@inneranimalmedia/agentsam-sdk 2.6.3 → 2.6.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (233) hide show
  1. package/AGENTSAM.md +6 -0
  2. package/README.md +16 -1
  3. package/bin/agentsam +16 -1
  4. package/docs/BRAND_INTELLIGENCE.md +1 -1
  5. package/docs/architecture/AGENTSAM_DISTRIBUTION_OWNERSHIP.md +176 -0
  6. package/docs/architecture/AGENTSAM_GO_RUNTIME.md +282 -0
  7. package/docs/architecture/CODEBASEINDEX_GUIDED_PATH.md +202 -0
  8. package/docs/architecture/FS_E2E_CLOSURE_RECEIPT.md +59 -0
  9. package/docs/architecture/LOCAL_FS_AUTHORITY.md +38 -0
  10. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +28 -0
  11. package/docs/architecture/PLAN_CLI_AND_LOCAL_STUDIO_DESKTOP.md +96 -0
  12. package/docs/architecture/SAM_ACTIVITY_RECOVERY_RECEIPT.md +39 -0
  13. package/docs/architecture/SAM_DECISION_WORK_RECEIPT.md +54 -0
  14. package/docs/architecture/SAM_KERNEL.md +181 -0
  15. package/docs/architecture/SAM_MACHINE_NORMALIZATION_PRECOMMIT_REPORT.md +208 -0
  16. package/docs/architecture/SLASH_SKILLS_PORTABLE.md +116 -0
  17. package/docs/architecture/fs-e2e-receipt.latest.json +42 -0
  18. package/docs/architecture/previews/codebaseindex-guided-path/CODEBASEINDEX_GUIDED_PATH.md +202 -0
  19. package/docs/architecture/previews/codebaseindex-guided-path/index.html +321 -0
  20. package/migrations/d1/0010_portable_tickets_memory.sql +140 -0
  21. package/migrations/d1/0011_agentsam_skill_v2.sql +185 -0
  22. package/migrations/d1/0011b_agentsam_skill_v2_cutover.sql +22 -0
  23. package/migrations/d1/0011c_agentsam_skill_v2_backfill.sql +76 -0
  24. package/migrations/d1/0011d_agentsam_skill_v2_retrieval_revisions.sql +50 -0
  25. package/migrations/d1/0012_agentsam_tools_required_seed.sql +67 -0
  26. package/migrations/d1/0013_identity_oauth_states.sql +15 -0
  27. package/migrations/d1/0014_auth_event_log.sql +20 -0
  28. package/migrations/d1/0015_identity_oauth_state_app_id.sql +3 -0
  29. package/migrations/d1/README_PORTABLE_CONTROL_PLANE.md +16 -0
  30. package/migrations/sqlite/agentsam_skill_retrieval.portable.sql +42 -0
  31. package/package.json +19 -4
  32. package/packages/agentsam-contracts/src/errors.ts +16 -0
  33. package/packages/agentsam-errors/src/envelope.js +53 -0
  34. package/packages/agentsam-errors/src/index.js +1 -0
  35. package/packages/agentsam-errors/src/recovery.js +301 -0
  36. package/packages/agentsam-knowledge/src/providers/index.js +18 -6
  37. package/packages/connectors/cloudflare/src/routes.js +9 -0
  38. package/packages/connectors/cloudflare/tests/connector.test.mjs +26 -1
  39. package/packages/identity/.agentsam/features/oauth-login-portal/agentsam.feature.json +1 -1
  40. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +11 -2
  41. package/packages/identity/docs/PORTABLE_IDENTITY_ARCHITECTURE.md +50 -0
  42. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +31 -0
  43. package/packages/identity/migrations/sqlite/001_identity_core.sql +99 -0
  44. package/packages/identity/migrations/sqlite/002_identity_oauth_client.sql +38 -0
  45. package/packages/identity/migrations/sqlite/003_identity_oauth_server.sql +64 -0
  46. package/packages/identity/package.json +2 -2
  47. package/packages/identity/src/adapters/cloudflare-d1/index.js +122 -22
  48. package/packages/identity/src/adapters/sqlite/index.js +319 -0
  49. package/packages/identity/src/app/verify-app.js +95 -0
  50. package/packages/identity/src/contracts/identity-store.js +115 -0
  51. package/packages/identity/src/contracts/route-ids.js +30 -0
  52. package/packages/identity/src/contracts/route-projection.js +218 -0
  53. package/packages/identity/src/contracts/routes.js +11 -0
  54. package/packages/identity/src/core/browser-paths.js +4 -5
  55. package/packages/identity/src/core/constants.js +13 -8
  56. package/packages/identity/src/core/session-policy.js +32 -0
  57. package/packages/identity/src/frontend/auth-portal/pages/login.html +10 -10
  58. package/packages/identity/src/frontend/auth-portal/pages/reset.html +3 -3
  59. package/packages/identity/src/frontend/auth-portal/pages/signup.html +3 -3
  60. package/packages/identity/src/frontend/auth-portal/preview/dashboard-stub.html +1 -1
  61. package/packages/identity/src/index.js +25 -0
  62. package/packages/identity/src/oauth/README.md +10 -4
  63. package/packages/identity/src/oauth/credentials.js +20 -13
  64. package/packages/identity/src/oauth/finalize-inbound.js +1 -1
  65. package/packages/identity/src/oauth/iam-platform.js +8 -7
  66. package/packages/identity/src/oauth/redirect-paths.js +27 -36
  67. package/packages/identity/src/server/identity-service.js +30 -13
  68. package/packages/identity/src/server/mount-policy.js +30 -0
  69. package/packages/identity/src/server/post-auth.js +79 -0
  70. package/packages/identity/src/server/worker-router.js +104 -72
  71. package/packages/identity/tests/finalize-inbound-oauth.test.mjs +6 -6
  72. package/packages/identity/tests/iam-provider.test.mjs +1 -1
  73. package/packages/identity/tests/identity-service.test.mjs +36 -5
  74. package/packages/identity/tests/oauth-credentials.test.mjs +3 -1
  75. package/packages/identity/tests/portable-identity-architecture.test.mjs +157 -0
  76. package/packages/identity/tests/session-routes-policy.test.mjs +21 -0
  77. package/packages/theme-church-site/package.json +2 -1
  78. package/packages/theme-church-site/src/index.js +1 -0
  79. package/packages/theme-companions-site/package.json +2 -1
  80. package/packages/theme-companions-site/src/index.js +1 -0
  81. package/packages/theme-floors-site/package.json +2 -1
  82. package/packages/theme-floors-site/src/index.js +1 -0
  83. package/packages/theme-fuelnfree-site/package.json +2 -1
  84. package/packages/theme-fuelnfree-site/src/index.js +1 -0
  85. package/packages/theme-handyman-site/package.json +2 -1
  86. package/packages/theme-handyman-site/src/index.js +1 -0
  87. package/packages/theme-insurance-site/package.json +2 -1
  88. package/packages/theme-insurance-site/src/index.js +1 -0
  89. package/packages/theme-shinshu-site/package.json +2 -1
  90. package/packages/theme-shinshu-site/src/index.js +1 -0
  91. package/protocol/apps/agentsam.app.v1.schema.json +51 -0
  92. package/protocol/brand/brandpack.v1.schema.json +43 -0
  93. package/protocol/credentials/issue.v1.schema.json +38 -0
  94. package/protocol/database/connection.v1.schema.json +41 -0
  95. package/protocol/embeddings/embedding-profile.v1.schema.json +20 -0
  96. package/protocol/errors/error-envelope.schema.json +135 -1
  97. package/protocol/errors/recovery.v1.schema.json +50 -0
  98. package/protocol/runtime/workspace-fs.v1.schema.json +71 -0
  99. package/protocol/sam/activity.v1.schema.json +48 -0
  100. package/protocol/sam/answer.v1.schema.json +35 -0
  101. package/protocol/sam/calibration.v1.schema.json +21 -0
  102. package/protocol/sam/decision-receipt.v1.schema.json +29 -0
  103. package/protocol/sam/evaluation.v1.schema.json +19 -0
  104. package/protocol/sam/operation.schema.json +66 -0
  105. package/protocol/sam/outcome.v1.schema.json +36 -0
  106. package/protocol/sam/question.v1.schema.json +26 -0
  107. package/protocol/sam/registry.seed.json +153 -0
  108. package/protocol/sam/result.schema.json +53 -0
  109. package/protocol/sam/state.v1.schema.json +23 -0
  110. package/protocol/skills/agentsam.interaction.v1.schema.json +50 -0
  111. package/protocol/skills/agentsam.skill.v1.schema.json +57 -0
  112. package/protocol/ui/icon-registry.mjs +226 -0
  113. package/protocol/ui/icon.v1.schema.json +51 -0
  114. package/skills/README.md +22 -9
  115. package/skills/agentsam-codebaseindex/SKILL.md +225 -0
  116. package/skills/catalog.json +14 -0
  117. package/src/cli/command-catalog.js +130 -0
  118. package/src/cli/dispatch.js +48 -0
  119. package/src/cli.js +43 -1
  120. package/src/commands/api-key.js +244 -0
  121. package/src/commands/app.js +60 -28
  122. package/src/commands/brand.js +17 -19
  123. package/src/commands/codebaseindex.js +688 -0
  124. package/src/commands/env.js +152 -25
  125. package/src/commands/go.js +366 -53
  126. package/src/commands/interaction-clack.js +115 -0
  127. package/src/commands/models.js +1 -1
  128. package/src/commands/providers.js +62 -14
  129. package/src/commands/shell.js +43 -2
  130. package/src/commands/skill.js +248 -0
  131. package/src/commands/skills.js +1 -1
  132. package/src/commands/start-local.js +4 -0
  133. package/src/commands/whoami.js +90 -18
  134. package/src/go/build.js +229 -39
  135. package/src/go/cloudflare.js +506 -105
  136. package/src/go/container.js +120 -0
  137. package/src/go/contract.js +9 -4
  138. package/src/go/discover.js +149 -33
  139. package/src/go/index.js +15 -3
  140. package/src/go/native-probe-runner.mjs +119 -0
  141. package/src/go/{registry.js → official-registry.js} +64 -7
  142. package/src/go/official-release.js +10 -0
  143. package/src/go/receipts.js +77 -10
  144. package/src/go/verify.js +9 -2
  145. package/src/index.js +27 -0
  146. package/src/indexing/ingest/discover-models.js +298 -0
  147. package/src/indexing/ingest/inventory.js +243 -0
  148. package/src/indexing/ingest/job-graph.js +181 -0
  149. package/src/indexing/ingest/materials.js +210 -0
  150. package/src/lib/provider-credentials.js +63 -21
  151. package/src/lib/slash-commands.js +1 -0
  152. package/src/local-fs/capability.js +121 -0
  153. package/src/local-fs/freshness.js +75 -0
  154. package/src/local-fs/index.js +385 -0
  155. package/src/local-fs/paths.js +100 -0
  156. package/src/local-pty/server.js +295 -19
  157. package/src/mcp/client.js +2 -2
  158. package/src/models/ai-access-onboarding.js +112 -0
  159. package/src/models/discovery.js +10 -2
  160. package/src/models/inventory-core.js +9 -1
  161. package/src/sam/activity/index.js +183 -0
  162. package/src/sam/client.js +252 -0
  163. package/src/sam/decision/calibration.js +109 -0
  164. package/src/sam/decision/confidence.js +126 -0
  165. package/src/sam/decision/evaluate.js +157 -0
  166. package/src/sam/decision/evaluators/deterministic.js +341 -0
  167. package/src/sam/decision/evaluators/heuristic.js +61 -0
  168. package/src/sam/decision/evaluators/select.js +50 -0
  169. package/src/sam/decision/evaluators/semantic.js +149 -0
  170. package/src/sam/decision/hierarchical.js +61 -0
  171. package/src/sam/decision/index.js +53 -0
  172. package/src/sam/decision/policy.js +86 -0
  173. package/src/sam/decision/questions.js +120 -0
  174. package/src/sam/decision/receipt.js +148 -0
  175. package/src/sam/decision/state.js +117 -0
  176. package/src/sam/decision/types.js +22 -0
  177. package/src/sam/decision/validate.js +200 -0
  178. package/src/sam/define.js +51 -0
  179. package/src/sam/index.js +65 -0
  180. package/src/sam/operations/brand-scan.js +62 -0
  181. package/src/sam/operations/cad-blender-inspect.js +36 -0
  182. package/src/sam/operations/codebaseindex-ingest.js +49 -0
  183. package/src/sam/operations/decision-evaluate.js +59 -0
  184. package/src/sam/operations/planning-astar.js +77 -0
  185. package/src/sam/operations/planning-goap.js +60 -0
  186. package/src/sam/operations/repository-inspect.js +72 -0
  187. package/src/sam/operations/security-scan.js +33 -0
  188. package/src/sam/operations/terminal-exec.js +29 -0
  189. package/src/sam/planning/astar.js +311 -0
  190. package/src/sam/planning/goap.js +177 -0
  191. package/src/sam/planning/index.js +21 -0
  192. package/src/sam/planning/state.js +84 -0
  193. package/src/sam/registry.js +48 -0
  194. package/src/sam/result.js +77 -0
  195. package/src/sam/seed.js +44 -0
  196. package/src/sam/types.js +91 -0
  197. package/src/skills/catalog.js +64 -0
  198. package/src/skills/content-resolver.js +124 -0
  199. package/src/skills/hosted-store.js +37 -0
  200. package/src/skills/index.js +29 -64
  201. package/src/skills/interaction.js +102 -0
  202. package/src/skills/local-store.js +228 -0
  203. package/src/skills/manifest.js +104 -0
  204. package/src/skills/metrics.js +31 -0
  205. package/src/skills/registry.js +184 -0
  206. package/src/skills/runtime.js +287 -0
  207. package/src/skills/slash.js +44 -0
  208. package/src/ui/cli/help.js +94 -101
  209. package/test/cli/api-key-env-whoami.test.mjs +129 -0
  210. package/test/cli/codebaseindex-plan-ux.test.mjs +37 -0
  211. package/test/cli/go.test.mjs +62 -5
  212. package/test/cli/skill-npm-and-env.test.mjs +52 -0
  213. package/test/cli/wireframes-go-registry.test.mjs +87 -2
  214. package/test/go/build-source-identity.test.mjs +31 -0
  215. package/test/go/cloudflare-probe.test.mjs +274 -10
  216. package/test/go/distribution.test.mjs +28 -0
  217. package/test/integration/ai-access-onboarding.test.mjs +47 -0
  218. package/test/integration/cli-help.test.mjs +1 -1
  219. package/test/integration/cms-site-tenancy-contract.test.mjs +6 -6
  220. package/test/integration/codebaseindex-ingest.test.mjs +166 -0
  221. package/test/integration/icon-registry.test.mjs +67 -0
  222. package/test/integration/ingest-discover-models.test.mjs +30 -0
  223. package/test/integration/install-script.test.mjs +12 -9
  224. package/test/integration/local-fs.test.mjs +113 -0
  225. package/test/integration/provider-env-cli.test.mjs +2 -1
  226. package/test/integration/sam-activity-recovery.test.mjs +147 -0
  227. package/test/integration/sam-decision.test.mjs +584 -0
  228. package/test/integration/sam-kernel.test.mjs +99 -0
  229. package/test/integration/sam-planning-astar.test.mjs +279 -0
  230. package/test/integration/skill-runtime.test.mjs +240 -0
  231. package/test/integration/studio-fs-pty-e2e.test.mjs +294 -0
  232. package/test/models.test.mjs +14 -7
  233. package/test/shell.test.mjs +4 -4
@@ -0,0 +1,31 @@
1
+ import { createHash } from 'node:crypto';
2
+
3
+ /**
4
+ * Metrics are computed from *resolved* content — never authoritative from empty placeholders.
5
+ *
6
+ * @param {string} content
7
+ * @returns {{
8
+ * byte_size: number,
9
+ * char_count: number,
10
+ * line_count: number,
11
+ * estimated_tokens: number,
12
+ * estimation_method: 'chars_div_4',
13
+ * checksum: string,
14
+ * }}
15
+ */
16
+ export function computeSkillContentMetrics(content) {
17
+ const text = String(content ?? '');
18
+ const byteSize = Buffer.byteLength(text, 'utf8');
19
+ const charCount = text.length;
20
+ const lineCount = text.length === 0 ? 0 : text.split(/\r?\n/).length;
21
+ const estimatedTokens = Math.ceil(charCount / 4);
22
+ const checksum = `sha256:${createHash('sha256').update(text, 'utf8').digest('hex')}`;
23
+ return {
24
+ byte_size: byteSize,
25
+ char_count: charCount,
26
+ line_count: lineCount,
27
+ estimated_tokens: estimatedTokens,
28
+ estimation_method: 'chars_div_4',
29
+ checksum,
30
+ };
31
+ }
@@ -0,0 +1,184 @@
1
+ import fs from 'node:fs';
2
+ import path from 'node:path';
3
+ import { fileURLToPath } from 'node:url';
4
+ import { normalizeSkillManifest } from './manifest.js';
5
+ import { canonicalizeSlashTrigger } from './slash.js';
6
+ import {
7
+ readLocalRegistry,
8
+ loadInstalledManifest,
9
+ skillsHome,
10
+ } from './local-store.js';
11
+ import { listSkills as listBuiltinCatalog } from './catalog.js';
12
+
13
+ /**
14
+ * SkillRegistry — resolve from layered sources without fake accounts.
15
+ *
16
+ * Layers (later does not override earlier trigger unless aliased explicitly):
17
+ * 1. user / installed local registry (authoritative triggers)
18
+ * 2. app-provided (optional)
19
+ * 3. SDK builtins (suggested triggers only if free)
20
+ */
21
+
22
+ /**
23
+ * @typedef {{
24
+ * id: string,
25
+ * name: string,
26
+ * description: string,
27
+ * icon: string,
28
+ * trigger: string|null,
29
+ * source: 'user'|'package'|'builtin'|'app',
30
+ * manifest: import('./manifest.js').SkillManifest,
31
+ * baseDir?: string,
32
+ * version?: string|null,
33
+ * package?: string|null,
34
+ * }} ResolvedSkill
35
+ */
36
+
37
+ function builtinSuggestedTrigger(skill) {
38
+ const id = String(skill.id || '')
39
+ .replace(/^agentsam-/, '')
40
+ .replace(/_/g, '-');
41
+ try {
42
+ return canonicalizeSlashTrigger(`/${id}`);
43
+ } catch {
44
+ return null;
45
+ }
46
+ }
47
+
48
+ function builtinToManifest(skill, skillsRoot) {
49
+ return normalizeSkillManifest({
50
+ schema: 'agentsam.skill.v1',
51
+ id: skill.id,
52
+ name: skill.title || skill.id,
53
+ description: skill.description || '',
54
+ icon: 'skill',
55
+ slash: { suggested: builtinSuggestedTrigger(skill) || undefined },
56
+ instructions: {
57
+ source: 'package_file',
58
+ ref: skill.entry,
59
+ },
60
+ execution: {
61
+ mode: 'turn',
62
+ tools: [],
63
+ operations: [],
64
+ capabilities: [],
65
+ },
66
+ package: '@inneranimalmedia/agentsam-sdk',
67
+ });
68
+ }
69
+
70
+ export class SkillRegistry {
71
+ /**
72
+ * @param {{
73
+ * home?: string,
74
+ * builtins?: boolean,
75
+ * appSkills?: ResolvedSkill[],
76
+ * skillsRoot?: string,
77
+ * }} [options]
78
+ */
79
+ constructor(options = {}) {
80
+ this.options = options;
81
+ this.includeBuiltins = options.builtins !== false;
82
+ this.appSkills = Array.isArray(options.appSkills) ? options.appSkills : [];
83
+ this.skillsRoot =
84
+ options.skillsRoot ||
85
+ path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', 'skills');
86
+ }
87
+
88
+ /** @returns {ResolvedSkill[]} */
89
+ list() {
90
+ /** @type {Map<string, ResolvedSkill>} */
91
+ const byId = new Map();
92
+
93
+ if (this.includeBuiltins) {
94
+ for (const row of listBuiltinCatalog()) {
95
+ const manifest = builtinToManifest(row, this.skillsRoot);
96
+ byId.set(manifest.id, {
97
+ id: manifest.id,
98
+ name: manifest.name,
99
+ description: manifest.description || '',
100
+ icon: manifest.icon || 'skill',
101
+ trigger: null, // assigned only when free / aliased
102
+ source: 'builtin',
103
+ manifest,
104
+ baseDir: this.skillsRoot,
105
+ package: manifest.package || null,
106
+ version: null,
107
+ });
108
+ }
109
+ }
110
+
111
+ for (const app of this.appSkills) {
112
+ byId.set(app.id, { ...app, source: 'app' });
113
+ }
114
+
115
+ const local = readLocalRegistry(this.options);
116
+ for (const entry of Object.values(local.entries)) {
117
+ try {
118
+ const manifest = loadInstalledManifest(entry);
119
+ byId.set(entry.id, {
120
+ id: entry.id,
121
+ name: manifest.name,
122
+ description: manifest.description || '',
123
+ icon: manifest.icon || 'skill',
124
+ trigger: entry.trigger,
125
+ source: entry.source === 'user' ? 'user' : 'package',
126
+ manifest,
127
+ baseDir: entry.baseDir,
128
+ package: entry.package || null,
129
+ version: entry.version || null,
130
+ });
131
+ } catch {
132
+ /* skip corrupt */
133
+ }
134
+ }
135
+
136
+ // Assign builtin suggested triggers only when not claimed
137
+ const claimed = new Set(
138
+ Object.keys(local.triggers || {}).concat(
139
+ [...byId.values()].map((s) => s.trigger).filter(Boolean),
140
+ ),
141
+ );
142
+ for (const skill of byId.values()) {
143
+ if (skill.trigger) continue;
144
+ if (skill.source !== 'builtin') continue;
145
+ const suggested = skill.manifest.slash?.suggested;
146
+ if (suggested && !claimed.has(suggested)) {
147
+ skill.trigger = suggested;
148
+ claimed.add(suggested);
149
+ }
150
+ }
151
+
152
+ return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id));
153
+ }
154
+
155
+ /** @returns {Map<string, ResolvedSkill>} */
156
+ triggerMap() {
157
+ const map = new Map();
158
+ for (const skill of this.list()) {
159
+ if (skill.trigger) map.set(skill.trigger, skill);
160
+ }
161
+ return map;
162
+ }
163
+
164
+ getById(id) {
165
+ const needle = String(id || '').trim().toLowerCase();
166
+ return this.list().find((s) => s.id === needle) || null;
167
+ }
168
+
169
+ getByTrigger(triggerRaw) {
170
+ let trigger;
171
+ try {
172
+ trigger = canonicalizeSlashTrigger(triggerRaw);
173
+ } catch {
174
+ return null;
175
+ }
176
+ return this.triggerMap().get(trigger) || null;
177
+ }
178
+
179
+ vocabulary() {
180
+ return [...this.triggerMap().keys()].sort();
181
+ }
182
+ }
183
+
184
+ export { skillsHome };
@@ -0,0 +1,287 @@
1
+ import { parseSlashInvocation } from './slash.js';
2
+ import { SkillContentResolver } from './content-resolver.js';
3
+ import { computeSkillContentMetrics } from './metrics.js';
4
+ import {
5
+ interactionReady,
6
+ interactionUnknownSkill,
7
+ interactionBlocked,
8
+ } from './interaction.js';
9
+
10
+ /**
11
+ * @typedef {{
12
+ * matched: boolean,
13
+ * invocation?: { trigger: string, args: string, skillId: string|null },
14
+ * skill?: { id: string, trigger: string, name: string, source: string },
15
+ * modelInstructions?: { content: string },
16
+ * tools?: string[],
17
+ * operations?: string[],
18
+ * capabilities?: string[],
19
+ * interaction: import('./interaction.js').AgentSamInteraction,
20
+ * receipt?: {
21
+ * skillId: string,
22
+ * source: string,
23
+ * version: string|null,
24
+ * checksum: string,
25
+ * contentSource: string,
26
+ * },
27
+ * }} SkillInvocationResult
28
+ */
29
+
30
+ function suggestTriggers(trigger, vocabulary = []) {
31
+ const needle = String(trigger || '').replace(/^\//, '');
32
+ return vocabulary
33
+ .map((t) => ({ t, score: distance(needle, t.replace(/^\//, '')) }))
34
+ .filter((row) => row.score <= 3)
35
+ .sort((a, b) => a.score - b.score)
36
+ .slice(0, 5)
37
+ .map((row) => row.t);
38
+ }
39
+
40
+ function distance(a, b) {
41
+ // cheap Levenshtein for short triggers
42
+ const m = a.length;
43
+ const n = b.length;
44
+ const dp = Array.from({ length: m + 1 }, () => new Array(n + 1).fill(0));
45
+ for (let i = 0; i <= m; i += 1) dp[i][0] = i;
46
+ for (let j = 0; j <= n; j += 1) dp[0][j] = j;
47
+ for (let i = 1; i <= m; i += 1) {
48
+ for (let j = 1; j <= n; j += 1) {
49
+ const cost = a[i - 1] === b[j - 1] ? 0 : 1;
50
+ dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost);
51
+ }
52
+ }
53
+ return dp[m][n];
54
+ }
55
+
56
+ function tipArgs(args) {
57
+ const raw = String(args || '').trim();
58
+ if (!raw) {
59
+ return 'Tip: `/skills release-check` pre-fills a suggested id from your args.';
60
+ }
61
+ return `Using “${raw}” as the suggested skill id.`;
62
+ }
63
+
64
+ export class SkillRuntime {
65
+ /**
66
+ * @param {{
67
+ * registry: import('./registry.js').SkillRegistry,
68
+ * contentResolver?: SkillContentResolver,
69
+ * toolRegistry?: { has?: (id: string) => boolean },
70
+ * operationRegistry?: { has?: (id: string) => boolean },
71
+ * }} deps
72
+ */
73
+ constructor(deps) {
74
+ this.registry = deps.registry;
75
+ this.contentResolver = deps.contentResolver || new SkillContentResolver();
76
+ this.toolRegistry = deps.toolRegistry || null;
77
+ this.operationRegistry = deps.operationRegistry || null;
78
+ }
79
+
80
+ /**
81
+ * Explicit slash only. Normal prose → matched:false, no lookup.
82
+ * @param {{ input: unknown, context?: Record<string, unknown> }} opts
83
+ * @returns {Promise<SkillInvocationResult>}
84
+ */
85
+ async invoke(opts) {
86
+ const parsed = parseSlashInvocation(opts?.input);
87
+ if (!parsed) {
88
+ return {
89
+ matched: false,
90
+ interaction: interactionReady(),
91
+ };
92
+ }
93
+
94
+ if (parsed.trigger === '/skills') {
95
+ const vocab = this.registry.vocabulary();
96
+ if (vocab.length) {
97
+ return {
98
+ matched: true,
99
+ invocation: { trigger: '/skills', args: parsed.args, skillId: null },
100
+ interaction: {
101
+ status: 'complete',
102
+ prompt: {
103
+ kind: 'info',
104
+ title: 'Skills',
105
+ message: ['Installed slash vocabulary:', ...vocab.map((t) => ` ${t}`)].join('\n'),
106
+ },
107
+ },
108
+ };
109
+ }
110
+
111
+ // Empty registry: help create the first skill — don't bounce to list again.
112
+ const hintName = String(parsed.args || '')
113
+ .trim()
114
+ .toLowerCase()
115
+ .replace(/[^a-z0-9-]+/g, '-')
116
+ .replace(/^-+|-+$/g, '')
117
+ .slice(0, 48);
118
+ const exampleId = hintName || 'my-first-skill';
119
+ return {
120
+ matched: true,
121
+ invocation: { trigger: '/skills', args: parsed.args, skillId: null },
122
+ interaction: {
123
+ status: 'needs_input',
124
+ prompt: {
125
+ kind: 'select',
126
+ code: 'NO_SKILLS',
127
+ title: 'No slash skills yet',
128
+ message: [
129
+ 'Nothing is installed in this registry yet.',
130
+ '',
131
+ 'A skill is a named playbook with an explicit /trigger — create one locally, then invoke it:',
132
+ '',
133
+ ` agentsam skill create ${exampleId}`,
134
+ ` # edit ~/.agentsam/skills/user/${exampleId}/SKILL.md`,
135
+ ` /${exampleId} your args here`,
136
+ '',
137
+ 'Or install from a folder that has agentsam.skill.json:',
138
+ ' agentsam skill install ./path/to/skill',
139
+ '',
140
+ tipArgs(parsed.args),
141
+ ]
142
+ .filter(Boolean)
143
+ .join('\n'),
144
+ options: [
145
+ {
146
+ value: `create:${exampleId}`,
147
+ label: `Create /${exampleId}`,
148
+ description: `agentsam skill create ${exampleId}`,
149
+ },
150
+ {
151
+ value: 'install',
152
+ label: 'Install from path or npm',
153
+ description: 'agentsam skill install ./my-skill | @scope/pkg',
154
+ },
155
+ {
156
+ value: 'docs',
157
+ label: 'What is a skill?',
158
+ description: 'Portable playbook: instructions + tools/operations — no workspace/R2 required',
159
+ },
160
+ ],
161
+ actions: [
162
+ { id: `create:${exampleId}`, label: 'Create skill' },
163
+ { id: 'install', label: 'Install skill' },
164
+ { id: 'cancel', label: 'Cancel' },
165
+ ],
166
+ },
167
+ },
168
+ };
169
+ }
170
+
171
+ const skill = this.registry.getByTrigger(parsed.trigger);
172
+ if (!skill) {
173
+ const suggestions = suggestTriggers(parsed.trigger, this.registry.vocabulary());
174
+ return {
175
+ matched: true,
176
+ invocation: { trigger: parsed.trigger, args: parsed.args, skillId: null },
177
+ interaction: interactionUnknownSkill(parsed.trigger, suggestions),
178
+ };
179
+ }
180
+
181
+ let resolved;
182
+ try {
183
+ resolved = await this.contentResolver.resolve(skill.manifest, {
184
+ baseDir: skill.baseDir,
185
+ packageRoot: skill.baseDir,
186
+ });
187
+ } catch (error) {
188
+ return {
189
+ matched: true,
190
+ invocation: {
191
+ trigger: parsed.trigger,
192
+ args: parsed.args,
193
+ skillId: skill.id,
194
+ },
195
+ skill: {
196
+ id: skill.id,
197
+ trigger: skill.trigger,
198
+ name: skill.name,
199
+ source: skill.source,
200
+ },
201
+ interaction: interactionBlocked({
202
+ code: 'CONTENT_RESOLVE_FAILED',
203
+ title: 'Skill content unavailable',
204
+ message: error?.message || String(error),
205
+ actions: [
206
+ { id: 'inspect', label: 'Inspect skill' },
207
+ { id: 'cancel', label: 'Cancel' },
208
+ ],
209
+ }),
210
+ };
211
+ }
212
+
213
+ const metrics = computeSkillContentMetrics(resolved.content);
214
+ const tools = skill.manifest.execution?.tools || [];
215
+ const operations = skill.manifest.execution?.operations || [];
216
+ const capabilities = skill.manifest.execution?.capabilities || [];
217
+
218
+ // Missing required tools → blocked interaction (no subagent fallback)
219
+ if (this.toolRegistry?.has) {
220
+ const missing = tools.filter((id) => !this.toolRegistry.has(id));
221
+ if (missing.length) {
222
+ return {
223
+ matched: true,
224
+ invocation: {
225
+ trigger: parsed.trigger,
226
+ args: parsed.args,
227
+ skillId: skill.id,
228
+ },
229
+ skill: {
230
+ id: skill.id,
231
+ trigger: skill.trigger,
232
+ name: skill.name,
233
+ source: skill.source,
234
+ },
235
+ tools,
236
+ operations,
237
+ capabilities,
238
+ interaction: interactionBlocked({
239
+ code: 'TOOL_REQUIRED',
240
+ title: 'Required tools unavailable',
241
+ message: `This skill needs: ${missing.join(', ')}`,
242
+ actions: [
243
+ { id: 'connect', label: 'Review tools' },
244
+ { id: 'cancel', label: 'Cancel' },
245
+ ],
246
+ }),
247
+ receipt: {
248
+ skillId: skill.id,
249
+ source: skill.source,
250
+ version: skill.version || skill.manifest.version || null,
251
+ checksum: metrics.checksum,
252
+ contentSource: resolved.source,
253
+ },
254
+ };
255
+ }
256
+ }
257
+
258
+ return {
259
+ matched: true,
260
+ invocation: {
261
+ trigger: parsed.trigger,
262
+ args: parsed.args,
263
+ skillId: skill.id,
264
+ },
265
+ skill: {
266
+ id: skill.id,
267
+ trigger: skill.trigger,
268
+ name: skill.name,
269
+ source: skill.source,
270
+ },
271
+ modelInstructions: {
272
+ content: resolved.content,
273
+ },
274
+ tools,
275
+ operations,
276
+ capabilities,
277
+ interaction: interactionReady(),
278
+ receipt: {
279
+ skillId: skill.id,
280
+ source: skill.source,
281
+ version: skill.version || skill.manifest.version || null,
282
+ checksum: metrics.checksum,
283
+ contentSource: resolved.source,
284
+ },
285
+ };
286
+ }
287
+ }
@@ -0,0 +1,44 @@
1
+ /**
2
+ * Canonical slash invocation parser.
3
+ * Normalize to lowercase kebab at write/parse time; never LOWER() DB columns on lookup.
4
+ */
5
+
6
+ /**
7
+ * @param {unknown} message
8
+ * @returns {{ trigger: string, args: string } | null}
9
+ */
10
+ export function parseSlashInvocation(message) {
11
+ const raw = String(message ?? '').trim();
12
+ if (!raw.startsWith('/')) return null;
13
+
14
+ const match = raw.match(/^\/([a-zA-Z0-9][a-zA-Z0-9-]{0,63})(?:\s+([\s\S]*))?$/);
15
+ if (!match) return null;
16
+
17
+ return {
18
+ trigger: `/${match[1].toLowerCase()}`,
19
+ args: String(match[2] ?? '').trim(),
20
+ };
21
+ }
22
+
23
+ /**
24
+ * @param {unknown} raw
25
+ * @returns {string}
26
+ */
27
+ export function canonicalizeSlashTrigger(raw) {
28
+ let value = String(raw ?? '').trim().toLowerCase();
29
+ if (!value) throw new Error('slash_trigger_required');
30
+ if (!value.startsWith('/')) value = `/${value}`;
31
+ value = value.replace(/_/g, '-');
32
+ if (!/^\/[a-z0-9][a-z0-9-]{0,63}$/.test(value)) {
33
+ throw new Error(`invalid_slash_trigger:${value}`);
34
+ }
35
+ return value;
36
+ }
37
+
38
+ /**
39
+ * Prose must never trigger skill lookup.
40
+ * @param {unknown} message
41
+ */
42
+ export function isExplicitSlashMessage(message) {
43
+ return parseSlashInvocation(message) != null;
44
+ }