@elizaos/agent 2.0.0-beta.2 → 2.0.11-beta.5

package/packages/agent/src/services/shell-execution-router.d.ts

@@ -1,67 +0,0 @@
-/**
- * Single chokepoint for shell execution.
- *
- * The runtime has a 3-mode switch via `ELIZA_RUNTIME_MODE`:
- *  - `cloud`        — agent code runs in the hosted backend; local exec is
- *                     refused with a clear error.
- *  - `local-safe`   — every shell exec is routed through `SandboxManager`
- *                     (Docker / Apple Container) so the host filesystem is
- *                     not directly touched.
- *  - `local-yolo`   — direct host exec (the historical default).
- *
- * Plugins, services, and CLI helpers that previously called `child_process.spawn`
- * for one-shot command execution should call `runShell()` instead. This keeps
- * the mode dispatch in one place and lets the privacy/sandbox guarantees of
- * `local-safe` actually hold.
- */
-import { type RuntimeExecutionMode } from "@elizaos/shared";
-import type { SandboxManager } from "./sandbox-manager.ts";
-export type ShellExecutionMode = RuntimeExecutionMode;
-export type ShellSandboxBackend = "host" | "docker" | "apple-container" | "wsl2" | "appcontainer" | "none";
-export interface ShellRequest {
-    command: string;
-    args: readonly string[];
-    cwd?: string;
-    env?: Record<string, string>;
-    timeoutMs?: number;
-    /** Caller identity for audit trails. Required so logs are traceable. */
-    toolName: string;
-}
-export interface ShellResult {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-    durationMs: number;
-    sandbox: ShellSandboxBackend;
-}
-export interface ShellRouterContext {
-    /** Explicit override for the active mode. When unset, env vars are read. */
-    mode?: ShellExecutionMode;
-    /** Runtime-style settings source consulted before falling back to env. */
-    runtime?: {
-        getSetting?: (key: string) => unknown;
-    } | null;
-    /** Optional pre-resolved sandbox manager (used by tests + agent code paths). */
-    sandboxManager?: SandboxManager | null;
-    /**
-     * Lazy provider for SandboxManager. Awaited only when local-safe is active,
-     * so callers in local-yolo mode never pay for sandbox-engine imports.
-     */
-    resolveSandboxManager?: () => Promise<SandboxManager | null>;
-}
-export declare function resolveShellExecutionMode(ctx?: Pick<ShellRouterContext, "mode" | "runtime"> | null): ShellExecutionMode;
-/** Test-only escape hatch — drops the cached router broker. */
-export declare function __resetShellRouterBrokerForTests(): void;
-/**
- * Single entry point for one-shot shell execution. Mode dispatch:
- *   - `cloud`      → throws.
- *   - `local-safe` → routed through SandboxManager.run; if no manager is
- *                    available the call throws so callers cannot silently
- *                    fall back to the host.
- *   - `local-yolo` → direct host exec via child_process.spawn.
- *
- * On Windows, `local-safe` currently throws because no Windows sandbox
- * backend is wired up yet; callers must opt in to `local-yolo` explicitly.
- */
-export declare function runShell(req: ShellRequest, ctx?: ShellRouterContext | null): Promise<ShellResult>;
-//# sourceMappingURL=shell-execution-router.d.ts.map

package/packages/agent/src/services/shell-execution-router.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell-execution-router.d.ts","sourceRoot":"","sources":["../../../../../src/services/shell-execution-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,QAAQ,GACR,iBAAiB,GACjB,MAAM,GACN,cAAc,GACd,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,gFAAgF;IAChF,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC9D;AAED,wBAAgB,yBAAyB,CACvC,GAAG,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,GACxD,kBAAkB,CAGpB;AA8CD,+DAA+D;AAC/D,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AA2GD;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,YAAY,EACjB,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAC9B,OAAO,CAAC,WAAW,CAAC,CAgCtB"}

package/packages/agent/src/services/shell-execution-router.js

@@ -1,201 +0,0 @@
-/**
- * Single chokepoint for shell execution.
- *
- * The runtime has a 3-mode switch via `ELIZA_RUNTIME_MODE`:
- *  - `cloud`        — agent code runs in the hosted backend; local exec is
- *                     refused with a clear error.
- *  - `local-safe`   — every shell exec is routed through `SandboxManager`
- *                     (Docker / Apple Container) so the host filesystem is
- *                     not directly touched.
- *  - `local-yolo`   — direct host exec (the historical default).
- *
- * Plugins, services, and CLI helpers that previously called `child_process.spawn`
- * for one-shot command execution should call `runShell()` instead. This keeps
- * the mode dispatch in one place and lets the privacy/sandbox guarantees of
- * `local-safe` actually hold.
- */
-import { spawn } from "node:child_process";
-import process from "node:process";
-import { resolveRuntimeExecutionMode, } from "@elizaos/shared";
-import { CapabilityBroker } from "./capability-broker.js";
-export function resolveShellExecutionMode(ctx) {
-    if (ctx?.mode)
-        return ctx.mode;
-    return resolveRuntimeExecutionMode(ctx?.runtime ?? null);
-}
-function backendForSandboxManager(manager) {
-    // SandboxManager keeps its engine private; reach in only to label the
-    // backend in ShellResult. If the shape ever changes, the fallback is the
-    // safe "none" value and callers still see a well-formed result.
-    const engine = manager
-        .engine;
-    const engineType = engine?.engineType;
-    if (engineType === "docker")
-        return "docker";
-    if (engineType === "apple-container")
-        return "apple-container";
-    return "none";
-}
-async function resolveSandboxManager(ctx) {
-    if (ctx?.sandboxManager !== undefined)
-        return ctx.sandboxManager;
-    if (ctx?.resolveSandboxManager)
-        return await ctx.resolveSandboxManager();
-    return null;
-}
-// Router-scoped broker so the shell.exec policy is driven by the same mode
-// resolver runShell uses for dispatch. The broker singleton in
-// capability-broker.ts hardcodes `local-safe` as its default mode, which is
-// correct for cloud-side callers but wrong for host-side runShell — those
-// must follow ELIZA_RUNTIME_MODE/RUNTIME_MODE/LOCAL_RUNTIME_MODE. The
-// internal mutable holder lets the broker re-read mode on every call without
-// constructing a new CapabilityBroker per runShell invocation.
-const routerModeHolder = {
-    current: "local-yolo",
-};
-let cachedRouterBroker = null;
-function getRouterBroker(modeSource) {
-    routerModeHolder.current = modeSource();
-    if (cachedRouterBroker)
-        return cachedRouterBroker;
-    cachedRouterBroker = new CapabilityBroker({
-        mode: () => routerModeHolder.current,
-    });
-    return cachedRouterBroker;
-}
-/** Test-only escape hatch — drops the cached router broker. */
-export function __resetShellRouterBrokerForTests() {
-    cachedRouterBroker = null;
-    routerModeHolder.current = "local-yolo";
-}
-async function runOnHost(req) {
-    const start = Date.now();
-    return await new Promise((resolve) => {
-        const timeoutMs = req.timeoutMs ?? 30_000;
-        const useDetachedProcessGroup = process.platform !== "win32";
-        const child = spawn(req.command, req.args.slice(), {
-            cwd: req.cwd,
-            env: req.env ? { ...process.env, ...req.env } : process.env,
-            detached: useDetachedProcessGroup,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        let stdout = "";
-        let stderr = "";
-        let timedOut = false;
-        const killChildTree = () => {
-            try {
-                if (useDetachedProcessGroup && child.pid !== undefined) {
-                    process.kill(-child.pid, "SIGKILL");
-                    return;
-                }
-            }
-            catch {
-                // Fall back to killing the direct child below.
-            }
-            try {
-                child.kill("SIGKILL");
-            }
-            catch {
-                // child may already have exited
-            }
-        };
-        const timer = setTimeout(() => {
-            timedOut = true;
-            killChildTree();
-        }, timeoutMs);
-        if (typeof timer.unref === "function")
-            timer.unref();
-        child.stdout?.on("data", (chunk) => {
-            stdout += chunk.toString("utf8");
-        });
-        child.stderr?.on("data", (chunk) => {
-            stderr += chunk.toString("utf8");
-        });
-        child.on("error", (err) => {
-            clearTimeout(timer);
-            resolve({
-                exitCode: -1,
-                stdout,
-                stderr: stderr.length > 0 ? `${stderr}\n${err.message}` : err.message,
-                durationMs: Date.now() - start,
-                sandbox: "host",
-            });
-        });
-        child.on("close", (code) => {
-            clearTimeout(timer);
-            const exitCode = timedOut ? 124 : (code ?? -1);
-            resolve({
-                exitCode,
-                stdout,
-                stderr: timedOut
-                    ? `${stderr}${stderr.endsWith("\n") || stderr.length === 0 ? "" : "\n"}[shell-router] command timed out after ${timeoutMs}ms`
-                    : stderr,
-                durationMs: Date.now() - start,
-                sandbox: "host",
-            });
-        });
-    });
-}
-async function runInSandbox(req, manager) {
-    const result = await manager.run({
-        cmd: req.command,
-        args: req.args,
-        workdir: req.cwd,
-        env: req.env,
-        timeoutMs: req.timeoutMs,
-    });
-    return {
-        exitCode: result.exitCode,
-        stdout: result.stdout,
-        stderr: result.stderr,
-        durationMs: result.durationMs,
-        sandbox: backendForSandboxManager(manager),
-    };
-}
-function assertShellCapability(req, mode, toolName) {
-    const decision = getRouterBroker(() => mode).check({
-        kind: "shell",
-        op: "exec",
-        target: req.command,
-        toolName,
-    });
-    if (decision.allowed !== true) {
-        throw new Error(`[shell] capability denied: ${decision.reason}`);
-    }
-}
-/**
- * Single entry point for one-shot shell execution. Mode dispatch:
- *   - `cloud`      → throws.
- *   - `local-safe` → routed through SandboxManager.run; if no manager is
- *                    available the call throws so callers cannot silently
- *                    fall back to the host.
- *   - `local-yolo` → direct host exec via child_process.spawn.
- *
- * On Windows, `local-safe` currently throws because no Windows sandbox
- * backend is wired up yet; callers must opt in to `local-yolo` explicitly.
- */
-export async function runShell(req, ctx) {
-    if (!req.command || req.command.length === 0) {
-        throw new Error("[shell-router] runShell requires a non-empty command");
-    }
-    if (!req.toolName || req.toolName.length === 0) {
-        throw new Error("[shell-router] runShell requires toolName for audit");
-    }
-    const mode = resolveShellExecutionMode(ctx);
-    if (mode === "cloud") {
-        throw new Error("Local shell execution disabled in cloud mode.");
-    }
-    if (mode === "local-safe") {
-        assertShellCapability(req, mode, `sandbox.${req.toolName}`);
-        if (process.platform === "win32") {
-            throw new Error("[shell-router] Windows local-safe sandbox not yet implemented");
-        }
-        const manager = await resolveSandboxManager(ctx);
-        if (!manager) {
-            throw new Error("[shell-router] local-safe mode requires SandboxManager but none is available");
-        }
-        return await runInSandbox(req, manager);
-    }
-    assertShellCapability(req, mode, req.toolName);
-    return await runOnHost(req);
-}

package/packages/agent/src/services/signing-policy.d.ts

@@ -1,44 +0,0 @@
-/**
- * Transaction signing policy engine.
- * Evaluates requests against chain/contract/value/rate/method/replay rules.
- */
-export interface SigningPolicy {
-    allowedChainIds: number[];
-    allowedContracts: string[];
-    deniedContracts: string[];
-    maxTransactionValueWei: string;
-    maxTransactionsPerHour: number;
-    maxTransactionsPerDay: number;
-    allowedMethodSelectors: string[];
-    humanConfirmationThresholdWei: string;
-    requireHumanConfirmation: boolean;
-}
-export interface SigningRequest {
-    requestId: string;
-    chainId: number;
-    to: string;
-    value: string;
-    data: string;
-    nonce?: number;
-    gasLimit?: string;
-    createdAt: number;
-}
-export type PolicyDecision = {
-    allowed: boolean;
-    reason: string;
-    requiresHumanConfirmation: boolean;
-    matchedRule: string;
-};
-export declare function createDefaultPolicy(): SigningPolicy;
-export declare class SigningPolicyEvaluator {
-    private policy;
-    private requestLog;
-    private processedRequestIds;
-    constructor(policy?: SigningPolicy);
-    updatePolicy(policy: SigningPolicy): void;
-    getPolicy(): SigningPolicy;
-    evaluate(request: SigningRequest): PolicyDecision;
-    /** Record after signing completes (for replay + rate tracking). */
-    recordRequest(requestId: string): void;
-}
-//# sourceMappingURL=signing-policy.d.ts.map

package/packages/agent/src/services/signing-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signing-policy.d.ts","sourceRoot":"","sources":["../../../../../src/services/signing-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,6BAA6B,EAAE,MAAM,CAAC;IACtC,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,EAAE,OAAO,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,wBAAgB,mBAAmB,IAAI,aAAa,CAYnD;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,UAAU,CAAuD;IACzE,OAAO,CAAC,mBAAmB,CAAqB;gBAEpC,MAAM,CAAC,EAAE,aAAa;IAIlC,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAIzC,SAAS,IAAI,aAAa;IAI1B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc;IAsJjD,mEAAmE;IACnE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAYvC"}

package/packages/agent/src/services/skill-catalog-client.d.ts

@@ -1,47 +0,0 @@
-/**
- * Skill Catalog Client for Eliza.
- *
- * Provides a cached skill catalog (memory -> file) sourced from the
- * local skills/.cache/catalog.json. Supports search and browse.
- *
- * @module services/skill-catalog-client
- */
-export interface CatalogSkillStats {
-    comments: number;
-    downloads: number;
-    installsAllTime: number;
-    installsCurrent: number;
-    stars: number;
-    versions: number;
-}
-export interface CatalogSkillVersion {
-    version: string;
-    createdAt: number;
-    changelog: string;
-}
-export interface CatalogSkill {
-    slug: string;
-    displayName: string;
-    summary: string | null;
-    tags: Record<string, string>;
-    stats: CatalogSkillStats;
-    createdAt: number;
-    updatedAt: number;
-    latestVersion: CatalogSkillVersion | null;
-}
-export interface CatalogSearchResult {
-    slug: string;
-    displayName: string;
-    summary: string | null;
-    score: number;
-    latestVersion: string | null;
-    downloads: number;
-    stars: number;
-    installs: number;
-}
-export declare function getCatalogSkills(): Promise<CatalogSkill[]>;
-export declare function refreshCatalog(): Promise<CatalogSkill[]>;
-export declare function getCatalogSkill(slug: string): Promise<CatalogSkill | null>;
-export declare function searchCatalogSkills(query: string, limit?: number): Promise<CatalogSearchResult[]>;
-export declare function getTrendingSkills(limit?: number): Promise<CatalogSkill[]>;
-//# sourceMappingURL=skill-catalog-client.d.ts.map

package/packages/agent/src/services/skill-catalog-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-catalog-client.d.ts","sourceRoot":"","sources":["../../../../../src/services/skill-catalog-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoDD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAahE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAG9D;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAG9B;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAqDhC;AAED,wBAAsB,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAQ3E"}

package/packages/agent/src/services/skill-catalog-client.js

@@ -1,130 +0,0 @@
-/**
- * Skill Catalog Client for Eliza.
- *
- * Provides a cached skill catalog (memory -> file) sourced from the
- * local skills/.cache/catalog.json. Supports search and browse.
- *
- * @module services/skill-catalog-client
- */
-import fs from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { logger } from "@elizaos/core";
-let memoryCache = null;
-const MEMORY_TTL_MS = 600_000;
-function findCatalogPaths() {
-    const paths = [];
-    const envPath = process.env.ELIZA_SKILLS_CATALOG?.trim();
-    if (envPath)
-        return [envPath];
-    let dir = import.meta.dirname ?? path.dirname(fileURLToPath(import.meta.url));
-    for (let i = 0; i < 5; i++) {
-        paths.push(path.join(dir, "skills", ".cache", "catalog.json"));
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-    if (home) {
-        paths.push(path.join(home, ".eliza", "skills", "catalog.json"));
-    }
-    return paths;
-}
-async function readCatalogFile() {
-    for (const catalogPath of findCatalogPaths()) {
-        try {
-            const raw = await fs.readFile(catalogPath, "utf-8");
-            const parsed = JSON.parse(raw);
-            if (Array.isArray(parsed.data) && parsed.data.length > 0) {
-                logger.debug(`[skill-catalog] Loaded ${parsed.data.length} skills from ${catalogPath}`);
-                return parsed.data;
-            }
-        }
-        catch {
-            // Try next path.
-        }
-    }
-    return null;
-}
-export async function getCatalogSkills() {
-    if (memoryCache && Date.now() - memoryCache.loadedAt < MEMORY_TTL_MS) {
-        return memoryCache.skills;
-    }
-    const skills = await readCatalogFile();
-    if (!skills) {
-        logger.warn("[skill-catalog] No catalog file found");
-        return [];
-    }
-    memoryCache = { skills, loadedAt: Date.now() };
-    return skills;
-}
-export async function refreshCatalog() {
-    memoryCache = null;
-    return getCatalogSkills();
-}
-export async function getCatalogSkill(slug) {
-    const skills = await getCatalogSkills();
-    return skills.find((s) => s.slug === slug) ?? null;
-}
-export async function searchCatalogSkills(query, limit = 30) {
-    const skills = await getCatalogSkills();
-    const lq = query.toLowerCase();
-    const terms = lq.split(/\s+/).filter((t) => t.length > 1);
-    const scored = [];
-    for (const skill of skills) {
-        const slug = skill.slug.toLowerCase();
-        const name = (skill.displayName ?? "").toLowerCase();
-        const summary = (skill.summary ?? "").toLowerCase();
-        let score = 0;
-        if (slug === lq || name === lq)
-            score += 100;
-        else if (slug.includes(lq))
-            score += 50;
-        else if (name.includes(lq))
-            score += 45;
-        if (summary.includes(lq))
-            score += 30;
-        for (const tag of Object.keys(skill.tags)) {
-            if (tag.toLowerCase().includes(lq))
-                score += 20;
-        }
-        for (const term of terms) {
-            if (slug.includes(term))
-                score += 15;
-            if (name.includes(term))
-                score += 12;
-            if (summary.includes(term))
-                score += 8;
-        }
-        if (score > 0) {
-            if (skill.stats.downloads > 50)
-                score += 3;
-            if (skill.stats.downloads > 200)
-                score += 3;
-            if (skill.stats.stars > 0)
-                score += 2;
-            if (skill.stats.installsCurrent > 0)
-                score += 2;
-            scored.push({ s: skill, score });
-        }
-    }
-    scored.sort((a, b) => b.score - a.score || b.s.stats.downloads - a.s.stats.downloads);
-    const max = scored[0]?.score || 1;
-    return scored.slice(0, limit).map(({ s, score }) => ({
-        slug: s.slug,
-        displayName: s.displayName,
-        summary: s.summary,
-        score: score / max,
-        latestVersion: s.latestVersion?.version ?? null,
-        downloads: s.stats.downloads,
-        stars: s.stats.stars,
-        installs: s.stats.installsAllTime,
-    }));
-}
-export async function getTrendingSkills(limit = 30) {
-    const skills = await getCatalogSkills();
-    return [...skills]
-        .sort((a, b) => b.stats.downloads - a.stats.downloads || b.updatedAt - a.updatedAt)
-        .slice(0, limit);
-}

package/packages/agent/src/services/skill-marketplace.d.ts

@@ -1,42 +0,0 @@
-export interface SkillsMarketplaceSearchItem {
-    id: string;
-    slug?: string;
-    name: string;
-    description: string;
-    repository?: string;
-    githubUrl?: string;
-    path: string | null;
-    tags: string[];
-    score: number | null;
-    source: "clawhub" | "skillsmp";
-}
-export interface InstalledMarketplaceSkill {
-    id: string;
-    name: string;
-    description: string;
-    repository: string;
-    githubUrl: string;
-    path: string;
-    installPath: string;
-    installedAt: string;
-    source: "clawhub" | "skillsmp" | "manual";
-    /** Security scan status, set after installation scan */
-    scanStatus?: "clean" | "warning" | "critical" | "blocked";
-}
-export interface InstallSkillInput {
-    slug?: string;
-    githubUrl?: string;
-    repository?: string;
-    path?: string;
-    name?: string;
-    description?: string;
-    source?: "clawhub" | "skillsmp" | "manual";
-}
-export declare function searchSkillsMarketplace(query: string, opts?: {
-    limit?: number;
-    aiSearch?: boolean;
-}): Promise<SkillsMarketplaceSearchItem[]>;
-export declare function installMarketplaceSkill(workspaceDir: string, input: InstallSkillInput): Promise<InstalledMarketplaceSkill>;
-export declare function listInstalledMarketplaceSkills(workspaceDir: string): Promise<InstalledMarketplaceSkill[]>;
-export declare function uninstallMarketplaceSkill(workspaceDir: string, skillId: string): Promise<InstalledMarketplaceSkill>;
-//# sourceMappingURL=skill-marketplace.d.ts.map

package/packages/agent/src/services/skill-marketplace.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-marketplace.d.ts","sourceRoot":"","sources":["../../../../../src/services/skill-marketplace.ts"],"names":[],"mappings":"AA2KA,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C,wDAAwD;IACxD,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;CAC3D;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC5C;AAwTD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAiIxC;AAmID,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAsGpC;AAED,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAKtC;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,yBAAyB,CAAC,CAwBpC"}