@playcraft/common 0.0.57 → 0.0.58

package/dist/project-skills/inventory.js

@@ -0,0 +1,150 @@
+import { lstat, readdir, readFile, realpath } from 'node:fs/promises';
+import { join, resolve, sep } from 'node:path';
+import { createHash } from 'node:crypto';
+import { parseProjectSkillDeclaration, sourceTreeDigest } from './protocol.js';
+import { PROJECT_SKILLS_DECLARATION_PATH, PROJECT_SKILLS_LOCK_PATH, ProjectSkillsError, } from './types.js';
+export const PROJECT_SKILL_SOURCE_ROOTS = ['.agents/skills', '.claude/skills', '.opencode/skills', '.opencode/skill'];
+const MAX_FILES = 512;
+const MAX_FILE_BYTES = 16 * 1024 * 1024;
+const MAX_BUNDLE_BYTES = 64 * 1024 * 1024;
+/** Metadata is never read through repository-supplied links. */
+export async function readProjectSkillsLockFile(projectRoot) {
+    const root = await realpath(resolve(projectRoot));
+    try {
+        const file = await safePath(root, PROJECT_SKILLS_LOCK_PATH);
+        const stat = await lstat(file);
+        if (!stat.isFile() || stat.size > 1024 * 1024)
+            throw new ProjectSkillsError('source_limit', PROJECT_SKILLS_LOCK_PATH);
+        return await readFile(file, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+/** Reject links at every segment, including roots. Snapshot bytes before registering. */
+async function safePath(root, relative) {
+    let current = root;
+    for (const part of relative.split('/')) {
+        current = join(current, part);
+        if ((await lstat(current)).isSymbolicLink())
+            throw new ProjectSkillsError('source_symlink', relative);
+    }
+    const target = await realpath(current);
+    if (!target.startsWith(root + sep))
+        throw new ProjectSkillsError('source_escape', relative);
+    return target;
+}
+export async function readProjectSkillSource(projectRoot, entry) {
+    if (entry.source.kind !== 'repository')
+        throw new ProjectSkillsError('not_repository_source', entry.entryKey);
+    // Reuse the portable validation before ever interpreting an uploaded path.
+    parseProjectSkillDeclaration({ schemaVersion: 1, entries: [entry] });
+    const root = await realpath(resolve(projectRoot));
+    const files = [];
+    let bytes = 0;
+    const walk = async (projectPath, bundlePath) => {
+        const absolute = await safePath(root, projectPath);
+        const info = await lstat(absolute);
+        if (info.isDirectory()) {
+            for (const name of (await readdir(absolute)).sort()) {
+                if (name === '.git' || name === 'node_modules')
+                    throw new ProjectSkillsError('unsupported_source', `${projectPath}/${name}`);
+                await walk(`${projectPath}/${name}`, bundlePath ? `${bundlePath}/${name}` : name);
+            }
+            return;
+        }
+        if (!info.isFile())
+            throw new ProjectSkillsError('unsupported_source', projectPath);
+        if (info.size > MAX_FILE_BYTES || files.length >= MAX_FILES)
+            throw new ProjectSkillsError('source_limit', projectPath);
+        const content = await readFile(absolute);
+        bytes += content.byteLength;
+        if (content.byteLength > MAX_FILE_BYTES || bytes > MAX_BUNDLE_BYTES)
+            throw new ProjectSkillsError('source_limit', projectPath);
+        files.push({ path: bundlePath, content });
+    };
+    await walk(entry.source.root, '');
+    if (!files.some((file) => file.path === 'SKILL.md'))
+        throw new ProjectSkillsError('missing_skill_body', entry.source.root);
+    // External project resources retain their original relative path beneath a reserved prefix.
+    if (entry.projectFiles?.length && files.some((file) => file.path === 'project' || file.path.startsWith('project/'))) {
+        throw new ProjectSkillsError('project_resource_collision', entry.entryKey);
+    }
+    for (const relative of entry.projectFiles ?? [])
+        await walk(relative, `project/${relative}`);
+    return { entryKey: entry.entryKey, root: entry.source.root, files, sourceTreeHash: sourceTreeDigest(files) };
+}
+/** Static inventory only: no source scripts, model calls, or repository mutations. */
+export async function inspectProjectSkills(projectRoot) {
+    const root = await realpath(resolve(projectRoot));
+    const result = { declaration: null, discovered: [], sources: [], issues: [] };
+    const issue = (error, path) => result.issues.push({
+        code: error instanceof ProjectSkillsError ? error.code : 'source_read_failed',
+        detail: error instanceof Error ? error.message : String(error), path,
+    });
+    try {
+        if (await exists(join(root, PROJECT_SKILLS_DECLARATION_PATH))) {
+            const file = await safePath(root, PROJECT_SKILLS_DECLARATION_PATH);
+            if ((await lstat(file)).size > 1024 * 1024)
+                throw new ProjectSkillsError('source_limit', PROJECT_SKILLS_DECLARATION_PATH);
+            result.declaration = parseProjectSkillDeclaration(await readFile(file, 'utf8'));
+        }
+    }
+    catch (error) {
+        issue(error, PROJECT_SKILLS_DECLARATION_PATH);
+    }
+    for (const sourceRoot of PROJECT_SKILL_SOURCE_ROOTS) {
+        try {
+            if (!await exists(join(root, sourceRoot)))
+                continue;
+            const directory = await safePath(root, sourceRoot);
+            for (const name of (await readdir(directory)).sort()) {
+                const source = `${sourceRoot}/${name}`;
+                const safe = await safePath(root, source);
+                if (!(await lstat(safe)).isDirectory())
+                    continue;
+                if (!await exists(join(safe, 'SKILL.md'))) {
+                    result.issues.push({ code: 'unrecognized_entry', path: source, detail: 'A skill directory must contain SKILL.md at its root' });
+                    continue;
+                }
+                result.discovered.push({ root: source, entryKey: `repo-${createHash('sha256').update(source).digest('hex').slice(0, 24)}` });
+            }
+        }
+        catch (error) {
+            issue(error, sourceRoot);
+        }
+    }
+    const declaredRoots = new Set(result.declaration?.entries.flatMap((entry) => entry.source.kind === 'repository' ? [entry.source.root] : []) ?? []);
+    const entries = [
+        ...(result.declaration?.entries ?? []),
+        ...result.discovered.filter((item) => !declaredRoots.has(item.root)).map((item) => ({
+            entryKey: item.entryKey, source: { kind: 'repository', root: item.root },
+            enabled: result.declaration === null, surface: 'sandbox-agent',
+        })),
+    ];
+    for (const entry of entries) {
+        if (entry.source.kind !== 'repository')
+            continue;
+        try {
+            result.sources.push(await readProjectSkillSource(root, entry));
+        }
+        catch (error) {
+            issue(error, entry.source.root);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=inventory.js.map

package/dist/project-skills/inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/project-skills/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,+BAA+B,EAAE,wBAAwB,EAAE,kBAAkB,GAE9E,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,CAAU,CAAC;AAQ/H,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;QACtH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB,EAAE,KAAwB;IACxF,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9G,2EAA2E;IAC3E,4BAA4B,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,EAAE,WAAmB,EAAE,UAAkB,EAAiB,EAAE;QAC5E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc;oBAAE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC7H,MAAM,IAAI,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,GAAG,cAAc,IAAI,KAAK,GAAG,gBAAgB;YAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC/H,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3H,4FAA4F;IAC5F,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE;QAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,WAAW,QAAQ,EAAE,CAAC,CAAC;IAC7F,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAA0B,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,IAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAClE,IAAI,EAAE,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB;QAC7E,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI;KACrE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;YAC1H,MAAM,CAAC,WAAW,GAAG,4BAA4B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAAC,CAAC;IAClE,KAAK,MAAM,UAAU,IAAI,0BAA0B,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAAE,SAAS;YACpD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACjD,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC,CAAC;oBAChI,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/H,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;IAC/C,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACnJ,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC;QACtC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,CAAC;YACrG,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACxE,OAAO,EAAE,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,OAAO,EAAE,eAAe;SAC/D,CAAC,CAAC;KACJ,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QACjD,IAAI,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QACvE,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/project-skills/local-snapshot.d.ts

@@ -0,0 +1,12 @@
+import type { ProjectSkillInventory } from './inventory.js';
+import { type ProjectSkillsLockV3, type ProjectSkillDeclaration } from './types.js';
+/** Offline identity is a provenance label, never an access grant on the server. */
+export declare function buildLocalProjectSkillsSnapshot(inventory: ProjectSkillInventory, previous?: unknown): {
+    declaration: ProjectSkillDeclaration;
+    lock: ProjectSkillsLockV3;
+    artifacts: {
+        artifactHash: string;
+        archive: Buffer;
+    }[];
+};
+//# sourceMappingURL=local-snapshot.d.ts.map

package/dist/project-skills/local-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-snapshot.d.ts","sourceRoot":"","sources":["../../src/project-skills/local-snapshot.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAsB,KAAK,mBAAmB,EAAE,KAAK,uBAAuB,EAA8B,MAAM,YAAY,CAAC;AAEpI,mFAAmF;AACnF,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC,EAAE,OAAO;;;;sBAW3D,MAAM;iBAAW,MAAM;;EAmC/D"}

package/dist/project-skills/local-snapshot.js

@@ -0,0 +1,66 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { createCanonicalBundleArchive } from './bundle-archive.js';
+import { declarationDigest, dependencyDigest, parseProjectSkillsLock, validateProjectSkillsSnapshot } from './protocol.js';
+import { ProjectSkillsError } from './types.js';
+/** Offline identity is a provenance label, never an access grant on the server. */
+export function buildLocalProjectSkillsSnapshot(inventory, previous) {
+    if (inventory.issues.length)
+        throw new ProjectSkillsError('inventory_invalid', JSON.stringify(inventory.issues));
+    const old = previous === undefined ? null : parseProjectSkillsLock(previous);
+    if (old && !inventory.declaration)
+        throw new ProjectSkillsError('missing_declaration', 'A managed lock requires its declaration');
+    const declaration = structuredClone(inventory.declaration ?? { schemaVersion: 1, entries: [] });
+    const roots = new Set(declaration.entries.flatMap((entry) => entry.source.kind === 'repository' ? [entry.source.root] : []));
+    for (const found of inventory.discovered)
+        if (!roots.has(found.root))
+            declaration.entries.push({
+                entryKey: found.entryKey, source: { kind: 'repository', root: found.root }, enabled: !inventory.declaration && !old, surface: 'sandbox-agent',
+            });
+    const oldByKey = new Map(old?.entries.map((entry) => [entry.entryKey, entry]) ?? []);
+    const localNamespace = `local-${randomUUID()}`;
+    const artifacts = [];
+    const required = new Map();
+    const entries = declaration.entries.map((entry) => {
+        const previous = oldByKey.get(entry.entryKey);
+        if (entry.source.kind === 'registry') {
+            if (!previous || previous.revision.kind !== 'release' || previous.revision.skillRef !== entry.source.skillRef || previous.revision.version !== entry.source.version) {
+                throw new ProjectSkillsError('missing_release', `An authorized exact release must be downloaded first: ${entry.entryKey}`);
+            }
+            return structuredClone(previous);
+        }
+        const source = inventory.sources.find((source) => source.entryKey === entry.entryKey);
+        if (!source)
+            throw new ProjectSkillsError('missing_source', entry.entryKey);
+        const archive = createCanonicalBundleArchive(source.files.map((file) => ({ path: file.path, data: Buffer.from(file.content) })));
+        const artifactHash = createHash('sha256').update(archive).digest('hex');
+        artifacts.push({ artifactHash, archive });
+        entry.source.skillRef ??= previous?.revision.skillRef ?? `${localNamespace}/${entry.entryKey}`;
+        const manifestFile = source.files.find((file) => file.path === 'manifest.json');
+        if (manifestFile) {
+            const manifest = JSON.parse(Buffer.from(manifestFile.content).toString('utf8'));
+            if (manifest.imports?.some((item) => item.edgeKind !== 'optional'))
+                throw new ProjectSkillsError('dependency_unresolved', entry.entryKey);
+            required.set(entry.entryKey, (manifest.relationships ?? []).filter((edge) => edge.relationType === 'requires')
+                .map((edge) => edge.toSkillRef ?? edge.targetSkillRef));
+        }
+        return { entryKey: entry.entryKey, revision: { kind: 'source', skillRef: entry.source.skillRef, sourceRevision: `src-v1-sha256:${source.sourceTreeHash}`, artifactHash },
+            sourceTreeHash: source.sourceTreeHash, dependencies: [], dependencyLockHash: '' };
+    });
+    const refToKey = new Map(entries.map((entry) => [entry.revision.skillRef, entry.entryKey]));
+    if (refToKey.size !== entries.length)
+        throw new ProjectSkillsError('duplicate_identity', 'Duplicate skill reference');
+    for (const entry of entries)
+        if (entry.revision.kind === 'source')
+            entry.dependencies = (required.get(entry.entryKey) ?? []).map((ref) => {
+                const key = refToKey.get(ref);
+                if (!key)
+                    throw new ProjectSkillsError('dependency_unresolved', ref);
+                return key;
+            });
+    for (const entry of entries)
+        entry.dependencyLockHash = dependencyDigest(entries, entry.dependencies);
+    const lock = { lockVersion: 3, declarationHash: declarationDigest(declaration), entries };
+    validateProjectSkillsSnapshot(declaration, lock);
+    return { declaration, lock, artifacts };
+}
+//# sourceMappingURL=local-snapshot.js.map

package/dist/project-skills/local-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-snapshot.js","sourceRoot":"","sources":["../../src/project-skills/local-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAE3H,OAAO,EAAE,kBAAkB,EAAsF,MAAM,YAAY,CAAC;AAEpI,mFAAmF;AACnF,MAAM,UAAU,+BAA+B,CAAC,SAAgC,EAAE,QAAkB;IAClG,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;QAAE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,yCAAyC,CAAC,CAAC;IAClI,MAAM,WAAW,GAA4B,eAAe,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACzH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7H,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,UAAU;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7F,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe;aAC9I,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAqD,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,MAAM,OAAO,GAA4B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpK,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,yDAAyD,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7H,CAAC;YACD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,GAAG,cAAc,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAChF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjK,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAA+B,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC;iBACtI,GAAG,CAAC,CAAC,IAAsD,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,iBAAiB,MAAM,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE;YACtK,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;IACtH,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,YAAY,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvI,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC;YAClH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,KAAK,CAAC,kBAAkB,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACtG,MAAM,IAAI,GAAwB,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/G,6BAA6B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC"}

package/dist/project-skills/protocol.d.ts

@@ -0,0 +1,31 @@
+import { type ProjectSkillDeclaration, type ProjectSkillFile, type ProjectSkillLockEntry, type ProjectSkillsLockV3, type ProjectSkillSurface } from './types.js';
+export declare function isProjectRelativePath(value: string): boolean;
+/** Locale-independent serialization, also used for server-side revalidation. */
+export declare function canonicalProjectSkillsJson(value: unknown): string;
+export declare function projectSkillsDigest(value: unknown): string;
+export declare function parseProjectSkillDeclaration(value: unknown): ProjectSkillDeclaration;
+export declare function parseProjectSkillsLock(value: unknown): ProjectSkillsLockV3;
+export declare function declarationDigest(declaration: ProjectSkillDeclaration): string;
+/** Hash raw bytes and relative filenames, not a Git commit or normalized artifact. */
+export declare function sourceTreeDigest(files: readonly ProjectSkillFile[]): string;
+export declare function sourceRevision(files: readonly ProjectSkillFile[]): string;
+export declare function dependencyDigest(entries: readonly ProjectSkillLockEntry[], keys: readonly string[]): string;
+/** Validates disabled entries too; an incomplete snapshot must never be adopted. */
+export declare function validateProjectSkillsSnapshot(declarationInput: unknown, lockInput: unknown): {
+    declaration: ProjectSkillDeclaration;
+    lock: ProjectSkillsLockV3;
+};
+export declare function effectiveProjectSkills(declarationInput: unknown, lockInput: unknown, surface: ProjectSkillSurface, deniedRefs?: ReadonlySet<string>): ProjectSkillLockEntry[];
+/** Configuration change retains every exact revision, including disabled entries. */
+export declare function setProjectSkillEnabled(declarationInput: unknown, lockInput: unknown, entryKey: string, enabled: boolean): {
+    declaration: {
+        entries: import("./types.js").ProjectSkillEntry[];
+        schemaVersion: 1;
+    };
+    lock: {
+        declarationHash: string;
+        lockVersion: 3;
+        entries: ProjectSkillLockEntry[];
+    };
+};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/project-skills/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/project-skills/protocol.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,uBAAuB,EAAE,KAAK,gBAAgB,EACnD,KAAK,qBAAqB,EAAE,KAAK,mBAAmB,EAAE,KAAK,mBAAmB,EAC/E,MAAM,YAAY,CAAC;AAOpB,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AA6BD,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAYjE;AACD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAWD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAOpF;AACD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAK1E;AACD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,uBAAuB,GAAG,MAAM,CAE9E;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAa3E;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAEzE;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAQ3G;AAED,oFAAoF;AACpF,wBAAgB,6BAA6B,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG;IAC5F,WAAW,EAAE,uBAAuB,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;CACjE,CAmCA;AAED,wBAAgB,sBAAsB,CACpC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAC3E,UAAU,GAAE,WAAW,CAAC,MAAM,CAAa,GAC1C,qBAAqB,EAAE,CAmBzB;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;;;;;;;;;;EAKvH"}

package/dist/project-skills/protocol.js

@@ -0,0 +1,197 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { PROJECT_SKILL_SURFACES, ProjectSkillsError, } from './types.js';
+const hash = z.string().regex(/^[a-f0-9]{64}$/);
+const ref = z.string().regex(/^[a-z0-9][a-z0-9_-]*\/[a-z0-9][a-z0-9_-]*$/).max(257);
+const version = z.string().regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/).max(32);
+const key = z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/).max(160);
+export function isProjectRelativePath(value) {
+    return value.length > 0 && value.length <= 1024 && value.trim() === value &&
+        !/[\\\x00-\x1f\x7f:*?<>|]/.test(value) &&
+        value.split('/').every((part) => part !== '' && part !== '.' && part !== '..' && part !== '.git');
+}
+const path = z.string().refine(isProjectRelativePath, 'Expected a safe project-relative path');
+const declarationSchema = z.strictObject({
+    schemaVersion: z.literal(1),
+    entries: z.array(z.strictObject({
+        entryKey: key,
+        source: z.discriminatedUnion('kind', [
+            z.strictObject({ kind: z.literal('registry'), skillRef: ref, version }),
+            z.strictObject({ kind: z.literal('repository'), root: path, skillRef: ref.optional() }),
+        ]),
+        enabled: z.boolean(),
+        surface: z.enum(PROJECT_SKILL_SURFACES),
+        projectFiles: z.array(path).max(512).optional(),
+    })).max(512),
+});
+const lockSchema = z.strictObject({
+    lockVersion: z.literal(3), declarationHash: hash,
+    entries: z.array(z.strictObject({
+        entryKey: key,
+        revision: z.discriminatedUnion('kind', [
+            z.strictObject({ kind: z.literal('release'), skillRef: ref, version, artifactHash: hash }),
+            z.strictObject({ kind: z.literal('source'), skillRef: ref,
+                sourceRevision: z.string().regex(/^src-v1-sha256:[a-f0-9]{64}$/), artifactHash: hash }),
+        ]),
+        sourceTreeHash: hash.optional(), dependencyLockHash: hash,
+        dependencies: z.array(key).max(512),
+    })).max(512),
+});
+/** Locale-independent serialization, also used for server-side revalidation. */
+export function canonicalProjectSkillsJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalProjectSkillsJson).join(',')}]`;
+    if (value !== null && typeof value === 'object') {
+        return `{${Object.entries(value).filter(([, item]) => item !== undefined)
+            .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
+            .map(([name, item]) => `${JSON.stringify(name)}:${canonicalProjectSkillsJson(item)}`).join(',')}}`;
+    }
+    const result = JSON.stringify(value);
+    if (result === undefined || (typeof value === 'number' && !Number.isFinite(value))) {
+        throw new ProjectSkillsError('invalid_json', 'Non-JSON configuration value');
+    }
+    return result;
+}
+export function projectSkillsDigest(value) {
+    return createHash('sha256').update(canonicalProjectSkillsJson(value)).digest('hex');
+}
+function parseJson(value) {
+    if (typeof value !== 'string')
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new ProjectSkillsError('invalid_json', 'Malformed project skills JSON');
+    }
+}
+function uniqueKeys(entries) {
+    if (new Set(entries.map((entry) => entry.entryKey)).size !== entries.length) {
+        throw new ProjectSkillsError('duplicate_entry', 'Duplicate project skill entry key');
+    }
+}
+export function parseProjectSkillDeclaration(value) {
+    const result = declarationSchema.safeParse(parseJson(value));
+    if (!result.success)
+        throw new ProjectSkillsError('invalid_declaration', result.error.message);
+    uniqueKeys(result.data.entries);
+    const roots = result.data.entries.flatMap((entry) => entry.source.kind === 'repository' ? [entry.source.root] : []);
+    if (new Set(roots).size !== roots.length)
+        throw new ProjectSkillsError('duplicate_source', 'Repository source declared twice');
+    return result.data;
+}
+export function parseProjectSkillsLock(value) {
+    const result = lockSchema.safeParse(parseJson(value));
+    if (!result.success)
+        throw new ProjectSkillsError('invalid_lock', result.error.message);
+    uniqueKeys(result.data.entries);
+    return result.data;
+}
+export function declarationDigest(declaration) {
+    return projectSkillsDigest(parseProjectSkillDeclaration(declaration));
+}
+/** Hash raw bytes and relative filenames, not a Git commit or normalized artifact. */
+export function sourceTreeDigest(files) {
+    const sorted = [...files].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+    const seen = new Set();
+    const digest = createHash('sha256').update('playcraft-source-tree-v1\0');
+    for (const file of sorted) {
+        if (!isProjectRelativePath(file.path) || seen.has(file.path)) {
+            throw new ProjectSkillsError('invalid_source_path', `Invalid or duplicate source path: ${file.path}`);
+        }
+        seen.add(file.path);
+        const name = Buffer.from(file.path);
+        digest.update(`${name.length}:`).update(name).update(`${file.content.byteLength}:`).update(file.content);
+    }
+    return digest.digest('hex');
+}
+export function sourceRevision(files) {
+    return `src-v1-sha256:${sourceTreeDigest(files)}`;
+}
+export function dependencyDigest(entries, keys) {
+    const byKey = new Map(entries.map((entry) => [entry.entryKey, entry]));
+    if (new Set(keys).size !== keys.length)
+        throw new ProjectSkillsError('duplicate_dependency', 'Duplicate dependency');
+    return projectSkillsDigest([...keys].sort().map((entryKey) => {
+        const entry = byKey.get(entryKey);
+        if (!entry)
+            throw new ProjectSkillsError('missing_dependency', `Missing dependency ${entryKey}`);
+        return { entryKey, revision: entry.revision, dependencies: [...entry.dependencies].sort() };
+    }));
+}
+/** Validates disabled entries too; an incomplete snapshot must never be adopted. */
+export function validateProjectSkillsSnapshot(declarationInput, lockInput) {
+    const declaration = parseProjectSkillDeclaration(declarationInput);
+    const lock = parseProjectSkillsLock(lockInput);
+    if (lock.declarationHash !== declarationDigest(declaration)) {
+        throw new ProjectSkillsError('stale_lock', 'Declaration and lock belong to different revisions');
+    }
+    const byKey = new Map(lock.entries.map((entry) => [entry.entryKey, entry]));
+    if (byKey.size !== declaration.entries.length)
+        throw new ProjectSkillsError('incomplete_lock', 'Lock must contain every declaration entry');
+    for (const item of declaration.entries) {
+        const locked = byKey.get(item.entryKey);
+        if (!locked)
+            throw new ProjectSkillsError('incomplete_lock', `Missing ${item.entryKey}`);
+        if (item.source.kind === 'registry' && (locked.revision.kind !== 'release' ||
+            locked.revision.skillRef !== item.source.skillRef || locked.revision.version !== item.source.version)) {
+            throw new ProjectSkillsError('revision_mismatch', `Registry revision differs: ${item.entryKey}`);
+        }
+        if (item.source.kind === 'repository' && (locked.revision.kind !== 'source' || !locked.sourceTreeHash ||
+            locked.revision.sourceRevision !== `src-v1-sha256:${locked.sourceTreeHash}` ||
+            (item.source.skillRef && item.source.skillRef !== locked.revision.skillRef))) {
+            throw new ProjectSkillsError('revision_mismatch', `Repository revision differs: ${item.entryKey}`);
+        }
+        if (dependencyDigest(lock.entries, locked.dependencies) !== locked.dependencyLockHash) {
+            throw new ProjectSkillsError('dependency_mismatch', `Dependencies changed: ${item.entryKey}`);
+        }
+    }
+    const visited = new Set();
+    const visiting = new Set();
+    const visit = (entryKey) => {
+        if (visiting.has(entryKey))
+            throw new ProjectSkillsError('dependency_cycle', `Dependency cycle at ${entryKey}`);
+        if (visited.has(entryKey))
+            return;
+        visiting.add(entryKey);
+        for (const child of byKey.get(entryKey).dependencies)
+            visit(child);
+        visiting.delete(entryKey);
+        visited.add(entryKey);
+    };
+    for (const entry of lock.entries)
+        visit(entry.entryKey);
+    return { declaration, lock };
+}
+export function effectiveProjectSkills(declarationInput, lockInput, surface, deniedRefs = new Set()) {
+    const { declaration, lock } = validateProjectSkillsSnapshot(declarationInput, lockInput);
+    const declarations = new Map(declaration.entries.map((entry) => [entry.entryKey, entry]));
+    const byKey = new Map(lock.entries.map((entry) => [entry.entryKey, entry]));
+    const selected = new Set();
+    const visit = (entryKey) => {
+        if (selected.has(entryKey))
+            return;
+        const item = declarations.get(entryKey);
+        const locked = byKey.get(entryKey);
+        if (!item.enabled || item.surface !== surface || deniedRefs.has(locked.revision.skillRef)) {
+            throw new ProjectSkillsError('dependency_disabled', `Required skill is unavailable: ${entryKey}`);
+        }
+        for (const child of locked.dependencies)
+            visit(child);
+        selected.add(entryKey);
+    };
+    for (const item of declaration.entries) {
+        if (item.enabled && item.surface === surface && !deniedRefs.has(byKey.get(item.entryKey).revision.skillRef))
+            visit(item.entryKey);
+    }
+    return [...selected].map((entryKey) => byKey.get(entryKey));
+}
+/** Configuration change retains every exact revision, including disabled entries. */
+export function setProjectSkillEnabled(declarationInput, lockInput, entryKey, enabled) {
+    const { declaration, lock } = validateProjectSkillsSnapshot(declarationInput, lockInput);
+    if (!declaration.entries.some((item) => item.entryKey === entryKey))
+        throw new ProjectSkillsError('unknown_entry', entryKey);
+    const next = { ...declaration, entries: declaration.entries.map((item) => item.entryKey === entryKey ? { ...item, enabled } : item) };
+    return { declaration: next, lock: { ...lock, declarationHash: declarationDigest(next) } };
+}
+//# sourceMappingURL=protocol.js.map

package/dist/project-skills/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/project-skills/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAAE,kBAAkB,GAG3C,MAAM,YAAY,CAAC;AAEpB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAChD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpF,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACvF,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEtE,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QACvE,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC;AACtG,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;AAC/F,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9B,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YACnC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACvE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;SACxF,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;QACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAChD,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACb,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI;IAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9B,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YACrC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAC1F,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG;gBACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC1F,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,IAAI;QACzD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACpC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACtE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACjC,MAAM,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;IAAC,CAAC;AAC1F,CAAC;AACD,SAAS,UAAU,CAAC,OAA+B;IACjD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5E,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AACD,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/F,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpH,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;IAC/H,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxF,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,WAAoC;IACpE,OAAO,mBAAmB,CAAC,4BAA4B,CAAC,WAAW,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,KAAkC;IACjE,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,qCAAqC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAkC;IAC/D,OAAO,iBAAiB,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAyC,EAAE,IAAuB;IACjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;IACrH,OAAO,mBAAmB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9F,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,6BAA6B,CAAC,gBAAyB,EAAE,SAAkB;IAGzF,MAAM,WAAW,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,eAAe,KAAK,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,oDAAoD,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,2CAA2C,CAAC,CAAC;IAC5I,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;YACxE,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,8BAA8B,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc;YACnG,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK,iBAAiB,MAAM,CAAC,cAAc,EAAE;YAC3E,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,gCAAgC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtF,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,EAAE;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,uBAAuB,QAAQ,EAAE,CAAC,CAAC;QAChH,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QAClC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,YAAY;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,gBAAyB,EAAE,SAAkB,EAAE,OAA4B,EAC3E,aAAkC,IAAI,GAAG,EAAE;IAE3C,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,EAAE;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAC;AAC/D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,gBAAyB,EAAE,SAAkB,EAAE,QAAgB,EAAE,OAAgB;IACtH,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACtI,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC"}

package/dist/project-skills/runtime-plugin.d.ts

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+type NativeClient = {
+    session: {
+        get: (input: {
+            path: {
+                id: string;
+            };
+        }) => Promise<{
+            data?: {
+                id: string;
+                parentID?: string;
+            };
+        }>;
+    };
+};
+/**
+ * Bundled by the supervisor, outside the writable project. The supervisor owns
+ * both this file and the manifest. Native directory discovery is never used here.
+ */
+export default function managedSkillsPlugin(input?: {
+    client?: NativeClient;
+}): Promise<{
+    tool: {
+        skill: {
+            description: string;
+            args: {
+                name: z.ZodString;
+            };
+            execute(args: {
+                name: string;
+            }, context: {
+                sessionID: string;
+                metadata: (value: unknown) => void;
+            }): Promise<{
+                title: string;
+                output: string;
+                metadata: {
+                    playcraftSkill: {
+                        schemaVersion: number;
+                        runtimeId: string;
+                        lockId: string;
+                        skillVersionId: string;
+                        artifactHash: string;
+                        skillRef: string;
+                        nativeSessionId: string;
+                        rootNativeSessionId: string;
+                        bodyHash: string;
+                        packageRoot: string;
+                    };
+                };
+            }>;
+        };
+    };
+    'tool.definition': (input: {
+        toolID: string;
+    }, output: {
+        description: string;
+    }) => Promise<void>;
+    'experimental.chat.system.transform': (input: {
+        sessionID?: string;
+    }, output: {
+        system: string[];
+    }) => Promise<void>;
+}>;
+export {};
+//# sourceMappingURL=runtime-plugin.d.ts.map

package/dist/project-skills/runtime-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-plugin.d.ts","sourceRoot":"","sources":["../../src/project-skills/runtime-plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,KAAK,YAAY,GAAG;IAAE,OAAO,EAAE;QAAE,GAAG,EAAE,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC;YAAE,IAAI,CAAC,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;CAAE,CAAC;AAGrI;;;GAGG;AACH,wBAA8B,mBAAmB,CAAC,KAAK,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,YAAY,CAAA;CAAE;;;;;;;0BA+CvD;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,WAAW;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;aAAE;;;;;;;;;;;;;;;;;;;;+BAiB3E;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,UAAU;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;kDAGhC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,UAAU;QAAE,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;GAM3G"}