@hasna/skills 0.8.1 → 0.8.3

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.8.1",
+  version: "0.8.3",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -401,11 +401,66 @@ function defaultStartDirs() {
   return dirs;
 }
 
+// src/server/execution-grant-store.ts
+import { randomUUID } from "crypto";
+function next(p, id, grants, expected) {
+  return {
+    schema: "hasna.skills-execution-grants.v1",
+    profileId: id,
+    workspaceId: p.orgId,
+    revision: randomUUID(),
+    previousRevision: expected,
+    updatedAt: new Date().toISOString(),
+    actorId: p.userId,
+    grants: structuredClone(grants)
+  };
+}
+function document(row) {
+  return row ? typeof row.document_json === "string" ? JSON.parse(row.document_json) : structuredClone(row.document_json) : null;
+}
+
+class MemoryExecutionGrantStore {
+  current = new Map;
+  history = new Map;
+  async get(p, id, revision) {
+    return structuredClone((revision ? this.history.get(JSON.stringify([p.orgId, id, revision])) : this.current.get(JSON.stringify([p.orgId, id]))) ?? null);
+  }
+  async save(p, id, grants, expected) {
+    const key = JSON.stringify([p.orgId, id]);
+    if ((this.current.get(key)?.revision ?? null) !== expected)
+      return null;
+    const value = next(p, id, grants, expected);
+    this.current.set(key, value);
+    this.history.set(JSON.stringify([p.orgId, id, value.revision]), value);
+    return structuredClone(value);
+  }
+}
+
+class SqliteExecutionGrantStore {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async get(p, id, revision) {
+    return document(revision ? this.db.query("SELECT document_json FROM skills_execution_grant_revisions WHERE org_id=? AND profile_id=? AND revision=?").get(p.orgId, id, revision) : this.db.query("SELECT document_json FROM skills_execution_grants WHERE org_id=? AND profile_id=?").get(p.orgId, id));
+  }
+  async save(p, id, grants, expected) {
+    return this.db.transaction(() => {
+      const value = next(p, id, grants, expected), json = JSON.stringify(value);
+      const row = expected === null ? this.db.query("INSERT INTO skills_execution_grants(org_id,profile_id,revision,document_json) VALUES(?,?,?,?) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING document_json").get(p.orgId, id, value.revision, json) : this.db.query("UPDATE skills_execution_grants SET revision=?,document_json=? WHERE org_id=? AND profile_id=? AND revision=? RETURNING document_json").get(value.revision, json, p.orgId, id, expected);
+      if (!row)
+        return null;
+      this.db.query("INSERT INTO skills_execution_grant_revisions(org_id,profile_id,revision,document_json) VALUES(?,?,?,?)").run(p.orgId, id, value.revision, json);
+      return document(row);
+    })();
+  }
+}
+
 // src/server/sqlite-store.ts
 import { Database } from "bun:sqlite";
 
 // src/server/selection-store.ts
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 function selections(value) {
   return typeof value === "string" ? JSON.parse(value) : structuredClone(value);
 }
@@ -446,15 +501,15 @@ class MemorySkillSelectionStore {
     const key = this.key(p.orgId, id), previous = this.profiles.get(key);
     if ((previous?.revision ?? null) !== expected)
       return null;
-    const next = {
+    const next2 = {
       id,
       workspaceId: p.orgId,
-      revision: randomUUID(),
+      revision: randomUUID2(),
       selections: structuredClone(selected),
       updatedAt: new Date().toISOString()
     };
-    this.profiles.set(key, next);
-    return structuredClone(next);
+    this.profiles.set(key, next2);
+    return structuredClone(next2);
   }
   async getStationState(p, id) {
     return structuredClone(this.states.get(this.key(p.orgId, p.userId, id)) ?? null);
@@ -462,15 +517,15 @@ class MemorySkillSelectionStore {
   async saveStationState(p, id, input) {
     if (this.profiles.get(this.key(p.orgId, input.profileId))?.revision !== input.profileRevision)
       return null;
-    const next = {
+    const next2 = {
       ...structuredClone(input),
       stationId: id,
       workspaceId: p.orgId,
       actorId: p.userId,
       appliedAt: new Date().toISOString()
     };
-    this.states.set(this.key(p.orgId, p.userId, id), next);
-    return structuredClone(next);
+    this.states.set(this.key(p.orgId, p.userId, id), next2);
+    return structuredClone(next2);
   }
 }
 
@@ -484,7 +539,7 @@ class SqliteSkillSelectionStore {
     return row ? profile(row) : null;
   }
   async saveProfile(p, id, selected, expected) {
-    const revision = randomUUID(), timestamp = new Date().toISOString();
+    const revision = randomUUID2(), timestamp = new Date().toISOString();
     const row = expected === null ? this.db.query("INSERT INTO skills_profiles(org_id,profile_id,revision,selections_json,updated_at) VALUES(?,?,?,?,?) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING *").get(p.orgId, id, revision, JSON.stringify(selected), timestamp) : this.db.query("UPDATE skills_profiles SET revision=?,selections_json=?,updated_at=? WHERE org_id=? AND profile_id=? AND revision=? RETURNING *").get(revision, JSON.stringify(selected), timestamp, p.orgId, id, expected);
     return row ? profile(row) : null;
   }
@@ -501,7 +556,7 @@ class SqliteSkillSelectionStore {
 }
 
 // src/server/sqlite-store.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync } from "fs";
 import { dirname as dirname2, join as join4 } from "path";
 
@@ -524,7 +579,7 @@ function publicPrincipal(partial = {}) {
 }
 
 // src/server/rows.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 
 // src/lib/skill-entry-path.ts
 class SkillEntryPaths {
@@ -834,7 +889,7 @@ function normalizeLimit(limit) {
   return Number.isFinite(limit) ? Math.max(0, Math.trunc(limit)) : 0;
 }
 function runId() {
-  return `run_${Date.now().toString(36)}_${randomUUID2().slice(0, 8)}`;
+  return `run_${Date.now().toString(36)}_${randomUUID3().slice(0, 8)}`;
 }
 function rowToRun(row) {
   return {
@@ -1057,6 +1112,9 @@ class SqliteSkillsStore {
   get selectionStore() {
     return new SqliteSkillSelectionStore(this.db);
   }
+  get executionGrantStore() {
+    return new SqliteExecutionGrantStore(this.db);
+  }
   backend;
   db;
   closed = false;
@@ -1158,7 +1216,7 @@ class SqliteSkillsStore {
       JSON.stringify(input.input),
       JSON.stringify(input.args),
       input.idempotencyKey ?? null,
-      randomUUID3(),
+      randomUUID4(),
       nowIso()
     ]);
     return rowToRun(row);
@@ -1468,21 +1526,21 @@ class SqliteSkillsStore {
     if (expectedRevisionId !== current.revisionId) {
       throw new SkillRevisionConflictError(slug, expectedRevisionId, current.revisionId);
     }
-    const next = { ...current, ...patch };
+    const next2 = { ...current, ...patch };
     return this.db.transaction(() => {
-      const revisionId = revisionIdOfRecord(next);
+      const revisionId = revisionIdOfRecord(next2);
       const row = this.get(`UPDATE skills_registry
          SET display_name = ?, description = ?, category = ?, tags_json = ?, kind = ?, version = ?, skill_md = ?,
              revision_id = ?, revision_number = revision_number + 1, updated_at = ?
          WHERE org_id = ? AND slug = ? AND tombstoned_at IS NULL AND revision_id = ?
          RETURNING *`, [
-        next.displayName,
-        next.description,
-        next.category,
-        JSON.stringify(next.tags),
-        next.kind,
-        next.version ?? null,
-        next.skillMd ?? null,
+        next2.displayName,
+        next2.description,
+        next2.category,
+        JSON.stringify(next2.tags),
+        next2.kind,
+        next2.version ?? null,
+        next2.skillMd ?? null,
         revisionId,
         nowIso(),
         principal.orgId,
@@ -1502,7 +1560,7 @@ class SqliteSkillsStore {
       }
       this.db.run("DELETE FROM skills_tags WHERE org_id = ? AND slug = ?", [principal.orgId, slug]);
       const insertTag = this.db.prepare("INSERT OR IGNORE INTO skills_tags (org_id, slug, tag) VALUES (?, ?, ?)");
-      for (const tag of next.tags) {
+      for (const tag of next2.tags) {
         if (!tag.trim())
           continue;
         insertTag.run(principal.orgId, slug, tag);