@hasna/skills 0.10.81 → 0.10.83

package/dist/sdk/index.js

@@ -32371,7 +32371,7 @@ var init_event_sink = __esm(() => {
   init_dist();
 });
 // package.json
-var version = "0.10.81";
+var version = "0.10.83";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -41268,7 +41268,7 @@ function hashClaudePluginCacheOrphanMarker(path, budget2, changes) {
   if (!before)
     return null;
   const uid = process.getuid?.();
-  if (!before.isFile() || uid === undefined || before.uid !== uid || before.size > 32)
+  if (!before.isFile() || uid === undefined || before.uid !== uid || before.size > 32 || (before.mode & 73) !== 0)
     throw new Error("Invalid Claude orphan marker file or owner");
   const fd = openSync13(path, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
   try {
@@ -41630,7 +41630,7 @@ function safe2(path) {
 function same2(before, after) {
   return Boolean(after && after.isDirectory() && before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs);
 }
-function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
+function capture(path, budget2, excludedRoots, omittedRoots = [], rows, claudeMarkers) {
   safe2(path);
   if (omittedRoots.some((root2) => path === root2 || path.startsWith(root2 + "/")))
     return { path, sha256: null };
@@ -41658,6 +41658,11 @@ function capture(path, budget2, excludedRoots, omittedRoots = [], rows) {
       need4(child2.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
       const stat = lstatSync13(child2);
       need4(stat.isFile() || stat.isDirectory(), "Refusing symlink or special native discovery directory member");
+      if (claudeMarkers && isClaudePluginCacheOrphanMarker(child2)) {
+        need4(hashClaudePluginCacheOrphanMarker(child2) !== null, "Claude orphan marker changed while reading directory");
+        if (claudeMarkers === "omit")
+          continue;
+      }
       const row = JSON.stringify([childRelative, stat.isDirectory() ? "directory" : "file"]) + `
 `;
       budget2.bytes += Buffer.byteLength(row);
@@ -41714,20 +41719,27 @@ function verifyDiscoveryDirectoryProjection(directories, omittedRoots, tolerance
       witnessChanged(new NativeDiscoveryWitnessChange("membership", directories[i].path, "Native discovery directory membership changed outside retired Codex roots"), tolerance, tolerance?.acceptsMembership(directories[i].path) === true);
     }
 }
-function captureDiscoveryDirectories(paths, excludedRoots = []) {
+function captureOrdinaryDirectories(paths, excludedRoots, claudeMarkers) {
   need4(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
   const budget2 = { entries: 0, bytes: 0 };
   for (const root of excludedRoots)
     safe2(root);
-  return paths.map((path) => capture(path, budget2, excludedRoots));
+  return paths.map((path) => capture(path, budget2, excludedRoots, [], undefined, claudeMarkers));
+}
+function captureDiscoveryDirectories(paths, excludedRoots = []) {
+  return captureOrdinaryDirectories(paths, excludedRoots, "omit");
 }
 function verifyDiscoveryDirectories(directories, excludedRoots = [], tolerance) {
   need4(Array.isArray(directories) && directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid native discovery directory collection");
   for (const directory of directories)
     need4(directory && typeof directory === "object" && (directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256)), "Invalid native discovery directory digest");
   const current = captureDiscoveryDirectories(directories.map((directory) => directory.path), excludedRoots);
+  let legacy;
   for (let i = 0;i < directories.length; i++)
     if (current[i].sha256 !== directories[i].sha256) {
+      legacy ??= captureOrdinaryDirectories(directories.map((directory) => directory.path), excludedRoots, "retain");
+      if (legacy[i].sha256 === directories[i].sha256)
+        continue;
       witnessChanged(new NativeDiscoveryWitnessChange("membership", directories[i].path, `Native discovery directory membership changed; run skills hook install with a fresh discovery review: ${directories[i].path}`), tolerance, tolerance?.acceptsMembership(directories[i].path) === true);
     }
 }
@@ -46227,6 +46239,7 @@ var OPTIONAL_CONTEXT_FAILURES = new Set([
   "CACHED_PROFILE_EXPIRED",
   "CACHED_PROFILE_MISSING",
   "CACHED_BUNDLE_MISSING",
+  "PROFILE_LOCK_MISMATCH",
   "SESSION_RECONCILIATION_REQUIRED",
   "SESSION_RENEWAL_TIMEOUT",
   "SESSION_WRITE_BUSY",
@@ -99515,7 +99528,7 @@ function checkedPublicationView(value, skillId, intentId, declaration) {
     return invalid7();
   return Object.freeze({ ...value });
 }
-async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal, create = false) {
+async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal, create = false, readBinding) {
   const controller = new AbortController;
   let reader;
   let response;
@@ -99531,8 +99544,18 @@ async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal,
         redirect: "error",
         credentials: "omit",
         signal: controller.signal,
-        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` }
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${token}`,
+          ...readBinding ? {
+            "x-skills-user-id": readBinding.userId,
+            "x-skills-workspace-id": readBinding.organizationId,
+            "x-skills-membership-id": readBinding.membershipId
+          } : {}
+        }
       });
+      if (readBinding && response.ok && response.status !== 200)
+        return invalid7();
       const length = response.headers.get("content-length");
       if (length !== null && (!/^\d+$/.test(length) || Number(length) > 65536))
         return invalid7();
@@ -99600,6 +99623,88 @@ async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal,
       response?.body?.cancel().catch(() => {});
   }
 }
+var historyInput = () => {
+  throw new PrivatePublicationError("INVALID_PRIVATE_HISTORY_INPUT", "Provide a private skill UUID, limit from 1 to 50, and an optional UUID cursor; timeoutMs must be from 1 to 15000.");
+};
+var historyResponse = () => {
+  throw new PrivatePublicationError("INVALID_PRIVATE_HISTORY_RESPONSE", "The server returned invalid private version history.");
+};
+var historyText = (value) => typeof value === "string" && value.length > 0 && value.length <= 128 && !/[\p{Cc}\p{Cs}\u2028\u2029]/u.test(value);
+function historyDate(value) {
+  if (typeof value !== "string")
+    return false;
+  const parts = /^(\d{4})-(\d{2})-(\d{2})(T| )(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(Z|[+-](\d{2})(?::(\d{2}))?)$/.exec(value);
+  if (!parts)
+    return false;
+  const [, y2, m2, d4, separator, h4, minute, second, fraction, zone, offsetHour, offsetMinute] = parts;
+  if (separator === " " ? zone === "Z" || (fraction?.length ?? 0) > 6 : zone !== "Z" && offsetMinute === undefined)
+    return false;
+  const year = Number(y2), month = Number(m2), day = Number(d4);
+  const leap = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const days = [31, leap ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  return year > 0 && month >= 1 && month <= 12 && day >= 1 && day <= days[month - 1] && Number(h4) <= 23 && Number(minute) <= 59 && Number(second) <= 59 && (zone === "Z" || Number(offsetHour) <= 23 && Number(offsetMinute ?? 0) <= 59);
+}
+function privateHistory(value, organizationId, skillId, limit, cursor2) {
+  if (!record12(value) || value.organizationId !== organizationId || value.skillId !== skillId || typeof value.slug !== "string" || !/^[a-z0-9-]+$/.test(value.slug) || !(value.currentVersion === null || historyText(value.currentVersion)) || !(value.currentVersionId === null || publicationUuid(value.currentVersionId)) || value.currentVersion === null !== (value.currentVersionId === null) || !(value.nextCursor === null || publicationUuid(value.nextCursor)) || !Array.isArray(value.versions) || value.versions.length > limit)
+    return historyResponse();
+  const seen = new Set;
+  let previous = cursor2;
+  const versions2 = value.versions.map((row) => {
+    if (!record12(row) || !publicationUuid(row.id) || seen.has(row.id) || previous !== undefined && row.id >= previous || !historyText(row.version) || !(row.releasedAt === null || historyDate(row.releasedAt)) || !historyDate(row.createdAt) || row.id === value.currentVersionId !== (row.version === value.currentVersion))
+      return historyResponse();
+    seen.add(row.id);
+    previous = row.id;
+    return Object.freeze({ id: row.id, version: row.version, releasedAt: row.releasedAt, createdAt: row.createdAt });
+  });
+  if (value.nextCursor !== null && (!versions2.length || value.nextCursor !== versions2.at(-1).id))
+    return historyResponse();
+  return Object.freeze({
+    organizationId,
+    skillId,
+    slug: value.slug,
+    currentVersion: value.currentVersion,
+    currentVersionId: value.currentVersionId,
+    versions: Object.freeze(versions2),
+    nextCursor: value.nextCursor
+  });
+}
+
+class RemotePrivateSkillHistoryClient {
+  apiOrigin;
+  organizationId;
+  userId;
+  membershipId;
+  #token;
+  constructor(apiUrl, session) {
+    const checked = parseWorkspaceSession(session, { userId: session?.user?.id, membershipId: session?.user?.membershipId });
+    this.apiOrigin = normalizeSkillsApiOrigin(apiUrl);
+    this.#token = checked.token;
+    this.organizationId = checked.organization.id;
+    this.userId = checked.user.id;
+    this.membershipId = checked.user.membershipId;
+    Object.freeze(this);
+  }
+  async listVersions(skillId, options = {}) {
+    if (!publicationUuid(skillId) || options.limit !== undefined && (!Number.isSafeInteger(options.limit) || options.limit < 1 || options.limit > 50) || options.cursor !== undefined && !publicationUuid(options.cursor) || options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1 || options.timeoutMs > 15000))
+      return historyInput();
+    const limit = options.limit ?? 20, cursor2 = options.cursor;
+    const query = new URLSearchParams;
+    if (options.limit !== undefined)
+      query.set("limit", String(limit));
+    if (cursor2 !== undefined)
+      query.set("cursor", cursor2);
+    const path2 = `/api/v1/skills/${skillId}/versions${query.size ? `?${query}` : ""}`;
+    let value;
+    try {
+      value = await boundedJson(skillsApiRequestUrl(this.apiOrigin, path2), { method: "GET" }, this.#token, false, options.timeoutMs, options.signal, false, this);
+    } catch (error61) {
+      if (error61 instanceof PrivatePublicationError && error61.code === "INVALID_PUBLICATION_RESPONSE")
+        return historyResponse();
+      throw new PrivatePublicationError("PRIVATE_HISTORY_UNAVAILABLE", "Unable to read private version history. Check the selected server, current membership and fresh sign-in; no skill or credential was changed.", false, error61 instanceof PrivatePublicationError ? error61.status : undefined);
+    }
+    return privateHistory(value, this.organizationId, skillId, limit, cursor2);
+  }
+}
 
 class RemotePrivatePublicationsClient {
   apiOrigin;
@@ -99852,6 +99957,10 @@ class RemoteSkillsAuthClient {
     const origin = this.apiOrigin, captured = workspaceContext(context);
     return new RemotePrivatePublicationsClient(origin, await this.switchWorkspace(email4, code, captured));
   }
+  async openPrivateSkillHistory(email4, code, context) {
+    const origin = this.apiOrigin, captured = workspaceContext(context);
+    return new RemotePrivateSkillHistoryClient(origin, await this.switchWorkspace(email4, code, captured));
+  }
   requestInvitationEmailChallenge(input2) {
     return requestInvitationEmail(this.apiOrigin, "challenge", input2);
   }
@@ -100562,6 +100671,7 @@ export {
   RemoteRecurringReadError,
   RemoteRecurringError,
   RemoteQuoteUnavailableError,
+  RemotePrivateSkillHistoryClient,
   RemotePrivatePublicationsClient,
   RemoteInvitationEmailUnconfirmedError,
   RemoteInvitationEmailError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.81",
+  "version": "0.10.83",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {