@poping/yome 0.0.2 → 0.0.4

package/dist/yomeSkills/capabilityGuard.js

@@ -0,0 +1,113 @@
+// capabilityGuard.ts — runtime gate that the bash-tool intercept layer
+// (and any future skill dispatcher) calls before letting an installed
+// skill exercise an OS capability.
+//
+// Spec ref: 7.6 ("capability 强制 — runtime dispatch 前检查命令是否在 skill
+// 声明的 capabilities 内，越权拒绝") + 11.4-D row "permissions/ —
+// checkSkillCapability".
+//
+// The actual dispatcher is M5+ (spec §11.4-F step 3). This module exists
+// so the security primitive is in place and unit-testable now: when the
+// dispatcher lands, the only call site is `assertCapability(slug, cap)`
+// and we get a single source of truth for the allow/deny logic.
+//
+// Design choices:
+//   * We consult the same `allowed-capabilities.json` sidecar that the
+//     install-time prompt writes — there is no separate "runtime" grant
+//     store. Symmetry between install-time consent and run-time check is
+//     the whole point.
+//   * We DO NOT consult the *manifest's* declared list at runtime. A skill
+//     that revoked a capability via `yome skill perms <slug> --revoke`
+//     should be denied even if the manifest still declares it.
+//   * Bundled official skills (slug starts with `@yome/`) are treated as
+//     pre-trusted IF their allowed-cap sidecar is missing — they ship
+//     with the binary, so they never went through the prompt. If a
+//     sidecar IS present (e.g. user revoked one), it wins.
+//   * Telemetry: every denial increments an in-memory counter the doctor
+//     command can surface as "skill X tried to use Y N times — investigate".
+import { readAllowedCapabilities, normaliseDeclared } from './capabilities.js';
+import { readManifest } from './manifest.js';
+import { installPathForSlug } from './paths.js';
+const denialCounters = new Map(); // `${slug}::${cap}` → count
+function bumpDenial(slug, cap) {
+    const k = `${slug}::${cap}`;
+    denialCounters.set(k, (denialCounters.get(k) ?? 0) + 1);
+}
+/** Snapshot of denials since process start. Used by `yome skill doctor` v2. */
+export function getDenialCounts() {
+    return Array.from(denialCounters.entries())
+        .map(([k, count]) => {
+        const [slug, capability] = k.split('::');
+        return { slug, capability, count };
+    })
+        .sort((a, b) => b.count - a.count);
+}
+/** Reset counters (test seam). */
+export function resetDenialCounts() {
+    denialCounters.clear();
+}
+const isOfficial = (slug) => slug.startsWith('@yome/');
+/**
+ * Synchronous capability check — safe to call from inside a tool dispatch
+ * hot path. Reads two small files (manifest + allowed-cap sidecar) but
+ * does not block on network or DB.
+ *
+ * @returns Decision with `allowed: true` ⇒ proceed; otherwise deny and
+ * surface `reason` to the LLM so it can pick a different action.
+ */
+export function checkCapability(slug, cap) {
+    const dir = installPathForSlug(slug);
+    if (!dir) {
+        return { allowed: false, source: 'unknown-skill', reason: `unknown skill slug: ${slug}` };
+    }
+    const manifest = readManifest(dir);
+    if (!manifest) {
+        return { allowed: false, source: 'unknown-skill', reason: `${slug}: manifest missing` };
+    }
+    const declared = new Set(normaliseDeclared(manifest.system_capabilities));
+    if (!declared.has(cap)) {
+        bumpDenial(slug, String(cap));
+        return {
+            allowed: false,
+            source: 'unknown-cap',
+            reason: `${slug} did not declare capability "${cap}" in its manifest — refused.`,
+        };
+    }
+    const allowed = readAllowedCapabilities(slug);
+    if (!allowed) {
+        // No sidecar: official skills are pre-trusted; everyone else is denied
+        // (defensive default — better to fail closed than to silently grant).
+        if (isOfficial(slug)) {
+            return { allowed: true, source: 'official-no-sidecar' };
+        }
+        bumpDenial(slug, String(cap));
+        return {
+            allowed: false,
+            source: 'sidecar',
+            reason: `${slug} has no capability grant on file — run \`yome skill perms ${slug} --grant=${cap}\` first.`,
+        };
+    }
+    if (allowed.allowed.includes(cap)) {
+        return { allowed: true, source: 'sidecar' };
+    }
+    bumpDenial(slug, String(cap));
+    return {
+        allowed: false,
+        source: 'sidecar',
+        reason: `${slug}: capability "${cap}" was revoked. Re-grant with \`yome skill perms ${slug} --grant=${cap}\`.`,
+    };
+}
+/**
+ * Throwing variant — convenience for dispatchers that prefer exceptions
+ * over decision objects. Errors are tagged so callers can render them
+ * cleanly to the LLM.
+ */
+export function assertCapability(slug, cap) {
+    const d = checkCapability(slug, cap);
+    if (!d.allowed) {
+        const err = new Error(d.reason ?? 'capability denied');
+        err.code = 'YOME_CAPABILITY_DENIED';
+        throw err;
+    }
+}
+//# sourceMappingURL=capabilityGuard.js.map

package/dist/yomeSkills/capabilityGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityGuard.js","sourceRoot":"","sources":["../../src/yomeSkills/capabilityGuard.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,sEAAsE;AACtE,mCAAmC;AACnC,EAAE;AACF,kEAAkE;AAClE,yDAAyD;AACzD,yBAAyB;AACzB,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,kBAAkB;AAClB,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,uBAAuB;AACvB,2EAA2E;AAC3E,uEAAuE;AACvE,+DAA+D;AAC/D,yEAAyE;AACzE,sEAAsE;AACtE,mEAAmE;AACnE,2DAA2D;AAC3D,yEAAyE;AACzE,6EAA6E;AAE7E,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAmB,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAUhD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAG,4BAA4B;AAEhF,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW;IAC3C,MAAM,CAAC,GAAG,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC;IAC5B,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QAClB,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,iBAAiB;IAC/B,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAwB;IACpE,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,uBAAuB,IAAI,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAiB,CAAC,EAAE,CAAC;QACrC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,GAAG,IAAI,gCAAgC,GAAG,8BAA8B;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC1D,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,GAAG,IAAI,6DAA6D,IAAI,YAAY,GAAG,WAAW;SAC3G,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAiB,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,GAAG,IAAI,iBAAiB,GAAG,mDAAmD,IAAI,YAAY,GAAG,KAAK;KAC/G,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAwB;IACrE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAA8B,CAAC;QACpF,GAAG,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACpC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/yomeSkills/cli.d.ts

@@ -0,0 +1,25 @@
+export interface SkillCliFlags {
+    force?: boolean;
+    verbose?: boolean;
+    json?: boolean;
+    /** --yes: bypass capability prompt during install. */
+    yes?: boolean;
+    /** --revoke <cap>: capability to revoke (yome skill perms). */
+    revoke?: string;
+    /** --grant <cap>: capability to grant (yome skill perms). */
+    grant?: string;
+    /** --skip-verify: bypass post-install sha256 check. Only for dev. */
+    skipVerify?: boolean;
+    /** --reason "<text>": deprecation reason (yome skill deprecate). */
+    reason?: string;
+    /** --replaced-by <semver>: pointer to the version users should move to (yome skill deprecate). */
+    replacedBy?: string;
+    /** --version <semver>: install a specific version (yome skill install / update). */
+    version?: string;
+    /** --allow-deprecated: install a deprecated version on purpose. */
+    allowDeprecated?: boolean;
+}
+export declare function runSkillSubcommand(args: string[], flags: SkillCliFlags): Promise<number>;
+export declare function runLogin(): Promise<number>;
+export declare function runLogout(): Promise<number>;
+export declare function runWhoami(): Promise<number>;