@geminixiang/mikan 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/harness/settings.d.ts

@@ -1,10 +1,7 @@
 import type { CompactionSettings } from "@earendil-works/pi-agent-core";
+import type { BudgetSettings, HarnessSettings, RetrySettings } from "./types.js";
 export type { CompactionSettings };
-export interface RetrySettings {
-    enabled: boolean;
-    maxRetries: number;
-    baseDelayMs: number;
-}
+export type { BudgetSettings, HarnessSettings, RetrySettings } from "./types.js";
 export declare const DEFAULT_RETRY_SETTINGS: RetrySettings;
 /**
  * Per-run resource ceilings — the harness's external circuit breakers.
@@ -17,16 +14,6 @@ export declare const DEFAULT_RETRY_SETTINGS: RetrySettings;
  * so they default to uncapped; autonomous runs (scheduled events, triggers)
  * pass {@link DEFAULT_EVENT_BUDGET}, where nobody is watching the loop.
  */
-export interface BudgetSettings {
-    /** Max cumulative tokens processed this run (input + output + cache read/write). */
-    maxTokens?: number;
-    /** Max cumulative provider cost (USD) this run. Requires a populated model cost table. */
-    maxCostUsd?: number;
-    /** Max wall-clock duration for the run, in milliseconds. */
-    maxDurationMs?: number;
-    /** Max number of LLM calls (assistant turns) this run. */
-    maxLlmCalls?: number;
-}
 /** Interactive runs are human-gated per turn — no automatic ceiling by default. */
 export declare const DEFAULT_BUDGET_SETTINGS: BudgetSettings;
 /**
@@ -34,11 +21,6 @@ export declare const DEFAULT_BUDGET_SETTINGS: BudgetSettings;
  * the loop. Deliberately generous — it is a stop-loss, not a target.
  */
 export declare const DEFAULT_EVENT_BUDGET: BudgetSettings;
-export interface HarnessSettings {
-    compaction: CompactionSettings;
-    retry: RetrySettings;
-    budget: BudgetSettings;
-}
 export declare function resolveHarnessSettings(overrides?: {
     compaction?: Partial<CompactionSettings>;
     retry?: Partial<RetrySettings>;

package/dist/harness/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/harness/settings.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAExE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,sBAAsB,EAAE,aAIpC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,EAAE,cAAmB,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,cAIlC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CAClC,GAAG,eAAe,CAMlB"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/harness/settings.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEjF,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnC,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEjF,eAAO,MAAM,sBAAsB,EAAE,aAIpC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,EAAE,cAAmB,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,cAIlC,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CAClC,GAAG,eAAe,CAMlB"}

package/dist/harness/settings.js

@@ -8,6 +8,17 @@ export const DEFAULT_RETRY_SETTINGS = {
     maxRetries: 3,
     baseDelayMs: 2000,
 };
+/**
+ * Per-run resource ceilings — the harness's external circuit breakers.
+ *
+ * An LLM cannot reliably decide on its own when to stop (the halting problem),
+ * so a runaway run has to be stopped from the outside. When any populated cap
+ * is exceeded, the run is aborted and a `budget_exceeded` event is emitted.
+ * Every field is a cap on a single `prompt()` call; an undefined field means
+ * "no cap on that axis". Interactive runs are gated turn-by-turn by a human,
+ * so they default to uncapped; autonomous runs (scheduled events, triggers)
+ * pass {@link DEFAULT_EVENT_BUDGET}, where nobody is watching the loop.
+ */
 /** Interactive runs are human-gated per turn — no automatic ceiling by default. */
 export const DEFAULT_BUDGET_SETTINGS = {};
 /**
@@ -17,7 +28,7 @@ export const DEFAULT_BUDGET_SETTINGS = {};
 export const DEFAULT_EVENT_BUDGET = {
     maxDurationMs: 10 * 60 * 1000,
     maxLlmCalls: 50,
-    maxCostUsd: 2,
+    maxCostUsd: 10,
 };
 export function resolveHarnessSettings(overrides) {
     return {

package/dist/harness/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/harness/settings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAW5E,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,IAAI;CAClB,CAAC;AAwBF,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAmB,EAAE,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IAC7B,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,CAAC;CACd,CAAC;AAQF,MAAM,UAAU,sBAAsB,CAAC,SAItC;IACC,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,2BAA2B,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE;QACxE,KAAK,EAAE,EAAE,GAAG,sBAAsB,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE;QACzD,MAAM,EAAE,EAAE,GAAG,uBAAuB,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Runtime settings for the mikan harness. mikan runs headless, so these are\n * plain values with defaults matching the behavior mikan shipped with.\n */\nimport { DEFAULT_COMPACTION_SETTINGS } from \"@earendil-works/pi-agent-core\";\nimport type { CompactionSettings } from \"@earendil-works/pi-agent-core\";\n\nexport type { CompactionSettings };\n\nexport interface RetrySettings {\n  enabled: boolean;\n  maxRetries: number;\n  baseDelayMs: number;\n}\n\nexport const DEFAULT_RETRY_SETTINGS: RetrySettings = {\n  enabled: true,\n  maxRetries: 3,\n  baseDelayMs: 2000,\n};\n\n/**\n * Per-run resource ceilings — the harness's external circuit breakers.\n *\n * An LLM cannot reliably decide on its own when to stop (the halting problem),\n * so a runaway run has to be stopped from the outside. When any populated cap\n * is exceeded, the run is aborted and a `budget_exceeded` event is emitted.\n * Every field is a cap on a single `prompt()` call; an undefined field means\n * \"no cap on that axis\". Interactive runs are gated turn-by-turn by a human,\n * so they default to uncapped; autonomous runs (scheduled events, triggers)\n * pass {@link DEFAULT_EVENT_BUDGET}, where nobody is watching the loop.\n */\nexport interface BudgetSettings {\n  /** Max cumulative tokens processed this run (input + output + cache read/write). */\n  maxTokens?: number;\n  /** Max cumulative provider cost (USD) this run. Requires a populated model cost table. */\n  maxCostUsd?: number;\n  /** Max wall-clock duration for the run, in milliseconds. */\n  maxDurationMs?: number;\n  /** Max number of LLM calls (assistant turns) this run. */\n  maxLlmCalls?: number;\n}\n\n/** Interactive runs are human-gated per turn — no automatic ceiling by default. */\nexport const DEFAULT_BUDGET_SETTINGS: BudgetSettings = {};\n\n/**\n * Ceiling for autonomous (event / trigger) runs, where no human is watching\n * the loop. Deliberately generous — it is a stop-loss, not a target.\n */\nexport const DEFAULT_EVENT_BUDGET: BudgetSettings = {\n  maxDurationMs: 10 * 60 * 1000,\n  maxLlmCalls: 50,\n  maxCostUsd: 2,\n};\n\nexport interface HarnessSettings {\n  compaction: CompactionSettings;\n  retry: RetrySettings;\n  budget: BudgetSettings;\n}\n\nexport function resolveHarnessSettings(overrides?: {\n  compaction?: Partial<CompactionSettings>;\n  retry?: Partial<RetrySettings>;\n  budget?: Partial<BudgetSettings>;\n}): HarnessSettings {\n  return {\n    compaction: { ...DEFAULT_COMPACTION_SETTINGS, ...overrides?.compaction },\n    retry: { ...DEFAULT_RETRY_SETTINGS, ...overrides?.retry },\n    budget: { ...DEFAULT_BUDGET_SETTINGS, ...overrides?.budget },\n  };\n}\n"]}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/harness/settings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAO5E,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAmB,EAAE,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IAC7B,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,EAAE;CACf,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,SAItC;IACC,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,2BAA2B,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE;QACxE,KAAK,EAAE,EAAE,GAAG,sBAAsB,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE;QACzD,MAAM,EAAE,EAAE,GAAG,uBAAuB,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Runtime settings for the mikan harness. mikan runs headless, so these are\n * plain values with defaults matching the behavior mikan shipped with.\n */\nimport { DEFAULT_COMPACTION_SETTINGS } from \"@earendil-works/pi-agent-core\";\nimport type { CompactionSettings } from \"@earendil-works/pi-agent-core\";\nimport type { BudgetSettings, HarnessSettings, RetrySettings } from \"./types.js\";\n\nexport type { CompactionSettings };\nexport type { BudgetSettings, HarnessSettings, RetrySettings } from \"./types.js\";\n\nexport const DEFAULT_RETRY_SETTINGS: RetrySettings = {\n  enabled: true,\n  maxRetries: 3,\n  baseDelayMs: 2000,\n};\n\n/**\n * Per-run resource ceilings — the harness's external circuit breakers.\n *\n * An LLM cannot reliably decide on its own when to stop (the halting problem),\n * so a runaway run has to be stopped from the outside. When any populated cap\n * is exceeded, the run is aborted and a `budget_exceeded` event is emitted.\n * Every field is a cap on a single `prompt()` call; an undefined field means\n * \"no cap on that axis\". Interactive runs are gated turn-by-turn by a human,\n * so they default to uncapped; autonomous runs (scheduled events, triggers)\n * pass {@link DEFAULT_EVENT_BUDGET}, where nobody is watching the loop.\n */\n/** Interactive runs are human-gated per turn — no automatic ceiling by default. */\nexport const DEFAULT_BUDGET_SETTINGS: BudgetSettings = {};\n\n/**\n * Ceiling for autonomous (event / trigger) runs, where no human is watching\n * the loop. Deliberately generous — it is a stop-loss, not a target.\n */\nexport const DEFAULT_EVENT_BUDGET: BudgetSettings = {\n  maxDurationMs: 10 * 60 * 1000,\n  maxLlmCalls: 50,\n  maxCostUsd: 10,\n};\n\nexport function resolveHarnessSettings(overrides?: {\n  compaction?: Partial<CompactionSettings>;\n  retry?: Partial<RetrySettings>;\n  budget?: Partial<BudgetSettings>;\n}): HarnessSettings {\n  return {\n    compaction: { ...DEFAULT_COMPACTION_SETTINGS, ...overrides?.compaction },\n    retry: { ...DEFAULT_RETRY_SETTINGS, ...overrides?.retry },\n    budget: { ...DEFAULT_BUDGET_SETTINGS, ...overrides?.budget },\n  };\n}\n"]}

package/dist/harness/skills.d.ts

@@ -1,31 +1,5 @@
-/** A loaded skill. `baseDir` is the directory containing the skill file. */
-export interface MikanSkill {
-    name: string;
-    description: string;
-    /** Full skill instructions (file content without frontmatter). */
-    content: string;
-    filePath: string;
-    baseDir: string;
-    /** Where the skill was loaded from (e.g. "workspace", "channel"). */
-    source: string;
-    /** Exclude from model-visible skill lists. */
-    disableModelInvocation?: boolean;
-    /**
-     * Embed the skill body in the prompt instead of referencing its file path.
-     * Used for skills whose files the agent cannot read at runtime (e.g.
-     * extension skills under the host-only state dir in sandbox modes).
-     */
-    inline?: boolean;
-}
-export interface SkillDiagnostic {
-    type: "warning";
-    message: string;
-    path: string;
-}
-export interface LoadSkillsResult {
-    skills: MikanSkill[];
-    diagnostics: SkillDiagnostic[];
-}
+import type { LoadSkillsResult, MikanSkill } from "./types.js";
+export type { LoadSkillsResult, MikanSkill, SkillDiagnostic } from "./types.js";
 interface Frontmatter {
     values: Record<string, string>;
     body: string;
@@ -44,11 +18,18 @@ export declare function parseFrontmatter(content: string): Frontmatter;
 export declare function loadSkillsFromDir(options: {
     dir: string;
     source: string;
+    /**
+     * Refuse to follow symlinks on any path this load would read, skipping the
+     * offending entry with a `code: "symlink"` diagnostic instead of loading
+     * it. For untrusted trees (conversation offices) the host must never
+     * follow an agent-created link; entries the loader never reads — dot
+     * directories, vendored node_modules — cannot disqualify anything.
+     */
+    rejectSymlinks?: boolean;
 }): LoadSkillsResult;
 /**
  * Format skills for a system prompt using the Agent Skills XML block.
  * Skills with `disableModelInvocation` are excluded.
  */
 export declare function formatSkillsForPrompt(skills: MikanSkill[]): string;
-export {};
 //# sourceMappingURL=skills.d.ts.map

package/dist/harness/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/harness/skills.ts"],"names":[],"mappings":"AAeA,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAoB7D;AAkED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAE5F;AAgFD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAyBlE"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/harness/skills.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAmB,MAAM,YAAY,CAAC;AAEhF,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKhF,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAoB7D;AAkED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,gBAAgB,CAgBnB;AA8GD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAyBlE"}

package/dist/harness/skills.js

@@ -7,8 +7,8 @@
  * system prompt documents: a directory with a `SKILL.md` is a skill root
  * (no further recursion), other directories are traversed.
  */
-import { existsSync, readdirSync, readFileSync, statSync } from "fs";
-import { basename, dirname, join } from "path";
+import { existsSync, lstatSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
 const MAX_NAME_LENGTH = 64;
 const MAX_DESCRIPTION_LENGTH = 1024;
 /**
@@ -20,7 +20,7 @@ export function parseFrontmatter(content) {
     if (!match)
         return { values: {}, body: content };
     const values = {};
-    for (const line of match[1].split(/\r?\n/)) {
+    for (const line of (match[1] ?? "").split(/\r?\n/)) {
         const separator = line.indexOf(":");
         if (separator === -1)
             continue;
@@ -96,9 +96,39 @@ function loadSkillFromFile(filePath, source) {
  * - Dot-directories and `node_modules` are skipped.
  */
 export function loadSkillsFromDir(options) {
-    return loadSkillsFromDirInternal(options.dir, options.source, true);
+    const rejectSymlinks = options.rejectSymlinks === true;
+    if (rejectSymlinks && isSymlink(options.dir)) {
+        return {
+            skills: [],
+            diagnostics: [
+                {
+                    type: "warning",
+                    code: "symlink",
+                    message: "Skills directory is a symlink; skipped",
+                    path: options.dir,
+                },
+            ],
+        };
+    }
+    return loadSkillsFromDirInternal(options.dir, options.source, true, rejectSymlinks);
 }
-function loadSkillsFromDirInternal(dir, source, includeRootFiles) {
+function isSymlink(path) {
+    try {
+        return lstatSync(path).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+function symlinkDiagnostic(path) {
+    return {
+        type: "warning",
+        code: "symlink",
+        message: "Skill entry is a symlink; skipped",
+        path,
+    };
+}
+function loadSkillsFromDirInternal(dir, source, includeRootFiles, rejectSymlinks) {
     const skills = [];
     const diagnostics = [];
     if (!existsSync(dir))
@@ -112,6 +142,10 @@ function loadSkillsFromDirInternal(dir, source, includeRootFiles) {
     }
     const skillFile = entries.find((entry) => entry.name === "SKILL.md" && isFileLike(dir, entry));
     if (skillFile) {
+        if (rejectSymlinks && skillFile.isSymbolicLink()) {
+            diagnostics.push(symlinkDiagnostic(join(dir, skillFile.name)));
+            return { skills, diagnostics };
+        }
         const result = loadSkillFromFile(join(dir, skillFile.name), source);
         if (result.skill)
             skills.push(result.skill);
@@ -123,13 +157,21 @@ function loadSkillsFromDirInternal(dir, source, includeRootFiles) {
             continue;
         const fullPath = join(dir, entry.name);
         if (isDirectoryLike(dir, entry)) {
-            const subResult = loadSkillsFromDirInternal(fullPath, source, false);
+            if (rejectSymlinks && entry.isSymbolicLink()) {
+                diagnostics.push(symlinkDiagnostic(fullPath));
+                continue;
+            }
+            const subResult = loadSkillsFromDirInternal(fullPath, source, false, rejectSymlinks);
             skills.push(...subResult.skills);
             diagnostics.push(...subResult.diagnostics);
             continue;
         }
         if (!includeRootFiles || !entry.name.endsWith(".md") || !isFileLike(dir, entry))
             continue;
+        if (rejectSymlinks && entry.isSymbolicLink()) {
+            diagnostics.push(symlinkDiagnostic(fullPath));
+            continue;
+        }
         const result = loadSkillFromFile(fullPath, source);
         if (result.skill)
             skills.push(result.skill);

package/dist/harness/skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/harness/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE/C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAsCpC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,WAAmB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,eAAe,gBAAgB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,uBAAuB,sBAAsB,gBAAgB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,MAAc;IAKd,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAE7C,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,KAAK,EAAE;gBACL,IAAI;gBACJ,WAAW;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;gBACpB,QAAQ;gBACR,OAAO,EAAE,QAAQ;gBACjB,MAAM;gBACN,sBAAsB,EAAE,MAAM,CAAC,0BAA0B,CAAC,KAAK,MAAM;aACtE;YACD,WAAW;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;YAC9E,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACxE,OAAO,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,yBAAyB,CAChC,GAAW,EACX,MAAc,EACd,gBAAyB;IAEzB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAErD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/F,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,SAAS;QAE1F,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CACjB,GAAW,EACX,KAAqE;IAErE,IAAI,KAAK,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,GAAW,EACX,KAA0E;IAE1E,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,iFAAiF;QACjF,8KAA8K;QAC9K,EAAE;QACF,oBAAoB;KACrB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,oEAAoE;YACpE,KAAK,CAAC,IAAI,CAAC,qBAAqB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Skill loading for the mikan harness.\n *\n * Skills follow the Agent Skills layout: a directory containing a `SKILL.md`\n * with YAML frontmatter (`name`, `description`), or standalone `.md` files in\n * the root of a skills directory. Discovery mirrors the behavior mikan's\n * system prompt documents: a directory with a `SKILL.md` is a skill root\n * (no further recursion), other directories are traversed.\n */\nimport { existsSync, readdirSync, readFileSync, statSync } from \"fs\";\nimport { basename, dirname, join } from \"path\";\n\nconst MAX_NAME_LENGTH = 64;\nconst MAX_DESCRIPTION_LENGTH = 1024;\n\n/** A loaded skill. `baseDir` is the directory containing the skill file. */\nexport interface MikanSkill {\n  name: string;\n  description: string;\n  /** Full skill instructions (file content without frontmatter). */\n  content: string;\n  filePath: string;\n  baseDir: string;\n  /** Where the skill was loaded from (e.g. \"workspace\", \"channel\"). */\n  source: string;\n  /** Exclude from model-visible skill lists. */\n  disableModelInvocation?: boolean;\n  /**\n   * Embed the skill body in the prompt instead of referencing its file path.\n   * Used for skills whose files the agent cannot read at runtime (e.g.\n   * extension skills under the host-only state dir in sandbox modes).\n   */\n  inline?: boolean;\n}\n\nexport interface SkillDiagnostic {\n  type: \"warning\";\n  message: string;\n  path: string;\n}\n\nexport interface LoadSkillsResult {\n  skills: MikanSkill[];\n  diagnostics: SkillDiagnostic[];\n}\n\ninterface Frontmatter {\n  values: Record<string, string>;\n  body: string;\n}\n\n/**\n * Parse simple `key: value` YAML frontmatter delimited by `---` lines.\n * Quoted values are unquoted; nested structures are not supported.\n */\nexport function parseFrontmatter(content: string): Frontmatter {\n  const match = content.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---\\r?\\n?/);\n  if (!match) return { values: {}, body: content };\n\n  const values: Record<string, string> = {};\n  for (const line of match[1].split(/\\r?\\n/)) {\n    const separator = line.indexOf(\":\");\n    if (separator === -1) continue;\n    const key = line.slice(0, separator).trim();\n    if (!key) continue;\n    let value = line.slice(separator + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    values[key] = value;\n  }\n  return { values, body: content.slice(match[0].length) };\n}\n\nfunction validateSkill(name: string, description: string): string[] {\n  const errors: string[] = [];\n  if (name.length > MAX_NAME_LENGTH) {\n    errors.push(`name exceeds ${MAX_NAME_LENGTH} characters (${name.length})`);\n  }\n  if (\n    !/^[a-z0-9-]+$/.test(name) ||\n    name.startsWith(\"-\") ||\n    name.endsWith(\"-\") ||\n    name.includes(\"--\")\n  ) {\n    errors.push(\"name must be lowercase a-z, 0-9 and single hyphens, not at the edges\");\n  }\n  if (description.length > MAX_DESCRIPTION_LENGTH) {\n    errors.push(`description exceeds ${MAX_DESCRIPTION_LENGTH} characters (${description.length})`);\n  }\n  return errors;\n}\n\nfunction loadSkillFromFile(\n  filePath: string,\n  source: string,\n): {\n  skill: MikanSkill | null;\n  diagnostics: SkillDiagnostic[];\n} {\n  const diagnostics: SkillDiagnostic[] = [];\n  try {\n    const raw = readFileSync(filePath, \"utf-8\");\n    const { values, body } = parseFrontmatter(raw);\n    const skillDir = dirname(filePath);\n    const name = values.name || basename(skillDir);\n    const description = values.description ?? \"\";\n\n    if (!description.trim()) {\n      diagnostics.push({ type: \"warning\", message: \"description is required\", path: filePath });\n      return { skill: null, diagnostics };\n    }\n    for (const error of validateSkill(name, description)) {\n      diagnostics.push({ type: \"warning\", message: error, path: filePath });\n    }\n\n    return {\n      skill: {\n        name,\n        description,\n        content: body.trim(),\n        filePath,\n        baseDir: skillDir,\n        source,\n        disableModelInvocation: values[\"disable-model-invocation\"] === \"true\",\n      },\n      diagnostics,\n    };\n  } catch (error) {\n    diagnostics.push({\n      type: \"warning\",\n      message: error instanceof Error ? error.message : \"failed to parse skill file\",\n      path: filePath,\n    });\n    return { skill: null, diagnostics };\n  }\n}\n\n/**\n * Load skills from a directory tree.\n * - A directory containing `SKILL.md` is a skill root; no further recursion.\n * - Direct `.md` children of the top-level directory load as skills.\n * - Dot-directories and `node_modules` are skipped.\n */\nexport function loadSkillsFromDir(options: { dir: string; source: string }): LoadSkillsResult {\n  return loadSkillsFromDirInternal(options.dir, options.source, true);\n}\n\nfunction loadSkillsFromDirInternal(\n  dir: string,\n  source: string,\n  includeRootFiles: boolean,\n): LoadSkillsResult {\n  const skills: MikanSkill[] = [];\n  const diagnostics: SkillDiagnostic[] = [];\n  if (!existsSync(dir)) return { skills, diagnostics };\n\n  let entries;\n  try {\n    entries = readdirSync(dir, { withFileTypes: true });\n  } catch {\n    return { skills, diagnostics };\n  }\n\n  const skillFile = entries.find((entry) => entry.name === \"SKILL.md\" && isFileLike(dir, entry));\n  if (skillFile) {\n    const result = loadSkillFromFile(join(dir, skillFile.name), source);\n    if (result.skill) skills.push(result.skill);\n    diagnostics.push(...result.diagnostics);\n    return { skills, diagnostics };\n  }\n\n  for (const entry of entries) {\n    if (entry.name.startsWith(\".\") || entry.name === \"node_modules\") continue;\n    const fullPath = join(dir, entry.name);\n\n    if (isDirectoryLike(dir, entry)) {\n      const subResult = loadSkillsFromDirInternal(fullPath, source, false);\n      skills.push(...subResult.skills);\n      diagnostics.push(...subResult.diagnostics);\n      continue;\n    }\n    if (!includeRootFiles || !entry.name.endsWith(\".md\") || !isFileLike(dir, entry)) continue;\n\n    const result = loadSkillFromFile(fullPath, source);\n    if (result.skill) skills.push(result.skill);\n    diagnostics.push(...result.diagnostics);\n  }\n  return { skills, diagnostics };\n}\n\nfunction isFileLike(\n  dir: string,\n  entry: { name: string; isFile(): boolean; isSymbolicLink(): boolean },\n): boolean {\n  if (entry.isFile()) return true;\n  if (!entry.isSymbolicLink()) return false;\n  try {\n    return statSync(join(dir, entry.name)).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction isDirectoryLike(\n  dir: string,\n  entry: { name: string; isDirectory(): boolean; isSymbolicLink(): boolean },\n): boolean {\n  if (entry.isDirectory()) return true;\n  if (!entry.isSymbolicLink()) return false;\n  try {\n    return statSync(join(dir, entry.name)).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction escapeXml(str: string): string {\n  return str\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\n/**\n * Format skills for a system prompt using the Agent Skills XML block.\n * Skills with `disableModelInvocation` are excluded.\n */\nexport function formatSkillsForPrompt(skills: MikanSkill[]): string {\n  const visible = skills.filter((skill) => !skill.disableModelInvocation);\n  if (visible.length === 0) return \"\";\n\n  const lines = [\n    \"\\n\\nThe following skills provide specialized instructions for specific tasks.\",\n    \"Use the read tool to load a skill's file when the task matches its description.\",\n    \"When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md / dirname of the path) and use that absolute path in tool commands.\",\n    \"\",\n    \"<available_skills>\",\n  ];\n  for (const skill of visible) {\n    lines.push(\"  <skill>\");\n    lines.push(`    <name>${escapeXml(skill.name)}</name>`);\n    lines.push(`    <description>${escapeXml(skill.description)}</description>`);\n    if (skill.inline) {\n      // Inline skills carry their body: the agent cannot read their file.\n      lines.push(`    <instructions>${escapeXml(skill.content)}</instructions>`);\n    } else {\n      lines.push(`    <location>${escapeXml(skill.filePath)}</location>`);\n    }\n    lines.push(\"  </skill>\");\n  }\n  lines.push(\"</available_skills>\");\n  return lines.join(\"\\n\");\n}\n"]}
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/harness/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAKpD,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAOpC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,WAAmB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,eAAe,gBAAgB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,uBAAuB,sBAAsB,gBAAgB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,MAAc;IAKd,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAE7C,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,KAAK,EAAE;gBACL,IAAI;gBACJ,WAAW;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;gBACpB,QAAQ;gBACR,OAAO,EAAE,QAAQ;gBACjB,MAAM;gBACN,sBAAsB,EAAE,MAAM,CAAC,0BAA0B,CAAC,KAAK,MAAM;aACtE;YACD,WAAW;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;YAC9E,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAWjC;IACC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACvD,IAAI,cAAc,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,EAAE;YACV,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,OAAO,CAAC,GAAG;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,mCAAmC;QAC5C,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,GAAW,EACX,MAAc,EACd,gBAAyB,EACzB,cAAuB;IAEvB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAErD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/F,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,cAAc,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,cAAc,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC7C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,SAAS;QAE1F,IAAI,cAAc,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CACjB,GAAW,EACX,KAAqE;IAErE,IAAI,KAAK,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,GAAW,EACX,KAA0E;IAE1E,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,iFAAiF;QACjF,8KAA8K;QAC9K,EAAE;QACF,oBAAoB;KACrB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,oEAAoE;YACpE,KAAK,CAAC,IAAI,CAAC,qBAAqB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Skill loading for the mikan harness.\n *\n * Skills follow the Agent Skills layout: a directory containing a `SKILL.md`\n * with YAML frontmatter (`name`, `description`), or standalone `.md` files in\n * the root of a skills directory. Discovery mirrors the behavior mikan's\n * system prompt documents: a directory with a `SKILL.md` is a skill root\n * (no further recursion), other directories are traversed.\n */\nimport { existsSync, lstatSync, readdirSync, readFileSync, statSync } from \"node:fs\";\nimport { basename, dirname, join } from \"node:path\";\nimport type { LoadSkillsResult, MikanSkill, SkillDiagnostic } from \"./types.js\";\n\nexport type { LoadSkillsResult, MikanSkill, SkillDiagnostic } from \"./types.js\";\n\nconst MAX_NAME_LENGTH = 64;\nconst MAX_DESCRIPTION_LENGTH = 1024;\n\ninterface Frontmatter {\n  values: Record<string, string>;\n  body: string;\n}\n\n/**\n * Parse simple `key: value` YAML frontmatter delimited by `---` lines.\n * Quoted values are unquoted; nested structures are not supported.\n */\nexport function parseFrontmatter(content: string): Frontmatter {\n  const match = content.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---\\r?\\n?/);\n  if (!match) return { values: {}, body: content };\n\n  const values: Record<string, string> = {};\n  for (const line of (match[1] ?? \"\").split(/\\r?\\n/)) {\n    const separator = line.indexOf(\":\");\n    if (separator === -1) continue;\n    const key = line.slice(0, separator).trim();\n    if (!key) continue;\n    let value = line.slice(separator + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    values[key] = value;\n  }\n  return { values, body: content.slice(match[0].length) };\n}\n\nfunction validateSkill(name: string, description: string): string[] {\n  const errors: string[] = [];\n  if (name.length > MAX_NAME_LENGTH) {\n    errors.push(`name exceeds ${MAX_NAME_LENGTH} characters (${name.length})`);\n  }\n  if (\n    !/^[a-z0-9-]+$/.test(name) ||\n    name.startsWith(\"-\") ||\n    name.endsWith(\"-\") ||\n    name.includes(\"--\")\n  ) {\n    errors.push(\"name must be lowercase a-z, 0-9 and single hyphens, not at the edges\");\n  }\n  if (description.length > MAX_DESCRIPTION_LENGTH) {\n    errors.push(`description exceeds ${MAX_DESCRIPTION_LENGTH} characters (${description.length})`);\n  }\n  return errors;\n}\n\nfunction loadSkillFromFile(\n  filePath: string,\n  source: string,\n): {\n  skill: MikanSkill | null;\n  diagnostics: SkillDiagnostic[];\n} {\n  const diagnostics: SkillDiagnostic[] = [];\n  try {\n    const raw = readFileSync(filePath, \"utf-8\");\n    const { values, body } = parseFrontmatter(raw);\n    const skillDir = dirname(filePath);\n    const name = values.name || basename(skillDir);\n    const description = values.description ?? \"\";\n\n    if (!description.trim()) {\n      diagnostics.push({ type: \"warning\", message: \"description is required\", path: filePath });\n      return { skill: null, diagnostics };\n    }\n    for (const error of validateSkill(name, description)) {\n      diagnostics.push({ type: \"warning\", message: error, path: filePath });\n    }\n\n    return {\n      skill: {\n        name,\n        description,\n        content: body.trim(),\n        filePath,\n        baseDir: skillDir,\n        source,\n        disableModelInvocation: values[\"disable-model-invocation\"] === \"true\",\n      },\n      diagnostics,\n    };\n  } catch (error) {\n    diagnostics.push({\n      type: \"warning\",\n      message: error instanceof Error ? error.message : \"failed to parse skill file\",\n      path: filePath,\n    });\n    return { skill: null, diagnostics };\n  }\n}\n\n/**\n * Load skills from a directory tree.\n * - A directory containing `SKILL.md` is a skill root; no further recursion.\n * - Direct `.md` children of the top-level directory load as skills.\n * - Dot-directories and `node_modules` are skipped.\n */\nexport function loadSkillsFromDir(options: {\n  dir: string;\n  source: string;\n  /**\n   * Refuse to follow symlinks on any path this load would read, skipping the\n   * offending entry with a `code: \"symlink\"` diagnostic instead of loading\n   * it. For untrusted trees (conversation offices) the host must never\n   * follow an agent-created link; entries the loader never reads — dot\n   * directories, vendored node_modules — cannot disqualify anything.\n   */\n  rejectSymlinks?: boolean;\n}): LoadSkillsResult {\n  const rejectSymlinks = options.rejectSymlinks === true;\n  if (rejectSymlinks && isSymlink(options.dir)) {\n    return {\n      skills: [],\n      diagnostics: [\n        {\n          type: \"warning\",\n          code: \"symlink\",\n          message: \"Skills directory is a symlink; skipped\",\n          path: options.dir,\n        },\n      ],\n    };\n  }\n  return loadSkillsFromDirInternal(options.dir, options.source, true, rejectSymlinks);\n}\n\nfunction isSymlink(path: string): boolean {\n  try {\n    return lstatSync(path).isSymbolicLink();\n  } catch {\n    return false;\n  }\n}\n\nfunction symlinkDiagnostic(path: string): SkillDiagnostic {\n  return {\n    type: \"warning\",\n    code: \"symlink\",\n    message: \"Skill entry is a symlink; skipped\",\n    path,\n  };\n}\n\nfunction loadSkillsFromDirInternal(\n  dir: string,\n  source: string,\n  includeRootFiles: boolean,\n  rejectSymlinks: boolean,\n): LoadSkillsResult {\n  const skills: MikanSkill[] = [];\n  const diagnostics: SkillDiagnostic[] = [];\n  if (!existsSync(dir)) return { skills, diagnostics };\n\n  let entries;\n  try {\n    entries = readdirSync(dir, { withFileTypes: true });\n  } catch {\n    return { skills, diagnostics };\n  }\n\n  const skillFile = entries.find((entry) => entry.name === \"SKILL.md\" && isFileLike(dir, entry));\n  if (skillFile) {\n    if (rejectSymlinks && skillFile.isSymbolicLink()) {\n      diagnostics.push(symlinkDiagnostic(join(dir, skillFile.name)));\n      return { skills, diagnostics };\n    }\n    const result = loadSkillFromFile(join(dir, skillFile.name), source);\n    if (result.skill) skills.push(result.skill);\n    diagnostics.push(...result.diagnostics);\n    return { skills, diagnostics };\n  }\n\n  for (const entry of entries) {\n    if (entry.name.startsWith(\".\") || entry.name === \"node_modules\") continue;\n    const fullPath = join(dir, entry.name);\n\n    if (isDirectoryLike(dir, entry)) {\n      if (rejectSymlinks && entry.isSymbolicLink()) {\n        diagnostics.push(symlinkDiagnostic(fullPath));\n        continue;\n      }\n      const subResult = loadSkillsFromDirInternal(fullPath, source, false, rejectSymlinks);\n      skills.push(...subResult.skills);\n      diagnostics.push(...subResult.diagnostics);\n      continue;\n    }\n    if (!includeRootFiles || !entry.name.endsWith(\".md\") || !isFileLike(dir, entry)) continue;\n\n    if (rejectSymlinks && entry.isSymbolicLink()) {\n      diagnostics.push(symlinkDiagnostic(fullPath));\n      continue;\n    }\n    const result = loadSkillFromFile(fullPath, source);\n    if (result.skill) skills.push(result.skill);\n    diagnostics.push(...result.diagnostics);\n  }\n  return { skills, diagnostics };\n}\n\nfunction isFileLike(\n  dir: string,\n  entry: { name: string; isFile(): boolean; isSymbolicLink(): boolean },\n): boolean {\n  if (entry.isFile()) return true;\n  if (!entry.isSymbolicLink()) return false;\n  try {\n    return statSync(join(dir, entry.name)).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction isDirectoryLike(\n  dir: string,\n  entry: { name: string; isDirectory(): boolean; isSymbolicLink(): boolean },\n): boolean {\n  if (entry.isDirectory()) return true;\n  if (!entry.isSymbolicLink()) return false;\n  try {\n    return statSync(join(dir, entry.name)).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction escapeXml(str: string): string {\n  return str\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\n/**\n * Format skills for a system prompt using the Agent Skills XML block.\n * Skills with `disableModelInvocation` are excluded.\n */\nexport function formatSkillsForPrompt(skills: MikanSkill[]): string {\n  const visible = skills.filter((skill) => !skill.disableModelInvocation);\n  if (visible.length === 0) return \"\";\n\n  const lines = [\n    \"\\n\\nThe following skills provide specialized instructions for specific tasks.\",\n    \"Use the read tool to load a skill's file when the task matches its description.\",\n    \"When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md / dirname of the path) and use that absolute path in tool commands.\",\n    \"\",\n    \"<available_skills>\",\n  ];\n  for (const skill of visible) {\n    lines.push(\"  <skill>\");\n    lines.push(`    <name>${escapeXml(skill.name)}</name>`);\n    lines.push(`    <description>${escapeXml(skill.description)}</description>`);\n    if (skill.inline) {\n      // Inline skills carry their body: the agent cannot read their file.\n      lines.push(`    <instructions>${escapeXml(skill.content)}</instructions>`);\n    } else {\n      lines.push(`    <location>${escapeXml(skill.filePath)}</location>`);\n    }\n    lines.push(\"  </skill>\");\n  }\n  lines.push(\"</available_skills>\");\n  return lines.join(\"\\n\");\n}\n"]}

package/dist/harness/subagent-profiles.d.ts

@@ -0,0 +1,8 @@
+import type { LoadSubagentProfilesResult } from "./types.js";
+export type { LoadSubagentProfilesResult, SubagentProfileDiagnostic } from "./types.js";
+/**
+ * Load the built-in profiles, then patch them with `<workspaceDir>/agents/*.md`.
+ * Malformed files are reported and skipped, leaving the built-in in place.
+ */
+export declare function loadSubagentProfiles(workspaceDir: string): LoadSubagentProfilesResult;
+//# sourceMappingURL=subagent-profiles.d.ts.map

package/dist/harness/subagent-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-profiles.d.ts","sourceRoot":"","sources":["../../src/harness/subagent-profiles.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,0BAA0B,EAI3B,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AA8QxF;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,0BAA0B,CAiCrF"}

package/dist/harness/subagent-profiles.js

@@ -0,0 +1,299 @@
+/**
+ * Subagent profiles: the curated capability sets a subagent may be launched
+ * with.
+ *
+ * Profiles exist because the two halves of a subagent definition have
+ * different owners. What a profile *does* — its tools, required evidence,
+ * prompt and budget — is portable, so it ships as a built-in below and is
+ * versioned with the code. Which model runs it is per-installation, so it is
+ * overridden by `<workspaceDir>/agents/<name>.md`.
+ *
+ * A workspace file therefore *patches* the built-in of the same name rather
+ * than replacing it: overriding only `model:` must not force an operator to
+ * restate the tools and prompt, because a restated copy silently drifts from
+ * the built-in it was cloned from. A file whose name matches no built-in
+ * defines a new profile and must supply `tools` itself.
+ *
+ * A malformed file is reported as a diagnostic and skipped, never thrown:
+ * these are hand-edited, and one typo must not take the whole workspace down.
+ */
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { basename, join } from "node:path";
+import { parseFrontmatter } from "./skills.js";
+const BUILTIN_PROFILES = [
+    {
+        name: "worker",
+        description: "Completes a bounded general-purpose task without adding domain assumptions",
+        systemPrompt: [
+            "You are a general-purpose worker responsible for one clearly bounded delegated task.",
+            "",
+            "Use `read` and `bash` to inspect the actual workspace state, and use `edit` or `write` only when the assignment requires changes. Follow applicable skill instructions, preserve behavior outside the stated scope, and do not invent requirements or broaden the task. Verify concrete outputs before reporting success; if the assignment lacks information or a required capability, state the limitation instead of guessing.",
+            "",
+            "Keep verbose discovery and command output in this isolated run. Return the completed result, files or artifacts changed, verification performed, and any unresolved blocker.",
+        ].join("\n"),
+        tools: ["read", "bash", "edit", "write"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 30,
+        maxTokens: 100_000,
+    },
+    {
+        name: "software-engineer",
+        description: "Owns software investigation, implementation, integration, and technical verification",
+        systemPrompt: [
+            "You are the software engineer responsible for one delegated technical outcome.",
+            "",
+            "Apply the relevant engineering and vendor skill instructions. Use `bash` to inspect repositories, run development tools, diagnose browser or integration behavior, and make only changes explicitly included in the assignment. Trace failures to their technical cause, preserve existing contracts outside scope, and verify work with the narrowest meaningful checks. Do not treat plausible output as evidence of success.",
+            "",
+            "Keep source discovery, build logs, browser traces, and repetitive diagnostics in this isolated run. Return the implemented or diagnosed outcome, decisive technical evidence, changed artifact paths when applicable, verification results, and remaining engineering risk.",
+        ].join("\n"),
+        tools: ["read", "bash", "edit", "write"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 35,
+        maxTokens: 100_000,
+    },
+    {
+        name: "devops-engineer",
+        description: "Owns cloud access, environments, deployments, and production workflow reliability",
+        systemPrompt: [
+            "You are the DevOps engineer responsible for one delegated infrastructure or production-operations outcome.",
+            "",
+            "Apply the relevant setup, GCP, repository-access, service-status, and production workflow skill instructions. Use `bash` to inspect current state before acting. Respect the named project, environment, principal, and resource scope; protect credentials; prefer least privilege; and check idempotency before writes, retries, or provisioning. Do not broaden access or repeat a non-idempotent operation without explicit authorization and evidence that it is needed.",
+            "",
+            "Keep verbose CLI, API, and job logs in this isolated run. Return the resulting state, affected resources or job identifiers, verification performed, and concrete follow-up or rollback information.",
+        ].join("\n"),
+        tools: ["read", "bash", "edit", "write", "event", "sandbox"],
+        requiredTools: ["read", "bash", "sandbox"],
+        thinkingLevel: "high",
+        maxTurns: 40,
+        maxTokens: 100_000,
+    },
+    {
+        name: "data-scientist",
+        description: "Owns metric definition, data analysis, reconciliation, and defensible conclusions",
+        systemPrompt: [
+            "You are the data scientist responsible for answering one delegated quantitative question.",
+            "",
+            "Apply the relevant Metabase, GAM, accounting, billing, reporting, and parser skill instructions. Use `bash` to run the prescribed queries and analysis tools. Establish the time range, timezone, filters, dimensions, population, and metric definitions before interpreting results. Reconcile totals and cross-check consequential figures when practical. Separate source values, derived calculations, and inference; never fill missing data with guesses.",
+            "",
+            "Keep verbose rows and query output in this isolated run. Return the conclusion, key figures with units and scope, methodology and checks, and limitations that affect confidence.",
+        ].join("\n"),
+        tools: ["read", "bash", "write"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 35,
+        maxTokens: 100_000,
+    },
+    {
+        name: "account-manager",
+        description: "Owns existing-client onboarding, account coordination, and delivery follow-through",
+        systemPrompt: [
+            "You are the account manager responsible for one delegated existing-client outcome.",
+            "",
+            "Apply the relevant onboarding, publisher account, slot, workspace, meeting, and communication skill instructions. Use `bash` to inspect the current customer and account state before acting. Preserve supplied commercial and technical requirements, coordinate dependencies, avoid duplicate account changes, and clearly distinguish completed work from items awaiting another owner. Do not invent customer approval or make an external commitment beyond the assignment.",
+            "",
+            "Keep verbose records and operational output in this isolated run. Return the customer-facing outcome, account or artifact identifiers, decisions and blockers, and the next owner and action where follow-through remains.",
+        ].join("\n"),
+        tools: ["read", "bash", "write", "event"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 30,
+        maxTokens: 100_000,
+    },
+    {
+        name: "business-development",
+        description: "Owns prospect research, qualification, contact discovery, and outreach preparation",
+        systemPrompt: [
+            "You are the business development specialist responsible for one delegated growth opportunity.",
+            "",
+            "Apply the relevant prospecting, website sampling, contact-finding, email-validation, and client-approach skill instructions. Use `bash` to gather and verify public evidence. Evaluate fit against the supplied criteria, distinguish verified contacts from inferred ones, and preserve source URLs. Do not contact prospects, submit forms, or represent that outreach occurred unless the assignment explicitly authorizes it.",
+            "",
+            "Keep raw pages, candidate lists, and repetitive validation output in this isolated run. Return qualified opportunities, supporting evidence, confidence and disqualifiers, and a concise recommended next action.",
+        ].join("\n"),
+        tools: ["read", "bash", "write"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 30,
+        maxTokens: 100_000,
+    },
+    {
+        name: "creative-producer",
+        description: "Owns media deliverables from creative brief through verified production output",
+        systemPrompt: [
+            "You are the creative producer responsible for one delegated media deliverable.",
+            "",
+            "Apply the relevant source acquisition, storyboard, video, image, speech, lipsync, and generation-provider skill instructions. Use `bash` to run the prescribed production tools. Confirm the brief, audience, format, dimensions, duration, language, and source inputs; use discovery commands rather than guessing provider or model identifiers. Preserve provenance and generation parameters, and verify that claimed outputs exist and match the requested technical properties.",
+            "",
+            "Keep generation logs, intermediate assets, and provider polling in this isolated run. Return deliverable paths or external identifiers, a concise production summary, verification results, and unresolved creative, quality, or rights constraints.",
+        ].join("\n"),
+        tools: ["read", "bash", "write"],
+        requiredTools: ["read", "bash", "write"],
+        thinkingLevel: "high",
+        maxTurns: 40,
+        maxTokens: 100_000,
+    },
+    {
+        name: "ad-operations-specialist",
+        description: "Owns ad serving setup, delivery diagnostics, policy checks, and operational health",
+        systemPrompt: [
+            "You are the ad operations specialist responsible for one delegated advertising-delivery outcome.",
+            "",
+            "Apply the relevant GAM, ads.txt, player detection, targeting, behavior, monitoring, and policy skill instructions. Use `bash` to run the prescribed browser and reporting tools. Establish the site, account, slot, time window, geography, device, and consent conditions; distinguish configuration, eligibility, request, impression, and playback evidence. Reproduce dynamic behavior when practical, and do not change live serving configuration unless explicitly authorized.",
+            "",
+            "Keep browser traces, HAR data, report rows, and repetitive diagnostics in this isolated run. Return the operational conclusion, decisive delivery evidence, affected inventory, remediation or escalation owner, and uncertainty that could change the diagnosis.",
+        ].join("\n"),
+        tools: ["read", "bash", "write"],
+        requiredTools: ["read", "bash"],
+        thinkingLevel: "high",
+        maxTurns: 35,
+        maxTokens: 100_000,
+    },
+    {
+        name: "analysis-only",
+        description: "Analyzes supplied task input without claiming external verification",
+        systemPrompt: [
+            "You analyze only the task text and structured dependency input supplied to this run.",
+            "",
+            "Do not claim to have inspected files, executed commands, accessed URLs, or verified external state. Clearly distinguish dependency-provided facts from your own analysis. If the supplied evidence is insufficient, state the limitation instead of inventing details.",
+        ].join("\n"),
+        tools: [],
+        requiredTools: [],
+        thinkingLevel: "high",
+        maxTurns: 20,
+        maxTokens: 100_000,
+    },
+];
+const THINKING_LEVELS = new Set([
+    "off",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+]);
+/** Parse a comma-separated tool list. The literal `none` is an empty grant. */
+function csv(value) {
+    if (value.trim() === "none")
+        return [];
+    return [
+        ...new Set(value
+            .split(",")
+            .map((item) => item.trim())
+            .filter(Boolean)),
+    ];
+}
+function parseModel(value) {
+    const separator = value.indexOf("/");
+    if (separator <= 0 || separator === value.length - 1) {
+        throw new Error(`model must be provider/id, got ${value}`);
+    }
+    return { provider: value.slice(0, separator), id: value.slice(separator + 1) };
+}
+function parseThinking(value) {
+    if (!THINKING_LEVELS.has(value)) {
+        throw new Error(`unknown thinking level: ${value}`);
+    }
+    return value;
+}
+function parsePositiveInteger(value, field) {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new Error(`${field} must be a positive integer`);
+    }
+    return parsed;
+}
+function parseNonNegativeNumber(value, field) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed < 0) {
+        throw new Error(`${field} must be a non-negative number`);
+    }
+    return parsed;
+}
+/** Apply `field` from frontmatter onto `patch` only when the file sets it. */
+function applyField(patch, values, key, field, parse) {
+    const raw = values[key];
+    if (raw === undefined)
+        return;
+    patch[field] = parse(raw);
+}
+/**
+ * Build the overlay a single file contributes. Throws with a human-readable
+ * message on malformed input; the caller turns that into a diagnostic.
+ */
+function parseProfilePatch(filePath, base) {
+    const { values, body } = parseFrontmatter(readFileSync(filePath, "utf-8"));
+    const name = basename(filePath, ".md");
+    const patch = {};
+    applyField(patch, values, "description", "description", (value) => value.trim());
+    applyField(patch, values, "tools", "tools", csv);
+    applyField(patch, values, "required_tools", "requiredTools", csv);
+    applyField(patch, values, "model", "model", parseModel);
+    applyField(patch, values, "thinking", "thinkingLevel", parseThinking);
+    applyField(patch, values, "max_turns", "maxTurns", (v) => parsePositiveInteger(v, "max_turns"));
+    applyField(patch, values, "max_tokens", "maxTokens", (v) => parsePositiveInteger(v, "max_tokens"));
+    applyField(patch, values, "max_cost_usd", "maxCostUsd", (v) => parseNonNegativeNumber(v, "max_cost_usd"));
+    applyField(patch, values, "max_duration_ms", "maxDurationMs", (v) => parsePositiveInteger(v, "max_duration_ms"));
+    const systemPrompt = body.trim() || base?.systemPrompt;
+    if (!base && patch.tools === undefined) {
+        throw new Error(`tools is required for a new profile (no built-in named ${name})`);
+    }
+    if (!systemPrompt) {
+        throw new Error(`a new profile needs prompt text in the file body`);
+    }
+    const merged = {
+        ...base,
+        ...patch,
+        name,
+        description: patch.description || base?.description || name,
+        systemPrompt,
+        tools: patch.tools ?? base?.tools ?? [],
+        requiredTools: patch.requiredTools ?? base?.requiredTools ?? [],
+    };
+    const ungranted = merged.requiredTools.filter((tool) => !merged.tools.includes(tool));
+    if (ungranted.length > 0) {
+        throw new Error(`required_tools must be included in tools: ${ungranted.join(", ")}`);
+    }
+    return merged;
+}
+/**
+ * Load the built-in profiles, then patch them with `<workspaceDir>/agents/*.md`.
+ * Malformed files are reported and skipped, leaving the built-in in place.
+ */
+export function loadSubagentProfiles(workspaceDir) {
+    const dir = join(workspaceDir, "agents");
+    const profiles = new Map(BUILTIN_PROFILES.map((profile) => [profile.name, profile]));
+    const diagnostics = [];
+    if (!existsSync(dir))
+        return { profiles, diagnostics };
+    let entries;
+    try {
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch (error) {
+        diagnostics.push({
+            type: "warning",
+            message: error instanceof Error ? error.message : String(error),
+            path: dir,
+        });
+        return { profiles, diagnostics };
+    }
+    for (const entry of entries) {
+        if (!entry.isFile() || !entry.name.endsWith(".md"))
+            continue;
+        const filePath = join(dir, entry.name);
+        try {
+            const profile = parseProfilePatch(filePath, profiles.get(basename(entry.name, ".md")));
+            profiles.set(profile.name, profile);
+        }
+        catch (error) {
+            diagnostics.push({
+                type: "warning",
+                message: error instanceof Error ? error.message : String(error),
+                path: filePath,
+            });
+        }
+    }
+    return { profiles, diagnostics };
+}
+//# sourceMappingURL=subagent-profiles.js.map