@graphorin/skills 0.5.0 → 0.6.0

package/dist/types/index.d.ts

@@ -10,7 +10,7 @@ import { ResolvedTool, Tool } from "@graphorin/core";
  * sandbox tier resolver treats `'unknown'` like `'untrusted'`
  * (mandatory `worker-threads + no-net + no-fs`); the supply-chain
  * installer treats it as untrusted EXCEPT that the signature
- * requirement is downgraded from mandatory to optional — signature
+ * requirement is downgraded from mandatory to optional - signature
  * is a trust upgrade, not a gate (Phase 08 § Risks & mitigations).
  *
  * @stable
@@ -43,11 +43,11 @@ type SkillTrustLevelValue = SkillsTrustLevel;
 /**
  * Source descriptor for a {@link loadSkills} request.
  *
- * - `'folder'`      — load from a directory on disk.
- * - `'npm-package'` — install via the supply-chain installer + load.
- * - `'git-repo'`    — shallow-clone via the supply-chain installer +
+ * - `'folder'`      - load from a directory on disk.
+ * - `'npm-package'` - install via the supply-chain installer + load.
+ * - `'git-repo'`    - shallow-clone via the supply-chain installer +
  *   load.
- * - `'inline'`      — the caller supplies a parsed skill structure;
+ * - `'inline'`      - the caller supplies a parsed skill structure;
  *   useful for tests and embedded fixtures.
  *
  * @stable
@@ -59,7 +59,7 @@ type SkillSource = {
    * Operator-supplied trust level. When present it overrides the
    * skill's self-declared `graphorin-trust-level`. Without it, a
    * folder's self-declared `trusted` / `trusted-with-scripts` is
-   * capped at `'unknown'` — a downloaded directory cannot promote
+   * capped at `'unknown'` - a downloaded directory cannot promote
    * itself; trust is granted by the integrator, never the artifact.
    */
   readonly trustLevel?: SkillTrustLevel;
@@ -79,7 +79,7 @@ type SkillSource = {
 };
 /**
  * Pre-built tool record accepted by the inline source. The loader
- * does not parse the tool — it forwards the record to the agent
+ * does not parse the tool - it forwards the record to the agent
  * runtime which feeds it through `stampSkillTool(...)` before
  * registering with `@graphorin/tools`.
  *
@@ -104,7 +104,7 @@ interface InlineSkill {
    * these via {@link Skill.tools} so {@link SkillRegistry.tools}
    * returns them deduplicated by `tool.name`.
    *
-   * Folder / npm / git sources do not carry tool implementations —
+   * Folder / npm / git sources do not carry tool implementations -
    * the agent runtime (Phase 12) materialises them from the skill's
    * `tools/` directory. The inline source is the only path through
    * which tests + bundled defaults can ship pre-built tools.
@@ -138,7 +138,7 @@ interface FrontmatterDiagnostic {
 }
 /**
  * Validated skill metadata. Always available on the registry without
- * loading the body — this is the always-present **Tier 1** payload
+ * loading the body - this is the always-present **Tier 1** payload
  * that the system prompt advertises.
  *
  * @stable
@@ -161,7 +161,7 @@ interface SkillMetadata {
   readonly graphorinAnthropicSpec?: string;
   /** Author-declared graphorin runtime / extension version. */
   readonly graphorinVersion?: string;
-  /** Raw frontmatter (read-only) for power users — every loader user can re-derive bespoke fields. */
+  /** Raw frontmatter (read-only) for power users - every loader user can re-derive bespoke fields. */
   readonly raw: Readonly<Record<string, unknown>>;
 }
 /**
@@ -235,12 +235,12 @@ interface SkillResource {
  * Loaded skill record returned by {@link SkillRegistry.getSkill} and
  * {@link loadSkills}. Three-tier semantics:
  *
- * - {@link Skill.metadata} — always available (parsed at load time).
- * - {@link Skill.body}     — lazy; resolved on first call. Cached for
+ * - {@link Skill.metadata} - always available (parsed at load time).
+ * - {@link Skill.body}     - lazy; resolved on first call. Cached for
  *   subsequent calls.
- * - {@link Skill.resources} — lazy listing; resource bytes are only
+ * - {@link Skill.resources} - lazy listing; resource bytes are only
  *   read when {@link SkillResource.read} is invoked.
- * - {@link Skill.tools}    — derived from the `graphorin-tools`
+ * - {@link Skill.tools}    - derived from the `graphorin-tools`
  *   declarations; the actual `Tool[]` is materialised by the agent
  *   runtime through the `@graphorin/tools` registry.
  *
@@ -266,7 +266,7 @@ interface Skill {
   diagnostics(): ReadonlyArray<FrontmatterDiagnostic>;
 }
 /**
- * Activated skill — what the agent runtime sees after the model (or a
+ * Activated skill - what the agent runtime sees after the model (or a
  * slash command) elects a skill. Carries the loaded body + declared
  * tools so the runtime can inject them into the conversation.
  *
@@ -278,7 +278,7 @@ interface ActivatedSkill {
   readonly resources: ReadonlyArray<SkillResource>;
   /**
    * Tools made available to the model while the skill is active.
-   * The agent runtime (Phase 12) is the canonical producer — it
+   * The agent runtime (Phase 12) is the canonical producer - it
    * resolves the skill's `tools/` directory or the inline-supplied
    * `Tool[]` and feeds each entry through `stampSkillTool(...)` so
    * the resulting `ResolvedTool` carries the right trust class +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@graphorin/skills",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Skills surface for the Graphorin framework: loader for the SKILL.md packaging format with three-tier progressive disclosure (metadata / body / resources), frontmatter validator implementing the field-resolution algorithm and conflict policy from ADR-043, registry with auto-activation + slash-command activation, supply-chain hardening (signature verification + `--ignore-scripts` enforcement via @graphorin/security), sandbox-tier propagation for untrusted skills, handoff input-filter declaration recognition, and idempotent migrate-frontmatter library.",
   "license": "MIT",
   "author": "Oleksiy Stepurenko",
@@ -82,9 +82,9 @@
   ],
   "dependencies": {
     "yaml": "^2.8.0",
-    "@graphorin/core": "0.5.0",
-    "@graphorin/tools": "0.5.0",
-    "@graphorin/security": "0.5.0"
+    "@graphorin/core": "0.6.0",
+    "@graphorin/security": "0.6.0",
+    "@graphorin/tools": "0.6.0"
   },
   "publishConfig": {
     "access": "public",