@prismer/runtime 2.0.8 → 2.2.63

package/built-in-skills/prismer-github/scripts/gh-env.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+# Source using the installed absolute path. No installs or account writes.
+_gh_skill_scripts="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+GH_AUTH_METHOD=none
+GH_USER=''
+GH_OWNER=''
+GH_REPO=''
+GH_OWNER_REPO=''
+GH_HOST="${GH_HOST:-github.com}"
+if command -v gh >/dev/null 2>&1 && gh auth status --hostname "$GH_HOST" >/dev/null 2>&1; then
+    GH_AUTH_METHOD=gh
+    GH_USER=$(gh api --hostname "$GH_HOST" user --jq '.login' 2>/dev/null) || GH_AUTH_METHOD=none
+elif [ "$GH_HOST" = github.com ] && [ -n "${GITHUB_TOKEN:-${GH_TOKEN:-}}" ]; then
+    GITHUB_TOKEN="${GITHUB_TOKEN:-$GH_TOKEN}"
+    GH_AUTH_METHOD=token-unverified
+fi
+_gh_remote=$(git remote get-url origin 2>/dev/null) || _gh_remote=''
+GH_OWNER_REPO=$(python3 "$_gh_skill_scripts/github-context.py" "$_gh_remote" "$GH_HOST") || GH_OWNER_REPO=''
+if [ -n "$GH_OWNER_REPO" ]; then
+    GH_OWNER="${GH_OWNER_REPO%%/*}"
+    GH_REPO="${GH_OWNER_REPO#*/}"
+fi
+printf 'GitHub auth: %s; host: %s; repo: %s\n' "$GH_AUTH_METHOD" "$GH_HOST" "$GH_OWNER_REPO"
+unset _gh_skill_scripts _gh_remote
+export GH_AUTH_METHOD GH_USER GH_OWNER GH_REPO GH_OWNER_REPO GH_HOST

package/built-in-skills/prismer-github/scripts/git-credential-token.py

@@ -0,0 +1,68 @@
+#!/usr/bin/env python3
+"""Print the first unambiguous GitHub token in a git credential-store file."""
+
+from pathlib import Path
+import re
+import sys
+from urllib.parse import unquote, urlsplit
+
+
+_TOKEN_PREFIXES = ("ghp_", "github_pat_", "gho_", "ghu_", "ghs_", "ghr_")
+_INVALID_ESCAPE = re.compile(r"%(?![0-9A-Fa-f]{2})")
+
+
+def _decode(value: str | None) -> str:
+    if value is None or _INVALID_ESCAPE.search(value):
+        return ""
+    decoded = unquote(value)
+    if not decoded or any(ord(char) <= 0x1F or 0x7F <= ord(char) <= 0x9F for char in decoded):
+        return ""
+    return decoded
+
+
+def _token_from_url(line: str) -> str:
+    if "\r" in line or "\n" in line:
+        return ""
+    try:
+        credential = urlsplit(line)
+        port = credential.port
+    except ValueError:
+        return ""
+    if credential.scheme != "https" or credential.hostname != "github.com" or port not in (None, 443):
+        return ""
+
+    username = _decode(credential.username)
+    password = _decode(credential.password)
+    if not username:
+        return ""
+    if password and password != "x-oauth-basic":
+        return password
+    if password == "x-oauth-basic":
+        return username
+    return username if username.startswith(_TOKEN_PREFIXES) else ""
+
+
+def main() -> int:
+    if len(sys.argv) != 2:
+        print('An explicitly authorized credential file is required', file=sys.stderr)
+        return 2
+    path = Path(sys.argv[1]).expanduser()
+    try:
+        lines = path.read_bytes().split(b"\n")
+    except OSError:
+        return 1
+
+    for raw_line in lines:
+        try:
+            line = raw_line.decode("utf-8")
+        except UnicodeDecodeError:
+            continue
+        token = _token_from_url(line)
+        if token:
+            print(token)
+            return 0
+    return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/built-in-skills/prismer-github/scripts/github-api.py

@@ -0,0 +1,71 @@
+#!/usr/bin/env python3
+"""Read-only GitHub REST JSON with complete, same-host pagination."""
+import argparse
+import json
+import os
+import re
+import sys
+from urllib.parse import urlsplit
+from urllib.request import Request, build_opener, HTTPRedirectHandler
+
+
+class NoRedirect(HTTPRedirectHandler):
+    def redirect_request(self, *args, **kwargs):
+        raise ValueError('API redirect rejected; verify the canonical repository')
+
+
+def check_url(url):
+    parsed = urlsplit(url)
+    if (parsed.scheme != 'https' or parsed.hostname != 'api.github.com' or
+            parsed.username or parsed.password or parsed.port not in (None, 443) or
+            parsed.fragment or any(ord(c) < 33 for c in url)):
+        raise ValueError('only https://api.github.com URLs are accepted')
+
+
+def fetch(url, token):
+    check_url(url)
+    headers = {'Accept': 'application/vnd.github+json', 'User-Agent': 'Prismer-GitHub-skill'}
+    if token:
+        headers['Authorization'] = 'Bearer ' + token
+    with build_opener(NoRedirect()).open(Request(url, headers=headers), timeout=30) as response:
+        raw = response.read(16_000_001)
+        if len(raw) > 16_000_000:
+            raise ValueError('API page too large')
+        return json.loads(raw), response.headers.get('Link', '')
+
+
+def read_all(url, token='', request=fetch):
+    seen, result, key = set(), None, None
+    while url:
+        check_url(url)
+        if url in seen or len(seen) >= 100:
+            raise ValueError('pagination cycle/limit; no partial result returned')
+        seen.add(url)
+        data, links = request(url, token)
+        if result is None:
+            result = data
+            if isinstance(data, dict):
+                keys = [k for k in ('items', 'workflow_runs', 'workflows', 'check_runs', 'jobs', 'artifacts', 'secrets') if isinstance(data.get(k), list)]
+                key = keys[0] if len(keys) == 1 else None
+        elif isinstance(result, list) and isinstance(data, list):
+            result.extend(data)
+        elif key and isinstance(data, dict) and isinstance(data.get(key), list):
+            result[key].extend(data[key])
+        else:
+            raise ValueError('inconsistent paginated response')
+        next_links = re.findall(r'<([^>]+)>;\s*rel="next"', links)
+        if len(next_links) > 1:
+            raise ValueError('ambiguous next page')
+        url = next_links[0] if next_links else ''
+    return result
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('url')
+    args = parser.parse_args()
+    try:
+        print(json.dumps(read_all(args.url, os.environ.get('GH_TOKEN') or os.environ.get('GITHUB_TOKEN', ''))))
+    except (ValueError, OSError):
+        print('GitHub read failed; no complete result available', file=sys.stderr)
+        sys.exit(1)

package/built-in-skills/prismer-github/scripts/github-context.py

@@ -0,0 +1,28 @@
+#!/usr/bin/env python3
+"""Strict remote parser. Never reads accounts or prints tokens."""
+import re
+import sys
+from urllib.parse import urlsplit
+
+
+def parse_remote(remote, host='github.com'):
+    if any(ord(c) < 33 or ord(c) == 127 for c in remote):
+        return ''
+    if remote.startswith('git@') and ':' in remote:
+        remote = 'ssh://' + remote.replace(':', '/', 1)
+    try:
+        url = urlsplit(remote)
+        if url.scheme not in ('https', 'ssh') or url.hostname != host or url.query or url.fragment:
+            return ''
+        if url.password or (url.username and not (url.scheme == 'ssh' and url.username == 'git')):
+            return ''
+        if url.port not in (None, 443 if url.scheme == 'https' else 22):
+            return ''
+    except ValueError:
+        return ''
+    path = url.path.removeprefix('/').removesuffix('.git')
+    return path if re.fullmatch(r'[A-Za-z0-9][A-Za-z0-9-]*/[A-Za-z0-9_.-]+', path) and path.split('/')[1] not in ('.', '..') else ''
+
+
+if __name__ == '__main__':
+    print(parse_remote(sys.argv[1], sys.argv[2] if len(sys.argv) > 2 else 'github.com'))

package/built-in-skills/prismer-github/templates/bug-report.md

@@ -0,0 +1,35 @@
+## Bug Description
+
+<!-- Clear, concise description of the bug -->
+
+## Steps to Reproduce
+
+1.
+2.
+3.
+
+## Expected Behavior
+
+<!-- What should happen -->
+
+## Actual Behavior
+
+<!-- What actually happens -->
+
+## Environment
+
+- OS:
+- Version/Commit:
+- Python version:
+- Browser (if applicable):
+
+## Error Output
+
+<!-- Paste relevant error messages, stack traces, or logs -->
+
+```
+```
+
+## Additional Context
+
+<!-- Screenshots, related issues, workarounds discovered, etc. -->

package/built-in-skills/prismer-github/templates/feature-request.md

@@ -0,0 +1,31 @@
+## Feature Description
+
+<!-- What do you want? -->
+
+## Motivation
+
+<!-- Why would this be useful? What problem does it solve? -->
+
+## Proposed Solution
+
+<!-- How could it work? Include API sketches, CLI examples, or mockups if helpful -->
+
+```
+# Example usage
+```
+
+## Alternatives Considered
+
+<!-- Other approaches and why they're less ideal -->
+
+-
+
+## Scope / Effort Estimate
+
+<!-- How big is this? What areas of the codebase would it touch? -->
+
+Small / Medium / Large — <!-- explanation -->
+
+## Additional Context
+
+<!-- Links to similar features in other tools, relevant discussions, etc. -->

package/built-in-skills/prismer-github/templates/pr-body-bugfix.md

@@ -0,0 +1,35 @@
+## Bug Description
+
+<!-- What was happening? -->
+
+Fixes #
+
+## Root Cause
+
+<!-- What was causing the bug? -->
+
+## Fix
+
+<!-- What does this PR change to fix it? -->
+
+-
+
+## How to Verify
+
+<!-- Steps a reviewer can follow to confirm the fix -->
+
+1.
+2.
+3.
+
+## Test Plan
+
+- [ ] Added regression test for this bug
+- [ ] Existing tests still pass
+- [ ] Manual verification of the fix
+
+## Risk Assessment
+
+<!-- Could this fix break anything else? What's the blast radius? -->
+
+Low / Medium / High — <!-- explanation -->

package/built-in-skills/prismer-github/templates/pr-body-feature.md

@@ -0,0 +1,33 @@
+## Summary
+
+<!-- 1-3 bullet points describing what this PR does -->
+
+-
+
+## Motivation
+
+<!-- Why is this change needed? Link to issue if applicable -->
+
+Closes #
+
+## Changes
+
+<!-- Detailed list of changes made -->
+
+-
+
+## Test Plan
+
+<!-- How was this tested? Checklist of verification steps -->
+
+- [ ] Unit tests pass (`pytest`)
+- [ ] Manual testing of new functionality
+- [ ] No regressions in existing behavior
+
+## Screenshots / Examples
+
+<!-- If UI changes or new output, show before/after -->
+
+## Notes for Reviewers
+
+<!-- Anything reviewers should pay special attention to -->

package/built-in-skills/prismer-google-workspace/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Nous Research
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/built-in-skills/prismer-google-workspace/NOTICE.md

@@ -0,0 +1,11 @@
+# Source and modifications
+
+Derived from Hermes Agent skills/productivity/google-workspace, commit
+1a1f4a59e252e1dc0137e7b2e7bcc8b0381d19c4. Upstream authors remain credited
+in SKILL.md. The MIT license is included in LICENSE.
+
+Prismer adaptation: unique slug/native replacement, scoped execution and
+authorization, corrected resource/API instructions and local safety helpers.
+See docs/bugfix223/implementation-productivity.md in the source repository
+for offline evidence and untested live integrations. Dependencies and service
+data retain their own licenses; this notice does not relicense them.