@crewx/shared 0.0.6-rc.61 → 0.0.6-rc.63

package/crewx-api-credential.js

@@ -1,138 +1 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CrewxCredentialError = void 0;
-exports.resolveCrewxApiCredential = resolveCrewxApiCredential;
-exports.authorizationHeader = authorizationHeader;
-const fs = __importStar(require("node:fs"));
-const path = __importStar(require("node:path"));
-const sdk_1 = require("@crewx/sdk");
-const RUNTIME_CREDENTIAL_PURPOSES = new Set([
-    'notify',
-    'wi',
-    'chromex-negotiate',
-    'pairing',
-    'app-dev',
-]);
-// These are sysexits-style values so shell callers can distinguish the local
-// credential failure before an HTTP request is attempted.
-const EXIT_CODES = {
-    MISSING: 78,
-    BAD_MODE: 77,
-    UNREADABLE: 74,
-};
-const HEX_64 = '[0-9a-f]{64}';
-class CrewxCredentialError extends Error {
-    code;
-    exitCode;
-    constructor(code, message) {
-        super(message);
-        this.name = 'CrewxCredentialError';
-        this.code = code;
-        this.exitCode = EXIT_CODES[code];
-        Object.setPrototypeOf(this, new.target.prototype);
-    }
-}
-exports.CrewxCredentialError = CrewxCredentialError;
-function isErrnoCode(error, code) {
-    return typeof error === 'object'
-        && error !== null
-        && 'code' in error
-        && error.code === code;
-}
-function credentialPath(purpose) {
-    return path.join((0, sdk_1.getCrewxHome)(), 'auth', 'runtime', `${purpose}.token`);
-}
-function invalidPurpose(purpose) {
-    throw new TypeError(`Unsupported runtime credential purpose: ${String(purpose)}`);
-}
-function missingCredential(purpose, filePath) {
-    throw new CrewxCredentialError('MISSING', `Runtime credential '${purpose}' is missing at ${filePath}. `
-        + (purpose === 'app-dev'
-            ? 'The running CrewX may be too old or not started; start it once to create the credential.'
-            : 'Run the CrewX server once to create it or set CREWX_API_TOKEN.'));
-}
-function badMode(purpose, filePath) {
-    throw new CrewxCredentialError('BAD_MODE', `Runtime credential '${purpose}' at ${filePath} has insecure permissions; expected mode 0600.`);
-}
-function unreadableCredential(purpose, filePath) {
-    throw new CrewxCredentialError('UNREADABLE', `Runtime credential '${purpose}' at ${filePath} is unreadable or invalid. `
-        + 'Check the file contents and permissions.');
-}
-function readRuntimeCredential(purpose) {
-    const filePath = credentialPath(purpose);
-    let stats;
-    try {
-        // lstat prevents a symlink from bypassing the mode check on POSIX.
-        stats = fs.lstatSync(filePath);
-    }
-    catch (error) {
-        if (isErrnoCode(error, 'ENOENT'))
-            missingCredential(purpose, filePath);
-        unreadableCredential(purpose, filePath);
-    }
-    if (!stats.isFile())
-        unreadableCredential(purpose, filePath);
-    // Windows does not expose POSIX mode semantics; the server contract skips
-    // this check there as well.
-    if (process.platform !== 'win32' && (stats.mode & 0o777) !== 0o600) {
-        badMode(purpose, filePath);
-    }
-    let token;
-    try {
-        token = fs.readFileSync(filePath, 'utf8');
-    }
-    catch (error) {
-        if (isErrnoCode(error, 'ENOENT'))
-            missingCredential(purpose, filePath);
-        unreadableCredential(purpose, filePath);
-    }
-    const expected = new RegExp(`^crewxrt_${purpose}_${HEX_64}$`);
-    if (!expected.test(token))
-        unreadableCredential(purpose, filePath);
-    return token;
-}
-function resolveCrewxApiCredential(purpose, env = process.env) {
-    if (!RUNTIME_CREDENTIAL_PURPOSES.has(purpose))
-        invalidPurpose(purpose);
-    const envToken = env['CREWX_API_TOKEN'];
-    if (typeof envToken === 'string' && envToken.length > 0) {
-        return { token: envToken, source: 'env' };
-    }
-    return { token: readRuntimeCredential(purpose), source: 'file' };
-}
-function authorizationHeader(cred) {
-    return { Authorization: `Bearer ${cred.token}` };
-}
+"use strict";var f=exports&&exports.__createBinding||(Object.create?(function(e,t,n,r){if(r===void 0)r=n;var i=Object.getOwnPropertyDescriptor(t,n);if(!i||("get"in i?!t.__esModule:i.writable||i.configurable)){i={enumerable:true,get:function(){return t[n]}}}Object.defineProperty(e,r,i)}):(function(e,t,n,r){if(r===void 0)r=n;e[r]=t[n]}));var h=exports&&exports.__setModuleDefault||(Object.create?(function(e,t){Object.defineProperty(e,"default",{enumerable:true,value:t})}):function(e,t){e["default"]=t});var u=exports&&exports.__importStar||(function(){var e=function(t){e=Object.getOwnPropertyNames||function(n){var r=[];for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i))r[r.length]=i;return r};return e(t)};return function(t){if(t&&t.__esModule)return t;var n={};if(t!=null){for(var r=e(t),i=0;i<r.length;i++)if(r[i]!=="default")f(n,t,r[i])}h(n,t);return n}})();Object.defineProperty(exports,"__esModule",{value:true});exports.CrewxCredentialError=void 0;exports.resolveCrewxApiCredential=m;exports.authorizationHeader=P;const s=u(require("node:fs"));const _=u(require("node:path"));const E=require("@crewx/sdk");const w=new Set(["notify","wi","chromex-negotiate","pairing","app-dev"]);const C={MISSING:78,BAD_MODE:77,UNREADABLE:74};const v="[0-9a-f]{64}";class o extends Error{code;exitCode;constructor(t,n){super(n);this.name="CrewxCredentialError";this.code=t;this.exitCode=C[t];Object.setPrototypeOf(this,new.target.prototype)}}exports.CrewxCredentialError=o;function l(e,t){return typeof e==="object"&&e!==null&&"code"in e&&e.code===t}function O(e){return _.join((0,E.getCrewxHome)(),"auth","runtime",`${e}.token`)}function g(e){throw new TypeError(`Unsupported runtime credential purpose: ${String(e)}`)}function d(e,t){throw new o("MISSING",`Runtime credential '${e}' is missing at ${t}. `+(e==="app-dev"?"The running CrewX may be too old or not started; start it once to create the credential.":"Run the CrewX server once to create it or set CREWX_API_TOKEN."))}function y(e,t){throw new o("BAD_MODE",`Runtime credential '${e}' at ${t} has insecure permissions; expected mode 0600.`)}function a(e,t){throw new o("UNREADABLE",`Runtime credential '${e}' at ${t} is unreadable or invalid. Check the file contents and permissions.`)}function b(e){const t=O(e);let n;try{n=s.lstatSync(t)}catch(c){if(l(c,"ENOENT"))d(e,t);a(e,t)}if(!n.isFile())a(e,t);if(process.platform!=="win32"&&(n.mode&511)!==384){y(e,t)}let r;try{r=s.readFileSync(t,"utf8")}catch(c){if(l(c,"ENOENT"))d(e,t);a(e,t)}const i=new RegExp(`^crewxrt_${e}_${v}$`);if(!i.test(r))a(e,t);return r}function m(e,t=process.env){if(!w.has(e))g(e);const n=t["CREWX_API_TOKEN"];if(typeof n==="string"&&n.length>0){return{token:n,source:"env"}}return{token:b(e),source:"file"}}function P(e){return{Authorization:`Bearer ${e.token}`}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewx/shared",
-  "version": "0.0.6-rc.61",
+  "version": "0.0.6-rc.63",
   "main": "skill-tracer.js",
   "exports": {
     ".": {
@@ -28,12 +28,18 @@
   },
   "description": "Shared utilities for CrewX built-in packages",
   "dependencies": {
-    "@crewx/sdk": "0.9.0-rc.146"
+    "@crewx/sdk": "0.9.0-rc.148"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "typescript": "^5.0.0"
   },
+  "files": [
+    "skill-tracer.js",
+    "skill-tracer.d.ts",
+    "crewx-api-credential.js",
+    "crewx-api-credential.d.ts"
+  ],
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "test": "echo no tests"

package/skill-tracer.js

@@ -1,332 +1,8 @@
-/**
- * skill-tracer.js - 스킬 실행 추적 라이브러리 (PoC)
- *
- * 스킬에서 직접 node skill.js 실행해도 로깅됨
- * - usage.log: 텍스트 파일 로그 (경량)
- * - crewx.db: SQLite DB 로그 (상세)
- */
-
-// Lazy-load better-sqlite3 (native prebuild, no WASM)
-let Database;
-try {
-  Database = require('better-sqlite3');
-} catch {
-  Database = null;
-}
-
-const os = require('os');
-const path = require('path');
-const fs = require('fs');
-const { createHash } = require('crypto');
-const { generateId } = require('@crewx/sdk');
-
-/**
- * crewx.db 경로 찾기
- */
-function getDbPath() {
-  if (process.env.CREWX_DB) return process.env.CREWX_DB;
-
-  return path.join(os.homedir(), '.crewx', 'crewx.db');
-}
-
-// Backward-compatible alias
-const getTracesDbPath = getDbPath;
-
-/**
- * Open an already initialized crewx.db for trace writes.
- * This function never creates a database, directory, or schema.
- * Returns null if better-sqlite3 is unavailable, the database is missing, or
- * the existing file does not contain the tracing tables used by this module.
- */
-function getDb() {
-  if (!Database) return null;
-
-  const dbPath = getDbPath();
-  if (!fs.existsSync(dbPath)) return null;
-
-  let db;
-  try {
-    db = new Database(dbPath, { fileMustExist: true });
-    db.exec('PRAGMA journal_mode = WAL');
-    db.exec('PRAGMA busy_timeout = 5000');
-    db.exec('PRAGMA foreign_keys = ON');
-
-    if (!hasTraceSchema(db)) {
-      db.close();
-      return null;
-    }
-
-    return db;
-  } catch (error) {
-    try {
-      db?.close();
-    } catch {
-      // Best-effort cleanup after an open or pragma failure.
-    }
-    throw error;
-  }
-}
-
-function hasTraceSchema(db) {
-  const requiredColumns = {
-    tasks: ['id'],
-    spans: [
-      'id',
-      'task_id',
-      'name',
-      'kind',
-      'status',
-      'started_at',
-      'completed_at',
-      'duration_ms',
-      'input',
-      'output',
-      'error',
-      'attributes',
-    ],
-  };
-
-  return Object.entries(requiredColumns).every(([tableName, columns]) => {
-    const availableColumns = new Set(
-      db.prepare(`PRAGMA table_info(${tableName})`).all().map((column) => column.name),
-    );
-    return columns.every((column) => availableColumns.has(column));
-  });
-}
-
-function resolveProjectContext() {
-  const projectPath = path.resolve(process.cwd());
-  return {
-    projectId: createHash('sha256').update(normalizeProjectPath(projectPath)).digest('hex'),
-    projectName: resolveProjectName(projectPath),
-  };
-}
-
-function normalizeProjectPath(projectPath) {
-  let resolved = path.resolve(projectPath);
-  if (process.platform === 'win32') {
-    resolved = resolved.replace(/\\/g, '/');
-    resolved = resolved.replace(/^([A-Z]):/, (match, drive) => `${drive.toLowerCase()}:`);
-  }
-
-  if (resolved.length > 1 && !/^[a-zA-Z]:\/$/.test(resolved)) {
-    resolved = resolved.replace(/\/+$/, '');
-  }
-
-  return resolved;
-}
-
-function resolveProjectName(projectPath) {
-  const gitConfigPath = path.join(projectPath, '.git', 'config');
-  if (fs.existsSync(gitConfigPath)) {
-    try {
-      const config = fs.readFileSync(gitConfigPath, 'utf-8');
-      const match = config.match(/\[remote\s+"[^"]+"\][^\[]*?url\s*=\s*(.+)/m);
-      if (match && match[1]) {
-        return extractRepoName(match[1].trim());
-      }
-    } catch {
-      // Fall back to basename
-    }
-  }
-
-  return path.basename(projectPath);
-}
-
-function extractRepoName(remoteUrl) {
-  const cleaned = remoteUrl.replace(/\.git$/i, '');
-  const parts = cleaned.split(/[/:]/).filter(Boolean);
-  return parts[parts.length - 1] || 'unknown';
-}
-
-/**
- * 로컬 타임스탬프 (usage.log용)
- */
-function getLocalTimestamp() {
-  const now = new Date();
-  const y = now.getFullYear();
-  const m = String(now.getMonth() + 1).padStart(2, '0');
-  const d = String(now.getDate()).padStart(2, '0');
-  const h = String(now.getHours()).padStart(2, '0');
-  const min = String(now.getMinutes()).padStart(2, '0');
-  const s = String(now.getSeconds()).padStart(2, '0');
-  return `${y}-${m}-${d} ${h}:${min}:${s}`;
-}
-
-/**
- * usage.log에 기록
- */
-function logToUsageFile(logPath, skillName, command) {
-  const timestamp = getLocalTimestamp();
-  const line = `${timestamp} | [${skillName}] ${command}\n`;
-  fs.appendFileSync(logPath, line);
-}
-
-/**
- * 스킬 실행 추적 시작
- *
- * @param {string} skillName - 스킬 이름 (예: 'memory-v2')
- * @param {string} command - 실행 명령어 (예: 'save agent1 test')
- * @param {object} [options] - 옵션
- * @param {string} [options.agentId] - 에이전트 ID
- * @param {string} [options.usageLog] - usage.log 파일 경로 (지정하면 파일 로그도 남김)
- * @param {boolean} [options.tracesDb=true] - crewx.db 기록 여부
- * @returns {{ taskId: string, ok: (result?: string) => void, fail: (error: string) => void }}
- */
-const _versionCache = new Map();
-
-function getOwnSkillVersion(skillDir) {
-  const resolved = path.resolve(skillDir);
-  if (_versionCache.has(resolved)) return _versionCache.get(resolved);
-
-  const candidates = [
-    path.join(resolved, 'SKILL.md'),
-    path.join(resolved, '..', 'SKILL.md'),
-  ];
-
-  for (const skillMdPath of candidates) {
-    try {
-      if (!fs.existsSync(skillMdPath)) continue;
-      const content = fs.readFileSync(skillMdPath, 'utf-8');
-      const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-      if (!fmMatch) continue;
-      const fm = fmMatch[1];
-      const versionMatch = fm.match(/^version:\s*(.+)$/m);
-      if (versionMatch) {
-        const v = versionMatch[1].trim().replace(/^['"]|['"]$/g, '');
-        _versionCache.set(resolved, v);
-        return v;
-      }
-      const nestedMatch = fm.match(/^\s+version:\s*(.+)$/m);
-      if (nestedMatch) {
-        const v = nestedMatch[1].trim().replace(/^['"]|['"]$/g, '');
-        _versionCache.set(resolved, v);
-        return v;
-      }
-    } catch {
-      continue;
-    }
-  }
-
-  _versionCache.set(resolved, null);
-  return null;
-}
-
-const MAX_OUTPUT_BYTES = 32 * 1024;
-const HALF_MAX = 16 * 1024;
-
-function truncateOutput(text) {
-  if (!text) return { text: null, truncated: false, originalBytes: 0 };
-
-  const buf = Buffer.from(text, 'utf-8');
-  const bytes = buf.length;
-
-  if (bytes <= MAX_OUTPUT_BYTES) {
-    return { text, truncated: false, originalBytes: bytes };
-  }
-
-  const headBuf = buf.subarray(0, HALF_MAX);
-  const tailBuf = buf.subarray(bytes - HALF_MAX);
-  const omitted = bytes - HALF_MAX * 2;
-
-  const marker = '\n...[omitted=' + omitted + ' bytes]...\n';
-  const result = headBuf.toString('utf-8') + marker + tailBuf.toString('utf-8');
-
-  return { text: result, truncated: true, originalBytes: bytes };
-}
-
-function trace(skillName, command, options = {}) {
-  const {
-    agentId,
-    usageLog,
-    tracesDb = true,
-    skillVersion,
-  } = typeof options === 'string' ? { agentId: options } : options;
-
-  // usage.log 기록 (항상, 중복 상관없이)
-  if (usageLog) {
-    logToUsageFile(usageLog, skillName, command);
-  }
-
-  // CREWX_NO_TRACE=1: skip trace recording (usage log still recorded above)
-  if (process.env.CREWX_NO_TRACE === '1') {
-    return {
-      taskId: 'no-trace',
-      ok: () => {},
-      fail: () => {},
-      _skipped: true
-    };
-  }
-
-  // crewx.db 기록 비활성화된 경우
-  if (!tracesDb) {
-    return {
-      taskId: 'no-trace',
-      ok: () => {},
-      fail: () => {},
-      _skipped: true
-    };
-  }
-
-  let db;
-  try {
-    db = getDb();
-  } catch {
-    db = null;
-  }
-
-  if (!db) {
-    return {
-      taskId: null,
-      ok: () => {},
-      fail: () => {},
-      _skipped: true
-    };
-  }
-  const now = new Date().toISOString();
-  const resolvedAgentId = agentId || process.env.CREWX_AGENT_ID || 'direct';
-
-  // crewx skill x로 실행된 경우 → spans 테이블에 child span으로 기록
-  const parentTaskId = process.env.CREWX_TASK_ID;
-  if (parentTaskId && parentTaskId.trim() !== '') {
-    // Verify FK target exists before INSERT to avoid constraint error
-    const taskExists = db.prepare('SELECT 1 FROM tasks WHERE id = ?').get(parentTaskId);
-    const safeTaskId = taskExists ? parentTaskId : null;
-
-    const spanId = generateId('spn');
-    const attrs = {
-      skill: skillName,
-      agent_id: resolvedAgentId,
-      tracer_version: '0.3.0'
-    };
-    if (skillVersion) attrs.skill_version = skillVersion;
-    const attributes = JSON.stringify(attrs);
-
-    db.prepare(`
+let v;try{v=require("better-sqlite3")}catch{v=null}const P=require("os");const _=require("path");const h=require("fs");const{createHash:B}=require("crypto");const{generateId:D}=require("@crewx/sdk");function w(){if(process.env.CREWX_DB)return process.env.CREWX_DB;return _.join(P.homedir(),".crewx","crewx.db")}const C=w;function $(){if(!v)return null;const e=w();if(!h.existsSync(e))return null;let t;try{t=new v(e,{fileMustExist:true});t.exec("PRAGMA journal_mode = WAL");t.exec("PRAGMA busy_timeout = 5000");t.exec("PRAGMA foreign_keys = ON");if(!M(t)){t.close();return null}return t}catch(s){try{t?.close()}catch{}throw s}}function M(e){const t={tasks:["id"],spans:["id","task_id","name","kind","status","started_at","completed_at","duration_ms","input","output","error","attributes"]};return Object.entries(t).every(([s,n])=>{const a=new Set(e.prepare(`PRAGMA table_info(${s})`).all().map(o=>o.name));return n.every(o=>a.has(o))})}function X(){const e=_.resolve(process.cwd());return{projectId:B("sha256").update(L(e)).digest("hex"),projectName:W(e)}}function L(e){let t=_.resolve(e);if(process.platform==="win32"){t=t.replace(/\\/g,"/");t=t.replace(/^([A-Z]):/,(s,n)=>`${n.toLowerCase()}:`)}if(t.length>1&&!/^[a-zA-Z]:\/$/.test(t)){t=t.replace(/\/+$/,"")}return t}function W(e){const t=_.join(e,".git","config");if(h.existsSync(t)){try{const s=h.readFileSync(t,"utf-8");const n=s.match(/\[remote\s+"[^"]+"\][^\[]*?url\s*=\s*(.+)/m);if(n&&n[1]){return U(n[1].trim())}}catch{}}return _.basename(e)}function U(e){const t=e.replace(/\.git$/i,"");const s=t.split(/[/:]/).filter(Boolean);return s[s.length-1]||"unknown"}function G(){const e=new Date;const t=e.getFullYear();const s=String(e.getMonth()+1).padStart(2,"0");const n=String(e.getDate()).padStart(2,"0");const a=String(e.getHours()).padStart(2,"0");const o=String(e.getMinutes()).padStart(2,"0");const c=String(e.getSeconds()).padStart(2,"0");return`${t}-${s}-${n} ${a}:${o}:${c}`}function J(e,t,s){const n=G();const a=`${n} | [${t}] ${s}
+`;h.appendFileSync(e,a)}const O=new Map;function H(e){const t=_.resolve(e);if(O.has(t))return O.get(t);const s=[_.join(t,"SKILL.md"),_.join(t,"..","SKILL.md")];for(const n of s){try{if(!h.existsSync(n))continue;const a=h.readFileSync(n,"utf-8");const o=a.match(/^---\r?\n([\s\S]*?)\r?\n---/);if(!o)continue;const c=o[1];const r=c.match(/^version:\s*(.+)$/m);if(r){const f=r[1].trim().replace(/^['"]|['"]$/g,"");O.set(t,f);return f}const l=c.match(/^\s+version:\s*(.+)$/m);if(l){const f=l[1].trim().replace(/^['"]|['"]$/g,"");O.set(t,f);return f}}catch{continue}}O.set(t,null);return null}const q=32*1024;const j=16*1024;function k(e){if(!e)return{text:null,truncated:false,originalBytes:0};const t=Buffer.from(e,"utf-8");const s=t.length;if(s<=q){return{text:e,truncated:false,originalBytes:s}}const n=t.subarray(0,j);const a=t.subarray(s-j);const o=s-j*2;const c="\n...[omitted="+o+" bytes]...\n";const r=n.toString("utf-8")+c+a.toString("utf-8");return{text:r,truncated:true,originalBytes:s}}function x(e,t,s={}){const{agentId:n,usageLog:a,tracesDb:o=true,skillVersion:c}=typeof s==="string"?{agentId:s}:s;if(a){J(a,e,t)}if(process.env.CREWX_NO_TRACE==="1"){return{taskId:"no-trace",ok:()=>{},fail:()=>{},_skipped:true}}if(!o){return{taskId:"no-trace",ok:()=>{},fail:()=>{},_skipped:true}}let r;try{r=$()}catch{r=null}if(!r){return{taskId:null,ok:()=>{},fail:()=>{},_skipped:true}}const l=new Date().toISOString();const f=n||process.env.CREWX_AGENT_ID||"direct";const b=process.env.CREWX_TASK_ID;if(b&&b.trim()!==""){const T=r.prepare("SELECT 1 FROM tasks WHERE id = ?").get(b);const S=T?b:null;const u=D("spn");const g={skill:e,agent_id:f,tracer_version:"0.3.0"};if(c)g.skill_version=c;const i=JSON.stringify(g);r.prepare(`
       INSERT INTO spans (id, task_id, name, kind, status, started_at, input, attributes)
       VALUES (?, ?, ?, 'internal', 'ok', ?, ?, ?)
-    `).run(spanId, safeTaskId, skillName, now, command, attributes);
-
-    return {
-      taskId: parentTaskId,
-      spanId,
-      ok: (result, meta) => {
-        const completedAt = new Date().toISOString();
-        const out = truncateOutput(result);
-        const attrs = JSON.parse(attributes);
-        if (out.truncated) {
-          attrs.output_truncated = true;
-          attrs.output_bytes_original = out.originalBytes;
-        }
-        if (meta && meta.stderr) {
-          const stderrOut = truncateOutput(meta.stderr);
-          attrs.stderr = stderrOut.text;
-          if (stderrOut.truncated) {
-            attrs.stderr_truncated = true;
-            attrs.stderr_bytes_original = stderrOut.originalBytes;
-          }
-        }
-        db.prepare(`
+    `).run(u,S,e,l,t,i);return{taskId:b,spanId:u,ok:(d,y)=>{const E=new Date().toISOString();const m=k(d);const p=JSON.parse(i);if(m.truncated){p.output_truncated=true;p.output_bytes_original=m.originalBytes}if(y&&y.stderr){const A=k(y.stderr);p.stderr=A.text;if(A.truncated){p.stderr_truncated=true;p.stderr_bytes_original=A.originalBytes}}r.prepare(`
           UPDATE spans
           SET status = 'ok',
               output = ?,
@@ -334,24 +10,7 @@ function trace(skillName, command, options = {}) {
               completed_at = ?,
               duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
           WHERE id = ?
-        `).run(out.text, JSON.stringify(attrs), completedAt, completedAt, spanId);
-        db.close();
-      },
-      fail: (error, meta) => {
-        const completedAt = new Date().toISOString();
-        let updateAttrs = null;
-        if (meta && meta.stderr) {
-          const attrs = JSON.parse(attributes);
-          const stderrOut = truncateOutput(meta.stderr);
-          attrs.stderr = stderrOut.text;
-          if (stderrOut.truncated) {
-            attrs.stderr_truncated = true;
-            attrs.stderr_bytes_original = stderrOut.originalBytes;
-          }
-          updateAttrs = JSON.stringify(attrs);
-        }
-        if (updateAttrs) {
-          db.prepare(`
+        `).run(m.text,JSON.stringify(p),E,E,u);r.close()},fail:(d,y)=>{const E=new Date().toISOString();let m=null;if(y&&y.stderr){const p=JSON.parse(i);const A=k(y.stderr);p.stderr=A.text;if(A.truncated){p.stderr_truncated=true;p.stderr_bytes_original=A.originalBytes}m=JSON.stringify(p)}if(m){r.prepare(`
             UPDATE spans
             SET status = 'error',
                 error = ?,
@@ -359,59 +18,17 @@ function trace(skillName, command, options = {}) {
                 completed_at = ?,
                 duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
             WHERE id = ?
-          `).run(error, updateAttrs, completedAt, completedAt, spanId);
-        } else {
-          db.prepare(`
+          `).run(d,m,E,E,u)}else{r.prepare(`
             UPDATE spans
             SET status = 'error',
                 error = ?,
                 completed_at = ?,
                 duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
             WHERE id = ?
-          `).run(error, completedAt, completedAt, spanId);
-        }
-        db.close();
-      },
-      _skipped: false
-    };
-  }
-
-  // 직접 호출 (독립 실행) → spans 테이블에 task_id=NULL로 기록
-  const spanId = generateId('spn');
-  const attrs = {
-    skill: skillName,
-    agent_id: resolvedAgentId,
-    direct_call: true,
-    tracer_version: '0.3.0'
-  };
-  if (skillVersion) attrs.skill_version = skillVersion;
-  const attributes = JSON.stringify(attrs);
-
-  db.prepare(`
+          `).run(d,E,E,u)}r.close()},_skipped:false}}const I=D("spn");const N={skill:e,agent_id:f,direct_call:true,tracer_version:"0.3.0"};if(c)N.skill_version=c;const R=JSON.stringify(N);r.prepare(`
     INSERT INTO spans (id, task_id, name, kind, status, started_at, input, attributes)
     VALUES (?, NULL, ?, 'internal', 'ok', ?, ?, ?)
-  `).run(spanId, skillName, now, command, attributes);
-
-  return {
-    taskId: null,
-    spanId,
-    ok: (result, meta) => {
-      const completedAt = new Date().toISOString();
-      const out = truncateOutput(result);
-      const attrs = JSON.parse(attributes);
-      if (out.truncated) {
-        attrs.output_truncated = true;
-        attrs.output_bytes_original = out.originalBytes;
-      }
-      if (meta && meta.stderr) {
-        const stderrOut = truncateOutput(meta.stderr);
-        attrs.stderr = stderrOut.text;
-        if (stderrOut.truncated) {
-          attrs.stderr_truncated = true;
-          attrs.stderr_bytes_original = stderrOut.originalBytes;
-        }
-      }
-      db.prepare(`
+  `).run(I,e,l,t,R);return{taskId:null,spanId:I,ok:(T,S)=>{const u=new Date().toISOString();const g=k(T);const i=JSON.parse(R);if(g.truncated){i.output_truncated=true;i.output_bytes_original=g.originalBytes}if(S&&S.stderr){const d=k(S.stderr);i.stderr=d.text;if(d.truncated){i.stderr_truncated=true;i.stderr_bytes_original=d.originalBytes}}r.prepare(`
         UPDATE spans
         SET status = 'ok',
             output = ?,
@@ -419,24 +36,7 @@ function trace(skillName, command, options = {}) {
             completed_at = ?,
             duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
         WHERE id = ?
-      `).run(out.text, JSON.stringify(attrs), completedAt, completedAt, spanId);
-      db.close();
-    },
-    fail: (error, meta) => {
-      const completedAt = new Date().toISOString();
-      let updateAttrs = null;
-      if (meta && meta.stderr) {
-        const attrs = JSON.parse(attributes);
-        const stderrOut = truncateOutput(meta.stderr);
-        attrs.stderr = stderrOut.text;
-        if (stderrOut.truncated) {
-          attrs.stderr_truncated = true;
-          attrs.stderr_bytes_original = stderrOut.originalBytes;
-        }
-        updateAttrs = JSON.stringify(attrs);
-      }
-      if (updateAttrs) {
-        db.prepare(`
+      `).run(g.text,JSON.stringify(i),u,u,I);r.close()},fail:(T,S)=>{const u=new Date().toISOString();let g=null;if(S&&S.stderr){const i=JSON.parse(R);const d=k(S.stderr);i.stderr=d.text;if(d.truncated){i.stderr_truncated=true;i.stderr_bytes_original=d.originalBytes}g=JSON.stringify(i)}if(g){r.prepare(`
           UPDATE spans
           SET status = 'error',
               error = ?,
@@ -444,81 +44,11 @@ function trace(skillName, command, options = {}) {
               completed_at = ?,
               duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
           WHERE id = ?
-        `).run(error, updateAttrs, completedAt, completedAt, spanId);
-      } else {
-        db.prepare(`
+        `).run(T,g,u,u,I)}else{r.prepare(`
           UPDATE spans
           SET status = 'error',
               error = ?,
               completed_at = ?,
               duration_ms = CAST((julianday(?) - julianday(started_at)) * 86400000 AS INTEGER)
           WHERE id = ?
-        `).run(error, completedAt, completedAt, spanId);
-      }
-      db.close();
-    },
-    _skipped: false
-  };
-}
-
-/**
- * 스킬 실행 래퍼 (권장)
- * try/catch, trace 시작/종료 자동 처리
- *
- * @param {string} skillName - 스킬 이름
- * @param {() => Promise<any>} fn - 실행할 함수
- * @param {object} [options] - 옵션
- * @param {string} [options.usageLog] - usage.log 파일 경로
- * @param {boolean} [options.tracesDb=true] - crewx.db 기록 여부
- * @returns {Promise<any>}
- *
- * @example
- * // 둘 다 기록
- * run('memory-v2', main, {
- *   usageLog: path.join(__dirname, 'usage.log'),
- *   tracesDb: true
- * });
- *
- * // usage.log만
- * run('memory-v2', main, {
- *   usageLog: path.join(__dirname, 'usage.log'),
- *   tracesDb: false
- * });
- *
- * // crewx.db만 (기본)
- * run('memory-v2', main);
- */
-async function run(skillName, fn, options = {}) {
-  const command = process.argv.slice(2).join(' ');
-  const t = trace(skillName, command, options);
-
-  if (!t || t._skipped) {
-    return fn();
-  }
-
-  const origWrite = process.stdout.write.bind(process.stdout);
-  const chunks = [];
-  process.stdout.write = function (chunk, encoding, cb) {
-    chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : Buffer.from(chunk));
-    if (typeof encoding === 'function') { return origWrite(chunk, encoding); }
-    return origWrite(chunk, encoding, cb);
-  };
-
-  try {
-    const result = await fn();
-    process.stdout.write = origWrite;
-    if (result !== undefined) {
-      t.ok(JSON.stringify(result));
-    } else {
-      const output = Buffer.concat(chunks).toString('utf-8');
-      t.ok(output || null);
-    }
-    return result;
-  } catch (e) {
-    process.stdout.write = origWrite;
-    t.fail(e.message || String(e));
-    throw e;
-  }
-}
-
-module.exports = { trace, run, getDbPath, getTracesDbPath, getOwnSkillVersion };
+        `).run(T,u,u,I)}r.close()},_skipped:false}}async function F(e,t,s={}){const n=process.argv.slice(2).join(" ");const a=x(e,n,s);if(!a||a._skipped){return t()}const o=process.stdout.write.bind(process.stdout);const c=[];process.stdout.write=function(r,l,f){c.push(typeof r==="string"?Buffer.from(r):Buffer.from(r));if(typeof l==="function"){return o(r,l)}return o(r,l,f)};try{const r=await t();process.stdout.write=o;if(r!==void 0){a.ok(JSON.stringify(r))}else{const l=Buffer.concat(c).toString("utf-8");a.ok(l||null)}return r}catch(r){process.stdout.write=o;a.fail(r.message||String(r));throw r}}module.exports={trace:x,run:F,getDbPath:w,getTracesDbPath:C,getOwnSkillVersion:H};

package/crewx-api-credential.ts

@@ -1,134 +0,0 @@
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { getCrewxHome } from '@crewx/sdk';
-
-export type RuntimeCredentialPurpose = 'notify' | 'wi' | 'chromex-negotiate' | 'pairing' | 'app-dev';
-
-export interface ResolvedCredential {
-  token: string;
-  source: 'env' | 'file';
-}
-
-type CrewxCredentialErrorCode = 'MISSING' | 'BAD_MODE' | 'UNREADABLE';
-
-const RUNTIME_CREDENTIAL_PURPOSES = new Set<RuntimeCredentialPurpose>([
-  'notify',
-  'wi',
-  'chromex-negotiate',
-  'pairing',
-  'app-dev',
-]);
-
-// These are sysexits-style values so shell callers can distinguish the local
-// credential failure before an HTTP request is attempted.
-const EXIT_CODES: Record<CrewxCredentialErrorCode, number> = {
-  MISSING: 78,
-  BAD_MODE: 77,
-  UNREADABLE: 74,
-};
-
-const HEX_64 = '[0-9a-f]{64}';
-
-export class CrewxCredentialError extends Error {
-  readonly code: CrewxCredentialErrorCode;
-  readonly exitCode: number;
-
-  constructor(code: CrewxCredentialErrorCode, message: string) {
-    super(message);
-    this.name = 'CrewxCredentialError';
-    this.code = code;
-    this.exitCode = EXIT_CODES[code];
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-}
-
-function isErrnoCode(error: unknown, code: string): boolean {
-  return typeof error === 'object'
-    && error !== null
-    && 'code' in error
-    && (error as { code?: unknown }).code === code;
-}
-
-function credentialPath(purpose: RuntimeCredentialPurpose): string {
-  return path.join(getCrewxHome(), 'auth', 'runtime', `${purpose}.token`);
-}
-
-function invalidPurpose(purpose: RuntimeCredentialPurpose): never {
-  throw new TypeError(`Unsupported runtime credential purpose: ${String(purpose)}`);
-}
-
-function missingCredential(purpose: RuntimeCredentialPurpose, filePath: string): never {
-  throw new CrewxCredentialError(
-    'MISSING',
-    `Runtime credential '${purpose}' is missing at ${filePath}. `
-      + (purpose === 'app-dev'
-        ? 'The running CrewX may be too old or not started; start it once to create the credential.'
-        : 'Run the CrewX server once to create it or set CREWX_API_TOKEN.'),
-  );
-}
-
-function badMode(purpose: RuntimeCredentialPurpose, filePath: string): never {
-  throw new CrewxCredentialError(
-    'BAD_MODE',
-    `Runtime credential '${purpose}' at ${filePath} has insecure permissions; expected mode 0600.`,
-  );
-}
-
-function unreadableCredential(purpose: RuntimeCredentialPurpose, filePath: string): never {
-  throw new CrewxCredentialError(
-    'UNREADABLE',
-    `Runtime credential '${purpose}' at ${filePath} is unreadable or invalid. `
-      + 'Check the file contents and permissions.',
-  );
-}
-
-function readRuntimeCredential(purpose: RuntimeCredentialPurpose): string {
-  const filePath = credentialPath(purpose);
-  let stats: fs.Stats;
-
-  try {
-    // lstat prevents a symlink from bypassing the mode check on POSIX.
-    stats = fs.lstatSync(filePath);
-  } catch (error: unknown) {
-    if (isErrnoCode(error, 'ENOENT')) missingCredential(purpose, filePath);
-    unreadableCredential(purpose, filePath);
-  }
-
-  if (!stats!.isFile()) unreadableCredential(purpose, filePath);
-
-  // Windows does not expose POSIX mode semantics; the server contract skips
-  // this check there as well.
-  if (process.platform !== 'win32' && (stats!.mode & 0o777) !== 0o600) {
-    badMode(purpose, filePath);
-  }
-
-  let token: string;
-  try {
-    token = fs.readFileSync(filePath, 'utf8');
-  } catch (error: unknown) {
-    if (isErrnoCode(error, 'ENOENT')) missingCredential(purpose, filePath);
-    unreadableCredential(purpose, filePath);
-  }
-
-  const expected = new RegExp(`^crewxrt_${purpose}_${HEX_64}$`);
-  if (!expected.test(token!)) unreadableCredential(purpose, filePath);
-  return token!;
-}
-
-export function resolveCrewxApiCredential(
-  purpose: RuntimeCredentialPurpose,
-  env: NodeJS.ProcessEnv = process.env,
-): ResolvedCredential {
-  if (!RUNTIME_CREDENTIAL_PURPOSES.has(purpose)) invalidPurpose(purpose);
-
-  const envToken = env['CREWX_API_TOKEN'];
-  if (typeof envToken === 'string' && envToken.length > 0) {
-    return { token: envToken, source: 'env' };
-  }
-
-  return { token: readRuntimeCredential(purpose), source: 'file' };
-}
-
-export function authorizationHeader(cred: ResolvedCredential): Record<'Authorization', string> {
-  return { Authorization: `Bearer ${cred.token}` };
-}

package/test-tracer.js

@@ -1,54 +0,0 @@
-/**
- * skill-tracer test
- */
-
-const { trace, run, getDbPath } = require('./skill-tracer');
-
-console.log('=== skill-tracer PoC Test ===\n');
-console.log('crewx.db path:', getDbPath());
-
-// Test 1: manual trace() use
-console.log('\n[Test 1] manual trace() use');
-const t = trace('test-skill', 'manual test command', 'test-agent');
-console.log('taskId:', t.taskId);
-console.log('skipped:', t._skipped);
-t.ok('test result');
-console.log('-> done\n');
-
-// Test 2: run() wrapper success
-console.log('[Test 2] run() wrapper - success case');
-run('test-skill', async () => {
-  console.log('-> function running...');
-  return { status: 'success', data: 123 };
-}).then(() => {
-  console.log('-> done\n');
-
-  // Test 3: run() wrapper failure
-  console.log('[Test 3] run() wrapper - failure case');
-  return run('test-skill', async () => {
-    throw new Error('intentional error');
-  }).catch(e => {
-    console.log('-> error captured:', e.message);
-    console.log('-> done\n');
-  });
-}).then(() => {
-  // Verify results
-  console.log('=== crewx.db check ===');
-  const Database = require('better-sqlite3');
-  const db = new Database(getDbPath());
-  const rows = db.prepare(`
-    SELECT id, agent_id, prompt, status, duration_ms
-    FROM tasks
-    WHERE prompt LIKE '%test-skill%'
-    ORDER BY started_at DESC
-    LIMIT 5
-  `).all();
-
-  console.log('\nRecent test-skill records:');
-  rows.forEach(r => {
-    console.log(`  [${r.status}] ${r.prompt.substring(0, 50)}... (${r.duration_ms}ms)`);
-  });
-
-  db.close();
-  console.log('\n=== test complete ===');
-});

package/tests/crewx-api-credential.test.ts

@@ -1,119 +0,0 @@
-// @vitest-environment node
-
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import {
-  authorizationHeader,
-  CrewxCredentialError,
-  resolveCrewxApiCredential,
-} from '../crewx-api-credential';
-
-const VALID_HEX = 'a'.repeat(64);
-
-let tmpHome: string;
-const savedEnv = { ...process.env };
-
-function runtimePath(purpose: string): string {
-  return path.join(tmpHome, 'auth', 'runtime', `${purpose}.token`);
-}
-
-function writeCredential(purpose: string, mode = 0o600, token = `crewxrt_${purpose}_${VALID_HEX}`): void {
-  const file = runtimePath(purpose);
-  fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
-  fs.writeFileSync(file, token, { encoding: 'utf8', mode });
-  fs.chmodSync(file, mode);
-}
-
-beforeEach(() => {
-  tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'crewx-runtime-credential-'));
-  process.env['CREWX_HOME'] = tmpHome;
-  delete process.env['CREWX_API_TOKEN'];
-});
-
-afterEach(() => {
-  process.env = { ...savedEnv };
-  fs.rmSync(tmpHome, { recursive: true, force: true });
-});
-
-describe('resolveCrewxApiCredential', () => {
-  it('resolves a purpose-scoped 0600 runtime credential and builds its Bearer header', () => {
-    writeCredential('notify');
-
-    const credential = resolveCrewxApiCredential('notify');
-
-    expect(credential).toEqual({ token: `crewxrt_notify_${VALID_HEX}`, source: 'file' });
-    expect(authorizationHeader(credential)).toEqual({
-      Authorization: `Bearer crewxrt_notify_${VALID_HEX}`,
-    });
-  });
-
-  it('resolves the pairing runtime credential', () => {
-    writeCredential('pairing');
-
-    expect(resolveCrewxApiCredential('pairing')).toEqual({
-      token: `crewxrt_pairing_${VALID_HEX}`,
-      source: 'file',
-    });
-  });
-
-  it('resolves the app-dev runtime credential', () => {
-    writeCredential('app-dev');
-
-    expect(resolveCrewxApiCredential('app-dev')).toEqual({
-      token: `crewxrt_app-dev_${VALID_HEX}`,
-      source: 'file',
-    });
-  });
-
-  it('prefers CREWX_API_TOKEN without inspecting the runtime credential file', () => {
-    writeCredential('wi', 0o644);
-    process.env['CREWX_API_TOKEN'] = 'env-token';
-
-    expect(resolveCrewxApiCredential('wi')).toEqual({ token: 'env-token', source: 'env' });
-  });
-
-  it('fails with MISSING and a non-zero exit code when the runtime file is absent', () => {
-    expect(() => resolveCrewxApiCredential('notify')).toThrow(CrewxCredentialError);
-
-    try {
-      resolveCrewxApiCredential('notify');
-      throw new Error('expected resolveCrewxApiCredential to throw');
-    } catch (error) {
-      expect(error).toMatchObject({ code: 'MISSING', exitCode: expect.any(Number) });
-      expect((error as Error).message).toContain('notify.token');
-      expect((error as CrewxCredentialError).exitCode).toBe(78);
-    }
-  });
-
-  it('fails with a distinct BAD_MODE error when the runtime file is not 0600', () => {
-    writeCredential('notify', 0o644);
-
-    expect(() => resolveCrewxApiCredential('notify')).toThrow(CrewxCredentialError);
-
-    try {
-      resolveCrewxApiCredential('notify');
-      throw new Error('expected resolveCrewxApiCredential to throw');
-    } catch (error) {
-      expect(error).toMatchObject({ code: 'BAD_MODE', exitCode: expect.any(Number) });
-      expect((error as Error).message).toContain('0600');
-      expect((error as CrewxCredentialError).exitCode).toBe(77);
-    }
-  });
-
-  it('fails with UNREADABLE when the file content does not match the purpose contract', () => {
-    writeCredential('chromex-negotiate', 0o600, 'not-a-runtime-token');
-
-    expect(() => resolveCrewxApiCredential('chromex-negotiate')).toThrow(CrewxCredentialError);
-
-    try {
-      resolveCrewxApiCredential('chromex-negotiate');
-      throw new Error('expected resolveCrewxApiCredential to throw');
-    } catch (error) {
-      expect(error).toMatchObject({ code: 'UNREADABLE', exitCode: expect.any(Number) });
-      expect((error as CrewxCredentialError).exitCode).toBe(74);
-      expect((error as Error).message).not.toContain('not-a-runtime-token');
-    }
-  });
-});

package/tests/skill-tracer.test.ts

@@ -1,224 +0,0 @@
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import path from 'path';
-import fs from 'fs';
-import os from 'os';
-import Database from 'better-sqlite3';
-
-const SPAN_ID_PATTERN = /^spn_[A-Za-z0-9]{8}$/;
-
-function createTracerDb(dbPath: string): void {
-  fs.mkdirSync(path.dirname(dbPath), { recursive: true });
-  const db = new Database(dbPath);
-  db.exec(`
-    CREATE TABLE tasks (
-      id TEXT PRIMARY KEY,
-      agent_id TEXT,
-      prompt TEXT,
-      status TEXT,
-      started_at TEXT
-    );
-    CREATE TABLE spans (
-      id TEXT PRIMARY KEY,
-      task_id TEXT,
-      parent_span_id TEXT,
-      name TEXT NOT NULL,
-      kind TEXT NOT NULL DEFAULT 'internal',
-      status TEXT NOT NULL DEFAULT 'ok',
-      started_at TEXT NOT NULL,
-      completed_at TEXT,
-      duration_ms INTEGER,
-      input TEXT,
-      output TEXT,
-      error TEXT,
-      attributes TEXT
-    );
-  `);
-  db.close();
-}
-
-describe('shared/skill-tracer', () => {
-  const sharedDir = path.resolve(__dirname, '..');
-
-  it('should be requireable from shared package', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    expect(tracer).toBeDefined();
-    expect(typeof tracer.trace).toBe('function');
-    expect(typeof tracer.run).toBe('function');
-    expect(typeof tracer.getDbPath).toBe('function');
-    expect(typeof tracer.getTracesDbPath).toBe('function');
-  });
-
-  it('should have package.json with correct name', () => {
-    const pkg = JSON.parse(fs.readFileSync(path.join(sharedDir, 'package.json'), 'utf-8'));
-    expect(pkg.name).toBe('@crewx/shared');
-    expect(pkg.main).toBe('skill-tracer.js');
-  });
-
-  it('re-export wrapper at skills/lib should work', () => {
-    const wrapperPath = path.resolve(__dirname, '../../../../skills/lib/skill-tracer.js');
-    const tracer = require(wrapperPath);
-    expect(tracer).toBeDefined();
-    expect(typeof tracer.trace).toBe('function');
-    expect(typeof tracer.run).toBe('function');
-  });
-
-  it('getDbPath should default to ~/.crewx/crewx.db', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const dbPath = tracer.getDbPath();
-    expect(dbPath).toContain('.crewx');
-    expect(dbPath).toContain('crewx.db');
-  });
-
-  it('uses @crewx/sdk generateId from CJS when direct traces create spans', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'skill-tracer-'));
-    const dbPath = path.join(tempDir, '.crewx', 'crewx.db');
-    const previousDbPath = process.env.CREWX_DB;
-    const previousTaskId = process.env.CREWX_TASK_ID;
-
-    process.env.CREWX_DB = dbPath;
-    delete process.env.CREWX_TASK_ID;
-    createTracerDb(dbPath);
-
-    try {
-      const trace = tracer.trace('memory', 'index core_sqa');
-      expect(trace._skipped).toBe(false);
-      expect(trace.taskId).toBeNull();
-      expect(trace.spanId).toMatch(SPAN_ID_PATTERN);
-      trace.ok('done');
-    } finally {
-      if (previousDbPath === undefined) {
-        delete process.env.CREWX_DB;
-      } else {
-        process.env.CREWX_DB = previousDbPath;
-      }
-      if (previousTaskId === undefined) {
-        delete process.env.CREWX_TASK_ID;
-      } else {
-        process.env.CREWX_TASK_ID = previousTaskId;
-      }
-      fs.rmSync(tempDir, { recursive: true, force: true });
-    }
-  });
-
-  it('does not create a missing target database and no-ops without throwing', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'skill-tracer-missing-'));
-    const dbPath = path.join(tempDir, 'nested', 'crewx.db');
-    const previousDbPath = process.env.CREWX_DB;
-    const previousTaskId = process.env.CREWX_TASK_ID;
-
-    process.env.CREWX_DB = dbPath;
-    delete process.env.CREWX_TASK_ID;
-
-    try {
-      expect(() => {
-        const trace = tracer.trace('memory', 'index core_sqa');
-        expect(trace._skipped).toBe(true);
-        trace.ok('ignored');
-      }).not.toThrow();
-      expect(fs.existsSync(dbPath)).toBe(false);
-      expect(fs.existsSync(path.dirname(dbPath))).toBe(false);
-    } finally {
-      if (previousDbPath === undefined) {
-        delete process.env.CREWX_DB;
-      } else {
-        process.env.CREWX_DB = previousDbPath;
-      }
-      if (previousTaskId === undefined) {
-        delete process.env.CREWX_TASK_ID;
-      } else {
-        process.env.CREWX_TASK_ID = previousTaskId;
-      }
-      fs.rmSync(tempDir, { recursive: true, force: true });
-    }
-  });
-});
-
-describe('shared/skill-tracer output capture', () => {
-  const sharedDir = path.resolve(__dirname, '..');
-  let tempDir: string;
-  let dbPath: string;
-  let prevDb: string | undefined;
-  let prevTaskId: string | undefined;
-
-  beforeEach(() => {
-    tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'tracer-output-'));
-    dbPath = path.join(tempDir, 'crewx.db');
-    prevDb = process.env.CREWX_DB;
-    prevTaskId = process.env.CREWX_TASK_ID;
-    process.env.CREWX_DB = dbPath;
-    delete process.env.CREWX_TASK_ID;
-    createTracerDb(dbPath);
-  });
-
-  afterEach(() => {
-    if (prevDb === undefined) delete process.env.CREWX_DB;
-    else process.env.CREWX_DB = prevDb;
-    if (prevTaskId === undefined) delete process.env.CREWX_TASK_ID;
-    else process.env.CREWX_TASK_ID = prevTaskId;
-    fs.rmSync(tempDir, { recursive: true, force: true });
-  });
-
-  it('ok() captures output and stores in span', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const t = tracer.trace('test', 'cmd');
-    t.ok('hello output');
-    const db = new Database(dbPath);
-    const row = db.prepare('SELECT output FROM spans ORDER BY started_at DESC LIMIT 1').get() as any;
-    db.close();
-    expect(row.output).toBe('hello output');
-  });
-
-  it('ok() truncates output > 32KB with head/tail pattern', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const bigOutput = 'A'.repeat(40000);
-    const t = tracer.trace('test', 'cmd');
-    t.ok(bigOutput);
-    const db = new Database(dbPath);
-    const row = db.prepare('SELECT output, attributes FROM spans ORDER BY started_at DESC LIMIT 1').get() as any;
-    db.close();
-    const attrs = JSON.parse(row.attributes);
-    expect(attrs.output_truncated).toBe(true);
-    expect(attrs.output_bytes_original).toBe(40000);
-    expect(row.output).toContain('[omitted=');
-    expect(row.output.length).toBeLessThan(40000);
-  });
-
-  it('ok() captures stderr in attributes', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const t = tracer.trace('test', 'cmd');
-    t.ok('main output', { stderr: 'some error output' });
-    const db = new Database(dbPath);
-    const row = db.prepare('SELECT output, attributes FROM spans ORDER BY started_at DESC LIMIT 1').get() as any;
-    db.close();
-    expect(row.output).toBe('main output');
-    const attrs = JSON.parse(row.attributes);
-    expect(attrs.stderr).toBe('some error output');
-  });
-
-  it('ok() truncates large stderr', () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    const bigStderr = 'E'.repeat(40000);
-    const t = tracer.trace('test', 'cmd');
-    t.ok('output', { stderr: bigStderr });
-    const db = new Database(dbPath);
-    const row = db.prepare('SELECT attributes FROM spans ORDER BY started_at DESC LIMIT 1').get() as any;
-    db.close();
-    const attrs = JSON.parse(row.attributes);
-    expect(attrs.stderr_truncated).toBe(true);
-    expect(attrs.stderr_bytes_original).toBe(40000);
-    expect(attrs.stderr).toContain('[omitted=');
-  });
-
-  it('run() captures stdout when fn returns void', async () => {
-    const tracer = require(path.join(sharedDir, 'skill-tracer.js'));
-    await tracer.run('test-skill', async () => {
-      process.stdout.write('captured via run\n');
-    });
-    const db = new Database(dbPath);
-    const row = db.prepare('SELECT output FROM spans ORDER BY started_at DESC LIMIT 1').get() as any;
-    db.close();
-    expect(row.output).toBe('captured via run\n');
-  });
-});

package/tsconfig.json

@@ -1,18 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "CommonJS",
-    "moduleResolution": "node",
-    "rootDir": ".",
-    "outDir": ".",
-    "declaration": true,
-    "declarationMap": false,
-    "sourceMap": false,
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
-  },
-  "include": ["crewx-api-credential.ts"],
-  "exclude": ["node_modules", "tests"]
-}