@skillctl/core 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 skillctl contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/adapters.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Adapter registration helpers (minimal for PR6).
+ * Core defines the surface; concrete adapters live in @skillctl/adapters.
+ * This allows future plugin registration without core depending on concrete pkgs.
+ */
+import type { AgentAdapter, SkillctlConfig } from './types.js';
+export declare function registerAdapter(adapter: AgentAdapter): void;
+export declare function getRegisteredAdapters(): AgentAdapter[];
+/**
+ * Filter by enabled in config.
+ */
+export declare function getEnabledRegisteredAdapters(config: SkillctlConfig): AgentAdapter[];
+//# sourceMappingURL=adapters.d.ts.map

package/dist/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI/D,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAK3D;AAED,wBAAgB,qBAAqB,IAAI,YAAY,EAAE,CAEtD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,cAAc,GAAG,YAAY,EAAE,CAEnF"}

package/dist/adapters.js

@@ -0,0 +1,21 @@
+const registeredAdapters = [];
+export function registerAdapter(adapter) {
+    // last wins on id conflict (simple)
+    const idx = registeredAdapters.findIndex((a) => a.id === adapter.id);
+    if (idx >= 0)
+        registeredAdapters[idx] = adapter;
+    else
+        registeredAdapters.push(adapter);
+}
+export function getRegisteredAdapters() {
+    return [...registeredAdapters];
+}
+/**
+ * Filter by enabled in config.
+ */
+export function getEnabledRegisteredAdapters(config) {
+    return registeredAdapters.filter((a) => config.agents?.[a.id] !== false);
+}
+// Note: the concrete first adapters (claude etc) auto-register on import of @skillctl/adapters
+// See adapters package for wiring + getEnabledAdapters (which may use this or its own).
+//# sourceMappingURL=adapters.js.map

package/dist/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAOA,MAAM,kBAAkB,GAAmB,EAAE,CAAC;AAE9C,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,oCAAoC;IACpC,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,GAAG,IAAI,CAAC;QAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;;QAC3C,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAsB;IACjE,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,+FAA+F;AAC/F,wFAAwF"}

package/dist/cache.d.ts

@@ -0,0 +1,34 @@
+export declare function getCacheDir(): string;
+export declare function getDownloadCacheDir(): string;
+export declare function ensureCacheDir(sub?: string): Promise<string>;
+export declare function cacheKeyFromIntegrity(integrity: string): string;
+/**
+ * Return path to cached extracted skill dir for this integrity, or null.
+ */
+export declare function getCachedSkill(integrity: string): Promise<string | null>;
+/**
+ * Store a materialized skill dir into content-addressable cache.
+ * Returns the cache path. Idempotent.
+ */
+export declare function putCachedSkill(integrity: string, srcDir: string): Promise<string>;
+/**
+ * Cache a raw download (e.g. tarball) by a content or source key (sha1/shasum or hash of url).
+ * key should be stable short hex.
+ */
+export declare function getCachedDownload(key: string): Promise<string | null>;
+export declare function putCachedDownload(key: string, srcFile: string): Promise<string>;
+/**
+ * Optional cleanup (for doctor --gc or manual).
+ */
+export declare function clearCache(olderThanMs?: number): Promise<number>;
+/**
+ * Fast-path stat signature check against a previous signature.
+ * Returns true if mtime/size/count match (no content drift likely).
+ * Caller can still do full integrity if needed for security.
+ */
+export declare function matchesStatSignature(dir: string, prev: {
+    mtime: number;
+    size: number;
+    count: number;
+}): Promise<boolean>;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAmBA,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAsB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlE;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAc9E;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWvF;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ3E;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrF;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBtE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9H"}

package/dist/cache.js

@@ -0,0 +1,134 @@
+import { cp, mkdir, stat, readdir, rm } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { getDirStatSignature } from './fs.js';
+/**
+ * Content-addressable cache for performance (PR12).
+ * Located at ~/.skillctl/cache/
+ * Keyed by integrity (sha256:<hex> -> strip prefix for dir name under cache/).
+ * Used to skip re-extract / reuse identical skill trees across adds/installs.
+ * Also supports raw download cache for tarballs keyed by their known hash/shasum.
+ *
+ * Integrates with registry fetch/materialize and fs integrity.
+ * Fast-path stat checks for drift before full re-hash.
+ */
+const CACHE_ROOT = join(homedir(), '.skillctl', 'cache');
+const DOWNLOAD_CACHE = join(CACHE_ROOT, 'downloads'); // for raw tarballs etc.
+export function getCacheDir() {
+    return CACHE_ROOT;
+}
+export function getDownloadCacheDir() {
+    return DOWNLOAD_CACHE;
+}
+export async function ensureCacheDir(sub) {
+    const d = sub ? join(CACHE_ROOT, sub) : CACHE_ROOT;
+    await mkdir(d, { recursive: true });
+    return d;
+}
+export function cacheKeyFromIntegrity(integrity) {
+    // e.g. 'sha256:abc123...' -> 'abc123...'
+    return integrity.replace(/^sha256:/i, '').toLowerCase();
+}
+/**
+ * Return path to cached extracted skill dir for this integrity, or null.
+ */
+export async function getCachedSkill(integrity) {
+    const key = cacheKeyFromIntegrity(integrity);
+    const p = join(CACHE_ROOT, key);
+    try {
+        const st = await stat(p);
+        if (st.isDirectory()) {
+            // quick sanity: has something
+            const ents = await readdir(p);
+            if (ents.length > 0)
+                return p;
+        }
+    }
+    catch {
+        // not present
+    }
+    return null;
+}
+/**
+ * Store a materialized skill dir into content-addressable cache.
+ * Returns the cache path. Idempotent.
+ */
+export async function putCachedSkill(integrity, srcDir) {
+    const key = cacheKeyFromIntegrity(integrity);
+    const dest = join(CACHE_ROOT, key);
+    await ensureCacheDir();
+    // if already there, optionally validate but for perf just return
+    try {
+        const st = await stat(dest);
+        if (st.isDirectory())
+            return dest;
+    }
+    catch { }
+    await cp(srcDir, dest, { recursive: true, force: true });
+    return dest;
+}
+/**
+ * Cache a raw download (e.g. tarball) by a content or source key (sha1/shasum or hash of url).
+ * key should be stable short hex.
+ */
+export async function getCachedDownload(key) {
+    await ensureCacheDir('downloads');
+    const p = join(DOWNLOAD_CACHE, key);
+    try {
+        const st = await stat(p);
+        if (st.isFile())
+            return p;
+    }
+    catch { }
+    return null;
+}
+export async function putCachedDownload(key, srcFile) {
+    await ensureCacheDir('downloads');
+    const dest = join(DOWNLOAD_CACHE, key);
+    await cp(srcFile, dest, { force: true });
+    return dest;
+}
+/**
+ * Optional cleanup (for doctor --gc or manual).
+ */
+export async function clearCache(olderThanMs) {
+    let removed = 0;
+    try {
+        const root = await readdir(CACHE_ROOT, { withFileTypes: true }).catch(() => []);
+        for (const e of root) {
+            const p = join(CACHE_ROOT, e.name);
+            if (olderThanMs) {
+                try {
+                    const s = await stat(p);
+                    if (Date.now() - s.mtimeMs > olderThanMs) {
+                        await rm(p, { recursive: true, force: true });
+                        removed++;
+                    }
+                }
+                catch { }
+            }
+            else {
+                await rm(p, { recursive: true, force: true }).catch(() => { });
+                removed++;
+            }
+        }
+    }
+    catch { }
+    return removed;
+}
+/**
+ * Fast-path stat signature check against a previous signature.
+ * Returns true if mtime/size/count match (no content drift likely).
+ * Caller can still do full integrity if needed for security.
+ */
+export async function matchesStatSignature(dir, prev) {
+    try {
+        const cur = await getDirStatSignature(dir); // reuse from fs, but to avoid cycle import here redef minimal? wait we'll import in use or duplicate helper
+        return cur.mtime === prev.mtime && cur.size === prev.size && cur.count === prev.count;
+    }
+    catch {
+        return false;
+    }
+}
+// Note: getDirStatSignature is in fs.ts; to avoid circular, we will call from places after or re-export.
+//# sourceMappingURL=cache.js.map

package/dist/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAE9C;;;;;;;;;GASG;AAEH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,wBAAwB;AAE9E,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACnD,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,yCAAyC;IACzC,OAAO,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,8BAA8B;YAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc;IACpE,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,cAAc,EAAE,CAAC;IACvB,iEAAiE;IACjE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IACjD,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAe;IAClE,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAoB;IACnD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;wBACzC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9C,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAoD;IAC1G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAE,4GAA4G;QACzJ,OAAO,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yGAAyG"}

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+import type { SkillctlConfig } from './types.js';
+export declare function loadConfig(customPath?: string): Promise<SkillctlConfig>;
+export declare function saveConfig(config: SkillctlConfig, customPath?: string): Promise<void>;
+export declare function getDefaultConfig(): SkillctlConfig;
+export declare function getConfigPath(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAqBjD,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAiB7E;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3F;AAED,wBAAgB,gBAAgB,IAAI,cAAc,CAEjD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/config.js

@@ -0,0 +1,53 @@
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const DEFAULT_STORE = join(homedir(), '.skillctl', 'skills');
+const CONFIG_DIR = join(homedir(), '.skillctl');
+const CONFIG_PATH = join(CONFIG_DIR, 'config.json');
+const DEFAULT_CONFIG = {
+    version: 1,
+    store: DEFAULT_STORE,
+    defaultMode: 'symlink',
+    agents: {
+        'claude-code': true,
+        cursor: true,
+        opencode: true,
+        codex: true,
+        'gemini-cli': true,
+    },
+    registries: [],
+    trustedSources: ['github:vercel-labs/*', 'skills.sh/*'],
+};
+export async function loadConfig(customPath) {
+    const path = customPath || CONFIG_PATH;
+    try {
+        const raw = await readFile(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        // merge with defaults for forward compat / missing keys
+        return {
+            ...DEFAULT_CONFIG,
+            ...parsed,
+            agents: { ...DEFAULT_CONFIG.agents, ...parsed.agents },
+            trustedSources: parsed.trustedSources ?? DEFAULT_CONFIG.trustedSources,
+            registries: parsed.registries ?? DEFAULT_CONFIG.registries,
+        };
+    }
+    catch {
+        // missing or invalid -> return defaults (do not auto-write unless save called)
+        return { ...DEFAULT_CONFIG };
+    }
+}
+export async function saveConfig(config, customPath) {
+    const path = customPath || CONFIG_PATH;
+    await mkdir(CONFIG_DIR, { recursive: true });
+    // simple write; PR2 would have atomic + proper-lockfile
+    const data = JSON.stringify(config, null, 2);
+    await writeFile(path, data + '\n', 'utf8');
+}
+export function getDefaultConfig() {
+    return { ...DEFAULT_CONFIG };
+}
+export function getConfigPath() {
+    return CONFIG_PATH;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEpD,MAAM,cAAc,GAAmB;IACrC,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,SAAS;IACtB,MAAM,EAAE;QACN,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,IAAI;KACnB;IACD,UAAU,EAAE,EAAE;IACd,cAAc,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC;CACxD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAmB;IAClD,MAAM,IAAI,GAAG,UAAU,IAAI,WAAW,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,wDAAwD;QACxD,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,MAAM;YACT,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;YACtD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,cAAc;YACtE,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU;SACzC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAsB,EAAE,UAAmB;IAC1E,MAAM,IAAI,GAAG,UAAU,IAAI,WAAW,CAAC;IACvC,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,wDAAwD;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/fs.d.ts

@@ -0,0 +1,32 @@
+import type { LinkMode } from './types.js';
+/**
+ * FS utilities (PR2 scope): atomic writes, dir hashing (fast mtime+size path + full sha),
+ * cross platform notes. Minimal impl; expanded in later PRs (proper-lockfile etc).
+ */
+export declare function ensureDir(dir: string): Promise<void>;
+/**
+ * Atomic write: write to temp then rename.
+ */
+export declare function writeFileAtomic(filePath: string, data: string | Buffer): Promise<void>;
+/**
+ * Compute sha256 of a file (for single files).
+ */
+export declare function computeFileHash(filePath: string): Promise<string>;
+/**
+ * Recursive dir hash for skill canonical dir.
+ * PR12 Performance: callers use getDirStatSignature + stored integrity (from lock/cache)
+ * to fast-skip full re-hash when mtime/size/count unchanged (drift detection).
+ * Only re-compute SHA on add --force or detected change. Cache uses integrity key.
+ * Always full content hash for correctness of integrity value.
+ */
+export declare function computeDirIntegrity(dir: string): Promise<string>;
+/**
+ * Fast stat based check (used for drift detection in doctor etc).
+ */
+export declare function getDirStatSignature(dir: string): Promise<{
+    mtime: number;
+    size: number;
+    count: number;
+}>;
+export declare function getDefaultLinkMode(): LinkMode;
+//# sourceMappingURL=fs.d.ts.map

package/dist/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;GAGG;AAEH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5F;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvE;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBtE;AAeD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAU9G;AAkBD,wBAAgB,kBAAkB,IAAI,QAAQ,CAE7C"}

package/dist/fs.js

@@ -0,0 +1,104 @@
+import { readFile, writeFile, mkdir, rename, stat, readdir } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { createHash } from 'node:crypto';
+/**
+ * FS utilities (PR2 scope): atomic writes, dir hashing (fast mtime+size path + full sha),
+ * cross platform notes. Minimal impl; expanded in later PRs (proper-lockfile etc).
+ */
+export async function ensureDir(dir) {
+    await mkdir(dir, { recursive: true });
+}
+/**
+ * Atomic write: write to temp then rename.
+ */
+export async function writeFileAtomic(filePath, data) {
+    await ensureDir(dirname(filePath));
+    const tmp = `${filePath}.tmp-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    await writeFile(tmp, data);
+    await rename(tmp, filePath);
+}
+/**
+ * Compute sha256 of a file (for single files).
+ */
+export async function computeFileHash(filePath) {
+    const buf = await readFile(filePath);
+    const hash = createHash('sha256').update(buf).digest('hex');
+    return `sha256:${hash}`;
+}
+/**
+ * Recursive dir hash for skill canonical dir.
+ * PR12 Performance: callers use getDirStatSignature + stored integrity (from lock/cache)
+ * to fast-skip full re-hash when mtime/size/count unchanged (drift detection).
+ * Only re-compute SHA on add --force or detected change. Cache uses integrity key.
+ * Always full content hash for correctness of integrity value.
+ */
+export async function computeDirIntegrity(dir) {
+    const files = [];
+    await walk(dir, files);
+    files.sort(); // deterministic
+    const hash = createHash('sha256');
+    for (const f of files) {
+        try {
+            const buf = await readFile(f);
+            hash.update(f.slice(dir.length)); // relative
+            hash.update('\0');
+            hash.update(buf);
+            hash.update('\0');
+        }
+        catch {
+            // ignore unreadable
+        }
+    }
+    return `sha256:${hash.digest('hex')}`;
+}
+async function walk(dir, out) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const e of entries) {
+        if (e.name === '.git' || e.name === 'node_modules')
+            continue;
+        const p = join(dir, e.name);
+        if (e.isDirectory()) {
+            await walk(p, out);
+        }
+        else if (e.isFile()) {
+            out.push(p);
+        }
+    }
+}
+/**
+ * Fast stat based check (used for drift detection in doctor etc).
+ */
+export async function getDirStatSignature(dir) {
+    let size = 0;
+    let count = 0;
+    let latestMtime = 0;
+    await walkStats(dir, (s) => {
+        size += s.size;
+        count += 1;
+        if (s.mtimeMs > latestMtime)
+            latestMtime = s.mtimeMs;
+    });
+    return { mtime: latestMtime, size, count };
+}
+async function walkStats(dir, cb) {
+    const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+    for (const e of entries) {
+        if (e.name === '.git')
+            continue;
+        const p = join(dir, e.name);
+        try {
+            const s = await stat(p);
+            if (s.isDirectory()) {
+                await walkStats(p, cb);
+            }
+            else if (s.isFile()) {
+                cb({ size: s.size, mtimeMs: s.mtimeMs });
+            }
+        }
+        catch { }
+    }
+}
+export function getDefaultLinkMode() {
+    return process.platform === 'win32' ? 'junction' : 'symlink';
+}
+//# sourceMappingURL=fs.js.map

package/dist/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;GAGG;AAEH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAqB;IAC3E,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,UAAU,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,GAAa;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;QACf,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,CAAC,OAAO,GAAG,WAAW;YAAE,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,EAAkD;IACtF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,MAAM,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './config.js';
+export * from './fs.js';
+export * from './adapters.js';
+export * from './cache.js';
+export * from './names.js';
+export * from './paths.js';
+export * from './operations.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './config.js';
+export * from './fs.js';
+export * from './adapters.js';
+export * from './cache.js';
+export * from './names.js';
+export * from './paths.js';
+export * from './operations.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/dist/names.d.ts

@@ -0,0 +1,3 @@
+/** Canonical skill name: lowercase, hyphen normalized (per design). */
+export declare function canonicalizeName(raw: string): string;
+//# sourceMappingURL=names.d.ts.map

package/dist/names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../src/names.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/names.js

@@ -0,0 +1,5 @@
+/** Canonical skill name: lowercase, hyphen normalized (per design). */
+export function canonicalizeName(raw) {
+    return raw.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+}
+//# sourceMappingURL=names.js.map

package/dist/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../src/names.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC"}

package/dist/operations.d.ts

@@ -0,0 +1,14 @@
+import type { LockfileEntry, SkillLockfile } from './types.js';
+export interface InstallResult {
+    installed: number;
+    skipped: number;
+    lock: SkillLockfile;
+}
+export declare function needsInstall(entry: LockfileEntry): Promise<boolean>;
+export declare function verifyLockIntegrity(lock: SkillLockfile): Promise<string[]>;
+export declare function lockToSkillTargets(lock: SkillLockfile): Array<{
+    name: string;
+    canonicalPath: string;
+}>;
+export declare function purgeCanonical(name: string): Promise<void>;
+//# sourceMappingURL=operations.d.ts.map

package/dist/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../src/operations.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI/D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAYzE;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAchF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAEtG;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhE"}

package/dist/operations.js

@@ -0,0 +1,46 @@
+import { stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { rm } from 'node:fs/promises';
+import { computeDirIntegrity } from './fs.js';
+import { canonicalizeName } from './names.js';
+export async function needsInstall(entry) {
+    try {
+        await stat(entry.canonicalPath);
+    }
+    catch {
+        return true;
+    }
+    try {
+        const integrity = await computeDirIntegrity(entry.canonicalPath);
+        return integrity !== entry.integrity;
+    }
+    catch {
+        return true;
+    }
+}
+export async function verifyLockIntegrity(lock) {
+    const errors = [];
+    for (const [name, entry] of Object.entries(lock.skills)) {
+        try {
+            await stat(entry.canonicalPath);
+            const integrity = await computeDirIntegrity(entry.canonicalPath);
+            if (integrity !== entry.integrity) {
+                errors.push(`${name}: integrity mismatch (expected ${entry.integrity.slice(0, 20)}...)`);
+            }
+        }
+        catch {
+            errors.push(`${name}: canonical path missing (${entry.canonicalPath})`);
+        }
+    }
+    return errors;
+}
+export function lockToSkillTargets(lock) {
+    return Object.values(lock.skills).map((e) => ({ name: e.name, canonicalPath: e.canonicalPath }));
+}
+export async function purgeCanonical(name) {
+    const canonicalName = canonicalizeName(name);
+    const p = join(homedir(), '.skillctl', 'skills', canonicalName);
+    await rm(p, { recursive: true, force: true }).catch(() => { });
+}
+//# sourceMappingURL=operations.js.map

package/dist/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../src/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAQ9C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAoB;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjE,OAAO,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAmB;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,6BAA6B,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,3 @@
+/** Resolve adapter target base + skill name (project-relative or absolute global). */
+export declare function resolveAdapterTarget(basePath: string, skillName: string, cwd?: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAgB,GAAG,MAAM,CAGrG"}

package/dist/paths.js

@@ -0,0 +1,7 @@
+import { join } from 'node:path';
+/** Resolve adapter target base + skill name (project-relative or absolute global). */
+export function resolveAdapterTarget(basePath, skillName, cwd = process.cwd()) {
+    const resolvedBase = basePath.startsWith('.') ? join(cwd, basePath) : basePath;
+    return join(resolvedBase, skillName);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,SAAiB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC3F,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/E,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Core types for skillctl.
+ * Defines shared interfaces used across manifest, lockfile, registry, etc.
+ * Follows patterns from design doc (PR2).
+ */
+export interface SkillRef {
+    name: string;
+    version?: string;
+    source: string;
+}
+export interface ResolvedSkill {
+    name: string;
+    canonicalPath: string;
+    integrity: string;
+    resolvedSource: string;
+    fetchedAt: string;
+    provenance?: Provenance;
+}
+export interface Provenance {
+    type: 'github' | 'npm' | 'local' | 'skills.sh' | 'other';
+    commit?: string;
+    tarballHash?: string;
+    subpath?: string;
+    migratedFrom?: 'npx' | 'python-skillctl';
+    originalHash?: string;
+    originalSource?: string;
+    signature?: string;
+}
+export interface AgentAdapter {
+    readonly id: string;
+    readonly name: string;
+    readonly projectPaths: string[];
+    readonly globalPaths: string[];
+    detect(): Promise<boolean>;
+    ensureTarget(skillName: string, targetPath: string, canonical: string, mode: 'symlink' | 'copy' | 'junction'): Promise<void>;
+    removeTarget(skillName: string, targetPath: string): Promise<void>;
+}
+export interface RegistrySource {
+    readonly id: string;
+    match(spec: string): boolean;
+    resolve(spec: string, options?: {
+        ref?: string;
+    }): Promise<ResolvedSource>;
+    fetch(resolved: ResolvedSource, dest: string): Promise<{
+        integrity: string;
+    }>;
+}
+export interface ResolvedSource {
+    name: string;
+    resolved: string;
+    sourceType: 'github' | 'npm' | 'local' | 'skills.sh';
+    sourceId: string;
+    originalSpec: string;
+    tarballUrl?: string;
+    tarballHash?: string;
+    gitUrl?: string;
+    ref?: string;
+    subpath?: string;
+    localPath?: string;
+}
+export interface SkillManifest {
+    name?: string;
+    version?: string;
+    agentSkills?: {
+        dependencies?: Record<string, string>;
+        devDependencies?: Record<string, string>;
+    };
+}
+export interface LockfileEntry {
+    specifier: string;
+    resolved: string;
+    integrity: string;
+    name: string;
+    canonicalPath: string;
+    fetchedAt: string;
+    provenance: Provenance;
+}
+export interface SkillLockfile {
+    lockfileVersion: '1.0';
+    agents?: string[];
+    skills: Record<string, LockfileEntry>;
+    metadata?: {
+        migratedAt?: string;
+        toolVersion?: string;
+    };
+}
+export interface SkillctlConfig {
+    version: 1;
+    store: string;
+    defaultMode: 'symlink' | 'copy' | 'junction';
+    agents: Record<string, boolean>;
+    registries?: string[];
+    trustedSources?: string[];
+    experimental?: {
+        plugins?: boolean;
+    };
+    plugins?: Array<{
+        name: string;
+        path: string;
+        enabled: boolean;
+    }>;
+}
+export type LinkMode = 'symlink' | 'copy' | 'junction';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAElB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7H,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3E,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,WAAW,CAAC;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC1C,CAAC;CACH;AAGD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,KAAK,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAGD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC"}

package/dist/types.js

@@ -0,0 +1,10 @@
+/**
+ * Core types for skillctl.
+ * Defines shared interfaces used across manifest, lockfile, registry, etc.
+ * Follows patterns from design doc (PR2).
+ */
+export {};
+// Collision policy note: within a scope (project/global), names are unique.
+// Project manifest takes precedence over global for resolution in project context.
+// On add conflict: warn, use first-seen or scoped name; record in lock.
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;AA+GH,4EAA4E;AAC5E,mFAAmF;AACnF,wEAAwE"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@skillctl/core",
+  "version": "0.2.0",
+  "description": "Core types, config, and FS utilities for skillctl",
+  "license": "MIT",
+  "author": "skillctl contributors",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "rimraf": "^5.0.7",
+    "typescript": "^5.6.3"
+  },
+  "engines": {
+    "node": ">=22.13"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/xFurti/skillctl.git",
+    "directory": "packages/core"
+  },
+  "keywords": [
+    "core",
+    "types",
+    "config",
+    "agent-skills"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "tsc -b --watch",
+    "clean": "rimraf dist",
+    "lint": "tsc --noEmit",
+    "test": "echo \"no tests yet for core\" && exit 0"
+  }
+}