@lemoncat7/dsh-partner 1.4.1 → 1.5.0

package/lib/skills/loader.js

@@ -0,0 +1,134 @@
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { basename, resolve } from 'node:path';
+import { SKILL_CONTEXTS } from './domain.js';
+const MAX_SKILL_BYTES = 512 * 1024;
+export async function loadSkill(input) {
+    const file = resolve(input.rootPath, 'SKILL.md');
+    const buffer = await readFile(file);
+    if (buffer.byteLength > MAX_SKILL_BYTES)
+        throw new Error('SKILL.md exceeds the 512 KiB limit');
+    const raw = buffer.toString('utf8');
+    const { metadata, body } = parseSkillDocument(raw);
+    const name = readableName(field(metadata, 'name') ?? basename(input.rootPath), 'Skill name');
+    const description = field(metadata, 'description') ?? firstSentence(body);
+    if (!description)
+        throw new Error('Skill description is required');
+    const requestedContext = enumField(metadata, 'context', SKILL_CONTEXTS) ?? 'fork';
+    const executionContext = input.trusted ? requestedContext : 'fork';
+    const skill = {
+        id: input.id,
+        name,
+        displayName: readableName(field(metadata, 'display-name') ?? name, 'Skill display name'),
+        description: description.slice(0, 600),
+        version: field(metadata, 'version') ?? '0.0.0',
+        source: input.source,
+        ...(input.sourceId ? { sourceId: input.sourceId } : {}),
+        rootPath: input.rootPath,
+        checksum: sha256(raw),
+        allowedTools: listField(metadata, 'allowed-tools'),
+        executionContext,
+        userInvocable: booleanField(metadata, 'user-invocable', true),
+        trusted: input.trusted,
+        installedAt: input.installedAt,
+        updatedAt: input.updatedAt,
+        body: body.trim(),
+    };
+    if (!skill.body)
+        throw new Error('Skill body is empty');
+    return skill;
+}
+export function skillMetadata(skill) {
+    const { body: _body, ...metadata } = skill;
+    return metadata;
+}
+export function parseSkillDocument(raw) {
+    const metadata = new Map();
+    if (!raw.startsWith('---\n') && !raw.startsWith('---\r\n'))
+        return { metadata, body: raw };
+    const lines = raw.replace(/\r\n/g, '\n').split('\n');
+    const end = lines.indexOf('---', 1);
+    if (end < 0)
+        throw new Error('Skill frontmatter is not closed');
+    let listKey;
+    for (const line of lines.slice(1, end)) {
+        if (!line.trim() || line.trimStart().startsWith('#'))
+            continue;
+        const listItem = line.match(/^\s+-\s+(.+)$/u);
+        if (listItem) {
+            if (!listKey)
+                throw new Error(`Invalid Skill frontmatter list item: ${line.trim()}`);
+            const item = unquote(listItem[1].trim());
+            if (!item)
+                throw new Error(`Invalid Skill frontmatter list item: ${line.trim()}`);
+            const previous = metadata.get(listKey)?.trim();
+            metadata.set(listKey, previous ? `${previous}, ${item}` : item);
+            continue;
+        }
+        listKey = undefined;
+        if (/^\s/u.test(line))
+            throw new Error(`Unsupported nested Skill frontmatter line: ${line.trim()}`);
+        const separator = line.indexOf(':');
+        if (separator < 1)
+            throw new Error(`Invalid Skill frontmatter line: ${line}`);
+        const key = line.slice(0, separator).trim().toLocaleLowerCase();
+        const value = unquote(line.slice(separator + 1).trim());
+        if (metadata.has(key))
+            throw new Error(`Duplicate Skill frontmatter field: ${key}`);
+        metadata.set(key, value);
+        if (!value)
+            listKey = key;
+    }
+    return { metadata, body: lines.slice(end + 1).join('\n') };
+}
+export function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function field(metadata, key) {
+    const value = metadata.get(key)?.trim();
+    return value || undefined;
+}
+function enumField(metadata, key, values) {
+    const value = field(metadata, key);
+    if (value === undefined)
+        return undefined;
+    if (!values.includes(value))
+        throw new Error(`${key} is invalid`);
+    return value;
+}
+function booleanField(metadata, key, fallback) {
+    const value = field(metadata, key)?.toLocaleLowerCase();
+    if (value === undefined)
+        return fallback;
+    if (value === 'true')
+        return true;
+    if (value === 'false')
+        return false;
+    throw new Error(`${key} must be true or false`);
+}
+function listField(metadata, key) {
+    const raw = field(metadata, key);
+    if (!raw)
+        return [];
+    const value = raw.startsWith('[') && raw.endsWith(']') ? raw.slice(1, -1) : raw;
+    return [...new Set(value.split(',').map(item => unquote(item.trim())).filter(Boolean))].slice(0, 64);
+}
+function unquote(value) {
+    if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'")))
+        return value.slice(1, -1);
+    return value;
+}
+function firstSentence(body) {
+    return body.split('\n').map(line => line.replace(/^#+\s*/, '').trim()).find(Boolean)?.slice(0, 600) ?? '';
+}
+function readableName(value, label) {
+    const normalized = value.trim();
+    if (!normalized)
+        throw new Error(`${label} is required`);
+    if (normalized.length > 120)
+        throw new Error(`${label} must be at most 120 characters`);
+    if (/[\u0000-\u001f\u007f]/u.test(normalized))
+        throw new Error(`${label} contains control characters`);
+    return normalized;
+}
+//# sourceMappingURL=loader.js.map

package/lib/skills/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAyF,MAAM,aAAa,CAAA;AAEnI,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAA;AAWlC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAqB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,UAAU,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAA;IAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClE,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,IAAI,MAAM,CAAA;IACjF,MAAM,gBAAgB,GAA0B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAA;IACzF,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI;QACJ,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,IAAI,EAAE,oBAAoB,CAAC;QACxF,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,OAAO;QAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;QACrB,YAAY,EAAE,SAAS,CAAC,QAAQ,EAAE,eAAe,CAAC;QAClD,gBAAgB;QAChB,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAClB,CAAA;IACD,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACvD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;IAC1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACnC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC/D,IAAI,OAA2B,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACpF,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;YAC9C,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,OAAO,GAAG,SAAS,CAAA;QACnB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAA;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAA;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAA;QACnF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACxB,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,GAAG,CAAA;IAC3B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,KAAK,CAAC,QAA6B,EAAE,GAAW;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAA;IACvC,OAAO,KAAK,IAAI,SAAS,CAAA;AAC3B,CAAC;AACD,SAAS,SAAS,CAAoC,QAA6B,EAAE,GAAW,EAAE,MAAS;IACzG,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,CAAA;IACjE,OAAO,KAAkB,CAAA;AAC3B,CAAC;AACD,SAAS,YAAY,CAAC,QAA6B,EAAE,GAAW,EAAE,QAAiB;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IACnC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAA;AACjD,CAAC;AACD,SAAS,SAAS,CAAC,QAA6B,EAAE,GAAW;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC/E,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACtG,CAAC;AACD,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/H,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;AAC3G,CAAC;AACD,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAA;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAA;IACvF,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAA;IACtG,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/lib/skills/markets/adapters.d.ts

@@ -0,0 +1,8 @@
+import type { MarketSkillEntry, SkillMarketSource } from '../domain.js';
+export interface MarketRequest {
+    url: string;
+    init?: RequestInit;
+}
+export declare function marketRequest(source: SkillMarketSource): MarketRequest;
+export declare function parseMarketResponse(raw: unknown, source: SkillMarketSource): MarketSkillEntry[];
+//# sourceMappingURL=adapters.d.ts.map

package/lib/skills/markets/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../../src/skills/markets/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEvE,MAAM,WAAW,aAAa;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAA;CAAE;AAElE,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAGtE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,CAK/F"}

package/lib/skills/markets/adapters.js

@@ -0,0 +1,72 @@
+export function marketRequest(source) {
+    if (source.kind !== 'clawhub')
+        return { url: source.indexUrl };
+    return { url: source.indexUrl, init: { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ path: 'skills:listPublicPageV4', format: 'convex_encoded_json', args: [{ dir: 'desc', numItems: 100, sort: 'newest' }] }) } };
+}
+export function parseMarketResponse(raw, source) {
+    if (source.kind === 'dsh-index')
+        return parseDshIndex(raw, source);
+    if (source.kind === 'clawhub')
+        return parseClawHub(raw, source);
+    if (source.kind === 'loophub')
+        return parseLoopHub(raw, source);
+    return parseSkillHub(raw, source);
+}
+function parseClawHub(root, source) {
+    const rows = valueAt(root, ['value', 'page']) ?? valueAt(root, ['value', 'items']);
+    return bounded(rows).flatMap((row, index) => {
+        const skill = objectAt(row, 'skill');
+        const version = objectAt(row, 'latestVersion');
+        const slug = cleanId(textAt(skill, 'slug'));
+        const owner = cleanId(textAt(row, 'ownerHandle'));
+        if (!slug || !owner || skill.isSuspicious === true)
+            return [];
+        return [{ id: cleanId(`clawhub-${owner}-${slug}`) || `clawhub-${index}`, name: textAt(skill, 'displayName') || slug, description: textAt(skill, 'summary') || textAt(version, 'parsed', 'description') || 'ClawHub Skill', version: textAt(version, 'version') || '0.0.0', tags: stringList(skill.topics), skillUrl: `https://clawhub.ai/api/v1/download?slug=${encodeURIComponent(slug)}&version=${encodeURIComponent(textAt(version, 'version') || 'latest')}`, installKind: 'zip', sourceId: source.id }];
+    });
+}
+function parseLoopHub(root, source) {
+    return bounded(valueAt(root, ['data', 'items'])).flatMap((row, index) => {
+        const skillUrl = textAt(row, 'download_url');
+        if (!/^https:\/\/dl\.cocoloop\.cn\/bss\/skills\//.test(skillUrl))
+            return [];
+        const author = cleanId(textAt(row, 'author')) || 'community';
+        const name = textAt(row, 'name') || `LoopHub Skill ${index + 1}`;
+        return [{ id: cleanId(`loophub-${author}-${name}`) || `loophub-${index}`, name, description: textAt(row, 'brief') || textAt(row, 'subtitle') || 'LoopHub Skill', version: versionFromUrl(skillUrl), tags: [textAt(row, 'category'), textAt(row, 'security_level')].filter(Boolean), skillUrl, installKind: 'zip', sourceId: source.id }];
+    });
+}
+function parseSkillHub(root, source) {
+    return bounded(valueAt(root, ['data', 'skills'])).flatMap((row, index) => {
+        const namespace = objectAt(row, 'namespace');
+        const canonical = textAt(namespace, 'canonicalName');
+        const handle = cleanId(textAt(namespace, 'handle'));
+        const slug = cleanId(textAt(row, 'slug'));
+        if (!handle || !slug)
+            return [];
+        return [{ id: cleanId(`skillhub-${handle}-${slug}`) || `skillhub-${index}`, name: textAt(row, 'name') || canonical || slug, description: textAt(row, 'description_zh') || textAt(row, 'description') || 'SkillHub Skill', version: textAt(row, 'version') || '0.0.0', tags: bounded(valueAt(row, ['subCategories']), 12).map(item => textAt(item, 'name')).filter(Boolean), skillUrl: `https://api.skillhub.cn/api/v1/download?slug=${encodeURIComponent(slug)}`, installKind: 'zip', sourceId: source.id }];
+    });
+}
+function parseDshIndex(value, source) {
+    const entries = Array.isArray(value) ? value : object(value).skills;
+    if (!Array.isArray(entries) || entries.length > 2000)
+        throw new Error('Skill market index must contain at most 2000 skills');
+    const base = new URL(source.indexUrl);
+    return entries.map(item => {
+        const row = object(item);
+        const id = required(row.id, 'id', 120);
+        const skillUrl = new URL(required(row.skillUrl, 'skillUrl', 2000), base).toString();
+        const checksum = typeof row.checksum === 'string' && row.checksum.trim() ? row.checksum.trim() : undefined;
+        return { id, name: required(row.name, 'name', 120), description: required(row.description, 'description', 600), version: typeof row.version === 'string' ? row.version.slice(0, 80) : '0.0.0', tags: stringList(row.tags), skillUrl, installKind: 'markdown', ...(checksum ? { checksum } : {}), sourceId: source.id };
+    });
+}
+function bounded(value, max = 200) { return Array.isArray(value) ? value.slice(0, max).filter(item => typeof item === 'object' && item !== null && !Array.isArray(item)) : []; }
+function object(value) { return typeof value === 'object' && value !== null && !Array.isArray(value) ? value : {}; }
+function objectAt(value, key) { return object(object(value)[key]); }
+function valueAt(value, path) { let current = value; for (const key of path)
+    current = object(current)[key]; return current; }
+function textAt(value, ...path) { const result = valueAt(value, path); return typeof result === 'string' ? result.trim().slice(0, 600) : ''; }
+function stringList(value) { return Array.isArray(value) ? value.filter((item) => typeof item === 'string').map(item => item.trim().slice(0, 40)).filter(Boolean).slice(0, 20) : []; }
+function cleanId(value) { return value.trim().toLocaleLowerCase().replace(/[^a-z0-9._-]+/g, '-').replace(/^[._-]+|[._-]+$/g, '').slice(0, 120); }
+function required(value, label, max) { if (typeof value !== 'string' || !value.trim())
+    throw new Error(`${label} is required`); return value.trim().slice(0, max); }
+function versionFromUrl(url) { return url.match(/-(\d+\.\d+\.\d+)\.zip(?:$|\?)/)?.[1] ?? '0.0.0'; }
+//# sourceMappingURL=adapters.js.map

package/lib/skills/markets/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../src/skills/markets/adapters.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,aAAa,CAAC,MAAyB;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAA;AAC9P,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,MAAyB;IACzE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC/D,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAyB;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAClF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;QAC9F,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAC7D,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,IAAI,WAAW,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,2CAA2C,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9e,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAyB;IAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QAC5C,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,WAAW,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,iBAAiB,KAAK,GAAG,CAAC,EAAE,CAAA;QAC9H,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,WAAW,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,eAAe,EAAE,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1U,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAa,EAAE,MAAyB;IAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;QAClG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9F,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAA;QAC/B,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,YAAY,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,SAAS,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,gDAAgD,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9e,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,MAAyB;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAC5H,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACrJ,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;IACxT,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG,IAA+B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAA8B,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAC;AAChP,SAAS,MAAM,CAAC,KAAc,IAA6B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAC;AAChL,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAW,IAA6B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC;AAC7G,SAAS,OAAO,CAAC,KAAc,EAAE,IAAc,IAAa,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI;IAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,CAAA,CAAC,CAAC;AACzJ,SAAS,MAAM,CAAC,KAAc,EAAE,GAAG,IAAc,IAAY,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAC;AACxK,SAAS,UAAU,CAAC,KAAc,IAAc,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAC;AACxN,SAAS,OAAO,CAAC,KAAa,IAAY,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;AAChK,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW,IAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;IAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;AACpM,SAAS,cAAc,CAAC,GAAW,IAAY,OAAO,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAA,CAAC,CAAC"}

package/lib/skills/markets/builtin.d.ts

@@ -0,0 +1,10 @@
+import type { SkillMarketSource } from '../domain.js';
+export declare const BUILTIN_MARKET_IDS: {
+    readonly clawhub: "market-clawhub";
+    readonly loophub: "market-loophub";
+    readonly skillhub: "market-skillhub";
+};
+/** Public Skill rankings built into nomifun's Skill market. */
+export declare function builtinMarketSources(now?: number): SkillMarketSource[];
+export declare function mergeBuiltinMarketSources(sources: SkillMarketSource[], now?: number): SkillMarketSource[];
+//# sourceMappingURL=builtin.d.ts.map

package/lib/skills/markets/builtin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.d.ts","sourceRoot":"","sources":["../../../src/skills/markets/builtin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAErD,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAA;AAEV,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,GAAG,SAAa,GAAG,iBAAiB,EAAE,CAM1E;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,SAAa,GAAG,iBAAiB,EAAE,CAI7G"}

package/lib/skills/markets/builtin.js

@@ -0,0 +1,19 @@
+export const BUILTIN_MARKET_IDS = {
+    clawhub: 'market-clawhub',
+    loophub: 'market-loophub',
+    skillhub: 'market-skillhub',
+};
+/** Public Skill rankings built into nomifun's Skill market. */
+export function builtinMarketSources(now = Date.now()) {
+    return [
+        { id: BUILTIN_MARKET_IDS.clawhub, name: 'ClawHub', kind: 'clawhub', indexUrl: 'https://wry-manatee-359.convex.cloud/api/query', enabled: true, trusted: false, builtin: true, createdAt: now, updatedAt: now },
+        { id: BUILTIN_MARKET_IDS.loophub, name: 'LoopHub', kind: 'loophub', indexUrl: 'https://api.cocoloop.cn/api/v1/store/skills?page=1&page_size=100&sort=downloads&tab=overall', enabled: true, trusted: false, builtin: true, createdAt: now, updatedAt: now },
+        { id: BUILTIN_MARKET_IDS.skillhub, name: 'SkillHub', kind: 'skillhub', indexUrl: 'https://api.skillhub.cn/api/skills?page=1&pageSize=100&sortBy=score&order=desc', enabled: true, trusted: false, builtin: true, createdAt: now, updatedAt: now },
+    ];
+}
+export function mergeBuiltinMarketSources(sources, now = Date.now()) {
+    const builtins = builtinMarketSources(now);
+    const byId = new Map(sources.map(source => [source.id, source]));
+    return [...builtins.map(source => ({ ...source, enabled: byId.get(source.id)?.enabled ?? source.enabled })), ...sources.filter(source => !builtins.some(builtin => builtin.id === source.id))];
+}
+//# sourceMappingURL=builtin.js.map

package/lib/skills/markets/builtin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.js","sourceRoot":"","sources":["../../../src/skills/markets/builtin.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,iBAAiB;CACnB,CAAA;AAEV,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnD,OAAO;QACL,EAAE,EAAE,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,gDAAgD,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QAC9M,EAAE,EAAE,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,6FAA6F,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QAC3P,EAAE,EAAE,EAAE,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,gFAAgF,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;KAClP,CAAA;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA4B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACtF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAChE,OAAO,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAChM,CAAC"}

package/lib/skills/network.d.ts

@@ -0,0 +1,14 @@
+export interface RemoteTextRequest {
+    url: string;
+    maxBytes: number;
+    timeoutMs: number;
+    method?: string;
+    headers?: HeadersInit;
+    body?: string;
+    proxyUrl?: string;
+}
+/** A bounded HTTP client used by both market discovery and package installs. */
+export declare function requestRemoteText(input: RemoteTextRequest): Promise<string>;
+export declare function requestRemoteBytes(input: RemoteTextRequest): Promise<Uint8Array>;
+export declare function normalizeProxyUrl(value: unknown): string | undefined;
+//# sourceMappingURL=network.d.ts.map

package/lib/skills/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/skills/network.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gFAAgF;AAChF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAIhF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQpE"}

package/lib/skills/network.js

@@ -0,0 +1,174 @@
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { connect as tlsConnect } from 'node:tls';
+const MAX_REDIRECTS = 5;
+/** A bounded HTTP client used by both market discovery and package installs. */
+export async function requestRemoteText(input) {
+    return new TextDecoder().decode(await requestRemoteBytes(input));
+}
+export function requestRemoteBytes(input) {
+    return input.proxyUrl
+        ? requestThroughHttpProxy(input, 0)
+        : requestDirect(input);
+}
+export function normalizeProxyUrl(value) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    if (typeof value !== 'string')
+        throw new Error('proxyUrl must be a string');
+    const proxy = new URL(value.trim());
+    if (proxy.protocol !== 'http:')
+        throw new Error('Skill 市场代理目前仅支持 http:// 地址');
+    if (proxy.username || proxy.password)
+        throw new Error('Skill 市场代理地址不能包含账号或密码');
+    if (proxy.pathname !== '/' || proxy.search || proxy.hash)
+        throw new Error('Skill 市场代理地址不能包含路径、查询参数或片段');
+    return proxy.toString();
+}
+async function requestDirect(input) {
+    const response = await fetch(input.url, {
+        ...(input.method ? { method: input.method } : {}),
+        ...(input.headers ? { headers: input.headers } : {}),
+        ...(input.body !== undefined ? { body: input.body } : {}),
+        signal: AbortSignal.timeout(input.timeoutMs),
+    });
+    if (!response.ok)
+        throw new Error(`HTTP ${response.status} while fetching ${new URL(input.url).host}`);
+    const advertised = Number(response.headers.get('content-length') ?? 0);
+    if (advertised > input.maxBytes)
+        throw new Error('Remote content exceeds the size limit');
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.byteLength > input.maxBytes)
+        throw new Error('Remote content exceeds the size limit');
+    return bytes;
+}
+async function requestThroughHttpProxy(input, redirects) {
+    if (redirects > MAX_REDIRECTS)
+        throw new Error('Skill market request exceeded the redirect limit');
+    const target = new URL(input.url);
+    const proxy = new URL(normalizeProxyUrl(input.proxyUrl));
+    const response = target.protocol === 'https:'
+        ? await tunnelHttps(target, proxy, input)
+        : await proxyHttp(target, proxy, input);
+    const location = response.headers.location;
+    if (location && [301, 302, 303, 307, 308].includes(response.statusCode ?? 0)) {
+        response.resume();
+        const switchToGet = response.statusCode === 303 || ((response.statusCode === 301 || response.statusCode === 302) && input.method === 'POST');
+        if (switchToGet) {
+            const { body: _body, method: _method, ...rest } = input;
+            return requestThroughHttpProxy({ ...rest, method: 'GET', url: new URL(location, target).toString() }, redirects + 1);
+        }
+        return requestThroughHttpProxy({ ...input, url: new URL(location, target).toString() }, redirects + 1);
+    }
+    return readBounded(response, input.maxBytes, target.host);
+}
+function proxyHttp(target, proxy, input) {
+    const headers = requestHeaders(input.headers, target.host, input.body);
+    return issue(httpRequest, {
+        hostname: proxy.hostname,
+        port: proxy.port || 80,
+        method: input.method ?? 'GET',
+        path: target.toString(),
+        headers,
+    }, input.body, input.timeoutMs);
+}
+function tunnelHttps(target, proxy, input) {
+    return new Promise((resolve, reject) => {
+        const targetPort = Number(target.port || 443);
+        const connectRequest = httpRequest({
+            hostname: proxy.hostname,
+            port: proxy.port || 80,
+            method: 'CONNECT',
+            path: `${target.hostname}:${targetPort}`,
+            headers: { host: `${target.hostname}:${targetPort}` },
+        });
+        const fail = (error) => reject(networkError(error));
+        connectRequest.setTimeout(input.timeoutMs, () => connectRequest.destroy(new Error('Skill market proxy connection timed out')));
+        connectRequest.on('error', fail);
+        connectRequest.once('connect', (response, socket, head) => {
+            if (response.statusCode !== 200) {
+                socket.destroy();
+                reject(new Error(`Skill market proxy CONNECT returned HTTP ${response.statusCode ?? 0}`));
+                return;
+            }
+            // CONNECT exposes the underlying socket separately from the TLS wrapper.
+            // Some proxies reset that raw socket during package downloads; keep an
+            // error consumer attached for the socket's full lifetime so a failed
+            // install cannot become an uncaught process-level error.
+            socket.on('error', fail);
+            if (head.byteLength > 0)
+                socket.unshift(head);
+            const secureSocket = tlsConnect({ socket, servername: target.hostname });
+            secureSocket.setTimeout(input.timeoutMs, () => secureSocket.destroy(new Error('Skill market TLS connection timed out')));
+            secureSocket.on('error', fail);
+            secureSocket.once('secureConnect', () => {
+                const headers = requestHeaders(input.headers, target.host, input.body);
+                void issue(httpsRequest, {
+                    hostname: target.hostname,
+                    port: targetPort,
+                    method: input.method ?? 'GET',
+                    path: `${target.pathname}${target.search}`,
+                    headers,
+                    agent: false,
+                    createConnection: () => secureSocket,
+                }, input.body, input.timeoutMs).then(resolve, reject);
+            });
+        });
+        connectRequest.end();
+    });
+}
+function issue(request, options, body, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const outgoing = request(options, resolve);
+        outgoing.setTimeout(timeoutMs, () => outgoing.destroy(new Error('Skill market request timed out')));
+        outgoing.on('error', error => reject(networkError(error)));
+        if (body)
+            outgoing.write(body);
+        outgoing.end();
+    });
+}
+function requestHeaders(value, host, body) {
+    const headers = Object.fromEntries(new Headers(value).entries());
+    headers.host = host;
+    if (body !== undefined)
+        headers['content-length'] = String(Buffer.byteLength(body));
+    return headers;
+}
+function readBounded(response, limit, host) {
+    return new Promise((resolve, reject) => {
+        if ((response.statusCode ?? 0) < 200 || (response.statusCode ?? 0) >= 300) {
+            response.resume();
+            reject(new Error(`HTTP ${response.statusCode ?? 0} while fetching ${host}`));
+            return;
+        }
+        const advertised = Number(response.headers['content-length'] ?? 0);
+        if (advertised > limit) {
+            response.destroy();
+            reject(new Error('Remote content exceeds the size limit'));
+            return;
+        }
+        const chunks = [];
+        let total = 0;
+        response.on('data', (chunk) => {
+            total += chunk.byteLength;
+            if (total > limit) {
+                response.destroy(new Error('Remote content exceeds the size limit'));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        response.once('end', () => resolve(Buffer.concat(chunks)));
+        response.on('error', error => reject(networkError(error)));
+    });
+}
+function networkError(error) {
+    const code = error?.code;
+    if (code === 'ECONNRESET')
+        return new Error('Skill 市场代理连接被中断，请检查代理后重试');
+    if (code === 'ECONNREFUSED')
+        return new Error('无法连接 Skill 市场代理，请确认地址和端口可用');
+    if (code === 'ENOTFOUND')
+        return new Error('无法解析 Skill 市场或代理地址，请检查网络配置');
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=network.js.map

package/lib/skills/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/skills/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAA6C,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAA;AAEhD,MAAM,aAAa,GAAG,CAAC,CAAA;AAYvB,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAwB;IAC9D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,QAAQ;QACnB,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC9E,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACvG,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;AACzB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAwB;IACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;KAC7C,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,mBAAmB,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACtG,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;IACtE,IAAI,UAAU,GAAG,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAC1D,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAAwB,EAAE,SAAiB;IAChF,IAAI,SAAS,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC3C,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QACzC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAA;IAC1C,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7E,QAAQ,CAAC,MAAM,EAAE,CAAA;QACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAC5I,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;YACvD,OAAO,uBAAuB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;QACtH,CAAC;QACD,OAAO,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;IACxG,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,MAAW,EAAE,KAAU,EAAE,KAAwB;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IACtE,OAAO,KAAK,CAAC,WAAW,EAAE;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QAC7B,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,OAAO;KACR,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAW,EAAE,KAAU,EAAE,KAAwB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAA;QAC7C,MAAM,cAAc,GAAG,WAAW,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE;YACxC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE,EAAE;SACtD,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAClE,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAA;QAC9H,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAChC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACxD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;gBACzF,OAAM;YACR,CAAC;YACD,yEAAyE;YACzE,uEAAuE;YACvE,qEAAqE;YACrE,yDAAyD;YACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACxB,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;YACxE,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAA;YACxH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC9B,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;gBACtC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBACtE,KAAK,KAAK,CAAC,YAAY,EAAE;oBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;oBAC7B,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;oBAC1C,OAAO;oBACP,KAAK,EAAE,KAAK;oBACZ,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY;iBACrC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,cAAc,CAAC,GAAG,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,KAAK,CACZ,OAA2B,EAC3B,OAAuB,EACvB,IAAwB,EACxB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1C,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAA;QACnG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1D,IAAI,IAAI;YAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,QAAQ,CAAC,GAAG,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAY,EAAE,IAAwB;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;IACnB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IACnF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB,EAAE,KAAa,EAAE,IAAY;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YAC1E,QAAQ,CAAC,MAAM,EAAE,CAAA;YACjB,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,UAAU,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,CAAA;YAClB,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACpC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;gBACpE,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAA;IAC/D,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACvE,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC3E,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACxE,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC"}

package/lib/skills/repository.d.ts

@@ -0,0 +1,17 @@
+import type { LoadedSkill, PartnerSkill, SkillSourceKind } from './domain.js';
+export declare class SkillRepository {
+    readonly root: string;
+    constructor(root: string);
+    initialize(): Promise<void>;
+    read(skill: PartnerSkill): Promise<LoadedSkill>;
+    install(input: {
+        id: string;
+        document: string;
+        source: SkillSourceKind;
+        sourceId?: string;
+        trusted: boolean;
+        now?: number;
+    }): Promise<PartnerSkill>;
+    remove(skill: PartnerSkill): Promise<void>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/lib/skills/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/skills/repository.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAI7E,qBAAa,eAAe;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;IAE3B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ/C,OAAO,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IA+BnJ,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAKjD"}

package/lib/skills/repository.js

@@ -0,0 +1,76 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { loadSkill, skillMetadata } from './loader.js';
+const SAFE_ID = /^[a-z0-9][a-z0-9._-]{0,119}$/i;
+export class SkillRepository {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    async initialize() {
+        await mkdir(this.root, { recursive: true, mode: 0o700 });
+    }
+    async read(skill) {
+        assertInside(this.root, skill.rootPath);
+        return loadSkill({
+            id: skill.id, rootPath: skill.rootPath, source: skill.source, ...(skill.sourceId ? { sourceId: skill.sourceId } : {}),
+            trusted: skill.trusted, installedAt: skill.installedAt, updatedAt: skill.updatedAt,
+        });
+    }
+    async install(input) {
+        if (!SAFE_ID.test(input.id))
+            throw new Error('Skill id is invalid');
+        if (Buffer.byteLength(input.document) > 512 * 1024)
+            throw new Error('SKILL.md exceeds the 512 KiB limit');
+        await this.initialize();
+        const now = input.now ?? Date.now();
+        const target = join(this.root, input.id);
+        const temporary = join(this.root, `.${input.id}.${randomUUID()}.tmp`);
+        const backup = join(this.root, `.${input.id}.${randomUUID()}.backup`);
+        await mkdir(temporary, { recursive: false, mode: 0o700 });
+        try {
+            await writeFile(join(temporary, 'SKILL.md'), input.document, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+            const loaded = await loadSkill({
+                id: input.id, rootPath: temporary, source: input.source, ...(input.sourceId ? { sourceId: input.sourceId } : {}),
+                trusted: input.trusted, installedAt: now, updatedAt: now,
+            });
+            let replaced = false;
+            try {
+                await rename(target, backup);
+                replaced = true;
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+            try {
+                await rename(temporary, target);
+            }
+            catch (error) {
+                if (replaced)
+                    await rename(backup, target).catch(() => { });
+                throw error;
+            }
+            await rm(backup, { recursive: true, force: true });
+            return { ...skillMetadata(loaded), rootPath: target };
+        }
+        finally {
+            await rm(temporary, { recursive: true, force: true }).catch(() => { });
+        }
+    }
+    async remove(skill) {
+        assertInside(this.root, skill.rootPath);
+        await rm(skill.rootPath, { recursive: true, force: true });
+    }
+}
+function assertInside(root, path) {
+    const base = resolve(root);
+    const candidate = resolve(path);
+    const rel = relative(base, candidate);
+    if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel))
+        throw new Error('Skill path escapes the repository');
+    if (dirname(candidate) !== base)
+        throw new Error('Skill path must be a direct repository child');
+}
+//# sourceMappingURL=repository.js.map

package/lib/skills/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/skills/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGtD,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAE/C,MAAM,OAAO,eAAe;IACL;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAmB;QAC5B,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,SAAS,CAAC;YACf,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;SACnF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmH;QAC/H,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACnE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACzG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,SAAS,CAAC,CAAA;QACrE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;aACzD,CAAC,CAAA;YACF,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACnE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;YACrE,CAAC;YACD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAAC,CAAC;YACvC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,QAAQ;oBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAC1D,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB;QAC9B,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;CAEF;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACvH,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AAClG,CAAC"}