@mossbear/projections 0.1.0-alpha.26

package/dist/path-rules.js

@@ -0,0 +1,65 @@
+/**
+ * The scope-relative path predicates that both attached-file derivations share.
+ *
+ * A guide's attached files land in two different places depending on the guide's
+ * shape — a plain guide's criteria go to the eval shadow tree (`eval-path.ts`), a
+ * skill's members go inside its own directory (`skill-member-path.ts`) — but both
+ * derivations answer the same safety questions first, and a second copy of those
+ * answers is a second thing to get wrong. They live here so the two derivations
+ * cannot drift on what counts as a safe path or as a skill.
+ */
+import { SafeRelativePosixPathSchema } from '@mossbear/protocol';
+import * as v from 'valibot';
+import { detectFormat } from './detect-format.js';
+/**
+ * The `.mossbear/` directory as a whole is Mossbear's own state — the sidecar, the
+ * repo config, pulled context, and the eval shadow tree. None of it is guidance,
+ * so a *guide* path that claims to live there is a caller error rather than a
+ * file to derive anything from.
+ */
+const MOSSBEAR_DIR_SEGMENT = '.mossbear';
+export function toPosix(path) {
+    return path.replaceAll('\\', '/');
+}
+export function isSafeRelativePath(path) {
+    return v.safeParse(SafeRelativePosixPathSchema, path).success;
+}
+/**
+ * Split a scope-relative path into its lower-cased segments.
+ *
+ * Lower-cased because recognition and derivation pull in opposite directions:
+ * a shadow path is *written* as exactly `.mossbear/evals/…`, but on a
+ * case-insensitive filesystem `.Mossbear/Evals/AGENTS.md` names the same file, and
+ * the two ways of being wrong about it are not symmetric — classifying eval
+ * criteria as guidance hands a rubric to an agent as instructions, while
+ * classifying a stray capitalised path as eval content merely declines to treat
+ * it as a guide. Recognition therefore leans the safe way.
+ */
+export function segmentsOf(path) {
+    return toPosix(path).toLowerCase().split('/');
+}
+/** True when `path` is inside `.mossbear/`, whatever it holds. */
+export function isUnderMossbearDir(path) {
+    return segmentsOf(path)[0] === MOSSBEAR_DIR_SEGMENT;
+}
+/**
+ * True when a path is a skill's own `SKILL.md`.
+ *
+ * The rule is *the attached file lives with its guide*, and a skill's guide is a
+ * directory — so its criteria are the positional `EVAL.md` inside it and its
+ * members are the rest of that directory
+ * (`skillMemberContentType`, `apps/dashboard/src/server/rules/skillMembers.ts:60-66`).
+ * Shadowing a skill as well would put one skill's rubric in two places, split it
+ * out of the directory that makes a skill portable, and hand the next reconciler
+ * two rows to disagree over — the "two shapes of one fact" CLAUDE.md → Simplicity
+ * refuses. `detectFormat` is the same test discovery uses, so what counts as a
+ * skill here cannot drift from what counts as one there.
+ *
+ * This one predicate partitions the two derivations: `evalShadowPath` returns
+ * null exactly where this is true, and `skillMemberPath` returns null exactly
+ * where it is false.
+ */
+export function isSkillGuidePath(path) {
+    return detectFormat(path) === 'skill-md';
+}
+//# sourceMappingURL=path-rules.js.map

package/dist/path-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-rules.js","sourceRoot":"","sources":["../src/path-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,WAAW,CAAA;AAExC,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC,OAAO,CAAA;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AAC/C,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,UAAU,CAAA;AAC1C,CAAC"}

package/dist/skill-member-path.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Where a **skill's member files** live on disk: inside the skill's own
+ * directory, beside the `SKILL.md` that names it.
+ *
+ * This is the other half of the rule `eval-path.ts` states — *the attached file
+ * lives with its guide* — for the guide shape that is a directory rather than a
+ * bare file. A skill is `<dir>/SKILL.md` plus whatever `scripts/`,
+ * `references/` and `assets/` it carries, and those members are what make it
+ * runnable: a `SKILL.md` delivered without them is a skill that cannot do its
+ * job. `isSkillGuidePath` partitions the two derivations exactly —
+ * `evalShadowPath` returns null where it is true, this returns null where it is
+ * false — so no guide can ever get both, and none can get neither.
+ *
+ * **Why the server derives it rather than each client.** Identical to
+ * `evalShadowPath`'s reason, and it is the failure `skill-member-delivery` was
+ * filed for: members are `guide_files` rows attached to their guide by
+ * `guide_id` with no bundle membership of their own
+ * (`apps/dashboard/src/server/rules/skillMembers.ts:200-205`), so the only thing
+ * that knows where a member belongs is the guide's own path. Letting each
+ * subscribed clone re-derive that from a member name would be the per-clone
+ * divergence `unified-item-sync` exists to remove — and letting none of them
+ * derive it is what shipped, which is a skill delivered in pieces with the sync
+ * reporting success.
+ */
+/**
+ * The scope-relative path a skill member lands at, or `null` when it has no
+ * representable home.
+ *
+ * `guidePath` is the skill's own `SKILL.md`, scope-relative; `memberPath` is the
+ * member's path *relative to the skill directory* — the form the importer stores
+ * in member metadata (`SkillMemberMetadata.path`). The result is relative to the
+ * same scope root the guide path is, so a `global` skill's members land under the
+ * home directory by the same rule that puts a `project` skill's under the
+ * checkout, with no second scope decision to keep in sync.
+ *
+ * Null, never a repaired path, in every rejecting case — the caller reports the
+ * member as unplaceable rather than writing it somewhere approximate:
+ *
+ * - the guide is not a skill (a plain guide has no directory to hold members),
+ *   or its path is unsafe or inside `.mossbear/`;
+ * - the member path is absolute, traverses, carries control characters, or is
+ *   over-long — `memberPath` is remote-supplied and is parsed, not trusted;
+ * - the joined result is unsafe or would land in `.mossbear/`, which is Mossbear's own
+ *   state and is rewritten by sync.
+ *
+ * The result is re-checked rather than assumed safe from its two halves: length
+ * is the case that only exists after joining, where a legal guide path and a
+ * legal member path together exceed the bound the wire format enforces.
+ */
+export declare function skillMemberPath(guidePath: string, memberPath: string): string | null;
+//# sourceMappingURL=skill-member-path.d.ts.map

package/dist/skill-member-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-member-path.d.ts","sourceRoot":"","sources":["../src/skill-member-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBpF"}

package/dist/skill-member-path.js

@@ -0,0 +1,76 @@
+/**
+ * Where a **skill's member files** live on disk: inside the skill's own
+ * directory, beside the `SKILL.md` that names it.
+ *
+ * This is the other half of the rule `eval-path.ts` states — *the attached file
+ * lives with its guide* — for the guide shape that is a directory rather than a
+ * bare file. A skill is `<dir>/SKILL.md` plus whatever `scripts/`,
+ * `references/` and `assets/` it carries, and those members are what make it
+ * runnable: a `SKILL.md` delivered without them is a skill that cannot do its
+ * job. `isSkillGuidePath` partitions the two derivations exactly —
+ * `evalShadowPath` returns null where it is true, this returns null where it is
+ * false — so no guide can ever get both, and none can get neither.
+ *
+ * **Why the server derives it rather than each client.** Identical to
+ * `evalShadowPath`'s reason, and it is the failure `skill-member-delivery` was
+ * filed for: members are `guide_files` rows attached to their guide by
+ * `guide_id` with no bundle membership of their own
+ * (`apps/dashboard/src/server/rules/skillMembers.ts:200-205`), so the only thing
+ * that knows where a member belongs is the guide's own path. Letting each
+ * subscribed clone re-derive that from a member name would be the per-clone
+ * divergence `unified-item-sync` exists to remove — and letting none of them
+ * derive it is what shipped, which is a skill delivered in pieces with the sync
+ * reporting success.
+ */
+import { isSafeRelativePath, isSkillGuidePath, isUnderMossbearDir, toPosix, } from './path-rules.js';
+/**
+ * The scope-relative path a skill member lands at, or `null` when it has no
+ * representable home.
+ *
+ * `guidePath` is the skill's own `SKILL.md`, scope-relative; `memberPath` is the
+ * member's path *relative to the skill directory* — the form the importer stores
+ * in member metadata (`SkillMemberMetadata.path`). The result is relative to the
+ * same scope root the guide path is, so a `global` skill's members land under the
+ * home directory by the same rule that puts a `project` skill's under the
+ * checkout, with no second scope decision to keep in sync.
+ *
+ * Null, never a repaired path, in every rejecting case — the caller reports the
+ * member as unplaceable rather than writing it somewhere approximate:
+ *
+ * - the guide is not a skill (a plain guide has no directory to hold members),
+ *   or its path is unsafe or inside `.mossbear/`;
+ * - the member path is absolute, traverses, carries control characters, or is
+ *   over-long — `memberPath` is remote-supplied and is parsed, not trusted;
+ * - the joined result is unsafe or would land in `.mossbear/`, which is Mossbear's own
+ *   state and is rewritten by sync.
+ *
+ * The result is re-checked rather than assumed safe from its two halves: length
+ * is the case that only exists after joining, where a legal guide path and a
+ * legal member path together exceed the bound the wire format enforces.
+ */
+export function skillMemberPath(guidePath, memberPath) {
+    const guide = toPosix(guidePath);
+    if (!isSafeRelativePath(guide))
+        return null;
+    if (isUnderMossbearDir(guide))
+        return null;
+    if (!isSkillGuidePath(guide))
+        return null;
+    const member = toPosix(memberPath);
+    if (!isSafeRelativePath(member))
+        return null;
+    // A `skill-md` path always sits under a `skills/` directory and ends in
+    // `/skill.md` (`detect-format.ts`), so it always has a parent — there is no
+    // root-level skill and therefore no empty-directory case to handle.
+    const separatorIndex = guide.lastIndexOf('/');
+    if (separatorIndex === -1)
+        return null;
+    const skillDir = guide.slice(0, separatorIndex);
+    const joined = `${skillDir}/${member}`;
+    if (!isSafeRelativePath(joined))
+        return null;
+    if (isUnderMossbearDir(joined))
+        return null;
+    return joined;
+}
+//# sourceMappingURL=skill-member-path.js.map

package/dist/skill-member-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-member-path.js","sourceRoot":"","sources":["../src/skill-member-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,OAAO,GACR,MAAM,iBAAiB,CAAA;AAExB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,UAAkB;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAE5C,wEAAwE;IACxE,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7C,IAAI,cAAc,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IAE/C,MAAM,MAAM,GAAG,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAA;IACtC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,IAAI,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/skill-member-path.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skill-member-path.test.d.ts.map

package/dist/skill-member-path.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-member-path.test.d.ts","sourceRoot":"","sources":["../src/skill-member-path.test.ts"],"names":[],"mappings":""}

package/dist/skill-member-path.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-member-path.test.js","sourceRoot":"","sources":["../src/skill-member-path.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,MAAM,KAAK,GAAG,gCAAgC,CAAA;AAE9C,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,4EAA4E;QAC5E,kEAAkE;QAClE,yCAAyC;QACzC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CACpD,uCAAuC,CACxC,CAAA;QACD,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CACxD,2CAA2C,CAC5C,CAAA;QACD,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,eAAe,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACzE,iCAAiC,CAClC,CAAA;QACD,MAAM,CAAC,eAAe,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACzE,iCAAiC,CAClC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAC7D,gDAAgD,CACjD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExD,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACrE,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClE,MAAM,CAAC,eAAe,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnE,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,CAAC,eAAe,CAAC,uCAAuC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChE,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxD,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpE,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,eAAe,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,eAAe,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/E,gFAAgF;QAChF,2CAA2C;QAC3C,MAAM,CAAC,eAAe,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,sEAAsE;QACtE,+DAA+D;QAC/D,uEAAuE;QACvE,qCAAqC;QACrC,MAAM,IAAI,GAAG,kBAAkB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAC5C,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,eAAe,CAAC,mCAAmC,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CACnF,uCAAuC,CACxC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@mossbear/projections",
+  "version": "0.1.0-alpha.26",
+  "private": false,
+  "description": "Guide file format detection and compatibility renderers for Mossbear — AGENTS.md, .agents/, CLAUDE.md, .claude/rules/, .cursorrules.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/.tsbuildinfo",
+    "README.md",
+    "LICENSE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/auden-to/auden.git",
+    "directory": "packages/projections"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": false
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.json",
+    "dev": "tsc --project tsconfig.json --watch",
+    "typecheck": "tsc --project tsconfig.json --noEmit",
+    "lint": "oxlint",
+    "lint:fix": "oxfmt && oxlint --fix",
+    "format": "oxfmt",
+    "format:check": "oxfmt --check",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@mossbear/protocol": "0.1.0-alpha.26"
+  },
+  "devDependencies": {
+    "typescript": "*"
+  }
+}