@feiyoug/skill-lab 0.0.0 → 0.0.2

package/script/analyzer/astgrep/client.js

@@ -1,81 +1,67 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AstGrepClient = void 0;
-const dntShim = __importStar(require("../../_dnt.shims.js"));
-const napi_1 = require("@ast-grep/napi");
-const registry_js_1 = require("./registry.js");
+const mod_js_1 = require("../../.npm-build-vendor/ast-grep-wasm/mod.js");
+const registry_js_1 = require("../treesitter/registry.js");
+const logging_js_1 = require("../logging.js");
 class AstGrepClient {
-    constructor() {
-        Object.defineProperty(this, "isLanguageRegistryInitialized", {
+    constructor(logger = logging_js_1.NO_OP_LOGGER, showProgressBar = false) {
+        Object.defineProperty(this, "logger", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: false
+            value: logger
+        });
+        Object.defineProperty(this, "showProgressBar", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: showProgressBar
+        });
+        Object.defineProperty(this, "REGISTERED_GRAMMARS", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Set()
         });
-        Object.defineProperty(this, "PARSE_CACHE_BY_GRAMMAR", {
+        Object.defineProperty(this, "SG_ROOT_CACHE_BY_CONTENT", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: {}
         });
+        /** Lazy runtime init promise — created on first use, shared across all calls. */
+        Object.defineProperty(this, "parserInitialized", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: false
+        });
     }
     /** Parse content for direct AST traversal using kind/composite rules. */
-    parse(language, content) {
-        this.ensureLanguageRegistry();
-        const rootByLen = this.getParseCache(language);
+    async parse(language, content) {
+        await this.ensureLanguageRegistered(language);
+        const sgRootByLen = this.getSgRootCache(language);
         const len = content.length;
-        const rootByHash = rootByLen.get(len);
+        const rootByHash = sgRootByLen.get(len);
         if (rootByHash) {
             const hash = this.hashContent(content);
             const cached = rootByHash.get(hash);
             if (cached)
                 return cached;
         }
-        const ast = (0, napi_1.parse)(language, content);
+        const sgRoot = (0, mod_js_1.parse)(language, content);
         const hash = this.hashContent(content);
-        const bucket = rootByLen.get(len) ?? new Map();
-        bucket.set(hash, ast);
-        rootByLen.set(len, bucket);
-        return ast;
+        const bucket = sgRootByLen.get(len) ?? new Map();
+        bucket.set(hash, sgRoot);
+        sgRootByLen.set(len, bucket);
+        return sgRoot;
     }
-    scanWithRules(content, language, rules) {
-        this.ensureLanguageRegistry();
+    async scanWithRules(content, language, rules) {
+        await this.ensureLanguageRegistered(language);
         const matches = [];
         try {
-            const ast = this.parse(language, content);
+            const ast = await this.parse(language, content);
             const root = ast.root();
             for (const rule of rules) {
                 for (const pattern of rule.patterns) {
@@ -119,15 +105,23 @@ class AstGrepClient {
             extracted: match.extracted,
         }));
     }
-    ensureLanguageRegistry() {
-        if (this.isLanguageRegistryInitialized)
+    /** Initializes the ast-grep runtime once (without registering grammars yet). */
+    async ensureRuntimeInit() {
+        if (this.parserInitialized)
+            return;
+        await (0, mod_js_1.initializeTreeSitter)();
+    }
+    /** Lazily register a single grammar the first time it is needed. */
+    async ensureLanguageRegistered(language) {
+        if (this.REGISTERED_GRAMMARS.has(language))
             return;
-        const bundledResourceDir = dntShim.Deno.env.get("SKILL_LAB_AST_GREP_RESOURCES_DIR");
-        const registrations = bundledResourceDir
-            ? (0, registry_js_1.buildBundledRegistrations)(bundledResourceDir)
-            : (0, registry_js_1.buildDevRegistrations)();
-        (0, napi_1.registerDynamicLanguage)(registrations);
-        this.isLanguageRegistryInitialized = true;
+        await this.ensureRuntimeInit();
+        const wasmPath = await (0, registry_js_1.ensureGrammar)(language, {
+            logger: this.logger,
+            showProgressBar: this.showProgressBar,
+        });
+        await (0, mod_js_1.registerDynamicLanguage)({ [language]: { libraryPath: wasmPath } });
+        this.REGISTERED_GRAMMARS.add(language);
     }
     stripQuotes(value) {
         return value
@@ -136,11 +130,11 @@ class AstGrepClient {
             .replace(/[;,)]+$/, "")
             .trim();
     }
-    getParseCache(language) {
-        if (!this.PARSE_CACHE_BY_GRAMMAR[language]) {
-            this.PARSE_CACHE_BY_GRAMMAR[language] = new Map();
+    getSgRootCache(language) {
+        if (!this.SG_ROOT_CACHE_BY_CONTENT[language]) {
+            this.SG_ROOT_CACHE_BY_CONTENT[language] = new Map();
         }
-        return this.PARSE_CACHE_BY_GRAMMAR[language];
+        return this.SG_ROOT_CACHE_BY_CONTENT[language];
     }
     hashContent(content) {
         // FNV-1a 32-bit (fast, non-cryptographic)

package/script/analyzer/config/default.d.ts

@@ -0,0 +1,8 @@
+import type { TreesitterGrammar } from "../treesitter/registry.js";
+import type { AnalyzerConfig, LanguagePolicy, RiskReportConfig } from "./types.js";
+export declare const NODE_BUILTIN_IMPORTS: readonly ["buffer", "child_process", "crypto", "events", "fs", "fs/promises", "http", "https", "os", "path", "stream", "timers", "url", "util", "node:buffer", "node:child_process", "node:crypto", "node:events", "node:fs", "node:fs/promises", "node:http", "node:https", "node:os", "node:path", "node:stream", "node:timers", "node:url", "node:util"];
+export declare const PYTHON_BUILTIN_IMPORTS: readonly ["argparse", "collections", "datetime", "functools", "hashlib", "itertools", "json", "logging", "math", "os", "os.path", "pathlib", "re", "shutil", "subprocess", "sys", "tempfile", "typing", "urllib", "urllib.parse", "urllib.request"];
+export declare const DEFAULT_ALLOWLIST_LANGUAGES: Partial<Record<TreesitterGrammar, LanguagePolicy>>;
+export declare const DEFAULT_RISK_REPORT_CONFIG: Required<RiskReportConfig>;
+export declare const DEFAULT_ANALYZER_CONFIG: AnalyzerConfig;
+//# sourceMappingURL=default.d.ts.map

package/script/analyzer/config/default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../src/analyzer/config/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnF,eAAO,MAAM,oBAAoB,6VA6BvB,CAAC;AAEX,eAAO,MAAM,sBAAsB,qPAsBzB,CAAC;AAEX,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAK1F,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAmBjE,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,cAWrC,CAAC"}

package/script/analyzer/config/default.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ANALYZER_CONFIG = exports.DEFAULT_RISK_REPORT_CONFIG = exports.DEFAULT_ALLOWLIST_LANGUAGES = exports.PYTHON_BUILTIN_IMPORTS = exports.NODE_BUILTIN_IMPORTS = void 0;
+exports.NODE_BUILTIN_IMPORTS = [
+    "buffer",
+    "child_process",
+    "crypto",
+    "events",
+    "fs",
+    "fs/promises",
+    "http",
+    "https",
+    "os",
+    "path",
+    "stream",
+    "timers",
+    "url",
+    "util",
+    "node:buffer",
+    "node:child_process",
+    "node:crypto",
+    "node:events",
+    "node:fs",
+    "node:fs/promises",
+    "node:http",
+    "node:https",
+    "node:os",
+    "node:path",
+    "node:stream",
+    "node:timers",
+    "node:url",
+    "node:util",
+];
+exports.PYTHON_BUILTIN_IMPORTS = [
+    "argparse",
+    "collections",
+    "datetime",
+    "functools",
+    "hashlib",
+    "itertools",
+    "json",
+    "logging",
+    "math",
+    "os",
+    "os.path",
+    "pathlib",
+    "re",
+    "shutil",
+    "subprocess",
+    "sys",
+    "tempfile",
+    "typing",
+    "urllib",
+    "urllib.parse",
+    "urllib.request",
+];
+exports.DEFAULT_ALLOWLIST_LANGUAGES = {
+    javascript: { imports: [...exports.NODE_BUILTIN_IMPORTS] },
+    typescript: { imports: [...exports.NODE_BUILTIN_IMPORTS] },
+    tsx: { imports: [...exports.NODE_BUILTIN_IMPORTS] },
+    python: { imports: [...exports.PYTHON_BUILTIN_IMPORTS] },
+};
+exports.DEFAULT_RISK_REPORT_CONFIG = {
+    baseScore: {
+        info: 0,
+        warning: 1,
+        critical: 5,
+    },
+    uplift: {
+        "NETWORK:data_exfiltration": 5,
+        "NETWORK:remote_code_execution": 5,
+        "NETWORK:credential_leak": 7,
+        "NETWORK:localhost_secret_exposure": 2,
+    },
+    thresholds: {
+        safe: 0,
+        caution: 1,
+        attention: 3,
+        risky: 5,
+        avoid: 7,
+    },
+};
+exports.DEFAULT_ANALYZER_CONFIG = {
+    scan: {
+        maxFileSize: 1_000_000,
+        maxFileCount: 100,
+        maxScanDepth: 5,
+    },
+    allowlist: {
+        languages: exports.DEFAULT_ALLOWLIST_LANGUAGES,
+    },
+    denylist: undefined,
+    riskReport: exports.DEFAULT_RISK_REPORT_CONFIG,
+};

package/script/analyzer/config/helpers.d.ts

@@ -0,0 +1,8 @@
+import type { AnalyzerConfig } from "./types.js";
+type DeepPartial<T> = {
+    [K in keyof T]?: T[K] extends Array<infer U> ? Array<U> : T[K] extends Record<string, unknown> ? DeepPartial<T[K]> : T[K];
+};
+export declare function resolveConfig(partial?: Partial<AnalyzerConfig>): AnalyzerConfig;
+export declare function deepMergeJson<T extends Record<string, unknown>>(base: T, override: DeepPartial<T>): T;
+export {};
+//# sourceMappingURL=helpers.d.ts.map

package/script/analyzer/config/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/analyzer/config/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,cAAc,EAAiC,MAAM,YAAY,CAAC;AAE3F,KAAK,WAAW,CAAC,CAAC,IAAI;KACjB,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GACjD,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GACxD,CAAC,CAAC,CAAC,CAAC;CACb,CAAC;AAEF,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAY/E;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,IAAI,EAAE,CAAC,EACP,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GACzB,CAAC,CAqBH"}

package/script/analyzer/config/helpers.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveConfig = resolveConfig;
+exports.deepMergeJson = deepMergeJson;
+const default_js_1 = require("./default.js");
+function resolveConfig(partial) {
+    const defaultScan = default_js_1.DEFAULT_ANALYZER_CONFIG.scan ?? {};
+    const partialScan = partial?.scan ?? {};
+    const defaultRiskReport = default_js_1.DEFAULT_ANALYZER_CONFIG.riskReport ?? {};
+    const partialRiskReport = partial?.riskReport ?? {};
+    return {
+        scan: deepMergeJson(defaultScan, partialScan),
+        allowlist: mergeAllowlist(default_js_1.DEFAULT_ANALYZER_CONFIG.allowlist, partial?.allowlist),
+        denylist: mergeAllowlist(default_js_1.DEFAULT_ANALYZER_CONFIG.denylist, partial?.denylist),
+        riskReport: deepMergeJson(defaultRiskReport, partialRiskReport),
+    };
+}
+function deepMergeJson(base, override) {
+    const result = { ...base };
+    for (const key of Object.keys(override)) {
+        const baseValue = result[key];
+        const overrideValue = override[key];
+        if (overrideValue === undefined)
+            continue;
+        if (isPlainObject(baseValue) && isPlainObject(overrideValue)) {
+            result[key] = deepMergeJson(baseValue, overrideValue);
+            continue;
+        }
+        result[key] = overrideValue;
+    }
+    return result;
+}
+function isPlainObject(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    if (Array.isArray(value))
+        return false;
+    return Object.getPrototypeOf(value) === Object.prototype;
+}
+function mergeAllowlist(base, override) {
+    if (!base && !override)
+        return undefined;
+    const languages = mergeLanguagePolicies(base?.languages, override?.languages);
+    const network = mergeNetworkPolicy(base?.network, override?.network);
+    if (!languages && !network)
+        return undefined;
+    return { languages, network };
+}
+function mergeLanguagePolicies(base, override) {
+    if (!base && !override)
+        return undefined;
+    const keys = new Set([
+        ...Object.keys(base ?? {}),
+        ...Object.keys(override ?? {}),
+    ]);
+    const result = {};
+    for (const key of keys) {
+        const imports = mergeStringList(base?.[key]?.imports, override?.[key]?.imports);
+        if (!imports)
+            continue;
+        result[key] = { imports };
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+function mergeNetworkPolicy(base, override) {
+    if (!base && !override)
+        return undefined;
+    const domains = mergeStringList(base?.domains, override?.domains);
+    return domains ? { domains } : undefined;
+}
+function mergeStringList(base, override) {
+    if (!base && !override)
+        return undefined;
+    const values = new Set([...(base ?? []), ...(override ?? [])]);
+    return values.size > 0 ? [...values] : undefined;
+}

package/script/analyzer/config/mod.d.ts

@@ -0,0 +1,4 @@
+export * from "./types.js";
+export * from "./default.js";
+export { resolveConfig } from "./helpers.js";
+//# sourceMappingURL=mod.d.ts.map

package/script/analyzer/config/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../src/analyzer/config/mod.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/script/analyzer/config/mod.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveConfig = void 0;
+__exportStar(require("./types.js"), exports);
+__exportStar(require("./default.js"), exports);
+var helpers_js_1 = require("./helpers.js");
+Object.defineProperty(exports, "resolveConfig", { enumerable: true, get: function () { return helpers_js_1.resolveConfig; } });

package/script/analyzer/config/types.d.ts

@@ -0,0 +1,58 @@
+import type { RiskCode } from "../../shared/mod.js";
+import { PermissionScope } from "../../shared/mod.js";
+import type { TreesitterGrammar } from "../treesitter/registry.js";
+export declare const DEFAULT_SKILL_VERSION = "0.0.1";
+export type LanguagePolicy = {
+    imports?: string[];
+};
+export type NetworkPolicy = {
+    domains?: string[];
+};
+export type ScanConfig = {
+    maxFileSize?: number;
+    maxFileCount?: number;
+    maxScanDepth?: number;
+};
+export type Allowlist = {
+    languages?: Partial<Record<TreesitterGrammar, LanguagePolicy>>;
+    network?: NetworkPolicy;
+};
+export type Denylist = {
+    languages?: Partial<Record<TreesitterGrammar, LanguagePolicy>>;
+    network?: NetworkPolicy;
+};
+export type AnalyzerConfig = {
+    scan?: ScanConfig;
+    allowlist?: Allowlist;
+    denylist?: Denylist;
+    riskReport?: RiskReportConfig;
+};
+export type RiskUpliftConfig = Partial<Record<RiskCode, number>>;
+export type RiskThresholdConfig = {
+    safe: number;
+    caution: number;
+    attention: number;
+    risky: number;
+    avoid: number;
+};
+export type RiskReportConfig = {
+    baseScore?: {
+        info?: number;
+        warning?: number;
+        critical?: number;
+    };
+    uplift?: RiskUpliftConfig;
+    thresholds?: Partial<RiskThresholdConfig>;
+};
+export declare const ALLOWED_TOOLS_MAPPING: Record<string, {
+    tool: string;
+    scope: PermissionScope;
+    permission: string;
+}>;
+export declare const TOOLS_MAPPING: Record<string, {
+    scope: PermissionScope;
+    permission: string;
+}>;
+export declare const UNSUPPORTED_SKILL_FRONTMATTER_FIELDS: readonly ["argument-hint", "disable-model-invocation", "user-invocable", "model", "context", "agent", "hooks"];
+export declare const FRONTMATTER_SUPPORTED_FIELDS: readonly ["name", "description", "license", "compatibility", "metadata", "allowed-tools"];
+//# sourceMappingURL=types.d.ts.map

package/script/analyzer/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/analyzer/config/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,MAAM,MAAM,cAAc,GAAG;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,aAAa,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,SAAS,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC7C,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CACtC,MAAM,EACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAS/D,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAaxF,CAAC;AAEF,eAAO,MAAM,oCAAoC,gHAQvC,CAAC;AAEX,eAAO,MAAM,4BAA4B,2FAO/B,CAAC"}

package/script/analyzer/{config.js → config/types.js}

@@ -1,12 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FRONTMATTER_SUPPORTED_FIELDS = exports.UNSUPPORTED_SKILL_FRONTMATTER_FIELDS = exports.SCORING = exports.TOOLS_MAPPING = exports.ALLOWED_TOOLS_MAPPING = exports.DEFAULT_CONFIG = exports.DEFAULT_SKILL_VERSION = void 0;
+exports.FRONTMATTER_SUPPORTED_FIELDS = exports.UNSUPPORTED_SKILL_FRONTMATTER_FIELDS = exports.TOOLS_MAPPING = exports.ALLOWED_TOOLS_MAPPING = exports.DEFAULT_SKILL_VERSION = void 0;
 exports.DEFAULT_SKILL_VERSION = "0.0.1";
-exports.DEFAULT_CONFIG = {
-    maxFileSize: 1_000_000,
-    maxFileCount: 100,
-    maxScanDepth: 5,
-};
 exports.ALLOWED_TOOLS_MAPPING = {
     Bash: { tool: "bash", scope: "sys", permission: "shell" },
     Read: { tool: "read", scope: "fs", permission: "read" },
@@ -30,29 +25,6 @@ exports.TOOLS_MAPPING = {
     deno: { scope: "sys", permission: "shell" },
     docker: { scope: "sys", permission: "shell" },
 };
-exports.SCORING = {
-    severity: {
-        info: 0,
-        warning: 2,
-        critical: 4,
-    },
-    permissions: {
-        "fs:read": 1,
-        "env:read": 1,
-        "net:fetch": 1,
-        "fs:write": 2,
-        "sys:shell": 2,
-        "sys:subprocess": 2,
-        "sys:sudo": 3,
-    },
-    scopeWildcard: 1,
-    uplift: {
-        externalPost: 2,
-        pipeToShell: 3,
-        multipleCritical: 1,
-        secretsInRequest: 2,
-    },
-};
 exports.UNSUPPORTED_SKILL_FRONTMATTER_FIELDS = [
     "argument-hint",
     "disable-model-invocation",

package/script/analyzer/logging.d.ts

@@ -0,0 +1,3 @@
+import type { AnalyzerLogger } from "./types.js";
+export declare const NO_OP_LOGGER: AnalyzerLogger;
+//# sourceMappingURL=logging.d.ts.map

package/script/analyzer/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../src/analyzer/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,YAAY,EAAE,cAK1B,CAAC"}

package/script/analyzer/logging.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NO_OP_LOGGER = void 0;
+exports.NO_OP_LOGGER = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};

package/script/analyzer/mod.d.ts

@@ -1,21 +1,28 @@
-import type { AnalyzerConfig, AnalyzerResult, AnalyzerState } from "./types.js";
+import { SkillAnalyzerResult } from "./result.js";
+import type { AnalyzerConfig, AnalyzerLogger, AnalyzerState } from "./types.js";
 import type { SkillReaderFactoryOptions } from "../skillreader/factory.js";
-export type { AnalyzerConfig, AnalyzerResult, AnalyzerState } from "./types.js";
-export { DEFAULT_CONFIG, DEFAULT_SKILL_VERSION } from "./config.js";
+export type { AnalyzerConfig, AnalyzerLogger, AnalyzerState } from "./types.js";
+export type { Allowlist, Denylist, LanguagePolicy, NetworkPolicy, RiskReportConfig, ScanConfig, } from "./config/mod.js";
+export { SkillAnalyzerResult } from "./result.js";
+export { DEFAULT_ANALYZER_CONFIG, DEFAULT_SKILL_VERSION, resolveConfig } from "./config/mod.js";
 export type AnalyzerAnalyzeInput = SkillReaderFactoryOptions & {
     skillId?: string;
     skillVersionId?: string;
     config?: Partial<AnalyzerConfig>;
+    logger?: AnalyzerLogger;
+    showProgressBar?: boolean;
 };
 export declare class Analyzer {
-    analyze(input: AnalyzerAnalyzeInput): Promise<AnalyzerResult>;
+    analyze(input: AnalyzerAnalyzeInput): Promise<SkillAnalyzerResult>;
 }
 export declare function runAnalysis(input: {
     options: SkillReaderFactoryOptions;
     skillId?: string;
     skillVersionId?: string;
     config?: Partial<AnalyzerConfig>;
-}): Promise<AnalyzerResult>;
+    logger?: AnalyzerLogger;
+    showProgressBar?: boolean;
+}): Promise<SkillAnalyzerResult>;
 export declare function createInitialState(input?: {
     skillId?: string;
     skillVersionId?: string;

package/script/analyzer/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../src/analyzer/mod.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAK3E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACpC,CAAC;AAEF,qBAAa,QAAQ;IACjB,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;CAahE;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,yBAAyB,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACpC,GAAG,OAAO,CAAC,cAAc,CAAC,CAuB1B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACpC,GAAG,aAAa,CAqBhB"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../src/analyzer/mod.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAK3E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChF,YAAY,EACR,SAAS,EACT,QAAQ,EACR,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,GACb,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhG,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,qBAAa,QAAQ;IACjB,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAerE;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,yBAAyB,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+B/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACpC,GAAG,aAAa,CAwBhB"}