@skillsmith/core 0.5.4 → 0.5.6

package/dist/services/skill-installation.feedback.js

@@ -0,0 +1,37 @@
+/**
+ * @fileoverview AIDefence feedback + risk trend helpers for install pipeline
+ * @module @skillsmith/core/services/skill-installation.feedback
+ * @see SMI-3873: AIDefence Learning Loop
+ * @see SMI-3874: Risk Trend Detection
+ */
+import { detectRiskTrend } from '../security/risk-trend.js';
+/** SMI-3873: Record AIDefence learning feedback. Best-effort, non-blocking. */
+export function recordAiDefenceFeedback(params) {
+    if (!params.feedback || !params.scanReport)
+        return;
+    const report = params.scanReport;
+    params.feedback
+        .recordFeedback({
+        input: params.skillMdContent.slice(0, 1000),
+        wasAccurate: true,
+        verdict: params.blocked ? 'true_positive' : report.passed ? 'true_negative' : 'true_positive',
+        threatType: !report.passed ? report.findings[0]?.type : undefined,
+        mitigation: params.blocked ? 'block' : report.passed ? 'log' : 'block',
+        mitigationSuccess: true,
+    })
+        .catch(() => { }); // best-effort
+}
+/** SMI-3874: Collect risk trend warnings from scan history. */
+export function collectTrendWarnings(params) {
+    if (!params.historyRepo)
+        return [];
+    try {
+        const history = params.historyRepo.getHistory(params.skillId, 5);
+        const trend = detectRiskTrend(params.scanReport.riskScore, history);
+        return trend.anomaly ? [trend.message] : [];
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=skill-installation.feedback.js.map

package/dist/services/skill-installation.feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-installation.feedback.js","sourceRoot":"","sources":["../../src/services/skill-installation.feedback.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,MAKvC;IACC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAM;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAA;IAChC,MAAM,CAAC,QAAQ;SACZ,cAAc,CAAC;QACd,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QAC3C,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;QAC7F,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS;QACjE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;QACtE,iBAAiB,EAAE,IAAI;KACxB,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,cAAc;AACnC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAAC,MAKpC;IACC,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAChE,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/services/skill-installation.helpers.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @fileoverview Helper functions for SkillInstallationService
+ * @module @skillsmith/core/services/skill-installation.helpers
+ * @see SMI-3483: Wave 0 — Extract SkillInstallationService into core
+ *
+ * Pure helper functions used by the service. Split from the main service
+ * file to meet the 500-line standard.
+ */
+import type { SkillDependencyRepository } from '../repositories/SkillDependencyRepository.js';
+import type { Database } from '../db/database-interface.js';
+import type { RiskScoreHistoryRepository } from '../repositories/RiskScoreHistoryRepository.js';
+import type { ScanReport } from '../security/index.js';
+import type { DepIntelResult, OptimizationInfo, ProgressCallback, QuarantineStatus, UninstallResult } from './skill-installation.types.js';
+import type { ManifestManager } from './skill-manifest.js';
+/** Result of applying optimization to a skill's content. */
+export interface OptimizationResult {
+    finalSkillContent: string;
+    subSkillFiles: Array<{
+        filename: string;
+        content: string;
+    }>;
+    subagentContent: string | undefined;
+    claudeMdSnippet: string | undefined;
+    optimizationInfo: OptimizationInfo;
+}
+export interface ParsedSkillId {
+    owner: string;
+    repo: string;
+    path: string;
+    isRegistryId: boolean;
+}
+export declare function parseSkillIdInternal(input: string): ParsedSkillId;
+export declare function hashContent(content: string): string;
+export interface SkillMdValidation {
+    valid: boolean;
+    errors: string[];
+}
+export declare function validateSkillMd(content: string): SkillMdValidation;
+export declare function assertNotEncrypted(content: string, filePath: string): void;
+export declare function fetchFromGitHub(owner: string, repo: string, filePath: string, branch?: string): Promise<string>;
+export declare function checkForModifications(skillPath: string, installedAt: string): Promise<boolean>;
+export declare function generateTips(skillName: string, optimizationInfo: OptimizationInfo): string[];
+export declare function extractDepIntel(skillMdContent: string): DepIntelResult;
+export declare function persistDependencies(repo: SkillDependencyRepository, skillId: string, content: string, declared: DepIntelResult['dep_declared']): void;
+/** Perform skill uninstall with manifest awareness and orphan fallback. */
+export declare function performUninstall(params: {
+    skillName: string;
+    force: boolean;
+    skillsDir: string;
+    manifest: ManifestManager;
+    skillDependencyRepo: SkillDependencyRepository;
+    onProgress: ProgressCallback;
+}): Promise<UninstallResult>;
+/**
+ * Apply skill optimization via TransformationService.
+ * Returns original content if transformation fails or produces no changes.
+ */
+export declare function applyOptimization(db: Database, skillId: string, skillName: string, skillMdContent: string): Promise<OptimizationResult>;
+export declare function sanitizeInstallError(error: unknown): string;
+/** Compute quality score (0-1) from scan report and skill metadata. */
+export declare function computeAndAttachQualityScore(params: {
+    scanReport: ScanReport | undefined;
+    description: string | null;
+    tagCount: number;
+    hasRepoUrl: boolean;
+    hasAuthor: boolean;
+    trustTier: string;
+    hasExamples: boolean;
+}): number;
+/** Record a risk score snapshot. Best-effort: swallows errors. */
+export declare function recordRiskHistory(params: {
+    historyRepo: RiskScoreHistoryRepository | undefined;
+    skillId: string;
+    scanReport: ScanReport;
+    contentHash: string | null;
+    source: 'install' | 'indexer' | 'rescan';
+}): void;
+/** SMI-3870: Validate config.json content; returns validity and warnings. */
+export declare function validateOptionalConfig(content: string): {
+    valid: boolean;
+    warnings: string[];
+};
+/** SMI-3871: Cross-reference dependency targets against quarantine status. */
+export declare function checkDepsAgainstQuarantine(depIntel: DepIntelResult, getStatus: (skillId: string) => QuarantineStatus | null): {
+    warnings: string[];
+    quarantinedDeps: string[];
+};
+//# sourceMappingURL=skill-installation.helpers.d.ts.map

package/dist/services/skill-installation.helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-installation.helpers.d.ts","sourceRoot":"","sources":["../../src/services/skill-installation.helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AAI7F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAE3D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAA;AAC/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EAChB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,gBAAgB,CAAA;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,OAAO,CAAA;CACtB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CA+BjE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AACD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CASlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ1E;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAsB5F;AAED,wBAAgB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,CAWtE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GACvC,IAAI,CAyBN;AAED,2EAA2E;AAC3E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,CAAA;IACzB,mBAAmB,EAAE,yBAAyB,CAAA;IAC9C,UAAU,EAAE,gBAAgB,CAAA;CAC7B,GAAG,OAAO,CAAC,eAAe,CAAC,CAuF3B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,kBAAkB,CAAC,CA8C7B;AAiBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAO3D;AAGD,uEAAuE;AACvE,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,UAAU,EAAE,UAAU,GAAG,SAAS,CAAA;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,MAAM,CAYT;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,WAAW,EAAE,0BAA0B,GAAG,SAAS,CAAA;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;CACzC,GAAG,IAAI,CAcP;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG;IACvD,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB,CAMA;AAED,8EAA8E;AAC9E,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,GACtD;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBnD"}

package/dist/services/skill-installation.helpers.js

@@ -0,0 +1,377 @@
+/**
+ * @fileoverview Helper functions for SkillInstallationService
+ * @module @skillsmith/core/services/skill-installation.helpers
+ * @see SMI-3483: Wave 0 — Extract SkillInstallationService into core
+ *
+ * Pure helper functions used by the service. Split from the main service
+ * file to meet the 500-line standard.
+ */
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { createHash } from 'crypto';
+import { extractMcpReferences } from '../analysis/McpReferenceExtractor.js';
+import { mergeDependencies } from '../analysis/DependencyMerger.js';
+import { TransformationService } from '../services/TransformationService.js';
+import { computeQualityScore } from '../scoring/quality-score.js';
+import { validateSkillConfig } from './skill-config-schema.js';
+export function parseSkillIdInternal(input) {
+    if (input.startsWith('https://github.com/')) {
+        const url = new URL(input);
+        const parts = url.pathname.split('/').filter(Boolean);
+        return {
+            owner: parts[0],
+            repo: parts[1],
+            path: parts.slice(2).join('/') || '',
+            isRegistryId: false,
+        };
+    }
+    if (input.includes('/')) {
+        const parts = input.split('/');
+        if (parts.length === 2) {
+            return { owner: parts[0], repo: parts[1], path: '', isRegistryId: true };
+        }
+        return {
+            owner: parts[0],
+            repo: parts[1],
+            path: parts.slice(2).join('/'),
+            isRegistryId: false,
+        };
+    }
+    const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    if (UUID_REGEX.test(input)) {
+        return { owner: '', repo: '', path: '', isRegistryId: true };
+    }
+    throw new Error('Invalid skill ID format: ' + input + '. Use owner/repo or GitHub URL.');
+}
+export function hashContent(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+export function validateSkillMd(content) {
+    const errors = [];
+    if (!content.includes('# ')) {
+        errors.push('Missing title (# heading)');
+    }
+    if (content.length < 100) {
+        errors.push('SKILL.md is too short (minimum 100 characters)');
+    }
+    return { valid: errors.length === 0, errors };
+}
+export function assertNotEncrypted(content, filePath) {
+    if (content.startsWith('\x00GITCRYPT')) {
+        throw new Error('File "' +
+            filePath +
+            '" is git-crypt encrypted. The repository uses git-crypt and this file cannot be fetched from GitHub.');
+    }
+}
+export async function fetchFromGitHub(owner, repo, filePath, branch = 'main') {
+    const url = 'https://raw.githubusercontent.com/' + owner + '/' + repo + '/' + branch + '/' + filePath;
+    const response = await fetch(url);
+    if (!response.ok) {
+        if (branch === 'main') {
+            const masterUrl = 'https://raw.githubusercontent.com/' + owner + '/' + repo + '/master/' + filePath;
+            const masterResponse = await fetch(masterUrl);
+            if (!masterResponse.ok) {
+                throw new Error('Failed to fetch ' + filePath + ': ' + response.status);
+            }
+            const masterText = await masterResponse.text();
+            assertNotEncrypted(masterText, filePath);
+            return masterText;
+        }
+        throw new Error('Failed to fetch ' + filePath + ': ' + response.status);
+    }
+    const text = await response.text();
+    assertNotEncrypted(text, filePath);
+    return text;
+}
+export async function checkForModifications(skillPath, installedAt) {
+    try {
+        const installDate = new Date(installedAt);
+        const files = await fs.readdir(skillPath, { withFileTypes: true });
+        for (const file of files) {
+            if (file.isFile()) {
+                const filePath = path.join(skillPath, file.name);
+                const stats = await fs.stat(filePath);
+                if (stats.mtime > installDate) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+export function generateTips(skillName, optimizationInfo) {
+    const tips = [
+        'Skill "' + skillName + '" installed successfully!',
+        'To use this skill, mention it in Claude Code: "Use the ' + skillName + ' skill to..."',
+        'View installed skills: ls ~/.claude/skills/',
+    ];
+    if (optimizationInfo.optimized) {
+        tips.push('', '[Optimization] Skillsmith Optimization Applied:');
+        if (optimizationInfo.tokenReductionPercent && optimizationInfo.tokenReductionPercent > 0) {
+            tips.push('  - Estimated ' + optimizationInfo.tokenReductionPercent + '% token reduction');
+        }
+        if (optimizationInfo.subSkills && optimizationInfo.subSkills.length > 0) {
+            tips.push('  - ' + optimizationInfo.subSkills.length + ' sub-skills created');
+        }
+        if (optimizationInfo.subagentGenerated && optimizationInfo.subagentPath) {
+            tips.push('  - Companion subagent generated: ' + optimizationInfo.subagentPath);
+        }
+    }
+    tips.push('', 'To uninstall: use the uninstall_skill tool');
+    return tips;
+}
+export function extractDepIntel(skillMdContent) {
+    const mcpResult = extractMcpReferences(skillMdContent);
+    const warnings = [];
+    for (const server of mcpResult.highConfidenceServers) {
+        warnings.push("MCP server '" + server + "' is referenced but may not be configured");
+    }
+    return {
+        dep_inferred_servers: mcpResult.servers,
+        dep_declared: undefined,
+        dep_warnings: warnings,
+    };
+}
+export function persistDependencies(repo, skillId, content, declared) {
+    const mcpResult = extractMcpReferences(content);
+    const merged = mergeDependencies(declared, mcpResult);
+    if (merged.length === 0)
+        return;
+    const rows = merged.map((dep) => ({
+        skill_id: skillId,
+        dep_type: dep.depType,
+        dep_target: dep.depTarget,
+        dep_version: dep.depVersion,
+        dep_source: dep.depSource,
+        confidence: dep.confidence,
+        metadata: dep.metadata,
+    }));
+    const bySource = new Map();
+    for (const row of rows) {
+        const existing = bySource.get(row.dep_source) ?? [];
+        existing.push(row);
+        bySource.set(row.dep_source, existing);
+    }
+    for (const [source, sourceRows] of bySource) {
+        repo.setDependencies(skillId, sourceRows, source);
+    }
+}
+/** Perform skill uninstall with manifest awareness and orphan fallback. */
+export async function performUninstall(params) {
+    const { skillName, force, skillsDir, manifest, skillDependencyRepo, onProgress } = params;
+    try {
+        onProgress('manifest', 'Loading manifest');
+        const manifestData = await manifest.load();
+        const skillEntry = manifestData.installedSkills[skillName];
+        if (!skillEntry) {
+            const potentialPath = path.join(skillsDir, skillName);
+            try {
+                await fs.access(potentialPath);
+                if (!force) {
+                    return {
+                        success: false,
+                        skillName,
+                        message: 'Skill "' +
+                            skillName +
+                            '" not in manifest but exists on disk. Use force=true to remove.',
+                        warning: 'This skill was not installed via Skillsmith.',
+                    };
+                }
+                onProgress('remove', 'Removing orphan skill from disk');
+                await fs.rm(potentialPath, { recursive: true, force: true });
+                return {
+                    success: true,
+                    skillName,
+                    message: 'Skill "' + skillName + '" removed from disk (was not in manifest).',
+                    removedPath: potentialPath,
+                    warning: 'Skill was not in the manifest. Use "skillsmith install" to register skills properly.',
+                };
+            }
+            catch {
+                return { success: false, skillName, message: 'Skill "' + skillName + '" is not installed.' };
+            }
+        }
+        const installPath = skillEntry.installPath;
+        if (!force) {
+            onProgress('check', 'Checking for modifications');
+            const modified = await checkForModifications(installPath, skillEntry.installedAt);
+            if (modified) {
+                return {
+                    success: false,
+                    skillName,
+                    message: 'Skill "' +
+                        skillName +
+                        '" has been modified since installation. Use force=true to remove anyway.',
+                    warning: 'Local modifications will be lost if you force uninstall.',
+                };
+            }
+        }
+        onProgress('remove', 'Removing skill directory');
+        try {
+            await fs.rm(installPath, { recursive: true, force: true });
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        try {
+            skillDependencyRepo.clearAll(skillEntry.id);
+        }
+        catch {
+            // Table may not exist pre-migration
+        }
+        onProgress('manifest', 'Updating manifest');
+        delete manifestData.installedSkills[skillName];
+        await manifest.save(manifestData);
+        onProgress('done', 'Uninstall complete');
+        return {
+            success: true,
+            skillName,
+            message: 'Skill "' + skillName + '" has been uninstalled successfully.',
+            removedPath: installPath,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            skillName,
+            message: error instanceof Error ? error.message : 'Unknown error during uninstall',
+        };
+    }
+}
+/**
+ * Apply skill optimization via TransformationService.
+ * Returns original content if transformation fails or produces no changes.
+ */
+export async function applyOptimization(db, skillId, skillName, skillMdContent) {
+    try {
+        const transformService = new TransformationService(db, {
+            cacheTtl: 3600,
+            version: '1.0.0',
+        });
+        const nameMatch = skillMdContent.match(/^name:\s*(\S.*)$/m);
+        const descMatch = skillMdContent.match(/^description:\s*(\S.*)$/m);
+        const extractedName = nameMatch ? nameMatch[1].trim() : skillName;
+        const extractedDesc = descMatch ? descMatch[1].trim() : '';
+        const transformResult = await transformService.transform(skillId, extractedName, extractedDesc, skillMdContent);
+        if (transformResult.transformed) {
+            return {
+                finalSkillContent: transformResult.mainSkillContent,
+                subSkillFiles: transformResult.subSkills,
+                subagentContent: transformResult.subagent?.content,
+                claudeMdSnippet: transformResult.claudeMdSnippet,
+                optimizationInfo: {
+                    optimized: true,
+                    subSkills: transformResult.subSkills.map((s) => s.filename),
+                    subagentGenerated: !!transformResult.subagent?.content,
+                    tokenReductionPercent: transformResult.stats.tokenReductionPercent,
+                    originalLines: transformResult.stats.originalLines,
+                    optimizedLines: transformResult.stats.optimizedLines,
+                },
+            };
+        }
+    }
+    catch {
+        // Transformation failed — continue with original content
+    }
+    return {
+        finalSkillContent: skillMdContent,
+        subSkillFiles: [],
+        subagentContent: undefined,
+        claudeMdSnippet: undefined,
+        optimizationInfo: { optimized: false },
+    };
+}
+/** Sanitize install error messages to avoid leaking internal details. */
+const KNOWN_ERROR_PREFIXES = [
+    'already installed',
+    'Could not find SKILL.md',
+    'registry data quality issue',
+    'Invalid SKILL.md',
+    'Invalid skill ID format',
+    'Security scan failed',
+    'exceeds maximum length',
+    'Refusing to write to symlink',
+    'Refusing to write to hardlinked file',
+    'Install path escapes skills directory',
+    'Cannot skip security scan',
+];
+export function sanitizeInstallError(error) {
+    if (error instanceof Error) {
+        if (KNOWN_ERROR_PREFIXES.some((p) => error.message.includes(p))) {
+            return error.message;
+        }
+    }
+    return 'Installation failed due to an internal error';
+}
+// SMI-3864: Quality score + risk history helpers
+/** Compute quality score (0-1) from scan report and skill metadata. */
+export function computeAndAttachQualityScore(params) {
+    return computeQualityScore({
+        riskScore: params.scanReport?.riskScore ?? null,
+        securityFindingsCount: params.scanReport?.findings.length ?? 0,
+        securityPassed: params.scanReport?.passed ?? null,
+        description: params.description,
+        tagCount: params.tagCount,
+        hasRepoUrl: params.hasRepoUrl,
+        hasAuthor: params.hasAuthor,
+        trustTier: params.trustTier,
+        hasExamples: params.hasExamples,
+    });
+}
+/** Record a risk score snapshot. Best-effort: swallows errors. */
+export function recordRiskHistory(params) {
+    if (!params.historyRepo)
+        return;
+    try {
+        params.historyRepo.record({
+            skillId: params.skillId,
+            riskScore: params.scanReport.riskScore,
+            findingsCount: params.scanReport.findings.length,
+            contentHash: params.contentHash,
+            scannedAt: params.scanReport.scannedAt.toISOString(),
+            source: params.source,
+        });
+    }
+    catch {
+        // Best-effort — do not block install on history recording failure
+    }
+}
+/** SMI-3870: Validate config.json content; returns validity and warnings. */
+export function validateOptionalConfig(content) {
+    const result = validateSkillConfig(content);
+    if (!result.valid) {
+        return { valid: false, warnings: ['config.json rejected: ' + result.errors.join('; ')] };
+    }
+    return { valid: true, warnings: result.warnings };
+}
+/** SMI-3871: Cross-reference dependency targets against quarantine status. */
+export function checkDepsAgainstQuarantine(depIntel, getStatus) {
+    const warnings = [];
+    const quarantinedDeps = [];
+    const checked = new Set();
+    const check = (target) => {
+        if (checked.has(target))
+            return;
+        checked.add(target);
+        const status = getStatus(target);
+        if (!status)
+            return;
+        quarantinedDeps.push(target);
+        const label = status === 'pending'
+            ? 'under review for security concerns'
+            : 'quarantined (confirmed malicious)';
+        warnings.push('Dependency "' + target + '" is ' + label + '.');
+    };
+    for (const server of depIntel.dep_inferred_servers)
+        check(server);
+    if (depIntel.dep_declared?.platform?.mcp_servers) {
+        for (const srv of depIntel.dep_declared.platform.mcp_servers)
+            check(srv.name);
+    }
+    return { warnings, quarantinedDeps };
+}
+//# sourceMappingURL=skill-installation.helpers.js.map

package/dist/services/skill-installation.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-installation.helpers.js","sourceRoot":"","sources":["../../src/services/skill-installation.helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAEnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAKnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAE5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAUjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAoB9D,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACrD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YACpC,YAAY,EAAE,KAAK;SACpB,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QAC1E,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,YAAY,EAAE,KAAK;SACpB,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,iEAAiE,CAAA;IACpF,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,KAAK,GAAG,iCAAiC,CAAC,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAMD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAClE,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,QAAQ;YACN,QAAQ;YACR,sGAAsG,CACzG,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,IAAY,EACZ,QAAgB,EAChB,SAAiB,MAAM;IAEvB,MAAM,GAAG,GACP,oCAAoC,GAAG,KAAK,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAA;IAC3F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAEjC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,SAAS,GACb,oCAAoC,GAAG,KAAK,GAAG,GAAG,GAAG,IAAI,GAAG,UAAU,GAAG,QAAQ,CAAA;YACnF,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;YAC7C,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAA;YAC9C,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YACxC,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAClC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAElE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,KAAK,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,gBAAkC;IAChF,MAAM,IAAI,GAAG;QACX,SAAS,GAAG,SAAS,GAAG,2BAA2B;QACnD,yDAAyD,GAAG,SAAS,GAAG,eAAe;QACvF,6CAA6C;KAC9C,CAAA;IAED,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;QAChE,IAAI,gBAAgB,CAAC,qBAAqB,IAAI,gBAAgB,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;YACzF,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,qBAAqB,GAAG,mBAAmB,CAAC,CAAA;QAC5F,CAAC;QACD,IAAI,gBAAgB,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,gBAAgB,CAAC,iBAAiB,IAAI,gBAAgB,CAAC,YAAY,EAAE,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,oCAAoC,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAA;QACjF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAA;IAC3D,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,cAAsB;IACpD,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,qBAAqB,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,MAAM,GAAG,2CAA2C,CAAC,CAAA;IACtF,CAAC;IACD,OAAO;QACL,oBAAoB,EAAE,SAAS,CAAC,OAAO;QACvC,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,QAAQ;KACvB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAA+B,EAC/B,OAAe,EACf,OAAe,EACf,QAAwC;IAExC,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAE/B,MAAM,IAAI,GAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,GAAG,CAAC,OAAO;QACrB,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC,CAAC,CAAA;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAA;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAA0C,CAAC,CAAA;IACvF,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAOtC;IACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;IAEzF,IAAI,CAAC;QACH,UAAU,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;QAC1C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC1C,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QAE1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YACrD,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,SAAS;wBACT,OAAO,EACL,SAAS;4BACT,SAAS;4BACT,iEAAiE;wBACnE,OAAO,EAAE,8CAA8C;qBACxD,CAAA;gBACH,CAAC;gBACD,UAAU,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAA;gBACvD,MAAM,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC5D,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,SAAS;oBACT,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,4CAA4C;oBAC7E,WAAW,EAAE,aAAa;oBAC1B,OAAO,EACL,sFAAsF;iBACzF,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,qBAAqB,EAAE,CAAA;YAC9F,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,CAAA;QAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,UAAU,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAA;YACjD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;YACjF,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,SAAS;oBACT,OAAO,EACL,SAAS;wBACT,SAAS;wBACT,0EAA0E;oBAC5E,OAAO,EAAE,0DAA0D;iBACpE,CAAA;YACH,CAAC;QACH,CAAC;QAED,UAAU,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAA;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;QAED,IAAI,CAAC;YACH,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QAED,UAAU,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;QAC3C,OAAO,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAEjC,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;QACxC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS;YACT,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,sCAAsC;YACvE,WAAW,EAAE,WAAW;SACzB,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS;YACT,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC;SACnF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAY,EACZ,OAAe,EACf,SAAiB,EACjB,cAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,IAAI,qBAAqB,CAAC,EAAE,EAAE;YACrD,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,OAAO;SACjB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAClE,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAE1D,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,SAAS,CACtD,OAAO,EACP,aAAa,EACb,aAAa,EACb,cAAc,CACf,CAAA;QAED,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC;YAChC,OAAO;gBACL,iBAAiB,EAAE,eAAe,CAAC,gBAAgB;gBACnD,aAAa,EAAE,eAAe,CAAC,SAAS;gBACxC,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE,OAAO;gBAClD,eAAe,EAAE,eAAe,CAAC,eAAe;gBAChD,gBAAgB,EAAE;oBAChB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC3D,iBAAiB,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO;oBACtD,qBAAqB,EAAE,eAAe,CAAC,KAAK,CAAC,qBAAqB;oBAClE,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa;oBAClD,cAAc,EAAE,eAAe,CAAC,KAAK,CAAC,cAAc;iBACrD;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IAED,OAAO;QACL,iBAAiB,EAAE,cAAc;QACjC,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,SAAS;QAC1B,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;KACvC,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,oBAAoB,GAAG;IAC3B,mBAAmB;IACnB,yBAAyB;IACzB,6BAA6B;IAC7B,kBAAkB;IAClB,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,8BAA8B;IAC9B,sCAAsC;IACtC,uCAAuC;IACvC,2BAA2B;CAC5B,CAAA;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC,OAAO,CAAA;QACtB,CAAC;IACH,CAAC;IACD,OAAO,8CAA8C,CAAA;AACvD,CAAC;AACD,iDAAiD;AAEjD,uEAAuE;AACvE,MAAM,UAAU,4BAA4B,CAAC,MAQ5C;IACC,OAAO,mBAAmB,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI;QAC/C,qBAAqB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC;QAC9D,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI;QACjD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAA;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,MAMjC;IACC,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAM;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;YACtC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM;YAChD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YACpD,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,OAAe;IAIpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAA;IAC1F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;AACnD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,SAAuD;IAEvD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,KAAK,GAAG,CAAC,MAAc,EAAQ,EAAE;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAM;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5B,MAAM,KAAK,GACT,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,mCAAmC,CAAA;QACzC,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,GAAG,CAAC,CAAA;IAChE,CAAC,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,oBAAoB;QAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACjE,IAAI,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAA;AACtC,CAAC"}

package/dist/services/skill-installation.service.d.ts

@@ -0,0 +1,37 @@
+import type { SkillRepository } from '../repositories/SkillRepository.js';
+import type { SkillDependencyRepository } from '../repositories/SkillDependencyRepository.js';
+import type { RiskScoreHistoryRepository } from '../repositories/RiskScoreHistoryRepository.js';
+import type { Database } from '../db/database-interface.js';
+import { type ProgressCallback, type InstallOptions, type InstallResult, type UninstallOptions, type UninstallResult, type RegistryLookup, type CoInstallRecorder, type QuarantineStatus, type AiDefenceFeedback } from './skill-installation.types.js';
+export interface SkillInstallationServiceParams {
+    db: Database;
+    skillRepo: SkillRepository;
+    skillDependencyRepo: SkillDependencyRepository;
+    skillsDir?: string;
+    manifestPath?: string;
+    onProgress?: ProgressCallback;
+    registryLookup?: RegistryLookup;
+    coInstallRecorder?: CoInstallRecorder;
+    sessionInstalledSkillIds?: string[];
+    quarantineLookup?: (skillId: string) => QuarantineStatus | null;
+    riskHistoryRepo?: RiskScoreHistoryRepository;
+    aiDefenceFeedback?: AiDefenceFeedback;
+}
+export declare class SkillInstallationService {
+    private readonly db;
+    private readonly skillRepo;
+    private readonly skillDependencyRepo;
+    private readonly skillsDir;
+    private readonly manifest;
+    private readonly onProgress;
+    private readonly registryLookup?;
+    private readonly coInstallRecorder?;
+    private readonly sessionInstalledSkillIds;
+    private readonly quarantineLookup?;
+    private readonly riskHistoryRepo?;
+    private readonly aiDefenceFeedback?;
+    constructor(params: SkillInstallationServiceParams);
+    install(skillId: string, options?: InstallOptions): Promise<InstallResult>;
+    uninstall(skillName: string, options?: UninstallOptions): Promise<UninstallResult>;
+}
+//# sourceMappingURL=skill-installation.service.d.ts.map

package/dist/services/skill-installation.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-installation.service.d.ts","sourceRoot":"","sources":["../../src/services/skill-installation.service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAA;AAC/F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAA;AAmBtC,MAAM,WAAW,8BAA8B;IAC7C,EAAE,EAAE,QAAQ,CAAA;IACZ,SAAS,EAAE,eAAe,CAAA;IAC1B,mBAAmB,EAAE,yBAAyB,CAAA;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAA;IAC/D,eAAe,CAAC,EAAE,0BAA0B,CAAA;IAC5C,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;CACtC;AACD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAU;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAgB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA8C;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA4B;IAC7D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAmB;gBAC1C,MAAM,EAAE,8BAA8B;IAc5C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAqZ9E,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;CAU7F"}