@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.1

package/dist/skill/hint.js

@@ -0,0 +1,109 @@
+/**
+ * First-run skill hint (option A).
+ *
+ * Nudges the user once — on any `pxbaas` command — that a bundled Agent Skill can
+ * be installed into a detected Agent host, so they discover `pxbaas skill install`
+ * without us silently writing into their agent config on npm install.
+ *
+ * Deliberately non-intrusive:
+ * - prints to **stderr** (never pollutes `--json` stdout that agents parse)
+ * - skipped when `--json`, when running any `skill` subcommand, when no host is
+ *   detected, when the skill is already installed in a detected host, when the
+ *   hint was shown before (state under ~/.baas), or when BAAS_NO_SKILL_HINT is set
+ * - never throws: a hint failure must not break the actual command
+ */
+import { existsSync } from 'node:fs';
+import { mkdir, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { detectInstalledHosts, hostSkillDir } from './hosts.js';
+import { classifyTarget } from './ownership.js';
+import { ProfileManager } from '../credentials/profile.js';
+const STATE_RELPATH = join('.baas', 'skill-hint.json');
+function truthy(value) {
+    return ['1', 'true', 'yes', 'on'].includes((value ?? '').toLowerCase());
+}
+/**
+ * Print the one-time skill hint when appropriate. Safe to call before any
+ * command action; resolves without side effects when suppressed.
+ */
+export async function maybePrintSkillHint(options = {}) {
+    const env = options.env ?? process.env;
+    const home = options.homeDir ?? homedir();
+    const write = options.stderr ?? ((line) => process.stderr.write(line + '\n'));
+    // Suppress in machine-readable mode and when explicitly disabled.
+    if (options.json)
+        return;
+    if (truthy(env.BAAS_NO_SKILL_HINT))
+        return;
+    // Do not hint while the user is already running `pxbaas skill ...`.
+    const root = (options.commandPath ?? '').trim().split(/\s+/)[0];
+    if (root === 'skill')
+        return;
+    // Only relevant when at least one supported Agent host directory exists.
+    const hosts = detectInstalledHosts(home);
+    if (hosts.length === 0)
+        return;
+    // Stay quiet if the skill is already installed in any detected host.
+    for (const host of hosts) {
+        if ((await classifyTarget(hostSkillDir(host, home))) === 'owned')
+            return;
+    }
+    // First-run only: skip if we already showed the hint.
+    const stateFile = join(home, STATE_RELPATH);
+    if (existsSync(stateFile))
+        return;
+    write(`Tip: enable the baas AI-agent skill for detected host(s): ${hosts.join(', ')}.`);
+    write(`     Run: pxbaas skill install --host ${hosts[0]}   (or --all). Set BAAS_NO_SKILL_HINT=1 to silence.`);
+    // Record that we showed it (best-effort; never fail the command).
+    try {
+        await mkdir(dirname(stateFile), { mode: 0o700, recursive: true });
+        await writeFile(stateFile, JSON.stringify({ shown: true, at: new Date().toISOString(), hosts }, null, 2) + '\n', { mode: 0o600 });
+    }
+    catch {
+        // ignore — the hint is cosmetic
+    }
+}
+const PROVISION_STATE_RELPATH = join('.baas', 'provision-hint.json');
+const PROVISION_SKIP_ROOTS = new Set(['provision', 'instance', 'login', 'logout', 'profile']);
+/**
+ * First-run hint shown when NO profile is configured yet: point the user to
+ * `pxbaas provision` (free 15-day Zero instance) or `pxbaas login` (own instance).
+ * Non-intrusive: stderr, once, skipped under --json / on onboarding commands /
+ * when a profile already exists / when BAAS_NO_PROVISION_HINT is set.
+ */
+export async function maybePrintProvisionHint(options = {}) {
+    const env = options.env ?? process.env;
+    const home = options.homeDir ?? homedir();
+    const write = options.stderr ?? ((line) => process.stderr.write(line + '\n'));
+    if (options.json)
+        return;
+    if (truthy(env.BAAS_NO_PROVISION_HINT) || truthy(env.BAAS_NO_SKILL_HINT))
+        return;
+    const root = (options.commandPath ?? '').trim().split(/\s+/)[0];
+    if (PROVISION_SKIP_ROOTS.has(root))
+        return;
+    // Skip when a profile is already configured.
+    try {
+        const current = await new ProfileManager(join(home, '.baas')).getCurrentProfile();
+        if (current)
+            return;
+    }
+    catch {
+        return; // profile lookup failed — stay quiet
+    }
+    const stateFile = join(home, PROVISION_STATE_RELPATH);
+    if (existsSync(stateFile))
+        return;
+    write('Tip: no BaaS instance configured yet.');
+    write('     Run: pxbaas provision   (claim a free 15-day PolarDB-X Zero instance)');
+    write('     or:  pxbaas login       (use your own instance).  Set BAAS_NO_PROVISION_HINT=1 to silence.');
+    try {
+        await mkdir(dirname(stateFile), { mode: 0o700, recursive: true });
+        await writeFile(stateFile, JSON.stringify({ shown: true, at: new Date().toISOString() }, null, 2) + '\n', { mode: 0o600 });
+    }
+    catch {
+        // ignore — the hint is cosmetic
+    }
+}
+//# sourceMappingURL=hint.js.map

package/dist/skill/hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hint.js","sourceRoot":"","sources":["../../src/skill/hint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAe3D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAEvD,SAAS,MAAM,CAAC,KAAyB;IACvC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAA4B,EAAE;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAEtF,kEAAkE;IAClE,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO;IACzB,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAE3C,oEAAoE;IACpE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO;IAE7B,yEAAyE;IACzE,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;YAAE,OAAO;IAC3E,CAAC;IAED,sDAAsD;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IAElC,KAAK,CAAC,6DAA6D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxF,KAAK,CAAC,yCAAyC,KAAK,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC;IAE9G,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,CACb,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACpF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AACrE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAA4B,EAAE;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAEtF,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO;IACzB,IAAI,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAEjF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAE3C,6CAA6C;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAClF,IAAI,OAAO;YAAE,OAAO;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,qCAAqC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IAElC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC/C,KAAK,CAAC,4EAA4E,CAAC,CAAC;IACpF,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAEzG,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,CACb,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC7E,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC"}

package/dist/skill/hosts.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Skill host mapping & detection.
+ *
+ * Mirrors the ctxdb0 `#skillTarget` convention: each supported Agent host keeps
+ * its skills under `~/.<host>/skills/<skill>/`. Codex (plugin marketplace) is
+ * intentionally out of scope for M1.
+ */
+export type HostName = 'qoder' | 'claude' | 'cursor' | 'qwen' | 'hermes';
+/** Hosts supported by `pxbaas skill install` (M1). */
+export declare const SUPPORTED_HOSTS: HostName[];
+export declare function isHostName(value: string): value is HostName;
+/** `~/.<host>/skills` root for a host. */
+export declare function hostSkillsRoot(host: HostName, homeDir: string): string;
+/** Full target directory for the pxbaas-cli skill under a host. */
+export declare function hostSkillDir(host: HostName, homeDir: string, skillName?: string): string;
+/**
+ * Detect which supported hosts already have a `~/.<host>` directory, i.e. hosts
+ * the user plausibly uses. Used for auto-selection and `--all`.
+ */
+export declare function detectInstalledHosts(homeDir: string): HostName[];
+//# sourceMappingURL=hosts.d.ts.map

package/dist/skill/hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/skill/hosts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzE,sDAAsD;AACtD,eAAO,MAAM,eAAe,EAAE,QAAQ,EAAoD,CAAC;AAW3F,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,QAAQ,CAE3D;AAED,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,SAAe,GAAG,MAAM,CAE9F;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAEhE"}

package/dist/skill/hosts.js

@@ -0,0 +1,38 @@
+/**
+ * Skill host mapping & detection.
+ *
+ * Mirrors the ctxdb0 `#skillTarget` convention: each supported Agent host keeps
+ * its skills under `~/.<host>/skills/<skill>/`. Codex (plugin marketplace) is
+ * intentionally out of scope for M1.
+ */
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+/** Hosts supported by `pxbaas skill install` (M1). */
+export const SUPPORTED_HOSTS = ['qoder', 'claude', 'cursor', 'qwen', 'hermes'];
+/** Host name -> the dot-directory under $HOME that hosts its config/skills. */
+const HOST_DIR = {
+    qoder: '.qoder',
+    claude: '.claude',
+    cursor: '.cursor',
+    qwen: '.qwen',
+    hermes: '.hermes',
+};
+export function isHostName(value) {
+    return SUPPORTED_HOSTS.includes(value);
+}
+/** `~/.<host>/skills` root for a host. */
+export function hostSkillsRoot(host, homeDir) {
+    return join(homeDir, HOST_DIR[host], 'skills');
+}
+/** Full target directory for the pxbaas-cli skill under a host. */
+export function hostSkillDir(host, homeDir, skillName = 'pxbaas-cli') {
+    return join(hostSkillsRoot(host, homeDir), skillName);
+}
+/**
+ * Detect which supported hosts already have a `~/.<host>` directory, i.e. hosts
+ * the user plausibly uses. Used for auto-selection and `--all`.
+ */
+export function detectInstalledHosts(homeDir) {
+    return SUPPORTED_HOSTS.filter((host) => existsSync(join(homeDir, HOST_DIR[host])));
+}
+//# sourceMappingURL=hosts.js.map

package/dist/skill/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/skill/hosts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,sDAAsD;AACtD,MAAM,CAAC,MAAM,eAAe,GAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE3F,+EAA+E;AAC/E,MAAM,QAAQ,GAA6B;IACzC,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAQ,eAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,OAAe;IAC5D,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,OAAe,EAAE,SAAS,GAAG,YAAY;IACpF,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC"}

package/dist/skill/installer.d.ts

@@ -0,0 +1,88 @@
+/**
+ * SkillManager — install/list/remove ALL bundled Agent Skills (e.g. `pxbaas-cli`,
+ * `pxbaas-app-spec`) into supported Agent hosts.
+ *
+ * Purely local and offline: never touches credentials, profiles, or the network,
+ * so agents can run it without `pxbaas login`. `homeDir` and `skillsRoot` are
+ * injectable for testing.
+ *
+ * Layout: each host has a skills root (`~/.<host>/skills`); every bundled skill is
+ * installed into `<skillsRoot>/<skillName>/` with its own fail-closed owner marker.
+ */
+import { type HostName } from './hosts.js';
+export type InstallStatus = 'installed' | 'updated' | 'skipped-foreign' | 'dry-run' | 'error';
+export type RemoveStatus = 'removed' | 'not-installed' | 'skipped-foreign' | 'dry-run' | 'error';
+export type ListStatus = 'installed' | 'not-installed' | 'foreign';
+export interface SkillResult {
+    host: string;
+    skill: string;
+    targetDir: string;
+    status: InstallStatus | RemoveStatus | ListStatus;
+    filesWritten?: string[];
+    skillVersion?: string;
+    installedAt?: string;
+    reason?: string;
+}
+export interface SkillManagerOptions {
+    /** Base home directory (defaults to os.homedir()). Injectable for tests. */
+    homeDir?: string;
+    /** Directory containing all bundled skills (defaults to resolveSkillsRoot()). */
+    skillsRoot?: string;
+    /** CLI version stamped into markers (defaults to readCliVersion()). */
+    cliVersion?: string;
+}
+export interface InstallOptions {
+    dryRun?: boolean;
+    force?: boolean;
+    /** Restrict to specific skill names (default: all bundled skills). */
+    skills?: string[];
+}
+export interface RemoveOptions {
+    dryRun?: boolean;
+    confirm?: boolean;
+    skills?: string[];
+}
+/** A resolved install/remove target: a host label plus its skills root directory. */
+export interface ResolvedTarget {
+    host: string;
+    destRoot: string;
+}
+export declare class SkillManager {
+    private readonly homeDir;
+    private readonly skillsRoot;
+    private readonly cliVersion;
+    private skillsCache;
+    constructor(options?: SkillManagerOptions);
+    /** Async factory that resolves the CLI version from package.json. */
+    static create(options?: SkillManagerOptions): Promise<SkillManager>;
+    /** Bundled skill names (memoized). */
+    bundledSkills(): Promise<string[]>;
+    private selectedSkills;
+    /**
+     * Resolve which host skills-roots to act on.
+     * - `--dir` wins (single custom skills-root, host label "custom")
+     * - `--all` → every detected host (those with an existing ~/.<host>)
+     * - `--host <h>` → that host
+     * - none → auto-detect: exactly one detected host is used; 0 or >1 is an error
+     */
+    resolveTargets(opts: {
+        host?: HostName;
+        all?: boolean;
+        dir?: string;
+    }): ResolvedTarget[];
+    /** Install all (or selected) bundled skills into each target's skills root. */
+    install(targets: ResolvedTarget[], options?: InstallOptions): Promise<SkillResult[]>;
+    private installOne;
+    /** Report install state of every bundled skill across all detected hosts. */
+    list(options?: {
+        skills?: string[];
+    }): Promise<SkillResult[]>;
+    private listOne;
+    /**
+     * Remove bundled skills from each target. Only removes directories owned by
+     * pxbaas-cli. Two-phase: without `confirm` (or with `dryRun`) it only previews.
+     */
+    remove(targets: ResolvedTarget[], options?: RemoveOptions): Promise<SkillResult[]>;
+    private removeOne;
+}
+//# sourceMappingURL=installer.d.ts.map

package/dist/skill/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/skill/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,EAAwC,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGjF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AACjG,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,eAAe,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,YAAY,GAAG,UAAU,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,WAAW,CAAyB;gBAEhC,OAAO,GAAE,mBAAwB;IAM7C,qEAAqE;WACxD,MAAM,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC;IAK7E,sCAAsC;IAChC,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAO1B,cAAc;IAU5B;;;;;;OAMG;IACH,cAAc,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,EAAE;IA0BxF,+EAA+E;IACzE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAmBhF,UAAU;IA+DxB,6EAA6E;IACvE,IAAI,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAYzD,OAAO;IAUrB;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAW9E,SAAS;CAgBxB"}

package/dist/skill/installer.js

@@ -0,0 +1,203 @@
+/**
+ * SkillManager — install/list/remove ALL bundled Agent Skills (e.g. `pxbaas-cli`,
+ * `pxbaas-app-spec`) into supported Agent hosts.
+ *
+ * Purely local and offline: never touches credentials, profiles, or the network,
+ * so agents can run it without `pxbaas login`. `homeDir` and `skillsRoot` are
+ * injectable for testing.
+ *
+ * Layout: each host has a skills root (`~/.<host>/skills`); every bundled skill is
+ * installed into `<skillsRoot>/<skillName>/` with its own fail-closed owner marker.
+ */
+import { copyFile, mkdir, rm, rename } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { listBundledSkillsIn, listSkillFiles, readCliVersion, resolveSkillsRoot } from './assets.js';
+import { detectInstalledHosts, hostSkillsRoot } from './hosts.js';
+import { classifyTarget, readMarker, sha256File, writeMarker } from './ownership.js';
+export class SkillManager {
+    homeDir;
+    skillsRoot;
+    cliVersion;
+    skillsCache = null;
+    constructor(options = {}) {
+        this.homeDir = options.homeDir ?? homedir();
+        this.skillsRoot = options.skillsRoot ?? resolveSkillsRoot();
+        this.cliVersion = options.cliVersion ?? 'unknown';
+    }
+    /** Async factory that resolves the CLI version from package.json. */
+    static async create(options = {}) {
+        const cliVersion = options.cliVersion ?? (await readCliVersion());
+        return new SkillManager({ ...options, cliVersion });
+    }
+    /** Bundled skill names (memoized). */
+    async bundledSkills() {
+        if (!this.skillsCache) {
+            this.skillsCache = await listBundledSkillsIn(this.skillsRoot);
+        }
+        return this.skillsCache;
+    }
+    async selectedSkills(filter) {
+        const all = await this.bundledSkills();
+        if (!filter || filter.length === 0)
+            return all;
+        const unknown = filter.filter((s) => !all.includes(s));
+        if (unknown.length > 0) {
+            throw new Error(`Unknown skill(s): ${unknown.join(', ')}. Bundled: ${all.join(', ')}.`);
+        }
+        return filter;
+    }
+    /**
+     * Resolve which host skills-roots to act on.
+     * - `--dir` wins (single custom skills-root, host label "custom")
+     * - `--all` → every detected host (those with an existing ~/.<host>)
+     * - `--host <h>` → that host
+     * - none → auto-detect: exactly one detected host is used; 0 or >1 is an error
+     */
+    resolveTargets(opts) {
+        if (opts.dir) {
+            return [{ host: 'custom', destRoot: opts.dir }];
+        }
+        if (opts.all) {
+            const detected = detectInstalledHosts(this.homeDir);
+            if (detected.length === 0) {
+                throw new Error(`No supported host directory found under ${this.homeDir}. Pass --host <name> or --dir <path>.`);
+            }
+            return detected.map((host) => ({ host, destRoot: hostSkillsRoot(host, this.homeDir) }));
+        }
+        if (opts.host) {
+            return [{ host: opts.host, destRoot: hostSkillsRoot(opts.host, this.homeDir) }];
+        }
+        const detected = detectInstalledHosts(this.homeDir);
+        if (detected.length === 1) {
+            return [{ host: detected[0], destRoot: hostSkillsRoot(detected[0], this.homeDir) }];
+        }
+        if (detected.length === 0) {
+            throw new Error(`No supported host directory found under ${this.homeDir}. Pass --host <name> or --dir <path>.`);
+        }
+        throw new Error(`Multiple hosts detected (${detected.join(', ')}). Pass --host <name> to pick one, or --all for every detected host.`);
+    }
+    /** Install all (or selected) bundled skills into each target's skills root. */
+    async install(targets, options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const filesBySkill = new Map();
+        for (const s of skills) {
+            filesBySkill.set(s, await listSkillFiles(join(this.skillsRoot, s)));
+        }
+        const results = [];
+        for (const target of targets) {
+            for (const skill of skills) {
+                const destDir = join(target.destRoot, skill);
+                results.push(await this.installOne(target.host, skill, destDir, filesBySkill.get(skill) ?? [], options));
+            }
+        }
+        return results;
+    }
+    async installOne(host, skill, targetDir, files, options) {
+        const assetDir = join(this.skillsRoot, skill);
+        const state = await classifyTarget(targetDir);
+        if (state === 'foreign' && !options.force) {
+            return {
+                host,
+                skill,
+                targetDir,
+                status: 'skipped-foreign',
+                reason: 'Directory exists but is not managed by pxbaas-cli. Re-run with --force to back it up and overwrite.',
+            };
+        }
+        const plannedStatus = state === 'owned' ? 'updated' : 'installed';
+        if (options.dryRun) {
+            const verb = state === 'owned' ? 'update' : 'install';
+            return { host, skill, targetDir, status: 'dry-run', filesWritten: files, reason: `would ${verb}` };
+        }
+        try {
+            if (state === 'foreign' && options.force) {
+                await rename(targetDir, `${targetDir}.bak.${Date.now()}`);
+            }
+            await mkdir(targetDir, { recursive: true });
+            const hashes = {};
+            for (const rel of files) {
+                const src = join(assetDir, rel);
+                const dst = join(targetDir, rel);
+                await mkdir(dirname(dst), { recursive: true });
+                await copyFile(src, dst);
+                hashes[rel] = await sha256File(dst);
+            }
+            const marker = {
+                owner: 'pxbaas-cli',
+                skillName: skill,
+                skillVersion: this.cliVersion,
+                cliVersion: this.cliVersion,
+                host,
+                installedAt: new Date().toISOString(),
+                files: hashes,
+            };
+            await writeMarker(targetDir, marker);
+            for (const rel of files) {
+                if (!existsSync(join(targetDir, rel))) {
+                    throw new Error(`Verification failed: missing ${rel} after copy`);
+                }
+            }
+            return { host, skill, targetDir, status: plannedStatus, filesWritten: files, skillVersion: this.cliVersion };
+        }
+        catch (err) {
+            return { host, skill, targetDir, status: 'error', reason: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /** Report install state of every bundled skill across all detected hosts. */
+    async list(options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const results = [];
+        for (const host of detectInstalledHosts(this.homeDir)) {
+            const destRoot = hostSkillsRoot(host, this.homeDir);
+            for (const skill of skills) {
+                results.push(await this.listOne(host, skill, join(destRoot, skill)));
+            }
+        }
+        return results;
+    }
+    async listOne(host, skill, targetDir) {
+        const state = await classifyTarget(targetDir);
+        if (state === 'absent')
+            return { host, skill, targetDir, status: 'not-installed' };
+        if (state === 'foreign') {
+            return { host, skill, targetDir, status: 'foreign', reason: 'directory exists but is not managed by pxbaas-cli' };
+        }
+        const marker = await readMarker(targetDir);
+        return { host, skill, targetDir, status: 'installed', skillVersion: marker?.skillVersion, installedAt: marker?.installedAt };
+    }
+    /**
+     * Remove bundled skills from each target. Only removes directories owned by
+     * pxbaas-cli. Two-phase: without `confirm` (or with `dryRun`) it only previews.
+     */
+    async remove(targets, options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const results = [];
+        for (const target of targets) {
+            for (const skill of skills) {
+                results.push(await this.removeOne(target.host, skill, join(target.destRoot, skill), options));
+            }
+        }
+        return results;
+    }
+    async removeOne(host, skill, targetDir, options) {
+        const state = await classifyTarget(targetDir);
+        if (state === 'absent')
+            return { host, skill, targetDir, status: 'not-installed' };
+        if (state === 'foreign') {
+            return { host, skill, targetDir, status: 'skipped-foreign', reason: 'Directory is not managed by pxbaas-cli; refusing to delete.' };
+        }
+        if (options.dryRun || !options.confirm) {
+            return { host, skill, targetDir, status: 'dry-run', reason: options.dryRun ? 'would remove' : 'pass --confirm to remove' };
+        }
+        try {
+            await rm(targetDir, { recursive: true, force: true });
+            return { host, skill, targetDir, status: 'removed' };
+        }
+        catch (err) {
+            return { host, skill, targetDir, status: 'error', reason: err instanceof Error ? err.message : String(err) };
+        }
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/skill/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/skill/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AA6CvG,MAAM,OAAO,YAAY;IACN,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,UAAU,CAAS;IAC5B,WAAW,GAAoB,IAAI,CAAC;IAE5C,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;IACpD,CAAC;IAED,qEAAqE;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAA+B,EAAE;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAiB;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,IAAsD;QACnE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,OAAO,uCAAuC,CAAC,CAAC;YAClH,CAAC;YACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,OAAO,uCAAuC,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,sEAAsE,CACtH,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE,UAA0B,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,KAAe,EACf,OAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI;gBACJ,KAAK;gBACL,SAAS;gBACT,MAAM,EAAE,iBAAiB;gBACzB,MAAM,EAAE,qGAAqG;aAC9G,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAkB,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACrG,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,MAAM,CAAC,SAAS,EAAE,GAAG,SAAS,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,MAAM,GAAgB;gBAC1B,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,IAAI,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,IAAI;gBACJ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,MAAM;aACd,CAAC;YACF,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAErC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,aAAa,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/G,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CAAC,UAAiC,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,SAAiB;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACnF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/H,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE,UAAyB,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,SAAiB,EAAE,OAAsB;QAC5F,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACnF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QACtI,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;QAC7H,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/G,CAAC;IACH,CAAC;CACF"}

package/dist/skill/ownership.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Fail-closed ownership tracking for installed skills (lightweight, per-dir).
+ *
+ * Each installed skill directory carries a `.baas-skill-owner.json` marker
+ * recording the owner, versions, timestamp, and a sha256 per file. This lets
+ * `install` update its own assets idempotently, refuse to clobber foreign
+ * directories (unless `--force`), and lets `remove` delete only what it owns.
+ *
+ * This is the M1 lightweight model; a ctxdb0-style central manifest
+ * (`~/.baas/skill-installations.json`) is deferred to M2.
+ */
+export declare const MARKER_FILE = ".baas-skill-owner.json";
+export declare const OWNER_ID = "pxbaas-cli";
+export interface OwnerMarker {
+    owner: typeof OWNER_ID;
+    skillName: string;
+    skillVersion: string;
+    cliVersion: string;
+    host: string;
+    installedAt: string;
+    files: Record<string, string>;
+}
+export type TargetState = 'absent' | 'owned' | 'foreign';
+export declare function sha256File(path: string): Promise<string>;
+/** Read and validate the owner marker in a directory; null when absent/invalid. */
+export declare function readMarker(dir: string): Promise<OwnerMarker | null>;
+export declare function writeMarker(dir: string, marker: OwnerMarker): Promise<void>;
+/**
+ * Classify a target skill directory:
+ * - `absent`  : directory does not exist
+ * - `owned`   : exists and carries a valid pxbaas-cli marker (safe to update)
+ * - `foreign` : exists without our marker (must NOT be overwritten unless forced)
+ */
+export declare function classifyTarget(dir: string): Promise<TargetState>;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/skill/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../src/skill/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,QAAQ,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzD,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG9D;AAED,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAUzE;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAItE"}

package/dist/skill/ownership.js

@@ -0,0 +1,52 @@
+/**
+ * Fail-closed ownership tracking for installed skills (lightweight, per-dir).
+ *
+ * Each installed skill directory carries a `.baas-skill-owner.json` marker
+ * recording the owner, versions, timestamp, and a sha256 per file. This lets
+ * `install` update its own assets idempotently, refuse to clobber foreign
+ * directories (unless `--force`), and lets `remove` delete only what it owns.
+ *
+ * This is the M1 lightweight model; a ctxdb0-style central manifest
+ * (`~/.baas/skill-installations.json`) is deferred to M2.
+ */
+import { createHash } from 'node:crypto';
+import { readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+export const MARKER_FILE = '.baas-skill-owner.json';
+export const OWNER_ID = 'pxbaas-cli';
+export async function sha256File(path) {
+    const buf = await readFile(path);
+    return createHash('sha256').update(buf).digest('hex');
+}
+/** Read and validate the owner marker in a directory; null when absent/invalid. */
+export async function readMarker(dir) {
+    const markerPath = join(dir, MARKER_FILE);
+    if (!existsSync(markerPath))
+        return null;
+    try {
+        const parsed = JSON.parse(await readFile(markerPath, 'utf8'));
+        if (parsed?.owner !== OWNER_ID || typeof parsed.skillName !== 'string')
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeMarker(dir, marker) {
+    await writeFile(join(dir, MARKER_FILE), JSON.stringify(marker, null, 2) + '\n', 'utf8');
+}
+/**
+ * Classify a target skill directory:
+ * - `absent`  : directory does not exist
+ * - `owned`   : exists and carries a valid pxbaas-cli marker (safe to update)
+ * - `foreign` : exists without our marker (must NOT be overwritten unless forced)
+ */
+export async function classifyTarget(dir) {
+    if (!existsSync(dir))
+        return 'absent';
+    const marker = await readMarker(dir);
+    return marker ? 'owned' : 'foreign';
+}
+//# sourceMappingURL=ownership.js.map

package/dist/skill/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../src/skill/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AACpD,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAcrC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAyB,CAAC;QACtF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpF,OAAO,MAAqB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAmB;IAChE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC"}