@feiyoug/skill-lab 0.0.0 → 0.0.2

package/script/analyzer/rules/markdown/extractCodeBlocks.js

@@ -19,10 +19,11 @@ async function extractCodeBlocks(context, content) {
                 const blockNode = capture.node;
                 const startLine = blockNode.startPosition.row + 1;
                 const endLine = blockNode.endPosition.row + 1;
-                const languageNode = blockNode.children.find((child) => child.type === astTypes_js_1.MARKDOWN_NODE.CODE_FENCE_LANGUAGE ||
-                    child.type === astTypes_js_1.MARKDOWN_NODE.INFO_STRING);
+                const languageNode = blockNode.children.find((child) => child !== null &&
+                    (child.type === astTypes_js_1.MARKDOWN_NODE.CODE_FENCE_LANGUAGE ||
+                        child.type === astTypes_js_1.MARKDOWN_NODE.INFO_STRING));
                 const fenceLanguage = mod_js_1.FILETYPE_BY_LANGUAGE[(languageNode?.text ?? "").trim().toLowerCase()] ?? null;
-                const contentNode = blockNode.children.find((child) => child.type === astTypes_js_1.MARKDOWN_NODE.CODE_FENCE_CONTENT);
+                const contentNode = blockNode.children.find((child) => child !== null && child.type === astTypes_js_1.MARKDOWN_NODE.CODE_FENCE_CONTENT);
                 const codeContent = (contentNode?.text ?? "")
                     .replace(/\n?[`~]{3,}[^\n]*\s*$/, "")
                     .trimEnd();
@@ -46,6 +47,8 @@ async function extractCodeBlocks(context, content) {
                     continue;
                 const inlineNode = inlineCapture.node;
                 const inlineTree = inlineParser.parse(inlineNode.text);
+                if (!inlineTree)
+                    continue;
                 for (const codeMatch of codeSpanQuery.matches(inlineTree.rootNode)) {
                     for (const codeCapture of codeMatch.captures) {
                         if (codeCapture.name !== "code")

package/script/analyzer/rules/markdown/extractFileRefs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractFileRefs.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/rules/markdown/extractFileRefs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAaxE,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAgF7B"}
+{"version":3,"file":"extractFileRefs.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/rules/markdown/extractFileRefs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIxE,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAiF7B"}

package/script/analyzer/rules/markdown/extractFileRefs.js

@@ -27,6 +27,8 @@ async function extractMarkdownFileRefs(context, content) {
                 const inlineNode = inlineCapture.node;
                 const blockLine = inlineNode.startPosition.row;
                 const inlineTree = inlineParser.parse(inlineNode.text);
+                if (!inlineTree)
+                    continue;
                 const inlineRoot = inlineTree.rootNode;
                 for (const match of linkDestQuery.matches(inlineRoot)) {
                     for (const capture of match.captures) {

package/script/analyzer/rules/python/extractFileRefs.d.ts

@@ -10,5 +10,5 @@
  * Uses ast-grep AST traversal.
  */
 import type { AnalyzerContext, FileRefDiscovery } from "../../types.js";
-export declare function extractPythonFileRefs(context: AnalyzerContext, content: string): FileRefDiscovery[];
+export declare function extractPythonFileRefs(context: AnalyzerContext, content: string): Promise<FileRefDiscovery[]>;
 //# sourceMappingURL=extractFileRefs.d.ts.map

package/script/analyzer/rules/python/extractFileRefs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractFileRefs.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/rules/python/extractFileRefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGxE,wBAAgB,qBAAqB,CACjC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,GAChB,gBAAgB,EAAE,CAwEpB"}
+{"version":3,"file":"extractFileRefs.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/rules/python/extractFileRefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGxE,wBAAsB,qBAAqB,CACvC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwE7B"}

package/script/analyzer/rules/python/extractFileRefs.js

@@ -14,9 +14,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractPythonFileRefs = extractPythonFileRefs;
 const file_refs_js_1 = require("../shared/file-refs.js");
 const astTypes_js_1 = require("./astTypes.js");
-function extractPythonFileRefs(context, content) {
+async function extractPythonFileRefs(context, content) {
     const refs = [];
-    const ast = context.astgrepClient.parse("python", content);
+    const ast = await context.astgrepClient.parse("python", content);
     const root = ast.root();
     // ── import_statement (e.g. `import os`, `import os.path`) ───────────────
     const importNodes = root.findAll({ rule: { kind: astTypes_js_1.PYTHON_NODE.IMPORT_STATEMENT } });

package/script/analyzer/steps/001-discovery/discover-files.d.ts

@@ -21,6 +21,10 @@ export declare function discoverReferencedFiles(context: AnalyzerContext, input:
     allFiles: SkillFile[];
     readTextFile: (path: string) => Promise<string | null>;
     maxScanDepth: number;
+    onDiscover?: (progress: {
+        scannedCount: number;
+        discoveredCount: number;
+    }) => void;
 }): Promise<FileReference[]>;
 export type { FileRefDiscovery };
 //# sourceMappingURL=discover-files.d.ts.map

package/script/analyzer/steps/001-discovery/discover-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discover-files.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/001-discovery/discover-files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGvE,KAAK,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAEhF;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE;IACH,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,CAAC;CACxB,GACF,OAAO,CAAC,aAAa,EAAE,CAAC,CA6J1B;AAMD,YAAY,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"discover-files.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/001-discovery/discover-files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGvE,KAAK,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAEhF;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE;IACH,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACtF,GACF,OAAO,CAAC,aAAa,EAAE,CAAC,CA8K1B;AAMD,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/script/analyzer/steps/001-discovery/discover-files.js

@@ -17,6 +17,8 @@ const code_block_path_js_1 = require("../../utils/code-block-path.js");
 async function discoverReferencedFiles(context, input) {
     const discovered = new Map();
     const queue = [...input.startQueue];
+    let scannedCount = 0;
+    let discoveredCount = 0;
     // A set of file paths which have been processed
     const processed = new Set();
     const startPaths = new Set(input.startQueue.map((item) => normalizePath(item.path)));
@@ -27,6 +29,7 @@ async function discoverReferencedFiles(context, input) {
         if (processed.has(current.path) || current.depth > input.maxScanDepth)
             continue;
         processed.add(current.path);
+        input.onDiscover?.({ scannedCount: scannedCount++, discoveredCount });
         const content = await input.readTextFile(current.path);
         if (!content)
             continue;
@@ -80,6 +83,7 @@ async function discoverReferencedFiles(context, input) {
                             depth: current.depth + 1,
                             referencedBy: localEntry.referencedBy,
                         });
+                        input.onDiscover?.({ scannedCount, discoveredCount: discoveredCount++ });
                     }
                     continue;
                 }
@@ -107,11 +111,23 @@ async function discoverReferencedFiles(context, input) {
                     });
                     continue;
                 }
-                if (absoluteRef.via === "import" || absoluteRef.via === "source") {
+                if (absoluteRef.via === "import") {
                     discovered.set(normalizedPath, {
                         path: normalizedPath,
                         sourceType: "external",
-                        fileType: "unknown",
+                        fileType: block.language,
+                        role: "library",
+                        depth: current.depth + 1,
+                        discoveryMethod: absoluteRef.via,
+                        referencedBy: referenceFromCurrent,
+                    });
+                    continue;
+                }
+                if (absoluteRef.via === "source") {
+                    discovered.set(normalizedPath, {
+                        path: normalizedPath,
+                        sourceType: "external",
+                        fileType: block.language,
                         role: "library",
                         depth: current.depth + 1,
                         discoveryMethod: absoluteRef.via,

package/script/analyzer/steps/001-discovery/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/001-discovery/mod.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIrE,wBAAsB,eAAe,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,eAAe,GACzB,OAAO,CAAC,aAAa,CAAC,CA4DxB"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/001-discovery/mod.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIrE,wBAAsB,eAAe,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,eAAe,GACzB,OAAO,CAAC,aAAa,CAAC,CAwFxB"}

package/script/analyzer/steps/001-discovery/mod.js

@@ -1,7 +1,45 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.run001Discovery = run001Discovery;
-const config_js_1 = require("../../config.js");
+const dntShim = __importStar(require("../../../_dnt.shims.js"));
+const mod_js_1 = __importDefault(require("../../../deps/jsr.io/@deno-library/progress/1.5.1/mod.js"));
+const mod_js_2 = require("../../config/mod.js");
 const discover_files_js_1 = require("./discover-files.js");
 const filter_files_js_1 = require("./filter-files.js");
 async function run001Discovery(state, context) {
@@ -13,22 +51,50 @@ async function run001Discovery(state, context) {
         files,
         frontmatter,
         skillId: String(frontmatter.name ?? state.skillId),
-        skillVersionId: String(frontmatter.metadata?.version ?? state.skillVersionId ?? config_js_1.DEFAULT_SKILL_VERSION),
+        skillVersionId: String(frontmatter.metadata?.version ?? state.skillVersionId ?? mod_js_2.DEFAULT_SKILL_VERSION),
     };
     for (const field of Object.keys(frontmatter)) {
-        if (!config_js_1.FRONTMATTER_SUPPORTED_FIELDS.includes(field) && ![
+        if (!mod_js_2.FRONTMATTER_SUPPORTED_FIELDS.includes(field) && ![
             "startLineNumber",
             "endLineNumber",
         ].includes(field)) {
             nextState.warnings.push(`Unknown frontmatter field '${field}' - analysis not supported yet`);
         }
     }
-    const discovered = await (0, discover_files_js_1.discoverReferencedFiles)(context, {
-        startQueue: [{ path: skillMdPath, depth: 0 }],
-        allFiles: files,
-        readTextFile: (path) => context.skillReader.readTextFile(path),
-        maxScanDepth: state.metadata.config.maxScanDepth,
-    });
+    const shouldLogProgress = (context.showProgressBar ?? false) && dntShim.Deno.stderr.isTerminal();
+    const maxScanDepth = state.metadata.config.maxScanDepth ??
+        mod_js_2.DEFAULT_ANALYZER_CONFIG.scan?.maxScanDepth ?? 5;
+    const maxFileCount = state.metadata.config.maxFileCount ??
+        mod_js_2.DEFAULT_ANALYZER_CONFIG.scan?.maxFileCount ?? 100;
+    const maxFileSize = state.metadata.config.maxFileSize ??
+        mod_js_2.DEFAULT_ANALYZER_CONFIG.scan?.maxFileSize ?? 1_000_000;
+    const discoveryBar = shouldLogProgress
+        ? new mod_js_1.default({
+            total: files.length,
+            clear: true,
+            output: dntShim.Deno.stderr,
+            complete: "=",
+            incomplete: "-",
+            display: "Readings skills [:bar] :percent ETA :eta",
+        })
+        : null;
+    let discovered = [];
+    try {
+        discovered = await (0, discover_files_js_1.discoverReferencedFiles)(context, {
+            startQueue: [{ path: skillMdPath, depth: 0 }],
+            allFiles: files,
+            readTextFile: (path) => context.skillReader.readTextFile(path),
+            maxScanDepth,
+            onDiscover: (progress) => {
+                discoveryBar?.render(progress.scannedCount, {
+                    total: progress.discoveredCount + 1,
+                });
+            },
+        });
+    }
+    finally {
+        discoveryBar?.end();
+    }
     discovered.push({
         path: skillMdPath,
         sourceType: "local",
@@ -39,8 +105,8 @@ async function run001Discovery(state, context) {
     const filtered = (0, filter_files_js_1.filterScanQueue)({
         queue: discovered,
         allFiles: files,
-        maxFileCount: state.metadata.config.maxFileCount,
-        maxFileSize: state.metadata.config.maxFileSize,
+        maxFileCount,
+        maxFileSize,
     });
     return {
         ...nextState,

package/script/analyzer/steps/002-permissions/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/002-permissions/mod.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAWrE,wBAAsB,iBAAiB,CACnC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,eAAe,GACzB,OAAO,CAAC,aAAa,CAAC,CA+FxB"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/002-permissions/mod.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAcrE,wBAAsB,iBAAiB,CACnC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,eAAe,GACzB,OAAO,CAAC,aAAa,CAAC,CAsGxB"}

package/script/analyzer/steps/002-permissions/mod.js

@@ -1,96 +1,146 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.run002Permissions = run002Permissions;
-const mod_js_1 = require("../../rules/mod.js");
+const dntShim = __importStar(require("../../../_dnt.shims.js"));
+const mod_js_1 = __importDefault(require("../../../deps/jsr.io/@deno-library/progress/1.5.1/mod.js"));
 const mod_js_2 = require("../../rules/mod.js");
+const mod_js_3 = require("../../rules/mod.js");
 const inline_command_classifier_js_1 = require("../../rules/bash/inline-command-classifier.js");
 const code_block_path_js_1 = require("../../utils/code-block-path.js");
 const id_generator_js_1 = require("../../utils/id-generator.js");
 const scan_file_js_1 = require("./scan-file.js");
 const seed_frontmatter_js_1 = require("./seed-frontmatter.js");
 const synthesize_js_1 = require("./synthesize.js");
+const ANSI_SHOW_CURSOR = "\x1b[?25h";
+const ENCODER = new TextEncoder();
 async function run002Permissions(state, context) {
     const skillMdPath = state.scanQueue.find((file) => file.role === "entrypoint")?.path ??
         "SKILL.md";
     let next = state;
     next = (0, seed_frontmatter_js_1.seedPermissionsFromFrontmatter)(next, skillMdPath);
-    for (const fileRef of next.scanQueue) {
-        if (fileRef.sourceType === "external") {
-            if (fileRef.role === "host-fs") {
-                next = addHostFsPermission(next, fileRef.path, fileRef.referencedBy);
-            }
-            else if (fileRef.role === "library") {
-                next = {
-                    ...next,
-                    warnings: [
-                        ...next.warnings,
-                        `External library/import not analyzed yet: ${fileRef.path}`,
-                    ],
-                    metadata: {
-                        ...next.metadata,
-                        skippedFiles: [...next.metadata.skippedFiles, {
-                                path: fileRef.path,
-                                reason: "external_library_dependency",
-                                referenceBy: fileRef.referencedBy,
-                            }],
-                    },
-                };
-            }
-            else if (fileRef.discoveryMethod === "markdown-link" || fileRef.discoveryMethod === "url" ||
-                fileRef.discoveryMethod === undefined) {
-                next = {
-                    ...next,
-                    warnings: [
-                        ...next.warnings,
-                        `External reference not analyzed yet: ${fileRef.path}`,
-                    ],
-                    metadata: {
-                        ...next.metadata,
-                        skippedFiles: [...next.metadata.skippedFiles, {
-                                path: fileRef.path,
-                                reason: "external_reference",
-                                referenceBy: fileRef.referencedBy,
-                            }],
-                    },
-                };
-            }
-            continue;
-        }
-        const scanTargets = await resolveScanTargets(fileRef, context);
-        if (scanTargets.length === 0)
-            continue;
-        if (!mod_js_2.RULES_BY_FILETYPE[fileRef.fileType]) {
-            next = {
-                ...next,
-                warnings: [
-                    ...next.warnings,
-                    `File type '${fileRef.fileType}' is not supported yet for analysis: ${fileRef.path}`,
-                ],
-                metadata: {
-                    ...next.metadata,
-                    skippedFiles: [...next.metadata.skippedFiles, {
+    const shouldRenderProgress = (context.showProgressBar ?? false) && dntShim.Deno.stderr.isTerminal();
+    const scanBar = shouldRenderProgress
+        ? new mod_js_1.default({
+            total: Math.max(1, next.scanQueue.length),
+            clear: true,
+            output: dntShim.Deno.stderr,
+            complete: "=",
+            incomplete: "-",
+            display: "Scanning skills [:bar] :percent ETA :eta",
+        })
+        : null;
+    let processed = 0;
+    try {
+        await scanBar?.render(processed);
+        for (const fileRef of next.scanQueue) {
+            try {
+                if (fileRef.sourceType === "external") {
+                    if (fileRef.role === "host-fs") {
+                        next = addHostFsPermission(next, fileRef.path, fileRef.referencedBy);
+                    }
+                    else if (fileRef.discoveryMethod === "import") {
+                        next = addImportDependencyPermission(next, fileRef);
+                        next = appendSkippedFile(next, {
                             path: fileRef.path,
-                            reason: `unsupported_type_${fileRef.fileType}`,
+                            reason: "external_library_dependency",
                             referenceBy: fileRef.referencedBy,
-                        }],
-                },
-            };
-            continue;
-        }
-        for (const scanTarget of scanTargets) {
-            next = (0, scan_file_js_1.scanFileForPermissions)(context, {
-                state: next,
-                fileRef,
-                scanPath: scanTarget.scanPath,
-                content: scanTarget.content,
-                lineOffset: scanTarget.lineOffset,
-                referenceType: scanTarget.referenceType,
-            });
-            if (scanTarget.referenceType === "content") {
-                next = applyPromptRegexFindings(next, scanTarget.scanPath, scanTarget.content, scanTarget.lineOffset, fileRef.referencedBy);
+                        });
+                    }
+                    else {
+                        next = addExternalReferencePermission(next, fileRef);
+                        const reason = fileRef.role === "library"
+                            ? "external_library_dependency"
+                            : "external_reference";
+                        next = appendSkippedFile(next, {
+                            path: fileRef.path,
+                            reason,
+                            referenceBy: fileRef.referencedBy,
+                        });
+                    }
+                    continue;
+                }
+                const scanTargets = await resolveScanTargets(fileRef, context);
+                if (scanTargets.length === 0)
+                    continue;
+                if (!mod_js_3.RULES_BY_FILETYPE[fileRef.fileType]) {
+                    next = {
+                        ...next,
+                        warnings: [
+                            ...next.warnings,
+                            `File type '${fileRef.fileType}' is not supported yet for analysis: ${fileRef.path}`,
+                        ],
+                        metadata: {
+                            ...next.metadata,
+                            skippedFiles: [...next.metadata.skippedFiles, {
+                                    path: fileRef.path,
+                                    reason: `unsupported_type_${fileRef.fileType}`,
+                                    referenceBy: fileRef.referencedBy,
+                                }],
+                        },
+                    };
+                    continue;
+                }
+                for (const scanTarget of scanTargets) {
+                    next = await (0, scan_file_js_1.scanFileForPermissions)(context, {
+                        state: next,
+                        fileRef,
+                        scanPath: scanTarget.scanPath,
+                        content: scanTarget.content,
+                        lineOffset: scanTarget.lineOffset,
+                        referenceType: scanTarget.referenceType,
+                    });
+                    if (scanTarget.referenceType === "content") {
+                        next = applyPromptRegexFindings(next, scanTarget.scanPath, scanTarget.content, scanTarget.lineOffset, fileRef.referencedBy);
+                    }
+                }
+            }
+            finally {
+                await scanBar?.render(++processed);
             }
         }
     }
+    finally {
+        await scanBar?.end();
+        if (shouldRenderProgress && dntShim.Deno.stderr.isTerminal()) {
+            dntShim.Deno.stderr.writeSync(ENCODER.encode(ANSI_SHOW_CURSOR));
+        }
+    }
     return (0, synthesize_js_1.synthesizePermissions)(next);
 }
 async function resolveScanTargets(fileRef, context) {
@@ -116,7 +166,8 @@ async function resolveScanTargets(fileRef, context) {
     if (referenceType === "inline") {
         const line = lines[decoded.startLine - 1] ?? "";
         const snippets = extractInlineSnippets(line);
-        const likelyCommands = snippets.filter((snippet) => (0, inline_command_classifier_js_1.isLikelyInlineBashCommand)(context, { snippet, lineContext: line }));
+        const likelyCommandFlags = await Promise.all(snippets.map((snippet) => (0, inline_command_classifier_js_1.isLikelyInlineBashCommand)(context, { snippet, lineContext: line })));
+        const likelyCommands = snippets.filter((_, i) => likelyCommandFlags[i]);
         return likelyCommands.map((snippet) => ({
             scanPath: decoded.parentPath,
             content: snippet,
@@ -146,7 +197,7 @@ function extractInlineSnippets(line) {
 function applyPromptRegexFindings(state, filePath, content, lineOffset, referencedBy) {
     const findings = [...state.findings];
     const lines = content.split("\n");
-    for (const rule of mod_js_1.PROMPT_REGEX_RULES) {
+    for (const rule of mod_js_2.PROMPT_REGEX_RULES) {
         for (let i = 0; i < lines.length; i += 1) {
             if (!rule.pattern.test(lines[i]))
                 continue;
@@ -164,6 +215,74 @@ function applyPromptRegexFindings(state, filePath, content, lineOffset, referenc
     }
     return { ...state, findings };
 }
+function appendSkippedFile(state, skipped) {
+    return {
+        ...state,
+        metadata: {
+            ...state.metadata,
+            skippedFiles: [...state.metadata.skippedFiles, skipped],
+        },
+    };
+}
+function addImportDependencyPermission(state, fileRef) {
+    const language = fileRef.fileType;
+    const importName = fileRef.path;
+    const metadata = {
+        language,
+        discoveryMethod: fileRef.discoveryMethod,
+    };
+    const permission = {
+        id: (0, id_generator_js_1.generatePermissionId)("dep-import", [language, importName]),
+        tool: language,
+        scope: "dep",
+        permission: "import",
+        args: [importName],
+        metadata,
+        references: [toPermissionReference(fileRef)],
+        source: "inferred",
+        risks: [],
+    };
+    if (state.permissions.some((p) => p.id === permission.id))
+        return state;
+    return {
+        ...state,
+        permissions: [...state.permissions, permission],
+    };
+}
+function addExternalReferencePermission(state, fileRef) {
+    const path = fileRef.path;
+    const language = fileRef.fileType ?? "unknown";
+    const metadata = {
+        language,
+        discoveryMethod: fileRef.discoveryMethod,
+    };
+    const permission = {
+        id: (0, id_generator_js_1.generatePermissionId)("dep-externalreference", [language, path]),
+        tool: language,
+        scope: "dep",
+        permission: "externalreference",
+        args: [path],
+        metadata,
+        references: [toPermissionReference(fileRef)],
+        source: "inferred",
+        risks: [],
+    };
+    if (state.permissions.some((p) => p.id === permission.id))
+        return state;
+    return {
+        ...state,
+        permissions: [...state.permissions, permission],
+    };
+}
+function toPermissionReference(fileRef) {
+    return {
+        file: fileRef.referencedBy?.file ?? fileRef.path,
+        line: fileRef.referencedBy?.line ?? 1,
+        lineEnd: fileRef.referencedBy?.lineEnd,
+        type: fileRef.referencedBy?.type ?? "content",
+        referencedBy: fileRef.referencedBy?.referencedBy,
+    };
+}
 function addHostFsPermission(state, path, referencedBy) {
     const reference = {
         file: referencedBy?.file ?? "SKILL.md",

package/script/analyzer/steps/002-permissions/scan-file.d.ts

@@ -10,5 +10,5 @@ export declare function scanFileForPermissions(context: AnalyzerContext, input:
     content: string;
     lineOffset?: number;
     referenceType?: "content" | "script" | "inline";
-}): AnalyzerState;
+}): Promise<AnalyzerState>;
 //# sourceMappingURL=scan-file.d.ts.map

package/script/analyzer/steps/002-permissions/scan-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan-file.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/002-permissions/scan-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAA+B,MAAM,wBAAwB,CAAC;AAsCzF;;GAEG;AACH,wBAAgB,sBAAsB,CAClC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE;IACH,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACnD,GACF,aAAa,CAgFf"}
+{"version":3,"file":"scan-file.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/002-permissions/scan-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAA+B,MAAM,wBAAwB,CAAC;AAsCzF;;GAEG;AACH,wBAAsB,sBAAsB,CACxC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE;IACH,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACnD,GACF,OAAO,CAAC,aAAa,CAAC,CAiFxB"}