@hasna/skills 0.5.7 → 0.5.9

package/dist/sdk/operations.d.ts

@@ -0,0 +1,68 @@
+/** Provider-neutral guest operation client. Authority and IPC belong to the embedder.
+ * No credentials, endpoint discovery, provider SDK, or automatic retry is provided.
+ */
+export type SkillOperationJson = null | boolean | number | string | readonly SkillOperationJson[] | {
+    readonly [key: string]: SkillOperationJson;
+};
+export declare const SKILL_OPERATION_LIMITS: Readonly<{
+    requestBytes: 65536;
+    resultBytes: 1048576;
+    depth: 32;
+    nodes: 16384;
+    rememberedRequests: 256;
+    rememberedBytes: 1048576;
+}>;
+export type SkillOperationRefusal = "NOT_ALLOWED" | "APPROVAL_REQUIRED" | "BUDGET_EXHAUSTED" | "EXPIRED" | "CANCELLED" | "UNAVAILABLE" | "INVALID_INPUT";
+export interface SkillOperationRequest {
+    readonly contractVersion: 1;
+    readonly requestId: string;
+    readonly operation: string;
+    readonly input: {
+        readonly [key: string]: SkillOperationJson;
+    };
+}
+interface OperationIdentity {
+    readonly contractVersion: 1;
+    readonly requestId: string;
+}
+export type SkillOperationResult = OperationIdentity & ({
+    readonly status: "not-executed" | "pending" | "unknown";
+} | {
+    readonly status: "succeeded";
+    readonly output: SkillOperationJson;
+} | {
+    readonly status: "refused";
+    readonly code: SkillOperationRefusal;
+});
+/** Implementations must authenticate the captured run/attempt separately. A
+ * not-executed response is authoritative proof, never a guess from transport loss. */
+export interface SkillOperationTransport {
+    invoke(request: SkillOperationRequest, options: {
+        signal: AbortSignal;
+    }): Promise<unknown>;
+    get(requestId: string, options: {
+        signal: AbortSignal;
+    }): Promise<unknown>;
+}
+export type SkillOperationClientErrorCode = "INVALID_REQUEST" | "REQUEST_CONFLICT" | "REQUEST_CAPACITY" | "ABORTED" | "UNKNOWN_OUTCOME" | "INVALID_RESPONSE" | "INVALID_CONFIGURATION";
+export declare class SkillOperationClientError extends Error {
+    readonly code: SkillOperationClientErrorCode;
+    readonly outcome: "not-invoked" | "unknown";
+    constructor(code: SkillOperationClientErrorCode, outcome: "not-invoked" | "unknown");
+}
+export interface SkillOperationClient {
+    invoke(request: SkillOperationRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<SkillOperationResult>;
+    get(requestId: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<SkillOperationResult>;
+}
+/** One client belongs to one captured authority scope. Remembered identities
+ * are bounded and never evicted. This is local misuse protection, not durable
+ * deduplication: the server must bind request IDs and payloads atomically.
+ * Each explicit call invokes transport once; uncertainty requires explicit get. */
+export declare function createSkillOperationClient(transport: SkillOperationTransport, options?: {
+    timeoutMs?: number;
+}): SkillOperationClient;
+export {};

package/dist/sdk/runs.d.ts

@@ -211,7 +211,7 @@ export interface RunServiceGovernance {
     events?: RunEventEmitter;
     /** Resource envelope this run requests, checked against the org ceilings. */
     quota?: RunQuota;
-    /** Estimated cost in cents, reserved before dispatch. */
+    /** Estimated integer cents (0..2147483647), reserved before dispatch. */
     estimatedCents?: number;
 }
 /** Current implementation: the store's own atomic transitions, plus the optional admission chain. */

package/dist/sdk/spend.d.ts

@@ -9,8 +9,10 @@
  * actual cost is charged (status "charged") or, when nothing was used, the
  * reservation is released ("released") - the unused half never lingers.
  *
- * All numbers are cents; a ceiling is a finite integer, never an open-ended
- * budget.
+ * Each reservation or charge uses integer cents from 0 through 2147483647,
+ * matching the supported PostgreSQL and SQLite schema. Monthly ceilings and
+ * aggregates may exceed that per-row limit but must remain JavaScript-safe
+ * nonnegative integers. Invalid amounts throw RangeError before store access.
  */
 import type { ApiPrincipal } from "../server/types.js";
 import { type RunQuota, type SpendCeilings } from "./governance.js";
@@ -19,6 +21,7 @@ export interface SpendAdmissionInput {
     principal: ApiPrincipal;
     slug: string;
     quota?: RunQuota;
+    /** Integer cents from 0 through 2147483647; omission estimates zero. */
     estimatedCents?: number;
     now?: Date;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {
@@ -40,7 +40,9 @@
     "docs/skill-standard.md",
     "schemas/",
     "LICENSE",
-    "README.md"
+    "README.md",
+    "!dist/**/*test-utils.d.ts",
+    "!dist/**/*fixtures.d.ts"
   ],
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/dist/cli/cli.test-utils.d.ts

@@ -1,43 +0,0 @@
-export declare const CLI_PATH: string;
-export declare const EXPECTED_ALL_SKILL_COUNT: number;
-export declare const EXPECTED_BASIC_SKILL_COUNT: 8;
-export declare const EXPECTED_POPULATED_CATEGORY_COUNT: number;
-export declare const PACKAGE_VERSION: string;
-/**
- * Retained for the ~36 call sites that already pass it. NEW TESTS DO NOT NEED IT:
- * every test file calls useDefaultTestTimeout(), so a subprocess test written
- * with no timeout argument is already covered — which is the point, because
- * remembering to annotate the next one is exactly what did not happen.
- *
- * Aliased rather than left at its old 15000 so this constant can never sit BELOW
- * the suite default and quietly give the slowest tests in the suite the tightest
- * ceiling in it.
- */
-export declare const SLOW_TEST_TIMEOUT = 30000;
-export declare const CLEAN_CLI_HOME: string;
-/**
- * The one line an opted-in local install is allowed to print on stderr.
- *
- * Local mode is opt-in only and announces itself (owner ruling 2026-09-04,
- * hasna/apps#1720; class-patch order 2026-09-06): with the explicit
- * `HASNA_SKILLS_LOCAL=1` opt-in and no API credential or URL, the CLI says
- * once, per process, that it is running on this machine. The harness below
- * passes the opt-in itself, so the suite's local runs are deliberate ones —
- * and "stderr is empty" remains the wrong assertion for a local command. Use
- * {@link stderrWithoutLocalNotice}, which strips exactly this line and nothing
- * else, so an unexpected warning still fails the test it would have failed
- * before.
- */
-export declare const LOCAL_MODE_NOTICE_MARKER = "skills: local mode";
-/** `stderr` with the single local-mode notice line removed. */
-export declare function stderrWithoutLocalNotice(stderr: string): string;
-export declare function runCli(args: string[], env?: Record<string, string>): Promise<{
-    stdout: string;
-    stderr: string;
-    exitCode: number;
-}>;
-export declare function runCliInCwd(args: string[], cwd: string, env?: Record<string, string>): Promise<{
-    stdout: string;
-    stderr: string;
-    exitCode: number;
-}>;

package/dist/server/store-fixtures.d.ts

@@ -1,31 +0,0 @@
-import { type GovernanceStore } from "../sdk/governance-store.js";
-import type { ApiPrincipal, SkillsProductStore } from "./types.js";
-export declare const TEST_DATABASE_URL_ENV = "HASNA_SKILLS_TEST_DATABASE_URL";
-export interface SeedApiKey {
-    token: string;
-    principal: Partial<ApiPrincipal>;
-}
-export interface StoreFixture {
-    store: SkillsProductStore;
-    /**
-     * Governance store over the same database as `store`, for surfaces that need
-     * the append-only lifecycle ledger and ceiling reads (cancellation).
-     */
-    governanceStore: GovernanceStore;
-    /** True when the server must be told it is allowed to run on this store. */
-    allowEphemeralStore: boolean;
-    close(): Promise<void>;
-}
-export interface StoreBackendFixture {
-    name: string;
-    create(seed?: SeedApiKey[]): Promise<StoreFixture>;
-}
-/** Human-readable reasons a backend is absent from the current run. */
-export declare function storeBackendNotices(): string[];
-/**
- * Every backend testable in this environment.
- *
- * Async because Postgres availability can only be established by connecting; a
- * top-level await in the test file keeps that out of the describe bodies.
- */
-export declare function resolveStoreBackends(): Promise<StoreBackendFixture[]>;