@skillsmith/core 0.5.4 → 0.5.6

package/dist/db/migrations/v5-skill-versions.js

@@ -0,0 +1,45 @@
+/**
+ * @fileoverview Migration v5 — skill_versions table
+ * @module @skillsmith/core/db/migrations/v5-skill-versions
+ * @see SMI-skill-version-tracking Wave 1
+ *
+ * Creates the skill_versions table for persistent content-hash-based
+ * version tracking. Deliberately uses no FK constraint on skill_id so
+ * that version history is preserved even when a skill is removed from
+ * the registry (soft reference by design).
+ *
+ * No change_type column in this migration — deferred to Wave 2 per plan.
+ */
+/**
+ * SQL for the skill_versions migration (v5).
+ *
+ * Table columns:
+ *  - id           AUTOINCREMENT surrogate key
+ *  - skill_id     Registry skill identifier (TEXT, not FK)
+ *  - content_hash SHA-256 hex digest of skill content proxy
+ *  - recorded_at  Unix epoch seconds (DEFAULT unixepoch())
+ *  - semver       Optional semver string from skill metadata
+ *  - metadata     Optional JSON blob for future extension
+ *
+ * Indexes:
+ *  - UNIQUE (skill_id, content_hash) — makes recordVersion idempotent
+ *    via INSERT OR IGNORE
+ *  - (skill_id, recorded_at DESC) — efficient "latest version" queries
+ */
+export const MIGRATION_V5_SQL = `
+CREATE TABLE IF NOT EXISTS skill_versions (
+  id           INTEGER PRIMARY KEY AUTOINCREMENT,
+  skill_id     TEXT    NOT NULL,
+  content_hash TEXT    NOT NULL,
+  recorded_at  INTEGER NOT NULL DEFAULT (unixepoch()),
+  semver       TEXT,
+  metadata     TEXT
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_skill_versions_skill_hash
+  ON skill_versions(skill_id, content_hash);
+
+CREATE INDEX IF NOT EXISTS idx_skill_versions_skill_recorded
+  ON skill_versions(skill_id, recorded_at DESC);
+`;
+//# sourceMappingURL=v5-skill-versions.js.map

package/dist/db/migrations/v5-skill-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v5-skill-versions.js","sourceRoot":"","sources":["../../../src/db/migrations/v5-skill-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;CAe/B,CAAA"}

package/dist/db/migrations/v5b-change-type.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @fileoverview Migration v5b — add change_type column to skill_versions
+ * @module @skillsmith/core/db/migrations/v5b-change-type
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Additive ALTER TABLE on skill_versions; does not increment SCHEMA_VERSION
+ * (stays at 5) because the migration system handles duplicate-column errors
+ * gracefully and the new column is nullable with no FK implications.
+ *
+ * Valid change_type values: 'major' | 'minor' | 'patch' | 'unknown'
+ */
+/**
+ * SQL for the skill_versions change_type migration (v5b).
+ *
+ * Adds a TEXT column constrained to the four valid change-classification
+ * values. NULL is allowed so that existing rows are unaffected.
+ */
+export declare const MIGRATION_V5B_SQL = "\nALTER TABLE skill_versions ADD COLUMN change_type TEXT\n  CHECK(change_type IN ('major', 'minor', 'patch', 'unknown'));\n";
+//# sourceMappingURL=v5b-change-type.d.ts.map

package/dist/db/migrations/v5b-change-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v5b-change-type.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/v5b-change-type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,gIAG7B,CAAA"}

package/dist/db/migrations/v5b-change-type.js

@@ -0,0 +1,22 @@
+/**
+ * @fileoverview Migration v5b — add change_type column to skill_versions
+ * @module @skillsmith/core/db/migrations/v5b-change-type
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Additive ALTER TABLE on skill_versions; does not increment SCHEMA_VERSION
+ * (stays at 5) because the migration system handles duplicate-column errors
+ * gracefully and the new column is nullable with no FK implications.
+ *
+ * Valid change_type values: 'major' | 'minor' | 'patch' | 'unknown'
+ */
+/**
+ * SQL for the skill_versions change_type migration (v5b).
+ *
+ * Adds a TEXT column constrained to the four valid change-classification
+ * values. NULL is allowed so that existing rows are unaffected.
+ */
+export const MIGRATION_V5B_SQL = `
+ALTER TABLE skill_versions ADD COLUMN change_type TEXT
+  CHECK(change_type IN ('major', 'minor', 'patch', 'unknown'));
+`;
+//# sourceMappingURL=v5b-change-type.js.map

package/dist/db/migrations/v5b-change-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v5b-change-type.js","sourceRoot":"","sources":["../../../src/db/migrations/v5b-change-type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;CAGhC,CAAA"}

package/dist/db/migrations/v6-advisories.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @fileoverview Migration v6 — skill_advisories table
+ * @module @skillsmith/core/db/migrations/v6-advisories
+ * @see SMI-skill-version-tracking Wave 3
+ *
+ * Creates the skill_advisories table for vulnerability advisory infrastructure.
+ * skill_id is a soft reference — no FK to skills(id), same pattern as skill_versions,
+ * so advisory history survives skill removal from the registry.
+ */
+/**
+ * SQL for the skill_advisories migration (v6).
+ *
+ * Table columns:
+ *  - id               SSA-YYYY-NNN format advisory identifier (TEXT PK)
+ *  - skill_id         Registry skill identifier (TEXT, not FK — soft reference)
+ *  - severity         Advisory severity level (low|medium|high|critical)
+ *  - title            Short advisory title
+ *  - description      Full advisory description
+ *  - affected_versions  JSON array of affected version ranges
+ *  - patched_versions   JSON array of patched version ranges
+ *  - cwe_ids          JSON array of CWE identifiers
+ *  - references       JSON array of reference URLs
+ *  - published_at     ISO datetime when advisory was published
+ *  - withdrawn_at     ISO datetime if advisory was retracted (NULL = still active)
+ *  - created_at       Row creation timestamp
+ *
+ * Indexes:
+ *  - (skill_id) — efficient per-skill advisory queries
+ *  - (severity) — efficient severity-filtered queries
+ */
+export declare const MIGRATION_V6_SQL = "\nCREATE TABLE IF NOT EXISTS skill_advisories (\n  id                TEXT    PRIMARY KEY,\n  skill_id          TEXT    NOT NULL,\n  severity          TEXT    NOT NULL CHECK(severity IN ('low', 'medium', 'high', 'critical')),\n  title             TEXT    NOT NULL,\n  description       TEXT    NOT NULL,\n  affected_versions TEXT,\n  patched_versions  TEXT,\n  cwe_ids           TEXT,\n  advisory_refs     TEXT,\n  published_at      TEXT    NOT NULL,\n  withdrawn_at      TEXT,\n  created_at        TEXT    NOT NULL DEFAULT (datetime('now'))\n);\n\nCREATE INDEX IF NOT EXISTS idx_skill_advisories_skill_id\n  ON skill_advisories(skill_id);\n\nCREATE INDEX IF NOT EXISTS idx_skill_advisories_severity\n  ON skill_advisories(severity);\n";
+//# sourceMappingURL=v6-advisories.d.ts.map

package/dist/db/migrations/v6-advisories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v6-advisories.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/v6-advisories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,muBAqB5B,CAAA"}

package/dist/db/migrations/v6-advisories.js

@@ -0,0 +1,53 @@
+/**
+ * @fileoverview Migration v6 — skill_advisories table
+ * @module @skillsmith/core/db/migrations/v6-advisories
+ * @see SMI-skill-version-tracking Wave 3
+ *
+ * Creates the skill_advisories table for vulnerability advisory infrastructure.
+ * skill_id is a soft reference — no FK to skills(id), same pattern as skill_versions,
+ * so advisory history survives skill removal from the registry.
+ */
+/**
+ * SQL for the skill_advisories migration (v6).
+ *
+ * Table columns:
+ *  - id               SSA-YYYY-NNN format advisory identifier (TEXT PK)
+ *  - skill_id         Registry skill identifier (TEXT, not FK — soft reference)
+ *  - severity         Advisory severity level (low|medium|high|critical)
+ *  - title            Short advisory title
+ *  - description      Full advisory description
+ *  - affected_versions  JSON array of affected version ranges
+ *  - patched_versions   JSON array of patched version ranges
+ *  - cwe_ids          JSON array of CWE identifiers
+ *  - references       JSON array of reference URLs
+ *  - published_at     ISO datetime when advisory was published
+ *  - withdrawn_at     ISO datetime if advisory was retracted (NULL = still active)
+ *  - created_at       Row creation timestamp
+ *
+ * Indexes:
+ *  - (skill_id) — efficient per-skill advisory queries
+ *  - (severity) — efficient severity-filtered queries
+ */
+export const MIGRATION_V6_SQL = `
+CREATE TABLE IF NOT EXISTS skill_advisories (
+  id                TEXT    PRIMARY KEY,
+  skill_id          TEXT    NOT NULL,
+  severity          TEXT    NOT NULL CHECK(severity IN ('low', 'medium', 'high', 'critical')),
+  title             TEXT    NOT NULL,
+  description       TEXT    NOT NULL,
+  affected_versions TEXT,
+  patched_versions  TEXT,
+  cwe_ids           TEXT,
+  advisory_refs     TEXT,
+  published_at      TEXT    NOT NULL,
+  withdrawn_at      TEXT,
+  created_at        TEXT    NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_skill_advisories_skill_id
+  ON skill_advisories(skill_id);
+
+CREATE INDEX IF NOT EXISTS idx_skill_advisories_severity
+  ON skill_advisories(severity);
+`;
+//# sourceMappingURL=v6-advisories.js.map

package/dist/db/migrations/v6-advisories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v6-advisories.js","sourceRoot":"","sources":["../../../src/db/migrations/v6-advisories.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAA"}

package/dist/db/migrations/v7-compatibility.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @fileoverview Migration v7 — compatibility column on skills table
+ * @module @skillsmith/core/db/migrations/v7-compatibility
+ * @see SMI-2760: Compatibility tags
+ *
+ * Adds the compatibility column to the skills table for IDE, LLM, and
+ * platform compatibility tags. Stored as a JSON array in SQLite TEXT;
+ * the companion Supabase migration uses JSONB with a GIN index.
+ *
+ * JSON shape: ["claude-code", "cursor", "claude", "gpt-4o"]
+ * A flat array is used for simpler SQLite json_each queries vs a nested
+ * { ides: [...], llms: [...] } object. The MCP search filter accepts
+ * the structured form and flattens it for DB comparison.
+ *
+ * Index:
+ *  - None added here (SQLite does not support GIN). The Supabase Postgres
+ *    migration adds: CREATE INDEX idx_skills_compatibility_gin ON skills
+ *    USING gin(compatibility);
+ */
+export declare const MIGRATION_V7_SQL = "\nALTER TABLE skills ADD COLUMN compatibility TEXT DEFAULT '[]';\n";
+//# sourceMappingURL=v7-compatibility.d.ts.map

package/dist/db/migrations/v7-compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v7-compatibility.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/v7-compatibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gBAAgB,uEAE5B,CAAA"}

package/dist/db/migrations/v7-compatibility.js

@@ -0,0 +1,23 @@
+/**
+ * @fileoverview Migration v7 — compatibility column on skills table
+ * @module @skillsmith/core/db/migrations/v7-compatibility
+ * @see SMI-2760: Compatibility tags
+ *
+ * Adds the compatibility column to the skills table for IDE, LLM, and
+ * platform compatibility tags. Stored as a JSON array in SQLite TEXT;
+ * the companion Supabase migration uses JSONB with a GIN index.
+ *
+ * JSON shape: ["claude-code", "cursor", "claude", "gpt-4o"]
+ * A flat array is used for simpler SQLite json_each queries vs a nested
+ * { ides: [...], llms: [...] } object. The MCP search filter accepts
+ * the structured form and flattens it for DB comparison.
+ *
+ * Index:
+ *  - None added here (SQLite does not support GIN). The Supabase Postgres
+ *    migration adds: CREATE INDEX idx_skills_compatibility_gin ON skills
+ *    USING gin(compatibility);
+ */
+export const MIGRATION_V7_SQL = `
+ALTER TABLE skills ADD COLUMN compatibility TEXT DEFAULT '[]';
+`;
+//# sourceMappingURL=v7-compatibility.js.map

package/dist/db/migrations/v7-compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v7-compatibility.js","sourceRoot":"","sources":["../../../src/db/migrations/v7-compatibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;CAE/B,CAAA"}

package/dist/db/migrations/v8-co-installs.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @fileoverview Migration v8 — skill_co_installs table
+ * @module @skillsmith/core/db/migrations/v8-co-installs
+ * @see SMI-2761: Co-install recommendations
+ *
+ * Session-scoped co-install tracking: when a user installs multiple skills
+ * in the same MCP session, all installed-together pairs are recorded.
+ *
+ * Design notes:
+ *  - (skill_id_a, skill_id_b) is always stored in both orderings for
+ *    symmetric queries — INSERT (A,B) and INSERT (B,A) together.
+ *  - install_count is incremented on conflict (upsert pattern).
+ *  - no_self_install constraint prevents (X, X) rows.
+ *  - Surfacing threshold: install_count >= 5 before including in response.
+ *
+ * Indexes:
+ *  - idx_co_installs_a: efficient "what did users also install?" queries
+ *    sorted by frequency descending.
+ */
+export declare const MIGRATION_V8_SQL = "\nCREATE TABLE IF NOT EXISTS skill_co_installs (\n  skill_id_a TEXT NOT NULL,\n  skill_id_b TEXT NOT NULL,\n  install_count INTEGER NOT NULL DEFAULT 1 CHECK (install_count >= 1),\n  last_updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n  PRIMARY KEY (skill_id_a, skill_id_b),\n  CONSTRAINT no_self_install CHECK (skill_id_a != skill_id_b)\n);\n\nCREATE INDEX IF NOT EXISTS idx_co_installs_a\n  ON skill_co_installs(skill_id_a, install_count DESC);\n";
+//# sourceMappingURL=v8-co-installs.d.ts.map

package/dist/db/migrations/v8-co-installs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v8-co-installs.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/v8-co-installs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gBAAgB,0cAY5B,CAAA"}

package/dist/db/migrations/v8-co-installs.js

@@ -0,0 +1,33 @@
+/**
+ * @fileoverview Migration v8 — skill_co_installs table
+ * @module @skillsmith/core/db/migrations/v8-co-installs
+ * @see SMI-2761: Co-install recommendations
+ *
+ * Session-scoped co-install tracking: when a user installs multiple skills
+ * in the same MCP session, all installed-together pairs are recorded.
+ *
+ * Design notes:
+ *  - (skill_id_a, skill_id_b) is always stored in both orderings for
+ *    symmetric queries — INSERT (A,B) and INSERT (B,A) together.
+ *  - install_count is incremented on conflict (upsert pattern).
+ *  - no_self_install constraint prevents (X, X) rows.
+ *  - Surfacing threshold: install_count >= 5 before including in response.
+ *
+ * Indexes:
+ *  - idx_co_installs_a: efficient "what did users also install?" queries
+ *    sorted by frequency descending.
+ */
+export const MIGRATION_V8_SQL = `
+CREATE TABLE IF NOT EXISTS skill_co_installs (
+  skill_id_a TEXT NOT NULL,
+  skill_id_b TEXT NOT NULL,
+  install_count INTEGER NOT NULL DEFAULT 1 CHECK (install_count >= 1),
+  last_updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (skill_id_a, skill_id_b),
+  CONSTRAINT no_self_install CHECK (skill_id_a != skill_id_b)
+);
+
+CREATE INDEX IF NOT EXISTS idx_co_installs_a
+  ON skill_co_installs(skill_id_a, install_count DESC);
+`;
+//# sourceMappingURL=v8-co-installs.js.map

package/dist/db/migrations/v8-co-installs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v8-co-installs.js","sourceRoot":"","sources":["../../../src/db/migrations/v8-co-installs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;CAY/B,CAAA"}

package/dist/db/quarantine-approvals-schema.d.ts

@@ -0,0 +1,37 @@
+/**
+ * SMI-2277: Quarantine Approvals Schema
+ *
+ * Database schema for persisting multi-approval state. Replaces the
+ * in-memory Map<string, ApprovalState> that was lost on service restart.
+ *
+ * Note on type mappings:
+ * - `reviewer_id` is TEXT here (SQLite) but UUID in the Supabase migration.
+ *   In production, values are always UUIDs from auth providers. Tests may
+ *   use human-readable strings like 'user-456' for clarity.
+ * - `is_complete` is INTEGER 0/1 here (SQLite has no native boolean) but
+ *   BOOLEAN in the PostgreSQL migration. Queries in ApprovalRepository use
+ *   integer literals (0/1) which are SQLite-specific.
+ * - `created_at` uses `datetime('now') || 'Z'` to produce UTC ISO-8601
+ *   strings (e.g. '2026-02-13 12:00:00Z') so Date parsing is unambiguous.
+ *
+ * @module @skillsmith/core/db/quarantine-approvals-schema
+ */
+import type { Database as DatabaseType } from './database-interface.js';
+/**
+ * SQL statement to create the quarantine_approvals table
+ */
+export declare const QUARANTINE_APPROVALS_SCHEMA_SQL = "\n-- SMI-2277: Quarantine multi-approval persistence\nCREATE TABLE IF NOT EXISTS quarantine_approvals (\n  id TEXT PRIMARY KEY,\n  skill_id TEXT NOT NULL,\n  reviewer_id TEXT NOT NULL,\n  reviewer_email TEXT NOT NULL,\n  decision TEXT NOT NULL CHECK(decision IN ('approved', 'rejected')),\n  reason TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now') || 'Z'),\n  completed_at TEXT,\n  required_approvals INTEGER NOT NULL DEFAULT 2,\n  is_complete INTEGER NOT NULL DEFAULT 0\n);\n\n-- Index for efficient lookup by skill_id (most common query path)\nCREATE INDEX IF NOT EXISTS idx_quarantine_approvals_skill_id\n  ON quarantine_approvals(skill_id);\n\n-- Enforce one pending review per reviewer per skill (defense-in-depth)\nCREATE UNIQUE INDEX IF NOT EXISTS idx_quarantine_approvals_reviewer_unique\n  ON quarantine_approvals(skill_id, reviewer_id)\n  WHERE is_complete = 0;\n\n-- Efficient count of pending approvals (used by isComplete check)\nCREATE INDEX IF NOT EXISTS idx_quarantine_approvals_pending\n  ON quarantine_approvals(skill_id, decision)\n  WHERE is_complete = 0;\n";
+/**
+ * Initialize the quarantine_approvals schema in the database
+ *
+ * @param db - Database connection
+ */
+export declare function initializeQuarantineApprovalsSchema(db: DatabaseType): void;
+/**
+ * Check if the quarantine_approvals table exists
+ *
+ * @param db - Database connection
+ * @returns True if quarantine_approvals table exists
+ */
+export declare function hasQuarantineApprovalsTable(db: DatabaseType): boolean;
+//# sourceMappingURL=quarantine-approvals-schema.d.ts.map

package/dist/db/quarantine-approvals-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-approvals-schema.d.ts","sourceRoot":"","sources":["../../src/db/quarantine-approvals-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAEvE;;GAEG;AACH,eAAO,MAAM,+BAA+B,okCA4B3C,CAAA;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAKrE"}

package/dist/db/quarantine-approvals-schema.js

@@ -0,0 +1,71 @@
+/**
+ * SMI-2277: Quarantine Approvals Schema
+ *
+ * Database schema for persisting multi-approval state. Replaces the
+ * in-memory Map<string, ApprovalState> that was lost on service restart.
+ *
+ * Note on type mappings:
+ * - `reviewer_id` is TEXT here (SQLite) but UUID in the Supabase migration.
+ *   In production, values are always UUIDs from auth providers. Tests may
+ *   use human-readable strings like 'user-456' for clarity.
+ * - `is_complete` is INTEGER 0/1 here (SQLite has no native boolean) but
+ *   BOOLEAN in the PostgreSQL migration. Queries in ApprovalRepository use
+ *   integer literals (0/1) which are SQLite-specific.
+ * - `created_at` uses `datetime('now') || 'Z'` to produce UTC ISO-8601
+ *   strings (e.g. '2026-02-13 12:00:00Z') so Date parsing is unambiguous.
+ *
+ * @module @skillsmith/core/db/quarantine-approvals-schema
+ */
+/**
+ * SQL statement to create the quarantine_approvals table
+ */
+export const QUARANTINE_APPROVALS_SCHEMA_SQL = `
+-- SMI-2277: Quarantine multi-approval persistence
+CREATE TABLE IF NOT EXISTS quarantine_approvals (
+  id TEXT PRIMARY KEY,
+  skill_id TEXT NOT NULL,
+  reviewer_id TEXT NOT NULL,
+  reviewer_email TEXT NOT NULL,
+  decision TEXT NOT NULL CHECK(decision IN ('approved', 'rejected')),
+  reason TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now') || 'Z'),
+  completed_at TEXT,
+  required_approvals INTEGER NOT NULL DEFAULT 2,
+  is_complete INTEGER NOT NULL DEFAULT 0
+);
+
+-- Index for efficient lookup by skill_id (most common query path)
+CREATE INDEX IF NOT EXISTS idx_quarantine_approvals_skill_id
+  ON quarantine_approvals(skill_id);
+
+-- Enforce one pending review per reviewer per skill (defense-in-depth)
+CREATE UNIQUE INDEX IF NOT EXISTS idx_quarantine_approvals_reviewer_unique
+  ON quarantine_approvals(skill_id, reviewer_id)
+  WHERE is_complete = 0;
+
+-- Efficient count of pending approvals (used by isComplete check)
+CREATE INDEX IF NOT EXISTS idx_quarantine_approvals_pending
+  ON quarantine_approvals(skill_id, decision)
+  WHERE is_complete = 0;
+`;
+/**
+ * Initialize the quarantine_approvals schema in the database
+ *
+ * @param db - Database connection
+ */
+export function initializeQuarantineApprovalsSchema(db) {
+    db.exec(QUARANTINE_APPROVALS_SCHEMA_SQL);
+}
+/**
+ * Check if the quarantine_approvals table exists
+ *
+ * @param db - Database connection
+ * @returns True if quarantine_approvals table exists
+ */
+export function hasQuarantineApprovalsTable(db) {
+    const result = db
+        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='quarantine_approvals'")
+        .get();
+    return !!result;
+}
+//# sourceMappingURL=quarantine-approvals-schema.js.map

package/dist/db/quarantine-approvals-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-approvals-schema.js","sourceRoot":"","sources":["../../src/db/quarantine-approvals-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4B9C,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,EAAgB;IAClE,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAAgB;IAC1D,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CAAC,mFAAmF,CAAC;SAC5F,GAAG,EAAE,CAAA;IACR,OAAO,CAAC,CAAC,MAAM,CAAA;AACjB,CAAC"}

package/dist/db/quarantine-schema.d.ts

@@ -0,0 +1,81 @@
+/**
+ * SMI-865: Quarantine Management System Database Schema
+ *
+ * Provides database schema for skill quarantine management:
+ * - Quarantine table with severity levels and review status
+ * - Indexes for efficient querying
+ * - Migration support for existing databases
+ *
+ * Severity Categories:
+ * - MALICIOUS: Permanent quarantine, security threat detected
+ * - SUSPICIOUS: Manual review required before import
+ * - RISKY: Can import with warnings displayed
+ * - LOW_QUALITY: Can import with reduced quality score
+ */
+import type { Database as DatabaseType } from './database-interface.js';
+/**
+ * Severity levels for quarantined skills
+ */
+export type QuarantineSeverity = 'MALICIOUS' | 'SUSPICIOUS' | 'RISKY' | 'LOW_QUALITY';
+/**
+ * Review status for quarantined skills
+ */
+export type QuarantineReviewStatus = 'pending' | 'approved' | 'rejected';
+/**
+ * Quarantine severity descriptions and policies
+ */
+export declare const QUARANTINE_SEVERITY_POLICIES: {
+    readonly MALICIOUS: {
+        readonly level: 4;
+        readonly description: "Permanent quarantine - security threat detected";
+        readonly allowImport: false;
+        readonly requiresReview: true;
+        readonly autoReject: false;
+    };
+    readonly SUSPICIOUS: {
+        readonly level: 3;
+        readonly description: "Manual review required before import";
+        readonly allowImport: false;
+        readonly requiresReview: true;
+        readonly autoReject: false;
+    };
+    readonly RISKY: {
+        readonly level: 2;
+        readonly description: "Can import with warnings displayed";
+        readonly allowImport: true;
+        readonly requiresReview: false;
+        readonly autoReject: false;
+    };
+    readonly LOW_QUALITY: {
+        readonly level: 1;
+        readonly description: "Can import with reduced quality score";
+        readonly allowImport: true;
+        readonly requiresReview: false;
+        readonly autoReject: false;
+    };
+};
+/**
+ * SQL statement to create the quarantine table
+ */
+export declare const QUARANTINE_SCHEMA_SQL = "\n-- SMI-865: Quarantine table for skill security management\nCREATE TABLE IF NOT EXISTS quarantine (\n  id TEXT PRIMARY KEY,\n  skill_id TEXT NOT NULL,\n  source TEXT NOT NULL,\n  quarantine_reason TEXT NOT NULL,\n  severity TEXT NOT NULL CHECK(severity IN ('MALICIOUS', 'SUSPICIOUS', 'RISKY', 'LOW_QUALITY')),\n  detected_patterns TEXT DEFAULT '[]', -- JSON array of detected security patterns\n  quarantine_date TEXT NOT NULL DEFAULT (datetime('now')),\n  reviewed_by TEXT,\n  review_status TEXT NOT NULL CHECK(review_status IN ('pending', 'approved', 'rejected')) DEFAULT 'pending',\n  review_notes TEXT,\n  review_date TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  updated_at TEXT NOT NULL DEFAULT (datetime('now'))\n);\n\n-- Indexes for efficient querying\nCREATE INDEX IF NOT EXISTS idx_quarantine_skill_id ON quarantine(skill_id);\nCREATE INDEX IF NOT EXISTS idx_quarantine_severity ON quarantine(severity);\nCREATE INDEX IF NOT EXISTS idx_quarantine_review_status ON quarantine(review_status);\nCREATE INDEX IF NOT EXISTS idx_quarantine_source ON quarantine(source);\nCREATE INDEX IF NOT EXISTS idx_quarantine_date ON quarantine(quarantine_date);\nCREATE INDEX IF NOT EXISTS idx_quarantine_reviewed_by ON quarantine(reviewed_by);\n";
+/**
+ * Initialize the quarantine schema in the database
+ *
+ * @param db - Database connection
+ */
+export declare function initializeQuarantineSchema(db: DatabaseType): void;
+/**
+ * Check if the quarantine table exists
+ *
+ * @param db - Database connection
+ * @returns True if quarantine table exists
+ */
+export declare function hasQuarantineTable(db: DatabaseType): boolean;
+/**
+ * Run quarantine schema migration if needed
+ *
+ * @param db - Database connection
+ * @returns True if migration was run
+ */
+export declare function migrateQuarantineSchema(db: DatabaseType): boolean;
+//# sourceMappingURL=quarantine-schema.d.ts.map

package/dist/db/quarantine-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-schema.d.ts","sourceRoot":"","sources":["../../src/db/quarantine-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAEvE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,GAAG,aAAa,CAAA;AAErF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAExE;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B/B,CAAA;AAEV;;GAEG;AACH,eAAO,MAAM,qBAAqB,+uCAyBjC,CAAA;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAK5D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAMjE"}

package/dist/db/quarantine-schema.js

@@ -0,0 +1,110 @@
+/**
+ * SMI-865: Quarantine Management System Database Schema
+ *
+ * Provides database schema for skill quarantine management:
+ * - Quarantine table with severity levels and review status
+ * - Indexes for efficient querying
+ * - Migration support for existing databases
+ *
+ * Severity Categories:
+ * - MALICIOUS: Permanent quarantine, security threat detected
+ * - SUSPICIOUS: Manual review required before import
+ * - RISKY: Can import with warnings displayed
+ * - LOW_QUALITY: Can import with reduced quality score
+ */
+/**
+ * Quarantine severity descriptions and policies
+ */
+export const QUARANTINE_SEVERITY_POLICIES = {
+    MALICIOUS: {
+        level: 4,
+        description: 'Permanent quarantine - security threat detected',
+        allowImport: false,
+        requiresReview: true,
+        autoReject: false,
+    },
+    SUSPICIOUS: {
+        level: 3,
+        description: 'Manual review required before import',
+        allowImport: false,
+        requiresReview: true,
+        autoReject: false,
+    },
+    RISKY: {
+        level: 2,
+        description: 'Can import with warnings displayed',
+        allowImport: true,
+        requiresReview: false,
+        autoReject: false,
+    },
+    LOW_QUALITY: {
+        level: 1,
+        description: 'Can import with reduced quality score',
+        allowImport: true,
+        requiresReview: false,
+        autoReject: false,
+    },
+};
+/**
+ * SQL statement to create the quarantine table
+ */
+export const QUARANTINE_SCHEMA_SQL = `
+-- SMI-865: Quarantine table for skill security management
+CREATE TABLE IF NOT EXISTS quarantine (
+  id TEXT PRIMARY KEY,
+  skill_id TEXT NOT NULL,
+  source TEXT NOT NULL,
+  quarantine_reason TEXT NOT NULL,
+  severity TEXT NOT NULL CHECK(severity IN ('MALICIOUS', 'SUSPICIOUS', 'RISKY', 'LOW_QUALITY')),
+  detected_patterns TEXT DEFAULT '[]', -- JSON array of detected security patterns
+  quarantine_date TEXT NOT NULL DEFAULT (datetime('now')),
+  reviewed_by TEXT,
+  review_status TEXT NOT NULL CHECK(review_status IN ('pending', 'approved', 'rejected')) DEFAULT 'pending',
+  review_notes TEXT,
+  review_date TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+-- Indexes for efficient querying
+CREATE INDEX IF NOT EXISTS idx_quarantine_skill_id ON quarantine(skill_id);
+CREATE INDEX IF NOT EXISTS idx_quarantine_severity ON quarantine(severity);
+CREATE INDEX IF NOT EXISTS idx_quarantine_review_status ON quarantine(review_status);
+CREATE INDEX IF NOT EXISTS idx_quarantine_source ON quarantine(source);
+CREATE INDEX IF NOT EXISTS idx_quarantine_date ON quarantine(quarantine_date);
+CREATE INDEX IF NOT EXISTS idx_quarantine_reviewed_by ON quarantine(reviewed_by);
+`;
+/**
+ * Initialize the quarantine schema in the database
+ *
+ * @param db - Database connection
+ */
+export function initializeQuarantineSchema(db) {
+    db.exec(QUARANTINE_SCHEMA_SQL);
+}
+/**
+ * Check if the quarantine table exists
+ *
+ * @param db - Database connection
+ * @returns True if quarantine table exists
+ */
+export function hasQuarantineTable(db) {
+    const result = db
+        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='quarantine'")
+        .get();
+    return !!result;
+}
+/**
+ * Run quarantine schema migration if needed
+ *
+ * @param db - Database connection
+ * @returns True if migration was run
+ */
+export function migrateQuarantineSchema(db) {
+    if (!hasQuarantineTable(db)) {
+        initializeQuarantineSchema(db);
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=quarantine-schema.js.map

package/dist/db/quarantine-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-schema.js","sourceRoot":"","sources":["../../src/db/quarantine-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS,EAAE;QACT,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,iDAAiD;QAC9D,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,KAAK;KAClB;IACD,UAAU,EAAE;QACV,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,KAAK;KAClB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,WAAW,EAAE;QACX,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,uCAAuC;QACpD,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE,KAAK;KAClB;CACO,CAAA;AAEV;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpC,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,EAAgB;IACzD,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAgB;IACjD,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CAAC,yEAAyE,CAAC;SAClF,GAAG,EAAE,CAAA;IACR,OAAO,CAAC,CAAC,MAAM,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAgB;IACtD,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5B,0BAA0B,CAAC,EAAE,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}