@monoes/monomindcli 2.15.7 → 2.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (460) hide show
  1. package/.claude/helpers/build-skill-registry.cjs +23 -2
  2. package/.claude/helpers/handlers/route-handler.cjs +102 -3
  3. package/.claude/helpers/handlers/session-restore-handler.cjs +1 -1
  4. package/.claude/helpers/hook-handler.cjs +17 -2
  5. package/.claude/helpers/jev-picker.cjs +499 -0
  6. package/.claude/helpers/redact-secrets.cjs +69 -0
  7. package/.claude/skills/mastermind-agent-select/SKILL.md +28 -0
  8. package/.claude/skills/monodesign/SKILL.md +257 -0
  9. package/.claude/skills/monodesign/adapt.md +53 -0
  10. package/.claude/skills/monodesign/agents/monodesign-asset-producer.md +100 -0
  11. package/.claude/skills/monodesign/agents/monodesign-manual-edit-applier.md +103 -0
  12. package/.claude/skills/monodesign/animate.md +65 -0
  13. package/.claude/skills/monodesign/audit.md +89 -0
  14. package/.claude/skills/monodesign/bolder.md +50 -0
  15. package/.claude/skills/monodesign/clarify.md +64 -0
  16. package/.claude/skills/monodesign/colorize.md +68 -0
  17. package/.claude/skills/monodesign/craft.md +51 -0
  18. package/.claude/skills/monodesign/critique.md +66 -0
  19. package/.claude/skills/monodesign/delight.md +47 -0
  20. package/.claude/skills/monodesign/distill.md +56 -0
  21. package/.claude/skills/monodesign/document.md +83 -0
  22. package/.claude/skills/monodesign/extract.md +74 -0
  23. package/.claude/skills/monodesign/harden.md +65 -0
  24. package/.claude/skills/monodesign/init.md +30 -0
  25. package/.claude/skills/monodesign/layout.md +36 -0
  26. package/.claude/skills/monodesign/live.md +34 -0
  27. package/.claude/skills/monodesign/onboard.md +50 -0
  28. package/.claude/skills/monodesign/optimize.md +64 -0
  29. package/.claude/skills/monodesign/overdrive.md +56 -0
  30. package/.claude/skills/monodesign/polish.md +68 -0
  31. package/.claude/skills/monodesign/quieter.md +57 -0
  32. package/.claude/skills/monodesign/reference/adapt.md +312 -0
  33. package/.claude/skills/monodesign/reference/adapt.native.md +58 -0
  34. package/.claude/skills/monodesign/reference/android.md +40 -0
  35. package/.claude/skills/monodesign/reference/animate.md +203 -0
  36. package/.claude/skills/monodesign/reference/antipatterns-catalog.md +410 -0
  37. package/.claude/skills/monodesign/reference/audit.md +135 -0
  38. package/.claude/skills/monodesign/reference/audit.native.md +139 -0
  39. package/.claude/skills/monodesign/reference/bolder.md +120 -0
  40. package/.claude/skills/monodesign/reference/brand-workflow.md +180 -0
  41. package/.claude/skills/monodesign/reference/brand.md +108 -0
  42. package/.claude/skills/monodesign/reference/clarify.md +288 -0
  43. package/.claude/skills/monodesign/reference/codex.md +105 -0
  44. package/.claude/skills/monodesign/reference/cognitive-load.md +106 -0
  45. package/.claude/skills/monodesign/reference/color-and-contrast.md +105 -0
  46. package/.claude/skills/monodesign/reference/colorize.md +257 -0
  47. package/.claude/skills/monodesign/reference/component-specs.md +260 -0
  48. package/.claude/skills/monodesign/reference/component-states.md +274 -0
  49. package/.claude/skills/monodesign/reference/component-system.md +358 -0
  50. package/.claude/skills/monodesign/reference/copy-formulas.md +160 -0
  51. package/.claude/skills/monodesign/reference/craft.md +123 -0
  52. package/.claude/skills/monodesign/reference/critique.md +780 -0
  53. package/.claude/skills/monodesign/reference/delight.md +302 -0
  54. package/.claude/skills/monodesign/reference/design-principles.md +246 -0
  55. package/.claude/skills/monodesign/reference/distill.md +111 -0
  56. package/.claude/skills/monodesign/reference/document.md +429 -0
  57. package/.claude/skills/monodesign/reference/extract.md +69 -0
  58. package/.claude/skills/monodesign/reference/harden.md +347 -0
  59. package/.claude/skills/monodesign/reference/heuristics-scoring.md +234 -0
  60. package/.claude/skills/monodesign/reference/hooks.md +92 -0
  61. package/.claude/skills/monodesign/reference/image-prompts.md +130 -0
  62. package/.claude/skills/monodesign/reference/init.md +221 -0
  63. package/.claude/skills/monodesign/reference/interaction-design.md +189 -0
  64. package/.claude/skills/monodesign/reference/ios.md +45 -0
  65. package/.claude/skills/monodesign/reference/layout.md +185 -0
  66. package/.claude/skills/monodesign/reference/live.md +710 -0
  67. package/.claude/skills/monodesign/reference/motion-design.md +109 -0
  68. package/.claude/skills/monodesign/reference/onboard.md +234 -0
  69. package/.claude/skills/monodesign/reference/optimize.md +258 -0
  70. package/.claude/skills/monodesign/reference/overdrive.md +130 -0
  71. package/.claude/skills/monodesign/reference/personas.md +179 -0
  72. package/.claude/skills/monodesign/reference/polish.md +241 -0
  73. package/.claude/skills/monodesign/reference/pre-delivery-checklist.md +108 -0
  74. package/.claude/skills/monodesign/reference/product.md +60 -0
  75. package/.claude/skills/monodesign/reference/quieter.md +99 -0
  76. package/.claude/skills/monodesign/reference/responsive-design.md +114 -0
  77. package/.claude/skills/monodesign/reference/shape.md +165 -0
  78. package/.claude/skills/monodesign/reference/spatial-design.md +100 -0
  79. package/.claude/skills/monodesign/reference/teach.md +10 -0
  80. package/.claude/skills/monodesign/reference/token-architecture.md +222 -0
  81. package/.claude/skills/monodesign/reference/typeset.md +301 -0
  82. package/.claude/skills/monodesign/reference/typography.md +159 -0
  83. package/.claude/skills/monodesign/reference/ux-research.md +143 -0
  84. package/.claude/skills/monodesign/reference/ux-rules.md +211 -0
  85. package/.claude/skills/monodesign/reference/ux-writing.md +107 -0
  86. package/.claude/skills/monodesign/scripts/command-metadata.json +94 -0
  87. package/.claude/skills/monodesign/scripts/context-signals.mjs +260 -0
  88. package/.claude/skills/monodesign/scripts/context.mjs +1065 -0
  89. package/.claude/skills/monodesign/scripts/critique-storage.mjs +416 -0
  90. package/.claude/skills/monodesign/scripts/detect-csp.mjs +193 -0
  91. package/.claude/skills/monodesign/scripts/detect.mjs +33 -0
  92. package/.claude/skills/monodesign/scripts/detector/browser/injected/index.mjs +1960 -0
  93. package/.claude/skills/monodesign/scripts/detector/cli/main.mjs +321 -0
  94. package/.claude/skills/monodesign/scripts/detector/design-system.mjs +814 -0
  95. package/.claude/skills/monodesign/scripts/detector/detect-antipatterns-browser.js +5628 -0
  96. package/.claude/skills/monodesign/scripts/detector/detect-antipatterns.mjs +50 -0
  97. package/.claude/skills/monodesign/scripts/detector/engines/browser/detect-url.mjs +259 -0
  98. package/.claude/skills/monodesign/scripts/detector/engines/browser/drivers.mjs +339 -0
  99. package/.claude/skills/monodesign/scripts/detector/engines/regex/detect-text.mjs +636 -0
  100. package/.claude/skills/monodesign/scripts/detector/engines/static-html/css-cascade.mjs +1016 -0
  101. package/.claude/skills/monodesign/scripts/detector/engines/static-html/detect-html.mjs +253 -0
  102. package/.claude/skills/monodesign/scripts/detector/engines/visual/screenshot-contrast.mjs +198 -0
  103. package/.claude/skills/monodesign/scripts/detector/findings.mjs +12 -0
  104. package/.claude/skills/monodesign/scripts/detector/fix/css-regions.mjs +181 -0
  105. package/.claude/skills/monodesign/scripts/detector/fix/fixers.mjs +373 -0
  106. package/.claude/skills/monodesign/scripts/detector/fix/index.mjs +426 -0
  107. package/.claude/skills/monodesign/scripts/detector/node/file-system.mjs +198 -0
  108. package/.claude/skills/monodesign/scripts/detector/profile/profiler.mjs +166 -0
  109. package/.claude/skills/monodesign/scripts/detector/registry/antipatterns.mjs +563 -0
  110. package/.claude/skills/monodesign/scripts/detector/rules/checks.mjs +3024 -0
  111. package/.claude/skills/monodesign/scripts/detector/shared/color.mjs +124 -0
  112. package/.claude/skills/monodesign/scripts/detector/shared/constants.mjs +101 -0
  113. package/.claude/skills/monodesign/scripts/detector/shared/fonts.mjs +30 -0
  114. package/.claude/skills/monodesign/scripts/detector/shared/inline-ignores.mjs +148 -0
  115. package/.claude/skills/monodesign/scripts/detector/shared/page.mjs +7 -0
  116. package/.claude/skills/monodesign/scripts/hook-admin.mjs +694 -0
  117. package/.claude/skills/monodesign/scripts/hook-before-edit.mjs +516 -0
  118. package/.claude/skills/monodesign/scripts/hook-lib.mjs +1785 -0
  119. package/.claude/skills/monodesign/scripts/hook.mjs +61 -0
  120. package/.claude/skills/monodesign/scripts/lib/design-parser.mjs +809 -0
  121. package/.claude/skills/monodesign/scripts/lib/is-generated.mjs +69 -0
  122. package/.claude/skills/monodesign/scripts/lib/monodesign-config.mjs +640 -0
  123. package/.claude/skills/monodesign/scripts/lib/monodesign-paths.mjs +129 -0
  124. package/.claude/skills/monodesign/scripts/lib/provider.mjs +4 -0
  125. package/.claude/skills/monodesign/scripts/lib/target-args.mjs +42 -0
  126. package/.claude/skills/monodesign/scripts/live/browser-script-parts.mjs +50 -0
  127. package/.claude/skills/monodesign/scripts/live/completion.mjs +19 -0
  128. package/.claude/skills/monodesign/scripts/live/event-validation.mjs +137 -0
  129. package/.claude/skills/monodesign/scripts/live/insert-ui.mjs +458 -0
  130. package/.claude/skills/monodesign/scripts/live/manual-apply.mjs +939 -0
  131. package/.claude/skills/monodesign/scripts/live/manual-edit-routes.mjs +357 -0
  132. package/.claude/skills/monodesign/scripts/live/manual-edits-buffer.mjs +152 -0
  133. package/.claude/skills/monodesign/scripts/live/session-store.mjs +293 -0
  134. package/.claude/skills/monodesign/scripts/live/svelte-component.mjs +826 -0
  135. package/.claude/skills/monodesign/scripts/live/sveltekit-adapter.mjs +279 -0
  136. package/.claude/skills/monodesign/scripts/live/ui-core.mjs +180 -0
  137. package/.claude/skills/monodesign/scripts/live/vocabulary.mjs +36 -0
  138. package/.claude/skills/monodesign/scripts/live-accept.mjs +812 -0
  139. package/.claude/skills/monodesign/scripts/live-browser-dom.js +147 -0
  140. package/.claude/skills/monodesign/scripts/live-browser-session.js +124 -0
  141. package/.claude/skills/monodesign/scripts/live-browser.js +11213 -0
  142. package/.claude/skills/monodesign/scripts/live-commit-manual-edits.mjs +1241 -0
  143. package/.claude/skills/monodesign/scripts/live-complete.mjs +75 -0
  144. package/.claude/skills/monodesign/scripts/live-copy-edit-agent.mjs +683 -0
  145. package/.claude/skills/monodesign/scripts/live-discard-manual-edits.mjs +51 -0
  146. package/.claude/skills/monodesign/scripts/live-inject.mjs +596 -0
  147. package/.claude/skills/monodesign/scripts/live-insert.mjs +272 -0
  148. package/.claude/skills/monodesign/scripts/live-manual-edit-evidence.mjs +363 -0
  149. package/.claude/skills/monodesign/scripts/live-poll.mjs +384 -0
  150. package/.claude/skills/monodesign/scripts/live-resume.mjs +94 -0
  151. package/.claude/skills/monodesign/scripts/live-server.mjs +1210 -0
  152. package/.claude/skills/monodesign/scripts/live-status.mjs +61 -0
  153. package/.claude/skills/monodesign/scripts/live-target.mjs +30 -0
  154. package/.claude/skills/monodesign/scripts/live-wrap.mjs +884 -0
  155. package/.claude/skills/monodesign/scripts/live.mjs +297 -0
  156. package/.claude/skills/monodesign/scripts/modern-screenshot.umd.js +14 -0
  157. package/.claude/skills/monodesign/scripts/palette.mjs +635 -0
  158. package/.claude/skills/monodesign/scripts/pin.mjs +221 -0
  159. package/.claude/skills/monodesign/shape.md +71 -0
  160. package/.claude/skills/monodesign/teach.md +18 -0
  161. package/.claude/skills/monodesign/typeset.md +59 -0
  162. package/README.md +1 -1
  163. package/dist/src/capabilities/cap-code.d.ts.map +1 -1
  164. package/dist/src/capabilities/cap-code.js +10 -5
  165. package/dist/src/capabilities/cap-code.js.map +1 -1
  166. package/dist/src/capabilities/manager.d.ts +2 -1
  167. package/dist/src/capabilities/manager.d.ts.map +1 -1
  168. package/dist/src/capabilities/manager.js +4 -1
  169. package/dist/src/capabilities/manager.js.map +1 -1
  170. package/dist/src/catalog/blueprints.d.ts +39 -0
  171. package/dist/src/catalog/blueprints.d.ts.map +1 -0
  172. package/dist/src/catalog/blueprints.js +78 -0
  173. package/dist/src/catalog/blueprints.js.map +1 -0
  174. package/dist/src/catalog/digest.d.ts +16 -0
  175. package/dist/src/catalog/digest.d.ts.map +1 -0
  176. package/dist/src/catalog/digest.js +62 -0
  177. package/dist/src/catalog/digest.js.map +1 -0
  178. package/dist/src/catalog/frontmatter.d.ts +23 -0
  179. package/dist/src/catalog/frontmatter.d.ts.map +1 -0
  180. package/dist/src/catalog/frontmatter.js +80 -0
  181. package/dist/src/catalog/frontmatter.js.map +1 -0
  182. package/dist/src/catalog/lifecycle.d.ts +31 -0
  183. package/dist/src/catalog/lifecycle.d.ts.map +1 -0
  184. package/dist/src/catalog/lifecycle.js +78 -0
  185. package/dist/src/catalog/lifecycle.js.map +1 -0
  186. package/dist/src/catalog/projection.d.ts +57 -0
  187. package/dist/src/catalog/projection.d.ts.map +1 -0
  188. package/dist/src/catalog/projection.js +272 -0
  189. package/dist/src/catalog/projection.js.map +1 -0
  190. package/dist/src/catalog/scan.d.ts +37 -0
  191. package/dist/src/catalog/scan.d.ts.map +1 -0
  192. package/dist/src/catalog/scan.js +214 -0
  193. package/dist/src/catalog/scan.js.map +1 -0
  194. package/dist/src/catalog/snapshot.d.ts +62 -0
  195. package/dist/src/catalog/snapshot.d.ts.map +1 -0
  196. package/dist/src/catalog/snapshot.js +183 -0
  197. package/dist/src/catalog/snapshot.js.map +1 -0
  198. package/dist/src/catalog/stage.d.ts +26 -0
  199. package/dist/src/catalog/stage.d.ts.map +1 -0
  200. package/dist/src/catalog/stage.js +316 -0
  201. package/dist/src/catalog/stage.js.map +1 -0
  202. package/dist/src/catalog/state.d.ts +23 -0
  203. package/dist/src/catalog/state.d.ts.map +1 -0
  204. package/dist/src/catalog/state.js +102 -0
  205. package/dist/src/catalog/state.js.map +1 -0
  206. package/dist/src/catalog/types.d.ts +289 -0
  207. package/dist/src/catalog/types.d.ts.map +1 -0
  208. package/dist/src/catalog/types.js +118 -0
  209. package/dist/src/catalog/types.js.map +1 -0
  210. package/dist/src/commands/catalog.d.ts +14 -0
  211. package/dist/src/commands/catalog.d.ts.map +1 -0
  212. package/dist/src/commands/catalog.js +392 -0
  213. package/dist/src/commands/catalog.js.map +1 -0
  214. package/dist/src/commands/doctor-catalog-checks.d.ts +3 -0
  215. package/dist/src/commands/doctor-catalog-checks.d.ts.map +1 -0
  216. package/dist/src/commands/doctor-catalog-checks.js +69 -0
  217. package/dist/src/commands/doctor-catalog-checks.js.map +1 -0
  218. package/dist/src/commands/doctor-decision-checks.d.ts +10 -0
  219. package/dist/src/commands/doctor-decision-checks.d.ts.map +1 -0
  220. package/dist/src/commands/doctor-decision-checks.js +82 -0
  221. package/dist/src/commands/doctor-decision-checks.js.map +1 -0
  222. package/dist/src/commands/doctor-project-checks.js +1 -1
  223. package/dist/src/commands/doctor-project-checks.js.map +1 -1
  224. package/dist/src/commands/doctor.d.ts.map +1 -1
  225. package/dist/src/commands/doctor.js +9 -1
  226. package/dist/src/commands/doctor.js.map +1 -1
  227. package/dist/src/commands/index.d.ts +2 -2
  228. package/dist/src/commands/index.d.ts.map +1 -1
  229. package/dist/src/commands/index.js +4 -1
  230. package/dist/src/commands/index.js.map +1 -1
  231. package/dist/src/commands/init-wizard.d.ts.map +1 -1
  232. package/dist/src/commands/init-wizard.js +2 -0
  233. package/dist/src/commands/init-wizard.js.map +1 -1
  234. package/dist/src/commands/init.d.ts.map +1 -1
  235. package/dist/src/commands/init.js +25 -26
  236. package/dist/src/commands/init.js.map +1 -1
  237. package/dist/src/commands/org-observe.d.ts.map +1 -1
  238. package/dist/src/commands/org-observe.js +12 -10
  239. package/dist/src/commands/org-observe.js.map +1 -1
  240. package/dist/src/commands/org-run-end.d.ts +26 -0
  241. package/dist/src/commands/org-run-end.d.ts.map +1 -0
  242. package/dist/src/commands/org-run-end.js +40 -0
  243. package/dist/src/commands/org-run-end.js.map +1 -0
  244. package/dist/src/commands/org-skills.d.ts.map +1 -1
  245. package/dist/src/commands/org-skills.js +14 -4
  246. package/dist/src/commands/org-skills.js.map +1 -1
  247. package/dist/src/commands/org.d.ts +2 -1
  248. package/dist/src/commands/org.d.ts.map +1 -1
  249. package/dist/src/commands/org.js +44 -16
  250. package/dist/src/commands/org.js.map +1 -1
  251. package/dist/src/commands/pick.d.ts +4 -0
  252. package/dist/src/commands/pick.d.ts.map +1 -0
  253. package/dist/src/commands/pick.js +77 -0
  254. package/dist/src/commands/pick.js.map +1 -0
  255. package/dist/src/commands/route.js +1 -1
  256. package/dist/src/commands/route.js.map +1 -1
  257. package/dist/src/commands/search-universal.d.ts.map +1 -1
  258. package/dist/src/commands/search-universal.js +1 -2
  259. package/dist/src/commands/search-universal.js.map +1 -1
  260. package/dist/src/decision/catalogs.d.ts +20 -0
  261. package/dist/src/decision/catalogs.d.ts.map +1 -0
  262. package/dist/src/decision/catalogs.js +64 -0
  263. package/dist/src/decision/catalogs.js.map +1 -0
  264. package/dist/src/decision/jev.d.ts +85 -0
  265. package/dist/src/decision/jev.d.ts.map +1 -0
  266. package/dist/src/decision/jev.js +72 -0
  267. package/dist/src/decision/jev.js.map +1 -0
  268. package/dist/src/decision/picks.d.ts +50 -0
  269. package/dist/src/decision/picks.d.ts.map +1 -0
  270. package/dist/src/decision/picks.js +100 -0
  271. package/dist/src/decision/picks.js.map +1 -0
  272. package/dist/src/init/executor.d.ts.map +1 -1
  273. package/dist/src/init/executor.js +7 -0
  274. package/dist/src/init/executor.js.map +1 -1
  275. package/dist/src/init/helpers-generator.d.ts.map +1 -1
  276. package/dist/src/init/helpers-generator.js +7 -0
  277. package/dist/src/init/helpers-generator.js.map +1 -1
  278. package/dist/src/init/init-memory.d.ts +14 -0
  279. package/dist/src/init/init-memory.d.ts.map +1 -0
  280. package/dist/src/init/init-memory.js +44 -0
  281. package/dist/src/init/init-memory.js.map +1 -0
  282. package/dist/src/init/types.d.ts +13 -0
  283. package/dist/src/init/types.d.ts.map +1 -1
  284. package/dist/src/init/types.js.map +1 -1
  285. package/dist/src/init/upgrade.d.ts.map +1 -1
  286. package/dist/src/init/upgrade.js +9 -0
  287. package/dist/src/init/upgrade.js.map +1 -1
  288. package/dist/src/orgrt/agent-runner.d.ts +7 -0
  289. package/dist/src/orgrt/agent-runner.d.ts.map +1 -1
  290. package/dist/src/orgrt/agent-runner.js +5 -1
  291. package/dist/src/orgrt/agent-runner.js.map +1 -1
  292. package/dist/src/orgrt/antigravity-runner.d.ts.map +1 -1
  293. package/dist/src/orgrt/antigravity-runner.js +8 -14
  294. package/dist/src/orgrt/antigravity-runner.js.map +1 -1
  295. package/dist/src/orgrt/checkpoint-ops.d.ts.map +1 -1
  296. package/dist/src/orgrt/checkpoint-ops.js +7 -1
  297. package/dist/src/orgrt/checkpoint-ops.js.map +1 -1
  298. package/dist/src/orgrt/checkpoint.d.ts +10 -2
  299. package/dist/src/orgrt/checkpoint.d.ts.map +1 -1
  300. package/dist/src/orgrt/checkpoint.js +8 -2
  301. package/dist/src/orgrt/checkpoint.js.map +1 -1
  302. package/dist/src/orgrt/codex-runner.d.ts.map +1 -1
  303. package/dist/src/orgrt/codex-runner.js +8 -14
  304. package/dist/src/orgrt/codex-runner.js.map +1 -1
  305. package/dist/src/orgrt/completion-gate.d.ts +6 -0
  306. package/dist/src/orgrt/completion-gate.d.ts.map +1 -1
  307. package/dist/src/orgrt/completion-gate.js +18 -0
  308. package/dist/src/orgrt/completion-gate.js.map +1 -1
  309. package/dist/src/orgrt/copilot-runner.d.ts.map +1 -1
  310. package/dist/src/orgrt/copilot-runner.js +7 -10
  311. package/dist/src/orgrt/copilot-runner.js.map +1 -1
  312. package/dist/src/orgrt/crush-runner.d.ts.map +1 -1
  313. package/dist/src/orgrt/crush-runner.js +7 -10
  314. package/dist/src/orgrt/crush-runner.js.map +1 -1
  315. package/dist/src/orgrt/cumulative-meter.d.ts +26 -0
  316. package/dist/src/orgrt/cumulative-meter.d.ts.map +1 -0
  317. package/dist/src/orgrt/cumulative-meter.js +46 -0
  318. package/dist/src/orgrt/cumulative-meter.js.map +1 -0
  319. package/dist/src/orgrt/daemon.d.ts +20 -3
  320. package/dist/src/orgrt/daemon.d.ts.map +1 -1
  321. package/dist/src/orgrt/daemon.js +55 -28
  322. package/dist/src/orgrt/daemon.js.map +1 -1
  323. package/dist/src/orgrt/dashboard-health.d.ts +54 -0
  324. package/dist/src/orgrt/dashboard-health.d.ts.map +1 -0
  325. package/dist/src/orgrt/dashboard-health.js +143 -0
  326. package/dist/src/orgrt/dashboard-health.js.map +1 -0
  327. package/dist/src/orgrt/decisions.d.ts +13 -1
  328. package/dist/src/orgrt/decisions.d.ts.map +1 -1
  329. package/dist/src/orgrt/decisions.js +92 -18
  330. package/dist/src/orgrt/decisions.js.map +1 -1
  331. package/dist/src/orgrt/forwarder.d.ts +2 -1
  332. package/dist/src/orgrt/forwarder.d.ts.map +1 -1
  333. package/dist/src/orgrt/forwarder.js +87 -27
  334. package/dist/src/orgrt/forwarder.js.map +1 -1
  335. package/dist/src/orgrt/grok-runner.d.ts.map +1 -1
  336. package/dist/src/orgrt/grok-runner.js +7 -12
  337. package/dist/src/orgrt/grok-runner.js.map +1 -1
  338. package/dist/src/orgrt/hermes-runner.d.ts.map +1 -1
  339. package/dist/src/orgrt/hermes-runner.js +9 -15
  340. package/dist/src/orgrt/hermes-runner.js.map +1 -1
  341. package/dist/src/orgrt/kimicode-runner.d.ts +1 -1
  342. package/dist/src/orgrt/kimicode-runner.d.ts.map +1 -1
  343. package/dist/src/orgrt/kimicode-runner.js +9 -15
  344. package/dist/src/orgrt/kimicode-runner.js.map +1 -1
  345. package/dist/src/orgrt/opencode-runner.d.ts.map +1 -1
  346. package/dist/src/orgrt/opencode-runner.js +7 -13
  347. package/dist/src/orgrt/opencode-runner.js.map +1 -1
  348. package/dist/src/orgrt/org-harness-tools.d.ts +8 -0
  349. package/dist/src/orgrt/org-harness-tools.d.ts.map +1 -0
  350. package/dist/src/orgrt/org-harness-tools.js +21 -0
  351. package/dist/src/orgrt/org-harness-tools.js.map +1 -0
  352. package/dist/src/orgrt/pi-rpc-runner.d.ts.map +1 -1
  353. package/dist/src/orgrt/pi-rpc-runner.js +9 -13
  354. package/dist/src/orgrt/pi-rpc-runner.js.map +1 -1
  355. package/dist/src/orgrt/pi-runner.d.ts.map +1 -1
  356. package/dist/src/orgrt/pi-runner.js +7 -11
  357. package/dist/src/orgrt/pi-runner.js.map +1 -1
  358. package/dist/src/orgrt/policy-git.d.ts +5 -1
  359. package/dist/src/orgrt/policy-git.d.ts.map +1 -1
  360. package/dist/src/orgrt/policy-git.js +56 -29
  361. package/dist/src/orgrt/policy-git.js.map +1 -1
  362. package/dist/src/orgrt/policy.d.ts +7 -0
  363. package/dist/src/orgrt/policy.d.ts.map +1 -1
  364. package/dist/src/orgrt/policy.js +10 -1
  365. package/dist/src/orgrt/policy.js.map +1 -1
  366. package/dist/src/orgrt/prompt-vars.d.ts +8 -1
  367. package/dist/src/orgrt/prompt-vars.d.ts.map +1 -1
  368. package/dist/src/orgrt/prompt-vars.js +60 -11
  369. package/dist/src/orgrt/prompt-vars.js.map +1 -1
  370. package/dist/src/orgrt/qwen-rpc-runner.d.ts.map +1 -1
  371. package/dist/src/orgrt/qwen-rpc-runner.js +9 -14
  372. package/dist/src/orgrt/qwen-rpc-runner.js.map +1 -1
  373. package/dist/src/orgrt/qwen-runner.d.ts.map +1 -1
  374. package/dist/src/orgrt/qwen-runner.js +7 -12
  375. package/dist/src/orgrt/qwen-runner.js.map +1 -1
  376. package/dist/src/orgrt/report-budget.d.ts +4 -0
  377. package/dist/src/orgrt/report-budget.d.ts.map +1 -0
  378. package/dist/src/orgrt/report-budget.js +12 -0
  379. package/dist/src/orgrt/report-budget.js.map +1 -0
  380. package/dist/src/orgrt/reporting.d.ts +4 -0
  381. package/dist/src/orgrt/reporting.d.ts.map +1 -1
  382. package/dist/src/orgrt/reporting.js +8 -2
  383. package/dist/src/orgrt/reporting.js.map +1 -1
  384. package/dist/src/orgrt/role-sandbox.d.ts +4 -1
  385. package/dist/src/orgrt/role-sandbox.d.ts.map +1 -1
  386. package/dist/src/orgrt/role-sandbox.js +24 -10
  387. package/dist/src/orgrt/role-sandbox.js.map +1 -1
  388. package/dist/src/orgrt/role-trace.d.ts +27 -0
  389. package/dist/src/orgrt/role-trace.d.ts.map +1 -0
  390. package/dist/src/orgrt/role-trace.js +28 -0
  391. package/dist/src/orgrt/role-trace.js.map +1 -0
  392. package/dist/src/orgrt/sandbox-deny-write.d.ts +52 -0
  393. package/dist/src/orgrt/sandbox-deny-write.d.ts.map +1 -0
  394. package/dist/src/orgrt/sandbox-deny-write.js +89 -0
  395. package/dist/src/orgrt/sandbox-deny-write.js.map +1 -0
  396. package/dist/src/orgrt/sandbox-fault.d.ts +40 -0
  397. package/dist/src/orgrt/sandbox-fault.d.ts.map +1 -0
  398. package/dist/src/orgrt/sandbox-fault.js +94 -0
  399. package/dist/src/orgrt/sandbox-fault.js.map +1 -0
  400. package/dist/src/orgrt/session.d.ts +10 -3
  401. package/dist/src/orgrt/session.d.ts.map +1 -1
  402. package/dist/src/orgrt/session.js +124 -64
  403. package/dist/src/orgrt/session.js.map +1 -1
  404. package/dist/src/orgrt/skill-library.d.ts +10 -1
  405. package/dist/src/orgrt/skill-library.d.ts.map +1 -1
  406. package/dist/src/orgrt/skill-library.js +53 -4
  407. package/dist/src/orgrt/skill-library.js.map +1 -1
  408. package/dist/src/orgrt/task-dag.d.ts +9 -1
  409. package/dist/src/orgrt/task-dag.d.ts.map +1 -1
  410. package/dist/src/orgrt/task-dag.js +6 -1
  411. package/dist/src/orgrt/task-dag.js.map +1 -1
  412. package/dist/src/orgrt/tool-fence.d.ts +21 -3
  413. package/dist/src/orgrt/tool-fence.d.ts.map +1 -1
  414. package/dist/src/orgrt/tool-fence.js +45 -7
  415. package/dist/src/orgrt/tool-fence.js.map +1 -1
  416. package/dist/src/orgrt/tool-providers.d.ts +4 -0
  417. package/dist/src/orgrt/tool-providers.d.ts.map +1 -1
  418. package/dist/src/orgrt/tool-providers.js +10 -0
  419. package/dist/src/orgrt/tool-providers.js.map +1 -1
  420. package/dist/src/orgrt/types.d.ts +10 -0
  421. package/dist/src/orgrt/types.d.ts.map +1 -1
  422. package/dist/src/orgrt/types.js +15 -0
  423. package/dist/src/orgrt/types.js.map +1 -1
  424. package/dist/src/orgrt/vercel-runner.d.ts +23 -0
  425. package/dist/src/orgrt/vercel-runner.d.ts.map +1 -1
  426. package/dist/src/orgrt/vercel-runner.js +2 -26
  427. package/dist/src/orgrt/vercel-runner.js.map +1 -1
  428. package/dist/src/platform-adapters/merge.d.ts +11 -0
  429. package/dist/src/platform-adapters/merge.d.ts.map +1 -1
  430. package/dist/src/platform-adapters/merge.js +28 -0
  431. package/dist/src/platform-adapters/merge.js.map +1 -1
  432. package/dist/src/platform-adapters/mutation.d.ts +37 -0
  433. package/dist/src/platform-adapters/mutation.d.ts.map +1 -0
  434. package/dist/src/platform-adapters/mutation.js +231 -0
  435. package/dist/src/platform-adapters/mutation.js.map +1 -0
  436. package/dist/src/platform-adapters/operations.d.ts +8 -1
  437. package/dist/src/platform-adapters/operations.d.ts.map +1 -1
  438. package/dist/src/platform-adapters/operations.js +41 -83
  439. package/dist/src/platform-adapters/operations.js.map +1 -1
  440. package/dist/src/platform-adapters/renderers/skills.d.ts.map +1 -1
  441. package/dist/src/platform-adapters/renderers/skills.js +11 -2
  442. package/dist/src/platform-adapters/renderers/skills.js.map +1 -1
  443. package/dist/src/platform-adapters/shared-surface.d.ts +34 -0
  444. package/dist/src/platform-adapters/shared-surface.d.ts.map +1 -0
  445. package/dist/src/platform-adapters/shared-surface.js +89 -0
  446. package/dist/src/platform-adapters/shared-surface.js.map +1 -0
  447. package/dist/src/platform-adapters/types.d.ts +7 -0
  448. package/dist/src/platform-adapters/types.d.ts.map +1 -1
  449. package/dist/src/routing/jev-step.d.ts +17 -0
  450. package/dist/src/routing/jev-step.d.ts.map +1 -0
  451. package/dist/src/routing/jev-step.js +27 -0
  452. package/dist/src/routing/jev-step.js.map +1 -0
  453. package/dist/src/routing/route-layer-factory.d.ts.map +1 -1
  454. package/dist/src/routing/route-layer-factory.js +16 -1
  455. package/dist/src/routing/route-layer-factory.js.map +1 -1
  456. package/dist/src/utils/redaction.d.ts.map +1 -1
  457. package/dist/src/utils/redaction.js +19 -4
  458. package/dist/src/utils/redaction.js.map +1 -1
  459. package/dist/tsconfig.tsbuildinfo +1 -1
  460. package/package.json +7 -7
@@ -0,0 +1 @@
1
+ {"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/catalog/projection.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAqB,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,CAAC,MAAM,mBAAmB,GAAiC;IAC/D,iBAAiB;IACjB,iBAAiB;CAClB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,OAAO,GAA0C;IACrD,iBAAiB,EAAE,QAAQ;IAC3B,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAwCF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC;AAE/E,+FAA+F;AAC/F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAkD,EAAU,EAAE,CAC9F,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAEhG,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,WAAW,GAAG,gCAAgC,CAAC;AACrD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,IAAY,EAAW,EAAE,CACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE5D,SAAS,UAAU,CAAC,IAAY,EAAE,OAA0B,EAAE,MAAe;IAC3E,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aACjD,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CACrB,IAAY,EACZ,SAAiB,EACjB,KAAmB;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC5F,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,cAAc,IAAI,iCAAiC,EAAE,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACvF,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC;YACzF,IAAI,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3F,OAAO;oBACL,OAAO,EAAE,4CAA4C,KAAK,CAAC,EAAE,uBAAuB;iBACrF,CAAC;QACN,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO;YACpB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,YAAY,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE;YACrC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAAW,EAAE,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,OAA0B,EAC1B,IAAuB;IAEvB,MAAM,IAAI,GAAmB;QAC3B,OAAO;QACP,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,aAAa;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,IAAI,UAAU,CAAC,SAAS,CAAC;YACzD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;YACF,IAAI,KAAK,CAAC,MAAM;gBACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,GAAG,EAAE,KAAK,CAAC,IAAI;oBACf,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;oBACjC,IAAI,EAAE,CAAC,CAAC,KAAK;iBACd,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACnF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACvB,IAAI,aAAa;gBACf,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM;YACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,EAAU;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,OAA0B,EAC1B,IAAI,GAAsB,EAAE;IAE5B,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG;IACzB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC;IACxE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC;CAC/E,CAAC;AAEF;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAEvD,CAAC;IACF,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAA0B,EAC1B,IAA6C;IAE7C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,IAAoB,EAAoB,EAAE;QACrD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAqB;YAC/B,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;YAC1D,SAAS,EAAE,oBAAoB;SAChC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,iBAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM;YACxE,MAAM,CAAC,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,oFAAoF;IACpF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}
@@ -0,0 +1,37 @@
1
+ import { type FenceInstance } from '../orgrt/fence.js';
2
+ import { type CatalogEntry } from './types.js';
3
+ export type CatalogFence = Pick<FenceInstance, 'detect'>;
4
+ /** Returns the scanner, or null when it is unavailable. */
5
+ export type FenceLoader = () => Promise<CatalogFence | null>;
6
+ export interface PackageInspection {
7
+ /** Set when the package as a whole is unusable; nothing may be staged. */
8
+ fatal?: string;
9
+ verdict: 'clean' | 'quarantine';
10
+ accepted: string[];
11
+ rejected: {
12
+ path: string;
13
+ reason: string;
14
+ }[];
15
+ requestedTools: string[];
16
+ scanner: {
17
+ ok: boolean;
18
+ blocked: boolean;
19
+ summary: string;
20
+ };
21
+ }
22
+ export declare const MAX_FILE_BYTES: number;
23
+ export declare const MAX_MARKDOWN_FILES = 100;
24
+ export declare const SKIP_DIRS: Set<string>;
25
+ /**
26
+ * True when `text` carries Markdown that a platform executes as a shell
27
+ * command — as written, or in the body Claude Code cuts from it (the leading
28
+ * `\n` stands in for its prefix, so a `!` at body start counts as preceded by
29
+ * whitespace).
30
+ */
31
+ export declare const shellExecSyntax: (text: string) => boolean;
32
+ /** Inspect a package directory (the staged temp copy). Never writes. */
33
+ export declare function inspectPackage(dir: string, kind: CatalogEntry['kind'], opts: {
34
+ root: string;
35
+ fence?: FenceLoader;
36
+ }): Promise<PackageInspection>;
37
+ //# sourceMappingURL=scan.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/catalog/scan.ts"],"names":[],"mappings":"AAQA,OAAO,EAAsB,KAAK,aAAa,EAAyB,MAAM,mBAAmB,CAAC;AAIlG,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACzD,2DAA2D;AAC3D,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,GAAG,YAAY,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAGtC,eAAO,MAAM,SAAS,aAAoC,CAAC;AA0C3D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,SAAU,MAAM,KAAG,OACsB,CAAC;AA8FtE,wEAAwE;AACxE,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAC1B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CA6D5B"}
@@ -0,0 +1,214 @@
1
+ /**
2
+ * Package inspection: deterministic file checks first, then the monofence
3
+ * scanner over the accepted Markdown. Read-only — the caller deletes the
4
+ * rejected files. A blocked scan, a scanner error or an unavailable scanner
5
+ * all yield `verdict: 'quarantine'`; nothing here changes lifecycle status.
6
+ */
7
+ import { lstatSync, readdirSync, readFileSync } from 'node:fs';
8
+ import { join } from 'node:path';
9
+ import { createFenceForRole, loadGlobalFenceConfig } from '../orgrt/fence.js';
10
+ import { parseFrontmatter } from '../orgrt/skill-library.js';
11
+ import { BlueprintSchema } from './blueprints.js';
12
+ import { frontmatterViolations } from './frontmatter.js';
13
+ import { CATALOG_NAME_RE } from './types.js';
14
+ export const MAX_FILE_BYTES = 512 * 1024;
15
+ export const MAX_MARKDOWN_FILES = 100;
16
+ const SCAN_CHAR_CAP = 200_000;
17
+ const SUMMARY_CAP = 500;
18
+ export const SKIP_DIRS = new Set(['.git', 'node_modules']);
19
+ /** Text reserved for projection markers; a package carrying it could forge one. */
20
+ const RESERVED_MARKERS = ['<!-- catalog ', 'monomind:start', 'monomind:end'];
21
+ /**
22
+ * Claude Code runs a skill's inline !`cmd` / !$cmd (its detector:
23
+ * `(?<=^|\s)!(?=`|\$)`), every ```! run anywhere in the text (its extractor
24
+ * has no line anchor, so `> ```!`, `- ```!` and inline ```!cmd``` all execute)
25
+ * and ~~~! fenced blocks when the skill loads.
26
+ */
27
+ const SHELL_EXEC = [/(?:^|\s)!(?=[`$])/m, /```!/, /^[ \t]*~{3,}[ \t]*!/m];
28
+ /**
29
+ * What Claude Code substitutes before it extracts runs: `$ARGUMENTS`,
30
+ * `$ARGUMENTS[n]`, `$n`, `${CLAUDE_…}` (and a `\` escape that drops to the
31
+ * literal). A preload substitutes "" and an argument can be any text except a
32
+ * `!` (it escapes those), so a placeholder next to a `!` — directly after it,
33
+ * or anywhere in the run of spaces, backticks and tildes before it — can
34
+ * splice a run that the text as written does not contain.
35
+ */
36
+ // `${…}` is bounded (and stops at a `$`) so a run of `${` scans in linear time.
37
+ const PLACEHOLDER = /\\?\$(?:ARGUMENTS(?:\[\d+\])?|\d+(?!\w)|\{[^}\s$]{0,128}\})/g;
38
+ const BEFORE_BANG = ' \t`~\0';
39
+ function placeholderSplice(text) {
40
+ const t = text.replace(PLACEHOLDER, '\0');
41
+ // Runs end at a `!`, so each character is scanned at most once.
42
+ for (let i = t.indexOf('!'); i !== -1; i = t.indexOf('!', i + 1)) {
43
+ if (t[i + 1] === '\0')
44
+ return true;
45
+ for (let j = i - 1; j >= 0 && BEFORE_BANG.includes(t[j]); j--)
46
+ if (t[j] === '\0')
47
+ return true;
48
+ }
49
+ return false;
50
+ }
51
+ /**
52
+ * Claude Code's frontmatter split (/^---\s*\n([\s\S]*?)---\s*\n?/ after a BOM
53
+ * strip): it ends at the first `---` anywhere, even mid-line, and the body it
54
+ * hands on follows a "Base directory …\n\n" prefix. Same match, but the opener
55
+ * stops at its first newline so a run of blank lines cannot backtrack.
56
+ */
57
+ const CLAUDE_FRONTMATTER = /^\uFEFF?---[^\S\n]*\n[\s\S]*?---\s*/;
58
+ const execIn = (text) => SHELL_EXEC.some((re) => re.test(text)) || placeholderSplice(text);
59
+ /**
60
+ * True when `text` carries Markdown that a platform executes as a shell
61
+ * command — as written, or in the body Claude Code cuts from it (the leading
62
+ * `\n` stands in for its prefix, so a `!` at body start counts as preceded by
63
+ * whitespace).
64
+ */
65
+ export const shellExecSyntax = (text) => execIn(text) || execIn(`\n${text.replace(CLAUDE_FRONTMATTER, '')}`);
66
+ /** Every path under `dir`, relative, with its lstat kind. Skipped dirs are reported, not walked. */
67
+ function walk(dir, prefix = '') {
68
+ const out = [];
69
+ for (const name of readdirSync(join(dir, prefix)).sort()) {
70
+ const rel = prefix ? `${prefix}/${name}` : name;
71
+ const st = lstatSync(join(dir, rel));
72
+ if (st.isSymbolicLink())
73
+ out.push({ rel, kind: 'symlink' });
74
+ else if (st.isDirectory()) {
75
+ if (SKIP_DIRS.has(name))
76
+ out.push({ rel, kind: 'skipped' });
77
+ else
78
+ out.push(...walk(dir, rel));
79
+ }
80
+ else
81
+ out.push({ rel, kind: st.isFile() ? 'file' : 'other' });
82
+ }
83
+ return out;
84
+ }
85
+ function fileVerdict(rel, kind, size) {
86
+ if (rel.split('/').includes('..'))
87
+ return 'path contains ..';
88
+ // A nested `.claude/skills/…` (or any dot dir) is platform config, not package content.
89
+ if (rel.split('/').some((seg) => seg.startsWith('.')))
90
+ return 'path segment starts with "."';
91
+ const base = rel.slice(rel.lastIndexOf('/') + 1);
92
+ const allowed = base === 'LICENSE.txt' ||
93
+ (kind === 'blueprint' ? rel === 'blueprint.json' : base.endsWith('.md'));
94
+ if (!allowed)
95
+ return kind === 'blueprint'
96
+ ? 'not blueprint.json or LICENSE.txt'
97
+ : 'not Markdown or LICENSE.txt';
98
+ if (size > MAX_FILE_BYTES)
99
+ return `larger than ${MAX_FILE_BYTES / 1024} KiB`;
100
+ return undefined;
101
+ }
102
+ const str = (v) => Array.isArray(v) ? v.join(' ') : v;
103
+ const list = (v) => v === undefined ? [] : Array.isArray(v) ? v : v.split(/[,\s]+/).filter(Boolean);
104
+ /** Package-level problems of the authored metadata; `requestedTools` for skills. */
105
+ function metadata(dir, kind) {
106
+ if (kind === 'blueprint') {
107
+ try {
108
+ BlueprintSchema.parse(JSON.parse(readFileSync(join(dir, 'blueprint.json'), 'utf8')));
109
+ return { tools: [] };
110
+ }
111
+ catch (e) {
112
+ return { fatal: `invalid blueprint.json: ${e.message.slice(0, 300)}`, tools: [] };
113
+ }
114
+ }
115
+ const { data } = parseFrontmatter(readFileSync(join(dir, 'SKILL.md'), 'utf8'));
116
+ const name = str(data.name);
117
+ if (!name)
118
+ return { fatal: 'SKILL.md has no frontmatter name', tools: [] };
119
+ if (!str(data.description)?.trim())
120
+ return { fatal: 'SKILL.md has no frontmatter description', tools: [] };
121
+ if (!CATALOG_NAME_RE.test(name))
122
+ return { fatal: `name "${name}" is not a valid catalog name`, tools: [] };
123
+ return { tools: [...new Set(list(data.tools))].sort() };
124
+ }
125
+ const defaultFence = (root) => () => createFenceForRole(loadGlobalFenceConfig(root) ?? {});
126
+ async function runScanner(text, load) {
127
+ try {
128
+ const fence = await load();
129
+ if (!fence)
130
+ return {
131
+ ok: false,
132
+ blocked: false,
133
+ summary: 'scanner unavailable (monofence-ai could not be loaded)',
134
+ };
135
+ const r = await fence.detect(text);
136
+ const threats = r.threats.map((t) => `${t.type} ${t.confidence.toFixed(2)}`).join(', ');
137
+ return {
138
+ ok: true,
139
+ blocked: !r.safe,
140
+ summary: (r.safe ? `clean (risk ${r.overallRisk.toFixed(2)})` : `blocked: ${threats}`).slice(0, SUMMARY_CAP),
141
+ };
142
+ }
143
+ catch (e) {
144
+ return {
145
+ ok: false,
146
+ blocked: false,
147
+ summary: `scanner error: ${e.message}`.slice(0, SUMMARY_CAP),
148
+ };
149
+ }
150
+ }
151
+ /** Inspect a package directory (the staged temp copy). Never writes. */
152
+ export async function inspectPackage(dir, kind, opts) {
153
+ const accepted = [];
154
+ const rejected = [];
155
+ for (const { rel, kind: k } of walk(dir)) {
156
+ if (k === 'symlink')
157
+ rejected.push({ path: rel, reason: 'symlink' });
158
+ else if (k === 'skipped')
159
+ rejected.push({ path: rel, reason: 'excluded directory' });
160
+ else if (k === 'other')
161
+ rejected.push({ path: rel, reason: 'not a regular file' });
162
+ else {
163
+ const why = fileVerdict(rel, kind, lstatSync(join(dir, rel)).size);
164
+ if (why)
165
+ rejected.push({ path: rel, reason: why });
166
+ else
167
+ accepted.push(rel);
168
+ }
169
+ }
170
+ accepted.sort();
171
+ const base = { accepted, rejected, requestedTools: [] };
172
+ const refuse = (fatal) => ({
173
+ ...base,
174
+ fatal,
175
+ verdict: 'quarantine',
176
+ scanner: { ok: false, blocked: false, summary: 'not scanned' },
177
+ });
178
+ const primary = kind === 'blueprint' ? 'blueprint.json' : 'SKILL.md';
179
+ if (!accepted.includes(primary))
180
+ return refuse(`package has no usable ${primary}`);
181
+ const markdown = accepted.filter((f) => f.endsWith('.md'));
182
+ if (markdown.length > MAX_MARKDOWN_FILES)
183
+ return refuse(`more than ${MAX_MARKDOWN_FILES} Markdown files`);
184
+ const meta = metadata(dir, kind);
185
+ if (meta.fatal)
186
+ return refuse(meta.fatal);
187
+ for (const f of accepted) {
188
+ const content = readFileSync(join(dir, f), 'utf8');
189
+ const marker = RESERVED_MARKERS.find((m) => content.includes(m));
190
+ if (marker)
191
+ return refuse(`${f} contains reserved marker text "${marker.trim()}"`);
192
+ // What projection re-checks: a nested SKILL.md only when it has frontmatter.
193
+ const bad = f === 'SKILL.md' || f.endsWith('/SKILL.md') ? frontmatterViolations(content) : [];
194
+ if (bad.length && !(f !== 'SKILL.md' && bad[0] === 'SKILL.md has no frontmatter'))
195
+ return refuse(`frontmatter-not-allowed: ${f}: ${bad.join(', ')}`);
196
+ if (f.endsWith('.md') && shellExecSyntax(content))
197
+ return refuse(`body-exec: ${f} contains shell execution syntax (!\`…\`, a \`\`\`! block or a placeholder beside a !)`);
198
+ }
199
+ const scanned = accepted.filter((f) => f !== 'LICENSE.txt');
200
+ const full = scanned.map((f) => readFileSync(join(dir, f), 'utf8')).join('\n\n');
201
+ const scanner = await runScanner(full.slice(0, SCAN_CHAR_CAP), opts.fence ?? defaultFence(opts.root));
202
+ // Content past the cap was never scanned: it must not pass as clean.
203
+ const truncated = full.length > SCAN_CHAR_CAP;
204
+ if (truncated)
205
+ scanner.summary =
206
+ `not fully scanned (${full.length} chars > ${SCAN_CHAR_CAP}); ${scanner.summary}`.slice(0, SUMMARY_CAP);
207
+ return {
208
+ ...base,
209
+ requestedTools: meta.tools,
210
+ verdict: scanner.ok && !scanner.blocked && !truncated ? 'clean' : 'quarantine',
211
+ scanner,
212
+ };
213
+ }
214
+ //# sourceMappingURL=scan.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/catalog/scan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAsB,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAqB,MAAM,YAAY,CAAC;AAgBhE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAC3D,mFAAmF;AACnF,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;AAC7E;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,oBAAoB,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAC1E;;;;;;;GAOG;AACH,gFAAgF;AAChF,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1C,gEAAgE;IAChE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AACjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE,CACvC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtE,oGAAoG;AACpG,SAAS,IAAI,CACX,GAAW,EACX,MAAM,GAAG,EAAE;IAEX,MAAM,GAAG,GAAsE,EAAE,CAAC;IAClF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;aACvD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;gBACvD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;;YAAM,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAA0B,EAAE,IAAY;IACxE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7D,wFAAwF;IACxF,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAC7F,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GACX,IAAI,KAAK,aAAa;QACtB,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO;QACV,OAAO,IAAI,KAAK,WAAW;YACzB,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,6BAA6B,CAAC;IACpC,IAAI,IAAI,GAAG,cAAc;QAAE,OAAO,eAAe,cAAc,GAAG,IAAI,MAAM,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAgC,EAAsB,EAAE,CACnE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,IAAI,GAAG,CAAC,CAAgC,EAAY,EAAE,CAC1D,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAElF,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAW,EAAE,IAA0B;IACvD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACrF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,2BAA4B,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE;QAChC,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,IAAI,+BAA+B,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,YAAY,GAChB,CAAC,IAAY,EAAe,EAAE,CAC9B,GAAG,EAAE,CACH,kBAAkB,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAE1D,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAiB;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK;YACR,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,wDAAwD;aAClE,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YAChB,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,KAAK,CAC1F,CAAC,EACD,WAAW,CACZ;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAA0B,EAC1B,IAA2C;IAE3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;aAChE,IAAI,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;aAChF,IAAI,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;aAC9E,CAAC;YACJ,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,GAAG;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;;gBAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAc,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAqB,EAAE,CAAC,CAAC;QACpD,GAAG,IAAI;QACP,KAAK;QACL,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;KAC/D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB;QACtC,OAAO,MAAM,CAAC,aAAa,kBAAkB,iBAAiB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnF,6EAA6E;QAC7E,MAAM,GAAG,GAAG,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC;YAC/E,OAAO,MAAM,CAAC,4BAA4B,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;YAC/C,OAAO,MAAM,CACX,cAAc,CAAC,wFAAwF,CACxG,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAC5B,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CACtC,CAAC;IACF,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC;IAC9C,IAAI,SAAS;QACX,OAAO,CAAC,OAAO;YACb,sBAAsB,IAAI,CAAC,MAAM,YAAY,aAAa,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CACrF,CAAC,EACD,WAAW,CACZ,CAAC;IACN,OAAO;QACL,GAAG,IAAI;QACP,cAAc,EAAE,IAAI,CAAC,KAAK;QAC1B,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;QAC9E,OAAO;KACR,CAAC;AACJ,CAAC"}
@@ -0,0 +1,62 @@
1
+ import { type CatalogEntry, type CatalogStatus, type CatalogTarget } from './types.js';
2
+ export interface CatalogAsset {
3
+ id: string;
4
+ kind: CatalogEntry['kind'];
5
+ name: string;
6
+ status: CatalogStatus;
7
+ targets: CatalogTarget[];
8
+ grantedTools: string[];
9
+ replacesLegacy: boolean;
10
+ description: string;
11
+ tags: string[];
12
+ requestedTools: string[];
13
+ sha256: string;
14
+ source: CatalogEntry['source'];
15
+ /** Digest verified (always false for revoked entries). */
16
+ eligible: boolean;
17
+ /** Verified package directory; absent when verification failed. */
18
+ dir?: string;
19
+ }
20
+ export interface CatalogDiagnostic {
21
+ id: string;
22
+ reason: string;
23
+ }
24
+ export interface CatalogSnapshot {
25
+ assets: CatalogAsset[];
26
+ diagnostics: CatalogDiagnostic[];
27
+ stateVersion: number | null;
28
+ }
29
+ /** Verified, body-free view of the catalog; empty (and file-free) without state.
30
+ * An unreadable state yields no assets and one `(state)` diagnostic, so
31
+ * consumers keep their legacy behaviour instead of failing. */
32
+ export declare function buildSnapshot(root: string): CatalogSnapshot;
33
+ /** Active, verified assets that name `target`. */
34
+ export declare function eligible(snapshot: CatalogSnapshot, target: CatalogTarget): CatalogAsset[];
35
+ export interface CatalogAuditReport {
36
+ /** False only when an active entry has a problem. */
37
+ ok: boolean;
38
+ configured: boolean;
39
+ active: number;
40
+ activeByTarget: Partial<Record<CatalogTarget, number>>;
41
+ entries: {
42
+ id: string;
43
+ status: CatalogStatus;
44
+ problems: string[];
45
+ }[];
46
+ legacyCollisions: {
47
+ name: string;
48
+ legacyOrigin: string;
49
+ catalogId: string;
50
+ replacesLegacy: boolean;
51
+ }[];
52
+ stale: {
53
+ id: string;
54
+ status: CatalogStatus;
55
+ ageDays: number;
56
+ }[];
57
+ /** Set when state.json exists but cannot be read. */
58
+ error?: string;
59
+ }
60
+ /** Re-hashes every entry and reports; repairs nothing. */
61
+ export declare function catalogAudit(root: string, now?: number): CatalogAuditReport;
62
+ //# sourceMappingURL=snapshot.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/catalog/snapshot.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/B,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AA+ED;;gEAEgE;AAChE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAuB3D;AAED,kDAAkD;AAClD,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,GAAG,YAAY,EAAE,CAIzF;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACrE,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,OAAO,CAAC;KACzB,EAAE,CAAC;IACJ,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChE,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiBD,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,kBAAkB,CA6CvF"}
@@ -0,0 +1,183 @@
1
+ /**
2
+ * The derived, disposable view of the catalog: state entries joined with the
3
+ * frontmatter of their verified packages. Pure — no writes, no registry, no
4
+ * network — and body-free. Cached per root on a hash of the state file;
5
+ * packages are content-addressed, so they need no re-hash until state changes.
6
+ * `catalogAudit` (and doctor) bypass the cache and re-hash.
7
+ */
8
+ import { createHash } from 'node:crypto';
9
+ import { existsSync, readFileSync } from 'node:fs';
10
+ import { join } from 'node:path';
11
+ import { parseFrontmatter, skillRoots } from '../orgrt/skill-library.js';
12
+ import { verifyEntry } from './digest.js';
13
+ import { loadCatalogState, statePath } from './state.js';
14
+ import { CatalogStateSchema, } from './types.js';
15
+ const asList = (v) => v === undefined ? [] : Array.isArray(v) ? v : v.split(/[,\s]+/).filter(Boolean);
16
+ const asStr = (v) => v === undefined ? '' : Array.isArray(v) ? v.join(', ') : v;
17
+ /** Authored metadata from a verified package: frontmatter or blueprint.json. */
18
+ function readMeta(kind, dir) {
19
+ if (kind === 'blueprint') {
20
+ const bp = JSON.parse(readFileSync(join(dir, 'blueprint.json'), 'utf8'));
21
+ return {
22
+ description: typeof bp.description === 'string' ? bp.description : '',
23
+ tags: [],
24
+ tools: [],
25
+ };
26
+ }
27
+ const { data } = parseFrontmatter(readFileSync(join(dir, 'SKILL.md'), 'utf8'));
28
+ return {
29
+ description: asStr(data.description),
30
+ tags: asList(data.tags),
31
+ tools: [...new Set(asList(data.tools))].sort(),
32
+ };
33
+ }
34
+ function toAsset(root, e, diagnostics) {
35
+ const base = {
36
+ id: e.id,
37
+ kind: e.kind,
38
+ name: e.id.slice(e.id.indexOf(':') + 1),
39
+ status: e.status,
40
+ targets: e.targets,
41
+ grantedTools: e.grantedTools,
42
+ replacesLegacy: e.replacesLegacy,
43
+ description: '',
44
+ tags: [],
45
+ requestedTools: e.inspection.requestedTools,
46
+ sha256: e.sha256,
47
+ source: e.source,
48
+ eligible: false,
49
+ };
50
+ if (e.status === 'revoked')
51
+ return base;
52
+ const check = verifyEntry(root, e);
53
+ if (!check.ok) {
54
+ diagnostics.push({ id: e.id, reason: check.reason });
55
+ return base;
56
+ }
57
+ try {
58
+ const meta = readMeta(e.kind, check.dir);
59
+ return {
60
+ ...base,
61
+ description: meta.description,
62
+ tags: meta.tags,
63
+ requestedTools: meta.tools.length ? meta.tools : base.requestedTools,
64
+ eligible: true,
65
+ dir: check.dir,
66
+ };
67
+ }
68
+ catch {
69
+ diagnostics.push({ id: e.id, reason: 'unreadable-metadata' });
70
+ return base;
71
+ }
72
+ }
73
+ function snapshotOf(root, state) {
74
+ const diagnostics = [];
75
+ const assets = [...state.entries]
76
+ .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0))
77
+ .map((e) => toAsset(root, e, diagnostics));
78
+ return { assets, diagnostics, stateVersion: state.schemaVersion };
79
+ }
80
+ const EMPTY = () => ({ assets: [], diagnostics: [], stateVersion: null });
81
+ const cache = new Map();
82
+ /** Verified, body-free view of the catalog; empty (and file-free) without state.
83
+ * An unreadable state yields no assets and one `(state)` diagnostic, so
84
+ * consumers keep their legacy behaviour instead of failing. */
85
+ export function buildSnapshot(root) {
86
+ let raw;
87
+ try {
88
+ raw = readFileSync(statePath(root));
89
+ }
90
+ catch (e) {
91
+ if (e.code === 'ENOENT')
92
+ return EMPTY();
93
+ return { ...EMPTY(), diagnostics: [{ id: '(state)', reason: e.message }] };
94
+ }
95
+ // Keyed on content: mtime + size can repeat across two different writes.
96
+ const key = createHash('sha256').update(raw).digest('hex');
97
+ const hit = cache.get(root);
98
+ if (hit?.key === key)
99
+ return hit.snap;
100
+ let snap;
101
+ try {
102
+ // Parse the very bytes that were hashed, so the key always matches the view.
103
+ const parsed = CatalogStateSchema.safeParse(JSON.parse(raw.toString('utf8')));
104
+ if (!parsed.success)
105
+ throw new Error(`catalog state is invalid: ${parsed.error.message}`);
106
+ snap = snapshotOf(root, parsed.data);
107
+ }
108
+ catch (e) {
109
+ snap = { ...EMPTY(), diagnostics: [{ id: '(state)', reason: e.message }] };
110
+ }
111
+ cache.set(root, { key, snap });
112
+ return snap;
113
+ }
114
+ /** Active, verified assets that name `target`. */
115
+ export function eligible(snapshot, target) {
116
+ return snapshot.assets.filter((a) => a.status === 'active' && a.eligible && a.targets.includes(target));
117
+ }
118
+ /** Entries sitting this long in a non-terminal, non-active status are stale. */
119
+ const STALE_DAYS = 30;
120
+ const DAY_MS = 86_400_000;
121
+ function entryProblems(e, verify) {
122
+ const problems = [];
123
+ if (verify)
124
+ problems.push(verify);
125
+ const live = e.status === 'approved' || e.status === 'active';
126
+ if (live && e.inspection.verdict === 'quarantine' && !e.inspection.override)
127
+ problems.push('quarantine-verdict-without-override');
128
+ const notRequested = e.grantedTools.filter((t) => !e.inspection.requestedTools.includes(t));
129
+ if (notRequested.length)
130
+ problems.push(`granted-not-requested: ${notRequested.join(', ')}`);
131
+ return problems;
132
+ }
133
+ /** Re-hashes every entry and reports; repairs nothing. */
134
+ export function catalogAudit(root, now = Date.now()) {
135
+ const report = {
136
+ ok: true,
137
+ configured: existsSync(statePath(root)),
138
+ active: 0,
139
+ activeByTarget: {},
140
+ entries: [],
141
+ legacyCollisions: [],
142
+ stale: [],
143
+ };
144
+ if (!report.configured)
145
+ return report;
146
+ let state;
147
+ try {
148
+ state = loadCatalogState(root);
149
+ }
150
+ catch (e) {
151
+ return { ...report, ok: false, error: e.message };
152
+ }
153
+ const snap = snapshotOf(root, state);
154
+ const failed = new Map(snap.diagnostics.map((d) => [d.id, d.reason]));
155
+ const legacy = skillRoots(root);
156
+ for (const e of [...state.entries].sort((a, b) => (a.id < b.id ? -1 : 1))) {
157
+ const problems = entryProblems(e, failed.get(e.id));
158
+ report.entries.push({ id: e.id, status: e.status, problems });
159
+ if (e.status === 'active') {
160
+ report.active++;
161
+ for (const t of e.targets)
162
+ report.activeByTarget[t] = (report.activeByTarget[t] ?? 0) + 1;
163
+ if (problems.length)
164
+ report.ok = false;
165
+ }
166
+ const name = e.id.slice(e.id.indexOf(':') + 1);
167
+ const hit = e.kind !== 'blueprint' && e.status !== 'revoked'
168
+ ? legacy.find((r) => existsSync(join(r.dir, name, 'SKILL.md')))
169
+ : undefined;
170
+ if (hit)
171
+ report.legacyCollisions.push({
172
+ name,
173
+ legacyOrigin: hit.origin,
174
+ catalogId: e.id,
175
+ replacesLegacy: e.replacesLegacy,
176
+ });
177
+ const ageDays = Math.floor((now - Date.parse(e.updatedAt)) / DAY_MS);
178
+ if (e.status !== 'active' && e.status !== 'revoked' && ageDays >= STALE_DAYS)
179
+ report.stale.push({ id: e.id, status: e.status, ageDays });
180
+ }
181
+ return report;
182
+ }
183
+ //# sourceMappingURL=snapshot.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/catalog/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAGL,kBAAkB,GAGnB,MAAM,YAAY,CAAC;AAgCpB,MAAM,MAAM,GAAG,CAAC,CAAgC,EAAY,EAAE,CAC5D,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClF,MAAM,KAAK,GAAG,CAAC,CAAgC,EAAU,EAAE,CACzD,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7D,gFAAgF;AAChF,SAAS,QAAQ,CACf,IAA0B,EAC1B,GAAW;IAEX,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAEtE,CAAC;QACF,OAAO;YACL,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACrE,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,CAAe,EAAE,WAAgC;IAC9E,MAAM,IAAI,GAAiB;QACzB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,EAAE;QACR,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,cAAc;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO;YACL,GAAG,IAAI;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc;YACpE,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAmB;IACnD,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;SAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,KAAK,GAAG,GAAoB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkD,CAAC;AAExE;;gEAEgE;AAChE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,EAAE,CAAC;QACnE,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,yEAAyE;IACzE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAG,EAAE,GAAG,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IACtC,IAAI,IAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,QAAQ,CAAC,QAAyB,EAAE,MAAqB;IACvE,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CACzE,CAAC;AACJ,CAAC;AAoBD,gFAAgF;AAChF,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,SAAS,aAAa,CAAC,CAAe,EAAE,MAA0B;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC9D,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ;QACzE,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,YAAY,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,0BAA0B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACjE,MAAM,MAAM,GAAuB;QACjC,EAAE,EAAE,IAAI;QACR,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC;QACT,cAAc,EAAE,EAAE;QAClB,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,EAAE;QACpB,KAAK,EAAE,EAAE;KACV,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1F,IAAI,QAAQ,CAAC,MAAM;gBAAE,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,GAAG,GACP,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAC9C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,GAAG;YACL,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAC3B,IAAI;gBACJ,YAAY,EAAE,GAAG,CAAC,MAAM;gBACxB,SAAS,EAAE,CAAC,CAAC,EAAE;gBACf,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC,CAAC,CAAC;QACL,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU;YAC1E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,26 @@
1
+ import { type FenceLoader } from './scan.js';
2
+ import type { CatalogEntry } from './types.js';
3
+ export type { FenceLoader } from './scan.js';
4
+ export interface StageOptions {
5
+ /** Self-asserted provenance, recorded in history. */
6
+ actor: string;
7
+ /** Candidate name when the source holds more than one. */
8
+ only?: string;
9
+ /** Default: `skill` when the source has a SKILL.md, else `blueprint`. */
10
+ kind?: CatalogEntry['kind'];
11
+ /** Scanner override (tests); default loads monofence-ai. */
12
+ fence?: FenceLoader;
13
+ now?: string;
14
+ }
15
+ export interface StageResult {
16
+ entry: CatalogEntry;
17
+ /** The stored package directory. */
18
+ dir: string;
19
+ /** Same digest as the recorded revision: nothing changed. */
20
+ unchanged: boolean;
21
+ }
22
+ /** Every directory holding a blueprint.json under `root`. */
23
+ export declare function findBlueprintDirs(root: string): string[];
24
+ /** Stage one candidate from `src` (owner/repo, git URL or local path). */
25
+ export declare function stage(root: string, src: string, opts: StageOptions): Promise<StageResult>;
26
+ //# sourceMappingURL=stage.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../../src/catalog/stage.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,KAAK,WAAW,EAA6C,MAAM,WAAW,CAAC;AAExF,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,YAAY,CAAC;AAE9D,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,IAAI,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,4DAA4D;IAC5D,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;CACpB;AAcD,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAUxD;AAgJD,0EAA0E;AAC1E,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA6H/F"}