@bevel-software/platform-core-backend 0.15.1 → 0.20.0

package/dist/modules/skills/skills.service.js

@@ -1,13 +1,20 @@
 import path from 'node:path';
+import { logger } from '../../shared/logging.js';
+const log = logger('skills');
 import fs from 'node:fs/promises';
 import { parseDocument } from 'yaml';
 import { DEFAULT_BRANCH, PLUGINS_DIR, SKILLS_DIR } from '@bevel-software/platform-shared';
 import { workspaceIdForBranch } from '../../shared/workspace-id.js';
 import { extractFrontmatter, resolveDeclaredId, dedupeById } from '../../shared/frontmatter-id.js';
-import { walkFiles } from '../../shared/fs-walk.js';
 import { TtlCache } from '../../shared/ttl-cache.js';
-import { BevelIgnoreStack } from '../workspace/bevel-ignore.js';
 const CACHE_TTL_MS = 60_000;
+/**
+ * How far back a `version` is looked for: commits of the skill's `SKILL.md`,
+ * newest first. Bounded because each commit costs one read of the file at
+ * that commit; a skill's own history is short, and a version older than two
+ * hundred edits of one file is one nobody is going to ask an agent for.
+ */
+const VERSION_HISTORY_LIMIT = 200;
 /**
  * Reads skills from the DEFAULT-branch workspace (never the caller's branch), so
  * the catalog is one global, released set. Results are cached briefly and on a
@@ -17,13 +24,25 @@ export class SkillService {
     workspaceService;
     accessControl;
     kbDirName;
+    disk;
     cache;
-    constructor(workspaceService, accessControl, kbDirName, now = Date.now) {
+    /**
+     * Where a `version` is read from — git, attached by the composition root
+     * once the git service exists (it is built after this one). Without it a
+     * `version` cannot be answered and is reported as not found, listing none.
+     */
+    history = null;
+    constructor(workspaceService, accessControl, kbDirName, disk, now = Date.now) {
         this.workspaceService = workspaceService;
         this.accessControl = accessControl;
         this.kbDirName = kbDirName;
+        this.disk = disk;
         this.cache = new TtlCache(CACHE_TTL_MS, now);
     }
+    /** Attach the history source a `version` is answered from. */
+    setHistory(history) {
+        this.history = history;
+    }
     invalidate() {
         this.cache.invalidate();
     }
@@ -32,24 +51,46 @@ export class SkillService {
         const summaries = skills.map((s) => s.summary);
         if (!userEmail)
             return summaries;
-        const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
-        const allowed = await this.accessControl.canReadBatch(wsId, userEmail, summaries.map((s) => `${s.path}/SKILL.md`));
+        const allowed = await this.readable(userEmail, summaries.map((s) => s.path));
         // Fail closed: keep a skill only on an explicit `true` verdict — a missing
         // entry counts as denied, matching the KB's default-deny read model (and the
         // tool-manuals catalog). `!== false` would silently EXPOSE a skill any time
         // the checker skips a path.
         return summaries.filter((s) => allowed.get(`${s.path}/SKILL.md`) === true);
     }
-    async getSkill(userEmail, name, file) {
+    async getSkill(userEmail, name, file, options = {}) {
         if (!isSafeSkillName(name))
             return { ok: false, error: 'not_found' };
         const found = (await this.scan()).find((s) => s.summary.name === name);
         if (!found)
             return { ok: false, error: 'not_found' };
         const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
-        if (!(await this.accessControl.canRead(wsId, userEmail, `${found.summary.path}/SKILL.md`))) {
+        // Through `readable`, not a bare `canRead`: the two gates must never
+        // disagree. `canRead` reads a file's own frontmatter rules off disk on
+        // every call while `canReadBatch` resolves them through a per-workspace
+        // memo, so the same skill at the same instant could be loadable by name
+        // and absent from the listing — an author who writes a skill and then
+        // lists them not seeing their own work, and an agent discovering by
+        // listing unable to find a skill it could load. One resolver, one answer.
+        //
+        // The price of the shared gate is that this path now reads through that
+        // memo rather than off disk, so a SKILL.md that rewrites its own `read:`
+        // rules would be authorized against the previous verdict until the memo
+        // expires. It is not: `registerCatalogCacheInvalidation` drops the gate on
+        // the same default-branch signal that drops this catalog, so the listing
+        // and the load are refreshed by one event or by neither.
+        const allowed = await this.readable(userEmail, [found.summary.path]);
+        if (allowed.get(`${found.summary.path}/SKILL.md`) !== true) {
             return { ok: false, error: 'forbidden' };
         }
+        // A version other than the one on disk now is read out of history —
+        // after the access check above, which is the caller's access to the skill
+        // as it is now. The version on disk IS the latest, whatever it is called,
+        // so asking for it by name answers from disk like asking for nothing.
+        const wanted = options.version?.trim();
+        if (wanted !== undefined && wanted.length > 0 && wanted !== found.summary.version) {
+            return this.getSkillAtVersion(wsId, found, name, wanted, file);
+        }
         if (file !== undefined) {
             if (!isSafeRelFile(file))
                 return { ok: false, error: 'invalid_file' };
@@ -75,6 +116,73 @@ export class SkillService {
         return { ok: true, kind: 'skill', skill };
     }
     // --- internal ---------------------------------------------------------------
+    /**
+     * The skill as it was at the most recent default-branch commit whose
+     * `SKILL.md` declared `wanted` — walking that file's history newest first,
+     * so a version that was published, superseded and republished answers with
+     * its latest copy. Every version the walk met is collected on the way, so
+     * a miss can say what there is to ask for.
+     *
+     * The bundled files come from the tree at that commit, without the ignore
+     * rules the live listing applies (those are the rules in force NOW, about a
+     * tree that was different then); `SKILL.md` itself is left out as always.
+     */
+    async getSkillAtVersion(wsId, found, name, wanted, file) {
+        if (file !== undefined && !isSafeRelFile(file))
+            return { ok: false, error: 'invalid_file' };
+        const history = this.history;
+        if (!history)
+            return { ok: false, error: 'version_not_found', versions: [] };
+        const folder = found.summary.path;
+        const skillMd = `${folder}/SKILL.md`;
+        const versions = [];
+        const seen = new Set();
+        const shas = await history.pathHistory(wsId, 'HEAD', skillMd, VERSION_HISTORY_LIMIT);
+        for (const sha of shas) {
+            const raw = await history.readFileAtRef(wsId, sha, skillMd);
+            if (raw === null)
+                continue;
+            const fm = parseSkillFrontmatter(raw);
+            if (fm.version === undefined)
+                continue;
+            if (!seen.has(fm.version)) {
+                seen.add(fm.version);
+                versions.push(fm.version);
+            }
+            if (fm.version !== wanted)
+                continue;
+            const files = (await history.listFilesAtRef(wsId, sha, folder))
+                .filter((p) => p !== skillMd)
+                .sort();
+            if (file !== undefined) {
+                const repoPath = `${folder}/${file}`;
+                if (!files.includes(repoPath))
+                    return { ok: false, error: 'not_found' };
+                const content = await history.readFileAtRef(wsId, sha, repoPath);
+                if (content === null)
+                    return { ok: false, error: 'not_found' };
+                return { ok: true, kind: 'file', file: { name, file, path: repoPath, content } };
+            }
+            const skill = {
+                ...found.summary,
+                description: fm.description,
+                version: fm.version,
+                body: fm.body,
+                allowedTools: fm.allowedTools,
+                files,
+            };
+            return { ok: true, kind: 'skill', skill };
+        }
+        return { ok: false, error: 'version_not_found', versions };
+    }
+    /**
+     * The ONE read gate both surfaces resolve through, keyed by each skill's
+     * `SKILL.md`. Shared so `listSkills` and `getSkill` can only ever give the
+     * same verdict about the same skill — see the note at the `getSkill` call.
+     */
+    async readable(userEmail, skillFolders) {
+        return this.accessControl.canReadBatch(workspaceIdForBranch(DEFAULT_BRANCH), userEmail, skillFolders.map((p) => `${p}/SKILL.md`));
+    }
     async scan() {
         const cached = this.cache.get();
         if (cached)
@@ -116,65 +224,60 @@ export class SkillService {
         // from the Knowledge tree, and a rule that hides a root from the browser
         // must not empty the catalog that root exists to feed.
         const out = [];
-        const walk = async (dir, relFolder, ignore) => {
-            let entries;
-            try {
-                entries = await fs.readdir(dir, { withFileTypes: true });
-            }
-            catch {
-                return;
-            }
-            ignore = await ignore.extendedWith(dir);
-            if (entries.some((e) => e.isFile() && e.name === 'SKILL.md')) {
-                // A skill folder is a LEAF whatever the ignore rules say of it: a rule
-                // naming its SKILL.md suppresses the skill, it does not turn the
-                // folder's assets into skills of their own.
-                if (ignore.isIgnored(path.join(dir, 'SKILL.md'), false))
-                    return;
-                let raw;
-                try {
-                    raw = await fs.readFile(path.join(dir, 'SKILL.md'), 'utf-8');
-                }
-                catch {
-                    return;
-                }
-                const fm = parseSkillFrontmatter(raw);
-                // Identity via the shared rule: frontmatter `id` → `name` → folder name.
-                // `getSkill()` refuses unsafe names (path separators, `.`/`..`), so a
-                // declared id that fails the same check would list but never fetch —
-                // fall back to the folder name (a readdir entry, safe by construction)
-                // to keep listing and lookup consistent.
-                const declared = resolveDeclaredId(fm.frontmatter, path.basename(dir));
-                const name = isSafeSkillName(declared) ? declared : path.basename(dir);
-                out.push({
-                    summary: {
-                        name,
-                        description: fm.description,
-                        version: fm.version,
-                        owner: fm.owner,
-                        lifecycle: fm.lifecycle,
-                        path: relFolder,
+        const isSkillFolder = (entries) => entries.some((e) => e.isFile() && e.name === 'SKILL.md');
+        const disk = this.disk;
+        const walkRoot = async (rootRel) => {
+            await disk.walk(path.join(kbRoot, rootRel), {
+                skip: (e) => e.isDirectory() && e.name.startsWith('.'),
+                ignore: true,
+                // A skill folder is a LEAF whatever the ignore rules say of it — so
+                // judged on what is THERE: a rule naming its SKILL.md suppresses the
+                // skill (below), it does not turn the folder's assets into skills of
+                // their own.
+                leaf: (dir) => isSkillFolder(dir.listed),
+            }, [
+                {
+                    async onDir(rel, entries, { abs: dir, listed, ignore }) {
+                        if (!isSkillFolder(listed))
+                            return;
+                        if (!isSkillFolder(entries))
+                            return; // the SKILL.md is ignored: no skill
+                        const relFolder = rel ? `${rootRel}/${rel}` : rootRel;
+                        let raw;
+                        try {
+                            raw = await fs.readFile(path.join(dir, 'SKILL.md'), 'utf-8');
+                        }
+                        catch {
+                            return;
+                        }
+                        const fm = parseSkillFrontmatter(raw);
+                        // Identity via the shared rule: frontmatter `id` → `name` → folder name.
+                        // `getSkill()` refuses unsafe names (path separators, `.`/`..`), so a
+                        // declared id that fails the same check would list but never fetch —
+                        // fall back to the folder name (a readdir entry, safe by construction)
+                        // to keep listing and lookup consistent.
+                        const declared = resolveDeclaredId(fm.frontmatter, path.basename(dir));
+                        const name = isSafeSkillName(declared) ? declared : path.basename(dir);
+                        out.push({
+                            summary: {
+                                name,
+                                description: fm.description,
+                                version: fm.version,
+                                path: relFolder,
+                            },
+                            body: fm.body,
+                            allowedTools: fm.allowedTools,
+                            files: await listBundledFiles(disk, dir, relFolder, ignore),
+                        });
                     },
-                    body: fm.body,
-                    allowedTools: fm.allowedTools,
-                    files: await listBundledFiles(dir, relFolder, ignore),
-                });
-                return; // a skill folder is a leaf — its subfolders hold assets, not skills
-            }
-            for (const entry of entries) {
-                if (!entry.isDirectory() || entry.name.startsWith('.'))
-                    continue;
-                const abs = path.join(dir, entry.name);
-                if (ignore.isIgnored(abs, true))
-                    continue;
-                await walk(abs, `${relFolder}/${entry.name}`, ignore);
-            }
+                },
+            ]);
         };
         // Each root starts its own ignore stack (the walk extends it with the
         // root's own file first). Order is cosmetic: the sort below is by name
         // then path, so a same-named pair resolves the same way regardless.
-        await walk(path.join(kbRoot, SKILLS_DIR), SKILLS_DIR, BevelIgnoreStack.empty());
-        await walk(path.join(kbRoot, PLUGINS_DIR), PLUGINS_DIR, BevelIgnoreStack.empty());
+        await walkRoot(SKILLS_DIR);
+        await walkRoot(PLUGINS_DIR);
         // A skill's id (frontmatter `id`/`name`, else folder name) is how getSkill()
         // resolves it, so it must be unique. Sort by (name, root, path) for a
         // deterministic winner — the shared root FIRST, since `Skills/` is a
@@ -185,7 +288,7 @@ export class SkillService {
         out.sort((a, b) => a.summary.name.localeCompare(b.summary.name) ||
             rootRank(a.summary.path) - rootRank(b.summary.path) ||
             a.summary.path.localeCompare(b.summary.path));
-        return dedupeById(out, (s) => s.summary.name, (s, id) => console.warn(`[skills] skipping "${s.summary.path}": id "${id}" is already used by another skill — ` +
+        return dedupeById(out, (s) => s.summary.name, (s, id) => log.warn(`skipping "${s.summary.path}": id "${id}" is already used by another skill — ` +
             'give it a unique `id`/`name` in its SKILL.md frontmatter.'));
     }
 }
@@ -213,6 +316,11 @@ function scalarToString(value) {
         return String(value);
     return undefined;
 }
+/** The mapping under `key`, or an empty one when there is none (or it is not a mapping). */
+function nested(data, key) {
+    const value = data[key];
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
 /**
  * Exported for the pending-skill surface, which parses a SKILL.md read at a
  * change request's ref rather than off disk. Same parser deliberately: a
@@ -237,12 +345,12 @@ export function parseSkillFrontmatter(raw) {
         /* keep empty metadata */
     }
     const description = typeof data.description === 'string' ? data.description.trim() : '';
-    const metadata = (data.metadata ?? {});
-    const version = scalarToString(data.version) ?? scalarToString(metadata.version);
-    // The governance record: `metadata.owner` / `metadata.lifecycle` first (the
-    // agentskills convention this catalog reads), a top-level spelling second.
-    const owner = (scalarToString(metadata.owner) ?? scalarToString(data.owner))?.trim() || undefined;
-    const lifecycle = (scalarToString(metadata.lifecycle) ?? scalarToString(data.lifecycle))?.trim().toLowerCase() || undefined;
+    // `metadata.version` is where the Agent Skills format keeps a version and
+    // what the platform writes; a top-level `version` and `lifecycle.version`
+    // (other conventions a skill may arrive with) are read when it is absent.
+    const version = scalarToString(nested(data, 'metadata').version) ??
+        scalarToString(data.version) ??
+        scalarToString(nested(data, 'lifecycle').version);
     // `allowed-tools` is a space-separated string (agentskills) or a YAML list.
     const at = data['allowed-tools'];
     const allowedTools = Array.isArray(at)
@@ -250,7 +358,7 @@ export function parseSkillFrontmatter(raw) {
         : typeof at === 'string'
             ? at.split(/\s+/).filter(Boolean)
             : undefined;
-    return { description, version, owner, lifecycle, allowedTools, body, frontmatter: data };
+    return { description, version, allowedTools, body, frontmatter: data };
 }
 /**
  * Repo-root-relative paths of every bundled file under a skill folder
@@ -259,17 +367,19 @@ export function parseSkillFrontmatter(raw) {
  * hides an asset from the listing, and therefore (see `getSkill`) from
  * being served.
  */
-async function listBundledFiles(dir, relFolder, ignore) {
-    const hidden = (rel) => {
-        const parts = rel.split('/');
-        for (let i = 1; i < parts.length; i++) {
-            if (ignore.isIgnored(path.join(dir, ...parts.slice(0, i)), true))
-                return true;
-        }
-        return ignore.isIgnored(path.join(dir, ...parts), false);
-    };
-    return (await walkFiles(dir, () => true))
-        .filter((rel) => rel !== 'SKILL.md' && !hidden(rel))
-        .map((rel) => `${relFolder}/${rel}`);
+async function listBundledFiles(disk, dir, relFolder, rules) {
+    const rels = [];
+    await disk.walkKb(dir, [
+        {
+            onFile(sub, name) {
+                if (sub || name !== 'SKILL.md')
+                    rels.push(sub ? `${sub}/${name}` : name);
+            },
+        },
+    ], 
+    // `rules` are those in force in the skill folder itself; the walk layers
+    // its own file once more (a no-op) and any deeper one on the way down.
+    { ignore: rules });
+    return rels.sort().map((rel) => `${relFolder}/${rel}`);
 }
 //# sourceMappingURL=skills.service.js.map

package/dist/modules/skills/skills.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.service.js","sourceRoot":"","sources":["../../../src/modules/skills/skills.service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAQhE,MAAM,YAAY,GAAG,MAAM,CAAC;AAS5B;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAIJ;IACA;IACA;IALF,KAAK,CAA0B;IAEhD,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,SAAiB,EAClC,MAAoB,IAAI,CAAC,GAAG;QAHX,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,cAAS,GAAT,SAAS,CAAQ;QAGlC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAkB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CACnD,IAAI,EACJ,SAAS,EACT,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAC3C,CAAC;QACF,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4BAA4B;QAC5B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAa;QAC3D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAErD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACtE,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjD,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACnF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAU;YACnB,GAAG,KAAK,CAAC,OAAO;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAEvE,KAAK,CAAC,IAAI;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,2EAA2E;QAC3E,0EAA0E;QAC1E,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,WAAW;QACX,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7F,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,MAAwB,EAAiB,EAAE;YAC7F,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;gBAC7D,uEAAuE;gBACvE,iEAAiE;gBACjE,4CAA4C;gBAC5C,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC;oBAAE,OAAO;gBAChE,IAAI,GAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBACtC,yEAAyE;gBACzE,sEAAsE;gBACtE,qEAAqE;gBACrE,uEAAuE;gBACvE,yCAAyC;gBACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC;oBACP,OAAO,EAAE;wBACP,IAAI;wBACJ,WAAW,EAAE,EAAE,CAAC,WAAW;wBAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;wBACnB,KAAK,EAAE,EAAE,CAAC,KAAK;wBACf,SAAS,EAAE,EAAE,CAAC,SAAS;wBACvB,IAAI,EAAE,SAAS;qBAChB;oBACD,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,YAAY,EAAE,EAAE,CAAC,YAAY;oBAC7B,KAAK,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;iBACtD,CAAC,CAAC;gBACH,OAAO,CAAC,oEAAoE;YAC9E,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,SAAS;gBAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC;QACF,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,6EAA6E;QAC7E,sEAAsE;QACtE,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5C,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YACnD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAC/C,CAAC;QACF,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CACtD,OAAO,CAAC,IAAI,CACV,sBAAsB,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,uCAAuC;YACrF,2DAA2D,CAC9D,CACF,CAAC;IACJ,CAAC;CACF;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;AACzG,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAY/C,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,IAAI,GAAG,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjF,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClG,MAAM,SAAS,GACb,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;IAE5G,4EAA4E;IAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAiB,EAAE,MAAwB;IACtF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChF,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"skills.service.js","sourceRoot":"","sources":["../../../src/modules/skills/skills.service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAEnG,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAUrD,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AASlC;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAUJ;IACA;IACA;IACA;IAZF,KAAK,CAA0B;IAChD;;;;OAIG;IACK,OAAO,GAA8B,IAAI,CAAC;IAElD,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,SAAiB,EACjB,IAAiB,EAClC,MAAoB,IAAI,CAAC,GAAG;QAJX,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAa;QAGlC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,OAA2B;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAkB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4BAA4B;QAC5B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,IAAY,EACZ,IAAa,EACb,UAA2B,EAAE;QAE7B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAErD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,0EAA0E;QAC1E,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC3C,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACtE,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjD,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACnF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAU;YACnB,GAAG,KAAK,CAAC,OAAO;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAE/E;;;;;;;;;;OAUG;IACK,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,KAAkB,EAClB,IAAY,EACZ,MAAc,EACd,IAAwB;QAExB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,MAAM,WAAW,CAAC;QACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS;YAC3B,MAAM,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM;gBAAE,SAAS;YAEpC,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;iBAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC;iBAC5B,IAAI,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACjE,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,GAAU;gBACnB,GAAG,KAAK,CAAC,OAAO;gBAChB,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,YAAY,EAAE,EAAE,CAAC,YAAY;gBAC7B,KAAK;aACN,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,YAAsB;QAC9D,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CACpC,oBAAoB,CAAC,cAAc,CAAC,EACpC,SAAS,EACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,2EAA2E;QAC3E,0EAA0E;QAC1E,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,WAAW;QACX,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7F,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,CAAC,OAAuD,EAAE,EAAE,CAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAe,EAAiB,EAAE;YACxD,MAAM,IAAI,CAAC,IAAI,CACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1B;gBACE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACtD,MAAM,EAAE,IAAI;gBACZ,oEAAoE;gBACpE,qEAAqE;gBACrE,qEAAqE;gBACrE,aAAa;gBACb,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;aACzC,EACD;gBACE;oBACE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;wBACpD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;4BAAE,OAAO;wBACnC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;4BAAE,OAAO,CAAC,oCAAoC;wBACzE,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;wBACtD,IAAI,GAAW,CAAC;wBAChB,IAAI,CAAC;4BACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;wBAC/D,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO;wBACT,CAAC;wBACD,MAAM,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;wBACtC,yEAAyE;wBACzE,sEAAsE;wBACtE,qEAAqE;wBACrE,uEAAuE;wBACvE,yCAAyC;wBACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;wBACvE,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;wBACvE,GAAG,CAAC,IAAI,CAAC;4BACP,OAAO,EAAE;gCACP,IAAI;gCACJ,WAAW,EAAE,EAAE,CAAC,WAAW;gCAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;gCACnB,IAAI,EAAE,SAAS;6BAChB;4BACD,IAAI,EAAE,EAAE,CAAC,IAAI;4BACb,YAAY,EAAE,EAAE,CAAC,YAAY;4BAC7B,KAAK,EAAE,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;yBAC5D,CAAC,CAAC;oBACL,CAAC;iBACF;aACF,CACF,CAAC;QACJ,CAAC,CAAC;QACF,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3B,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5B,6EAA6E;QAC7E,sEAAsE;QACtE,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5C,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YACnD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAC/C,CAAC;QACF,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CACtD,GAAG,CAAC,IAAI,CACN,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,uCAAuC;YAC5E,2DAA2D,CAC9D,CACF,CAAC;IACJ,CAAC;CACF;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;AACzG,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4FAA4F;AAC5F,SAAS,MAAM,CAAC,IAA6B,EAAE,GAAW;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAQ/C,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,IAAI,GAAG,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,OAAO,GACX,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC;QAChD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC;IAEpD,4EAA4E;IAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAiB,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAkB;IACnG,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,CAAC,MAAM,CACf,GAAG,EACH;QACE;YACE,MAAM,CAAC,GAAG,EAAE,IAAI;gBACd,IAAI,GAAG,IAAI,IAAI,KAAK,UAAU;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;SACF;KACF;IACD,yEAAyE;IACzE,uEAAuE;IACvE,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/modules/skills/skills.tools.d.ts

@@ -2,6 +2,7 @@ import type { Router, RequestHandler } from 'express';
 import type { IToolRegistry } from '../tool-registry/tool.contract.js';
 import type { ToolHandlerFactory } from '../tool-helpers/tool-handler.js';
 import type { ISkillService } from './skills.contract.js';
+import type { IAllowedToolsChecker } from './allowed-tools-check.js';
 /**
  * Registers the two skill tools (both surfaces) and hosts their endpoints.
  *
@@ -11,5 +12,7 @@ import type { ISkillService } from './skills.contract.js';
  * it auto-updates as the default-branch catalog changes. The hosted routes are
  * static; only the description text is dynamic.
  */
-export declare function registerSkillsTools(registry: IToolRegistry, router: Router, toolAuth: RequestHandler, toolHandler: ToolHandlerFactory, skillService: ISkillService): void;
+export declare function registerSkillsTools(registry: IToolRegistry, router: Router, toolAuth: RequestHandler, toolHandler: ToolHandlerFactory, skillService: ISkillService, 
+/** When given, a loaded skill carries `warnings` for `allowed-tools` entries that name no visible tool. */
+allowedTools?: IAllowedToolsChecker): void;
 //# sourceMappingURL=skills.tools.d.ts.map

package/dist/modules/skills/skills.tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.tools.d.ts","sourceRoot":"","sources":["../../../src/modules/skills/skills.tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,mCAAmC,CAAC;AAGjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,aAAa,GAC1B,IAAI,CAwBN"}
+{"version":3,"file":"skills.tools.d.ts","sourceRoot":"","sources":["../../../src/modules/skills/skills.tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,mCAAmC,CAAC;AAGjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErE;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,aAAa;AAC3B,2GAA2G;AAC3G,YAAY,CAAC,EAAE,oBAAoB,GAClC,IAAI,CA2BN"}

package/dist/modules/skills/skills.tools.js

@@ -8,7 +8,9 @@ import { toolDef } from '../tool-helpers/tool-def.js';
  * it auto-updates as the default-branch catalog changes. The hosted routes are
  * static; only the description text is dynamic.
  */
-export function registerSkillsTools(registry, router, toolAuth, toolHandler, skillService) {
+export function registerSkillsTools(registry, router, toolAuth, toolHandler, skillService, 
+/** When given, a loaded skill carries `warnings` for `allowed-tools` entries that name no visible tool. */
+allowedTools) {
     registry.registerExternalTool((ctx) => buildListSkillsDef(skillService, ctx.userEmail));
     registry.registerInternalTool((ctx) => buildListSkillsDef(skillService, ctx.userEmail));
     registry.registerExternalTool((ctx) => buildGetSkillDef(skillService, ctx.userEmail));
@@ -19,9 +21,13 @@ export function registerSkillsTools(registry, router, toolAuth, toolHandler, ski
     router.post('/agent/tools/get_skill', toolAuth, toolHandler(async (args, ctx) => {
         const name = typeof args.name === 'string' ? args.name : '';
         const file = typeof args.file === 'string' ? args.file : undefined;
+        const version = typeof args.version === 'string' ? args.version : undefined;
         if (!name)
             return { error: 'missing_name' };
-        return skillService.getSkill(ctx.user.email, name, file);
+        const result = await skillService.getSkill(ctx.user.email, name, file, { version });
+        if (!allowedTools || !result.ok || result.kind !== 'skill')
+            return result;
+        return { ...result, warnings: await allowedTools.check(ctx.user.email, result.skill.allowedTools) };
     }));
 }
 /** "Currently available skills: `a`, `b`." (or a no-skills note), filtered to what the caller may read. */
@@ -34,7 +40,9 @@ async function availableSkillsLine(skillService, userEmail) {
 async function buildListSkillsDef(skillService, userEmail) {
     return toolDef({
         name: 'list_skills',
-        description: 'List the available skills (reusable specialist instructions) with their names and descriptions. ' +
+        description: 'List the available skills (reusable specialist instructions) with their names, descriptions and, ' +
+            'for a skill that declares one, its current `version` (its SKILL.md `metadata.version`, else a ' +
+            'top-level `version`, else `lifecycle.version`). ' +
             'Discover what skills exist before specialist work, then `get_skill` to load one. ' +
             (await availableSkillsLine(skillService, userEmail)),
         path: '/api/agent/tools/list_skills',
@@ -50,7 +58,11 @@ async function buildListSkillsDef(skillService, userEmail) {
                         properties: {
                             name: { type: 'string' },
                             description: { type: 'string' },
-                            version: { type: 'string' },
+                            version: {
+                                type: 'string',
+                                description: 'The version the skill currently declares (`metadata.version`, else top-level `version`, ' +
+                                    'else `lifecycle.version` in its SKILL.md); absent when it declares none.',
+                            },
                             path: { type: 'string' },
                         },
                     },
@@ -65,7 +77,8 @@ async function buildGetSkillDef(skillService, userEmail) {
         name: 'get_skill',
         description: 'Load a skill by name: returns its full instructions (SKILL.md body) to follow, plus the skill ' +
             'folder path and the list of bundled files. Pass `file` to fetch a bundled file’s content ' +
-            '(e.g. a script) instead of the body. ' +
+            '(e.g. a script) instead of the body. Loads the latest copy unless `version` names an earlier ' +
+            'one the skill declared. ' +
             (await availableSkillsLine(skillService, userEmail)),
         path: '/api/agent/tools/get_skill',
         inputs: {
@@ -77,6 +90,14 @@ async function buildGetSkillDef(skillService, userEmail) {
                     description: 'Optional bundled file path relative to the skill folder (e.g. `scripts/build_xlsx.py`) — ' +
                         'fetch its content instead of the body.',
                 },
+                version: {
+                    type: 'string',
+                    description: 'Optional: the declared version to load (e.g. `1.4.0` — the `version` that `list_skills` ' +
+                        'reports: `metadata.version`, else `version`, else `lifecycle.version`). Omitted, the skill is loaded as it ' +
+                        'is now, which is the latest. Given, the skill — or the `file` — is served as it was at the most ' +
+                        'recent commit that declared that version; a version the skill never declared answers ' +
+                        '`version_not_found` with the versions it did declare.',
+                },
             },
             required: ['name'],
             additionalProperties: false,
@@ -87,7 +108,21 @@ async function buildGetSkillDef(skillService, userEmail) {
             properties: {
                 skill: { type: 'object', description: 'The loaded skill: name, description, body, files, ….' },
                 file: { type: 'object', description: 'A bundled file: name, file, path, content.' },
-                error: { type: 'string', description: 'Error code: `not_found`, `forbidden`, `invalid_file`, `missing_name`.' },
+                warnings: {
+                    type: 'array',
+                    description: 'With `skill`: `allowed-tools` entries that look like platform tools but name none you can use — ' +
+                        'each `{ entry, message, suggestion? }`. Do not rely on such a tool.',
+                    items: { type: 'object' },
+                },
+                error: {
+                    type: 'string',
+                    description: 'Error code: `not_found`, `forbidden`, `invalid_file`, `missing_name`, `version_not_found`.',
+                },
+                versions: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'With `version_not_found`: every version the skill has declared, newest first.',
+                },
             },
         },
         tags: ['skills'],

package/dist/modules/skills/skills.tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.tools.js","sourceRoot":"","sources":["../../../src/modules/skills/skills.tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAItD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAuB,EACvB,MAAc,EACd,QAAwB,EACxB,WAA+B,EAC/B,YAA2B;IAE3B,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,QAAQ,EACR,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;KACtD,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,QAAQ,EACR,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,GAAgB,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,mBAAmB,CAAC,YAA2B,EAAE,SAAkB;IAChF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,oCAAoC,CAAC;IACrE,OAAO,+BAA+B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,YAA2B,EAAE,SAAkB;IAC/E,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,kGAAkG;YAClG,mFAAmF;YACnF,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;QACvE,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,mBAAmB;oBAChC,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBACzB;qBACF;iBACF;aACF;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAA2B,EAAE,SAAkB;IAC7E,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,gGAAgG;YAChG,2FAA2F;YAC3F,uCAAuC;YACvC,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE;gBAChG,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2FAA2F;wBAC3F,wCAAwC;iBAC3C;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4FAA4F;YACzG,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;gBAC9F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;gBACnF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uEAAuE,EAAE;aAChH;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"skills.tools.js","sourceRoot":"","sources":["../../../src/modules/skills/skills.tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAKtD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAuB,EACvB,MAAc,EACd,QAAwB,EACxB,WAA+B,EAC/B,YAA2B;AAC3B,2GAA2G;AAC3G,YAAmC;IAEnC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,QAAQ,EACR,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;KACtD,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,QAAQ,EACR,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,GAAgB,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QAC1E,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IACtG,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,mBAAmB,CAAC,YAA2B,EAAE,SAAkB;IAChF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,oCAAoC,CAAC;IACrE,OAAO,+BAA+B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,YAA2B,EAAE,SAAkB;IAC/E,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,mGAAmG;YACnG,gGAAgG;YAChG,kDAAkD;YAClD,mFAAmF;YACnF,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;QACvE,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,mBAAmB;oBAChC,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC/B,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0FAA0F;oCAC1F,0EAA0E;6BAC7E;4BACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBACzB;qBACF;iBACF;aACF;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAA2B,EAAE,SAAkB;IAC7E,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,gGAAgG;YAChG,2FAA2F;YAC3F,+FAA+F;YAC/F,0BAA0B;YAC1B,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE;gBAChG,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2FAA2F;wBAC3F,wCAAwC;iBAC3C;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,0FAA0F;wBAC1F,6GAA6G;wBAC7G,kGAAkG;wBAClG,uFAAuF;wBACvF,uDAAuD;iBAC1D;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4FAA4F;YACzG,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;gBAC9F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;gBACnF,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,WAAW,EACT,kGAAkG;wBAClG,qEAAqE;oBACvE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1B;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4FAA4F;iBAC1G;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,+EAA+E;iBAC7F;aACF;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/modules/tool-auth/connection-key-rejection.d.ts

@@ -0,0 +1,18 @@
+import type { Response } from 'express';
+/**
+ * How every key-authenticated endpoint answers a bearer that LOOKS like a
+ * connection key but does not verify (unknown, revoked, mistyped).
+ *
+ * Deliberately no `resource_metadata`: that parameter (RFC 9728) invites an
+ * OAuth-capable client to discover our authorization server and start a
+ * browser sign-in, which is the wrong answer to someone who configured a key —
+ * signing in does not repair the key, and the invitation buries the one thing
+ * they need to hear. A missing bearer or a bad OAuth token keeps the discovery
+ * challenge; only this shape gets the plain sentence.
+ *
+ * The submitted key is never echoed, in the header, the body, or a log line.
+ */
+export declare const INVALID_CONNECTION_KEY_CHALLENGE = "Bearer error=\"invalid_token\", error_description=\"Invalid or revoked connection key\"";
+export declare const INVALID_CONNECTION_KEY_MESSAGE = "Invalid or revoked connection key. Mint a new one in External agent access.";
+export declare function rejectConnectionKey(res: Response): void;
+//# sourceMappingURL=connection-key-rejection.d.ts.map

package/dist/modules/tool-auth/connection-key-rejection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-key-rejection.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-auth/connection-key-rejection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gCAAgC,4FAC0C,CAAC;AAExF,eAAO,MAAM,8BAA8B,gFACoC,CAAC;AAEhF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAGvD"}

package/dist/modules/tool-auth/connection-key-rejection.js

@@ -0,0 +1,20 @@
+/**
+ * How every key-authenticated endpoint answers a bearer that LOOKS like a
+ * connection key but does not verify (unknown, revoked, mistyped).
+ *
+ * Deliberately no `resource_metadata`: that parameter (RFC 9728) invites an
+ * OAuth-capable client to discover our authorization server and start a
+ * browser sign-in, which is the wrong answer to someone who configured a key —
+ * signing in does not repair the key, and the invitation buries the one thing
+ * they need to hear. A missing bearer or a bad OAuth token keeps the discovery
+ * challenge; only this shape gets the plain sentence.
+ *
+ * The submitted key is never echoed, in the header, the body, or a log line.
+ */
+export const INVALID_CONNECTION_KEY_CHALLENGE = 'Bearer error="invalid_token", error_description="Invalid or revoked connection key"';
+export const INVALID_CONNECTION_KEY_MESSAGE = 'Invalid or revoked connection key. Mint a new one in External agent access.';
+export function rejectConnectionKey(res) {
+    res.setHeader('WWW-Authenticate', INVALID_CONNECTION_KEY_CHALLENGE);
+    res.status(401).json({ error: INVALID_CONNECTION_KEY_MESSAGE });
+}
+//# sourceMappingURL=connection-key-rejection.js.map

package/dist/modules/tool-auth/connection-key-rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-key-rejection.js","sourceRoot":"","sources":["../../../src/modules/tool-auth/connection-key-rejection.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,qFAAqF,CAAC;AAExF,MAAM,CAAC,MAAM,8BAA8B,GACzC,6EAA6E,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,GAAa;IAC/C,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;IACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;AAClE,CAAC"}