@deftai/directive-core 0.80.0 → 0.82.0

package/dist/verify-source/skill-external-fetch-gate.js

@@ -0,0 +1,71 @@
+/**
+ * skill-external-fetch-gate.ts -- deterministic gate for fetch-then-execute skill prose (#1936 / #1532).
+ *
+ * Production entry for collectExternalFetchViolations: wired into
+ * `task verify:skill-external-fetch-gate` and `check:framework-source`.
+ *
+ * Exit codes (three-state):
+ *   0 -- clean: every shipped skill with external-fetch language has Security context mitigation.
+ *   1 -- drift: one or more skills pair fetch/follow-through with execute/install without mitigation.
+ *   2 -- config error: skills directory missing or unreadable.
+ */
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { listSkillMdEntriesFromRoot, listSkillMdFilesFromRoot, resolveContentPathFromRoot, } from "../content-contracts/skills/helpers.js";
+import { collectExternalFetchViolations } from "../content-contracts/skills/skill-external-fetch-gate.js";
+const EXIT_OK = 0;
+const EXIT_DRIFT = 1;
+const EXIT_CONFIG_ERROR = 2;
+function resolveSkillsRoot(projectRoot) {
+    const resolved = resolveContentPathFromRoot(resolve(projectRoot), "skills");
+    return existsSync(resolved) ? resolved : null;
+}
+/**
+ * Evaluate the skill external-fetch gate for a framework-source or consumer tree.
+ */
+export function evaluateSkillExternalFetchGate(projectRoot) {
+    const root = resolve(projectRoot);
+    const skillsRoot = resolveSkillsRoot(root);
+    if (skillsRoot === null) {
+        return {
+            code: EXIT_CONFIG_ERROR,
+            message: `skill external-fetch gate: skills directory not found under ${root}`,
+            stream: "stderr",
+        };
+    }
+    let entries;
+    try {
+        const skillPaths = listSkillMdFilesFromRoot(root);
+        if (skillPaths.length === 0) {
+            return {
+                code: EXIT_DRIFT,
+                message: `FAIL: skill external-fetch gate found no SKILL.md files under ${skillsRoot}`,
+                stream: "stderr",
+            };
+        }
+        entries = listSkillMdEntriesFromRoot(root);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            code: EXIT_CONFIG_ERROR,
+            message: `skill external-fetch gate: failed to read skills under ${skillsRoot}: ${msg}`,
+            stream: "stderr",
+        };
+    }
+    const violations = collectExternalFetchViolations(entries);
+    if (violations.length > 0) {
+        const sanitize = (value) => value.replace(/\r?\n/g, " ");
+        const lines = [
+            `FAIL: skill external-fetch gate detected ${violations.length} violation(s):`,
+            ...violations.map((v) => `  - ${sanitize(v.skillPath)}: ${sanitize(v.detail)}`),
+        ];
+        return { code: EXIT_DRIFT, message: lines.join("\n"), stream: "stderr" };
+    }
+    return {
+        code: EXIT_OK,
+        message: `OK: skill external-fetch gate clean -- ${entries.length} skill(s) scanned (root=${root.replace(/\r?\n/g, " ")}).`,
+        stream: "stdout",
+    };
+}
+//# sourceMappingURL=skill-external-fetch-gate.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-core",
-  "version": "0.80.0",
+  "version": "0.82.0",
   "description": "TypeScript engine core for the Directive framework.",
   "type": "module",
   "main": "./dist/index.js",
@@ -30,6 +30,10 @@
       "types": "./dist/wip-cap/index.d.ts",
       "default": "./dist/wip-cap/index.js"
     },
+    "./orphan-active": {
+      "types": "./dist/orphan-active/index.d.ts",
+      "default": "./dist/orphan-active/index.js"
+    },
     "./agents-md-budget": {
       "types": "./dist/agents-md-budget/index.d.ts",
       "default": "./dist/agents-md-budget/index.js"
@@ -309,8 +313,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-content": "^0.80.0",
-    "@deftai/directive-types": "^0.80.0",
+    "@deftai/directive-content": "^0.82.0",
+    "@deftai/directive-types": "^0.82.0",
     "archiver": "^8.0.0"
   },
   "scripts": {