@feiyoug/skill-lab 0.0.0

package/script/deps/jsr.io/@std/yaml/1.0.11/parse.js

@@ -0,0 +1,97 @@
+"use strict";
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+// This module is browser compatible.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parse = parse;
+exports.parseAll = parseAll;
+const _chars_js_1 = require("./_chars.js");
+const _loader_state_js_1 = require("./_loader_state.js");
+const _schema_js_1 = require("./_schema.js");
+function sanitizeInput(input) {
+    input = String(input);
+    if (input.length > 0) {
+        // Add trailing `\n` if not exists
+        if (!(0, _chars_js_1.isEOL)(input.charCodeAt(input.length - 1)))
+            input += "\n";
+        // Strip BOM
+        if (input.charCodeAt(0) === 0xfeff)
+            input = input.slice(1);
+    }
+    // Use 0 as string terminator. That significantly simplifies bounds check.
+    input += "\0";
+    return input;
+}
+/**
+ * Parse and return a YAML string as a parsed YAML document object.
+ *
+ * Note: This does not support functions. Untrusted data is safe to parse.
+ *
+ * @example Usage
+ * ```ts
+ * import { parse } from "@std/yaml/parse";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = parse(`
+ * id: 1
+ * name: Alice
+ * `);
+ *
+ * assertEquals(data, { id: 1, name: "Alice" });
+ * ```
+ *
+ * @throws {SyntaxError} Throws error on invalid YAML.
+ * @param content YAML string to parse.
+ * @param options Parsing options.
+ * @returns Parsed document.
+ */
+function parse(content, options = {}) {
+    content = sanitizeInput(content);
+    const state = new _loader_state_js_1.LoaderState(content, {
+        ...options,
+        schema: _schema_js_1.SCHEMA_MAP.get(options.schema),
+    });
+    const documentGenerator = state.readDocuments();
+    const document = documentGenerator.next().value;
+    if (!documentGenerator.next().done) {
+        throw new SyntaxError("Found more than 1 document in the stream: expected a single document");
+    }
+    return document ?? null;
+}
+/**
+ * Same as {@linkcode parse}, but understands multi-document YAML sources, and
+ * returns multiple parsed YAML document objects.
+ *
+ * @example Usage
+ * ```ts
+ * import { parseAll } from "@std/yaml/parse";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = parseAll(`
+ * ---
+ * id: 1
+ * name: Alice
+ * ---
+ * id: 2
+ * name: Bob
+ * ---
+ * id: 3
+ * name: Eve
+ * `);
+ * assertEquals(data, [ { id: 1, name: "Alice" }, { id: 2, name: "Bob" }, { id: 3, name: "Eve" }]);
+ * ```
+ *
+ * @param content YAML string to parse.
+ * @param options Parsing options.
+ * @returns Array of parsed documents.
+ */
+function parseAll(content, options = {}) {
+    content = sanitizeInput(content);
+    const state = new _loader_state_js_1.LoaderState(content, {
+        ...options,
+        schema: _schema_js_1.SCHEMA_MAP.get(options.schema),
+    });
+    return [...state.readDocuments()];
+}

package/script/deps/jsr.io/@std/yaml/1.0.11/stringify.d.ts

@@ -0,0 +1,100 @@
+import { type SchemaType } from "./_schema.js";
+import type { StyleVariant } from "./_type.js";
+export type { SchemaType, StyleVariant };
+/** Options for {@linkcode stringify}. */
+export type StringifyOptions = {
+    /**
+     * Indentation width to use (in spaces).
+     *
+     * @default {2}
+     */
+    indent?: number;
+    /**
+     * When true, adds an indentation level to array elements.
+     *
+     * @default {true}
+     */
+    arrayIndent?: boolean;
+    /**
+     * Do not throw on invalid types (like function in the safe schema) and skip
+     * pairs and single values with such types.
+     *
+     * @default {false}
+     */
+    skipInvalid?: boolean;
+    /**
+     * Specifies level of nesting, when to switch from block to flow style for
+     * collections. `-1` means block style everywhere.
+     *
+     * @default {-1}
+     */
+    flowLevel?: number;
+    /** Each tag may have own set of styles.	- "tag" => "style" map. */
+    styles?: Record<string, StyleVariant>;
+    /**
+     * Name of the schema to use.
+     *
+     * @default {"default"}
+     */
+    schema?: SchemaType;
+    /**
+     * If true, sort keys when dumping YAML in ascending, ASCII character order.
+     * If a function, use the function to sort the keys.
+     * If a function is specified, the function must return a negative value
+     * if first argument is less than second argument, zero if they're equal
+     * and a positive value otherwise.
+     *
+     * @default {false}
+     */
+    sortKeys?: boolean | ((a: string, b: string) => number);
+    /**
+     * Set max line width.
+     *
+     * @default {80}
+     */
+    lineWidth?: number;
+    /**
+     * If false, don't convert duplicate objects into references.
+     *
+     * @default {true}
+     */
+    useAnchors?: boolean;
+    /**
+     * If false don't try to be compatible with older yaml versions.
+     * Currently: don't quote "yes", "no" and so on,
+     * as required for YAML 1.1.
+     *
+     * @default {true}
+     */
+    compatMode?: boolean;
+    /**
+     * If true flow sequences will be condensed, omitting the
+     * space between `key: value` or `a, b`. Eg. `'[a,b]'` or `{a:{b:c}}`.
+     * Can be useful when using yaml for pretty URL query params
+     * as spaces are %-encoded.
+     *
+     * @default {false}
+     */
+    condenseFlow?: boolean;
+};
+/**
+ * Converts a JavaScript object or value to a YAML document string.
+ *
+ * @example Usage
+ * ```ts
+ * import { stringify } from "@std/yaml/stringify";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = { id: 1, name: "Alice" };
+ * const yaml = stringify(data);
+ *
+ * assertEquals(yaml, "id: 1\nname: Alice\n");
+ * ```
+ *
+ * @throws {TypeError} If `data` contains invalid types.
+ * @param data The data to serialize.
+ * @param options The options for serialization.
+ * @returns A YAML string.
+ */
+export declare function stringify(data: unknown, options?: StringifyOptions): string;
+//# sourceMappingURL=stringify.d.ts.map

package/script/deps/jsr.io/@std/yaml/1.0.11/stringify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stringify.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/yaml/1.0.11/stringify.ts"],"names":[],"mappings":"AAOA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAEzC,yCAAyC;AACzC,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,gBAAqB,GAC7B,MAAM,CAMR"}

package/script/deps/jsr.io/@std/yaml/1.0.11/stringify.js

@@ -0,0 +1,36 @@
+"use strict";
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+// This module is browser compatible.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stringify = stringify;
+const _dumper_state_js_1 = require("./_dumper_state.js");
+const _schema_js_1 = require("./_schema.js");
+/**
+ * Converts a JavaScript object or value to a YAML document string.
+ *
+ * @example Usage
+ * ```ts
+ * import { stringify } from "@std/yaml/stringify";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = { id: 1, name: "Alice" };
+ * const yaml = stringify(data);
+ *
+ * assertEquals(yaml, "id: 1\nname: Alice\n");
+ * ```
+ *
+ * @throws {TypeError} If `data` contains invalid types.
+ * @param data The data to serialize.
+ * @param options The options for serialization.
+ * @returns A YAML string.
+ */
+function stringify(data, options = {}) {
+    const state = new _dumper_state_js_1.DumperState({
+        ...options,
+        schema: _schema_js_1.SCHEMA_MAP.get(options.schema),
+    });
+    return state.stringify(data);
+}

package/script/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/script/shared/mod.d.ts

@@ -0,0 +1,2 @@
+export * from "./types/mod.js";
+//# sourceMappingURL=mod.d.ts.map

package/script/shared/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../src/shared/mod.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/script/shared/mod.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types/mod.js"), exports);

package/script/shared/types/filetypes.d.ts

@@ -0,0 +1,22 @@
+import { ReferenceType } from "./references.js";
+export type Frontmatter = {
+    startLineNumer?: number;
+    endLineNumer?: number;
+    name?: string;
+    description?: string;
+    [key: string]: unknown;
+};
+export type FileType = "markdown" | "text" | "bash" | "javascript" | "typescript" | "python" | "json" | "yaml" | "toml" | "config" | "sql" | "csv" | "xml" | "binary" | "unknown";
+export type CodeBlock = {
+    language: FileType;
+    content: string;
+    startLine: number;
+    endLine: number;
+    type: ReferenceType;
+};
+export declare const FILETYPE_BY_LANGUAGE: Record<string, FileType>;
+export declare const FILE_TYPE_BY_EXTENSION: Record<string, FileType>;
+export declare const BINARY_EXTENSIONS: Set<string>;
+export declare function getFileType(path: string): FileType;
+export declare function isFile(path: string): boolean;
+//# sourceMappingURL=filetypes.d.ts.map

package/script/shared/types/filetypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filetypes.d.ts","sourceRoot":"","sources":["../../../src/shared/types/filetypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,MAAM,WAAW,GAAG;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,QAAQ,GACd,UAAU,GACV,MAAM,GACN,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,MAAM,GACN,MAAM,GACN,MAAM,GACN,QAAQ,GACR,KAAK,GACL,KAAK,GACL,KAAK,GACL,QAAQ,GACR,SAAS,CAAC;AAEhB,MAAM,MAAM,SAAS,GAAG;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAwBzD,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAmB3D,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAAoE,CAAC;AAGnG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAUlD;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5C"}

package/script/shared/types/filetypes.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BINARY_EXTENSIONS = exports.FILE_TYPE_BY_EXTENSION = exports.FILETYPE_BY_LANGUAGE = void 0;
+exports.getFileType = getFileType;
+exports.isFile = isFile;
+exports.FILETYPE_BY_LANGUAGE = {
+    bash: "bash",
+    sh: "bash",
+    shell: "bash",
+    zsh: "bash",
+    js: "javascript",
+    javascript: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    ts: "typescript",
+    typescript: "typescript",
+    py: "python",
+    python: "python",
+    md: "markdown",
+    markdown: "markdown",
+    text: "text",
+    json: "json",
+    yaml: "yaml",
+    yml: "yaml",
+    toml: "toml",
+    sql: "sql",
+    csv: "csv",
+    xml: "xml",
+};
+exports.FILE_TYPE_BY_EXTENSION = {
+    md: "markdown",
+    txt: "text",
+    sh: "bash",
+    bash: "bash",
+    js: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    ts: "typescript",
+    tsx: "typescript",
+    py: "python",
+    json: "json",
+    yaml: "yaml",
+    yml: "yaml",
+    toml: "toml",
+    ini: "config",
+    sql: "sql",
+    csv: "csv",
+    xml: "xml",
+};
+exports.BINARY_EXTENSIONS = new Set(["zip", "tar", "gz", "png", "jpg", "jpeg", "gif", "pdf"]);
+// Classifies files by extension with a safe unknown fallback.
+function getFileType(path) {
+    const lower = path.toLowerCase();
+    const ext = lower.split(".").pop();
+    if (!ext)
+        return "unknown";
+    if (exports.FILE_TYPE_BY_EXTENSION[ext])
+        return exports.FILE_TYPE_BY_EXTENSION[ext];
+    if (exports.BINARY_EXTENSIONS.has(ext))
+        return "binary";
+    return "unknown";
+}
+function isFile(path) {
+    const ft = getFileType(path);
+    return ft !== "unknown" && ft != "binary";
+}

package/script/shared/types/findings.d.ts

@@ -0,0 +1,7 @@
+import { Reference } from "./references.js";
+export type Finding = {
+    ruleId: string;
+    reference: Reference;
+    extracted: Record<string, unknown>;
+};
+//# sourceMappingURL=findings.d.ts.map

package/script/shared/types/findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.d.ts","sourceRoot":"","sources":["../../../src/shared/types/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,MAAM,OAAO,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC"}

package/script/shared/types/findings.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/script/shared/types/mod.d.ts

@@ -0,0 +1,7 @@
+export * from "./filetypes.js";
+export * from "./findings.js";
+export * from "./permissions.js";
+export * from "./references.js";
+export * from "./risks.js";
+export * from "./syntaxNode.js";
+//# sourceMappingURL=mod.d.ts.map

package/script/shared/types/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../src/shared/types/mod.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/script/shared/types/mod.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./filetypes.js"), exports);
+__exportStar(require("./findings.js"), exports);
+__exportStar(require("./permissions.js"), exports);
+__exportStar(require("./references.js"), exports);
+__exportStar(require("./risks.js"), exports);
+__exportStar(require("./syntaxNode.js"), exports);

package/script/shared/types/permissions.d.ts

@@ -0,0 +1,16 @@
+import { FileRole, Reference } from "./references.js";
+export type PermissionScope = "fs" | "sys" | "net" | "env" | "hooks" | "data";
+export type Permission = {
+    id: string;
+    tool: string;
+    scope: PermissionScope;
+    permission: string;
+    args?: string[];
+    fileRole?: FileRole;
+    metadata?: Record<string, unknown>;
+    references: Reference[];
+    source: "frontmatter" | "detected" | "inferred";
+    comment?: string;
+    risks: string[];
+};
+//# sourceMappingURL=permissions.d.ts.map

package/script/shared/types/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/shared/types/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9E,MAAM,MAAM,UAAU,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC"}

package/script/shared/types/permissions.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/script/shared/types/references.d.ts

@@ -0,0 +1,26 @@
+import { FileType } from "./filetypes.js";
+export type ReferenceType = "frontmatter" | "content" | "script" | "inline";
+export type Reference = {
+    file: string;
+    line: number;
+    lineEnd?: number;
+    type: ReferenceType;
+    referencedBy?: Reference;
+};
+export type SourceType = "local" | "external";
+export type FileRole = "entrypoint" | "license" | "readme" | "reference" | "config" | "script" | "library" | "regular" | "host-fs";
+export type FileRefDiscoveryMethod = "markdown-link" | "inline-code" | "bare-path" | "import" | "url" | "source" | "code-block";
+export type FileReference = {
+    /** The relative path of file to the root of the skill */
+    path: string;
+    sourceType: SourceType;
+    fileType: FileType;
+    role: FileRole;
+    depth: number;
+    referencedBy?: Reference;
+    /** How this reference was discovered during file extraction. */
+    discoveryMethod?: FileRefDiscoveryMethod;
+};
+export declare function getFileRole(path: string): FileRole;
+export declare function getSourceType(existsInSkill: boolean): SourceType;
+//# sourceMappingURL=references.d.ts.map

package/script/shared/types/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/shared/types/references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5E,MAAM,MAAM,SAAS,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,CAAC,EAAE,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9C,MAAM,MAAM,QAAQ,GACd,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AAEhB,MAAM,MAAM,sBAAsB,GAC5B,eAAe,GACf,aAAa,GACb,WAAW,GACX,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,YAAY,CAAC;AAEnB,MAAM,MAAM,aAAa,GAAG;IACxB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,gEAAgE;IAChE,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC5C,CAAC;AAGF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAUlD;AAED,wBAAgB,aAAa,CAAC,aAAa,EAAE,OAAO,GAAG,UAAU,CAEhE"}

package/script/shared/types/references.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFileRole = getFileRole;
+exports.getSourceType = getSourceType;
+// Adds semantic meaning to paths for priority and reporting.
+function getFileRole(path) {
+    const base = path.split("/").pop()?.toLowerCase() ?? "";
+    const lower = path.toLowerCase();
+    if (base === "skill.md")
+        return "entrypoint";
+    if (base === "reference.md" || lower.includes("/references/"))
+        return "reference";
+    if (base.startsWith("license"))
+        return "license";
+    if (base.startsWith("readme"))
+        return "readme";
+    if (lower.includes("/scripts/"))
+        return "script";
+    if (/\.(env\.example|sample\.|template|example\.)/i.test(base))
+        return "config";
+    return "regular";
+}
+function getSourceType(existsInSkill) {
+    return existsInSkill ? "local" : "external";
+}

package/script/shared/types/risks.d.ts

@@ -0,0 +1,36 @@
+import { Finding } from "./findings.js";
+import { Permission } from "./permissions.js";
+import { Reference } from "./references.js";
+export type Severity = "info" | "warning" | "critical";
+type NETWORK_RISK_CODES = "NETWORK:data_exfiltration" | "NETWORK:external_network_access" | "NETWORK:remote_code_execution" | "NETWORK:credential_leak" | "NETWORK:localhost_secret_exposure";
+type INJECTION_RISK_CODES = "INJECTION:command_injection";
+type PROMPT_RISK_CODES = "PROMPT:prompt_override";
+type DESTRUCTIVE_RISK_CODES = "DESTRUCTIVE:destructive_behavior" | "DESTRUCTIVE:permission_weakening";
+type PRIVILEGE_RISK_CODES = "PRIVILEGE:privilege_escalation";
+type PERSISTENCE_RISK_CODES = "PERSISTENCE:persistence";
+type SECRETS_RISK_CODES = "SECRETS:secret_access";
+export type RiskCode = NETWORK_RISK_CODES | INJECTION_RISK_CODES | PROMPT_RISK_CODES | DESTRUCTIVE_RISK_CODES | PRIVILEGE_RISK_CODES | PERSISTENCE_RISK_CODES | SECRETS_RISK_CODES;
+export type RuleRiskResult = {
+    code: RiskCode;
+    severity: Severity;
+    message: string;
+    metadata?: Record<string, unknown>;
+};
+export type RuleRiskInput = {
+    permission?: Permission;
+    finding: Finding;
+};
+export type Risk = {
+    id: string;
+    type: RiskCode;
+    severity: Severity;
+    message: string;
+    reference: Reference;
+    permissions: string[];
+    metadata?: Record<string, unknown>;
+};
+export type StaticRuleRiskMapping = RuleRiskResult;
+export type DynamicRuleRiskMapping = (input: RuleRiskInput) => RuleRiskResult | RuleRiskResult[] | null;
+export type RuleRiskMapping = StaticRuleRiskMapping | DynamicRuleRiskMapping;
+export {};
+//# sourceMappingURL=risks.d.ts.map

package/script/shared/types/risks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risks.d.ts","sourceRoot":"","sources":["../../../src/shared/types/risks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD,KAAK,kBAAkB,GACjB,2BAA2B,GAC3B,iCAAiC,GACjC,+BAA+B,GAC/B,yBAAyB,GACzB,mCAAmC,CAAC;AAE1C,KAAK,oBAAoB,GAAG,6BAA6B,CAAC;AAE1D,KAAK,iBAAiB,GAAG,wBAAwB,CAAC;AAElD,KAAK,sBAAsB,GACrB,kCAAkC,GAClC,kCAAkC,CAAC;AAEzC,KAAK,oBAAoB,GAAG,gCAAgC,CAAC;AAE7D,KAAK,sBAAsB,GAAG,yBAAyB,CAAC;AAExD,KAAK,kBAAkB,GAAG,uBAAuB,CAAC;AAElD,MAAM,MAAM,QAAQ,GACd,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,kBAAkB,CAAC;AAEzB,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAEnD,MAAM,MAAM,sBAAsB,GAAG,CACjC,KAAK,EAAE,aAAa,KACnB,cAAc,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,sBAAsB,CAAC"}

package/script/shared/types/risks.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/script/shared/types/syntaxNode.d.ts

@@ -0,0 +1,14 @@
+export type SyntaxNodeLike = {
+    type: string;
+    text: string;
+    startPosition: {
+        row: number;
+        column: number;
+    };
+    endPosition: {
+        row: number;
+        column: number;
+    };
+    children: SyntaxNodeLike[];
+};
+//# sourceMappingURL=syntaxNode.d.ts.map

package/script/shared/types/syntaxNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntaxNode.d.ts","sourceRoot":"","sources":["../../../src/shared/types/syntaxNode.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC9B,CAAC"}

package/script/shared/types/syntaxNode.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/script/skillreader/cloudStorage/mod.d.ts

@@ -0,0 +1,25 @@
+import type { SkillFile, SkillManifest } from "../types.js";
+import { SkillReader } from "../types.js";
+export type CloudStorageSkillReaderOptions = {
+    /**
+     * Base URL for skill storage (CloudFront/CDN).
+     * Example: https://d1234abcd.cloudfront.net/skills/my-skill/v1.0.0
+     */
+    baseUrl: string;
+};
+/**
+ * Reader for skill-lab backend cloud storage (public CDN).
+ */
+export declare class CloudStorageSkillReader extends SkillReader {
+    private baseUrl;
+    private cachedManifest;
+    private dataOffsetCache;
+    constructor(options: CloudStorageSkillReaderOptions);
+    retrieveFiles(dir?: string): Promise<SkillFile[]>;
+    readTextFile(path: string): Promise<string | null>;
+    readFile(path: string): Promise<ReadableStream<Uint8Array> | null>;
+    readManifest(): Promise<SkillManifest | null>;
+    private readFileFromZip;
+    private getDataOffset;
+}
+//# sourceMappingURL=mod.d.ts.map

package/script/skillreader/cloudStorage/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../src/skillreader/cloudStorage/mod.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAqC,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,MAAM,8BAA8B,GAAG;IACzC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,WAAW;IACpD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,eAAe,CAA6B;gBAExC,OAAO,EAAE,8BAA8B;IAK7C,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAoBjD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAalD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAkBlE,YAAY,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAiBrC,eAAe;YAsBf,aAAa;CAqC9B"}