@datename/fastcode-termux 0.1.6-beta → 0.1.8-beta.0

package/src/skills/manager.ts

@@ -5,21 +5,127 @@
  * a SKILL.md file plus optional resource files. FastCode supports three
  * install sources:
  *
- *   1. skills.sh / skillshub.wtf API (default registry)
- *      `/skills install pdf`               → resolves via the registry
- *      `/skills install owner/repo/skill`  → fetches raw SKILL.md
- *   2. Direct https URLs ending in SKILL.md.
+ *   1. A registry configured via FASTCODE_SKILLS_REGISTRY or skillsRegistry
+ *      `/skills install pdf`               → resolves via the configured registry
+ *      `/skills install owner/repo/skill`  → fetches raw SKILL.md from the registry
+ *   2. Direct https URLs ending in SKILL.md (no registry required).
  *   3. Local paths (just symlinks into ~/.fastcode/skills/).
  *
  * Installed skills can be enabled per-session and are then stitched into
  * the system prompt at chat time, exactly like Claude does internally.
  */
+import { createHash } from "node:crypto";
 import { readFileSync, writeFileSync, existsSync, readdirSync, rmSync, mkdirSync, } from "node:fs";
 import { join } from "node:path";
 import { getPaths } from "../config/paths.js";
+import { invalidateConfigCache } from "../config/store.js";
 import { fetchJson } from "../lib/http.js";
 import { parseSkill } from "./parser.js";
-const DEFAULT_REGISTRY = "https://skillshub.wtf";
+const SOURCE_FILE = ".fastcode-source";
+const INTEGRITY_VERSION = 1;
+
+export type SkillIntegrity = "ok" | "drift" | "unverified";
+
+const REGISTRY_REQUIRED = "No skills registry configured. Set one with `/skills registry <url>` or FASTCODE_SKILLS_REGISTRY.";
+
+/**
+ * Pick the skills registry without treating an empty environment variable as
+ * "configured". `??` would keep `""` and make env overrides silently break;
+ * explicit null/empty checks keep `""` and `" "` on the config path. There is
+ * intentionally no built-in default registry.
+ */
+export function resolveRegistry(envValue?: string | null, configValue?: string | null): string {
+    const env = typeof envValue === "string" && envValue.trim() ? envValue.trim() : "";
+    const configured = typeof configValue === "string" && configValue.trim() ? configValue.trim() : "";
+    return (env || configured).replace(/\/+$/, "");
+}
+
+function requireRegistry(registry: string): string {
+    if (!registry)
+        throw new Error(REGISTRY_REQUIRED);
+    return registry;
+}
+export function hashSkillDirectory(folder: string): string {
+    const entries = skillFiles(folder).sort();
+    return createHash("sha256").update(entries.join("\n")).digest("hex");
+}
+function skillFiles(folder: string, prefix = ""): string[] {
+    const out: string[] = [];
+    let items;
+    try {
+        items = readdirSync(folder, { withFileTypes: true });
+    }
+    catch {
+        return out;
+    }
+    for (const item of items) {
+        if (item.name === SOURCE_FILE)
+            continue;
+        const full = join(folder, item.name);
+        const rel = prefix ? prefix + "/" + item.name : item.name;
+        if (item.isDirectory()) {
+            out.push(...skillFiles(full, rel));
+            continue;
+        }
+        if (!item.isFile())
+            continue;
+        const digest = createHash("sha256").update(readFileSync(full)).digest("hex");
+        out.push(rel + "\0" + digest);
+    }
+    return out;
+}
+function readSourceMeta(folder: string): { source: string; sha256?: string; legacy: boolean } {
+    const sourcePath = join(folder, SOURCE_FILE);
+    if (!existsSync(sourcePath))
+        return { source: "local", legacy: true };
+    const raw = readFileSync(sourcePath, "utf8").trim();
+    if (raw.startsWith("{")) {
+        try {
+            const parsed = JSON.parse(raw);
+            return {
+                source: typeof parsed.source === "string" ? parsed.source : "local",
+                sha256: typeof parsed.sha256 === "string" ? parsed.sha256 : undefined,
+                legacy: typeof parsed.sha256 !== "string",
+            };
+        }
+        catch {
+            // Fall through and treat the file as a legacy plain-text source.
+        }
+    }
+    return { source: raw || "local", legacy: true };
+}
+function writeSourceMeta(folder: string, source: string): string {
+    const sha256 = hashSkillDirectory(folder);
+    const payload = {
+        version: INTEGRITY_VERSION,
+        algorithm: "sha256",
+        source,
+        sha256,
+    };
+    writeFileSync(join(folder, SOURCE_FILE), JSON.stringify(payload, null, 2));
+    return sha256;
+}
+export function rebaselineSkills(names?: string[]): Array<{ name: string; ok: boolean; warning?: string }> {
+    const installed = listInstalledSkills();
+    const wanted = names && names.length > 0 ? new Set(names) : undefined;
+    const results: Array<{ name: string; ok: boolean; warning?: string }> = [];
+    let changed = false;
+    for (const skill of installed) {
+        if (wanted && !wanted.has(skill.name) && !wanted.has(basename(skill.path)))
+            continue;
+        try {
+            writeSourceMeta(skill.path, skill.source === "local" ? "local" : skill.source);
+            results.push({ name: skill.name, ok: true });
+            changed = true;
+        }
+        catch (err: any) {
+            results.push({ name: skill.name, ok: false, warning: err?.message ?? String(err) });
+        }
+    }
+    if (changed)
+        invalidateConfigCache();
+    return results;
+}
 /** List skills currently installed under ~/.fastcode/skills. */
 export function listInstalledSkills() {
     const { skills } = getPaths();
@@ -35,16 +141,20 @@ export function listInstalledSkills() {
             continue;
         const raw = readFileSync(md, "utf8");
         const parsed = parseSkill(raw, dir.name);
-        const sourcePath = join(folder, ".fastcode-source");
-        const source = existsSync(sourcePath)
-            ? readFileSync(sourcePath, "utf8").trim()
-            : "local";
+        const meta = readSourceMeta(folder);
+        const actualHash = hashSkillDirectory(folder);
+        const integrity: SkillIntegrity = !meta.sha256
+            ? "unverified"
+            : actualHash === meta.sha256 ? "ok" : "drift";
         out.push({
             name: parsed.name || dir.name,
             description: parsed.description,
-            source,
+            source: meta.source,
             path: folder,
             body: parsed.body,
+            integrity,
+            sha256: actualHash,
+            lockedHash: meta.sha256,
         });
     }
     return out.sort((a, b) => a.name.localeCompare(b.name));
@@ -56,7 +166,7 @@ export function getSkill(name) {
 /** Install a skill. Returns the parsed manifest on success. */
 export async function installSkill(spec, opts: any = {}) {
     const { skills } = getPaths();
-    const registry = (opts.registry ?? DEFAULT_REGISTRY).replace(/\/+$/, "");
+    const registry = resolveRegistry(process.env["FASTCODE_SKILLS_REGISTRY"], opts.registry);
     let parsed;
     let source;
     let folderName;
@@ -68,7 +178,8 @@ export async function installSkill(spec, opts: any = {}) {
     }
     else if (looksLikeRepoPath(spec)) {
         // owner/repo or owner/repo/skill — fetch via registry's raw endpoint.
-        const url = `${registry}/${spec}?format=md`;
+        const base = requireRegistry(registry);
+        const url = `${base}/${spec}?format=md`;
         const body = await fetchText(url);
         parsed = parseSkill(body, parts(spec).pop() ?? spec);
         source = url;
@@ -76,11 +187,12 @@ export async function installSkill(spec, opts: any = {}) {
     }
     else {
         // Single-token name → search the registry.
-        const hits = await searchRegistry(spec, registry);
+        const base = requireRegistry(registry);
+        const hits = await searchRegistry(spec, base);
         const hit = hits[0];
         if (!hit)
-            throw new Error(`No skill found for "${spec}" in ${registry}`);
-        const url = hit.fetchUrl ?? `${registry}/${hit.slug}?format=md`;
+            throw new Error(`No skill found for "${spec}" in ${base}`);
+        const url = hit.fetchUrl ?? `${base}/${hit.slug}?format=md`;
         const body = await fetchText(url);
         parsed = parseSkill(body, hit.name);
         source = url;
@@ -94,13 +206,14 @@ export async function installSkill(spec, opts: any = {}) {
         rmSync(targetDir, { recursive: true, force: true });
     mkdirSync(targetDir, { recursive: true });
     writeFileSync(join(targetDir, "SKILL.md"), reassemble(parsed));
-    writeFileSync(join(targetDir, ".fastcode-source"), source);
+    writeSourceMeta(targetDir, source);
     return {
         name: parsed.name || folderName,
         description: parsed.description,
         source,
         path: targetDir,
         body: parsed.body,
+        integrity: "ok" as SkillIntegrity,
     };
 }
 /** Remove an installed skill by name or folder. */
@@ -125,8 +238,10 @@ export function uninstallSkill(name) {
     return false;
 }
 /** Search the registry for skills matching a query. */
-export async function searchRegistry(query, registry = DEFAULT_REGISTRY) {
-    const base = registry.replace(/\/+$/, "");
+export async function searchRegistry(query, registry?: string) {
+    const base = resolveRegistry(process.env["FASTCODE_SKILLS_REGISTRY"], registry);
+    if (!base)
+        return [];
     try {
         const json = await fetchJson(`${base}/api/v1/skills/search?q=${encodeURIComponent(query)}`);
         return json.data ?? [];
@@ -145,6 +260,13 @@ export function buildSkillsPrompt(enabled) {
         const skill = installed.find((s) => s.name === name || basename(s.path) === name);
         if (!skill)
             continue;
+        if (skill.integrity !== "ok") {
+            const reason = skill.integrity === "drift"
+                ? "content drift detected"
+                : "no integrity baseline (legacy install)";
+            process.stderr.write(`skill ${skill.name} ${reason}; disabled. Run /skills verify ${skill.name} --confirm to re-baseline.\n`);
+            continue;
+        }
         chunks.push(`<skill name="${skill.name}">\n${skill.body.trim()}\n</skill>`);
     }
     if (chunks.length === 0)

package/src/types/highlight-shims.d.ts

@@ -0,0 +1,14 @@
+declare module "bash-parser" {
+    const parse: (code: string, options?: any) => any;
+    export default parse;
+}
+
+declare module "highlight.js/lib/core.js" {
+    const hljs: any;
+    export default hljs;
+}
+
+declare module "highlight.js/lib/languages/*.js" {
+    const language: any;
+    export default language;
+}

package/src/types.ts

@@ -124,6 +124,16 @@ export interface SlashCommand {
     /** Execute the command. Return text to render, or undefined for no output. */
     run(ctx: CommandContext): Promise<CommandResult> | CommandResult;
 }
+export interface CommandCompaction {
+    summaryRef?: string;
+    source: "local" | "server" | "none";
+    beforeTokens: number;
+    afterTokens: number;
+    droppedMessages: number;
+    keepMessages: number;
+    reason?: "threshold" | "heap" | "manual";
+}
+
 export interface CommandResult {
     /** Text rendered as a system message in the transcript. */
     message?: string;
@@ -133,6 +143,10 @@ export interface CommandResult {
     quit?: boolean;
     /** Open an interactive picker after the command runs. */
     picker?: PickerRequest;
+    /** Manual /compact result; the app appends the matching compacted fact. */
+    compacted?: CommandCompaction;
+    /** /clear result; the app appends a cleared fact so resume does not resurrect history. */
+    cleared?: boolean;
 }
 export interface CommandContext {
     args: string[];
@@ -166,6 +180,7 @@ export interface AppActions {
     setSystemPrompt(prompt: string): void;
     setSkillsRegistry(url: string): void;
     setReasoningEffort(effort: ReasoningEffort): void;
+    setShellPoolSize(size: number): void;
     enableSkill(name: string): void;
     disableSkill(name: string): void;
     enablePlugin(name: string): void;
@@ -178,7 +193,7 @@ export interface AppActions {
     setInput(text: string): void;
     pushSystemMessage(text: string): void;
     /** Begin the guided API-key flow (choose provider → model → key). */
-    startLogin(options: { provider?: string; model?: string }): void;
+    startLogin(options: { provider?: string; model?: string; flow?: "provider" | "model" | "login" }): void;
 }
 export interface SkillManifest {
     name: string;

package/src/ui/StatusBar.ts

@@ -9,7 +9,7 @@ export const StatusBar = ({ theme, providerId, model, inputTokens, outputTokens,
     const providerModel = `${providerId}/${model}`;
     const label = compact ? truncate(providerModel, Math.max(18, columns - 28)) : providerModel;
     const effort = reasoningEffort && reasoningEffort !== "auto" ? `effort:${reasoningEffort}` : "";
-    return (_jsxs(Box, { flexDirection: compact ? "column" : "row", justifyContent: "space-between", borderStyle: "round", borderColor: theme.border, paddingX: 1, children: [_jsxs(Text, { color: theme.muted, children: [_jsx(Text, { color: theme.accent, children: "\u25CF" }), " ", label, _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), inputTokens, "\u2191 ", outputTokens, "\u2193 ", cost, effort ? (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "  \u00B7  " }), effort] })) : null, !compact ? (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "  \u00B7  " }), "skills: ", enabledSkillCount, _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), platformLabel()] })) : null] }), _jsx(Text, { color: theme.muted, children: compact
+    return (_jsxs(Box, { flexDirection: compact ? "column" : "row", justifyContent: "space-between", borderStyle: "round", borderColor: theme.border, paddingX: 1, children: [_jsxs(Text, { color: theme.muted, children: [_jsx(Text, { color: theme.accent, children: "\u25CF" }), " ", label, _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), inputTokens, "\u2191 ", outputTokens, "\u2193 ", cost, !compact && effort ? (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "  \u00B7  " }), effort] })) : null, !compact ? (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "  \u00B7  " }), "skills: ", enabledSkillCount, _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), platformLabel()] })) : null] }), _jsx(Text, { color: theme.muted, children: compact
                     ? `${effort ? effort + " \u00B7 " : ""}${platformLabel()} \u00B7 skills:${enabledSkillCount} \u00B7 ${hint ?? "/help \u00B7 esc \u00B7 ctrl+c"}`
                     : hint ?? "/help \u00B7 esc cancel \u00B7 ctrl+c quit" })] }));
 };

package/tsconfig.json

@@ -6,6 +6,7 @@
     "lib": ["ES2023"],
     "rootDir": "src",
     "outDir": "dist",
+    "noEmit": true,
     "declaration": true,
     "sourceMap": false,
     "removeComments": false,