@hasna/skills 0.1.62 → 0.1.63

package/agent-skills/skill-publish/scripts/publish_with_git_head.sh

@@ -1,143 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-for required_command in git node npm tar; do
-  if ! command -v "$required_command" >/dev/null 2>&1; then
-    printf 'publish_with_git_head: %s is required\n' "$required_command" >&2
-    exit 127
-  fi
-done
-
-package_dir=$(pwd -P)
-if [ ! -f "$package_dir/package.json" ]; then
-  printf 'publish_with_git_head: no package.json in %s\n' "$package_dir" >&2
-  exit 2
-fi
-
-repo_root=$(git -C "$package_dir" rev-parse --show-toplevel)
-head_sha=$(git -C "$repo_root" rev-parse HEAD)
-source_tree=$(git -C "$repo_root" rev-parse "$head_sha^{tree}")
-package_prefix=$(git -C "$package_dir" rev-parse --show-prefix)
-package_relative=${package_prefix%/}
-source_status=$(git -C "$repo_root" status --porcelain --untracked-files=no)
-
-if [ -n "$source_status" ]; then
-  printf 'publish_with_git_head: tracked source changes must be committed before publish\n' >&2
-  exit 2
-fi
-
-temp_root=$(mktemp -d "${TMPDIR:-/tmp}/hasna-publish-githead.XXXXXX")
-clone_root="$temp_root/repo"
-pack_dir="$temp_root/pack"
-unpack_dir="$temp_root/unpack"
-pack_json="$temp_root/pack.json"
-
-cleanup() {
-  local temp_name
-  temp_name=$(basename "$temp_root")
-  case "$temp_name" in
-    hasna-publish-githead.*)
-      rm -rf -- "$temp_root"
-      ;;
-    *)
-      printf 'publish_with_git_head: refusing to remove unexpected temp path %s\n' \
-        "$temp_root" >&2
-      return 1
-      ;;
-  esac
-}
-
-handle_exit() {
-  local command_rc=$?
-  trap - EXIT INT TERM
-  if ! cleanup; then
-    exit 70
-  fi
-  exit "$command_rc"
-}
-
-trap handle_exit EXIT
-trap 'exit 130' INT
-trap 'exit 143' TERM
-
-mkdir -p "$pack_dir" "$unpack_dir"
-(
-  cd "$package_dir"
-  npm pack --ignore-scripts --json --pack-destination "$pack_dir"
-) > "$pack_json"
-
-tarball_name=$(
-  node -e '
-    const fs = require("node:fs");
-    const result = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
-    if (!Array.isArray(result) || result.length !== 1 || !result[0]?.filename) {
-      process.exit(2);
-    }
-    process.stdout.write(result[0].filename);
-  ' "$pack_json"
-)
-tarball="$pack_dir/$tarball_name"
-if [ ! -f "$tarball" ]; then
-  printf 'publish_with_git_head: npm pack did not create %s\n' "$tarball" >&2
-  exit 2
-fi
-
-git clone --quiet --no-hardlinks --no-checkout "$repo_root" "$clone_root"
-git -C "$clone_root" checkout --quiet --detach "$head_sha"
-
-clone_head=$(git -C "$clone_root" rev-parse HEAD)
-clone_tree=$(git -C "$clone_root" rev-parse "HEAD^{tree}")
-clone_status=$(git -C "$clone_root" status --porcelain)
-if [ "$clone_head" != "$head_sha" ] || [ "$clone_tree" != "$source_tree" ]; then
-  printf 'publish_with_git_head: disposable clone does not match source HEAD/tree\n' >&2
-  exit 2
-fi
-if [ -n "$clone_status" ]; then
-  printf 'publish_with_git_head: disposable clone is not clean before staging package files\n' >&2
-  exit 2
-fi
-
-if [ -n "$package_relative" ]; then
-  clone_package_dir="$clone_root/$package_relative"
-else
-  clone_package_dir="$clone_root"
-fi
-if [ ! -d "$clone_package_dir" ]; then
-  printf 'publish_with_git_head: package subdirectory missing in clone: %s\n' \
-    "$package_relative" >&2
-  exit 2
-fi
-
-tar -xzf "$tarball" -C "$unpack_dir"
-cp -a "$unpack_dir/package/." "$clone_package_dir/"
-
-if [ -d "$repo_root/node_modules" ] && [ ! -e "$clone_root/node_modules" ]; then
-  ln -s "$repo_root/node_modules" "$clone_root/node_modules"
-fi
-if [ "$package_dir" != "$repo_root" ] &&
-  [ -d "$package_dir/node_modules" ] &&
-  [ ! -e "$clone_package_dir/node_modules" ]; then
-  ln -s "$package_dir/node_modules" "$clone_package_dir/node_modules"
-fi
-
-node -e '
-  const fs = require("node:fs");
-  const source = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
-  const staged = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
-  if (source.name !== staged.name || source.version !== staged.version) {
-    process.exit(2);
-  }
-' "$package_dir/package.json" "$clone_package_dir/package.json"
-
-if [ "$(git -C "$repo_root" rev-parse HEAD)" != "$head_sha" ] ||
-  [ "$(git -C "$repo_root" rev-parse "HEAD^{tree}")" != "$source_tree" ]; then
-  printf 'publish_with_git_head: source HEAD/tree changed while preparing publish\n' >&2
-  exit 2
-fi
-
-printf 'publish_with_git_head: publishing %s from disposable clone at HEAD %s\n' \
-  "${package_relative:-.}" "$head_sha" >&2
-(
-  cd "$clone_package_dir"
-  npm publish "$@"
-)

package/agent-skills/skill-publish/scripts/test_publish_with_git_head.sh

@@ -1,231 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-script_dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
-helper="$script_dir/publish_with_git_head.sh"
-temp_root=$(mktemp -d)
-source_repo="$temp_root/source"
-source_package="$source_repo/packages/npm-githead-regression"
-linked_worktree="$temp_root/linked-worktree"
-linked_package="$linked_worktree/packages/npm-githead-regression"
-
-cleanup() {
-  rm -rf "$temp_root"
-}
-trap cleanup EXIT INT TERM
-
-if [ ! -f "$helper" ]; then
-  printf 'MISSING_HELPER: %s\n' "$helper"
-  exit 1
-fi
-
-mkdir -p "$source_package"
-git init -q -b main "$source_repo"
-(
-  cd "$source_package"
-  npm init -y > "$temp_root/npm-init.out" 2> "$temp_root/npm-init.err"
-  npm pkg set \
-    name=npm-githead-regression \
-    version=1.0.0 \
-    description="Local npm gitHead regression" \
-    license=MIT \
-    repository.type=git \
-    repository.url=git+https://example.invalid/npm-githead-regression.git \
-    scripts.prepublishOnly="node prepublish-probe.cjs" \
-    > "$temp_root/npm-pkg-set.out" \
-    2> "$temp_root/npm-pkg-set.err"
-)
-node -e '
-  require("node:fs").writeFileSync(
-    process.argv[1],
-    [
-      "const fs = require(\"node:fs\");",
-      "const marker = process.env.PROBE_KILL_MARKER;",
-      "if (marker) {",
-      "  fs.writeFileSync(marker, \"ready\\n\");",
-      "  setInterval(() => {}, 1000);",
-      "}",
-      "",
-    ].join("\n"),
-  );
-' "$source_package/prepublish-probe.cjs"
-git -C "$source_repo" config user.name "Provenance Regression"
-git -C "$source_repo" config user.email "provenance-regression@example.invalid"
-git -C "$source_repo" add packages/npm-githead-regression/package.json \
-  packages/npm-githead-regression/prepublish-probe.cjs
-git -C "$source_repo" commit --no-verify -q -m "test: seed provenance package"
-git -C "$source_repo" worktree add -q -b publish-regression "$linked_worktree" HEAD
-
-expected_head=$(git -C "$linked_worktree" rev-parse HEAD)
-cp "$linked_worktree/.git" "$temp_root/original-gitfile"
-
-start_registry() {
-  local label=$1
-  local status=$2
-  capture_prefix="$temp_root/$label"
-  port_file="$capture_prefix.port"
-
-  CAPTURE_PUT_STATUS="$status" \
-    node "$script_dir/capture_registry.js" "$capture_prefix" "$port_file" \
-      > "$capture_prefix.server.out" \
-      2> "$capture_prefix.server.err" &
-  registry_pid=$!
-
-  for _ in $(seq 1 100); do
-    if [ -s "$port_file" ]; then
-      break
-    fi
-    sleep 0.05
-  done
-  if [ ! -s "$port_file" ]; then
-    printf 'REGISTRY_START: FAILED\n'
-    return 1
-  fi
-  registry_port=$(<"$port_file")
-}
-
-read_git_head() {
-  node -e '
-    const body = JSON.parse(require("node:fs").readFileSync(process.argv[1], "utf8"));
-    const version = Object.values(body.versions)[0];
-    process.stdout.write(version.gitHead ?? "");
-  ' "$1"
-}
-
-assert_source_unchanged() {
-  test -f "$linked_worktree/.git"
-  cmp -s "$linked_worktree/.git" "$temp_root/original-gitfile"
-  test -z "$(git -C "$linked_worktree" status --porcelain)"
-}
-
-assert_no_helper_temp() {
-  local temp_parent=$1
-  if compgen -G "$temp_parent/hasna-publish-githead.*" >/dev/null; then
-    printf 'HELPER_TEMP_REMAINS: %s\n' "$temp_parent"
-    return 1
-  fi
-}
-
-publish_args=(
-  --access public
-  --json
-  --fetch-retries=0
-  --fetch-retry-mintimeout=1
-  --fetch-retry-maxtimeout=1
-)
-
-start_registry plain 201
-(
-  cd "$linked_package"
-  npm publish \
-    --registry "http://127.0.0.1:$registry_port" \
-    "${publish_args[@]}" \
-    "--//127.0.0.1:$registry_port/:_authToken=fake-probe-token"
-) > "$capture_prefix.publish.out" 2> "$capture_prefix.publish.err"
-wait "$registry_pid" 2>/dev/null || true
-plain_head=$(read_git_head "$capture_prefix.put.json")
-if [ -n "$plain_head" ]; then
-  printf 'PLAIN_GITHEAD: %s\n' "$plain_head"
-else
-  printf 'PLAIN_GITHEAD: ABSENT\n'
-fi
-
-success_tmp="$temp_root/success-tmp"
-mkdir "$success_tmp"
-start_registry helper-success 201
-(
-  cd "$linked_package"
-  TMPDIR="$success_tmp" bash "$helper" \
-    --registry "http://127.0.0.1:$registry_port" \
-    "${publish_args[@]}" \
-    "--//127.0.0.1:$registry_port/:_authToken=fake-probe-token"
-) > "$capture_prefix.publish.out" 2> "$capture_prefix.publish.err"
-wait "$registry_pid" 2>/dev/null || true
-helper_head=$(read_git_head "$capture_prefix.put.json")
-printf 'EXPECTED_HEAD: %s\n' "$expected_head"
-printf 'HELPER_GITHEAD: %s\n' "${helper_head:-ABSENT}"
-test "$helper_head" = "$expected_head"
-assert_source_unchanged
-assert_no_helper_temp "$success_tmp"
-printf 'SUCCESS_SOURCE: unchanged\n'
-
-dirty_tmp="$temp_root/dirty-tmp"
-mkdir "$dirty_tmp"
-(
-  cd "$linked_package"
-  npm pkg set description="dirty source must be refused"
-)
-set +e
-(
-  cd "$linked_package"
-  TMPDIR="$dirty_tmp" bash "$helper" --dry-run
-) > "$temp_root/dirty-source.out" 2> "$temp_root/dirty-source.err"
-dirty_rc=$?
-set -e
-test "$dirty_rc" -ne 0
-grep -q 'tracked source changes must be committed' "$temp_root/dirty-source.err"
-assert_no_helper_temp "$dirty_tmp"
-git -C "$linked_worktree" restore packages/npm-githead-regression/package.json
-assert_source_unchanged
-printf 'DIRTY_SOURCE: refused (helper rc=%s)\n' "$dirty_rc"
-
-failure_tmp="$temp_root/failure-tmp"
-mkdir "$failure_tmp"
-start_registry helper-failure 500
-set +e
-(
-  cd "$linked_package"
-  TMPDIR="$failure_tmp" bash "$helper" \
-    --registry "http://127.0.0.1:$registry_port" \
-    "${publish_args[@]}" \
-    "--//127.0.0.1:$registry_port/:_authToken=fake-probe-token"
-) > "$capture_prefix.publish.out" 2> "$capture_prefix.publish.err"
-failure_rc=$?
-set -e
-wait "$registry_pid" 2>/dev/null || true
-test "$failure_rc" -ne 0
-assert_source_unchanged
-assert_no_helper_temp "$failure_tmp"
-printf 'FAILURE_SOURCE: unchanged (publish rc=%s)\n' "$failure_rc"
-
-kill_tmp="$temp_root/kill-tmp"
-mkdir "$kill_tmp"
-kill_marker="$temp_root/kill-ready"
-start_registry helper-kill 201
-(
-  cd "$linked_package"
-  exec setsid env TMPDIR="$kill_tmp" PROBE_KILL_MARKER="$kill_marker" \
-    bash "$helper" \
-      --registry "http://127.0.0.1:$registry_port" \
-      "${publish_args[@]}" \
-      "--//127.0.0.1:$registry_port/:_authToken=fake-probe-token"
-) > "$capture_prefix.publish.out" 2> "$capture_prefix.publish.err" &
-helper_pid=$!
-
-for _ in $(seq 1 400); do
-  if [ -s "$kill_marker" ]; then
-    break
-  fi
-  sleep 0.05
-done
-if [ ! -s "$kill_marker" ]; then
-  printf 'FORCED_TERMINATION_MARKER: ABSENT\n'
-  kill -KILL -- "-$helper_pid" 2>/dev/null || true
-  kill "$registry_pid" 2>/dev/null || true
-  wait "$helper_pid" 2>/dev/null || true
-  wait "$registry_pid" 2>/dev/null || true
-  exit 1
-fi
-
-kill -KILL -- "-$helper_pid" 2>/dev/null || true
-set +e
-wait "$helper_pid" 2>/dev/null
-kill_rc=$?
-set -e
-kill "$registry_pid" 2>/dev/null || true
-wait "$registry_pid" 2>/dev/null || true
-test "$kill_rc" -ne 0
-assert_source_unchanged
-compgen -G "$kill_tmp/hasna-publish-githead.*" >/dev/null
-printf 'FORCED_TERMINATION_SOURCE: unchanged (process rc=%s; disposable clone orphaned)\n' \
-  "$kill_rc"

package/skills/_common/auth.ts

@@ -1,45 +0,0 @@
-/**
- * Skill Authentication Check
- * Add this to the top of any skill's main function
- */
-
-export function checkSkillAuth(): void {
-  const skillsApiKey = process.env.SKILLS_API_KEY || process.env.SKILL_API_KEY;
-  
-  if (!skillsApiKey) {
-    console.error('Error: SKILLS_API_KEY environment variable not set');
-    console.error('');
-    console.error('To use hosted execution, set your SKILLS_API_KEY:');
-    console.error('');
-    console.error('  export SKILLS_API_KEY=your-api-key-here');
-    console.error('');
-    console.error('You can also use the root `skills auth login` command.');
-    process.exit(1);
-  }
-
-  if (!skillsApiKey.startsWith('sk-skill-')) {
-    console.error('Error: Invalid SKILLS_API_KEY format');
-    console.error('Expected format: sk-skill-xxxxxxxxxxxx');
-    process.exit(1);
-  }
-}
-
-/**
- * Check if running remotely (via SSH or network)
- */
-export function isRemoteExecution(): boolean {
-  return !!(
-    process.env.SSH_CONNECTION ||
-    process.env.SSH_CLIENT ||
-    process.env.SSH_TTY
-  );
-}
-
-/**
- * Require auth only if remote execution
- */
-export function requireAuthIfRemote(): void {
-  if (isRemoteExecution()) {
-    checkSkillAuth();
-  }
-}

package/skills/_common/http-client.ts

@@ -1,143 +0,0 @@
-/**
- * Skill HTTP Client
- *
- * Generic HTTP client for calling the remote skill API server
- * Usage: import and call executeSkill() from your skill CLI
- */
-
-// No default endpoint. An unconfigured install has no instance to talk to, and
-// guessing one would send this skill's payload and API key to a host the
-// operator never chose.
-const SKILL_API_URL = process.env.SKILLS_API_URL || process.env.SKILL_API_URL || "";
-
-const MISSING_API_URL_MESSAGE =
-  "Set SKILLS_API_URL to the origin of the Skills instance you run, " +
-  "or run `skills setup --api-url <origin>`";
-
-export interface SkillRequest {
-  skill: string;
-  command?: string;
-  provider?: string;
-  prompt?: string;
-  text?: string;
-  output?: string;
-  [key: string]: unknown;
-}
-
-export interface SkillResponse {
-  success: boolean;
-  output?: string;
-  error?: string;
-  details?: string;
-}
-
-/**
- * Execute a skill on the remote server
- */
-export async function executeSkill(request: SkillRequest): Promise<SkillResponse | Blob> {
-  const { skill, ...params } = request;
-
-  if (!SKILL_API_URL) {
-    return {
-      success: false,
-      error: "Missing SKILLS_API_URL",
-      details: MISSING_API_URL_MESSAGE,
-    };
-  }
-
-  const url = `${SKILL_API_URL}/${skill}/`;
-
-  // Get API key from environment
-  const apiKey = process.env.SKILLS_API_KEY || process.env.SKILL_API_KEY;
-  if (!apiKey) {
-    return {
-      success: false,
-      error: "Missing SKILLS_API_KEY",
-      details: "Set SKILLS_API_KEY environment variable or run `skills auth login`"
-    };
-  }
-
-  try {
-    const response = await fetch(url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "User-Agent": `skill-${skill}-cli/1.0`,
-        "X-API-Key": apiKey
-      },
-      body: JSON.stringify(params)
-    });
-
-    if (!response.ok) {
-      const error = await response.json();
-      return {
-        success: false,
-        error: error.error || `HTTP ${response.status}`,
-        details: error.details || error.message
-      };
-    }
-
-    // Check if response is a file (binary)
-    const contentType = response.headers.get("Content-Type") || "";
-    if (contentType.includes("image/") ||
-        contentType.includes("audio/") ||
-        contentType.includes("video/") ||
-        contentType.includes("application/")) {
-      return await response.blob();
-    }
-
-    // Otherwise JSON
-    return await response.json();
-
-  } catch (error) {
-    return {
-      success: false,
-      error: "Network error",
-      details: error instanceof Error ? error.message : String(error)
-    };
-  }
-}
-
-/**
- * Save a blob to a file
- */
-export async function saveBlob(blob: Blob, outputPath: string): Promise<void> {
-  const buffer = await blob.arrayBuffer();
-  await Bun.write(outputPath, buffer);
-}
-
-/**
- * Helper to execute a skill and save file if needed
- */
-export async function executeAndSave(request: SkillRequest): Promise<boolean> {
-  if (SKILL_API_URL) console.log(`🔗 Connecting to ${SKILL_API_URL}...`);
-
-  const result = await executeSkill(request);
-
-  if (result instanceof Blob) {
-    // File response
-    if (!request.output) {
-      console.error("❌ Error: No output path specified");
-      return false;
-    }
-
-    await saveBlob(result, request.output);
-    console.log(`✅ Saved to: ${request.output}`);
-    return true;
-  }
-
-  // JSON response
-  if (!result.success) {
-    console.error(`❌ Error: ${result.error}`);
-    if (result.details) {
-      console.error(`   ${result.details}`);
-    }
-    return false;
-  }
-
-  if (result.output) {
-    console.log(result.output);
-  }
-
-  return true;
-}

package/skills/_common/index.ts

@@ -1,26 +0,0 @@
-/**
- * Shared SDK for skills
- *
- * Common utilities used across audio, browse, codefix, convert, deploy,
- * extract, image, transcript, video, and write.
- */
-
-export { checkSkillAuth, isRemoteExecution, requireAuthIfRemote } from './auth';
-export {
-  executeSkill,
-  saveBlob,
-  executeAndSave,
-  type SkillRequest,
-  type SkillResponse,
-} from './http-client';
-export {
-  SkillInstaller,
-  runInstaller,
-  type SkillConfig,
-  type AssistantType,
-} from './installer';
-export { handleInstallCommand } from './skill-install';
-
-// Vision client — multi-provider (anthropic/openai/xai/gemini)
-// import { analyzeImage, detectProvider } from './vision.js'
-export * from './vision.js';

package/skills/_common/install.sh

@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-echo "Direct per-skill installers are disabled."
-echo "Render skills into native agent folders instead:"
-echo "  skills render"
-exit 1

package/skills/_common/installer.ts

@@ -1,72 +0,0 @@
-#!/usr/bin/env bun
-
-/**
- * Legacy per-skill installer boundary.
- *
- * Agent-native skill folders are intentionally unmanaged by legacy installers.
- * The root Skills CLI renders skills into those folders instead.
- */
-
-export interface SkillConfig {
-  name: string;
-  description: string;
-  version: string;
-  commands: Array<{
-    name: string;
-    description: string;
-    usage: string;
-    examples: string[];
-  }>;
-  requiredEnvVars?: string[];
-  optionalEnvVars?: string[];
-}
-
-export type AssistantType = "claude" | "codex" | "windsurf" | "cursor";
-
-export class SkillInstaller {
-  private config: SkillConfig;
-
-  constructor(config: SkillConfig, _currentFilePath: string) {
-    this.config = config;
-  }
-
-  async install(assistant: AssistantType): Promise<void> {
-    throw new Error(registrationMessage(this.config.name, assistant));
-  }
-
-  async uninstall(assistant: AssistantType): Promise<void> {
-    throw new Error(
-      `Direct agent skill-folder uninstalls are disabled for ${this.config.name}. ` +
-        "Render skills into native agent folders instead: skills render",
-    );
-  }
-}
-
-export async function runInstaller(
-  config: SkillConfig,
-  currentFilePath: string,
-  args: string[] = process.argv.slice(2),
-): Promise<boolean> {
-  const command = args[0];
-  if (command !== "install" && command !== "uninstall") {
-    return false;
-  }
-
-  const assistant = args.find((arg): arg is AssistantType =>
-    ["claude", "codex", "windsurf", "cursor"].includes(arg),
-  );
-  const installer = new SkillInstaller(config, currentFilePath);
-  if (command === "install") {
-    await installer.install(assistant ?? "claude");
-  } else {
-    await installer.uninstall(assistant ?? "claude");
-  }
-  return true;
-}
-
-function registrationMessage(skillName: string, assistant: AssistantType): string {
-  return (
-    `Direct agent skill-folder installs are disabled for ${skillName}. ` +
-    "Render skills into native agent folders instead: skills render"
-  );
-}