@feiyoug/skill-lab 0.0.1 → 0.0.2

package/src/skillreader/types.ts

@@ -0,0 +1,150 @@
+import { parse as parseYaml } from "../deps/jsr.io/@std/yaml/1.0.11/mod.js";
+import { extractFrontmatter } from "./utils/frontmatter-parser.js";
+import { FileType } from "../shared/mod.js";
+
+export type SkillFile = {
+    path: string;
+    size?: number;
+    contentType: FileType;
+};
+
+export type SkillFileManifest = {
+    version: 1;
+    generatedAt: string;
+    files: SkillFile[];
+};
+
+export type ZipManifestFile = {
+    path: string;
+    size: number;
+    offset: number;
+    compressedSize: number;
+    compressionMethod: number;
+    signature: number;
+};
+
+export type SkillZipManifest = {
+    version: 2;
+    storage_method: "zip";
+    compression: "deflate" | "store";
+    skill_version_id: string;
+    repo_url: string;
+    commit_hash: string;
+    dir: string | null;
+    created_at: string;
+    checksum: string;
+    files: ZipManifestFile[];
+};
+
+export type SkillManifest = SkillFileManifest | SkillZipManifest;
+
+export type SkillFrontmatter = {
+    startLineNumber?: number;
+    endLineNumber?: number;
+
+    name: string;
+    description: string;
+    license?: string;
+    compatibility?: string;
+    metadata?: Record<string, unknown>;
+    "allowed-tools"?: string;
+    [key: string]: unknown;
+};
+
+export abstract class SkillReader {
+    /**
+     * A cached path to the root SKILL.md file in this skill repository
+     */
+    private skillMdPatah: string | undefined = undefined;
+
+    /**
+     * A cached list of files in this skill repository.
+     */
+    private files: SkillFile[] | undefined = undefined;
+
+    /**
+     * A cached parsed SKILL.md frontmatter.
+     */
+    private skillFrontMatter: SkillFrontmatter | undefined = undefined;
+
+    abstract retrieveFiles(dir?: string): Promise<SkillFile[]>;
+    abstract readTextFile(path: string): Promise<string | null>;
+    abstract readFile(path: string): Promise<ReadableStream<Uint8Array> | null>;
+    abstract readManifest(): Promise<SkillManifest | null>;
+
+    public async listFiles(): Promise<SkillFile[]> {
+        if (!this.files) {
+            this.files = await this.retrieveFiles();
+        }
+        return this.files;
+    }
+
+    /**
+     * Return the path to SKILL.md if it exists, or throw if not.
+     */
+    public async getSkillMdPath(): Promise<string> {
+        if (this.skillMdPatah) return this.skillMdPatah;
+
+        const files = await this.retrieveFiles();
+        const rootPath = files.find((file) => file.path.toLowerCase() === "skill.md");
+
+        if (!rootPath?.path) {
+            throw new Error("Invalid skill repository: SKILL.md not found");
+        }
+
+        this.skillMdPatah = rootPath.path;
+        return this.skillMdPatah;
+    }
+
+    /**
+     * Returns full SKILL.md content, or throws when the repository is not a valid skill.
+     */
+    public async getSkillMdContent(): Promise<string> {
+        const skillMdPath = await this.getSkillMdPath();
+        const content = await this.readTextFile(skillMdPath);
+        if (!content) {
+            throw new Error("Invalid skill repository: SKILL.md is unreadable");
+        }
+        return content;
+    }
+
+    /**
+     * Parses SKILL.md frontmatter and guarantees required fields.
+     */
+    public async getSkillMdFrontmatter(): Promise<SkillFrontmatter> {
+        if (this.skillFrontMatter) return this.skillFrontMatter;
+
+        const content = await this.getSkillMdContent();
+        const frontmatter = await extractFrontmatter(content);
+        if (!frontmatter) {
+            throw new Error("Invalid skill repository: SKILL.md missing YAML frontmatter");
+        }
+        let parsed: SkillFrontmatter;
+        try {
+            parsed = (parseYaml(frontmatter.content) as SkillFrontmatter) ??
+                ({} as SkillFrontmatter);
+        } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`Invalid skill repository: YAML frontmatter parse failed: ${message}`);
+        }
+        if (!parsed.name || !parsed.description) {
+            throw new Error("Invalid skill repository: frontmatter requires name and description");
+        }
+
+        parsed.startLineNumber = frontmatter.startLine;
+        parsed.endLineNumber = frontmatter.endLine;
+
+        this.skillFrontMatter = parsed;
+        return this.skillFrontMatter;
+    }
+
+    public async validate(): Promise<{ ok: boolean; reason?: string }> {
+        try {
+            await this.getSkillMdFrontmatter();
+            return { ok: true };
+        } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return { ok: false, reason: message };
+        }
+    }
+}

package/src/skillreader/utils/frontmatter-parser.ts

@@ -0,0 +1,72 @@
+type SyntaxNodeLike = {
+    type: string;
+    text: string;
+    startPosition: { row: number };
+    endPosition: { row: number };
+    children: SyntaxNodeLike[];
+};
+
+export type FrontmatterInfo = {
+    content: string;
+    startLine: number;
+    endLine: number;
+};
+
+let parserInstance: {
+    parse: (input: string) => { rootNode: SyntaxNodeLike };
+} | null = null;
+
+export async function extractFrontmatter(content: string): Promise<FrontmatterInfo | null> {
+    try {
+        const parser = await getParser();
+        const tree = parser.parse(content);
+        const frontmatterNode = findFrontmatterNode(tree.rootNode);
+        if (!frontmatterNode) return null;
+
+        const matched = frontmatterNode.text.match(/^---\n([\s\S]*?)\n---/);
+        if (!matched) return null;
+
+        return {
+            content: matched[1],
+            startLine: frontmatterNode.startPosition.row + 1,
+            endLine: frontmatterNode.endPosition.row + 1,
+        };
+    } catch {
+        const matched = content.match(/^---\n([\s\S]*?)\n---/);
+        if (!matched) return null;
+        return {
+            content: matched[1],
+            startLine: 1,
+            endLine: matched[0].split("\n").length,
+        };
+    }
+}
+
+function findFrontmatterNode(node: SyntaxNodeLike): SyntaxNodeLike | null {
+    if (node.type.includes("yaml") && node.startPosition.row === 0) {
+        return node;
+    }
+    for (const child of node.children) {
+        const found = findFrontmatterNode(child);
+        if (found) return found;
+    }
+    return null;
+}
+
+async function getParser(): Promise<{ parse: (input: string) => { rootNode: SyntaxNodeLike } }> {
+    if (parserInstance) return parserInstance;
+
+    const [{ default: Parser }, markdownModule] = await Promise.all([
+        import("tree-sitter"),
+        import("@tree-sitter-grammars/tree-sitter-markdown"),
+    ]);
+
+    const parser = new Parser();
+    parser.setLanguage(
+        ((markdownModule as { default?: unknown }).default ?? markdownModule) as Parameters<
+            typeof parser.setLanguage
+        >[0],
+    );
+    parserInstance = parser;
+    return parser;
+}

package/src/skillreader/utils/http-range.ts

@@ -0,0 +1,38 @@
+import { Readable as NodeReadable } from "node:stream";
+import type { ReadableStream as NodeReadableStream } from "node:stream/web";
+import { createInflateRaw } from "node:zlib";
+
+export async function fetchContentLength(url: string): Promise<number> {
+    const res = await fetch(url, { method: "HEAD" });
+    if (!res.ok) {
+        throw new Error(`HEAD ${url} failed: ${res.status} ${res.statusText}`);
+    }
+    const len = res.headers.get("content-length");
+    if (!len) throw new Error("No content-length header");
+    const size = Number.parseInt(len, 10);
+    if (Number.isNaN(size)) throw new Error(`Invalid content-length: ${len}`);
+    return size;
+}
+
+export async function fetchRangeStream(
+    url: string,
+    start: number,
+    length: number,
+): Promise<ReadableStream<Uint8Array>> {
+    const end = start + length - 1;
+    const range = `bytes=${start}-${end}`;
+    const res = await fetch(url, { headers: { Range: range } });
+    if (!res.ok || !res.body) {
+        throw new Error(`Range read failed: ${res.status} ${res.statusText}`);
+    }
+    return res.body;
+}
+
+export function decompressDeflateStream(
+    stream: ReadableStream<Uint8Array>,
+): ReadableStream<Uint8Array> {
+    const nodeStream = NodeReadable.fromWeb(stream as unknown as NodeReadableStream);
+    const inflater = createInflateRaw();
+    const decompressed = nodeStream.pipe(inflater);
+    return NodeReadable.toWeb(decompressed) as ReadableStream<Uint8Array>;
+}

package/src/skillreader/utils/mod.ts

@@ -0,0 +1,12 @@
+export function isProbablyText(bytes: Uint8Array): boolean {
+    const sample = bytes.subarray(0, Math.min(bytes.length, 2048));
+    let controlCount = 0;
+    for (const byte of sample) {
+        if (byte === 0) return false;
+        if (byte < 9 || (byte > 13 && byte < 32)) controlCount += 1;
+    }
+    return controlCount / Math.max(sample.length, 1) < 0.1;
+}
+
+export * from "./frontmatter-parser.js";
+export * from "./http-range.js";

package/esm/analyzer/astgrep/registry.d.ts

@@ -1,18 +0,0 @@
-export type AstGrepGrammar = "javascript" | "typescript" | "python" | "bash" | "markdown";
-export type DynamicLangRegistration = {
-    libraryPath: string;
-    extensions: string[];
-    languageSymbol?: string;
-    metaVarChar?: string;
-    expandoChar?: string;
-};
-type AstGrepLanguageSpec = {
-    parserFileName: string;
-    parserTarballUrl: string;
-    developmentRegistration: DynamicLangRegistration;
-};
-export declare const AST_GREP_LANGUAGE_SPECS: Record<AstGrepGrammar, AstGrepLanguageSpec>;
-export declare function buildDevRegistrations(): Record<AstGrepGrammar, DynamicLangRegistration>;
-export declare function buildBundledRegistrations(resourceDir: string): Record<AstGrepGrammar, DynamicLangRegistration>;
-export {};
-//# sourceMappingURL=registry.d.ts.map

package/esm/analyzer/astgrep/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/analyzer/astgrep/registry.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE1F,MAAM,MAAM,uBAAuB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,uBAAuB,CAAC;CACpD,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAgC/E,CAAC;AAEF,wBAAgB,qBAAqB,IAAI,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAMvF;AAED,wBAAgB,yBAAyB,CACrC,WAAW,EAAE,MAAM,GACpB,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAwBjD"}

package/esm/analyzer/astgrep/registry.js

@@ -1,71 +0,0 @@
-import * as dntShim from "../../_dnt.shims.js";
-import * as bashRegistration from "@ast-grep/lang-bash";
-import * as javascriptRegistration from "@ast-grep/lang-javascript";
-import * as markdownRegistration from "@ast-grep/lang-markdown";
-import * as pythonRegistration from "@ast-grep/lang-python";
-import * as typescriptRegistration from "@ast-grep/lang-typescript";
-import { join } from "../../deps/jsr.io/@std/path/1.1.4/mod.js";
-export const AST_GREP_LANGUAGE_SPECS = {
-    bash: {
-        parserFileName: "bash-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-bash/-/lang-bash-0.0.7.tgz",
-        developmentRegistration: bashRegistration.default,
-    },
-    javascript: {
-        parserFileName: "javascript-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-javascript/-/lang-javascript-0.0.6.tgz",
-        developmentRegistration: javascriptRegistration
-            .default,
-    },
-    markdown: {
-        parserFileName: "markdown-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-markdown/-/lang-markdown-0.0.5.tgz",
-        developmentRegistration: markdownRegistration.default,
-    },
-    python: {
-        parserFileName: "python-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-python/-/lang-python-0.0.5.tgz",
-        developmentRegistration: pythonRegistration.default,
-    },
-    typescript: {
-        parserFileName: "typescript-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-typescript/-/lang-typescript-0.0.6.tgz",
-        developmentRegistration: typescriptRegistration
-            .default,
-    },
-};
-export function buildDevRegistrations() {
-    const registrations = {};
-    for (const grammar of Object.keys(AST_GREP_LANGUAGE_SPECS)) {
-        registrations[grammar] = AST_GREP_LANGUAGE_SPECS[grammar].developmentRegistration;
-    }
-    return registrations;
-}
-export function buildBundledRegistrations(resourceDir) {
-    const registrations = {};
-    for (const grammar of Object.keys(AST_GREP_LANGUAGE_SPECS)) {
-        const spec = AST_GREP_LANGUAGE_SPECS[grammar];
-        const devRegistration = spec.developmentRegistration;
-        const libraryPath = join(resourceDir, spec.parserFileName);
-        if (!fileExists(libraryPath)) {
-            throw new Error(`Missing ast-grep parser for ${grammar}: ${libraryPath}. Reinstall the CLI release artifact for your platform.`);
-        }
-        registrations[grammar] = {
-            libraryPath,
-            extensions: [...devRegistration.extensions],
-            languageSymbol: devRegistration.languageSymbol,
-            expandoChar: devRegistration.expandoChar,
-            metaVarChar: devRegistration.metaVarChar,
-        };
-    }
-    return registrations;
-}
-function fileExists(path) {
-    try {
-        const stat = dntShim.Deno.statSync(path);
-        return stat.isFile;
-    }
-    catch {
-        return false;
-    }
-}

package/esm/analyzer/config.d.ts

@@ -1,27 +0,0 @@
-import { PermissionScope, Severity } from "../shared/mod.js";
-import type { AnalyzerConfig } from "./types.js";
-export declare const DEFAULT_SKILL_VERSION = "0.0.1";
-export declare const DEFAULT_CONFIG: AnalyzerConfig;
-export declare const ALLOWED_TOOLS_MAPPING: Record<string, {
-    tool: string;
-    scope: PermissionScope;
-    permission: string;
-}>;
-export declare const TOOLS_MAPPING: Record<string, {
-    scope: PermissionScope;
-    permission: string;
-}>;
-export declare const SCORING: {
-    severity: Record<Severity, number>;
-    permissions: Record<string, number>;
-    scopeWildcard: number;
-    uplift: {
-        externalPost: number;
-        pipeToShell: number;
-        multipleCritical: number;
-        secretsInRequest: number;
-    };
-};
-export declare const UNSUPPORTED_SKILL_FRONTMATTER_FIELDS: readonly ["argument-hint", "disable-model-invocation", "user-invocable", "model", "context", "agent", "hooks"];
-export declare const FRONTMATTER_SUPPORTED_FIELDS: readonly ["name", "description", "license", "compatibility", "metadata", "allowed-tools"];
-//# sourceMappingURL=config.d.ts.map

package/esm/analyzer/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/analyzer/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,eAAO,MAAM,cAAc,EAAE,cAI5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CACtC,MAAM,EACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAS/D,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAaxF,CAAC;AAEF,eAAO,MAAM,OAAO;cAKX,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;iBASxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;CAQ9B,CAAC;AAEF,eAAO,MAAM,oCAAoC,gHAQvC,CAAC;AAEX,eAAO,MAAM,4BAA4B,2FAO/B,CAAC"}

package/esm/analyzer/steps/003-risks/output.d.ts

@@ -1,3 +0,0 @@
-import type { AnalyzerResult, AnalyzerState } from "../../types.js";
-export declare function toAnalyzerResult(state: AnalyzerState): AnalyzerResult;
-//# sourceMappingURL=output.d.ts.map

package/esm/analyzer/steps/003-risks/output.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/003-risks/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAcrE"}

package/esm/analyzer/steps/003-risks/output.js

@@ -1,16 +0,0 @@
-import { scoreState } from "./scoring.js";
-export function toAnalyzerResult(state) {
-    const { score, riskLevel, summary } = scoreState(state);
-    return {
-        analyzedAt: new Date().toISOString(),
-        skillId: state.skillId,
-        skillVersionId: state.skillVersionId,
-        permissions: state.permissions,
-        risks: state.risks,
-        score,
-        riskLevel,
-        summary,
-        warnings: state.warnings,
-        metadata: state.metadata,
-    };
-}

package/esm/analyzer/treesiter/client.d.ts

@@ -1,26 +0,0 @@
-import type Parser from "tree-sitter";
-type TreesitterGrammer = "markdown" | "markdown-inline";
-export declare class TreesitterClient {
-    private PARSER_BY_GRAMMAR;
-    private LANG_BY_GRAMMAR;
-    private QUERY_CACHE;
-    private ROOT_NODE_CACHE_BY_GRAMMAR;
-    private GRAMMER_LIB_BY_LANGUAGE;
-    getParser(grammar: TreesitterGrammer): Promise<Parser>;
-    /**
-     * Creates (and caches) a tree-sitter Query for the given grammar and S-expression query string.
-     */
-    createQuery(grammar: TreesitterGrammer, queryString: string): Promise<Parser.Query>;
-    /**
-     * Parses content into a tree-sitter Tree with memoization.
-     *
-     * Cache key strategy:
-     * - first level: content length
-     * - second level: fast non-cryptographic hash of content
-     */
-    parse(grammar: TreesitterGrammer, content: string): Promise<Parser.Tree>;
-    private getTreeCache;
-    private hashContent;
-}
-export {};
-//# sourceMappingURL=client.d.ts.map

package/esm/analyzer/treesiter/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/analyzer/treesiter/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,KAAK,iBAAiB,GAChB,UAAU,GACV,iBAAiB,CAAC;AAQxB,qBAAa,gBAAgB;IACzB,OAAO,CAAC,iBAAiB,CAAkD;IAC3E,OAAO,CAAC,eAAe,CAA2D;IAClF,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,0BAA0B,CAG3B;IAEP,OAAO,CAAC,uBAAuB,CAS7B;IAEW,SAAS,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAuCnE;;OAEG;IACU,WAAW,CACpB,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAcxB;;;;;;OAMG;IACU,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IAqBrF,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,WAAW;CAStB"}

package/script/analyzer/astgrep/registry.d.ts

@@ -1,18 +0,0 @@
-export type AstGrepGrammar = "javascript" | "typescript" | "python" | "bash" | "markdown";
-export type DynamicLangRegistration = {
-    libraryPath: string;
-    extensions: string[];
-    languageSymbol?: string;
-    metaVarChar?: string;
-    expandoChar?: string;
-};
-type AstGrepLanguageSpec = {
-    parserFileName: string;
-    parserTarballUrl: string;
-    developmentRegistration: DynamicLangRegistration;
-};
-export declare const AST_GREP_LANGUAGE_SPECS: Record<AstGrepGrammar, AstGrepLanguageSpec>;
-export declare function buildDevRegistrations(): Record<AstGrepGrammar, DynamicLangRegistration>;
-export declare function buildBundledRegistrations(resourceDir: string): Record<AstGrepGrammar, DynamicLangRegistration>;
-export {};
-//# sourceMappingURL=registry.d.ts.map

package/script/analyzer/astgrep/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/analyzer/astgrep/registry.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE1F,MAAM,MAAM,uBAAuB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,uBAAuB,CAAC;CACpD,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAgC/E,CAAC;AAEF,wBAAgB,qBAAqB,IAAI,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAMvF;AAED,wBAAgB,yBAAyB,CACrC,WAAW,EAAE,MAAM,GACpB,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAwBjD"}

package/script/analyzer/astgrep/registry.js

@@ -1,109 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AST_GREP_LANGUAGE_SPECS = void 0;
-exports.buildDevRegistrations = buildDevRegistrations;
-exports.buildBundledRegistrations = buildBundledRegistrations;
-const dntShim = __importStar(require("../../_dnt.shims.js"));
-const bashRegistration = __importStar(require("@ast-grep/lang-bash"));
-const javascriptRegistration = __importStar(require("@ast-grep/lang-javascript"));
-const markdownRegistration = __importStar(require("@ast-grep/lang-markdown"));
-const pythonRegistration = __importStar(require("@ast-grep/lang-python"));
-const typescriptRegistration = __importStar(require("@ast-grep/lang-typescript"));
-const mod_js_1 = require("../../deps/jsr.io/@std/path/1.1.4/mod.js");
-exports.AST_GREP_LANGUAGE_SPECS = {
-    bash: {
-        parserFileName: "bash-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-bash/-/lang-bash-0.0.7.tgz",
-        developmentRegistration: bashRegistration.default,
-    },
-    javascript: {
-        parserFileName: "javascript-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-javascript/-/lang-javascript-0.0.6.tgz",
-        developmentRegistration: javascriptRegistration
-            .default,
-    },
-    markdown: {
-        parserFileName: "markdown-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-markdown/-/lang-markdown-0.0.5.tgz",
-        developmentRegistration: markdownRegistration.default,
-    },
-    python: {
-        parserFileName: "python-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-python/-/lang-python-0.0.5.tgz",
-        developmentRegistration: pythonRegistration.default,
-    },
-    typescript: {
-        parserFileName: "typescript-parser.so",
-        parserTarballUrl: "https://registry.npmjs.org/@ast-grep/lang-typescript/-/lang-typescript-0.0.6.tgz",
-        developmentRegistration: typescriptRegistration
-            .default,
-    },
-};
-function buildDevRegistrations() {
-    const registrations = {};
-    for (const grammar of Object.keys(exports.AST_GREP_LANGUAGE_SPECS)) {
-        registrations[grammar] = exports.AST_GREP_LANGUAGE_SPECS[grammar].developmentRegistration;
-    }
-    return registrations;
-}
-function buildBundledRegistrations(resourceDir) {
-    const registrations = {};
-    for (const grammar of Object.keys(exports.AST_GREP_LANGUAGE_SPECS)) {
-        const spec = exports.AST_GREP_LANGUAGE_SPECS[grammar];
-        const devRegistration = spec.developmentRegistration;
-        const libraryPath = (0, mod_js_1.join)(resourceDir, spec.parserFileName);
-        if (!fileExists(libraryPath)) {
-            throw new Error(`Missing ast-grep parser for ${grammar}: ${libraryPath}. Reinstall the CLI release artifact for your platform.`);
-        }
-        registrations[grammar] = {
-            libraryPath,
-            extensions: [...devRegistration.extensions],
-            languageSymbol: devRegistration.languageSymbol,
-            expandoChar: devRegistration.expandoChar,
-            metaVarChar: devRegistration.metaVarChar,
-        };
-    }
-    return registrations;
-}
-function fileExists(path) {
-    try {
-        const stat = dntShim.Deno.statSync(path);
-        return stat.isFile;
-    }
-    catch {
-        return false;
-    }
-}

package/script/analyzer/config.d.ts

@@ -1,27 +0,0 @@
-import { PermissionScope, Severity } from "../shared/mod.js";
-import type { AnalyzerConfig } from "./types.js";
-export declare const DEFAULT_SKILL_VERSION = "0.0.1";
-export declare const DEFAULT_CONFIG: AnalyzerConfig;
-export declare const ALLOWED_TOOLS_MAPPING: Record<string, {
-    tool: string;
-    scope: PermissionScope;
-    permission: string;
-}>;
-export declare const TOOLS_MAPPING: Record<string, {
-    scope: PermissionScope;
-    permission: string;
-}>;
-export declare const SCORING: {
-    severity: Record<Severity, number>;
-    permissions: Record<string, number>;
-    scopeWildcard: number;
-    uplift: {
-        externalPost: number;
-        pipeToShell: number;
-        multipleCritical: number;
-        secretsInRequest: number;
-    };
-};
-export declare const UNSUPPORTED_SKILL_FRONTMATTER_FIELDS: readonly ["argument-hint", "disable-model-invocation", "user-invocable", "model", "context", "agent", "hooks"];
-export declare const FRONTMATTER_SUPPORTED_FIELDS: readonly ["name", "description", "license", "compatibility", "metadata", "allowed-tools"];
-//# sourceMappingURL=config.d.ts.map

package/script/analyzer/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/analyzer/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,eAAO,MAAM,cAAc,EAAE,cAI5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CACtC,MAAM,EACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAS/D,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAaxF,CAAC;AAEF,eAAO,MAAM,OAAO;cAKX,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;iBASxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;CAQ9B,CAAC;AAEF,eAAO,MAAM,oCAAoC,gHAQvC,CAAC;AAEX,eAAO,MAAM,4BAA4B,2FAO/B,CAAC"}

package/script/analyzer/steps/003-risks/output.d.ts

@@ -1,3 +0,0 @@
-import type { AnalyzerResult, AnalyzerState } from "../../types.js";
-export declare function toAnalyzerResult(state: AnalyzerState): AnalyzerResult;
-//# sourceMappingURL=output.d.ts.map

package/script/analyzer/steps/003-risks/output.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/analyzer/steps/003-risks/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAcrE"}

package/script/analyzer/steps/003-risks/output.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toAnalyzerResult = toAnalyzerResult;
-const scoring_js_1 = require("./scoring.js");
-function toAnalyzerResult(state) {
-    const { score, riskLevel, summary } = (0, scoring_js_1.scoreState)(state);
-    return {
-        analyzedAt: new Date().toISOString(),
-        skillId: state.skillId,
-        skillVersionId: state.skillVersionId,
-        permissions: state.permissions,
-        risks: state.risks,
-        score,
-        riskLevel,
-        summary,
-        warnings: state.warnings,
-        metadata: state.metadata,
-    };
-}