@schlessera/brain-ui-server 0.27.0 → 0.28.0

package/dist/routes/tool-permissions.js

@@ -0,0 +1,26 @@
+/**
+ * Management surface for the user's remembered "always allow" tool grants —
+ * the Settings screen's view of what the approval cards' "Always allow"
+ * button has accumulated, and the way to take a grant back.
+ *
+ * The grants themselves are consulted by the ws bridge (an auto-allowed tool
+ * never raises a card); this surface only lists and removes. Mount BEHIND
+ * the /api auth guard: the list shapes what the agent can do unprompted.
+ */
+import { Hono } from "hono";
+import { getAutoAllowedTools, setAutoAllowedTools } from "../db/settings.js";
+export function createToolPermissionRoutes(deps) {
+    const { db, log } = deps;
+    return new Hono()
+        .get("/tool-permissions", (c) => c.json({ tools: getAutoAllowedTools(db, log) }))
+        .delete("/tool-permissions/:tool", (c) => {
+        const tool = decodeURIComponent(c.req.param("tool"));
+        const current = getAutoAllowedTools(db, log);
+        if (!current.includes(tool)) {
+            return c.json({ error: "Not an auto-allowed tool." }, 404);
+        }
+        setAutoAllowedTools(db, current.filter((t) => t !== tool));
+        return c.json({ tools: getAutoAllowedTools(db, log) });
+    });
+}
+//# sourceMappingURL=tool-permissions.js.map

package/dist/routes/tool-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-permissions.js","sourceRoot":"","sources":["../../src/routes/tool-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,UAAU,0BAA0B,CAAC,IAG1C;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,OAAO,IAAI,IAAI,EAAE;SACd,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAChD;SACA,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,mBAAmB,CACjB,EAAE,EACF,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAClC,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/skills/install.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Skill installation from archives — the "install" half of the Settings →
+ * Skills surface: a user-uploaded ZIP, or a GitHub repository (public, or
+ * private via the deployment's GITHUB_TOKEN) fetched as a zipball. Both run
+ * through ONE pipeline so they share the same guarantees:
+ *
+ * - A skill is any directory in the archive containing a SKILL.md (the
+ *   archive root included). One archive may carry several skills.
+ * - The INSTALLED name comes from the SKILL.md frontmatter (validated like a
+ *   created skill), not from whatever the archive called the folder.
+ * - Zip-slip is structurally impossible: entry paths are normalized and any
+ *   `..`, absolute path, backslash, or NUL rejects the archive; files are
+ *   written only under `.agents/skills/<name>/`, staged then swapped so a
+ *   half-written skill is never discoverable.
+ * - Caps: archive ≤ 20 MB compressed, ≤ 50 MB inflated, ≤ 400 files per
+ *   skill, per-file ≤ 10 MB.
+ * - Conflicts are SKIPPED by default and reported; `overwrite: true` may
+ *   replace an existing CUSTOM skill (enabled or disabled) but can never
+ *   touch a package skill — those are symlinks and stay refused.
+ */
+export declare const MAX_ARCHIVE_BYTES: number;
+export declare const MAX_INFLATED_BYTES: number;
+export declare const MAX_FILES_PER_SKILL = 400;
+export declare const MAX_FILE_BYTES: number;
+export declare class InstallError extends Error {
+}
+export interface InstallOutcome {
+    /** Installed-as name (frontmatter), or the archive folder for failures. */
+    name: string;
+    status: "installed" | "replaced" | "skipped";
+    reason?: string;
+    files?: number;
+}
+export interface InstallOptions {
+    overwrite?: boolean;
+    /** Only consider entries under this archive subpath (GitHub `tree` URLs). */
+    subpath?: string;
+}
+export interface InstallDeps {
+    brainPath: string;
+}
+/**
+ * The shared core: install every skill found among already-unzipped entries.
+ * Throws InstallError for archive-level problems; per-skill problems land as
+ * skipped outcomes.
+ */
+export declare function installSkillsFromEntries(deps: InstallDeps, entries: Record<string, Uint8Array>, opts?: InstallOptions): InstallOutcome[];
+/** Install every skill found in an uploaded ZIP archive. */
+export declare function installSkillsFromZip(deps: InstallDeps, archive: Uint8Array, opts?: InstallOptions): InstallOutcome[];
+export interface GitHubSource {
+    owner: string;
+    repo: string;
+    ref?: string;
+    /** Repo subpath to search for skills (from a /tree/<ref>/<path> URL). */
+    subpath?: string;
+}
+/**
+ * Parse "owner/repo", a github.com URL, or a /tree/<ref>/<subpath> URL.
+ * The ref/subpath split is heuristic for URLs (a ref containing "/" cannot
+ * be told apart from a path); pass an explicit ref for those.
+ */
+export declare function parseGitHubSource(input: string): GitHubSource | null;
+/** Injectable for tests; production passes globalThis.fetch. */
+export type Fetcher = (url: string, init?: RequestInit) => Promise<Response>;
+/**
+ * Download a repo zipball (the API endpoint — works for private repos with a
+ * token, follows the codeload redirect) and install through the shared
+ * pipeline. GitHub zipballs prefix every entry with `owner-repo-sha/`; that
+ * wrapper folder is stripped before candidate discovery so subpaths from
+ * /tree/ URLs match repo-relative paths.
+ */
+export declare function installSkillsFromGitHub(deps: InstallDeps, source: GitHubSource, opts?: {
+    overwrite?: boolean;
+    token?: string;
+    fetcher?: Fetcher;
+}): Promise<InstallOutcome[]>;
+//# sourceMappingURL=install.d.ts.map

package/dist/skills/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/skills/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AACnD,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,cAAc,QAAmB,CAAC;AAI/C,qBAAa,YAAa,SAAQ,KAAK;CAAG;AAE1C,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAmBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACnC,IAAI,GAAE,cAAmB,GACxB,cAAc,EAAE,CAyDlB;AA2ED,4DAA4D;AAC5D,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,UAAU,EACnB,IAAI,GAAE,cAAmB,GACxB,cAAc,EAAE,CAalB;AAMD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAqBpE;AAED,gEAAgE;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACpE,OAAO,CAAC,cAAc,EAAE,CAAC,CA8C3B"}

package/dist/skills/install.js

@@ -0,0 +1,273 @@
+/**
+ * Skill installation from archives — the "install" half of the Settings →
+ * Skills surface: a user-uploaded ZIP, or a GitHub repository (public, or
+ * private via the deployment's GITHUB_TOKEN) fetched as a zipball. Both run
+ * through ONE pipeline so they share the same guarantees:
+ *
+ * - A skill is any directory in the archive containing a SKILL.md (the
+ *   archive root included). One archive may carry several skills.
+ * - The INSTALLED name comes from the SKILL.md frontmatter (validated like a
+ *   created skill), not from whatever the archive called the folder.
+ * - Zip-slip is structurally impossible: entry paths are normalized and any
+ *   `..`, absolute path, backslash, or NUL rejects the archive; files are
+ *   written only under `.agents/skills/<name>/`, staged then swapped so a
+ *   half-written skill is never discoverable.
+ * - Caps: archive ≤ 20 MB compressed, ≤ 50 MB inflated, ≤ 400 files per
+ *   skill, per-file ≤ 10 MB.
+ * - Conflicts are SKIPPED by default and reported; `overwrite: true` may
+ *   replace an existing CUSTOM skill (enabled or disabled) but can never
+ *   touch a package skill — those are symlinks and stay refused.
+ */
+import { unzipSync } from "fflate";
+import { existsSync, lstatSync, mkdirSync, renameSync, rmSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+import matter from "gray-matter";
+export const MAX_ARCHIVE_BYTES = 20 * 1024 * 1024;
+export const MAX_INFLATED_BYTES = 50 * 1024 * 1024;
+export const MAX_FILES_PER_SKILL = 400;
+export const MAX_FILE_BYTES = 10 * 1024 * 1024;
+const NAME_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
+export class InstallError extends Error {
+}
+/** A safe, normalized archive path or null. Rejects slip vectors outright. */
+function safeEntryPath(raw) {
+    if (raw.includes("\\") || raw.includes("\0") || raw.startsWith("/"))
+        return null;
+    const parts = raw.split("/").filter((p) => p !== "" && p !== ".");
+    if (parts.some((p) => p === ".." || p.length > 128))
+        return null;
+    return parts.join("/");
+}
+function existsAs(p) {
+    try {
+        const st = lstatSync(p);
+        return st.isSymbolicLink() ? "symlink" : st.isDirectory() ? "dir" : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The shared core: install every skill found among already-unzipped entries.
+ * Throws InstallError for archive-level problems; per-skill problems land as
+ * skipped outcomes.
+ */
+export function installSkillsFromEntries(deps, entries, opts = {}) {
+    // Normalize + guard every entry, enforcing the inflated cap.
+    const files = new Map();
+    let inflated = 0;
+    for (const [raw, bytes] of Object.entries(entries)) {
+        if (raw.endsWith("/"))
+            continue; // directory marker
+        const path = safeEntryPath(raw);
+        if (path === null) {
+            throw new InstallError(`Archive contains an unsafe path: ${JSON.stringify(raw)}`);
+        }
+        if (bytes.length > MAX_FILE_BYTES) {
+            throw new InstallError(`${path} exceeds ${MAX_FILE_BYTES / 1024 / 1024}MB.`);
+        }
+        inflated += bytes.length;
+        if (inflated > MAX_INFLATED_BYTES) {
+            throw new InstallError("Archive inflates past the 50MB cap.");
+        }
+        files.set(path, bytes);
+    }
+    // Candidate skill roots: every directory (or the root) holding a SKILL.md,
+    // optionally filtered to a subpath.
+    const prefix = opts.subpath ? opts.subpath.replace(/^\/+|\/+$/g, "") + "/" : "";
+    const roots = [...files.keys()]
+        .filter((p) => p === "SKILL.md" || p.endsWith("/SKILL.md"))
+        .map((p) => (p === "SKILL.md" ? "" : p.slice(0, -"/SKILL.md".length)))
+        .filter((root) => (prefix ? (root + "/").startsWith(prefix) : true))
+        .sort();
+    if (roots.length === 0) {
+        throw new InstallError("No skill found: no directory containing a SKILL.md" +
+            (opts.subpath ? ` under "${opts.subpath}"` : "") +
+            ".");
+    }
+    const enabledDir = join(deps.brainPath, ".agents", "skills");
+    const disabledDir = join(deps.brainPath, ".agents", "skills-disabled");
+    mkdirSync(enabledDir, { recursive: true });
+    const outcomes = [];
+    for (const root of roots) {
+        const rootPrefix = root === "" ? "" : root + "/";
+        const label = root || "(archive root)";
+        // Each file belongs to its DEEPEST skill root, so nested skills never
+        // double-install into their parent.
+        const deeper = roots.filter((r) => r !== root && r.startsWith(rootPrefix));
+        const skillFiles = new Map();
+        for (const [path, bytes] of files) {
+            if (!path.startsWith(rootPrefix))
+                continue;
+            if (deeper.some((d) => path.startsWith(d + "/")))
+                continue;
+            skillFiles.set(path.slice(rootPrefix.length), bytes);
+        }
+        outcomes.push(installOne(label, skillFiles, enabledDir, disabledDir, opts));
+    }
+    return outcomes;
+}
+function installOne(label, skillFiles, enabledDir, disabledDir, opts) {
+    const skillMd = skillFiles.get("SKILL.md");
+    if (!skillMd)
+        return { name: label, status: "skipped", reason: "SKILL.md unreadable" };
+    let data;
+    try {
+        data = matter(Buffer.from(skillMd).toString("utf-8")).data;
+    }
+    catch (e) {
+        return {
+            name: label,
+            status: "skipped",
+            reason: `frontmatter does not parse: ${e instanceof Error ? e.message : String(e)}`,
+        };
+    }
+    const name = typeof data.name === "string" ? data.name : "";
+    if (!NAME_PATTERN.test(name)) {
+        return {
+            name: label,
+            status: "skipped",
+            reason: "frontmatter `name` missing or not lowercase kebab-case",
+        };
+    }
+    if (typeof data.description !== "string" || !data.description.trim()) {
+        return { name, status: "skipped", reason: "frontmatter has no `description`" };
+    }
+    if (skillFiles.size > MAX_FILES_PER_SKILL) {
+        return { name, status: "skipped", reason: `more than ${MAX_FILES_PER_SKILL} files` };
+    }
+    const target = join(enabledDir, name);
+    const disabledTarget = join(disabledDir, name);
+    if (existsAs(target) === "symlink") {
+        return {
+            name,
+            status: "skipped",
+            reason: "a built-in (package) skill has this name; rename yours in the frontmatter",
+        };
+    }
+    const existing = existsAs(target) === "dir" || existsAs(disabledTarget) === "dir";
+    if (existing && !opts.overwrite) {
+        return { name, status: "skipped", reason: "already installed (enable overwrite to replace)" };
+    }
+    // Stage into a temp sibling, then swap — a half-written skill dir must
+    // never be what an agent discovers.
+    const staging = join(enabledDir, `.install-${name}-${process.pid}`);
+    rmSync(staging, { recursive: true, force: true });
+    try {
+        for (const [rel, bytes] of skillFiles) {
+            const dest = join(staging, rel);
+            mkdirSync(dirname(dest), { recursive: true });
+            writeFileSync(dest, bytes);
+        }
+        rmSync(target, { recursive: true, force: true });
+        if (existsSync(disabledTarget))
+            rmSync(disabledTarget, { recursive: true, force: true });
+        renameSync(staging, target);
+        return { name, status: existing ? "replaced" : "installed", files: skillFiles.size };
+    }
+    catch (e) {
+        rmSync(staging, { recursive: true, force: true });
+        return {
+            name,
+            status: "skipped",
+            reason: `write failed: ${e instanceof Error ? e.message : String(e)}`,
+        };
+    }
+}
+/** Install every skill found in an uploaded ZIP archive. */
+export function installSkillsFromZip(deps, archive, opts = {}) {
+    if (archive.length > MAX_ARCHIVE_BYTES) {
+        throw new InstallError(`Archive exceeds ${MAX_ARCHIVE_BYTES / 1024 / 1024}MB.`);
+    }
+    let entries;
+    try {
+        entries = unzipSync(archive);
+    }
+    catch (e) {
+        throw new InstallError(`Not a readable ZIP archive: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    return installSkillsFromEntries(deps, entries, opts);
+}
+/**
+ * Parse "owner/repo", a github.com URL, or a /tree/<ref>/<subpath> URL.
+ * The ref/subpath split is heuristic for URLs (a ref containing "/" cannot
+ * be told apart from a path); pass an explicit ref for those.
+ */
+export function parseGitHubSource(input) {
+    const trimmed = input.trim();
+    const bare = /^([\w.-]+)\/([\w.-]+)$/.exec(trimmed);
+    if (bare)
+        return { owner: bare[1], repo: bare[2].replace(/\.git$/, "") };
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        return null;
+    }
+    if (url.hostname !== "github.com" && url.hostname !== "www.github.com")
+        return null;
+    const parts = url.pathname.split("/").filter(Boolean);
+    if (parts.length < 2)
+        return null;
+    const owner = parts[0];
+    const repo = parts[1].replace(/\.git$/, "");
+    if (parts.length >= 4 && (parts[2] === "tree" || parts[2] === "blob")) {
+        const ref = parts[3];
+        const subpath = parts.slice(4).join("/") || undefined;
+        return { owner, repo, ref, ...(subpath ? { subpath } : {}) };
+    }
+    return { owner, repo };
+}
+/**
+ * Download a repo zipball (the API endpoint — works for private repos with a
+ * token, follows the codeload redirect) and install through the shared
+ * pipeline. GitHub zipballs prefix every entry with `owner-repo-sha/`; that
+ * wrapper folder is stripped before candidate discovery so subpaths from
+ * /tree/ URLs match repo-relative paths.
+ */
+export async function installSkillsFromGitHub(deps, source, opts = {}) {
+    const fetcher = opts.fetcher ?? fetch;
+    const ref = source.ref ? `/${encodeURIComponent(source.ref)}` : "";
+    const url = `https://api.github.com/repos/${encodeURIComponent(source.owner)}/${encodeURIComponent(source.repo)}/zipball${ref}`;
+    const res = await fetcher(url, {
+        headers: {
+            Accept: "application/vnd.github+json",
+            "User-Agent": "brain-kit-ui",
+            ...(opts.token ? { Authorization: `Bearer ${opts.token}` } : {}),
+        },
+        redirect: "follow",
+    });
+    if (res.status === 404) {
+        throw new InstallError(`GitHub says 404 for ${source.owner}/${source.repo}` +
+            (opts.token
+                ? "."
+                : " — if the repository is private, set GITHUB_TOKEN on the server."));
+    }
+    if (!res.ok) {
+        throw new InstallError(`GitHub zipball fetch failed: HTTP ${res.status}`);
+    }
+    const buf = new Uint8Array(await res.arrayBuffer());
+    if (buf.length > MAX_ARCHIVE_BYTES) {
+        throw new InstallError(`Repository archive exceeds ${MAX_ARCHIVE_BYTES / 1024 / 1024}MB.`);
+    }
+    let entries;
+    try {
+        entries = unzipSync(buf);
+    }
+    catch (e) {
+        throw new InstallError(`GitHub returned an unreadable archive: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    const stripped = {};
+    for (const [key, bytes] of Object.entries(entries)) {
+        const slash = key.indexOf("/");
+        if (slash === -1)
+            continue; // nothing lives outside the wrapper dir
+        stripped[key.slice(slash + 1)] = bytes;
+    }
+    return installSkillsFromEntries(deps, stripped, {
+        ...(opts.overwrite !== undefined ? { overwrite: opts.overwrite } : {}),
+        ...(source.subpath ? { subpath: source.subpath } : {}),
+    });
+}
+//# sourceMappingURL=install.js.map

package/dist/skills/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/skills/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAoB1C,8EAA8E;AAC9E,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAiB,EACjB,OAAmC,EACnC,OAAuB,EAAE;IAEzB,6DAA6D;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,mBAAmB;QACpD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,YAAY,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,YAAY,cAAc,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;QAC/E,CAAC;QACD,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,IAAI,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,qCAAqC,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3E,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACnE,IAAI,EAAE,CAAC;IACV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CACpB,oDAAoD;YAClD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CACN,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACvE,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,IAAI,gBAAgB,CAAC;QACvC,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC3D,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CACjB,KAAa,EACb,UAAmC,EACnC,UAAkB,EAClB,WAAmB,EACnB,IAAoB;IAEpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAEvF,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAA+B,CAAC;IACxF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,mBAAmB,QAAQ,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,2EAA2E;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC;IAClF,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IAChG,CAAC;IAED,uEAAuE;IACvE,oCAAoC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,cAAc,CAAC;YAAE,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,OAAmB,EACnB,OAAuB,EAAE;IAEzB,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,mBAAmB,iBAAiB,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;IAC3E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACpF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAiB,EACjB,MAAoB,EACpB,OAAmE,EAAE;IAErE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,gCAAgC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IAChI,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,cAAc;YAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;QACD,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CACpB,uBAAuB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE;YAClD,CAAC,IAAI,CAAC,KAAK;gBACT,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,kEAAkE,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,qCAAqC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CAAC,8BAA8B,iBAAiB,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS,CAAC,wCAAwC;QACpE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE;QAC9C,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC,CAAC;AACL,CAAC"}

package/dist/skills/manager.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Custom-skill management over the brain repo's canonical skill home.
+ *
+ * The store IS the filesystem convention `brain skills sync` already defines:
+ *
+ * - `.agents/skills/<name>` as a REAL directory = a user's custom skill —
+ *   the local layer, highest discovery precedence, never touched by sync,
+ *   inside the brain repo so it persists across deployments and rides the
+ *   repo's own git backup.
+ * - `.agents/skills/<name>` as a SYMLINK = a package skill (core or module),
+ *   materialized by sync. Read-only here: managed by the packages.
+ * - `.agents/skills-disabled/<name>` = a custom skill parked out of
+ *   discovery. Disable is a directory move, so it applies to EVERY backend
+ *   at once — after a sync, the claude/pi/codex/gemini emitters prune their
+ *   links and the AGENTS.md index drops the row.
+ *
+ * After every mutation the caller runs `brain skills sync` so all agent
+ * integration dirs and the AGENTS.md index block follow the canonical home.
+ *
+ * Security posture: names are strictly validated (no traversal), mutations
+ * refuse to operate through symlinks (a package skill can never be edited or
+ * deleted from here), and content is size-capped. The routes sit behind the
+ * /api auth guard — this surface configures what the agent does.
+ */
+/** A SKILL.md past this is not a skill, it's a document dump. */
+export declare const MAX_SKILL_CONTENT_BYTES: number;
+export interface SkillEntry {
+    /** Directory name (= the skill's identity for enable/disable/remove). */
+    name: string;
+    /** Frontmatter description, or empty when unparseable. */
+    description: string;
+    /** Where the skill comes from; only "custom" entries are editable. */
+    source: "builtin" | "custom";
+    enabled: boolean;
+    /** Set when the SKILL.md failed to parse — shown, not hidden. */
+    warning?: string;
+}
+export interface SkillDetail extends SkillEntry {
+    content: string;
+    /** Files in the skill directory besides SKILL.md (repo-relative names). */
+    extraFiles: string[];
+}
+export declare class SkillValidationError extends Error {
+}
+export declare class SkillNotFoundError extends Error {
+}
+export declare class SkillConflictError extends Error {
+}
+export interface SkillManager {
+    list(): SkillEntry[];
+    get(name: string): SkillDetail;
+    create(name: string, content: string): SkillEntry;
+    update(name: string, content: string): SkillEntry;
+    setEnabled(name: string, enabled: boolean): SkillEntry;
+    remove(name: string): void;
+}
+export declare function createSkillManager(brainPath: string): SkillManager;
+//# sourceMappingURL=manager.d.ts.map

package/dist/skills/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/skills/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAkBH,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAClD,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAChD,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAClD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC;IACvD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAsLlE"}