@skillsmith/core 0.5.4 → 0.5.6

package/dist/types.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Core type definitions for Skillsmith
+ */
+/**
+ * Trust tier levels for skill quality assessment
+ * NOTE: Database tiers must match database schema (packages/core/src/database/schema.ts)
+ * SMI-1809: Added 'local' for local skills from ~/.claude/skills/
+ */
+export type TrustTier = 'verified' | 'community' | 'experimental' | 'unknown' | 'local';
+/**
+ * Trust tier descriptions for user display
+ */
+export declare const TrustTierDescriptions: Record<TrustTier, string>;
+/**
+ * Skill categories
+ */
+export type SkillCategory = 'development' | 'testing' | 'documentation' | 'devops' | 'database' | 'security' | 'productivity' | 'integration' | 'ai-ml' | 'science' | 'other';
+/**
+ * Score breakdown for skill quality assessment
+ */
+export interface ScoreBreakdown {
+    quality: number;
+    popularity: number;
+    maintenance: number;
+    security: number;
+    documentation: number;
+}
+/**
+ * SMI-825: Security scan summary for display
+ */
+export interface SecuritySummary {
+    /** Whether the skill passed security scan (null = not scanned) */
+    passed: boolean | null;
+    /** Risk score from 0-100 (lower is safer) */
+    riskScore: number | null;
+    /** Number of security findings */
+    findingsCount: number;
+    /** When the skill was last scanned */
+    scannedAt: string | null;
+}
+/**
+ * Full skill definition
+ */
+export interface Skill {
+    id: string;
+    name: string;
+    description: string;
+    author: string;
+    repository?: string;
+    version?: string;
+    category: SkillCategory;
+    trustTier: TrustTier;
+    score: number;
+    scoreBreakdown?: ScoreBreakdown;
+    tags: string[];
+    installCommand?: string;
+    /** SMI-825: Security scan summary */
+    security?: SecuritySummary;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Skill search result (subset of full skill)
+ * SMI-1491: Added repository field for transparency about installation source
+ * SMI-825: Added security summary
+ * SMI-1809: Added source field to identify local vs registry skills
+ * SMI-2734: Added installHint for ergonomic registry ID surfacing in search results
+ */
+export interface SkillSearchResult {
+    id: string;
+    name: string;
+    description: string;
+    author: string;
+    category: SkillCategory;
+    trustTier: TrustTier;
+    score: number;
+    /** GitHub repository URL (may be undefined for seed data/metadata-only skills) */
+    repository?: string;
+    /** SMI-825: Security scan summary */
+    security?: SecuritySummary;
+    /** SMI-1809: Source of the skill ('local' for ~/.claude/skills/, 'registry' for API) */
+    source?: 'local' | 'registry';
+    /** SMI-2734: Registry install ID in 'author/skill-name' format. Only set for registry skills.
+     *  Undefined for local skills since their author field is not a routable registry owner. */
+    installHint?: string;
+    /** SMI-2760: Flat array of compatible IDE/LLM/platform slugs (e.g. ["claude-code", "cursor", "claude"]) */
+    compatibility?: string[];
+}
+/**
+ * SMI-2760: Compatibility filter for search
+ */
+export interface CompatibilityFilter {
+    /** IDE slugs to match (e.g. ['cursor', 'claude-code']) */
+    ides?: string[];
+    /** LLM slugs to match (e.g. ['claude', 'gpt-4o']) */
+    llms?: string[];
+}
+/**
+ * Search filters
+ */
+export interface SearchFilters {
+    category?: SkillCategory;
+    trustTier?: TrustTier;
+    minScore?: number;
+    /** SMI-825: Only show skills that passed security scan */
+    safeOnly?: boolean;
+    /** SMI-825: Maximum risk score (0-100, lower is safer) */
+    maxRiskScore?: number;
+    /** SMI-2760: Filter by IDE/LLM compatibility */
+    compatibleWith?: CompatibilityFilter;
+}
+/**
+ * Search response with timing
+ */
+export interface SearchResponse {
+    results: SkillSearchResult[];
+    total: number;
+    query: string;
+    filters: SearchFilters;
+    timing: {
+        searchMs: number;
+        totalMs: number;
+    };
+}
+/**
+ * Get skill response
+ */
+export interface GetSkillResponse {
+    skill: Skill;
+    installCommand: string;
+    /** SMI-3672: Raw SKILL.md content (markdown), when available */
+    content?: string;
+    timing: {
+        totalMs: number;
+    };
+    /** SMI-2761: Skills frequently installed alongside this one (≥5 co-installs) */
+    also_installed?: AlsoInstalledSkill[];
+    /** SMI-3137: Dependency intelligence data from skill_dependencies table */
+    dependencies?: import('./types/dependencies.js').SkillDependencyRow[];
+}
+/**
+ * SMI-2761: Minimal skill summary used in co-install recommendations
+ */
+export interface AlsoInstalledSkill {
+    /** Skill ID (e.g. "anthropic/commit") */
+    skillId: string;
+    /** Human-readable name */
+    name: string;
+    /** Short description */
+    description?: string;
+    /** Author slug */
+    author?: string;
+    /** Co-install count */
+    installCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,WAAW,GACX,cAAc,GACd,SAAS,GACT,OAAO,CAAA;AAEX;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAM3D,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,SAAS,GACT,eAAe,GACf,QAAQ,GACR,UAAU,GACV,UAAU,GACV,cAAc,GACd,aAAa,GACb,OAAO,GACP,SAAS,GACT,OAAO,CAAA;AAEX;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IACtB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAA;IACrB,sCAAsC;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,aAAa,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,aAAa,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC7B;gGAC4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2GAA2G;IAC3G,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gDAAgD;IAChD,cAAc,CAAC,EAAE,mBAAmB,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,EAAE,CAAA;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,aAAa,CAAA;IACtB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAA;IACZ,cAAc,EAAE,MAAM,CAAA;IACtB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,gFAAgF;IAChF,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACrC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,yBAAyB,EAAE,kBAAkB,EAAE,CAAA;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,uBAAuB;IACvB,YAAY,EAAE,MAAM,CAAA;CACrB"}

package/dist/types.js

@@ -0,0 +1,14 @@
+/**
+ * Core type definitions for Skillsmith
+ */
+/**
+ * Trust tier descriptions for user display
+ */
+export const TrustTierDescriptions = {
+    verified: 'Manually reviewed by the Skillsmith team. High quality and safe to use.',
+    community: 'Highly rated by the community. Generally reliable.',
+    experimental: 'New or beta skill. Use with caution.',
+    unknown: 'Not yet assessed. Review carefully before using.',
+    local: 'Local skill from your ~/.claude/skills/ directory. You control this skill.',
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D,QAAQ,EAAE,yEAAyE;IACnF,SAAS,EAAE,oDAAoD;IAC/D,YAAY,EAAE,sCAAsC;IACpD,OAAO,EAAE,kDAAkD;IAC3D,KAAK,EAAE,4EAA4E;CACpF,CAAA"}

package/dist/utils/github-url.d.ts

@@ -0,0 +1,57 @@
+/**
+ * GitHub URL Parsing Utilities
+ * @module @skillsmith/core/utils/github-url
+ *
+ * SMI-2171: Extracted from mcp-server for shared use across codebase.
+ * Used by:
+ * - packages/mcp-server/src/tools/install.helpers.ts (skill installation)
+ * - scripts/batch-transform-skills.ts (batch transformation)
+ */
+/**
+ * Parsed repository URL components
+ */
+export interface ParsedRepoUrl {
+    /** GitHub username or organization */
+    owner: string;
+    /** Repository name */
+    repo: string;
+    /** Path within the repository (e.g., "skills/commit" for monorepo skills) */
+    path: string;
+    /** Branch name (defaults to "main" if not specified) */
+    branch: string;
+}
+/**
+ * Parse repo_url from registry to extract GitHub components.
+ *
+ * Handles various URL formats:
+ * - Plain repo: `https://github.com/owner/repo`
+ * - Tree path: `https://github.com/owner/repo/tree/branch/path`
+ * - Blob path: `https://github.com/owner/repo/blob/branch/path`
+ *
+ * @example
+ * ```typescript
+ * // Plain repo URL
+ * parseRepoUrl('https://github.com/user/skill')
+ * // => { owner: 'user', repo: 'skill', path: '', branch: 'main' }
+ *
+ * // Monorepo skill with tree path
+ * parseRepoUrl('https://github.com/ruvnet/claude-code/tree/main/skills/commit')
+ * // => { owner: 'ruvnet', repo: 'claude-code', path: 'skills/commit', branch: 'main' }
+ * ```
+ *
+ * @param repoUrl - GitHub repository URL
+ * @returns Parsed URL components
+ * @throws Error if hostname is not GitHub
+ *
+ * @since SMI-1491
+ * @see SMI-2171 - Extracted to @skillsmith/core for shared use
+ */
+export declare function parseRepoUrl(repoUrl: string): ParsedRepoUrl;
+/**
+ * Check if a URL is a valid GitHub repository URL
+ *
+ * @param url - URL to check
+ * @returns true if the URL is a valid GitHub URL
+ */
+export declare function isGitHubUrl(url: string): boolean;
+//# sourceMappingURL=github-url.d.ts.map

package/dist/utils/github-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-url.d.ts","sourceRoot":"","sources":["../../src/utils/github-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAA;CACf;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAiC3D;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOhD"}

package/dist/utils/github-url.js

@@ -0,0 +1,88 @@
+/**
+ * GitHub URL Parsing Utilities
+ * @module @skillsmith/core/utils/github-url
+ *
+ * SMI-2171: Extracted from mcp-server for shared use across codebase.
+ * Used by:
+ * - packages/mcp-server/src/tools/install.helpers.ts (skill installation)
+ * - scripts/batch-transform-skills.ts (batch transformation)
+ */
+// ============================================================================
+// Constants
+// ============================================================================
+/**
+ * Allowed hostnames for skill installation
+ * SMI-1533: Restrict to trusted code hosting platforms
+ */
+const ALLOWED_HOSTS = ['github.com', 'www.github.com'];
+// ============================================================================
+// Functions
+// ============================================================================
+/**
+ * Parse repo_url from registry to extract GitHub components.
+ *
+ * Handles various URL formats:
+ * - Plain repo: `https://github.com/owner/repo`
+ * - Tree path: `https://github.com/owner/repo/tree/branch/path`
+ * - Blob path: `https://github.com/owner/repo/blob/branch/path`
+ *
+ * @example
+ * ```typescript
+ * // Plain repo URL
+ * parseRepoUrl('https://github.com/user/skill')
+ * // => { owner: 'user', repo: 'skill', path: '', branch: 'main' }
+ *
+ * // Monorepo skill with tree path
+ * parseRepoUrl('https://github.com/ruvnet/claude-code/tree/main/skills/commit')
+ * // => { owner: 'ruvnet', repo: 'claude-code', path: 'skills/commit', branch: 'main' }
+ * ```
+ *
+ * @param repoUrl - GitHub repository URL
+ * @returns Parsed URL components
+ * @throws Error if hostname is not GitHub
+ *
+ * @since SMI-1491
+ * @see SMI-2171 - Extracted to @skillsmith/core for shared use
+ */
+export function parseRepoUrl(repoUrl) {
+    const url = new URL(repoUrl);
+    // SMI-1533: Validate hostname to prevent fetching from malicious sources
+    if (!ALLOWED_HOSTS.includes(url.hostname.toLowerCase())) {
+        throw new Error(`Invalid repository host: ${url.hostname}. ` +
+            `Only GitHub repositories are supported (${ALLOWED_HOSTS.join(', ')})`);
+    }
+    const parts = url.pathname.split('/').filter(Boolean);
+    const owner = parts[0];
+    const repo = parts[1];
+    // /owner/repo (skill at repo root)
+    if (parts.length === 2) {
+        return { owner, repo, path: '', branch: 'main' };
+    }
+    // /owner/repo/tree/branch/path... or /owner/repo/blob/branch/path...
+    if (parts[2] === 'tree' || parts[2] === 'blob') {
+        return {
+            owner,
+            repo,
+            branch: parts[3],
+            path: parts.slice(4).join('/'),
+        };
+    }
+    // Unknown format - assume path starts at index 2, default to main branch
+    return { owner, repo, path: parts.slice(2).join('/'), branch: 'main' };
+}
+/**
+ * Check if a URL is a valid GitHub repository URL
+ *
+ * @param url - URL to check
+ * @returns true if the URL is a valid GitHub URL
+ */
+export function isGitHubUrl(url) {
+    try {
+        const parsed = new URL(url);
+        return ALLOWED_HOSTS.includes(parsed.hostname.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=github-url.js.map

package/dist/utils/github-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-url.js","sourceRoot":"","sources":["../../src/utils/github-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;AAEtD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAE5B,yEAAyE;IACzE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,CAAC,QAAQ,IAAI;YAC1C,2CAA2C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACzE,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAErD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAErB,mCAAmC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAClD,CAAC;IAED,qEAAqE;IACrE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAChB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAA;IACH,CAAC;IAED,yEAAyE;IACzE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Utility exports
+ */
+export { logger, createLogger, silentLogger, type Logger } from './logger.js';
+export { withRetry, fetchWithRetry, isTransientError, isRetryableStatus, parseRetryAfter, RetryExhaustedError, DEFAULT_RETRY_CONFIG, type RetryConfig, } from './retry.js';
+export { checkForUpdates, formatUpdateNotification, type VersionCheckResult, } from './version-check.js';
+export { parseRepoUrl, isGitHubUrl, type ParsedRepoUrl } from './github-url.js';
+export { safeWriteFile, SymlinkError, HardlinkError } from './safe-fs.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,WAAW,GACjB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAG/E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/utils/index.js

@@ -0,0 +1,12 @@
+/**
+ * Utility exports
+ */
+export { logger, createLogger, silentLogger } from './logger.js';
+export { withRetry, fetchWithRetry, isTransientError, isRetryableStatus, parseRetryAfter, RetryExhaustedError, DEFAULT_RETRY_CONFIG, } from './retry.js';
+// SMI-1952: Version check for auto-update notifications
+export { checkForUpdates, formatUpdateNotification, } from './version-check.js';
+// SMI-2171: GitHub URL parsing utilities
+export { parseRepoUrl, isGitHubUrl } from './github-url.js';
+// SMI-2274: Safe filesystem operations (symlink protection)
+export { safeWriteFile, SymlinkError, HardlinkError } from './safe-fs.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAe,MAAM,aAAa,CAAA;AAC7E,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,YAAY,CAAA;AAEnB,wDAAwD;AACxD,OAAO,EACL,eAAe,EACf,wBAAwB,GAEzB,MAAM,oBAAoB,CAAA;AAE3B,yCAAyC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,iBAAiB,CAAA;AAE/E,4DAA4D;AAC5D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,172 @@
+/**
+ * Logger Utility with Audit Support (SMI-728)
+ *
+ * Enhanced logger with structured logging, audit trails, and security events.
+ * Provides environment-aware logging with different verbosity levels and
+ * support for audit event tracking.
+ */
+/**
+ * Log severity levels
+ */
+export declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    AUDIT = 4,
+    SECURITY = 5
+}
+/**
+ * Audit event types
+ */
+export type AuditEventType = 'skill.install' | 'skill.uninstall' | 'skill.fetch' | 'skill.scan' | 'adapter.request' | 'adapter.error' | 'cache.hit' | 'cache.miss' | 'security.violation';
+/**
+ * Security event types
+ */
+export type SecurityEventType = 'ssrf.blocked' | 'path_traversal.blocked' | 'validation.failed' | 'rate_limit.exceeded' | 'malware.detected' | 'suspicious.pattern';
+/**
+ * Audit event structure
+ */
+export interface AuditEvent {
+    /** Type of audit event */
+    eventType: AuditEventType;
+    /** When the event occurred */
+    timestamp: string;
+    /** Who performed the action (user, system, adapter) */
+    actor: string;
+    /** Resource being accessed (URL, path, skill_id) */
+    resource: string;
+    /** Action being performed (fetch, read, install, scan) */
+    action: string;
+    /** Result of the action (success, blocked, error) */
+    result: 'success' | 'blocked' | 'error';
+    /** Additional context as key-value pairs */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Security event structure
+ */
+export interface SecurityEvent {
+    /** Type of security event */
+    eventType: SecurityEventType;
+    /** When the event occurred */
+    timestamp: string;
+    /** Severity level (low, medium, high, critical) */
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    /** Resource being protected */
+    resource: string;
+    /** Action that was blocked/detected */
+    action: string;
+    /** Details about the security event */
+    details: string;
+    /** Additional context */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Structured log entry
+ */
+export interface LogEntry {
+    level: LogLevel;
+    timestamp: string;
+    namespace?: string;
+    message: string;
+    context?: Record<string, unknown>;
+    error?: Error;
+}
+/**
+ * Log aggregator interface for future persistence
+ */
+export interface LogAggregator {
+    /** Add a log entry to the aggregator */
+    add(entry: LogEntry): void;
+    /** Add an audit event */
+    addAudit(event: AuditEvent): void;
+    /** Add a security event */
+    addSecurity(event: SecurityEvent): void;
+    /** Flush logs to persistence layer */
+    flush(): Promise<void>;
+    /** Get all logs */
+    getLogs(): LogEntry[];
+    /** Get all audit events */
+    getAuditEvents(): AuditEvent[];
+    /** Get all security events */
+    getSecurityEvents(): SecurityEvent[];
+}
+/**
+ * Logger interface with audit support
+ */
+export interface Logger {
+    warn: (message: string, context?: Record<string, unknown>) => void;
+    error: (message: string, error?: Error, context?: Record<string, unknown>) => void;
+    info: (message: string, context?: Record<string, unknown>) => void;
+    debug: (message: string, context?: Record<string, unknown>) => void;
+    auditLog: (event: AuditEvent) => void;
+    securityLog: (event: SecurityEvent) => void;
+}
+/**
+ * Set the global log aggregator
+ */
+export declare function setLogAggregator(aggregator: LogAggregator): void;
+/**
+ * Get the global log aggregator
+ */
+export declare function getLogAggregator(): LogAggregator;
+/**
+ * Default logger instance
+ *
+ * Environment variables:
+ * - NODE_ENV=test: Suppress warn/info/debug output
+ * - DEBUG=true: Enable info and debug output
+ * - LOG_FORMAT=json: Output logs in JSON format
+ * - LOG_LEVEL=0-5: Minimum log level to output
+ * - AUDIT_LOG=true: Enable audit log output
+ *
+ * @example
+ * ```typescript
+ * logger.info('Processing skill', { skillId: 'foo' })
+ * logger.error('Failed to fetch', new Error('Network error'))
+ * logger.auditLog({
+ *   eventType: 'skill.install',
+ *   timestamp: new Date().toISOString(),
+ *   actor: 'user',
+ *   resource: 'skill-id',
+ *   action: 'install',
+ *   result: 'success'
+ * })
+ * ```
+ */
+export declare const logger: Logger;
+/**
+ * Create a namespaced logger
+ *
+ * @param namespace - The namespace prefix for log messages
+ * @returns A Logger instance with namespaced messages
+ *
+ * @example
+ * ```typescript
+ * const log = createLogger('GitLabAdapter')
+ * log.warn('Rate limit exceeded', { remaining: 0 })
+ * log.auditLog({
+ *   eventType: 'adapter.request',
+ *   timestamp: new Date().toISOString(),
+ *   actor: 'GitLabAdapter',
+ *   resource: 'https://gitlab.com/api/v4/projects',
+ *   action: 'fetch',
+ *   result: 'success'
+ * })
+ * ```
+ */
+export declare function createLogger(namespace: string): Logger;
+/**
+ * No-op logger for testing or silent operation
+ */
+export declare const silentLogger: Logger;
+/**
+ * Helper to create audit events with current timestamp
+ */
+export declare function createAuditEvent(eventType: AuditEventType, actor: string, resource: string, action: string, result: 'success' | 'blocked' | 'error', metadata?: Record<string, unknown>): AuditEvent;
+/**
+ * Helper to create security events with current timestamp
+ */
+export declare function createSecurityEvent(eventType: SecurityEventType, severity: 'low' | 'medium' | 'high' | 'critical', resource: string, action: string, details: string, metadata?: Record<string, unknown>): SecurityEvent;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,oBAAY,QAAQ;IAClB,KAAK,IAAI;IACT,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;IACT,KAAK,IAAI;IACT,QAAQ,IAAI;CACb;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,eAAe,GACf,WAAW,GACX,YAAY,GACZ,oBAAoB,CAAA;AAExB;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,wBAAwB,GACxB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,CAAA;AAExB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,SAAS,EAAE,cAAc,CAAA;IACzB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAA;IACb,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAA;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;IACvC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,6BAA6B;IAC7B,SAAS,EAAE,iBAAiB,CAAA;IAC5B,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,mDAAmD;IACnD,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;IAChD,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,QAAQ,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,KAAK,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC1B,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IACjC,2BAA2B;IAC3B,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAA;IACvC,sCAAsC;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,mBAAmB;IACnB,OAAO,IAAI,QAAQ,EAAE,CAAA;IACrB,2BAA2B;IAC3B,cAAc,IAAI,UAAU,EAAE,CAAA;IAC9B,8BAA8B;IAC9B,iBAAiB,IAAI,aAAa,EAAE,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAClE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAClF,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAClE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACnE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,WAAW,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA;CAC5C;AAiED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,IAAI,CAEhE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AA8ID;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,MAAM,EAAE,MAA+B,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAO1B,CAAA;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,EACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,UAAU,CAUZ;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,iBAAiB,EAC5B,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAChD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,aAAa,CAUf"}