@hasna/skills 0.8.1 → 0.8.3

package/dist/lib/execution-grant-client.d.ts

@@ -0,0 +1,5 @@
+import { type ExecutionGrant, type ExecutionGrantPolicy, type ExecutionGrantRequest, type ResolvedExecutionGrant } from "./execution-grants.js";
+export declare function readExecutionGrantPolicy(profileId: string, revision?: string): Promise<ExecutionGrantPolicy>;
+export declare function saveExecutionGrantPolicy(profileId: string, grants: ExecutionGrant[], revision?: string): Promise<ExecutionGrantPolicy>;
+/** No disk cache: every execution obtains a current decision from its configured Skills authority. */
+export declare function resolveExecutionGrant(input: ExecutionGrantRequest): Promise<ResolvedExecutionGrant>;

package/dist/lib/execution-grants.d.ts

@@ -0,0 +1,49 @@
+import type { SelectedSecretBindings } from "./execution-secrets.js";
+export declare const MAX_EXECUTION_GRANTS = 256;
+export declare const MAX_EXECUTION_GRANT_BYTES: number;
+export interface ExecutionGrant {
+    id: string;
+    target: "local";
+    selection: {
+        slug: string;
+        version: string;
+        bundleDigest: string;
+    };
+    actors: string[];
+    /** Canonical directory conditions, not cryptographic machine attestation. */
+    consumers: {
+        stationId: string;
+        workspaceDirectory: string;
+        includeDescendants?: boolean;
+    }[];
+    secretsAuthority: string;
+    bindings: Record<string, string>;
+    expiresAt?: string;
+}
+export interface ExecutionGrantPolicy {
+    schema: "hasna.skills-execution-grants.v1";
+    profileId: string;
+    workspaceId: string;
+    revision: string;
+    previousRevision: string | null;
+    updatedAt: string;
+    actorId: string;
+    grants: ExecutionGrant[];
+}
+export interface ExecutionGrantRequest {
+    selection: SelectedSecretBindings["selection"];
+    consumer: SelectedSecretBindings["consumer"];
+}
+export interface ResolvedExecutionGrant {
+    policyRevision: string;
+    grantId: string;
+    bindings: SelectedSecretBindings;
+}
+export declare function grantIdentifier(v: unknown): v is string;
+export declare function grantRecord(v: unknown): v is Record<string, unknown>;
+export declare function grantWorkspace(v: unknown): v is string;
+export declare function grantDirectoryContains(root: string, directory: string, descendants?: boolean): boolean;
+export declare function validateExecutionGrants(value: unknown): ExecutionGrant[];
+export declare function validateExecutionGrantPolicy(value: unknown): ExecutionGrantPolicy;
+export declare function validateExecutionGrantRequest(value: unknown): ExecutionGrantRequest;
+export declare function executionGrantMatches(g: ExecutionGrant, r: ExecutionGrantRequest, actorId: string, now?: number): boolean;

package/dist/lib/execution-secrets.d.ts

@@ -0,0 +1,40 @@
+import type { ResolvedSkillSelection } from "../types/skill-selection.js";
+export interface SelectedSecretBindings {
+    schema: "hasna.skills-secret-bindings.v1";
+    selection: Pick<ResolvedSkillSelection, "authority" | "workspaceId" | "profileRevision" | "slug" | "version" | "bundleDigest"> & {
+        profileId: string;
+    };
+    consumer: {
+        stationId: string;
+        workspaceDirectory: string;
+    };
+    /** Exact canonical /v1 authority of the independently configured Secrets client. */
+    secretsAuthority: string;
+    /** Declared environment name -> vault key. Values are resolved freshly for each run. */
+    bindings: Record<string, string>;
+}
+export interface SelectedSecretsClient {
+    readonly baseUrl: string;
+    getSecret(query: {
+        key: string;
+    }, init?: RequestInit): Promise<{
+        key: string;
+        value: string;
+        expires_at?: string | null;
+    }>;
+}
+export interface SelectedSecretScope {
+    selection: ResolvedSkillSelection;
+    profileId: string;
+    cwd: string;
+}
+export declare function selectedSecretBindingsTemplate(scope: SelectedSecretScope, names: string[], createClient?: () => SelectedSecretsClient): SelectedSecretBindings;
+/** Runtime controls must not be supplied as credentials, even by a reviewed binding. */
+export declare function declaredSecretNames(value: unknown): string[];
+/** Reading is bounded and rejects symlinks/devices. Parsing errors never echo file contents. */
+export declare function readSelectedSecretBindings(path: string): SelectedSecretBindings;
+/** Validate every grant before constructing a client or reading any secret. */
+export declare function validateSelectedSecretBindings(value: unknown, scope: SelectedSecretScope, names: string[]): SelectedSecretBindings;
+export declare function resolveSelectedSecrets(bindings: SelectedSecretBindings, createClient?: () => SelectedSecretsClient): Promise<Record<string, string>>;
+/** Limit accidental disclosure in child output. This is not a sandbox for hostile code. */
+export declare function redactExecutionSecrets(text: string, env: Record<string, string>): string;

package/dist/lib/selected-manifest.d.ts

@@ -0,0 +1,6 @@
+import type { SkillBundleEntry } from "./skill-bundle.js";
+export declare function describeEntries(entries: SkillBundleEntry[]): {
+    kind: "executable" | "instruction";
+    manifest: Record<string, any>;
+    packageJson: Record<string, any>;
+};

package/dist/lib/selected-run.d.ts

@@ -1,8 +1,11 @@
+import { type ExecutionGrantRequest, type ResolvedExecutionGrant } from "./execution-grants.js";
 import type { ResolvedSkillSelection } from "../types/skill-selection.js";
 import type { SkillBundleEntry } from "./skill-bundle.js";
 import { type SelectionResolverOptions } from "./selection-resolver.js";
+import { type SelectedSecretBindings, type SelectedSecretsClient } from "./execution-secrets.js";
 export interface ResolvedSelectedRun {
     selection: ResolvedSkillSelection;
+    profileId: string;
     kind: "instruction" | "executable";
     entries: SkillBundleEntry[];
     manifest: Record<string, any>;
@@ -17,12 +20,37 @@ export interface SelectedLocalRunOptions {
     timeoutMs?: number;
     /** Only explicitly supplied environment values are available to declared secret references. */
     env?: Record<string, string>;
+    /** Explicit value-free vault grants; mutually exclusive with env. */
+    secretBindings?: SelectedSecretBindings;
+    /** SDK injection seam. The default uses the independently configured Secrets SDK. */
+    createSecretsClient?: () => SelectedSecretsClient;
+    /** Disable network authorization for explicit cached execution; declared secrets then need caller bindings. */
+    sharedExecutionGrants?: boolean;
+    /** SDK seam for current shared authorization; responses still undergo exact binding validation. */
+    resolveExecutionGrant?: (request: ExecutionGrantRequest) => Promise<ResolvedExecutionGrant>;
 }
+export declare function prepareSelectedSecretBindings(selected: ResolvedSelectedRun, cwd?: string): Promise<SelectedSecretBindings>;
 export declare function executeSelectedLocal(selected: ResolvedSelectedRun, options?: SelectedLocalRunOptions): Promise<{
     exitCode: number;
     stdout: string;
     stderr: string;
     error?: string;
+    secretBinding?: {
+        schema: "hasna.skills-secret-bindings.v1";
+        selection: Pick<ResolvedSkillSelection, "slug" | "version" | "bundleDigest" | "workspaceId" | "authority" | "profileRevision"> & {
+            profileId: string;
+        };
+        consumer: {
+            stationId: string;
+            workspaceDirectory: string;
+        };
+        secretsAuthority: string;
+        bindings: Record<string, string>;
+    } | undefined;
+    executionGrant?: {
+        policyRevision: string;
+        grantId: string;
+    } | undefined;
     selection: ResolvedSkillSelection;
     target: "local";
     runtime: any;

package/dist/sdk/index.d.ts

@@ -15,7 +15,11 @@
  * — the shared @hasna/contracts ladder — instead of reading an environment
  * variable of its own. See lib/fleet-credentials.ts.
  */
+export { readExecutionGrantPolicy, saveExecutionGrantPolicy, resolveExecutionGrant } from "../lib/execution-grant-client.js";
+export type { ExecutionGrant, ExecutionGrantPolicy, ExecutionGrantRequest, ResolvedExecutionGrant } from "../lib/execution-grants.js";
 export { HttpProfileClient, createProfileClient, type ProfileClient } from "../lib/profile-client.js";
+export { resolveSelectedRun, executeSelectedLocal, prepareSelectedSecretBindings, type ResolvedSelectedRun, type SelectedLocalRunOptions } from "../lib/selected-run.js";
+export { readSelectedSecretBindings, type SelectedSecretBindings, type SelectedSecretsClient } from "../lib/execution-secrets.js";
 export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkillProfile, StationSkillStateInput, StationSkillState } from "../types/skill-selection.js";
 export { MissingSkillsFleetError, SkillsFleetCredentialError, SKILLS_API_KEY_ENV, SKILLS_API_URL_ENV, SKILLS_APP, SKILLS_LOCAL_OPT_IN_ENV_KEYS, configuredSkillsApiUrl, isSkillsLocalOptIn, noticeLocalSkillsMode, normalizeSkillsApiOrigin, requireSkillsApiOrigin, requireSkillsFleet, resolveSkillsApiOrigin, resolveSkillsFleet, selectsSkillsLocalMode, skillsCredentialFilePath, skillsCredentialFiles, skillsCredentialOrReason, type HostedSkillsFleet, type LocalSkillsFleet, type SkillsFleet, type SkillsFleetErrorCode, type SkillsFleetOptions, } from "../lib/fleet-credentials.js";
 export * from "./server.js";