@marifold/core 0.65.0 → 0.67.0

package/dist/agent/tools/SkillAppTools.js

@@ -0,0 +1,402 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillAppManagementTool = exports.SkillAppContextTool = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const MarifoldError_1 = require("../../errors/MarifoldError");
+const ToolRegistry_1 = require("../ToolRegistry");
+const SAFE_APP_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const MAX_FILES = 32;
+const MAX_TOTAL_BYTES = 512 * 1024;
+const V1_TEMPLATE = `import {
+  App, Button, Column, Download, Markdown, State, Textarea, TextResult,
+  defineSkillApp, registerModel, registerSkill, useSkill,
+} from '@marifold/core';
+
+const input = State('');
+const result = State('');
+const model = registerModel('provider/model', { think: false });
+const skill = registerSkill('skill-name', { result: TextResult({ trim: true }) });
+const run = useSkill(model, skill, {
+  parameters: { request: input },
+  output: result,
+  memory: false,
+  history: false,
+  profileContext: false,
+});
+
+export default defineSkillApp({
+  app: { name: 'app-name', title: 'App title', version: '1.0.0', description: 'Focused purpose.' },
+  ui: App([Column([
+    Textarea('Input', input),
+    Button('Run', { trigger: run, emphasis: 'primary' }),
+    Markdown('Result', result),
+    Download('Download result', result, { filename: 'result.md', mediaType: 'text/markdown;charset=utf-8' }),
+  ])]),
+});`;
+const V2_TEMPLATE = `import {
+  App, Button, Column, State, Textarea, TextResult,
+  defineSkillApp, registerProfile, useProfileSkill,
+} from '@marifold/core';
+
+const input = State('');
+const result = State('');
+const profile = registerProfile('profile-name', { memory: false, history: false });
+const run = useProfileSkill(profile, 'skill-name', {
+  input,
+  output: result,
+  result: TextResult({ trim: true }),
+});
+
+export default defineSkillApp({
+  app: { name: 'app-name', title: 'App title', version: '1.0.0', description: 'Focused purpose.' },
+  ui: App([Column([
+    Textarea('Input', input),
+    Button('Run', { trigger: run, emphasis: 'primary' }),
+    Textarea('Result', result, { editable: false, copyable: true }),
+  ])]),
+});`;
+/** Version-matched authoring context for the protected SkillApp builder. */
+class SkillAppContextTool {
+    options;
+    kind = 'read';
+    definition = {
+        name: 'inspect_skill_apps',
+        description: [
+            'Inspect the current Marifold SkillApp authoring environment.',
+            'Returns the active profile, existing Apps, available profiles and their effective Skills, and the supported static component contract.',
+            'When to use: before designing or generating a SkillApp.',
+            'When NOT to use: ordinary Skill execution or unrelated project inspection. It never changes files.',
+        ].join(' '),
+        parameters: { type: 'object', properties: {} },
+    };
+    constructor(options) {
+        this.options = options;
+    }
+    summarizeCall() {
+        return 'inspect SkillApp components, profiles, Skills, and Apps';
+    }
+    async execute() {
+        const profiles = this.options.listProfiles().map(profile => ({
+            name: profile.name,
+            ...(profile.displayName ? { displayName: profile.displayName } : {}),
+            skills: this.options.listSkills(profile.name).map(skill => ({
+                name: skill.name,
+                description: skill.description,
+                mode: skill.mode ?? 'profile-default',
+                variables: skill.variables.map(variable => ({
+                    name: variable.name,
+                    required: variable.required,
+                    ...(variable.description ? { description: variable.description } : {}),
+                    ...(variable.default !== undefined ? { default: variable.default } : {}),
+                })),
+            })),
+        }));
+        return {
+            content: JSON.stringify({
+                activeProfile: this.options.activeProfile,
+                appsDirectory: this.options.appsDir,
+                apps: this.options.listApps(),
+                profiles,
+                contract: {
+                    schemas: ['marifold.skillapp.v1', 'marifold.skillapp.v2'],
+                    declarations: [
+                        'State(initialText)',
+                        'AttachmentState()',
+                        "registerModel('provider/model', { think? })",
+                        "registerProfile('profile-name', { model?, think?, memory?, history? })",
+                        "registerSkill('skill-name', { result: TextResult({ trim? }) })",
+                        'TextResult({ trim? })',
+                    ],
+                    layout: ['App', 'Row', 'Column', 'Spacer'],
+                    form: ['Textarea', 'Select'],
+                    resources: ['Attachments'],
+                    outputs: [
+                        'Markdown(label, state, { showLabel?, grow?, copyable?, sourceToggle?, placeholder? })',
+                        'Download(label, state, { filename, mediaType?, description?, showLabel?, grow? })',
+                    ],
+                    actions: ['Button'],
+                    operations: [
+                        'useSkill(model, skill, { parameters, output, memory: false, history: false, profileContext: false })',
+                        'useProfileSkill(profile, skillNameOrState, { skills?, input?, attachments?, stripSkillName?, parameters?, output, result, interactive? })',
+                        'trigger(operation, { onChange, debounce?, concurrency?: "latest" })',
+                    ],
+                    interactive: 'Set useProfileSkill(..., { interactive: true }) for an Agent Skill that may ask questions or request approval.',
+                    bundle: {
+                        common: [
+                            'skillapp.ts is required; app.name and the bundle name must be the same kebab-case value',
+                            'replace the example app, profile, model, Skill, labels, parameter names, and filenames with the requested design',
+                        ],
+                        v1: [
+                            'use registerModel + registerSkill + useSkill',
+                            'include skills/<skill-name>/SKILL.md whose frontmatter name matches registerSkill',
+                            'map every required SKILL.md variable to a State in useSkill.parameters',
+                        ],
+                        v2: [
+                            'use registerProfile + useProfileSkill and one Skill from that profile effective catalog',
+                            'do not copy the profile Skill into the App bundle',
+                        ],
+                    },
+                    templates: {
+                        v1: V1_TEMPLATE,
+                        v1Skill: '---\\nname: skill-name\\nvariables:\\n  - name: request\\n    required: true\\n---\\nPerform the focused task and return only the requested result.\\n\\n{{request}}',
+                        v2: V2_TEMPLATE,
+                    },
+                    constraints: [
+                        'skillapp.ts is statically compiled and never executed',
+                        'no functions, callbacks, conditions, loops, arbitrary imports, HTML, CSS, network calls, or direct filesystem writes',
+                        'one interactive operation runs exclusively per App instance',
+                        'interactive operations cannot use automatic triggers',
+                        'Markdown and Download may bind the same text output State; Download creates the file in the renderer without filesystem access',
+                        'each Download is one text file with a static filename; multiple components make multiple static downloads, while binary files, per-run filenames, and dynamic file collections are unsupported',
+                        'v1 uses an app-local chat Skill and registered model; v2 registers an existing profile and its effective Skill',
+                        'inspect_skill_apps is authoritative; do not probe App directories or arbitrary host paths for examples',
+                    ],
+                },
+            }, null, 2),
+            summary: `inspected ${profiles.length} profiles and ${this.options.listApps().length} Apps`,
+        };
+    }
+}
+exports.SkillAppContextTool = SkillAppContextTool;
+/** Confined, validated, atomic mutation boundary for generated App bundles. */
+class SkillAppManagementTool {
+    options;
+    kind = 'write';
+    definition = {
+        name: 'manage_skill_app',
+        description: [
+            'Create or update exactly one global Marifold SkillApp bundle from generated text files.',
+            'The complete staged bundle is statically compiled and validated before an atomic install.',
+            'When to use: after inspecting the SkillApp environment and resolving essential design decisions.',
+            'When NOT to use: arbitrary file writes, unvalidated application code, or implicit replacement after a name collision.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                action: { type: 'string', enum: ['create', 'update'] },
+                name: { type: 'string', description: 'Kebab-case App and bundle name.' },
+                files: {
+                    type: 'array',
+                    description: 'Complete generated text files relative to the App bundle, including skillapp.ts.',
+                    items: {
+                        type: 'object',
+                        properties: {
+                            path: { type: 'string' },
+                            content: { type: 'string' },
+                        },
+                        required: ['path', 'content'],
+                    },
+                },
+            },
+            required: ['action', 'name', 'files'],
+        },
+    };
+    failedAttempts = 0;
+    lastFailure;
+    constructor(options) {
+        this.options = options;
+    }
+    summarizeCall(input) {
+        const action = input.action === 'update' ? 'update' : 'create';
+        const name = typeof input.name === 'string' ? input.name : '<missing App>';
+        return `${action} SkillApp ${name}`;
+    }
+    assessRisk(input) {
+        const name = typeof input.name === 'string' && SAFE_APP_NAME.test(input.name)
+            ? input.name
+            : '<invalid-app>';
+        if (this.failedAttempts >= 3) {
+            return {
+                blocked: true,
+                escalate: false,
+                persistable: false,
+                reason: `three SkillApp validation attempts failed; stop and report the last error${this.lastFailure ? `: ${this.lastFailure}` : ''}`,
+                targetPath: path.join(this.options.appsDir, name),
+            };
+        }
+        return {
+            escalate: true,
+            persistable: false,
+            reason: 'installing a persistent Marifold App bundle',
+            targetPath: path.join(this.options.appsDir, name),
+        };
+    }
+    async execute(input, _ctx) {
+        let stageRoot;
+        try {
+            const action = (0, ToolRegistry_1.requireStringInput)(input, 'action', 'manage_skill_app');
+            if (action !== 'create' && action !== 'update') {
+                throw MarifoldError_1.MarifoldError.agentToolInvalid(`Unsupported SkillApp action '${action}'.`, 'manage_skill_app');
+            }
+            const name = (0, ToolRegistry_1.requireStringInput)(input, 'name', 'manage_skill_app');
+            if (!SAFE_APP_NAME.test(name)) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`Invalid App name '${name}'. Use kebab-case.`);
+            }
+            const files = bundleFiles(input.files);
+            if (!files.some(file => file.path === 'skillapp.ts')) {
+                throw MarifoldError_1.MarifoldError.appInvalid("A generated App bundle must include 'skillapp.ts'.");
+            }
+            fs.mkdirSync(this.options.appsDir, { recursive: true });
+            const target = path.join(this.options.appsDir, name);
+            const exists = fs.existsSync(target);
+            if (action === 'create' && exists) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`App '${name}' already exists. Use update only after the user explicitly requests replacing it.`);
+            }
+            if (action === 'update' && !exists) {
+                throw MarifoldError_1.MarifoldError.appNotFound(name);
+            }
+            if (exists && (!fs.lstatSync(target).isDirectory() || fs.lstatSync(target).isSymbolicLink())) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`App target '${name}' is not a regular bundle directory.`);
+            }
+            stageRoot = fs.mkdtempSync(path.join(this.options.appsDir, '.skillapp-stage-'));
+            const stagedBundle = path.join(stageRoot, name);
+            fs.mkdirSync(stagedBundle, { recursive: true });
+            for (const file of files) {
+                const destination = path.join(stagedBundle, file.path);
+                fs.mkdirSync(path.dirname(destination), { recursive: true });
+                fs.writeFileSync(destination, file.content, 'utf8');
+            }
+            const definition = this.options.createStore(stageRoot).require(name);
+            const installedFiles = listRegularFiles(stagedBundle);
+            installAtomically(stagedBundle, target, action);
+            const effect = {
+                kind: 'app_installed',
+                appName: name,
+                title: definition.app.title,
+                action: action === 'create' ? 'created' : 'updated',
+                files: installedFiles,
+            };
+            this.options.onInstalled?.(effect);
+            this.failedAttempts = 0;
+            this.lastFailure = undefined;
+            return {
+                content: `${action === 'create' ? 'Created' : 'Updated'} SkillApp '${definition.app.title}' (${name}) with ${installedFiles.length} validated ${installedFiles.length === 1 ? 'file' : 'files'}. The service does not need a restart.`,
+                summary: `${effect.action} SkillApp ${name}`,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.failedAttempts += 1;
+            this.lastFailure = message;
+            return {
+                content: `SkillApp management failed: ${message}${this.failedAttempts >= 3 ? ' No further installation attempts are allowed in this run; report this error to the user.' : ''}`,
+                summary: `SkillApp validation failed: ${message.length > 300 ? `${message.slice(0, 297)}...` : message}`,
+                isError: true,
+            };
+        }
+        finally {
+            if (stageRoot)
+                fs.rmSync(stageRoot, { recursive: true, force: true });
+        }
+    }
+}
+exports.SkillAppManagementTool = SkillAppManagementTool;
+function bundleFiles(value) {
+    if (!Array.isArray(value) || value.length < 1 || value.length > MAX_FILES) {
+        throw MarifoldError_1.MarifoldError.agentToolInvalid(`manage_skill_app.files must contain 1-${MAX_FILES} text files.`, 'manage_skill_app');
+    }
+    const seen = new Set();
+    let total = 0;
+    return value.map((entry, index) => {
+        if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+            throw MarifoldError_1.MarifoldError.agentToolInvalid(`manage_skill_app.files[${index}] must be an object.`, 'manage_skill_app');
+        }
+        const file = entry;
+        const relative = safeBundlePath((0, ToolRegistry_1.requireStringInput)(file, 'path', 'manage_skill_app'));
+        if (seen.has(relative))
+            throw MarifoldError_1.MarifoldError.appInvalid(`Duplicate App file '${relative}'.`);
+        seen.add(relative);
+        if (typeof file.content !== 'string') {
+            throw MarifoldError_1.MarifoldError.agentToolInvalid(`manage_skill_app.files[${index}].content must be text.`, 'manage_skill_app');
+        }
+        total += Buffer.byteLength(file.content, 'utf8');
+        if (total > MAX_TOTAL_BYTES) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Generated App bundle exceeds ${MAX_TOTAL_BYTES / 1024} KiB.`);
+        }
+        return { path: relative, content: file.content };
+    });
+}
+function safeBundlePath(value) {
+    if (value.includes('\0'))
+        throw MarifoldError_1.MarifoldError.appInvalid('App file paths cannot contain null bytes.');
+    const portable = value.replace(/\\/g, '/');
+    const parts = portable.split('/');
+    if (portable.startsWith('/') || /^[a-z]:\//i.test(portable)
+        || parts.some(part => part === '' || part === '.' || part === '..')) {
+        throw MarifoldError_1.MarifoldError.appInvalid(`Unsafe App file path '${value}'.`);
+    }
+    return parts.join(path.sep);
+}
+function listRegularFiles(root) {
+    const files = [];
+    const visit = (directory) => {
+        for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+            const source = path.join(directory, entry.name);
+            if (entry.isDirectory())
+                visit(source);
+            else if (entry.isFile())
+                files.push(path.relative(root, source).split(path.sep).join('/'));
+        }
+    };
+    visit(root);
+    return files.sort();
+}
+function installAtomically(stagedBundle, target, action) {
+    if (action === 'create') {
+        fs.renameSync(stagedBundle, target);
+        return;
+    }
+    const backup = path.join(path.dirname(target), `.skillapp-backup-${path.basename(target)}-${(0, crypto_1.randomUUID)()}`);
+    fs.renameSync(target, backup);
+    try {
+        fs.renameSync(stagedBundle, target);
+    }
+    catch (error) {
+        if (!fs.existsSync(target) && fs.existsSync(backup))
+            fs.renameSync(backup, target);
+        throw error;
+    }
+    try {
+        fs.rmSync(backup, { recursive: true, force: true });
+    }
+    catch {
+        // The validated target is already installed; a stale hidden backup is safer
+        // than reporting a false installation failure or disturbing the new bundle.
+    }
+}
+//# sourceMappingURL=SkillAppTools.js.map

package/dist/agent/tools/SkillAppTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillAppTools.js","sourceRoot":"","sources":["../../../src/agent/tools/SkillAppTools.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,mCAAoC;AAIpC,8DAA2D;AAE3D,kDAMyB;AAEzB,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AAEnC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;IAyBhB,CAAC;AAEL,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;IAqBhB,CAAC;AAsBL,4EAA4E;AAC5E;IAa+B,OAAO;IAZ3B,IAAI,GAAG,MAAe,CAAC;IACvB,UAAU,GAAG;QACpB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE;YACX,8DAA8D;YAC9D,wIAAwI;YACxI,yDAAyD;YACzD,oGAAoG;SACrG,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;KAC/C,CAAC;IAEF,YAA6B,OAAmC;uBAAnC,OAAO;IAA+B,CAAC;IAEpE,aAAa;QACX,OAAO,yDAAyD,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,iBAAiB;gBACrC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC1C,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE,CAAC,CAAC;aACJ,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;QACJ,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBACzC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBACnC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAC7B,QAAQ;gBACR,QAAQ,EAAE;oBACR,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;oBACzD,YAAY,EAAE;wBACZ,oBAAoB;wBACpB,mBAAmB;wBACnB,6CAA6C;wBAC7C,wEAAwE;wBACxE,gEAAgE;wBAChE,uBAAuB;qBACxB;oBACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBAC1C,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;oBAC5B,SAAS,EAAE,CAAC,aAAa,CAAC;oBAC1B,OAAO,EAAE;wBACP,uFAAuF;wBACvF,mFAAmF;qBACpF;oBACD,OAAO,EAAE,CAAC,QAAQ,CAAC;oBACnB,UAAU,EAAE;wBACV,sGAAsG;wBACtG,2IAA2I;wBAC3I,qEAAqE;qBACtE;oBACD,WAAW,EAAE,gHAAgH;oBAC7H,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,yFAAyF;4BACzF,kHAAkH;yBACnH;wBACD,EAAE,EAAE;4BACF,8CAA8C;4BAC9C,mFAAmF;4BACnF,wEAAwE;yBACzE;wBACD,EAAE,EAAE;4BACF,yFAAyF;4BACzF,mDAAmD;yBACpD;qBACF;oBACD,SAAS,EAAE;wBACT,EAAE,EAAE,WAAW;wBACf,OAAO,EAAE,sKAAsK;wBAC/K,EAAE,EAAE,WAAW;qBAChB;oBACD,WAAW,EAAE;wBACX,uDAAuD;wBACvD,sHAAsH;wBACtH,6DAA6D;wBAC7D,sDAAsD;wBACtD,gIAAgI;wBAChI,gMAAgM;wBAChM,gHAAgH;wBAChH,wGAAwG;qBACzG;iBACF;aACF,EAAE,IAAI,EAAE,CAAC,CAAC;YACX,OAAO,EAAE,aAAa,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,OAAO;SAC5F,CAAC;IACJ,CAAC;CACF;;AAaD,+EAA+E;AAC/E;IAkC+B,OAAO;IAjC3B,IAAI,GAAG,OAAgB,CAAC;IACxB,UAAU,GAAG;QACpB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE;YACX,yFAAyF;YACzF,2FAA2F;YAC3F,kGAAkG;YAClG,uHAAuH;SACxH,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;gBACxE,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,kFAAkF;oBAC/F,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC5B;wBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;qBAC9B;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;SACtC;KACF,CAAC;IACM,cAAc,GAAG,CAAC,CAAC;IACnB,WAAW,CAAU;IAE7B,YAA6B,OAAsC;uBAAtC,OAAO;IAAkC,CAAC;IAEvE,aAAa,CAAC,KAAgC;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3E,OAAO,GAAG,MAAM,aAAa,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,UAAU,CAAC,KAAgC;QACzC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3E,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,eAAe,CAAC;QACpB,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,4EAA4E,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrI,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;aAClD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,6CAA6C;YACrD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,IAA0B;QACxE,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YACvE,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,6BAAa,CAAC,gBAAgB,CAAC,gCAAgC,MAAM,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,IAAI,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACnE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,6BAAa,CAAC,UAAU,CAAC,qBAAqB,IAAI,oBAAoB,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;gBACrD,MAAM,6BAAa,CAAC,UAAU,CAAC,oDAAoD,CAAC,CAAC;YACvF,CAAC;YAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;gBAClC,MAAM,6BAAa,CAAC,UAAU,CAAC,QAAQ,IAAI,oFAAoF,CAAC,CAAC;YACnI,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,6BAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;gBAC7F,MAAM,6BAAa,CAAC,UAAU,CAAC,eAAe,IAAI,sCAAsC,CAAC,CAAC;YAC5F,CAAC;YAED,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,cAAc,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtD,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAA4B;gBACtC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK;gBAC3B,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACnD,KAAK,EAAE,cAAc;aACtB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,cAAc,UAAU,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,UAAU,cAAc,CAAC,MAAM,cAAc,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,wCAAwC;gBACtO,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,aAAa,IAAI,EAAE;aAC7C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,+BAA+B,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,CAAC,2FAA2F,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/K,OAAO,EAAE,+BAA+B,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE;gBACxG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS;gBAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;CACF;;AAED,SAAS,WAAW,CAAC,KAA4B;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC1E,MAAM,6BAAa,CAAC,gBAAgB,CAAC,yCAAyC,SAAS,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,6BAAa,CAAC,gBAAgB,CAAC,0BAA0B,KAAK,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,IAAI,GAAG,KAAkC,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAA,iCAAkB,EAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,6BAAa,CAAC,UAAU,CAAC,uBAAuB,QAAQ,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,6BAAa,CAAC,gBAAgB,CAAC,0BAA0B,KAAK,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;QACrH,CAAC;QACD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;YAC5B,MAAM,6BAAa,CAAC,UAAU,CAAC,gCAAgC,eAAe,GAAG,IAAI,OAAO,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,6BAAa,CAAC,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;WACtD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,6BAAa,CAAC,UAAU,CAAC,yBAAyB,KAAK,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBAClC,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB,EAAE,MAAc,EAAE,MAA2B;IAC1F,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAA,mBAAU,GAAE,EAAE,CAAC,CAAC;IAC5G,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,4EAA4E;IAC9E,CAAC;AACH,CAAC"}

package/dist/app/AppStore.d.ts

@@ -1,14 +1,24 @@
+import type { MarifoldSkill } from '../skill/SkillSchema';
 import type { SkillAppDefinition } from './SkillAppSchema';
+export interface AppStoreOptions {
+    /** Resolve exactly as a normal invocation from this profile: profile Skills
+     * shadow global Skills. Runtime wiring also validates that the profile exists. */
+    resolveProfileSkill?: (profile: string, skillName: string) => MarifoldSkill | undefined;
+}
 /** Global App bundles under `<appsDir>/<name>/skillapp.ts`. Invalid bundles
  * are skipped by list(); get() reports their exact validation failure. */
 export declare class AppStore {
     private readonly directory;
-    constructor(directory: string);
+    private readonly options;
+    constructor(directory: string, options?: AppStoreOptions);
     list(): SkillAppDefinition[];
     get(name: string): SkillAppDefinition | undefined;
     require(name: string): SkillAppDefinition;
     /** Resolve one v1 app-local Skill without profile/global fallback. */
     requireLocalSkillSource(appName: string, skillName: string): string;
+    requireProfileSkill(profile: string, skillName: string): MarifoldSkill;
     private validateLocalSkills;
+    private validateProfileSkills;
+    private validateOperationBindings;
 }
 //# sourceMappingURL=AppStore.d.ts.map

package/dist/app/AppStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppStore.d.ts","sourceRoot":"","sources":["../../src/app/AppStore.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAK3D;0EAC0E;AAC1E,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAtC,YAA6B,SAAS,EAAE,MAAM,EAAI;IAElD,IAAI,IAAI,kBAAkB,EAAE,CAa3B;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAehD;IAED,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAIxC;IAED,sEAAsE;IACtE,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CASlE;IAED,OAAO,CAAC,mBAAmB;CAyC5B"}
+{"version":3,"file":"AppStore.d.ts","sourceRoot":"","sources":["../../src/app/AppStore.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAA+B,MAAM,kBAAkB,CAAC;AAKxF,MAAM,WAAW,eAAe;IAC9B;sFACkF;IAClF,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;CACzF;AAED;0EAC0E;AAC1E,qBAAa,QAAQ;IAEjB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAF1B,YACmB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,eAAoB,EAC5C;IAEJ,IAAI,IAAI,kBAAkB,EAAE,CAa3B;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAiBhD;IAED,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAIxC;IAED,sEAAsE;IACtE,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CASlE;IAED,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,aAAa,CAIrE;IAED,OAAO,CAAC,mBAAmB;IAwB3B,OAAO,CAAC,qBAAqB;IA6C7B,OAAO,CAAC,yBAAyB;CA8BlC"}

package/dist/app/AppStore.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppStore = void 0;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const MarifoldError_1 = require("../errors/MarifoldError");
 const SkillValidator_1 = require("../skill/SkillValidator");
@@ -45,8 +46,10 @@ const SKILL_APP_DEFINITION_FILE = 'skillapp.ts';
  * are skipped by list(); get() reports their exact validation failure. */
 class AppStore {
     directory;
-    constructor(directory) {
+    options;
+    constructor(directory, options = {}) {
         this.directory = directory;
+        this.options = options;
     }
     list() {
         if (!fs.existsSync(this.directory))
@@ -77,7 +80,9 @@ class AppStore {
         if (definition.app.name !== name) {
             throw MarifoldError_1.MarifoldError.appInvalid(`App app.name '${definition.app.name}' must match bundle directory '${name}'.`, realSource);
         }
+        definition.permissions = resolvePermissions(bundle, definition.permissions ?? [], realSource);
         this.validateLocalSkills(name, definition);
+        this.validateProfileSkills(definition);
         return definition;
     }
     require(name) {
@@ -98,6 +103,12 @@ class AppStore {
             throw MarifoldError_1.MarifoldError.skillNotFound(skillName);
         return requireConfinedFile(bundle, source, `App-local skill '${skillName}'`);
     }
+    requireProfileSkill(profile, skillName) {
+        const skill = this.options.resolveProfileSkill?.(profile, skillName);
+        if (!skill)
+            throw MarifoldError_1.MarifoldError.skillNotFound(skillName);
+        return skill;
+    }
     validateLocalSkills(appName, definition) {
         for (const registered of definition.skills) {
             const source = this.requireLocalSkillSource(appName, registered.name);
@@ -108,27 +119,111 @@ class AppStore {
             if (skill.mode && skill.mode !== 'chat') {
                 throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp v1 only supports chat-mode Skills; '${skill.name}' uses '${skill.mode}'.`, source);
             }
-            const variables = new Set(skill.variables.map(variable => variable.name));
-            for (const operation of definition.operations.filter(candidate => candidate.skill === registered.name)) {
-                const parameters = new Set(Object.keys(operation.parameters));
-                const unknown = [...parameters].filter(name => !variables.has(name));
-                if (unknown.length > 0) {
-                    throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' supplies unknown Skill parameter(s): ${unknown.join(', ')}.`, source);
+            for (const operation of definition.operations.filter(candidate => candidate.profile === undefined && candidate.skill === registered.name)) {
+                operation.requiredInputs = this.validateOperationBindings(skill, operation, source);
+            }
+        }
+    }
+    validateProfileSkills(definition) {
+        for (const operation of definition.operations.filter(candidate => candidate.profile !== undefined)) {
+            const profile = (definition.profiles ?? []).find(candidate => candidate.name === operation.profile);
+            if (!profile) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' references missing profile '${operation.profile}'.`);
+            }
+            if (!this.options.resolveProfileSkill) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp '${definition.app.name}' requires profile-backed Skill resolution.`);
+            }
+            const skillNames = operation.skill ? [operation.skill] : (operation.skillOptions ?? []);
+            if (skillNames.length === 0) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' has no profile Skill candidates.`);
+            }
+            const requiredInputs = new Set([
+                ...(operation.skillState ? [operation.skillState] : []),
+                ...(operation.input ? [operation.input] : []),
+            ]);
+            for (const skillName of skillNames) {
+                const skill = this.requireProfileSkill(profile.profile, skillName);
+                if (operation.interactive && skill.mode === 'chat') {
+                    throw MarifoldError_1.MarifoldError.appInvalid(`Interactive SkillApp operation '${operation.name}' cannot invoke chat-mode Skill '${skillName}'.`, skill.source);
+                }
+                if (skillName === 'skillapp-builder' && !operation.interactive) {
+                    throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' must invoke the built-in skillapp-builder interactively.`, skill.source);
                 }
-                const missing = skill.variables
-                    .filter(variable => variable.required && variable.default === undefined && !parameters.has(variable.name))
-                    .map(variable => variable.name);
-                if (missing.length > 0) {
-                    throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' does not bind required Skill parameter(s): ${missing.join(', ')}.`, source);
+                for (const input of this.validateOperationBindings(skill, operation, skill.source)) {
+                    requiredInputs.add(input);
                 }
-                operation.requiredInputs = [...new Set(skill.variables
-                        .filter(variable => variable.required && variable.default === undefined)
-                        .map(variable => operation.parameters[variable.name]))];
             }
+            operation.requiredInputs = [...requiredInputs];
+        }
+    }
+    validateOperationBindings(skill, operation, source) {
+        const variables = new Set(skill.variables.map(variable => variable.name));
+        const parameters = new Set(Object.keys(operation.parameters));
+        const unknown = [...parameters].filter(name => !variables.has(name));
+        if (unknown.length > 0) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' supplies unknown Skill parameter(s): ${unknown.join(', ')}.`, source);
         }
+        const missing = skill.variables
+            .filter(variable => variable.required && variable.default === undefined && !parameters.has(variable.name))
+            .map(variable => variable.name);
+        if (missing.length > 0) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' does not bind required Skill parameter(s): ${missing.join(', ')}.`, source);
+        }
+        return [...new Set([
+                ...(operation.input ? [operation.input] : []),
+                ...skill.variables
+                    .filter(variable => variable.required && variable.default === undefined)
+                    .map(variable => operation.parameters[variable.name]),
+            ])];
     }
 }
 exports.AppStore = AppStore;
+function resolvePermissions(bundle, permissions, source) {
+    const userHome = fs.realpathSync(os.homedir());
+    const privateAppHome = path.join(userHome, '.marifold');
+    const bundleRoot = fs.realpathSync(bundle);
+    return permissions.map(permission => {
+        const requested = permission.path === '~'
+            ? userHome
+            : permission.path.startsWith('~/')
+                ? path.join(userHome, permission.path.slice(2))
+                : path.isAbsolute(permission.path)
+                    ? permission.path
+                    : path.join(bundle, permission.path);
+        let resolved;
+        let stat;
+        try {
+            resolved = fs.realpathSync(requested);
+            stat = fs.statSync(resolved);
+        }
+        catch (error) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Declared ${permission.kind} permission '${permission.path}' cannot be resolved: ${error instanceof Error ? error.message : String(error)}`, source);
+        }
+        if (permission.kind === 'file' && !stat.isFile()) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Declared file permission '${permission.path}' is not a regular file.`, source);
+        }
+        if (permission.kind === 'folder' && !stat.isDirectory()) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Declared folder permission '${permission.path}' is not a directory.`, source);
+        }
+        if (permission.kind === 'folder' && isBroadPermissionRoot(resolved, userHome, privateAppHome)) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Declared folder permission '${permission.path}' is too broad or sensitive.`, source);
+        }
+        if (isInside(resolved, privateAppHome) && !isInside(resolved, bundleRoot)) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Declared permission '${permission.path}' cannot expose Marifold private state.`, source);
+        }
+        return { ...permission, path: resolved };
+    });
+}
+function isBroadPermissionRoot(target, userHome, privateAppHome) {
+    return target === path.parse(target).root
+        || target === userHome
+        || target === privateAppHome
+        || isInside(privateAppHome, target);
+}
+function isInside(target, root) {
+    const relative = path.relative(root, target);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
 function requireConfinedFile(bundle, source, label) {
     const bundleRoot = fs.realpathSync(bundle);
     const realSource = fs.realpathSync(source);