@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/shared/skill-markdown.js

@@ -0,0 +1,131 @@
+/**
+ * `SKILL.md` as the Agent Skills specification (https://agentskills.io/specification) defines it: YAML front matter
+ * with a required `name` (the skill's directory) and `description`, optional `license`, `compatibility`, `metadata`
+ * and `allowed-tools`, then the Markdown body. The browser checks it as it is typed and the server before every save
+ * and import, with the same rules and the same field-level reasons. Keys the specification does not name are kept.
+ */
+import { parseDocument, stringify } from 'yaml';
+export const SKILL_NAME_MAX = 64;
+export const SKILL_DESCRIPTION_MAX = 1024;
+export const SKILL_COMPATIBILITY_MAX = 500;
+/** Lower-case letters and digits in words joined by single hyphens. */
+const NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+const FRONT_MATTER = /^\uFEFF?---[ \t]*\r?\n(?:([\s\S]*?)\r?\n)?---[ \t]*(?:\r?\n|$)/u;
+function problem(field, reason, message, max) {
+    return { field, reason, message, ...(max === undefined ? {} : { max }) };
+}
+/** Why `name` cannot name a skill, or null. */
+export function skillNameProblem(name) {
+    if (name === undefined || name === null)
+        return problem('name', 'required', 'Give the skill a `name`.');
+    if (typeof name !== 'string')
+        return problem('name', 'type', '`name` must be a string.');
+    if (name === '')
+        return problem('name', 'required', 'Give the skill a `name`.');
+    if (name.length > SKILL_NAME_MAX)
+        return problem('name', 'tooLong', `\`name\` is at most ${SKILL_NAME_MAX} characters.`, SKILL_NAME_MAX);
+    if (!NAME.test(name))
+        return problem('name', 'pattern', '`name` uses lower-case letters, digits and single hyphens, and does not start or end with a hyphen.');
+    return null;
+}
+function optionalText(field, value, max) {
+    if (value === undefined || value === null)
+        return null;
+    if (typeof value !== 'string')
+        return problem(field, 'type', `\`${field}\` must be a string.`);
+    if (!value.trim())
+        return problem(field, 'empty', `\`${field}\` must not be empty.`);
+    if (max !== undefined && value.length > max)
+        return problem(field, 'tooLong', `\`${field}\` is at most ${max} characters.`, max);
+    return null;
+}
+/** Splits `SKILL.md` into its front matter and body and checks the front matter against the specification. */
+export function parseSkillMarkdown(markdown) {
+    const match = FRONT_MATTER.exec(markdown);
+    if (!match)
+        return {
+            frontMatter: {},
+            body: markdown,
+            problems: [
+                problem('frontMatter', 'missing', 'SKILL.md starts with YAML front matter between `---` lines, holding at least `name` and `description`.'),
+            ],
+        };
+    const body = markdown.slice(match[0].length);
+    const document = parseDocument(match[1] ?? '', { uniqueKeys: true });
+    if (document.errors.length > 0)
+        return {
+            frontMatter: {},
+            body,
+            problems: [
+                problem('frontMatter', 'yaml', `The front matter is not valid YAML: ${document.errors[0]?.message.split('\n')[0] ?? ''}`),
+            ],
+        };
+    const data = document.toJS() ?? {};
+    if (data === null || typeof data !== 'object' || Array.isArray(data))
+        return {
+            frontMatter: {},
+            body,
+            problems: [
+                problem('frontMatter', 'notMapping', 'The front matter is a mapping of keys, such as `name: my-skill`.'),
+            ],
+        };
+    const values = data;
+    const problems = [];
+    const found = {};
+    const nameProblem = skillNameProblem(values.name);
+    if (nameProblem)
+        problems.push(nameProblem);
+    else
+        found.name = values.name;
+    const description = values.description;
+    if (description === undefined || description === null)
+        problems.push(problem('description', 'required', 'Give the skill a `description`: what it does and when to use it.'));
+    else if (typeof description !== 'string')
+        problems.push(problem('description', 'type', '`description` must be a string.'));
+    else if (!description.trim())
+        problems.push(problem('description', 'required', 'Give the skill a `description`: what it does and when to use it.'));
+    else if (description.length > SKILL_DESCRIPTION_MAX)
+        problems.push(problem('description', 'tooLong', `\`description\` is at most ${SKILL_DESCRIPTION_MAX} characters.`, SKILL_DESCRIPTION_MAX));
+    else
+        found.description = description.trim();
+    const license = optionalText('license', values.license);
+    if (license)
+        problems.push(license);
+    else if (typeof values.license === 'string')
+        found.license = values.license;
+    const compatibility = optionalText('compatibility', values.compatibility, SKILL_COMPATIBILITY_MAX);
+    if (compatibility)
+        problems.push(compatibility);
+    else if (typeof values.compatibility === 'string')
+        found.compatibility = values.compatibility.trim();
+    const tools = optionalText('allowed-tools', values['allowed-tools']);
+    if (tools)
+        problems.push(tools);
+    else if (typeof values['allowed-tools'] === 'string')
+        found.allowedTools = values['allowed-tools'];
+    const metadata = values.metadata;
+    if (metadata !== undefined && metadata !== null) {
+        if (typeof metadata !== 'object' ||
+            Array.isArray(metadata) ||
+            Object.values(metadata).some((value) => typeof value !== 'string'))
+            problems.push(problem('metadata', 'type', '`metadata` is a mapping of keys to string values.'));
+        else
+            found.metadata = metadata;
+    }
+    return { frontMatter: found, body, problems };
+}
+/** `SKILL.md` of front matter (keys in the order given, undefined ones left out) and a body. */
+export function composeSkillMarkdown(frontMatter, body) {
+    const values = Object.fromEntries(Object.entries(frontMatter).filter(([, value]) => value !== undefined));
+    const yaml = stringify(values, { lineWidth: 0 }).trimEnd();
+    return `---\n${yaml}\n---\n\n${body.replace(/^\s+/u, '')}`;
+}
+/** The first problem of each field, for showing beside what it concerns. */
+export function problemsByField(problems) {
+    const result = new Map();
+    for (const item of problems)
+        if (!result.has(item.field))
+            result.set(item.field, item);
+    return result;
+}
+//# sourceMappingURL=skill-markdown.js.map

package/dist/shared/skill-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-markdown.js","sourceRoot":"","sources":["../../shared/skill-markdown.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEhD,MAAM,CAAC,MAAM,cAAc,GAAW,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAW,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAW,GAAG,CAAC;AAEnD,uEAAuE;AACvE,MAAM,IAAI,GAAG,6BAA6B,CAAC;AAC3C,MAAM,YAAY,GAChB,iEAAiE,CAAC;AAyDpE,SAAS,OAAO,CACd,KAA4B,EAC5B,MAA8B,EAC9B,OAAe,EACf,GAAY;IAEZ,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB,CAC9B,IAAa;IAEb,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QACrC,OAAO,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAC1B,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,EAAE;QACb,OAAO,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,OAAO,OAAO,CACZ,MAAM,EACN,SAAS,EACT,uBAAuB,cAAc,cAAc,EACnD,cAAc,CACf,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAClB,OAAO,OAAO,CACZ,MAAM,EACN,SAAS,EACT,qGAAqG,CACtG,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,KAAoD,EACpD,KAAc,EACd,GAAY;IAEZ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,KAAK,sBAAsB,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACf,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,KAAK,uBAAuB,CAAC,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QACzC,OAAO,OAAO,CACZ,KAAK,EACL,SAAS,EACT,KAAK,KAAK,iBAAiB,GAAG,cAAc,EAC5C,GAAG,CACJ,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QACR,OAAO;YACL,WAAW,EAAE,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,OAAO,CACL,aAAa,EACb,SAAS,EACT,wGAAwG,CACzG;aACF;SACF,CAAC;IACJ,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC5B,OAAO;YACL,WAAW,EAAE,EAAE;YACf,IAAI;YACJ,QAAQ,EAAE;gBACR,OAAO,CACL,aAAa,EACb,MAAM,EACN,uCAAuC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1F;aACF;SACF,CAAC;IACJ,MAAM,IAAI,GAAY,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAClE,OAAO;YACL,WAAW,EAAE,EAAE;YACf,IAAI;YACJ,QAAQ,EAAE;gBACR,OAAO,CACL,aAAa,EACb,YAAY,EACZ,kEAAkE,CACnE;aACF;SACF,CAAC;IACJ,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAEP,EAAE,CAAC;IAEP,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;;QACvC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAc,CAAC;IAExC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI;QACnD,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,aAAa,EACb,UAAU,EACV,kEAAkE,CACnE,CACF,CAAC;SACC,IAAI,OAAO,WAAW,KAAK,QAAQ;QACtC,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAClE,CAAC;SACC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QAC1B,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,aAAa,EACb,UAAU,EACV,kEAAkE,CACnE,CACF,CAAC;SACC,IAAI,WAAW,CAAC,MAAM,GAAG,qBAAqB;QACjD,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,aAAa,EACb,SAAS,EACT,8BAA8B,qBAAqB,cAAc,EACjE,qBAAqB,CACtB,CACF,CAAC;;QACC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC/B,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAE5E,MAAM,aAAa,GAAG,YAAY,CAChC,eAAe,EACf,MAAM,CAAC,aAAa,EACpB,uBAAuB,CACxB,CAAC;IACF,IAAI,aAAa;QAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;SAC3C,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QAC/C,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAEpD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC3B,IAAI,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ;QAClD,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAElE,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,UAAU,EACV,MAAM,EACN,mDAAmD,CACpD,CACF,CAAC;;YACC,KAAK,CAAC,QAAQ,GAAG,QAAkC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,WAA8C,EAC9C,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CACvE,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3D,OAAO,QAAQ,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAC7B,QAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkD,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,QAAQ;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/shared/skills.d.ts

@@ -0,0 +1,155 @@
+/**
+ * The skill library as the browser and the server's admin API exchange it. A skill is a directory in the open Agent
+ * Skills format (https://agentskills.io/specification): `SKILL.md`, whose front matter alone names and describes the
+ * skill (`skill-markdown.ts`), and supporting files, text or binary, conventionally under `scripts/`, `references/`
+ * and `assets/`. The front matter's `name` is the skill's slug and directory: renaming it renames the skill. Every save is a new version; agents always get the latest one, and an
+ * older one can be compared and restored (as a new version). A file's bytes are stored once per content, by their
+ * SHA-256, whichever versions and skills hold them; a version lists its files by that hash.
+ *
+ * Skills are attached to agents, and as defaults to a working directory (`workdir`) or to a scope the application
+ * registers: a run gets the agent's skills and the defaults of its subject's scopes and of the directories it works in.
+ */
+/** `agent`, `workdir` or a scope key the application registered. */
+export type SkillScope = string;
+export interface Skill {
+    readonly id: string;
+    /** The directory name: the `name` of its front matter, which renames it. */
+    readonly slug: string;
+    /** The front matter's `name`, the same as `slug`. */
+    readonly name: string;
+    readonly description: string;
+    /** The front matter's `compatibility`, what the skill needs of its environment; null when it says nothing. */
+    readonly compatibility: string | null;
+    /**
+     * The current version, from 1, and the skill's revision: a save or a restore names the version it was made against
+     * (`expectedRevision`) and is refused with 409 when another save came first.
+     */
+    readonly version: number;
+    readonly fileCount: number;
+    /** The bytes of `SKILL.md` and every file. */
+    readonly size: number;
+    /** Files that are scripts (executable, or under `scripts/`): an online agent reads them but never runs them. */
+    readonly scriptCount: number;
+    /** Their paths. */
+    readonly scripts: readonly string[];
+    readonly agentCount: number;
+    readonly createdById: string | null;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+export interface SkillFileEntry {
+    /** Relative to the skill's directory, such as `scripts/check.sh`. */
+    readonly path: string;
+    /** SHA-256 of its bytes, hex: where they are stored. */
+    readonly hash: string;
+    readonly size: number;
+    /** Placed with the executable bit, as a script. */
+    readonly executable: boolean;
+    /** Its text; null for a binary file, which is downloaded instead. */
+    readonly content: string | null;
+}
+/**
+ * A file of a save: its `content` as text, or the `hash` of bytes already stored (a file kept as it was, moved, or
+ * uploaded first with `POST /skills/uploads`).
+ */
+export interface SkillFileInput {
+    readonly path: string;
+    readonly content?: string;
+    readonly hash?: string;
+    readonly executable?: boolean;
+}
+/** What `POST /skills/uploads` stored: `id` is the bytes' SHA-256, which a save or an import names. */
+export interface SkillUpload {
+    readonly id: string;
+    readonly size: number;
+    /** Whether the bytes are text (UTF-8 without NUL bytes). */
+    readonly text: boolean;
+}
+/**
+ * Importing a zip in the Agent Skills layout (`SKILL.md` at its root or in its single top folder, which is named as its
+ * front matter's `name`): a new skill, or with `skillId` a new version of that skill. It is checked as a save is.
+ */
+export interface SkillImport {
+    /** The upload holding the zip (`SkillUpload.id`). */
+    readonly archive: string;
+    readonly skillId?: string;
+    /** With `skillId`: the version the import was made against. */
+    readonly expectedRevision?: number;
+    readonly note?: string | null;
+}
+export interface SkillAttachment {
+    readonly scope: SkillScope;
+    readonly scopeId: string;
+    /** The agent's name for `agent`; null where this plugin cannot name it. */
+    readonly name: string | null;
+}
+export interface SkillDetail extends Skill {
+    /** `SKILL.md`, front matter and body, as written. */
+    readonly content: string;
+    readonly files: readonly SkillFileEntry[];
+    readonly attachments: readonly SkillAttachment[];
+}
+/** A skill as its page reads it (`GET /skills/:id`): with whether the caller may edit it. */
+export interface SkillView extends SkillDetail {
+    readonly canEdit: boolean;
+}
+export interface SkillVersion {
+    readonly version: number;
+    readonly name: string;
+    readonly description: string;
+    readonly note: string | null;
+    readonly createdById: string | null;
+    readonly createdByName: string | null;
+    readonly createdAt: string;
+}
+export interface SkillVersionDetail extends SkillVersion {
+    readonly content: string;
+    readonly files: readonly SkillFileEntry[];
+}
+/** Creating a skill: its `SKILL.md`, whose front matter names and describes it, and its files. */
+export interface SkillInput {
+    readonly content: string;
+    readonly files?: readonly SkillFileInput[];
+}
+/** Saving a skill: a new version with everything it holds. A new front matter `name` renames it. */
+export interface SkillSave {
+    readonly content: string;
+    readonly files: readonly SkillFileInput[];
+    readonly note?: string | null;
+    /** The version the edit was made against. */
+    readonly expectedRevision: number;
+}
+/** Restoring an older version (`POST /skills/:id/versions/:version/restore`). */
+export interface SkillRestore {
+    /** The version current when the restore was asked for. */
+    readonly expectedRevision: number;
+}
+/** Files a skill holds besides `SKILL.md`. */
+export declare const SKILL_MAX_FILES: number;
+/** The largest file. */
+export declare const SKILL_FILE_MAX_BYTES: number;
+/** The whole skill: `SKILL.md` and its files. */
+export declare const SKILL_MAX_BYTES: number;
+/** The body of `SKILL.md`. */
+export declare const SKILL_CONTENT_MAX_BYTES: number;
+/** One upload: a file, or a zip to import. */
+export declare const SKILL_UPLOAD_MAX_BYTES: number;
+/** The folders the specification names: code agents run, documentation they read, and templates and resources. */
+export declare const SKILL_FOLDERS: readonly string[];
+/** A file an agent may run: executable, or under `scripts/`. Online agents read scripts but never run them. */
+export declare function isSkillScript(file: {
+    readonly path: string;
+    readonly executable: boolean;
+}): boolean;
+/** A size for people: `512 B`, `12.5 KB`, `3.1 MB`. */
+export declare function formatBytes(bytes: number): string;
+/**
+ * - `required`, `invalid`: no path, or not a relative path of plain names (no `.`, `..`, backslashes or control characters),
+ *   or `SKILL.md`, which is the body rather than a file.
+ * - `duplicate`: another file has it; `conflict`: it is a folder of another file, or one of its folders is a file.
+ */
+export type SkillFilePathProblem = 'required' | 'invalid' | 'duplicate' | 'conflict';
+/** Why `path` cannot name a supporting file among `others`, or null. */
+export declare function skillFilePathProblem(path: string, others?: readonly string[]): SkillFilePathProblem | null;
+export { composeSkillMarkdown, parseSkillMarkdown, skillNameProblem, SKILL_COMPATIBILITY_MAX, SKILL_DESCRIPTION_MAX, SKILL_NAME_MAX, type ParsedSkillMarkdown, type SkillFrontMatter, type SkillFrontMatterField, type SkillFrontMatterProblem, type SkillFrontMatterReason, } from './skill-markdown.js';
+//# sourceMappingURL=skills.d.ts.map

package/dist/shared/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../shared/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oEAAoE;AACpE,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gHAAgH;IAChH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,uGAAuG;AACvG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAY,SAAQ,KAAK;IACxC,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAED,6FAA6F;AAC7F,MAAM,WAAW,SAAU,SAAQ,WAAW;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CAC3C;AAED,kGAAkG;AAClG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED,oGAAoG;AACpG,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,8CAA8C;AAC9C,eAAO,MAAM,eAAe,EAAE,MAAY,CAAC;AAC3C,wBAAwB;AACxB,eAAO,MAAM,oBAAoB,EAAE,MAAwB,CAAC;AAC5D,iDAAiD;AACjD,eAAO,MAAM,eAAe,EAAE,MAAyB,CAAC;AACxD,8BAA8B;AAC9B,eAAO,MAAM,uBAAuB,EAAE,MAAmB,CAAC;AAC1D,8CAA8C;AAC9C,eAAO,MAAM,sBAAsB,EAAE,MAAyB,CAAC;AAE/D,kHAAkH;AAClH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAI1C,CAAC;AAEF,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B,GAAG,OAAO,CAEV;AAED,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC9B,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,SAAS,MAAM,EAAO,GAC7B,oBAAoB,GAAG,IAAI,CAyB7B;AAED,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC"}

package/dist/shared/skills.js

@@ -0,0 +1,61 @@
+/**
+ * The skill library as the browser and the server's admin API exchange it. A skill is a directory in the open Agent
+ * Skills format (https://agentskills.io/specification): `SKILL.md`, whose front matter alone names and describes the
+ * skill (`skill-markdown.ts`), and supporting files, text or binary, conventionally under `scripts/`, `references/`
+ * and `assets/`. The front matter's `name` is the skill's slug and directory: renaming it renames the skill. Every save is a new version; agents always get the latest one, and an
+ * older one can be compared and restored (as a new version). A file's bytes are stored once per content, by their
+ * SHA-256, whichever versions and skills hold them; a version lists its files by that hash.
+ *
+ * Skills are attached to agents, and as defaults to a working directory (`workdir`) or to a scope the application
+ * registers: a run gets the agent's skills and the defaults of its subject's scopes and of the directories it works in.
+ */
+/** Files a skill holds besides `SKILL.md`. */
+export const SKILL_MAX_FILES = 200;
+/** The largest file. */
+export const SKILL_FILE_MAX_BYTES = 5 * 1024 * 1024;
+/** The whole skill: `SKILL.md` and its files. */
+export const SKILL_MAX_BYTES = 20 * 1024 * 1024;
+/** The body of `SKILL.md`. */
+export const SKILL_CONTENT_MAX_BYTES = 200 * 1024;
+/** One upload: a file, or a zip to import. */
+export const SKILL_UPLOAD_MAX_BYTES = 25 * 1024 * 1024;
+/** The folders the specification names: code agents run, documentation they read, and templates and resources. */
+export const SKILL_FOLDERS = [
+    'scripts',
+    'references',
+    'assets',
+];
+/** A file an agent may run: executable, or under `scripts/`. Online agents read scripts but never run them. */
+export function isSkillScript(file) {
+    return file.executable || file.path.startsWith('scripts/');
+}
+/** A size for people: `512 B`, `12.5 KB`, `3.1 MB`. */
+export function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
+}
+/** Why `path` cannot name a supporting file among `others`, or null. */
+export function skillFilePathProblem(path, others = []) {
+    const value = path.trim();
+    if (!value)
+        return 'required';
+    const parts = value.split('/');
+    if (value.startsWith('/') ||
+        value.includes('\\') ||
+        // eslint-disable-next-line no-control-regex
+        /[\u0000-\u001f\u007f]/u.test(value) ||
+        parts.some((part) => part === '' || part === '.' || part === '..' || part !== part.trim()) ||
+        value.length > 255 ||
+        value === 'SKILL.md')
+        return 'invalid';
+    if (others.includes(value))
+        return 'duplicate';
+    if (others.some((other) => other.startsWith(`${value}/`) || value.startsWith(`${other}/`)))
+        return 'conflict';
+    return null;
+}
+export { composeSkillMarkdown, parseSkillMarkdown, skillNameProblem, SKILL_COMPATIBILITY_MAX, SKILL_DESCRIPTION_MAX, SKILL_NAME_MAX, } from './skill-markdown.js';
+//# sourceMappingURL=skills.js.map

package/dist/shared/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../shared/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAmIH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAW,GAAG,CAAC;AAC3C,wBAAwB;AACxB,MAAM,CAAC,MAAM,oBAAoB,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5D,iDAAiD;AACjD,MAAM,CAAC,MAAM,eAAe,GAAW,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,8BAA8B;AAC9B,MAAM,CAAC,MAAM,uBAAuB,GAAW,GAAG,GAAG,IAAI,CAAC;AAC1D,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAW,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/D,kHAAkH;AAClH,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,SAAS;IACT,YAAY;IACZ,QAAQ;CACT,CAAC;AAEF,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAAC,IAG7B;IACC,OAAO,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC7D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAClD,CAAC;AAUD,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,SAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,UAAU,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IACE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,4CAA4C;QAC5C,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpC,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CACvE;QACD,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,KAAK,UAAU;QAEpB,OAAO,SAAS,CAAC;IACnB,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/C,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAC1E;QAED,OAAO,UAAU,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,GAMf,MAAM,qBAAqB,CAAC"}

package/dist/shared/variables.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Variables (environment variables, every one a secret) as the browser and the server's admin API exchange them. A
+ * value is encrypted at rest and write-only: lists show names and who changed them; reading values back is a separate,
+ * audited request.
+ *
+ * Variables are set on an agent, on a working directory (`workdir`), or on a scope the application registers (the
+ * group a run's subject belongs to, say), and a run gets them merged: the subject's scopes < its working directories <
+ * the agent, a later scope replacing an earlier one's value.
+ *
+ * A run's variables go to whichever runner takes it, including a personal runner of whoever may use the agent: sharing
+ * an agent shares the tokens it works with. A variable marked `teamRunnersOnly` keeps a run that gets it off personal
+ * runners: only a team runner takes such a run.
+ *
+ * A variable taken from the runner (`fromRunner`) is a name only: the runner that takes the run provides its value from
+ * its own configuration, and the value never reaches the application. It merges with the others by name, a later
+ * scope's entry replacing an earlier one's whichever kind each is.
+ */
+/** The scopes this plugin knows; the application registers the others (`GET agents/vocabulary` lists them). */
+export declare const CORE_VARIABLE_SCOPES: readonly ["agent", "workdir"];
+/** `agent`, `workdir` or a scope key the application registered. */
+export type VariableScope = string;
+export interface Variable {
+    readonly name: string;
+    /** Only team runners receive it: a run that gets it waits for one (`secretsNotAllowed`); absent means false. */
+    readonly teamRunnersOnly?: boolean;
+    /**
+     * Taken from the runner: the variable has no value here, and the runner that takes the run provides it from its own
+     * configuration (`nocobase-runner env set NAME`, or `--pass-env NAME`); a runner that does not fails the run before
+     * the agent starts. Absent means false.
+     */
+    readonly fromRunner?: boolean;
+    readonly updatedAt: string;
+    readonly updatedById: string | null;
+    readonly updatedByName: string | null;
+}
+/** A variable named by where it is kept, such as one that asks for a team runner. */
+export interface VariableRef {
+    readonly scope: VariableScope;
+    readonly scopeId: string;
+    readonly name: string;
+}
+export interface VariableValue {
+    readonly name: string;
+    readonly value: string;
+}
+export declare const VARIABLE_AUDIT_ACTIONS: readonly ["set", "delete", "reveal", "deliver"];
+export type VariableAuditAction = (typeof VARIABLE_AUDIT_ACTIONS)[number];
+/** Who did what with a scope's variables; `deliver` is a runner receiving them for a run or a job. */
+export interface VariableAudit {
+    readonly id: string;
+    readonly at: string;
+    readonly action: VariableAuditAction;
+    readonly names: readonly string[];
+    readonly userId: string | null;
+    readonly userName: string | null;
+    readonly runId: string | null;
+    readonly jobId: string | null;
+    readonly runnerId: string | null;
+}
+/** Upper-case letters, digits and underscores, not starting with a digit. */
+export declare const VARIABLE_NAME_PATTERN: RegExp;
+/** A value's size limit, in UTF-8 bytes. */
+export declare const VARIABLE_VALUE_MAX_BYTES: number;
+/** The prefix of the environment variables the application's CLI reads, from its command name (`my-cli` → `MY_CLI_`). */
+export declare function cliEnvPrefix(cli: string): string;
+/**
+ * Names a run may not set: what the runner owns and, given the application's CLI command (`cli`), what reaches that CLI.
+ */
+export declare function isReservedVariable(name: string, cli?: string): boolean;
+export type VariableNameProblem = 'required' | 'pattern' | 'reserved' | 'duplicate';
+/** Why `name` cannot be a new variable among `existing`, or null. */
+export declare function variableNameProblem(name: string, existing?: readonly string[], cli?: string): VariableNameProblem | null;
+//# sourceMappingURL=variables.d.ts.map

package/dist/shared/variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.d.ts","sourceRoot":"","sources":["../../shared/variables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,+GAA+G;AAC/G,eAAO,MAAM,oBAAoB,+BAAgC,CAAC;AAElE,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gHAAgH;IAChH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,sBAAsB,iDAKzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,sGAAsG;AACtG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,EAAE,MAAoC,CAAC;AAEzE,4CAA4C;AAC5C,eAAO,MAAM,wBAAwB,EAAE,MAAiB,CAAC;AAEzD,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAMtE;AAED,MAAM,MAAM,mBAAmB,GAC7B,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;AAEpD,qEAAqE;AACrE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,MAAM,EAAO,EAChC,GAAG,CAAC,EAAE,MAAM,GACX,mBAAmB,GAAG,IAAI,CAM5B"}

package/dist/shared/variables.js

@@ -0,0 +1,54 @@
+/**
+ * Variables (environment variables, every one a secret) as the browser and the server's admin API exchange them. A
+ * value is encrypted at rest and write-only: lists show names and who changed them; reading values back is a separate,
+ * audited request.
+ *
+ * Variables are set on an agent, on a working directory (`workdir`), or on a scope the application registers (the
+ * group a run's subject belongs to, say), and a run gets them merged: the subject's scopes < its working directories <
+ * the agent, a later scope replacing an earlier one's value.
+ *
+ * A run's variables go to whichever runner takes it, including a personal runner of whoever may use the agent: sharing
+ * an agent shares the tokens it works with. A variable marked `teamRunnersOnly` keeps a run that gets it off personal
+ * runners: only a team runner takes such a run.
+ *
+ * A variable taken from the runner (`fromRunner`) is a name only: the runner that takes the run provides its value from
+ * its own configuration, and the value never reaches the application. It merges with the others by name, a later
+ * scope's entry replacing an earlier one's whichever kind each is.
+ */
+/** The scopes this plugin knows; the application registers the others (`GET agents/vocabulary` lists them). */
+export const CORE_VARIABLE_SCOPES = ['agent', 'workdir'];
+export const VARIABLE_AUDIT_ACTIONS = [
+    'set',
+    'delete',
+    'reveal',
+    'deliver',
+];
+/** Upper-case letters, digits and underscores, not starting with a digit. */
+export const VARIABLE_NAME_PATTERN = /^[A-Z_][A-Z0-9_]{0,127}$/u;
+/** A value's size limit, in UTF-8 bytes. */
+export const VARIABLE_VALUE_MAX_BYTES = 8 * 1024;
+/** The prefix of the environment variables the application's CLI reads, from its command name (`my-cli` → `MY_CLI_`). */
+export function cliEnvPrefix(cli) {
+    return `${cli.toUpperCase().replace(/[^A-Z0-9]+/gu, '_')}_`;
+}
+/**
+ * Names a run may not set: what the runner owns and, given the application's CLI command (`cli`), what reaches that CLI.
+ */
+export function isReservedVariable(name, cli) {
+    return (['PATH', 'HOME', 'TMPDIR', 'SHELL', 'USER'].includes(name) ||
+        /^(NOCOBASE_RUNNER_|AGENT_RUN_|GIT_)/u.test(name) ||
+        (cli !== undefined && name.startsWith(cliEnvPrefix(cli))));
+}
+/** Why `name` cannot be a new variable among `existing`, or null. */
+export function variableNameProblem(name, existing = [], cli) {
+    if (!name)
+        return 'required';
+    if (!VARIABLE_NAME_PATTERN.test(name))
+        return 'pattern';
+    if (isReservedVariable(name, cli))
+        return 'reserved';
+    if (existing.includes(name))
+        return 'duplicate';
+    return null;
+}
+//# sourceMappingURL=variables.js.map

package/dist/shared/variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.js","sourceRoot":"","sources":["../../shared/variables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAU,CAAC;AAgClE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,SAAS;CACD,CAAC;AAiBX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAW,2BAA2B,CAAC;AAEzE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAW,CAAC,GAAG,IAAI,CAAC;AAEzD,yHAAyH;AACzH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAY;IAC3D,OAAO,CACL,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1D,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjD,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAKD,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,WAA8B,EAAE,EAChC,GAAY;IAEZ,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC;IAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/shared/vocabulary.d.ts

@@ -0,0 +1,44 @@
+/**
+ * What the application calls the things agents work with, for the browser: the subjects runs work on, the scopes
+ * variables and default skills are kept in, and the places conversations are started from. Each is contributed on the server by whoever owns it (the application, or
+ * this plugin for its own `conversation` subject) and read in one request, so the pages need no configuration of their
+ * own.
+ *
+ * `GET agents/vocabulary` (anyone signed in: labels only) answers `{ data: AgentsVocabulary }`.
+ */
+import type { I18nText } from './i18n.js';
+export declare const VOCABULARY_ROUTE = "agents/vocabulary";
+/** A kind of subject runs work on. */
+export interface SubjectVocabulary {
+    readonly kind: string;
+    /** What a person calls one (a ticket, a conversation); null: shown by its kind. */
+    readonly title: I18nText | null;
+    /** What a person calls the group one belongs to (a project); null: the usage page says "group". */
+    readonly groupTitle: I18nText | null;
+    /** Where the application shows one and its group, `{id}` standing for the id; null: nowhere to link. */
+    readonly path: string | null;
+    readonly groupPath: string | null;
+    /** The reasons a run on it starts (`input.payload.trigger`), as the run panel names them. */
+    readonly triggers: Readonly<Record<string, I18nText>>;
+    /** Offered as a scenario of "Preview full prompt", rendered on a made-up subject of the kind. */
+    readonly preview: boolean;
+}
+/** A scope of variables and default skills besides an agent's own. */
+export interface ScopeVocabulary {
+    readonly key: string;
+    readonly title: I18nText;
+    readonly description: I18nText | null;
+}
+/** A place conversations are started from besides the chat panel. */
+export interface SourceVocabulary {
+    readonly key: string;
+    readonly title: I18nText;
+}
+export interface AgentsVocabulary {
+    readonly subjects: readonly SubjectVocabulary[];
+    /** The conversation sources the application registered (the panel's own, `panel`, is not listed). */
+    readonly sources: readonly SourceVocabulary[];
+    /** In merge order: the ones a subject names first, then `workdir`. `agent` is never listed. */
+    readonly scopes: readonly ScopeVocabulary[];
+}
+//# sourceMappingURL=vocabulary.d.ts.map

package/dist/shared/vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.d.ts","sourceRoot":"","sources":["../../shared/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AAEpD,sCAAsC;AACtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IAChC,mGAAmG;IACnG,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,IAAI,CAAC;IACrC,wGAAwG;IACxG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtD,iGAAiG;IACjG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvC;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,qGAAqG;IACrG,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C"}

package/dist/shared/vocabulary.js

@@ -0,0 +1,2 @@
+export const VOCABULARY_ROUTE = 'agents/vocabulary';
+//# sourceMappingURL=vocabulary.js.map

package/dist/shared/vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.js","sourceRoot":"","sources":["../../shared/vocabulary.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC"}