@skillfm/local 2.3.0 → 2.5.0

package/dist/skill-installer/errors.js

@@ -0,0 +1,42 @@
+// skill-installer/errors.ts
+// Maps server SKILL.BUNDLE.* codes + network errors to SkillInstallErrorCode.
+// Directly re-exports + extends mapServerErrorToInstallError from contracts.
+import { mapServerErrorToInstallError, SKILL_INSTALL_ERROR_CODES, } from '@skillfm/contracts/skill-distribution';
+export { mapServerErrorToInstallError };
+/**
+ * Classify a caught network/fetch error into a SkillInstallErrorCode.
+ * Network-layer errors (ENETUNREACH, ECONNRESET, ETIMEDOUT, AbortError, fetch failed)
+ * all map to NETWORK.UNREACHABLE.
+ */
+export function classifyNetworkError(err) {
+    const msg = (err instanceof Error ? err.message : String(err)).toLowerCase();
+    if (msg.includes('enetunreach') ||
+        msg.includes('econnreset') ||
+        msg.includes('econnrefused') ||
+        msg.includes('enotfound') ||
+        msg.includes('etimedout') ||
+        msg.includes('abort') ||
+        msg.includes('fetch failed') ||
+        msg.includes('network') ||
+        msg.includes('timeout')) {
+        return SKILL_INSTALL_ERROR_CODES.NETWORK_UNREACHABLE;
+    }
+    return SKILL_INSTALL_ERROR_CODES.INTERNAL;
+}
+/** Hints shown to the agent for each error code */
+export const INSTALL_ERROR_HINTS = {
+    [SKILL_INSTALL_ERROR_CODES.NETWORK_UNREACHABLE]: '网络异常，待会儿再试',
+    [SKILL_INSTALL_ERROR_CODES.AGENT_NOT_BOUND]: "先跑 `skillfm-local activate`",
+    [SKILL_INSTALL_ERROR_CODES.SKILL_NOT_FOUND]: 'slug 不存在，是不是拼错了',
+    [SKILL_INSTALL_ERROR_CODES.SKILL_ACCESS_DENIED]: '你的订阅不允许装这个 skill',
+    [SKILL_INSTALL_ERROR_CODES.SKILL_NOT_READY]: 'skill 暂未发布，稍后重试',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_CHECKSUM_MISMATCH]: '下载损坏，已自动重试 1 次',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_EXTRACT_FAILED]: '解压失败，bundle 可能损坏',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_NPM_CI_FAILED]: 'skill 依赖装不上',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_MISSING_SERVER_JS]: 'bundle 损坏，请联系 SkillFM',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_DISK_FULL]: '磁盘空间不足',
+    [SKILL_INSTALL_ERROR_CODES.BUNDLE_LOCK_BUSY]: '同一 skill 正在安装中，请稍候',
+    [SKILL_INSTALL_ERROR_CODES.INPUT_BAD_SLUG]: 'slug 格式无效，应为小写字母/数字/短横线，2-64 字符',
+    [SKILL_INSTALL_ERROR_CODES.INTERNAL]: '内部错误，请重试',
+};
+//# sourceMappingURL=errors.js.map

package/dist/skill-installer/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/skill-installer/errors.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,8EAA8E;AAC9E,6EAA6E;AAE7E,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAG/C,OAAO,EAAE,4BAA4B,EAAE,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,GAAG,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,IACE,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;QACD,OAAO,yBAAyB,CAAC,mBAAmB,CAAC;IACvD,CAAC;IACD,OAAO,yBAAyB,CAAC,QAAQ,CAAC;AAC5C,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAmD;IACjF,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,EAAE,YAAY;IAC7D,CAAC,yBAAyB,CAAC,eAAe,CAAC,EAAE,6BAA6B;IAC1E,CAAC,yBAAyB,CAAC,eAAe,CAAC,EAAE,iBAAiB;IAC9D,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,EAAE,kBAAkB;IACnE,CAAC,yBAAyB,CAAC,eAAe,CAAC,EAAE,iBAAiB;IAC9D,CAAC,yBAAyB,CAAC,wBAAwB,CAAC,EAAE,gBAAgB;IACtE,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,EAAE,kBAAkB;IACrE,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,EAAE,aAAa;IAC/D,CAAC,yBAAyB,CAAC,wBAAwB,CAAC,EAAE,uBAAuB;IAC7E,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,EAAE,QAAQ;IACtD,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,EAAE,oBAAoB;IAClE,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,iCAAiC;IAC7E,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,UAAU;CACjD,CAAC"}

package/dist/skill-installer/index.d.ts

@@ -0,0 +1,20 @@
+import type { SkillInstallResult } from '@skillfm/contracts/skill-distribution';
+export interface InstallSkillOptions {
+    slug: string;
+    version?: string;
+    /** Override api base url (defaults to config.apiBaseUrl) */
+    apiBaseUrl?: string;
+    /** Override agent token (defaults to config.brainKey) */
+    agentToken?: string;
+    /** Override skills root directory (defaults to ~/.skillfm/skills/) — useful in tests */
+    skillsRoot?: string;
+}
+/**
+ * Install a SkillFM official skill bundle.
+ * Implements B1-B12 from SKILL-INSTALL-CALL-SEQUENCE.md §2.2.
+ *
+ * B12 (cleanup) is guaranteed via try/finally.
+ * Returns SkillInstallResult.
+ */
+export declare function installSkill(opts: InstallSkillOptions): Promise<SkillInstallResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/skill-installer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skill-installer/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAShF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8KzF"}

package/dist/skill-installer/index.js

@@ -0,0 +1,193 @@
+// skill-installer/index.ts
+// installSkill() — main orchestration function.
+// Implements CALL-SEQUENCE §2.2 steps B1-B12.
+import { existsSync, symlinkSync, rmSync, cpSync } from 'node:fs';
+import { SKILL_SLUG_REGEX, SKILL_INSTALL_ERROR_CODES, } from '@skillfm/contracts/skill-distribution';
+import { acquireLock } from './lockfile.js';
+import { fetchBundle, verifyChecksum, deleteTmpFile } from './bundle-fetcher.js';
+import { extractBundle } from './tar-extractor.js';
+import { runNpmCi, verifyServerJs } from './npm-installer.js';
+import { buildInstallPaths, DEFAULT_SKILLS_ROOT } from './paths.js';
+import { INSTALL_ERROR_HINTS } from './errors.js';
+/**
+ * Install a SkillFM official skill bundle.
+ * Implements B1-B12 from SKILL-INSTALL-CALL-SEQUENCE.md §2.2.
+ *
+ * B12 (cleanup) is guaranteed via try/finally.
+ * Returns SkillInstallResult.
+ */
+export async function installSkill(opts) {
+    const { slug, version, skillsRoot } = opts;
+    // B1: Validate slug
+    if (!SKILL_SLUG_REGEX.test(slug)) {
+        return makeError(SKILL_INSTALL_ERROR_CODES.INPUT_BAD_SLUG, `Invalid slug "${slug}" — must match /^[a-z0-9-]{2,64}$/`);
+    }
+    // B2: Read config for agent_token + api_base_url
+    const { config } = await import('../mcp-stdio/config.js');
+    const apiBaseUrl = opts.apiBaseUrl ?? config.apiBaseUrl;
+    const agentToken = opts.agentToken ?? config.brainKey;
+    if (!agentToken) {
+        return makeError(SKILL_INSTALL_ERROR_CODES.AGENT_NOT_BOUND, 'No agent_token found. Run `skillfm-local activate` first.');
+    }
+    const resolvedSkillsRoot = skillsRoot ?? DEFAULT_SKILLS_ROOT;
+    // We need a preliminary paths object to build the lock path
+    // (version is unknown until after fetch, but lock path only needs slug)
+    const { join } = await import('node:path');
+    const lockPath = join(resolvedSkillsRoot, '.locks', `${slug}.lock`);
+    // B3: Acquire lock
+    let releaseLock = null;
+    let tmpPath = null;
+    try {
+        try {
+            releaseLock = await acquireLock(lockPath);
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === 'BUNDLE.LOCK_BUSY') {
+                return makeError(SKILL_INSTALL_ERROR_CODES.BUNDLE_LOCK_BUSY, `Another install of "${slug}" is in progress. Please wait.`);
+            }
+            throw err;
+        }
+        // B4+B5: Fetch bundle + stream to tmp
+        let fetchResult;
+        try {
+            // Build a preliminary tmpPath (version placeholder)
+            const tmpPaths = buildInstallPaths(slug, version ?? 'tmp', resolvedSkillsRoot);
+            tmpPath = tmpPaths.tmpTarball;
+            fetchResult = await fetchBundle({
+                apiBaseUrl,
+                agentToken,
+                slug,
+                version,
+                tmpPath,
+            });
+            tmpPath = fetchResult.tmpPath;
+        }
+        catch (err) {
+            const e = err;
+            return makeError(e.installCode ?? SKILL_INSTALL_ERROR_CODES.INTERNAL, e.message, e.installDetails);
+        }
+        const { version: resolvedVersion, checksumSha256 } = fetchResult;
+        // B6: Verify sha256 (auto-retry once on mismatch)
+        let checksumOk = await verifyChecksum(tmpPath, checksumSha256);
+        if (!checksumOk) {
+            // Retry once: re-fetch
+            deleteTmpFile(tmpPath);
+            try {
+                const retryPaths = buildInstallPaths(slug, resolvedVersion, resolvedSkillsRoot);
+                tmpPath = retryPaths.tmpTarball;
+                const retryResult = await fetchBundle({
+                    apiBaseUrl,
+                    agentToken,
+                    slug,
+                    version: resolvedVersion,
+                    tmpPath,
+                });
+                tmpPath = retryResult.tmpPath;
+                checksumOk = await verifyChecksum(tmpPath, retryResult.checksumSha256);
+            }
+            catch (retryErr) {
+                const e = retryErr;
+                return makeError(e.installCode ?? SKILL_INSTALL_ERROR_CODES.INTERNAL, e.message);
+            }
+            if (!checksumOk) {
+                return makeError(SKILL_INSTALL_ERROR_CODES.BUNDLE_CHECKSUM_MISMATCH, `Bundle checksum mismatch for "${slug}@${resolvedVersion}" after retry`);
+            }
+        }
+        // Build final paths with resolved version
+        const paths = buildInstallPaths(slug, resolvedVersion, resolvedSkillsRoot);
+        const { installDir, versionlessLink } = paths;
+        // B7+B8: Extract tarball + validate required files
+        try {
+            await extractBundle({ tmpPath, installDir });
+        }
+        catch (err) {
+            const e = err;
+            return makeError(e.installCode ?? SKILL_INSTALL_ERROR_CODES.BUNDLE_EXTRACT_FAILED, e.message);
+        }
+        // B9: npm ci
+        try {
+            await runNpmCi(installDir);
+        }
+        catch (err) {
+            const e = err;
+            return makeError(e.installCode ?? SKILL_INSTALL_ERROR_CODES.BUNDLE_NPM_CI_FAILED, e.message, e.details);
+        }
+        // B10: Verify runtime/server.js still exists
+        try {
+            verifyServerJs(installDir);
+        }
+        catch (err) {
+            const e = err;
+            return makeError(e.installCode ?? SKILL_INSTALL_ERROR_CODES.BUNDLE_MISSING_SERVER_JS, e.message);
+        }
+        // B11: Create/update versionless symlink
+        // macOS/Linux: symlink; Windows fallback: copy
+        try {
+            await updateVersionlessLink(versionlessLink, installDir);
+        }
+        catch (linkErr) {
+            // Not fatal — log a warning but don't fail install
+            process.stderr.write(`[skill-installer] warn: failed to create versionless link ${versionlessLink}: ${linkErr.message}\n`);
+        }
+        return {
+            ok: true,
+            slug,
+            version: resolvedVersion,
+            install_dir: installDir,
+            hint_for_agent: 'skill 已就绪。下一步 run-skill 起 daemon',
+        };
+    }
+    finally {
+        // B12: Cleanup — always run
+        if (tmpPath)
+            deleteTmpFile(tmpPath);
+        if (releaseLock)
+            releaseLock();
+    }
+}
+// ============================================================================
+// Helpers
+// ============================================================================
+function makeError(code, message, details) {
+    return {
+        ok: false,
+        error: code,
+        message,
+        details,
+        hint_for_agent: INSTALL_ERROR_HINTS[code],
+    };
+}
+/**
+ * Update the versionless symlink <slug> → <slug>@<version>.
+ * On Windows (no symlink privilege), fall back to recursive copy.
+ */
+async function updateVersionlessLink(versionlessLink, installDir) {
+    // Remove existing link/dir if present
+    if (existsSync(versionlessLink)) {
+        try {
+            const { lstatSync } = await import('node:fs');
+            const stat = lstatSync(versionlessLink);
+            if (stat.isSymbolicLink() || stat.isDirectory()) {
+                rmSync(versionlessLink, { recursive: true, force: true });
+            }
+        }
+        catch {
+            // Ignore
+        }
+    }
+    // Try symlink first
+    if (process.platform !== 'win32') {
+        symlinkSync(installDir, versionlessLink);
+        return;
+    }
+    // Windows fallback: copy
+    try {
+        symlinkSync(installDir, versionlessLink);
+    }
+    catch {
+        // Symlink failed (no admin) — use recursive copy
+        cpSync(installDir, versionlessLink, { recursive: true });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/skill-installer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skill-installer/index.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,gDAAgD;AAChD,8CAA8C;AAE9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EACL,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAclD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE3C,oBAAoB;IACpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CACd,yBAAyB,CAAC,cAAc,EACxC,iBAAiB,IAAI,oCAAoC,CAC1D,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC;IAEtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CACd,yBAAyB,CAAC,eAAe,EACzC,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,UAAU,IAAI,mBAAmB,CAAC;IAE7D,4DAA4D;IAC5D,wEAAwE;IACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAEpE,mBAAmB;IACnB,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAElC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAClC,OAAO,SAAS,CACd,yBAAyB,CAAC,gBAAgB,EAC1C,uBAAuB,IAAI,gCAAgC,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,sCAAsC;QACtC,IAAI,WAAW,CAAC;QAChB,IAAI,CAAC;YACH,oDAAoD;YACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC/E,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;YAE9B,WAAW,GAAG,MAAM,WAAW,CAAC;gBAC9B,UAAU;gBACV,UAAU;gBACV,IAAI;gBACJ,OAAO;gBACP,OAAO;aACR,CAAC,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QAChC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAGT,CAAC;YACF,OAAO,SAAS,CACd,CAAC,CAAC,WAAW,IAAI,yBAAyB,CAAC,QAAQ,EACnD,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,cAAc,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEjE,kDAAkD;QAClD,IAAI,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,uBAAuB;YACvB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;gBAChF,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC;gBAChC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC;oBACpC,UAAU;oBACV,UAAU;oBACV,IAAI;oBACJ,OAAO,EAAE,eAAe;oBACxB,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;gBAC9B,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,QAAiB,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,QAA2D,CAAC;gBACtE,OAAO,SAAS,CACd,CAAC,CAAC,WAAW,IAAI,yBAAyB,CAAC,QAAQ,EACnD,CAAC,CAAC,OAAO,CACV,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,SAAS,CACd,yBAAyB,CAAC,wBAAwB,EAClD,iCAAiC,IAAI,IAAI,eAAe,eAAe,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAC3E,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;QAE9C,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAsD,CAAC;YACjE,OAAO,SAAS,CACd,CAAC,CAAC,WAAW,IAAI,yBAAyB,CAAC,qBAAqB,EAChE,CAAC,CAAC,OAAO,CACV,CAAC;QACJ,CAAC;QAED,aAAa;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAGT,CAAC;YACF,OAAO,SAAS,CACd,CAAC,CAAC,WAAW,IAAI,yBAAyB,CAAC,oBAAoB,EAC/D,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,OAAO,CACV,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAsD,CAAC;YACjE,OAAO,SAAS,CACd,CAAC,CAAC,WAAW,IAAI,yBAAyB,CAAC,wBAAwB,EACnE,CAAC,CAAC,OAAO,CACV,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,+CAA+C;QAC/C,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,mDAAmD;YACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6DAA6D,eAAe,KAAM,OAAiB,CAAC,OAAO,IAAI,CAChH,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,kCAAkC;SACnD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,4BAA4B;QAC5B,IAAI,OAAO;YAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,WAAW;YAAE,WAAW,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,SAAS,CAChB,IAA2B,EAC3B,OAAe,EACf,OAAiC;IAEjC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,IAAI;QACX,OAAO;QACP,OAAO;QACP,cAAc,EAAE,mBAAmB,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,eAAuB,EACvB,UAAkB;IAElB,sCAAsC;IACtC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAChD,MAAM,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC;QACH,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;QACjD,MAAM,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/skill-installer/lockfile.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Acquire a lock for the given lockFile path.
+ * Returns a release function.
+ * Throws with code BUNDLE.LOCK_BUSY if lock is not acquired within timeout.
+ */
+export declare function acquireLock(lockPath: string): Promise<() => void>;
+export declare function releaseLock(lockPath: string): void;
+//# sourceMappingURL=lockfile.d.ts.map

package/dist/skill-installer/lockfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../../src/skill-installer/lockfile.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CA0BvE;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQlD"}

package/dist/skill-installer/lockfile.js

@@ -0,0 +1,52 @@
+// skill-installer/lockfile.ts
+// Provides mutex locking via mkdir atomicity (POSIX mkdir is atomic).
+// ~/.skillfm/skills/.locks/<slug>.lock is a directory (not a file).
+// mkdir succeeds only for the first caller; subsequent callers get EEXIST → busy.
+import { mkdirSync, rmdirSync, existsSync } from 'node:fs';
+import { dirname } from 'node:path';
+const LOCK_TIMEOUT_MS = 2 * 60 * 1000; // 2 minutes
+const POLL_INTERVAL_MS = 500;
+/**
+ * Acquire a lock for the given lockFile path.
+ * Returns a release function.
+ * Throws with code BUNDLE.LOCK_BUSY if lock is not acquired within timeout.
+ */
+export async function acquireLock(lockPath) {
+    // Ensure parent dir exists
+    mkdirSync(dirname(lockPath), { recursive: true });
+    const deadline = Date.now() + LOCK_TIMEOUT_MS;
+    while (Date.now() < deadline) {
+        try {
+            // mkdir is atomic on POSIX — only one caller can succeed
+            mkdirSync(lockPath, { recursive: false });
+            // Acquired
+            return () => releaseLock(lockPath);
+        }
+        catch (err) {
+            const e = err;
+            if (e.code !== 'EEXIST') {
+                // Unexpected error
+                throw err;
+            }
+            // Lock is held — wait and retry
+            await sleep(POLL_INTERVAL_MS);
+        }
+    }
+    const err = new Error(`lock busy for more than ${LOCK_TIMEOUT_MS / 1000}s: ${lockPath}`);
+    err.code = 'BUNDLE.LOCK_BUSY';
+    throw err;
+}
+export function releaseLock(lockPath) {
+    try {
+        if (existsSync(lockPath)) {
+            rmdirSync(lockPath);
+        }
+    }
+    catch {
+        // Ignore errors during cleanup — lock may have been force-released
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=lockfile.js.map

package/dist/skill-installer/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/skill-installer/lockfile.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,sEAAsE;AACtE,oEAAoE;AACpE,kFAAkF;AAElF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACnD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,2BAA2B;IAC3B,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,yDAAyD;YACzD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,WAAW;YACX,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,mBAAmB;gBACnB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,gCAAgC;YAChC,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,2BAA2B,eAAe,GAAG,IAAI,MAAM,QAAQ,EAAE,CAAC,CAAC;IACxF,GAA6B,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACzD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/skill-installer/npm-installer.d.ts

@@ -0,0 +1,16 @@
+export interface NpmInstallResult {
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+}
+/**
+ * Run `npm ci --omit=dev` in installDir.
+ * Returns exitCode + collected stderr on failure.
+ * Throws with installCode = BUNDLE.NPM_CI_FAILED on non-zero exit or timeout.
+ */
+export declare function runNpmCi(installDir: string): Promise<NpmInstallResult>;
+/**
+ * Verify that runtime/server.js still exists after npm ci.
+ */
+export declare function verifyServerJs(installDir: string): void;
+//# sourceMappingURL=npm-installer.d.ts.map

package/dist/skill-installer/npm-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-installer.d.ts","sourceRoot":"","sources":["../../src/skill-installer/npm-installer.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiE5E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CASvD"}

package/dist/skill-installer/npm-installer.js

@@ -0,0 +1,83 @@
+// skill-installer/npm-installer.ts
+// Runs `npm ci --omit=dev` in the install directory with a configurable timeout.
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { SKILL_INSTALL_ERROR_CODES } from '@skillfm/contracts/skill-distribution';
+/** Default npm ci timeout in ms. Override with SKILLFM_NPM_CI_TIMEOUT_MS env. */
+const DEFAULT_NPM_CI_TIMEOUT_MS = 180_000;
+function getNpmCiTimeoutMs() {
+    const envVal = process.env.SKILLFM_NPM_CI_TIMEOUT_MS;
+    if (envVal) {
+        const parsed = parseInt(envVal, 10);
+        if (!isNaN(parsed) && parsed > 0)
+            return parsed;
+    }
+    return DEFAULT_NPM_CI_TIMEOUT_MS;
+}
+/**
+ * Run `npm ci --omit=dev` in installDir.
+ * Returns exitCode + collected stderr on failure.
+ * Throws with installCode = BUNDLE.NPM_CI_FAILED on non-zero exit or timeout.
+ */
+export async function runNpmCi(installDir) {
+    const timeoutMs = getNpmCiTimeoutMs();
+    return new Promise((resolve, reject) => {
+        const stderrChunks = [];
+        const stdoutChunks = [];
+        const child = spawn('npm', ['ci', '--omit=dev'], {
+            cwd: installDir,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: {
+                ...process.env,
+                // Reduce npm output noise
+                npm_config_loglevel: 'warn',
+            },
+        });
+        child.stdout.on('data', (chunk) => stdoutChunks.push(chunk.toString()));
+        child.stderr.on('data', (chunk) => stderrChunks.push(chunk.toString()));
+        const timer = setTimeout(() => {
+            child.kill('SIGTERM');
+            const timeoutErr = new Error(`npm ci timed out after ${timeoutMs / 1000}s in ${installDir}. ` +
+                `Consider setting SKILLFM_NPM_CI_TIMEOUT_MS to a higher value.`);
+            timeoutErr.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_NPM_CI_FAILED;
+            reject(timeoutErr);
+        }, timeoutMs);
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            const exitCode = code ?? 1;
+            const stderr = stderrChunks.join('');
+            const stdout = stdoutChunks.join('');
+            if (exitCode !== 0) {
+                const failErr = new Error(`npm ci failed with exit code ${exitCode}: ${stderr.slice(0, 500)}`);
+                failErr.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_NPM_CI_FAILED;
+                failErr.details = {
+                    exit_code: exitCode,
+                    stderr: stderr.slice(0, 1000),
+                    install_dir: installDir,
+                };
+                reject(failErr);
+                return;
+            }
+            resolve({ exitCode, stderr, stdout });
+        });
+        child.on('error', (spawnErr) => {
+            clearTimeout(timer);
+            const err = new Error(`Failed to spawn npm: ${spawnErr.message}`);
+            err.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_NPM_CI_FAILED;
+            reject(err);
+        });
+    });
+}
+/**
+ * Verify that runtime/server.js still exists after npm ci.
+ */
+export function verifyServerJs(installDir) {
+    const serverJs = join(installDir, 'runtime', 'server.js');
+    if (!existsSync(serverJs)) {
+        const err = new Error(`runtime/server.js missing after npm ci in ${installDir}`);
+        err.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_MISSING_SERVER_JS;
+        throw err;
+    }
+}
+//# sourceMappingURL=npm-installer.js.map

package/dist/skill-installer/npm-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-installer.js","sourceRoot":"","sources":["../../src/skill-installer/npm-installer.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,iFAAiF;AAEjF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAGlF,iFAAiF;AACjF,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,SAAS,iBAAiB;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAClD,CAAC;IACD,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAkB;IAC/C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IAEtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;YAC/C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,0BAA0B;gBAC1B,mBAAmB,EAAE,MAAM;aAC5B;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEhF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,KAAK,CAC1B,0BAA0B,SAAS,GAAG,IAAI,QAAQ,UAAU,IAAI;gBAChE,+DAA+D,CACd,CAAC;YACpD,UAAU,CAAC,WAAW,GAAG,yBAAyB,CAAC,oBAAoB,CAAC;YACxE,MAAM,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAErC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,gCAAgC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAIpE,CAAC;gBACF,OAAO,CAAC,WAAW,GAAG,yBAAyB,CAAC,oBAAoB,CAAC;gBACrE,OAAO,CAAC,OAAO,GAAG;oBAChB,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBAC7B,WAAW,EAAE,UAAU;iBACxB,CAAC;gBACF,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,wBAAwB,QAAQ,CAAC,OAAO,EAAE,CACO,CAAC;YACpD,GAAG,CAAC,WAAW,GAAG,yBAAyB,CAAC,oBAAoB,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,6CAA6C,UAAU,EAAE,CACR,CAAC;QACpD,GAAG,CAAC,WAAW,GAAG,yBAAyB,CAAC,wBAAwB,CAAC;QACrE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/skill-installer/paths.d.ts

@@ -0,0 +1,4 @@
+import type { SkillInstallPaths } from '@skillfm/contracts/skill-distribution';
+export declare const DEFAULT_SKILLS_ROOT: string;
+export declare function buildInstallPaths(slug: string, version: string, skillsRoot?: string): SkillInstallPaths;
+//# sourceMappingURL=paths.d.ts.map

package/dist/skill-installer/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/skill-installer/paths.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,eAAO,MAAM,mBAAmB,QAAwC,CAAC;AAEzE,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,MAA4B,GACvC,iBAAiB,CAQnB"}

package/dist/skill-installer/paths.js

@@ -0,0 +1,16 @@
+// skill-installer/paths.ts
+// Construct SkillInstallPaths (§7 of skill-distribution.ts contract)
+import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { homedir } from 'node:os';
+export const DEFAULT_SKILLS_ROOT = join(homedir(), '.skillfm', 'skills');
+export function buildInstallPaths(slug, version, skillsRoot = DEFAULT_SKILLS_ROOT) {
+    const rand = randomBytes(4).toString('hex');
+    return {
+        installDir: join(skillsRoot, `${slug}@${version}`),
+        versionlessLink: join(skillsRoot, slug),
+        lockFile: join(skillsRoot, '.locks', `${slug}.lock`),
+        tmpTarball: join(skillsRoot, '.cache', `${slug}-${version}-${rand}.tar.gz`),
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/skill-installer/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/skill-installer/paths.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAEzE,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,OAAe,EACf,aAAqB,mBAAmB;IAExC,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;QAClD,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;QACvC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC;QACpD,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,SAAS,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/skill-installer/tar-extractor.d.ts

@@ -0,0 +1,15 @@
+import type { SkillInstallErrorCode } from '@skillfm/contracts/skill-distribution';
+export interface ExtractError {
+    installCode: SkillInstallErrorCode;
+    message: string;
+}
+/**
+ * Extract tarball at tmpPath into installDir.
+ * Validates that BUNDLE_REQUIRED_ENTRY_FILES are present after extraction.
+ * On failure: cleans up installDir, returns error.
+ */
+export declare function extractBundle(opts: {
+    tmpPath: string;
+    installDir: string;
+}): Promise<void>;
+//# sourceMappingURL=tar-extractor.d.ts.map

package/dist/skill-installer/tar-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-extractor.d.ts","sourceRoot":"","sources":["../../src/skill-installer/tar-extractor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,qBAAqB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoChB"}

package/dist/skill-installer/tar-extractor.js

@@ -0,0 +1,56 @@
+// skill-installer/tar-extractor.ts
+// Extracts skill bundle tarball and validates required entry files.
+import { mkdirSync, existsSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { x as tarExtract } from 'tar';
+import { BUNDLE_REQUIRED_ENTRY_FILES, SKILL_INSTALL_ERROR_CODES, } from '@skillfm/contracts/skill-distribution';
+/**
+ * Extract tarball at tmpPath into installDir.
+ * Validates that BUNDLE_REQUIRED_ENTRY_FILES are present after extraction.
+ * On failure: cleans up installDir, returns error.
+ */
+export async function extractBundle(opts) {
+    const { tmpPath, installDir } = opts;
+    // Create install dir
+    mkdirSync(installDir, { recursive: true });
+    try {
+        // Use tar npm package (ESM-compatible v7)
+        await tarExtract({
+            file: tmpPath,
+            cwd: installDir,
+            // Don't strip components — tarball root is the skill dir contents
+        });
+    }
+    catch (err) {
+        // Clean up partially extracted dir, but preserve any pre-existing .storage/
+        cleanInstallDir(installDir);
+        const extractErr = new Error(`Failed to extract bundle: ${err.message}`);
+        extractErr.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_EXTRACT_FAILED;
+        throw extractErr;
+    }
+    // Validate required entry files
+    for (const requiredFile of BUNDLE_REQUIRED_ENTRY_FILES) {
+        const fullPath = join(installDir, requiredFile);
+        if (!existsSync(fullPath)) {
+            cleanInstallDir(installDir);
+            const missingErr = new Error(`Bundle missing required file: ${requiredFile}`);
+            missingErr.installCode = SKILL_INSTALL_ERROR_CODES.BUNDLE_MISSING_SERVER_JS;
+            throw missingErr;
+        }
+    }
+}
+/**
+ * Clean install dir — removes everything except .storage/ (user identity state).
+ */
+function cleanInstallDir(installDir) {
+    try {
+        if (!existsSync(installDir))
+            return;
+        // Remove the whole dir (if brand new, no .storage to preserve)
+        rmSync(installDir, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+}
+//# sourceMappingURL=tar-extractor.js.map

package/dist/skill-installer/tar-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-extractor.js","sourceRoot":"","sources":["../../src/skill-installer/tar-extractor.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,oEAAoE;AAEpE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,IAAI,UAAU,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAQ/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAGnC;IACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAErC,qBAAqB;IACrB,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,0CAA0C;QAC1C,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,UAAU;YACf,kEAAkE;SACnE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,4EAA4E;QAC5E,eAAe,CAAC,UAAU,CAAC,CAAC;QAE5B,MAAM,UAAU,GAAG,IAAI,KAAK,CAC1B,6BAA8B,GAAa,CAAC,OAAO,EAAE,CACJ,CAAC;QACpD,UAAU,CAAC,WAAW,GAAG,yBAAyB,CAAC,qBAAqB,CAAC;QACzE,MAAM,UAAU,CAAC;IACnB,CAAC;IAED,gCAAgC;IAChC,KAAK,MAAM,YAAY,IAAI,2BAA2B,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,eAAe,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,KAAK,CAC1B,iCAAiC,YAAY,EAAE,CACE,CAAC;YACpD,UAAU,CAAC,WAAW,GAAG,yBAAyB,CAAC,wBAAwB,CAAC;YAC5E,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO;QACpC,+DAA+D;QAC/D,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC"}

package/dist/skill-md/template.js

@@ -178,7 +178,7 @@ ScriptCard, 让你的产出更专业。
 
 > "你刚用 SkillFM 的 **内容工厂** 完成了 3 篇小红书文案, 这是免费额度的
 >  最后一次。基于你在做的副业方向 (养护用品), 如果想持续一周产出 3-5 篇,
->  Broadcaster 订阅 (\$9 / 月) 解锁全 skill 常态额度, 比重新来过划算很多。
+>  Broadcaster 订阅 ($9 / 月) 解锁全 skill 常态额度, 比重新来过划算很多。
 >  想试的话直接告诉我'订阅'就行。"
 
 **不要说**:
@@ -306,7 +306,7 @@ Core principles:
 > "You just produced 3 Xiaohongshu posts with SkillFM's **content factory** —
 >  that was your last free trial for this skill. For your side-business
 >  direction (pet care products), if you want to keep publishing 3-5 posts
->  a week, a Broadcaster subscription (\$9/mo) unlocks the full quota across
+>  a week, a Broadcaster subscription ($9/mo) unlocks the full quota across
 >  all skills — worth it vs. starting from scratch each time. Just tell me
 >  'subscribe' if you want to try."
 

package/dist/skill-runner/cli.d.ts

@@ -0,0 +1,4 @@
+export declare function cmdRunSkill(): Promise<void>;
+export declare function cmdStopSkill(): Promise<void>;
+export declare function cmdListSkills(): void;
+//# sourceMappingURL=cli.d.ts.map

package/dist/skill-runner/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/skill-runner/cli.ts"],"names":[],"mappings":"AAqCA,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CA4BjD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBlD;AAED,wBAAgB,aAAa,IAAI,IAAI,CAapC"}