@enactprotocol/shared 2.2.4 → 2.3.1

package/dist/types/manifest.d.ts

@@ -1,6 +1,6 @@
 /**
  * TypeScript types for Enact tool manifests
- * These types define the structure of SKILL.md (and legacy enact.yaml/enact.md) frontmatter
+ * These types define the structure of SKILL.md (and skill.yaml/legacy enact.yaml/enact.md) frontmatter
  */
 import type { JSONSchema7 } from "json-schema";
 /**
@@ -11,6 +11,8 @@ export interface EnvVariable {
     description: string;
     /** If true, stored in OS keyring; if false, stored in .env files */
     secret?: boolean;
+    /** If true, must be set before execution (no default fallback) */
+    required?: boolean;
     /** Default value if not set (only for non-secrets) */
     default?: string;
 }
@@ -44,6 +46,28 @@ export interface ToolAnnotations {
     /** Tool interacts with external systems (network, APIs) */
     openWorldHint?: boolean;
 }
+/**
+ * Lifecycle hooks for tool installation and management
+ */
+export interface ToolHooks {
+    /** Command(s) to run after the tool is installed/extracted (e.g., "npm install", "pip install -r requirements.txt") */
+    postinstall?: string | string[];
+    /** Build command(s) to run before execution (e.g., "pip install -r requirements.txt") */
+    build?: string | string[];
+}
+/**
+ * Script definition — either a simple command string or an expanded object
+ *
+ * Simple form: "python main.py {{url}}"
+ * Expanded form: { command: "python main.py {{url}}", description: "Scrape a URL" }
+ */
+export type ScriptDefinition = string | {
+    command: string;
+    description?: string;
+    inputSchema?: JSONSchema7;
+    outputSchema?: JSONSchema7;
+    annotations?: ToolAnnotations;
+};
 /**
  * Resource requirements for tool execution
  */
@@ -68,7 +92,7 @@ export interface ToolExample {
 }
 /**
  * Complete tool manifest structure
- * This represents the YAML frontmatter in SKILL.md (or legacy enact.md/enact.yaml)
+ * This represents the YAML frontmatter in SKILL.md (or skill.yaml/legacy enact.md/enact.yaml)
  */
 export interface ToolManifest {
     /** Hierarchical tool identifier (e.g., "org/category/tool-name") */
@@ -91,8 +115,6 @@ export interface ToolManifest {
     license?: string;
     /** Keywords for tool discovery and categorization */
     tags?: string[];
-    /** JSON Schema defining input parameters */
-    inputSchema?: JSONSchema7;
     /** JSON Schema defining output structure */
     outputSchema?: JSONSchema7;
     /** Environment variables and secrets required by the tool */
@@ -101,6 +123,22 @@ export interface ToolManifest {
     annotations?: ToolAnnotations;
     /** Resource limits and requirements */
     resources?: ResourceRequirements;
+    /** Lifecycle hooks (e.g., postinstall build step) */
+    hooks?: ToolHooks;
+    /**
+     * Inline executable scripts (each becomes an MCP tool via colon syntax)
+     *
+     * Scripts replace the need for a separate ACTIONS.yaml file.
+     * Each script maps a name to a command with {{param}} template syntax.
+     *
+     * @example
+     * scripts:
+     *   scrape: python scripts/scrape.py {{url}}
+     *   crawl:
+     *     command: python scripts/crawl.py {{url}} {{depth}}
+     *     description: Crawl a website to specified depth
+     */
+    scripts?: Record<string, ScriptDefinition>;
     /** Environment requirements (intended product, system packages, network access, etc.) */
     compatibility?: string;
     /** Arbitrary key-value metadata for additional properties */
@@ -194,13 +232,20 @@ export interface ToolResolution {
     manifestPath: string;
     /** Tool version (if available) */
     version?: string | undefined;
+    /** The resolved script (if a script was specified via colon syntax) */
+    action?: import("./actions").Action | undefined;
+    /** The requested script name (if specified via colon syntax) */
+    actionName?: string | undefined;
+    /** The scripts manifest (converted from inline scripts) */
+    actionsManifest?: import("./actions").ActionsManifest | undefined;
 }
 /**
  * Supported manifest file names
  * SKILL.md is the primary format (aligned with Anthropic Agent Skills)
+ * skill.yaml/yml is the package manifest
  * enact.md/yaml/yml are supported for backwards compatibility
  */
-export declare const MANIFEST_FILES: readonly ["SKILL.md", "enact.md", "enact.yaml", "enact.yml"];
+export declare const MANIFEST_FILES: readonly ["SKILL.md", "skill.yaml", "skill.yml", "enact.md", "enact.yaml", "enact.yml"];
 export type ManifestFileName = (typeof MANIFEST_FILES)[number];
 /**
  * Package manifest file name

package/dist/types/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/types/manifest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAG3B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IAIpB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAIhB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B,4CAA4C;IAC5C,YAAY,CAAC,EAAE,WAAW,CAAC;IAI3B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,YAAY,CAAC;IAInB,mCAAmC;IACnC,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B,uCAAuC;IACvC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAIjC,yFAAyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IAItB,wCAAwC;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAInB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IAIzB,8EAA8E;IAC9E,CAAC,GAAG,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,gEAAgE;IAChE,GAAG,CAAC,EAAE,YAAY,CAAC;IAEnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,8BAA8B;IAC9B,CAAC,GAAG,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,QAAQ,EAAE,YAAY,CAAC;IACvB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,mDAAmD;IACnD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,MAAM,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IACvC,kCAAkC;IAClC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,EAAE,YAAY,CAAC;IACvB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,8DAA+D,CAAC;AAC3F,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAC"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/types/manifest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,uHAAuH;IACvH,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAG3B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IAIpB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAIhB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,WAAW,CAAC;IAI3B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,YAAY,CAAC;IAInB,mCAAmC;IACnC,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B,uCAAuC;IACvC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAIjC,qDAAqD;IACrD,KAAK,CAAC,EAAE,SAAS,CAAC;IAIlB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAI3C,yFAAyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IAItB,wCAAwC;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAInB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IAIzB,8EAA8E;IAC9E,CAAC,GAAG,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,gEAAgE;IAChE,GAAG,CAAC,EAAE,YAAY,CAAC;IAEnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,8BAA8B;IAC9B,CAAC,GAAG,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,QAAQ,EAAE,YAAY,CAAC;IACvB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,mDAAmD;IACnD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,MAAM,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IACvC,kCAAkC;IAClC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,EAAE,YAAY,CAAC;IACvB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,uEAAuE;IACvE,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,WAAW,EAAE,eAAe,GAAG,SAAS,CAAC;CACnE;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,yFAOjB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAC"}

package/dist/types/manifest.js

@@ -1,13 +1,21 @@
 /**
  * TypeScript types for Enact tool manifests
- * These types define the structure of SKILL.md (and legacy enact.yaml/enact.md) frontmatter
+ * These types define the structure of SKILL.md (and skill.yaml/legacy enact.yaml/enact.md) frontmatter
  */
 /**
  * Supported manifest file names
  * SKILL.md is the primary format (aligned with Anthropic Agent Skills)
+ * skill.yaml/yml is the package manifest
  * enact.md/yaml/yml are supported for backwards compatibility
  */
-export const MANIFEST_FILES = ["SKILL.md", "enact.md", "enact.yaml", "enact.yml"];
+export const MANIFEST_FILES = [
+    "SKILL.md",
+    "skill.yaml",
+    "skill.yml",
+    "enact.md",
+    "enact.yaml",
+    "enact.yml",
+];
 /**
  * Package manifest file name
  */

package/dist/types/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/types/manifest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6PH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAG3F;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/types/manifest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkTH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU;IACV,YAAY;IACZ,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;CACH,CAAC;AAGX;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enactprotocol/shared",
-  "version": "2.2.4",
+  "version": "2.3.1",
   "description": "Core business logic and utilities for Enact",
   "type": "module",
   "main": "./dist/index.js",
@@ -18,7 +18,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@enactprotocol/trust": "2.2.4",
+    "@enactprotocol/trust": "2.3.1",
     "js-yaml": "^4.1.1",
     "zod": "^4.1.13"
   },

package/src/config.ts

@@ -4,9 +4,9 @@
  */
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname } from "node:path";
 import yaml from "js-yaml";
-import { getConfigPath, getEnactHome } from "./paths";
+import { getConfigPath, getEnactHome, getSkillsDir } from "./paths";
 
 /**
  * Trust configuration for attestation verification
@@ -26,6 +26,10 @@ export interface TrustConfig {
   policy?: "require_attestation" | "prompt" | "allow";
   /** Minimum number of trusted attestations required */
   minimum_attestations?: number;
+  /** Alias: when true, sets policy to 'require_attestation'; when false, sets policy to 'allow' */
+  require_signatures?: boolean;
+  /** Alias: merged into auditors list */
+  trusted_publishers?: string[];
 }
 
 /**
@@ -41,11 +45,20 @@ export interface CacheConfig {
 /**
  * Execution configuration
  */
+/** Execution backend type */
+export type ExecutionBackend = "local" | "docker" | "dagger" | "container" | "remote";
+
 export interface ExecutionConfig {
   /** Default timeout for tool execution (e.g., "30s", "5m") */
   defaultTimeout?: string;
   /** Whether to run in verbose mode */
   verbose?: boolean;
+  /** Default execution backend */
+  default?: ExecutionBackend;
+  /** Fallback backend if default is unavailable */
+  fallback?: ExecutionBackend;
+  /** Package scopes that bypass container isolation and run locally (e.g., ["@my-org/*"]) */
+  trusted_scopes?: string[];
 }
 
 /**
@@ -142,6 +155,33 @@ function deepMerge(target: EnactConfig, source: Partial<EnactConfig>): EnactConf
   return result;
 }
 
+/**
+ * Normalize config by resolving alias fields into their canonical counterparts.
+ * - trust.require_signatures → trust.policy
+ * - trust.trusted_publishers → merged into trust.auditors
+ */
+function normalizeConfig(config: EnactConfig): EnactConfig {
+  if (config.trust) {
+    // require_signatures is an alias for policy
+    if (config.trust.require_signatures !== undefined && config.trust.policy === undefined) {
+      config.trust.policy = config.trust.require_signatures ? "require_attestation" : "allow";
+    }
+
+    // trusted_publishers merges into auditors
+    if (config.trust.trusted_publishers?.length) {
+      const auditors = config.trust.auditors ?? [];
+      for (const publisher of config.trust.trusted_publishers) {
+        if (!auditors.includes(publisher)) {
+          auditors.push(publisher);
+        }
+      }
+      config.trust.auditors = auditors;
+    }
+  }
+
+  return config;
+}
+
 /**
  * Load configuration from ~/.enact/config.yaml
  * Returns default config if file doesn't exist or is invalid
@@ -162,8 +202,10 @@ export function loadConfig(): EnactConfig {
       return { ...DEFAULT_CONFIG };
     }
 
-    // Merge with defaults to ensure all fields exist
-    return deepMerge(DEFAULT_CONFIG, parsed);
+    // Normalize aliases in user config BEFORE merging with defaults,
+    // so require_signatures → policy conversion isn't blocked by default policy
+    const normalized = normalizeConfig(parsed as EnactConfig);
+    return deepMerge(DEFAULT_CONFIG, normalized);
   } catch {
     // Return defaults on any error (parse error, read error, etc.)
     return { ...DEFAULT_CONFIG };
@@ -275,7 +317,7 @@ export function configExists(): boolean {
 export function ensureGlobalSetup(): boolean {
   const enactHome = getEnactHome();
   const configPath = getConfigPath();
-  const cacheDir = join(enactHome, "cache");
+  const cacheDir = getSkillsDir();
 
   let performedSetup = false;
 
@@ -285,7 +327,7 @@ export function ensureGlobalSetup(): boolean {
     performedSetup = true;
   }
 
-  // Ensure ~/.enact/cache/ directory exists
+  // Ensure ~/.agent/skills/ directory exists
   if (!existsSync(cacheDir)) {
     mkdirSync(cacheDir, { recursive: true });
     performedSetup = true;

package/src/execution/action-command.ts

@@ -0,0 +1,417 @@
+/**
+ * Action command interpolation for Agent Actions
+ *
+ * Implements the {{param}} template syntax specified in RFC-001-AGENT-ACTIONS.
+ *
+ * ## Key Differences from ${param} (command.ts)
+ *
+ * 1. **No shell escaping**: Values are passed directly as arguments to execve()
+ * 2. **Array form only**: Templates only work in array-form commands
+ * 3. **Argument omission**: Optional params without values are omitted entirely
+ * 4. **Single argument substitution**: Each {{var}} becomes exactly one argument
+ *
+ * ## Security
+ *
+ * This template system is designed to prevent command injection:
+ * - Values are never passed through a shell interpreter
+ * - No argument splitting on whitespace or metacharacters
+ * - Each template becomes a single argument regardless of content
+ *
+ * @see RFC-001-AGENT-ACTIONS.md
+ */
+
+import type { JSONSchema7 } from "json-schema";
+
+/**
+ * Token types for action command parsing
+ */
+export interface ActionCommandLiteralToken {
+  type: "literal";
+  value: string;
+}
+
+export interface ActionCommandParamToken {
+  type: "parameter";
+  name: string;
+}
+
+export type ActionCommandToken = ActionCommandLiteralToken | ActionCommandParamToken;
+
+/**
+ * Parsed representation of a single command argument
+ */
+export interface ParsedArgument {
+  /** The tokens that make up this argument */
+  tokens: ActionCommandToken[];
+  /** Parameter names referenced in this argument */
+  parameters: string[];
+}
+
+/**
+ * Result of parsing an action command
+ */
+export interface ParsedActionCommand {
+  /** Original command (array form) */
+  original: string[];
+  /** Parsed arguments with tokens */
+  arguments: ParsedArgument[];
+  /** All unique parameter names across all arguments */
+  allParameters: string[];
+}
+
+/**
+ * Regex to match {{param}} template syntax
+ */
+const ACTION_TEMPLATE_REGEX = /\{\{([^}]+)\}\}/g;
+
+/**
+ * Check if a string contains {{param}} templates
+ */
+export function hasActionTemplates(str: string): boolean {
+  // Reset regex state and test
+  ACTION_TEMPLATE_REGEX.lastIndex = 0;
+  return ACTION_TEMPLATE_REGEX.test(str);
+}
+
+/**
+ * Parse a single argument string into tokens
+ *
+ * @param arg - The argument string to parse
+ * @returns ParsedArgument with tokens and parameter names
+ */
+export function parseActionArgument(arg: string): ParsedArgument {
+  const tokens: ActionCommandToken[] = [];
+  const parameters: string[] = [];
+
+  let lastIndex = 0;
+  const regex = /\{\{([^}]+)\}\}/g;
+  let match: RegExpExecArray | null = regex.exec(arg);
+
+  while (match !== null) {
+    // Add literal text before this match
+    if (match.index > lastIndex) {
+      tokens.push({
+        type: "literal",
+        value: arg.slice(lastIndex, match.index),
+      });
+    }
+
+    // Add the parameter token
+    const paramName = match[1]?.trim();
+    if (paramName) {
+      tokens.push({
+        type: "parameter",
+        name: paramName,
+      });
+
+      if (!parameters.includes(paramName)) {
+        parameters.push(paramName);
+      }
+    }
+
+    lastIndex = match.index + match[0].length;
+    match = regex.exec(arg);
+  }
+
+  // Add any remaining literal text
+  if (lastIndex < arg.length) {
+    tokens.push({
+      type: "literal",
+      value: arg.slice(lastIndex),
+    });
+  }
+
+  // If no tokens were created, the whole arg is a literal
+  if (tokens.length === 0) {
+    tokens.push({
+      type: "literal",
+      value: arg,
+    });
+  }
+
+  return { tokens, parameters };
+}
+
+/**
+ * Parse an action command (array form) into tokens
+ *
+ * @param command - The command array to parse
+ * @returns ParsedActionCommand with all arguments parsed
+ */
+export function parseActionCommand(command: string[]): ParsedActionCommand {
+  const parsedArgs: ParsedArgument[] = [];
+  const allParameters: string[] = [];
+
+  for (const arg of command) {
+    const parsed = parseActionArgument(arg);
+    parsedArgs.push(parsed);
+
+    // Collect unique parameters
+    for (const param of parsed.parameters) {
+      if (!allParameters.includes(param)) {
+        allParameters.push(param);
+      }
+    }
+  }
+
+  return {
+    original: command,
+    arguments: parsedArgs,
+    allParameters,
+  };
+}
+
+/**
+ * Options for action command interpolation
+ */
+export interface ActionInterpolationOptions {
+  /**
+   * JSON Schema for input validation
+   * Used to determine which parameters are optional and have defaults
+   */
+  inputSchema?: JSONSchema7;
+
+  /**
+   * Whether to omit arguments for optional params with no value
+   * Default: true (as per RFC-001)
+   */
+  omitMissingOptional?: boolean;
+}
+
+/**
+ * Get the default value for a parameter from the input schema
+ */
+function getDefaultValue(paramName: string, inputSchema?: JSONSchema7): unknown | undefined {
+  if (!inputSchema || inputSchema.type !== "object") {
+    return undefined;
+  }
+
+  const properties = inputSchema.properties as Record<string, JSONSchema7> | undefined;
+  if (!properties) {
+    return undefined;
+  }
+
+  const propSchema = properties[paramName];
+  if (!propSchema || typeof propSchema === "boolean") {
+    return undefined;
+  }
+
+  return propSchema.default;
+}
+
+/**
+ * Check if a parameter is required according to the input schema
+ */
+function isRequired(paramName: string, inputSchema?: JSONSchema7): boolean {
+  if (!inputSchema) {
+    return true; // Conservative default
+  }
+
+  const required = inputSchema.required as string[] | undefined;
+  return required?.includes(paramName) ?? false;
+}
+
+/**
+ * Convert a value to string for command argument
+ *
+ * Unlike command.ts, we don't shell-escape here because values
+ * are passed directly to execve(), not through a shell.
+ */
+function valueToArgString(value: unknown): string {
+  if (value === null || value === undefined) {
+    return "";
+  }
+
+  if (typeof value === "string") {
+    return value;
+  }
+
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
+  }
+
+  if (typeof value === "object") {
+    return JSON.stringify(value);
+  }
+
+  return String(value);
+}
+
+/**
+ * Interpolate a single argument with parameter values
+ *
+ * @param parsed - Parsed argument with tokens
+ * @param params - Parameter values
+ * @param inputSchema - JSON Schema for defaults and required checks
+ * @returns Interpolated string, or undefined if argument should be omitted
+ */
+function interpolateArgument(
+  parsed: ParsedArgument,
+  params: Record<string, unknown>,
+  inputSchema?: JSONSchema7
+): string | undefined {
+  // Check if any parameter in this argument should cause omission
+  for (const paramName of parsed.parameters) {
+    const value = params[paramName];
+    const defaultValue = getDefaultValue(paramName, inputSchema);
+    const required = isRequired(paramName, inputSchema);
+
+    // If parameter is not provided
+    if (value === undefined) {
+      // Use default if available
+      if (defaultValue !== undefined) {
+        // Continue with default value (handled below in token processing)
+        continue;
+      }
+
+      // If optional (not required) and no default, omit entire argument
+      if (!required) {
+        return undefined;
+      }
+
+      // If required and no value, this is an error
+      throw new Error(`Missing required parameter: ${paramName}`);
+    }
+  }
+
+  // Build the interpolated string
+  const parts: string[] = [];
+
+  for (const token of parsed.tokens) {
+    if (token.type === "literal") {
+      parts.push(token.value);
+    } else {
+      const paramName = token.name;
+      let value = params[paramName];
+
+      // Apply default if value not provided
+      if (value === undefined) {
+        value = getDefaultValue(paramName, inputSchema);
+      }
+
+      parts.push(valueToArgString(value));
+    }
+  }
+
+  return parts.join("");
+}
+
+/**
+ * Interpolate an action command with parameter values
+ *
+ * Implements RFC-001 template substitution rules:
+ * 1. Each {{var}} is replaced with the literal value as a single argument
+ * 2. Optional parameters without values cause the argument to be omitted
+ * 3. No shell interpolation - values passed directly to execve()
+ *
+ * @param command - Array-form command with {{param}} templates
+ * @param params - Parameter values
+ * @param options - Interpolation options
+ * @returns Array of command arguments ready for execve()
+ */
+export function interpolateActionCommand(
+  command: string[],
+  params: Record<string, unknown>,
+  options: ActionInterpolationOptions = {}
+): string[] {
+  const { inputSchema, omitMissingOptional = true } = options;
+  const parsed = parseActionCommand(command);
+  const result: string[] = [];
+
+  for (const arg of parsed.arguments) {
+    // If argument has no parameters, include it as-is
+    if (arg.parameters.length === 0) {
+      // It's just a literal
+      const literal = arg.tokens[0];
+      if (literal && literal.type === "literal") {
+        result.push(literal.value);
+      }
+      continue;
+    }
+    const interpolated = interpolateArgument(arg, params, inputSchema);
+
+    // undefined means omit this argument
+    if (interpolated === undefined) {
+      if (!omitMissingOptional) {
+        // If not omitting, use empty string
+        result.push("");
+      }
+      // Otherwise skip this argument entirely
+      continue;
+    }
+
+    result.push(interpolated);
+  }
+
+  return result;
+}
+
+/**
+ * Validate that all required parameters are provided
+ *
+ * @param command - Array-form command
+ * @param params - Provided parameter values
+ * @param inputSchema - JSON Schema for required field info
+ * @returns Array of missing required parameter names
+ */
+export function getMissingRequiredParams(
+  command: string[],
+  params: Record<string, unknown>,
+  inputSchema?: JSONSchema7
+): string[] {
+  const parsed = parseActionCommand(command);
+  const missing: string[] = [];
+
+  for (const paramName of parsed.allParameters) {
+    const value = params[paramName];
+    const defaultValue = getDefaultValue(paramName, inputSchema);
+    const required = isRequired(paramName, inputSchema);
+
+    if (required && value === undefined && defaultValue === undefined) {
+      missing.push(paramName);
+    }
+  }
+
+  return missing;
+}
+
+/**
+ * Get all parameters referenced in a command
+ *
+ * @param command - Array-form command
+ * @returns Array of parameter names
+ */
+export function getActionCommandParams(command: string[]): string[] {
+  return parseActionCommand(command).allParameters;
+}
+
+/**
+ * Prepare an action command for execution
+ *
+ * This is the main entry point for preparing action commands.
+ * It validates required parameters and interpolates the command.
+ *
+ * @param command - Array-form command with {{param}} templates
+ * @param params - Parameter values
+ * @param inputSchema - JSON Schema for validation
+ * @returns Array of command arguments ready for execve()
+ * @throws Error if required parameters are missing
+ */
+export function prepareActionCommand(
+  command: string[],
+  params: Record<string, unknown>,
+  inputSchema?: JSONSchema7
+): string[] {
+  // Validate required parameters
+  const missing = getMissingRequiredParams(command, params, inputSchema);
+  if (missing.length > 0) {
+    throw new Error(`Missing required parameters: ${missing.join(", ")}`);
+  }
+
+  // Interpolate and return
+  const options: ActionInterpolationOptions = {};
+  if (inputSchema !== undefined) {
+    options.inputSchema = inputSchema;
+  }
+  return interpolateActionCommand(command, params, options);
+}