillOrigin(workdir)).toBeNull();
+        await writeFile(join(workdir, '.gohub', 'origin.json'), JSON.stringify({ version: 1, registry: 'demo', slug: 'x', installedAt: 1 }), 'utf8');
+        expect(await readSkillOrigin(workdir)).toBeNull();
+        await writeFile(join(workdir, '.gohub', 'origin.json'), JSON.stringify({
+            version: 1,
+            registry: 'demo',
+            slug: 'x',
+            installedVersion: '0.1.0',
+            installedAt: 'nope',
+        }), 'utf8');
+        expect(await readSkillOrigin(workdir)).toBeNull();
+        const origin = {
+            version: 1,
+            registry: 'https://example.com',
+            slug: 'demo',
+            installedVersion: '1.2.3',
+            installedAt: 123,
+        };
+        await writeSkillOrigin(workdir, origin);
+        expect(await readSkillOrigin(workdir)).toEqual(origin);
+    });
+});
+//# sourceMappingURL=skills.test.js.map

package/dist/skills.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.test.js","sourceRoot":"","sources":["../src/skills.test.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,EACT,aAAa,EACb,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAEjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;QAChB,MAAM,QAAQ,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,CAAC,MAAM,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,MAAM,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QAE/C,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5E,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAA;QAC5D,MAAM,aAAa,CAAC,OAAO,EAAE;YAC3B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;SACvD,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAChE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAClE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;QACnE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAC9C,MAAM,CACP,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAA;QAC7D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;QAC9D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;QACpE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;QACtE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAE3D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAC5E,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC;YACrC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;YACzC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;YAClD,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;SACnD,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAA;QACF,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;YACzD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;SAC1D,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACtB,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC;YAC9B,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC;YAChC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAA;QACF,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAG,qBAAqB,CAAC;YACxC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxB,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;SACxD,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;SACxD,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEjD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAC9B,MAAM,CACP,CAAA;QACD,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEjD,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAC3E,MAAM,CACP,CAAA;QACD,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEjD,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,GAAG;YACT,gBAAgB,EAAE,OAAO;YACzB,WAAW,EAAE,MAAM;SACpB,CAAC,EACF,MAAM,CACP,CAAA;QACD,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEjD,MAAM,MAAM,GAAgB;YAC1B,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,qBAAqB;YAC/B,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,OAAO;YACzB,WAAW,EAAE,GAAG;SACjB,CAAA;QACD,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/types.d.ts

@@ -0,0 +1,7 @@
+export type Lockfile = {
+    version: 1;
+    skills: Record<string, {
+        version: string | null;
+        installedAt: number;
+    }>;
+};

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@autonomee/gohub",
+  "version": "0.8.0",
+  "description": "Go Hub CLI — install, update, search, and publish agent skills.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "gohub": "bin/gohub.js"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "node --enable-source-maps dist/cli.js",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.1.0",
+    "arktype": "^2.2.0",
+    "commander": "^14.0.3",
+    "fflate": "^0.8.2",
+    "ignore": "^7.0.5",
+    "json5": "^2.2.3",
+    "mime": "^4.1.0",
+    "ora": "^9.3.0",
+    "p-retry": "^7.1.1",
+    "semver": "^7.7.4",
+    "undici": "^7.24.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.0",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}