@evalops/maestro 0.10.51 → 0.10.53

package/dist/skills/scaffolder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaffolder.js","sourceRoot":"","sources":["../../src/skills/scaffolder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEjD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AACxD,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAgC1C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACpC,OAAe,EACf,IAAY,EACZ,OAA6B;IAE7B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACd,eAAe,IAAI,yEAAyE,CAC5F,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,eAAe,IAAI,iBAAiB,qBAAqB,kBAAkB,CAC3E,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,iEAAiE;IACjE,+DAA+D;IAC/D,0DAA0D;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACd,iCAAiC,4BAA4B,yBAAyB,WAAW,CAAC,MAAM,GAAG,CAC3G,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAChD,oEAAoE;QACpE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,IAAI,KAAK,CACd,+BAA+B,IAAI,2CAA2C,CAC9E,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACd,UAAU,IAAI,uBAAuB,SAAS,iCAAiC,CAC/E,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC/B,IAAI;QACJ,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO;QACN,IAAI;QACJ,SAAS;QACT,WAAW;QACX,KAAK,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC3B,IAAY,EACZ,WAAmB,EACnB,IAAY,EACZ,OAA6B;IAE7B,yEAAyE;IACzE,2EAA2E;IAC3E,qEAAqE;IACrE,mDAAmD;IACnD,MAAM,KAAK,GAAa,CAAC,KAAK,EAAE,SAAS,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,gBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,yBAAyB,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,yBAAyB,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ;QACvC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC;IACN,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACd,0BAA0B,GAAG,6FAA6F,CAC1H,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK;SACnB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,IAAI,OAAO,GAAG,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,KAAa,EAAE,OAAiB;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAC7B,aAAqB,EACrB,aAAqB;IAErB,MAAM,aAAa,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,GAAG,EAAE,CAAC;IACxD,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACnD,OAAO,mBAAmB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AACtD,CAAC","sourcesContent":["/**\n * Scaffold-a-skill primitive: persist a fully-formed skill into the repo.\n *\n * The existing `scaffoldSkill` helper (in `./linter.ts`) creates an empty\n * skeleton suitable for `maestro skill new <name>`. This module solves a\n * different problem: an interactive `/setup-*` command has already\n * collected the user's answers and wants to bake them into a skill file\n * the agent will auto-load in future sessions.\n *\n * The first consumer is `/setup-incident-response` — the user names\n * their runbook location, paging policy, and severity definitions; we\n * write an `incident-guidelines` skill so the next incident-response\n * session loads those answers without re-asking.\n *\n * ## What this module is\n *\n * One primitive — `scaffoldSkillWithBody` — that:\n * - Validates the skill name against the project's skill-name pattern.\n * - Refuses to escape `baseDir` even when called with `..` or symlinks.\n * - Emits valid YAML frontmatter with the supplied description, optional\n *   tool whitelists, and free-form metadata.\n * - Writes the supplied body as the SKILL.md content.\n * - Reports back the directory, files written, and final SKILL.md path.\n *\n * ## What this module isn't\n *\n * - No interactive UI; that lives in the `/setup-*` slash commands.\n * - No round-trip parse; the rendered YAML is one-way.\n */\n\nimport { existsSync, mkdirSync } from \"node:fs\";\nimport { join, resolve, sep } from \"node:path\";\nimport { writeTextFileAtomic } from \"../utils/fs.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"skills:scaffolder\");\n\n/**\n * Same pattern as the existing skill linter: lowercase, digits, single\n * hyphens between words. Kept in sync rather than imported so callers\n * who pull just this module don't drag the linter in.\n */\nconst SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst SKILL_NAME_MAX_LENGTH = 64;\nconst SKILL_DESCRIPTION_MAX_LENGTH = 1024;\n\nexport interface ScaffoldSkillOptions {\n\t/** One-line description used in YAML frontmatter + skill listings. */\n\tdescription: string;\n\t/** Full markdown body (without frontmatter delimiters). */\n\tbody: string;\n\t/** Optional `allowed-tools` whitelist serialized as a YAML list. */\n\tallowedTools?: string[];\n\t/** Optional `builtin-tools` list (Maestro-provided tools). */\n\tbuiltinTools?: string[];\n\t/**\n\t * Additional simple key/value metadata nested under the `metadata`\n\t * frontmatter field. Values are emitted as quoted YAML strings so\n\t * user input can't break the frontmatter parser.\n\t */\n\tmetadata?: Record<string, string>;\n\t/** Overwrite an existing skill directory. Defaults to false. */\n\tforce?: boolean;\n}\n\nexport interface ScaffoldSkillResult {\n\t/** The skill name (matches the directory). */\n\tname: string;\n\t/** Absolute path to the skill directory. */\n\tdirectory: string;\n\t/** Absolute path to the SKILL.md inside the directory. */\n\tskillMdPath: string;\n\t/** Files written, relative to the skill directory. */\n\tfiles: string[];\n}\n\n/**\n * Write a `SKILL.md` (with frontmatter built from `options`) into\n * `<baseDir>/<name>/SKILL.md`. Throws on name violations, path escapes,\n * or pre-existing skills when `force` is false. Caller is responsible\n * for ensuring `baseDir` is the configured skills directory.\n */\nexport function scaffoldSkillWithBody(\n\tbaseDir: string,\n\tname: string,\n\toptions: ScaffoldSkillOptions,\n): ScaffoldSkillResult {\n\tif (!SKILL_NAME_PATTERN.test(name)) {\n\t\tthrow new Error(\n\t\t\t`Skill name \"${name}\" must use lowercase letters, numbers, and single hyphens between words`,\n\t\t);\n\t}\n\tif (name.length > SKILL_NAME_MAX_LENGTH) {\n\t\tthrow new Error(\n\t\t\t`Skill name \"${name}\" exceeds the ${SKILL_NAME_MAX_LENGTH}-character limit`,\n\t\t);\n\t}\n\tconst description = options.description.trim();\n\tif (!description) {\n\t\tthrow new Error(\"Skill description is required\");\n\t}\n\t// Match the skill loader's frontmatter cap. Scaffolding a longer\n\t// description would persist a SKILL.md the loader rejects with\n\t// invalid-description even though the scaffold succeeded.\n\tif (description.length > SKILL_DESCRIPTION_MAX_LENGTH) {\n\t\tthrow new Error(\n\t\t\t`Skill description exceeds the ${SKILL_DESCRIPTION_MAX_LENGTH}-character limit (got ${description.length})`,\n\t\t);\n\t}\n\tconst body = options.body;\n\tif (!body || !body.trim()) {\n\t\tthrow new Error(\"Skill body is required\");\n\t}\n\n\tconst directory = resolve(baseDir, name);\n\tif (!isPathWithinDirectory(directory, baseDir)) {\n\t\t// Defensive: SKILL_NAME_PATTERN already rejects \"..\", \"/\", \"\\\", but\n\t\t// keep the explicit check so caller-supplied baseDir can't accidentally\n\t\t// resolve outside itself via symlinks or other path tricks.\n\t\tthrow new Error(\n\t\t\t`Refusing to scaffold skill \"${name}\" outside the configured skills directory`,\n\t\t);\n\t}\n\tif (existsSync(directory) && !options.force) {\n\t\tthrow new Error(\n\t\t\t`Skill \"${name}\" already exists at ${directory}; pass force: true to overwrite`,\n\t\t);\n\t}\n\n\tconst skillMdPath = join(directory, \"SKILL.md\");\n\tconst content = renderSkillMarkdown(name, description, body, options);\n\tmkdirSync(directory, { recursive: true });\n\twriteTextFileAtomic(skillMdPath, content);\n\tlogger.info(\"Scaffolded skill\", {\n\t\tname,\n\t\tdirectory,\n\t\tbodyLength: body.length,\n\t});\n\n\treturn {\n\t\tname,\n\t\tdirectory,\n\t\tskillMdPath,\n\t\tfiles: [\"SKILL.md\"],\n\t};\n}\n\nfunction renderSkillMarkdown(\n\tname: string,\n\tdescription: string,\n\tbody: string,\n\toptions: ScaffoldSkillOptions,\n): string {\n\t// Quote name even though SKILL_NAME_PATTERN restricts the character set:\n\t// YAML 1.1 still interprets unquoted \"true\", \"false\", \"null\", \"yes\", \"no\",\n\t// \"off\", and numeric-shaped strings as booleans/null/numbers, so the\n\t// loader would reject scaffolds named e.g. \"true\".\n\tconst lines: string[] = [\"---\", `name: ${quoteYamlString(name)}`];\n\tlines.push(`description: ${quoteYamlString(description)}`);\n\tif (options.allowedTools && options.allowedTools.length > 0) {\n\t\tassertNonEmptyToolEntries(\"allowed-tools\", options.allowedTools);\n\t\tlines.push(\"allowed-tools:\");\n\t\tfor (const tool of options.allowedTools) {\n\t\t\tlines.push(`  - ${quoteYamlString(tool)}`);\n\t\t}\n\t}\n\tif (options.builtinTools && options.builtinTools.length > 0) {\n\t\tassertNonEmptyToolEntries(\"builtin-tools\", options.builtinTools);\n\t\tlines.push(\"builtin-tools:\");\n\t\tfor (const tool of options.builtinTools) {\n\t\t\tlines.push(`  - ${quoteYamlString(tool)}`);\n\t\t}\n\t}\n\tconst metadataEntries = options.metadata\n\t\t? Object.entries(options.metadata)\n\t\t: [];\n\tif (metadataEntries.length > 0) {\n\t\tlines.push(\"metadata:\");\n\t\tfor (const [key, value] of metadataEntries) {\n\t\t\tif (!isValidFrontmatterKey(key)) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Skill frontmatter key \"${key}\" must start with a lowercase letter and then use letters, numbers, hyphens, or underscores`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tlines.push(`  ${quoteYamlString(key)}: ${quoteYamlString(value)}`);\n\t\t}\n\t}\n\tlines.push(\"---\", \"\", body.trimEnd(), \"\");\n\treturn lines.join(\"\\n\");\n}\n\n/**\n * Emit a YAML scalar safely as a double-quoted string. We always quote\n * to dodge YAML's edge cases (booleans, numbers, leading whitespace,\n * special characters); escaping is minimal (backslashes + double quotes\n * + newlines).\n */\nfunction quoteYamlString(value: string): string {\n\tconst escaped = value\n\t\t.replace(/\\\\/g, \"\\\\\\\\\")\n\t\t.replace(/\"/g, '\\\\\"')\n\t\t.replace(/\\n/g, \"\\\\n\");\n\treturn `\"${escaped}\"`;\n}\n\n/**\n * The skill loader rejects allowed-tools / builtin-tools entries that\n * are empty or whitespace-only via `validateStringArrayField`. Mirror\n * that contract at scaffold time so we never produce a SKILL.md the\n * loader will refuse.\n */\nfunction assertNonEmptyToolEntries(field: string, entries: string[]): void {\n\tfor (let i = 0; i < entries.length; i += 1) {\n\t\tconst entry = entries[i];\n\t\tif (typeof entry !== \"string\" || entry.trim() === \"\") {\n\t\t\tthrow new Error(`Skill ${field}[${i}] must be a non-empty string`);\n\t\t}\n\t}\n}\n\nfunction isValidFrontmatterKey(key: string): boolean {\n\treturn /^[a-z][A-Za-z0-9_-]*$/.test(key);\n}\n\nfunction isPathWithinDirectory(\n\tcandidatePath: string,\n\tdirectoryPath: string,\n): boolean {\n\tconst normalizedDir = `${resolve(directoryPath)}${sep}`;\n\tconst normalizedCandidate = resolve(candidatePath);\n\treturn normalizedCandidate.startsWith(normalizedDir);\n}\n"]}

package/dist/skills/service-client.d.ts

@@ -1,56 +0,0 @@
-import { type DownstreamFailureMode as DownstreamHttpFailureMode } from "../utils/downstream-http.js";
-import { type LoadedSkill } from "./loader.js";
-export declare const SKILLS_CALL_FAILURE_MODES: {
-    readonly listSkills: {
-        readonly optional: "fail-open";
-        readonly required: "fail-closed";
-    };
-};
-export interface SkillsServiceConfig {
-    baseUrl?: string;
-    token?: string;
-    workspaceId?: string;
-    surface?: string;
-    entityId?: string;
-    limit?: number;
-    timeoutMs?: number;
-    maxAttempts?: number;
-    circuitFailureThreshold?: number;
-    circuitResetTimeoutMs?: number;
-    circuitSuccessThreshold?: number;
-    required?: boolean;
-}
-export interface ResolvedSkillsServiceConfig {
-    baseUrl: string;
-    token?: string;
-    workspaceId: string;
-    surface: string;
-    entityId?: string;
-    limit: number;
-    timeoutMs: number;
-    maxAttempts: number;
-    circuitFailureThreshold: number;
-    circuitResetTimeoutMs: number;
-    circuitSuccessThreshold: number;
-    failureMode: DownstreamHttpFailureMode;
-}
-interface SkillsServiceSkill {
-    id?: string;
-    workspaceId?: string;
-    ownerId?: string;
-    name?: string;
-    description?: string;
-    scope?: string | number;
-    content?: string;
-    currentVersion?: number;
-    tags?: string[];
-}
-export declare function resolveSkillsServiceConfig(config: SkillsServiceConfig | false | undefined): ResolvedSkillsServiceConfig | null;
-declare function toLoadedSkill(skill: SkillsServiceSkill): LoadedSkill | null;
-export declare const __TEST_ONLY_toLoadedSkill: typeof toLoadedSkill;
-export declare function loadSkillsFromService(config: ResolvedSkillsServiceConfig, options?: {
-    signal?: AbortSignal;
-}): Promise<LoadedSkill[]>;
-export declare function resetSkillsDownstreamForTests(): void;
-export {};
-//# sourceMappingURL=service-client.d.ts.map

package/dist/skills/service-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/skills/service-client.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,KAAK,qBAAqB,IAAI,yBAAyB,EAEvD,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,WAAW,EAAwB,MAAM,aAAa,CAAC;AASrE,eAAO,MAAM,yBAAyB;;;;;CAK5B,CAAC;AAIX,MAAM,WAAW,mBAAmB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,yBAAyB,CAAC;CACvC;AAED,UAAU,kBAAkB;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAgED,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,mBAAmB,GAAG,KAAK,GAAG,SAAS,GAC7C,2BAA2B,GAAG,IAAI,CAkGpC;AA8ED,iBAAS,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,WAAW,GAAG,IAAI,CA0CpE;AAED,eAAO,MAAM,yBAAyB,sBAAgB,CAAC;AAEvD,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,2BAA2B,EACnC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAChC,OAAO,CAAC,WAAW,EAAE,CAAC,CAyCxB;AAED,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD"}

package/dist/skills/service-client.js

@@ -1,266 +0,0 @@
-import { EVALOPS_ACCESS_TOKEN_ENV_VARS, EVALOPS_ORGANIZATION_ID_ENV_VARS, } from "../evalops/env-aliases.js";
-import { loadOAuthCredentials } from "../oauth/storage.js";
-import { fetchDownstream, } from "../utils/downstream-http.js";
-import * as downstream from "../utils/downstream.js";
-import { computeSkillTrustSha } from "./loader.js";
-const CONNECT_PROTOCOL_VERSION = "1";
-const DEFAULT_LIMIT = 100;
-const DEFAULT_MAX_ATTEMPTS = 2;
-const DEFAULT_SURFACE = "maestro";
-const DEFAULT_TIMEOUT_MS = 2_000;
-const LIST_SKILLS_PATH = "/skills.v1.SkillService/List";
-export const SKILLS_CALL_FAILURE_MODES = {
-    listSkills: {
-        optional: downstream.FailOpen,
-        required: downstream.FailClosed,
-    },
-};
-const downstreamClients = new Map();
-function trimString(value) {
-    const trimmed = value?.trim();
-    return trimmed ? trimmed : undefined;
-}
-function getEnvValue(names) {
-    for (const name of names) {
-        const value = trimString(process.env[name]);
-        if (value) {
-            return value;
-        }
-    }
-    return undefined;
-}
-function parsePositiveInt(value, fallback) {
-    const parsed = Number.parseInt(value ?? "", 10);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
-}
-function normalizeBaseUrl(baseUrl) {
-    let normalized = baseUrl.trim();
-    for (const suffix of [LIST_SKILLS_PATH, "/skills.v1.SkillService"]) {
-        if (normalized.endsWith(suffix)) {
-            normalized = normalized.slice(0, -suffix.length);
-        }
-    }
-    return normalized.replace(/\/+$/, "");
-}
-function resolveWorkspaceId(config) {
-    const configuredWorkspaceId = trimString(config?.workspaceId);
-    const envWorkspaceId = getEnvValue([
-        "SKILLS_SERVICE_WORKSPACE_ID",
-        "MAESTRO_SKILLS_WORKSPACE_ID",
-        ...EVALOPS_ORGANIZATION_ID_ENV_VARS,
-    ]);
-    if (configuredWorkspaceId ?? envWorkspaceId) {
-        return configuredWorkspaceId ?? envWorkspaceId;
-    }
-    const stored = loadOAuthCredentials("evalops")?.metadata?.organizationId;
-    return typeof stored === "string" && stored.trim().length > 0
-        ? stored.trim()
-        : undefined;
-}
-function normalizeLimit(value) {
-    if (typeof value !== "number" || !Number.isFinite(value)) {
-        return DEFAULT_LIMIT;
-    }
-    return Math.max(1, Math.min(500, Math.trunc(value)));
-}
-export function resolveSkillsServiceConfig(config) {
-    if (config === false) {
-        return null;
-    }
-    const baseUrl = trimString(config?.baseUrl) ??
-        getEnvValue(["SKILLS_SERVICE_URL", "MAESTRO_SKILLS_SERVICE_URL"]);
-    if (!baseUrl) {
-        return null;
-    }
-    const workspaceId = resolveWorkspaceId(config);
-    if (!workspaceId) {
-        return null;
-    }
-    const storedToken = trimString(loadOAuthCredentials("evalops")?.access);
-    const token = trimString(config?.token) ??
-        getEnvValue([
-            "SKILLS_SERVICE_TOKEN",
-            "MAESTRO_SKILLS_SERVICE_TOKEN",
-            ...EVALOPS_ACCESS_TOKEN_ENV_VARS,
-        ]) ??
-        storedToken;
-    const required = config?.required ??
-        getEnvValue([
-            "SKILLS_SERVICE_REQUIRED",
-            "MAESTRO_SKILLS_SERVICE_REQUIRED",
-        ]) === "1";
-    return {
-        baseUrl: normalizeBaseUrl(baseUrl),
-        circuitFailureThreshold: config?.circuitFailureThreshold ??
-            parsePositiveInt(getEnvValue([
-                "SKILLS_SERVICE_CIRCUIT_FAILURE_THRESHOLD",
-                "MAESTRO_SKILLS_SERVICE_CIRCUIT_FAILURE_THRESHOLD",
-            ]), 5),
-        circuitResetTimeoutMs: config?.circuitResetTimeoutMs ??
-            parsePositiveInt(getEnvValue([
-                "SKILLS_SERVICE_CIRCUIT_RESET_TIMEOUT_MS",
-                "MAESTRO_SKILLS_SERVICE_CIRCUIT_RESET_TIMEOUT_MS",
-            ]), 30_000),
-        circuitSuccessThreshold: config?.circuitSuccessThreshold ??
-            parsePositiveInt(getEnvValue([
-                "SKILLS_SERVICE_CIRCUIT_SUCCESS_THRESHOLD",
-                "MAESTRO_SKILLS_SERVICE_CIRCUIT_SUCCESS_THRESHOLD",
-            ]), 2),
-        entityId: trimString(config?.entityId) ??
-            getEnvValue(["SKILLS_SERVICE_ENTITY_ID", "MAESTRO_SKILLS_ENTITY_ID"]),
-        failureMode: required ? "required" : "optional",
-        limit: config?.limit ??
-            parsePositiveInt(getEnvValue(["SKILLS_SERVICE_LIMIT", "MAESTRO_SKILLS_SERVICE_LIMIT"]), DEFAULT_LIMIT),
-        maxAttempts: config?.maxAttempts ??
-            parsePositiveInt(getEnvValue([
-                "SKILLS_SERVICE_MAX_ATTEMPTS",
-                "MAESTRO_SKILLS_SERVICE_MAX_ATTEMPTS",
-            ]), DEFAULT_MAX_ATTEMPTS),
-        surface: trimString(config?.surface) ??
-            getEnvValue(["SKILLS_SERVICE_SURFACE"]) ??
-            DEFAULT_SURFACE,
-        timeoutMs: config?.timeoutMs ??
-            parsePositiveInt(getEnvValue([
-                "SKILLS_SERVICE_TIMEOUT_MS",
-                "MAESTRO_SKILLS_SERVICE_TIMEOUT_MS",
-            ]), DEFAULT_TIMEOUT_MS),
-        token,
-        workspaceId,
-    };
-}
-function getDownstreamClient(config, op) {
-    const failureMode = SKILLS_CALL_FAILURE_MODES[op][config.failureMode];
-    const key = JSON.stringify({
-        baseUrl: config.baseUrl,
-        failureMode,
-        op,
-        reset: config.circuitResetTimeoutMs,
-        success: config.circuitSuccessThreshold,
-        threshold: config.circuitFailureThreshold,
-    });
-    const cached = downstreamClients.get(key);
-    if (cached) {
-        return cached;
-    }
-    const client = downstream.New(`skills.${op}`, {
-        failureMode,
-        breaker: {
-            failureThreshold: config.circuitFailureThreshold,
-            resetTimeoutMs: config.circuitResetTimeoutMs,
-            successThreshold: config.circuitSuccessThreshold,
-            toolName: `skills.${op}`,
-        },
-    });
-    downstreamClients.set(key, client);
-    return client;
-}
-function toHttpFailureMode(client) {
-    return client.failureMode === downstream.FailClosed ? "required" : "optional";
-}
-function buildHeaders(config) {
-    return {
-        ...(config.token ? { Authorization: `Bearer ${config.token}` } : {}),
-        "Connect-Protocol-Version": CONNECT_PROTOCOL_VERSION,
-        "Content-Type": "application/json",
-        "X-Surface": config.surface,
-        ...(config.entityId ? { "X-Entity-ID": config.entityId } : {}),
-    };
-}
-function normalizeScope(scope) {
-    switch (scope) {
-        case "SKILL_SCOPE_GLOBAL":
-        case "global":
-        case 1:
-            return "global";
-        case "SKILL_SCOPE_WORKSPACE":
-        case "workspace":
-        case 2:
-            return "workspace";
-        case "SKILL_SCOPE_PERSONAL":
-        case "personal":
-        case 3:
-            return "personal";
-        default:
-            return undefined;
-    }
-}
-function normalizeTags(tags) {
-    const normalized = Array.isArray(tags)
-        ? tags.map((tag) => tag.trim()).filter((tag) => tag.length > 0)
-        : [];
-    return normalized.length > 0 ? normalized : undefined;
-}
-function toLoadedSkill(skill) {
-    const id = trimString(skill.id);
-    const name = trimString(skill.name);
-    const content = trimString(skill.content);
-    if (!id || !name || !content) {
-        return null;
-    }
-    const scope = normalizeScope(skill.scope);
-    const metadata = {
-        skillServiceId: id,
-        ...(trimString(skill.workspaceId)
-            ? { workspaceId: trimString(skill.workspaceId) }
-            : {}),
-        ...(trimString(skill.ownerId)
-            ? { ownerId: trimString(skill.ownerId) }
-            : {}),
-        ...(typeof skill.currentVersion === "number" &&
-            Number.isFinite(skill.currentVersion)
-            ? { currentVersion: String(Math.trunc(skill.currentVersion)) }
-            : {}),
-        ...(scope ? { scope } : {}),
-    };
-    return {
-        name,
-        description: trimString(skill.description) ?? "Skill from skills service",
-        content,
-        // Match the local-skill trust-hash schema so the same approval
-        // model applies to service-loaded skills: bind `name` and (an
-        // empty set of) resources so an attacker can't ship a
-        // "rogue-clone" with the same body and inherit the user's
-        // approval of "trusted-helper". Closes the round-3 gap left by
-        // PRs #2629/#2749/#2753 in the service-client code path.
-        contentSha: computeSkillTrustSha(name, content, [], {}),
-        metadata,
-        tags: normalizeTags(skill.tags),
-        sourcePath: `skills-service://${id}`,
-        sourceType: "service",
-        resources: [],
-        resourceDirs: {},
-    };
-}
-export const __TEST_ONLY_toLoadedSkill = toLoadedSkill;
-export async function loadSkillsFromService(config, options) {
-    const client = getDownstreamClient(config, "listSkills");
-    return downstream.CallOp(client, "listSkills", async () => {
-        const response = await fetchDownstream(`${config.baseUrl}${LIST_SKILLS_PATH}`, {
-            method: "POST",
-            headers: buildHeaders(config),
-            signal: options?.signal,
-            body: JSON.stringify({
-                workspaceId: config.workspaceId,
-                limit: normalizeLimit(config.limit),
-                offset: 0,
-            }),
-        }, {
-            serviceName: "skills service",
-            failureMode: toHttpFailureMode(client),
-            timeoutMs: config.timeoutMs,
-            maxAttempts: config.maxAttempts,
-        });
-        if (!response.ok) {
-            const text = await response.text();
-            throw new Error(`skills service returned ${response.status}: ${text || response.statusText}`);
-        }
-        const payload = (await response.json());
-        return (payload.skills ?? [])
-            .map(toLoadedSkill)
-            .filter((skill) => skill !== null);
-    }, () => []);
-}
-export function resetSkillsDownstreamForTests() {
-    downstreamClients.clear();
-}
-//# sourceMappingURL=service-client.js.map

package/dist/skills/service-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../../src/skills/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,6BAA6B,EAC7B,gCAAgC,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAEN,eAAe,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAoB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAExD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,UAAU,EAAE;QACX,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,UAAU;KAC/B;CACQ,CAAC;AAmDX,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEzE,SAAS,UAAU,CAAC,KAAyB;IAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACpE,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAAuC;IAEvC,MAAM,qBAAqB,GAAG,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,WAAW,CAAC;QAClC,6BAA6B;QAC7B,6BAA6B;QAC7B,GAAG,gCAAgC;KACnC,CAAC,CAAC;IACH,IAAI,qBAAqB,IAAI,cAAc,EAAE,CAAC;QAC7C,OAAO,qBAAqB,IAAI,cAAc,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC;IACzE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC5D,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACf,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,MAA+C;IAE/C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GACZ,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;QAC3B,WAAW,CAAC,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,KAAK,GACV,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC;QACzB,WAAW,CAAC;YACX,sBAAsB;YACtB,8BAA8B;YAC9B,GAAG,6BAA6B;SAChC,CAAC;QACF,WAAW,CAAC;IAEb,MAAM,QAAQ,GACb,MAAM,EAAE,QAAQ;QAChB,WAAW,CAAC;YACX,yBAAyB;YACzB,iCAAiC;SACjC,CAAC,KAAK,GAAG,CAAC;IAEZ,OAAO;QACN,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC;QAClC,uBAAuB,EACtB,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,CACf,WAAW,CAAC;gBACX,0CAA0C;gBAC1C,kDAAkD;aAClD,CAAC,EACF,CAAC,CACD;QACF,qBAAqB,EACpB,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,CACf,WAAW,CAAC;gBACX,yCAAyC;gBACzC,iDAAiD;aACjD,CAAC,EACF,MAAM,CACN;QACF,uBAAuB,EACtB,MAAM,EAAE,uBAAuB;YAC/B,gBAAgB,CACf,WAAW,CAAC;gBACX,0CAA0C;gBAC1C,kDAAkD;aAClD,CAAC,EACF,CAAC,CACD;QACF,QAAQ,EACP,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5B,WAAW,CAAC,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;QACtE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC/C,KAAK,EACJ,MAAM,EAAE,KAAK;YACb,gBAAgB,CACf,WAAW,CAAC,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC,EACrE,aAAa,CACb;QACF,WAAW,EACV,MAAM,EAAE,WAAW;YACnB,gBAAgB,CACf,WAAW,CAAC;gBACX,6BAA6B;gBAC7B,qCAAqC;aACrC,CAAC,EACF,oBAAoB,CACpB;QACF,OAAO,EACN,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3B,WAAW,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACvC,eAAe;QAChB,SAAS,EACR,MAAM,EAAE,SAAS;YACjB,gBAAgB,CACf,WAAW,CAAC;gBACX,2BAA2B;gBAC3B,mCAAmC;aACnC,CAAC,EACF,kBAAkB,CAClB;QACF,KAAK;QACL,WAAW;KACX,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC3B,MAAmC,EACnC,EAAc;IAEd,MAAM,WAAW,GAAG,yBAAyB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW;QACX,EAAE;QACF,KAAK,EAAE,MAAM,CAAC,qBAAqB;QACnC,OAAO,EAAE,MAAM,CAAC,uBAAuB;QACvC,SAAS,EAAE,MAAM,CAAC,uBAAuB;KACzC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE;QAC7C,WAAW;QACX,OAAO,EAAE;YACR,gBAAgB,EAAE,MAAM,CAAC,uBAAuB;YAChD,cAAc,EAAE,MAAM,CAAC,qBAAqB;YAC5C,gBAAgB,EAAE,MAAM,CAAC,uBAAuB;YAChD,QAAQ,EAAE,UAAU,EAAE,EAAE;SACxB;KACD,CAAC,CAAC;IACH,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CACzB,MAAmC;IAEnC,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CACpB,MAAmC;IAEnC,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,0BAA0B,EAAE,wBAAwB;QACpD,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,MAAM,CAAC,OAAO;QAC3B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACtB,KAAkC;IAElC,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,oBAAoB,CAAC;QAC1B,KAAK,QAAQ,CAAC;QACd,KAAK,CAAC;YACL,OAAO,QAAQ,CAAC;QACjB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,WAAW,CAAC;QACjB,KAAK,CAAC;YACL,OAAO,WAAW,CAAC;QACpB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,UAAU,CAAC;QAChB,KAAK,CAAC;YACL,OAAO,UAAU,CAAC;QACnB;YACC,OAAO,SAAS,CAAC;IACnB,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAA0B;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAA2B;QACxC,cAAc,EAAE,EAAE;QAClB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YAChC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAE,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAE,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;YAC5C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;YACpC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3B,CAAC;IAEF,OAAO;QACN,IAAI;QACJ,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,2BAA2B;QACzE,OAAO;QACP,+DAA+D;QAC/D,8DAA8D;QAC9D,sDAAsD;QACtD,0DAA0D;QAC1D,+DAA+D;QAC/D,yDAAyD;QACzD,UAAU,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;QACvD,QAAQ;QACR,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,UAAU,EAAE,oBAAoB,EAAE,EAAE;QACpC,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;KAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAa,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAAmC,EACnC,OAAkC;IAElC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,MAAM,CACvB,MAAM,EACN,YAAY,EACZ,KAAK,IAAI,EAAE;QACV,MAAM,QAAQ,GAAG,MAAM,eAAe,CACrC,GAAG,MAAM,CAAC,OAAO,GAAG,gBAAgB,EAAE,EACtC;YACC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;gBACnC,MAAM,EAAE,CAAC;aACT,CAAC;SACF,EACD;YACC,WAAW,EAAE,gBAAgB;YAC7B,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACtC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CACD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACd,2BAA2B,QAAQ,CAAC,MAAM,KACzC,IAAI,IAAI,QAAQ,CAAC,UAClB,EAAE,CACF,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC9D,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;aAC3B,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC3D,CAAC,EACD,GAAG,EAAE,CAAC,EAAE,CACR,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC5C,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC","sourcesContent":["import {\n\tEVALOPS_ACCESS_TOKEN_ENV_VARS,\n\tEVALOPS_ORGANIZATION_ID_ENV_VARS,\n} from \"../evalops/env-aliases.js\";\nimport { loadOAuthCredentials } from \"../oauth/storage.js\";\nimport {\n\ttype DownstreamFailureMode as DownstreamHttpFailureMode,\n\tfetchDownstream,\n} from \"../utils/downstream-http.js\";\nimport * as downstream from \"../utils/downstream.js\";\nimport { type LoadedSkill, computeSkillTrustSha } from \"./loader.js\";\n\nconst CONNECT_PROTOCOL_VERSION = \"1\";\nconst DEFAULT_LIMIT = 100;\nconst DEFAULT_MAX_ATTEMPTS = 2;\nconst DEFAULT_SURFACE = \"maestro\";\nconst DEFAULT_TIMEOUT_MS = 2_000;\nconst LIST_SKILLS_PATH = \"/skills.v1.SkillService/List\";\n\nexport const SKILLS_CALL_FAILURE_MODES = {\n\tlistSkills: {\n\t\toptional: downstream.FailOpen,\n\t\trequired: downstream.FailClosed,\n\t},\n} as const;\n\ntype SkillsCall = keyof typeof SKILLS_CALL_FAILURE_MODES;\n\nexport interface SkillsServiceConfig {\n\tbaseUrl?: string;\n\ttoken?: string;\n\tworkspaceId?: string;\n\tsurface?: string;\n\tentityId?: string;\n\tlimit?: number;\n\ttimeoutMs?: number;\n\tmaxAttempts?: number;\n\tcircuitFailureThreshold?: number;\n\tcircuitResetTimeoutMs?: number;\n\tcircuitSuccessThreshold?: number;\n\trequired?: boolean;\n}\n\nexport interface ResolvedSkillsServiceConfig {\n\tbaseUrl: string;\n\ttoken?: string;\n\tworkspaceId: string;\n\tsurface: string;\n\tentityId?: string;\n\tlimit: number;\n\ttimeoutMs: number;\n\tmaxAttempts: number;\n\tcircuitFailureThreshold: number;\n\tcircuitResetTimeoutMs: number;\n\tcircuitSuccessThreshold: number;\n\tfailureMode: DownstreamHttpFailureMode;\n}\n\ninterface SkillsServiceSkill {\n\tid?: string;\n\tworkspaceId?: string;\n\townerId?: string;\n\tname?: string;\n\tdescription?: string;\n\tscope?: string | number;\n\tcontent?: string;\n\tcurrentVersion?: number;\n\ttags?: string[];\n}\n\ninterface ListSkillsResponse {\n\tskills?: SkillsServiceSkill[];\n\ttotal?: number;\n}\n\nconst downstreamClients = new Map<string, downstream.DownstreamClient>();\n\nfunction trimString(value: string | undefined): string | undefined {\n\tconst trimmed = value?.trim();\n\treturn trimmed ? trimmed : undefined;\n}\n\nfunction getEnvValue(names: string[]): string | undefined {\n\tfor (const name of names) {\n\t\tconst value = trimString(process.env[name]);\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction parsePositiveInt(value: string | undefined, fallback: number): number {\n\tconst parsed = Number.parseInt(value ?? \"\", 10);\n\treturn Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nfunction normalizeBaseUrl(baseUrl: string): string {\n\tlet normalized = baseUrl.trim();\n\tfor (const suffix of [LIST_SKILLS_PATH, \"/skills.v1.SkillService\"]) {\n\t\tif (normalized.endsWith(suffix)) {\n\t\t\tnormalized = normalized.slice(0, -suffix.length);\n\t\t}\n\t}\n\treturn normalized.replace(/\\/+$/, \"\");\n}\n\nfunction resolveWorkspaceId(\n\tconfig: SkillsServiceConfig | undefined,\n): string | undefined {\n\tconst configuredWorkspaceId = trimString(config?.workspaceId);\n\tconst envWorkspaceId = getEnvValue([\n\t\t\"SKILLS_SERVICE_WORKSPACE_ID\",\n\t\t\"MAESTRO_SKILLS_WORKSPACE_ID\",\n\t\t...EVALOPS_ORGANIZATION_ID_ENV_VARS,\n\t]);\n\tif (configuredWorkspaceId ?? envWorkspaceId) {\n\t\treturn configuredWorkspaceId ?? envWorkspaceId;\n\t}\n\tconst stored = loadOAuthCredentials(\"evalops\")?.metadata?.organizationId;\n\treturn typeof stored === \"string\" && stored.trim().length > 0\n\t\t? stored.trim()\n\t\t: undefined;\n}\n\nfunction normalizeLimit(value: number | undefined): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value)) {\n\t\treturn DEFAULT_LIMIT;\n\t}\n\treturn Math.max(1, Math.min(500, Math.trunc(value)));\n}\n\nexport function resolveSkillsServiceConfig(\n\tconfig: SkillsServiceConfig | false | undefined,\n): ResolvedSkillsServiceConfig | null {\n\tif (config === false) {\n\t\treturn null;\n\t}\n\n\tconst baseUrl =\n\t\ttrimString(config?.baseUrl) ??\n\t\tgetEnvValue([\"SKILLS_SERVICE_URL\", \"MAESTRO_SKILLS_SERVICE_URL\"]);\n\tif (!baseUrl) {\n\t\treturn null;\n\t}\n\n\tconst workspaceId = resolveWorkspaceId(config);\n\tif (!workspaceId) {\n\t\treturn null;\n\t}\n\n\tconst storedToken = trimString(loadOAuthCredentials(\"evalops\")?.access);\n\tconst token =\n\t\ttrimString(config?.token) ??\n\t\tgetEnvValue([\n\t\t\t\"SKILLS_SERVICE_TOKEN\",\n\t\t\t\"MAESTRO_SKILLS_SERVICE_TOKEN\",\n\t\t\t...EVALOPS_ACCESS_TOKEN_ENV_VARS,\n\t\t]) ??\n\t\tstoredToken;\n\n\tconst required =\n\t\tconfig?.required ??\n\t\tgetEnvValue([\n\t\t\t\"SKILLS_SERVICE_REQUIRED\",\n\t\t\t\"MAESTRO_SKILLS_SERVICE_REQUIRED\",\n\t\t]) === \"1\";\n\n\treturn {\n\t\tbaseUrl: normalizeBaseUrl(baseUrl),\n\t\tcircuitFailureThreshold:\n\t\t\tconfig?.circuitFailureThreshold ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\n\t\t\t\t\t\"SKILLS_SERVICE_CIRCUIT_FAILURE_THRESHOLD\",\n\t\t\t\t\t\"MAESTRO_SKILLS_SERVICE_CIRCUIT_FAILURE_THRESHOLD\",\n\t\t\t\t]),\n\t\t\t\t5,\n\t\t\t),\n\t\tcircuitResetTimeoutMs:\n\t\t\tconfig?.circuitResetTimeoutMs ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\n\t\t\t\t\t\"SKILLS_SERVICE_CIRCUIT_RESET_TIMEOUT_MS\",\n\t\t\t\t\t\"MAESTRO_SKILLS_SERVICE_CIRCUIT_RESET_TIMEOUT_MS\",\n\t\t\t\t]),\n\t\t\t\t30_000,\n\t\t\t),\n\t\tcircuitSuccessThreshold:\n\t\t\tconfig?.circuitSuccessThreshold ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\n\t\t\t\t\t\"SKILLS_SERVICE_CIRCUIT_SUCCESS_THRESHOLD\",\n\t\t\t\t\t\"MAESTRO_SKILLS_SERVICE_CIRCUIT_SUCCESS_THRESHOLD\",\n\t\t\t\t]),\n\t\t\t\t2,\n\t\t\t),\n\t\tentityId:\n\t\t\ttrimString(config?.entityId) ??\n\t\t\tgetEnvValue([\"SKILLS_SERVICE_ENTITY_ID\", \"MAESTRO_SKILLS_ENTITY_ID\"]),\n\t\tfailureMode: required ? \"required\" : \"optional\",\n\t\tlimit:\n\t\t\tconfig?.limit ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\"SKILLS_SERVICE_LIMIT\", \"MAESTRO_SKILLS_SERVICE_LIMIT\"]),\n\t\t\t\tDEFAULT_LIMIT,\n\t\t\t),\n\t\tmaxAttempts:\n\t\t\tconfig?.maxAttempts ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\n\t\t\t\t\t\"SKILLS_SERVICE_MAX_ATTEMPTS\",\n\t\t\t\t\t\"MAESTRO_SKILLS_SERVICE_MAX_ATTEMPTS\",\n\t\t\t\t]),\n\t\t\t\tDEFAULT_MAX_ATTEMPTS,\n\t\t\t),\n\t\tsurface:\n\t\t\ttrimString(config?.surface) ??\n\t\t\tgetEnvValue([\"SKILLS_SERVICE_SURFACE\"]) ??\n\t\t\tDEFAULT_SURFACE,\n\t\ttimeoutMs:\n\t\t\tconfig?.timeoutMs ??\n\t\t\tparsePositiveInt(\n\t\t\t\tgetEnvValue([\n\t\t\t\t\t\"SKILLS_SERVICE_TIMEOUT_MS\",\n\t\t\t\t\t\"MAESTRO_SKILLS_SERVICE_TIMEOUT_MS\",\n\t\t\t\t]),\n\t\t\t\tDEFAULT_TIMEOUT_MS,\n\t\t\t),\n\t\ttoken,\n\t\tworkspaceId,\n\t};\n}\n\nfunction getDownstreamClient(\n\tconfig: ResolvedSkillsServiceConfig,\n\top: SkillsCall,\n): downstream.DownstreamClient {\n\tconst failureMode = SKILLS_CALL_FAILURE_MODES[op][config.failureMode];\n\tconst key = JSON.stringify({\n\t\tbaseUrl: config.baseUrl,\n\t\tfailureMode,\n\t\top,\n\t\treset: config.circuitResetTimeoutMs,\n\t\tsuccess: config.circuitSuccessThreshold,\n\t\tthreshold: config.circuitFailureThreshold,\n\t});\n\tconst cached = downstreamClients.get(key);\n\tif (cached) {\n\t\treturn cached;\n\t}\n\tconst client = downstream.New(`skills.${op}`, {\n\t\tfailureMode,\n\t\tbreaker: {\n\t\t\tfailureThreshold: config.circuitFailureThreshold,\n\t\t\tresetTimeoutMs: config.circuitResetTimeoutMs,\n\t\t\tsuccessThreshold: config.circuitSuccessThreshold,\n\t\t\ttoolName: `skills.${op}`,\n\t\t},\n\t});\n\tdownstreamClients.set(key, client);\n\treturn client;\n}\n\nfunction toHttpFailureMode(\n\tclient: downstream.DownstreamClient,\n): DownstreamHttpFailureMode {\n\treturn client.failureMode === downstream.FailClosed ? \"required\" : \"optional\";\n}\n\nfunction buildHeaders(\n\tconfig: ResolvedSkillsServiceConfig,\n): Record<string, string> {\n\treturn {\n\t\t...(config.token ? { Authorization: `Bearer ${config.token}` } : {}),\n\t\t\"Connect-Protocol-Version\": CONNECT_PROTOCOL_VERSION,\n\t\t\"Content-Type\": \"application/json\",\n\t\t\"X-Surface\": config.surface,\n\t\t...(config.entityId ? { \"X-Entity-ID\": config.entityId } : {}),\n\t};\n}\n\nfunction normalizeScope(\n\tscope: string | number | undefined,\n): string | undefined {\n\tswitch (scope) {\n\t\tcase \"SKILL_SCOPE_GLOBAL\":\n\t\tcase \"global\":\n\t\tcase 1:\n\t\t\treturn \"global\";\n\t\tcase \"SKILL_SCOPE_WORKSPACE\":\n\t\tcase \"workspace\":\n\t\tcase 2:\n\t\t\treturn \"workspace\";\n\t\tcase \"SKILL_SCOPE_PERSONAL\":\n\t\tcase \"personal\":\n\t\tcase 3:\n\t\t\treturn \"personal\";\n\t\tdefault:\n\t\t\treturn undefined;\n\t}\n}\n\nfunction normalizeTags(tags: string[] | undefined): string[] | undefined {\n\tconst normalized = Array.isArray(tags)\n\t\t? tags.map((tag) => tag.trim()).filter((tag) => tag.length > 0)\n\t\t: [];\n\treturn normalized.length > 0 ? normalized : undefined;\n}\n\nfunction toLoadedSkill(skill: SkillsServiceSkill): LoadedSkill | null {\n\tconst id = trimString(skill.id);\n\tconst name = trimString(skill.name);\n\tconst content = trimString(skill.content);\n\tif (!id || !name || !content) {\n\t\treturn null;\n\t}\n\n\tconst scope = normalizeScope(skill.scope);\n\tconst metadata: Record<string, string> = {\n\t\tskillServiceId: id,\n\t\t...(trimString(skill.workspaceId)\n\t\t\t? { workspaceId: trimString(skill.workspaceId)! }\n\t\t\t: {}),\n\t\t...(trimString(skill.ownerId)\n\t\t\t? { ownerId: trimString(skill.ownerId)! }\n\t\t\t: {}),\n\t\t...(typeof skill.currentVersion === \"number\" &&\n\t\tNumber.isFinite(skill.currentVersion)\n\t\t\t? { currentVersion: String(Math.trunc(skill.currentVersion)) }\n\t\t\t: {}),\n\t\t...(scope ? { scope } : {}),\n\t};\n\n\treturn {\n\t\tname,\n\t\tdescription: trimString(skill.description) ?? \"Skill from skills service\",\n\t\tcontent,\n\t\t// Match the local-skill trust-hash schema so the same approval\n\t\t// model applies to service-loaded skills: bind `name` and (an\n\t\t// empty set of) resources so an attacker can't ship a\n\t\t// \"rogue-clone\" with the same body and inherit the user's\n\t\t// approval of \"trusted-helper\". Closes the round-3 gap left by\n\t\t// PRs #2629/#2749/#2753 in the service-client code path.\n\t\tcontentSha: computeSkillTrustSha(name, content, [], {}),\n\t\tmetadata,\n\t\ttags: normalizeTags(skill.tags),\n\t\tsourcePath: `skills-service://${id}`,\n\t\tsourceType: \"service\",\n\t\tresources: [],\n\t\tresourceDirs: {},\n\t};\n}\n\nexport const __TEST_ONLY_toLoadedSkill = toLoadedSkill;\n\nexport async function loadSkillsFromService(\n\tconfig: ResolvedSkillsServiceConfig,\n\toptions?: { signal?: AbortSignal },\n): Promise<LoadedSkill[]> {\n\tconst client = getDownstreamClient(config, \"listSkills\");\n\treturn downstream.CallOp(\n\t\tclient,\n\t\t\"listSkills\",\n\t\tasync () => {\n\t\t\tconst response = await fetchDownstream(\n\t\t\t\t`${config.baseUrl}${LIST_SKILLS_PATH}`,\n\t\t\t\t{\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\theaders: buildHeaders(config),\n\t\t\t\t\tsignal: options?.signal,\n\t\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\t\tworkspaceId: config.workspaceId,\n\t\t\t\t\t\tlimit: normalizeLimit(config.limit),\n\t\t\t\t\t\toffset: 0,\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tserviceName: \"skills service\",\n\t\t\t\t\tfailureMode: toHttpFailureMode(client),\n\t\t\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\t\t\tmaxAttempts: config.maxAttempts,\n\t\t\t\t},\n\t\t\t);\n\t\t\tif (!response.ok) {\n\t\t\t\tconst text = await response.text();\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`skills service returned ${response.status}: ${\n\t\t\t\t\t\ttext || response.statusText\n\t\t\t\t\t}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst payload = (await response.json()) as ListSkillsResponse;\n\t\t\treturn (payload.skills ?? [])\n\t\t\t\t.map(toLoadedSkill)\n\t\t\t\t.filter((skill): skill is LoadedSkill => skill !== null);\n\t\t},\n\t\t() => [],\n\t);\n}\n\nexport function resetSkillsDownstreamForTests(): void {\n\tdownstreamClients.clear();\n}\n"]}

package/dist/skills/skill-templates.d.ts

@@ -1,70 +0,0 @@
-/**
- * Skill template registry
- *
- * Builds on the scaffolder primitive (part 1 of #2665, merged as
- * #2674). The scaffolder writes a SKILL.md given a name + options;
- * this module owns the canonical set of *templates* the agent + the
- * `/setup-*` slash commands draw from.
- *
- * Each template names a skill family (review, lint, test, ...) and
- * supplies the body, allowed-tools whitelist, and metadata the
- * scaffolder hands straight to `scaffoldSkillWithBody`. The set is
- * pure data: callers can compose, copy, or branch the templates
- * without touching the scaffolder code.
- *
- * What's NOT here: slash command registration, the YAML emitter
- * (those live in `./scaffolder.ts`), no disk I/O. Pure types + a
- * frozen registry.
- */
-/** Allowed-tools / builtin-tools entries match the scaffolder option shape. */
-export interface SkillTemplate {
-    /** Stable id used as the scaffolded skill name (kebab-case). */
-    name: string;
-    /** Short human-readable description for `/setup-*` discovery. */
-    description: string;
-    /** Markdown body the scaffolder writes after the frontmatter. */
-    body: string;
-    /** Optional `allowed-tools` whitelist passed straight to the scaffolder. */
-    allowedTools?: string[];
-    /** Optional `builtin-tools` list (Maestro-provided tools). */
-    builtinTools?: string[];
-    /** Optional simple key/value metadata nested under `metadata:`. */
-    metadata?: Record<string, string>;
-    /**
-     * Tags for `findSkillTemplates({ tag })` queries. Templates are
-     * tagged loosely so consumers can group by category ("review",
-     * "lint", "test", ...) without inventing a new field per cut.
-     */
-    tags: string[];
-}
-/** Slug-keyed lookup for an immutable copy of the registry. */
-export interface SkillTemplateLookup {
-    byName(name: string): SkillTemplate | undefined;
-    list(): SkillTemplate[];
-}
-/** Canonical set of templates the agent ships out of the box. */
-export declare const SKILL_TEMPLATES: readonly SkillTemplate[];
-/**
- * Find a template by `name` (case-sensitive). Returns `undefined` if
- * no template matches.
- */
-export declare function findSkillTemplate(name: string): SkillTemplate | undefined;
-/** Filter options for `findSkillTemplates`. */
-export interface FindSkillTemplatesOptions {
-    /** Only include templates carrying every tag listed here. */
-    tags?: string[];
-    /**
-     * Optional substring match against `name` or `description`
-     * (case-insensitive). Empty/whitespace ignored.
-     */
-    search?: string;
-}
-/**
- * Filter the registry. Stable result order: matches the registry
- * declaration order (the canonical ordering callers see in
- * `SKILL_TEMPLATES`).
- */
-export declare function findSkillTemplates(options?: FindSkillTemplatesOptions): SkillTemplate[];
-/** Build a slug-keyed lookup over a custom registry. */
-export declare function makeSkillTemplateLookup(templates: readonly SkillTemplate[]): SkillTemplateLookup;
-//# sourceMappingURL=skill-templates.d.ts.map

package/dist/skills/skill-templates.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-templates.d.ts","sourceRoot":"","sources":["../../src/skills/skill-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC7B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAChD,IAAI,IAAI,aAAa,EAAE,CAAC;CACxB;AA+FD,iEAAiE;AACjE,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAAc,CAAC;AAEnE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAKzE;AAED,+CAA+C;AAC/C,MAAM,WAAW,yBAAyB;IACzC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,GAAE,yBAA8B,GACrC,aAAa,EAAE,CAajB;AAED,wDAAwD;AACxD,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,SAAS,aAAa,EAAE,GACjC,mBAAmB,CAcrB"}

package/dist/skills/skill-templates.js

@@ -1,154 +0,0 @@
-/**
- * Skill template registry
- *
- * Builds on the scaffolder primitive (part 1 of #2665, merged as
- * #2674). The scaffolder writes a SKILL.md given a name + options;
- * this module owns the canonical set of *templates* the agent + the
- * `/setup-*` slash commands draw from.
- *
- * Each template names a skill family (review, lint, test, ...) and
- * supplies the body, allowed-tools whitelist, and metadata the
- * scaffolder hands straight to `scaffoldSkillWithBody`. The set is
- * pure data: callers can compose, copy, or branch the templates
- * without touching the scaffolder code.
- *
- * What's NOT here: slash command registration, the YAML emitter
- * (those live in `./scaffolder.ts`), no disk I/O. Pure types + a
- * frozen registry.
- */
-const TEMPLATES = Object.freeze([
-    {
-        name: "review",
-        description: "Anchor skill the agent invokes when a reviewer asks for code review or PR comment.",
-        body: [
-            "# Review skill",
-            "",
-            "Use this skill when a teammate asks for a review of a diff, PR, or",
-            "branch.",
-            "",
-            "## Process",
-            "",
-            "1. Read the diff end-to-end before commenting on anything.",
-            "2. Identify the top three risks; lead with those.",
-            "3. Match the project's review tone — terse, direct, no praise filler.",
-            "4. Defer style nits to the linter where it covers them.",
-        ].join("\n"),
-        allowedTools: ["read", "search", "gh_pr"],
-        tags: ["review", "anchor"],
-    },
-    {
-        name: "review-guidelines",
-        description: "Repository-specific review guidelines that get spliced into the review skill at activation time.",
-        body: [
-            "# Review guidelines",
-            "",
-            "_Document this repository's review expectations here._",
-            "",
-            "- Linked issue or ticket required on every PR.",
-            "- Tests must exist for every behavioral change.",
-            "- Public mirror changes need the public-release-mirror label.",
-        ].join("\n"),
-        tags: ["review", "guidelines"],
-    },
-    {
-        name: "lint",
-        description: "Run the project's linters and surface findings as actionable bullets.",
-        body: [
-            "# Lint skill",
-            "",
-            "Use this skill when the reviewer asks for a lint pass.",
-            "",
-            "## Process",
-            "",
-            "1. Run `bun run bun:lint` (or the project's equivalent).",
-            "2. Group findings by file + severity.",
-            "3. Quote the offending line and propose a fix in-line.",
-        ].join("\n"),
-        allowedTools: ["bash", "read"],
-        tags: ["lint", "tooling"],
-    },
-    {
-        name: "test",
-        description: "Run the test suite (or a filtered subset) and report failures with the smallest reproduction.",
-        body: [
-            "# Test skill",
-            "",
-            "Use this skill when the reviewer asks for tests to be run or a",
-            "specific failure investigated.",
-            "",
-            "## Process",
-            "",
-            "1. Default to `npx nx run maestro:test --skip-nx-cache`.",
-            "2. For targeted runs use `bunx vitest --run -t '<name>'`.",
-            "3. Report passes inline and failures with the smallest reproduction.",
-        ].join("\n"),
-        allowedTools: ["bash", "read"],
-        tags: ["test", "tooling"],
-    },
-    {
-        name: "release-notes",
-        description: "Draft release notes from git log + PR titles, grouped by category.",
-        body: [
-            "# Release notes skill",
-            "",
-            "Use this skill when the reviewer asks for release notes.",
-            "",
-            "## Process",
-            "",
-            "1. `gh pr list --search 'merged:>=<date>'` for the window.",
-            "2. Group by `[maestro]`, `[codex]`, `fix(*)`, etc.",
-            "3. Keep entries to one sentence; link to PR.",
-        ].join("\n"),
-        allowedTools: ["bash", "gh_pr"],
-        tags: ["release", "docs"],
-    },
-]);
-/** Canonical set of templates the agent ships out of the box. */
-export const SKILL_TEMPLATES = TEMPLATES;
-/**
- * Find a template by `name` (case-sensitive). Returns `undefined` if
- * no template matches.
- */
-export function findSkillTemplate(name) {
-    if (typeof name !== "string")
-        return undefined;
-    const trimmed = name.trim();
-    if (!trimmed)
-        return undefined;
-    return TEMPLATES.find((t) => t.name === trimmed);
-}
-/**
- * Filter the registry. Stable result order: matches the registry
- * declaration order (the canonical ordering callers see in
- * `SKILL_TEMPLATES`).
- */
-export function findSkillTemplates(options = {}) {
-    const tags = options.tags?.filter((t) => t.trim().length > 0) ?? [];
-    const search = options.search?.toLowerCase().trim() ?? "";
-    return TEMPLATES.filter((t) => {
-        if (tags.length > 0 && !tags.every((tag) => t.tags.includes(tag))) {
-            return false;
-        }
-        if (search) {
-            const haystack = `${t.name} ${t.description}`.toLowerCase();
-            if (!haystack.includes(search))
-                return false;
-        }
-        return true;
-    });
-}
-/** Build a slug-keyed lookup over a custom registry. */
-export function makeSkillTemplateLookup(templates) {
-    const byName = new Map();
-    for (const template of templates) {
-        if (byName.has(template.name)) {
-            throw new Error(`makeSkillTemplateLookup: duplicate template name "${template.name}"`);
-        }
-        byName.set(template.name, template);
-    }
-    return {
-        byName: (name) => byName.get(name),
-        list: () => [...templates],
-    };
-}
-//# sourceMappingURL=skill-templates.js.map