@skillsmith/core 0.5.5 → 0.5.6

package/dist/types/dependencies.d.ts

@@ -0,0 +1,85 @@
+/**
+ * @fileoverview Dependency type definitions for Skill Dependency Intelligence
+ * @module @skillsmith/core/types/dependencies
+ * @see SMI-3142: Create dependency type definitions
+ *
+ * These types model the structured dependency declarations in SKILL.md
+ * frontmatter and the corresponding database row shape in
+ * skill_dependencies (migration v10).
+ */
+/** Top-level dependency declaration from SKILL.md frontmatter */
+export interface DependencyDeclaration {
+    skills?: SkillDep[];
+    platform?: PlatformDep;
+    models?: ModelDep;
+    environment?: EnvironmentDep;
+}
+/** A skill-to-skill dependency */
+export interface SkillDep {
+    name: string;
+    version?: string;
+    type: 'hard' | 'soft' | 'peer';
+    reason?: string;
+}
+/** Platform-level dependencies (CLI version, MCP servers) */
+export interface PlatformDep {
+    cli?: string;
+    mcp_servers?: McpServerDep[];
+}
+/** An MCP server dependency */
+export interface McpServerDep {
+    name: string;
+    package?: string;
+    required: boolean;
+}
+/** Model-level requirements */
+export interface ModelDep {
+    minimum?: string;
+    recommended?: string;
+    capabilities?: string[];
+    context_window?: number;
+}
+/** Environment-level requirements (tools, OS, Node version) */
+export interface EnvironmentDep {
+    tools?: ToolDep[];
+    os?: string[];
+    node?: string;
+}
+/** An external tool dependency */
+export interface ToolDep {
+    name: string;
+    required: boolean;
+    check?: string;
+}
+/** A conflict declaration — skills that must not coexist */
+export interface ConflictDeclaration {
+    name: string;
+    versions?: string;
+    reason?: string;
+}
+/** Database row shape matching skill_dependencies table */
+export interface SkillDependencyRow {
+    id?: number;
+    skill_id: string;
+    dep_type: DepType;
+    dep_target: string;
+    dep_version: string | null;
+    dep_source: DepSource;
+    confidence: number | null;
+    metadata: string | null;
+    created_at?: string;
+    updated_at?: string;
+}
+/**
+ * Discriminated dependency type — maps to the dep_type CHECK constraint
+ * in migration v10.
+ */
+export type DepType = 'skill_hard' | 'skill_soft' | 'skill_peer' | 'mcp_server' | 'model_minimum' | 'model_capability' | 'env_tool' | 'env_os' | 'env_node' | 'cli_version' | 'conflict';
+/**
+ * How the dependency was discovered.
+ * - declared: author wrote it in SKILL.md frontmatter
+ * - inferred_static: detected via mcp__* tool-call analysis
+ * - inferred_coinstall: derived from co-install behavioral data
+ */
+export type DepSource = 'declared' | 'inferred_static' | 'inferred_coinstall';
+//# sourceMappingURL=dependencies.d.ts.map

package/dist/types/dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/types/dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IACnB,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,WAAW,CAAC,EAAE,cAAc,CAAA;CAC7B;AAED,kCAAkC;AAClC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,YAAY,EAAE,CAAA;CAC7B;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,+BAA+B;AAC/B,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;IACjB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,kCAAkC;AAClC,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,SAAS,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,OAAO,GACf,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,kBAAkB,GAClB,UAAU,GACV,QAAQ,GACR,UAAU,GACV,aAAa,GACb,UAAU,CAAA;AAEd;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,iBAAiB,GAAG,oBAAoB,CAAA"}

package/dist/types/dependencies.js

@@ -0,0 +1,11 @@
+/**
+ * @fileoverview Dependency type definitions for Skill Dependency Intelligence
+ * @module @skillsmith/core/types/dependencies
+ * @see SMI-3142: Create dependency type definitions
+ *
+ * These types model the structured dependency declarations in SKILL.md
+ * frontmatter and the corresponding database row shape in
+ * skill_dependencies (migration v10).
+ */
+export {};
+//# sourceMappingURL=dependencies.js.map

package/dist/types/dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/types/dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/types/skill.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Core type definitions for Skillsmith skills
+ */
+import type { DependencyDeclaration } from './dependencies.js';
+/**
+ * SMI-1809: Added 'local' for local skills from ~/.claude/skills/
+ *
+ * NOTE: 'local' is a client-only tier for skills discovered on disk.
+ * It is NOT stored in the database — the skills table CHECK constraint
+ * only allows: verified, curated, community, experimental, unknown.
+ * Never pass 'local' to database upsert operations.
+ */
+export type TrustTier = 'verified' | 'curated' | 'community' | 'experimental' | 'unknown' | 'local';
+/**
+ * SMI-1631: Skill roles for role-based recommendations
+ * Used to filter and prioritize skills based on their primary purpose
+ */
+export type SkillRole = 'code-quality' | 'testing' | 'documentation' | 'workflow' | 'security' | 'development-partner';
+/**
+ * Valid skill roles array for validation
+ */
+export declare const SKILL_ROLES: readonly SkillRole[];
+export interface Skill {
+    id: string;
+    name: string;
+    description: string | null;
+    author: string | null;
+    repoUrl: string | null;
+    qualityScore: number | null;
+    trustTier: TrustTier;
+    tags: string[];
+    /** SMI-1631: Skill roles for role-based filtering */
+    roles?: SkillRole[];
+    installable: boolean;
+    riskScore: number | null;
+    securityFindingsCount: number;
+    securityScannedAt: string | null;
+    securityPassed: boolean | null;
+    /** SMI-2760: Flat array of compatible IDE/LLM/platform slugs */
+    compatibility?: string[];
+    /** SMI-3135: Structured dependency declaration */
+    dependencies?: DependencyDeclaration;
+    createdAt: string;
+    updatedAt: string;
+    /** SHA-256 hex of the most recently recorded content proxy (optional, populated by SkillVersionRepository) */
+    latestContentHash?: string;
+    /** Number of distinct content hashes recorded for this skill */
+    versionCount?: number;
+}
+export interface SkillCreateInput {
+    id?: string;
+    name: string;
+    description?: string | null;
+    author?: string | null;
+    repoUrl?: string | null;
+    qualityScore?: number | null;
+    trustTier?: TrustTier;
+    tags?: string[];
+    /** SMI-1631: Skill roles for role-based filtering */
+    roles?: SkillRole[];
+    installable?: boolean;
+    riskScore?: number | null;
+    securityFindingsCount?: number;
+    securityScannedAt?: string | null;
+    securityPassed?: boolean | null;
+    /** SMI-2760: Flat array of compatible IDE/LLM/platform slugs */
+    compatibility?: string[];
+}
+export interface SkillUpdateInput {
+    name?: string;
+    description?: string | null;
+    author?: string | null;
+    repoUrl?: string | null;
+    qualityScore?: number | null;
+    trustTier?: TrustTier;
+    tags?: string[];
+    /** SMI-1631: Skill roles for role-based filtering */
+    roles?: SkillRole[];
+    installable?: boolean;
+    riskScore?: number | null;
+    securityFindingsCount?: number;
+    securityScannedAt?: string | null;
+    securityPassed?: boolean | null;
+    /** SMI-2760: Flat array of compatible IDE/LLM/platform slugs */
+    compatibility?: string[];
+}
+export interface SearchOptions {
+    query: string;
+    limit?: number;
+    offset?: number;
+    trustTier?: TrustTier;
+    minQualityScore?: number;
+    category?: string;
+    safeOnly?: boolean;
+    maxRiskScore?: number;
+}
+export interface SearchResult {
+    skill: Skill;
+    rank: number;
+    highlights: {
+        name?: string;
+        description?: string;
+    };
+}
+export interface PaginatedResults<T> {
+    items: T[];
+    total: number;
+    limit: number;
+    offset: number;
+    hasMore: boolean;
+}
+export interface CacheEntry {
+    key: string;
+    value: string;
+    expiresAt: number | null;
+    createdAt: string;
+}
+export interface Source {
+    id: string;
+    name: string;
+    type: 'github' | 'gitlab' | 'local' | 'registry';
+    url: string;
+    lastSyncAt: string | null;
+    isActive: boolean;
+}
+export interface Category {
+    id: string;
+    name: string;
+    description: string | null;
+    parentId: string | null;
+    skillCount: number;
+}
+//# sourceMappingURL=skill.d.ts.map

package/dist/types/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../src/types/skill.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAA;AAEnG;;;GAGG;AACH,MAAM,MAAM,SAAS,GACjB,cAAc,GACd,SAAS,GACT,eAAe,GACf,UAAU,GACV,UAAU,GACV,qBAAqB,CAAA;AAEzB;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAOlC,CAAA;AAEV,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,SAAS,CAAA;IACpB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,qDAAqD;IACrD,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IAEpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,kDAAkD;IAClD,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IAEjB,8GAA8G;IAC9G,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,qDAAqD;IACrD,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/B,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,qDAAqD;IACrD,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/B,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CAAA;CACF;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,EAAE,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;IAChD,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/types/skill.js

@@ -0,0 +1,15 @@
+/**
+ * Core type definitions for Skillsmith skills
+ */
+/**
+ * Valid skill roles array for validation
+ */
+export const SKILL_ROLES = [
+    'code-quality',
+    'testing',
+    'documentation',
+    'workflow',
+    'security',
+    'development-partner',
+];
+//# sourceMappingURL=skill.js.map

package/dist/types/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../../src/types/skill.ts"],"names":[],"mappings":"AAAA;;GAEG;AA0BH;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,cAAc;IACd,SAAS;IACT,eAAe;IACf,UAAU;IACV,UAAU;IACV,qBAAqB;CACb,CAAA"}

package/dist/types.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Core type definitions for Skillsmith
+ */
+/**
+ * Trust tier levels for skill quality assessment
+ * NOTE: Database tiers must match database schema (packages/core/src/database/schema.ts)
+ * SMI-1809: Added 'local' for local skills from ~/.claude/skills/
+ */
+export type TrustTier = 'verified' | 'community' | 'experimental' | 'unknown' | 'local';
+/**
+ * Trust tier descriptions for user display
+ */
+export declare const TrustTierDescriptions: Record<TrustTier, string>;
+/**
+ * Skill categories
+ */
+export type SkillCategory = 'development' | 'testing' | 'documentation' | 'devops' | 'database' | 'security' | 'productivity' | 'integration' | 'ai-ml' | 'science' | 'other';
+/**
+ * Score breakdown for skill quality assessment
+ */
+export interface ScoreBreakdown {
+    quality: number;
+    popularity: number;
+    maintenance: number;
+    security: number;
+    documentation: number;
+}
+/**
+ * SMI-825: Security scan summary for display
+ */
+export interface SecuritySummary {
+    /** Whether the skill passed security scan (null = not scanned) */
+    passed: boolean | null;
+    /** Risk score from 0-100 (lower is safer) */
+    riskScore: number | null;
+    /** Number of security findings */
+    findingsCount: number;
+    /** When the skill was last scanned */
+    scannedAt: string | null;
+}
+/**
+ * Full skill definition
+ */
+export interface Skill {
+    id: string;
+    name: string;
+    description: string;
+    author: string;
+    repository?: string;
+    version?: string;
+    category: SkillCategory;
+    trustTier: TrustTier;
+    score: number;
+    scoreBreakdown?: ScoreBreakdown;
+    tags: string[];
+    installCommand?: string;
+    /** SMI-825: Security scan summary */
+    security?: SecuritySummary;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Skill search result (subset of full skill)
+ * SMI-1491: Added repository field for transparency about installation source
+ * SMI-825: Added security summary
+ * SMI-1809: Added source field to identify local vs registry skills
+ * SMI-2734: Added installHint for ergonomic registry ID surfacing in search results
+ */
+export interface SkillSearchResult {
+    id: string;
+    name: string;
+    description: string;
+    author: string;
+    category: SkillCategory;
+    trustTier: TrustTier;
+    score: number;
+    /** GitHub repository URL (may be undefined for seed data/metadata-only skills) */
+    repository?: string;
+    /** SMI-825: Security scan summary */
+    security?: SecuritySummary;
+    /** SMI-1809: Source of the skill ('local' for ~/.claude/skills/, 'registry' for API) */
+    source?: 'local' | 'registry';
+    /** SMI-2734: Registry install ID in 'author/skill-name' format. Only set for registry skills.
+     *  Undefined for local skills since their author field is not a routable registry owner. */
+    installHint?: string;
+    /** SMI-2760: Flat array of compatible IDE/LLM/platform slugs (e.g. ["claude-code", "cursor", "claude"]) */
+    compatibility?: string[];
+}
+/**
+ * SMI-2760: Compatibility filter for search
+ */
+export interface CompatibilityFilter {
+    /** IDE slugs to match (e.g. ['cursor', 'claude-code']) */
+    ides?: string[];
+    /** LLM slugs to match (e.g. ['claude', 'gpt-4o']) */
+    llms?: string[];
+}
+/**
+ * Search filters
+ */
+export interface SearchFilters {
+    category?: SkillCategory;
+    trustTier?: TrustTier;
+    minScore?: number;
+    /** SMI-825: Only show skills that passed security scan */
+    safeOnly?: boolean;
+    /** SMI-825: Maximum risk score (0-100, lower is safer) */
+    maxRiskScore?: number;
+    /** SMI-2760: Filter by IDE/LLM compatibility */
+    compatibleWith?: CompatibilityFilter;
+}
+/**
+ * Search response with timing
+ */
+export interface SearchResponse {
+    results: SkillSearchResult[];
+    total: number;
+    query: string;
+    filters: SearchFilters;
+    timing: {
+        searchMs: number;
+        totalMs: number;
+    };
+}
+/**
+ * Get skill response
+ */
+export interface GetSkillResponse {
+    skill: Skill;
+    installCommand: string;
+    /** SMI-3672: Raw SKILL.md content (markdown), when available */
+    content?: string;
+    timing: {
+        totalMs: number;
+    };
+    /** SMI-2761: Skills frequently installed alongside this one (≥5 co-installs) */
+    also_installed?: AlsoInstalledSkill[];
+    /** SMI-3137: Dependency intelligence data from skill_dependencies table */
+    dependencies?: import('./types/dependencies.js').SkillDependencyRow[];
+}
+/**
+ * SMI-2761: Minimal skill summary used in co-install recommendations
+ */
+export interface AlsoInstalledSkill {
+    /** Skill ID (e.g. "anthropic/commit") */
+    skillId: string;
+    /** Human-readable name */
+    name: string;
+    /** Short description */
+    description?: string;
+    /** Author slug */
+    author?: string;
+    /** Co-install count */
+    installCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,WAAW,GACX,cAAc,GACd,SAAS,GACT,OAAO,CAAA;AAEX;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAM3D,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,SAAS,GACT,eAAe,GACf,QAAQ,GACR,UAAU,GACV,UAAU,GACV,cAAc,GACd,aAAa,GACb,OAAO,GACP,SAAS,GACT,OAAO,CAAA;AAEX;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IACtB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAA;IACrB,sCAAsC;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,aAAa,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,aAAa,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC7B;gGAC4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2GAA2G;IAC3G,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gDAAgD;IAChD,cAAc,CAAC,EAAE,mBAAmB,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,EAAE,CAAA;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,aAAa,CAAA;IACtB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAA;IACZ,cAAc,EAAE,MAAM,CAAA;IACtB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,gFAAgF;IAChF,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACrC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,yBAAyB,EAAE,kBAAkB,EAAE,CAAA;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,uBAAuB;IACvB,YAAY,EAAE,MAAM,CAAA;CACrB"}

package/dist/types.js

@@ -0,0 +1,14 @@
+/**
+ * Core type definitions for Skillsmith
+ */
+/**
+ * Trust tier descriptions for user display
+ */
+export const TrustTierDescriptions = {
+    verified: 'Manually reviewed by the Skillsmith team. High quality and safe to use.',
+    community: 'Highly rated by the community. Generally reliable.',
+    experimental: 'New or beta skill. Use with caution.',
+    unknown: 'Not yet assessed. Review carefully before using.',
+    local: 'Local skill from your ~/.claude/skills/ directory. You control this skill.',
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D,QAAQ,EAAE,yEAAyE;IACnF,SAAS,EAAE,oDAAoD;IAC/D,YAAY,EAAE,sCAAsC;IACpD,OAAO,EAAE,kDAAkD;IAC3D,KAAK,EAAE,4EAA4E;CACpF,CAAA"}

package/dist/utils/github-url.d.ts

@@ -0,0 +1,57 @@
+/**
+ * GitHub URL Parsing Utilities
+ * @module @skillsmith/core/utils/github-url
+ *
+ * SMI-2171: Extracted from mcp-server for shared use across codebase.
+ * Used by:
+ * - packages/mcp-server/src/tools/install.helpers.ts (skill installation)
+ * - scripts/batch-transform-skills.ts (batch transformation)
+ */
+/**
+ * Parsed repository URL components
+ */
+export interface ParsedRepoUrl {
+    /** GitHub username or organization */
+    owner: string;
+    /** Repository name */
+    repo: string;
+    /** Path within the repository (e.g., "skills/commit" for monorepo skills) */
+    path: string;
+    /** Branch name (defaults to "main" if not specified) */
+    branch: string;
+}
+/**
+ * Parse repo_url from registry to extract GitHub components.
+ *
+ * Handles various URL formats:
+ * - Plain repo: `https://github.com/owner/repo`
+ * - Tree path: `https://github.com/owner/repo/tree/branch/path`
+ * - Blob path: `https://github.com/owner/repo/blob/branch/path`
+ *
+ * @example
+ * ```typescript
+ * // Plain repo URL
+ * parseRepoUrl('https://github.com/user/skill')
+ * // => { owner: 'user', repo: 'skill', path: '', branch: 'main' }
+ *
+ * // Monorepo skill with tree path
+ * parseRepoUrl('https://github.com/ruvnet/claude-code/tree/main/skills/commit')
+ * // => { owner: 'ruvnet', repo: 'claude-code', path: 'skills/commit', branch: 'main' }
+ * ```
+ *
+ * @param repoUrl - GitHub repository URL
+ * @returns Parsed URL components
+ * @throws Error if hostname is not GitHub
+ *
+ * @since SMI-1491
+ * @see SMI-2171 - Extracted to @skillsmith/core for shared use
+ */
+export declare function parseRepoUrl(repoUrl: string): ParsedRepoUrl;
+/**
+ * Check if a URL is a valid GitHub repository URL
+ *
+ * @param url - URL to check
+ * @returns true if the URL is a valid GitHub URL
+ */
+export declare function isGitHubUrl(url: string): boolean;
+//# sourceMappingURL=github-url.d.ts.map

package/dist/utils/github-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-url.d.ts","sourceRoot":"","sources":["../../src/utils/github-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAA;CACf;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAiC3D;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOhD"}

package/dist/utils/github-url.js

@@ -0,0 +1,88 @@
+/**
+ * GitHub URL Parsing Utilities
+ * @module @skillsmith/core/utils/github-url
+ *
+ * SMI-2171: Extracted from mcp-server for shared use across codebase.
+ * Used by:
+ * - packages/mcp-server/src/tools/install.helpers.ts (skill installation)
+ * - scripts/batch-transform-skills.ts (batch transformation)
+ */
+// ============================================================================
+// Constants
+// ============================================================================
+/**
+ * Allowed hostnames for skill installation
+ * SMI-1533: Restrict to trusted code hosting platforms
+ */
+const ALLOWED_HOSTS = ['github.com', 'www.github.com'];
+// ============================================================================
+// Functions
+// ============================================================================
+/**
+ * Parse repo_url from registry to extract GitHub components.
+ *
+ * Handles various URL formats:
+ * - Plain repo: `https://github.com/owner/repo`
+ * - Tree path: `https://github.com/owner/repo/tree/branch/path`
+ * - Blob path: `https://github.com/owner/repo/blob/branch/path`
+ *
+ * @example
+ * ```typescript
+ * // Plain repo URL
+ * parseRepoUrl('https://github.com/user/skill')
+ * // => { owner: 'user', repo: 'skill', path: '', branch: 'main' }
+ *
+ * // Monorepo skill with tree path
+ * parseRepoUrl('https://github.com/ruvnet/claude-code/tree/main/skills/commit')
+ * // => { owner: 'ruvnet', repo: 'claude-code', path: 'skills/commit', branch: 'main' }
+ * ```
+ *
+ * @param repoUrl - GitHub repository URL
+ * @returns Parsed URL components
+ * @throws Error if hostname is not GitHub
+ *
+ * @since SMI-1491
+ * @see SMI-2171 - Extracted to @skillsmith/core for shared use
+ */
+export function parseRepoUrl(repoUrl) {
+    const url = new URL(repoUrl);
+    // SMI-1533: Validate hostname to prevent fetching from malicious sources
+    if (!ALLOWED_HOSTS.includes(url.hostname.toLowerCase())) {
+        throw new Error(`Invalid repository host: ${url.hostname}. ` +
+            `Only GitHub repositories are supported (${ALLOWED_HOSTS.join(', ')})`);
+    }
+    const parts = url.pathname.split('/').filter(Boolean);
+    const owner = parts[0];
+    const repo = parts[1];
+    // /owner/repo (skill at repo root)
+    if (parts.length === 2) {
+        return { owner, repo, path: '', branch: 'main' };
+    }
+    // /owner/repo/tree/branch/path... or /owner/repo/blob/branch/path...
+    if (parts[2] === 'tree' || parts[2] === 'blob') {
+        return {
+            owner,
+            repo,
+            branch: parts[3],
+            path: parts.slice(4).join('/'),
+        };
+    }
+    // Unknown format - assume path starts at index 2, default to main branch
+    return { owner, repo, path: parts.slice(2).join('/'), branch: 'main' };
+}
+/**
+ * Check if a URL is a valid GitHub repository URL
+ *
+ * @param url - URL to check
+ * @returns true if the URL is a valid GitHub URL
+ */
+export function isGitHubUrl(url) {
+    try {
+        const parsed = new URL(url);
+        return ALLOWED_HOSTS.includes(parsed.hostname.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=github-url.js.map

package/dist/utils/github-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-url.js","sourceRoot":"","sources":["../../src/utils/github-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;AAEtD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAE5B,yEAAyE;IACzE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,CAAC,QAAQ,IAAI;YAC1C,2CAA2C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACzE,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAErD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAErB,mCAAmC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAClD,CAAC;IAED,qEAAqE;IACrE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAChB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAA;IACH,CAAC;IAED,yEAAyE;IACzE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Utility exports
+ */
+export { logger, createLogger, silentLogger, type Logger } from './logger.js';
+export { withRetry, fetchWithRetry, isTransientError, isRetryableStatus, parseRetryAfter, RetryExhaustedError, DEFAULT_RETRY_CONFIG, type RetryConfig, } from './retry.js';
+export { checkForUpdates, formatUpdateNotification, type VersionCheckResult, } from './version-check.js';
+export { parseRepoUrl, isGitHubUrl, type ParsedRepoUrl } from './github-url.js';
+export { safeWriteFile, SymlinkError, HardlinkError } from './safe-fs.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,WAAW,GACjB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAG/E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/utils/index.js

@@ -0,0 +1,12 @@
+/**
+ * Utility exports
+ */
+export { logger, createLogger, silentLogger } from './logger.js';
+export { withRetry, fetchWithRetry, isTransientError, isRetryableStatus, parseRetryAfter, RetryExhaustedError, DEFAULT_RETRY_CONFIG, } from './retry.js';
+// SMI-1952: Version check for auto-update notifications
+export { checkForUpdates, formatUpdateNotification, } from './version-check.js';
+// SMI-2171: GitHub URL parsing utilities
+export { parseRepoUrl, isGitHubUrl } from './github-url.js';
+// SMI-2274: Safe filesystem operations (symlink protection)
+export { safeWriteFile, SymlinkError, HardlinkError } from './safe-fs.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAe,MAAM,aAAa,CAAA;AAC7E,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,YAAY,CAAA;AAEnB,wDAAwD;AACxD,OAAO,EACL,eAAe,EACf,wBAAwB,GAEzB,MAAM,oBAAoB,CAAA;AAE3B,yCAAyC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,iBAAiB,CAAA;AAE/E,4DAA4D;AAC5D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}