@skillsmith/core 0.5.5 → 0.5.6

package/dist/validation/url-validators.js

@@ -0,0 +1,267 @@
+/**
+ * URL Validation Utilities (SMI-721, SMI-729)
+ *
+ * SSRF prevention validators for URL access.
+ *
+ * Security Features:
+ * - Protocol validation (http/https only)
+ * - Private IPv4 range blocking
+ * - Private IPv6 range blocking
+ * - Localhost and loopback blocking
+ */
+import { ValidationError } from './validation-error.js';
+/**
+ * Get human-readable IP range name for error messages
+ */
+export function getIpRangeName(a, b) {
+    if (a === 10)
+        return '10.0.0.0/8 (Private)';
+    if (a === 172 && b >= 16 && b <= 31)
+        return '172.16.0.0/12 (Private)';
+    if (a === 192 && b === 168)
+        return '192.168.0.0/16 (Private)';
+    if (a === 127)
+        return '127.0.0.0/8 (Loopback)';
+    if (a === 169 && b === 254)
+        return '169.254.0.0/16 (Link-local)';
+    if (a === 0)
+        return '0.0.0.0/8 (Current network)';
+    return 'Unknown';
+}
+/**
+ * Validate IPv6 address to prevent SSRF attacks (SMI-729)
+ *
+ * Blocks:
+ * - Link-local: fe80::/10
+ * - Unique local addresses (ULA): fc00::/7
+ * - Multicast: ff00::/8
+ * - IPv4-mapped IPv6: ::ffff:0:0/96
+ * - Loopback ::1 (already blocked above)
+ *
+ * @param hostname - IPv6 hostname to validate
+ * @param url - Full URL for error context
+ * @throws {ValidationError} if IPv6 address is not allowed
+ */
+export function validateIPv6(hostname, url) {
+    // Normalize IPv6 address
+    const normalized = hostname.toLowerCase();
+    // Block IPv6 loopback (::1 and its full form)
+    // This is defense-in-depth since line 76 should also catch ::1
+    if (normalized === '::1' || normalized === '0:0:0:0:0:0:0:1') {
+        throw new ValidationError(`Access to localhost is blocked: ${hostname}`, 'LOCALHOST_BLOCKED', {
+            hostname,
+            url,
+        });
+    }
+    // Block link-local addresses (fe80::/10)
+    // fe80 to febf range
+    if (normalized.startsWith('fe8') ||
+        normalized.startsWith('fe9') ||
+        normalized.startsWith('fea') ||
+        normalized.startsWith('feb')) {
+        throw new ValidationError(`Access to IPv6 link-local address blocked: ${hostname}`, 'IPV6_LINK_LOCAL_BLOCKED', { hostname, url });
+    }
+    // Block unique local addresses (fc00::/7)
+    // fc00 to fdff range
+    if (normalized.startsWith('fc') || normalized.startsWith('fd')) {
+        throw new ValidationError(`Access to IPv6 unique local address blocked: ${hostname}`, 'IPV6_ULA_BLOCKED', { hostname, url });
+    }
+    // Block multicast addresses (ff00::/8)
+    if (normalized.startsWith('ff')) {
+        throw new ValidationError(`Access to IPv6 multicast address blocked: ${hostname}`, 'IPV6_MULTICAST_BLOCKED', { hostname, url });
+    }
+    // Block IPv4-mapped IPv6 addresses (::ffff:0:0/96)
+    // These map IPv4 addresses into IPv6 space
+    if (normalized.includes('::ffff:')) {
+        // Extract the IPv4 part and validate it
+        const ipv4Part = normalized.split('::ffff:')[1];
+        if (ipv4Part) {
+            // Check if it's in dotted decimal notation
+            const ipv4Match = ipv4Part.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/);
+            if (ipv4Match) {
+                const [, a, b] = ipv4Match.map(Number);
+                // Apply same private IP checks as IPv4
+                if (a === 10 ||
+                    (a === 172 && b >= 16 && b <= 31) ||
+                    (a === 192 && b === 168) ||
+                    a === 127 ||
+                    (a === 169 && b === 254) ||
+                    a === 0) {
+                    throw new ValidationError(`Access to IPv4-mapped IPv6 private address blocked: ${hostname}`, 'IPV4_MAPPED_IPV6_BLOCKED', { hostname, url, ipRange: getIpRangeName(a, b) });
+                }
+            }
+            else {
+                // IPv4 in hex notation (e.g., ::ffff:7f00:1 for 127.0.0.1)
+                // Parse hex format: high:low where high = (a<<8)|b, low = (c<<8)|d
+                const hexMatch = ipv4Part.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+                if (hexMatch) {
+                    const high = parseInt(hexMatch[1], 16);
+                    const _low = parseInt(hexMatch[2], 16);
+                    const a = (high >> 8) & 0xff;
+                    const b = high & 0xff;
+                    // Apply same private IP checks as IPv4
+                    if (a === 10 ||
+                        (a === 172 && b >= 16 && b <= 31) ||
+                        (a === 192 && b === 168) ||
+                        a === 127 ||
+                        (a === 169 && b === 254) ||
+                        a === 0) {
+                        throw new ValidationError(`Access to IPv4-mapped IPv6 private address blocked: ${hostname}`, 'IPV4_MAPPED_IPV6_BLOCKED', { hostname, url, ipRange: getIpRangeName(a, b) });
+                    }
+                }
+                // If we can't parse it, block it to be safe
+                throw new ValidationError(`Access to IPv4-mapped IPv6 address blocked: ${hostname}`, 'IPV4_MAPPED_IPV6_BLOCKED', { hostname, url });
+            }
+        }
+    }
+    // Block 6to4 addresses with embedded private IPv4 (2002::/16) - SMI-1004
+    // 6to4 embeds IPv4 in bits 16-48: 2002:AABB:CCDD::/48 where IPv4 is AA.BB.CC.DD
+    if (normalized.startsWith('2002:')) {
+        // Extract the two hex segments after 2002:
+        const segments = normalized.split(':');
+        if (segments.length >= 3 && segments[1] && segments[2]) {
+            // Parse hex segments: 2002:AABB:CCDD -> IPv4 is 0xAA.0xBB.0xCC.0xDD
+            const highHex = segments[1].padStart(4, '0');
+            const lowHex = segments[2].padStart(4, '0');
+            const a = parseInt(highHex.slice(0, 2), 16);
+            const b = parseInt(highHex.slice(2, 4), 16);
+            const c = parseInt(lowHex.slice(0, 2), 16);
+            const d = parseInt(lowHex.slice(2, 4), 16);
+            // Check if embedded IPv4 is private
+            if (a === 10 ||
+                (a === 172 && b >= 16 && b <= 31) ||
+                (a === 192 && b === 168) ||
+                a === 127 ||
+                (a === 169 && b === 254) ||
+                a === 0) {
+                throw new ValidationError(`Access to 6to4 address with embedded private IPv4 blocked: ${hostname}`, 'IPV6_6TO4_PRIVATE', { hostname, url, embeddedIPv4: `${a}.${b}.${c}.${d}`, ipRange: getIpRangeName(a, b) });
+            }
+        }
+    }
+    // Block IPv4-compatible addresses (::IPv4) without ffff prefix - SMI-1005
+    // Pattern: ::x.x.x.x (deprecated but still valid)
+    // Note: URL parser normalizes ::192.168.1.1 to ::c0a8:101 (hex format)
+    // So we need to match both dotted-decimal and the normalized hex format
+    const ipv4CompatibleMatch = normalized.match(/^::(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4CompatibleMatch) {
+        const [, aStr, bStr, cStr, dStr] = ipv4CompatibleMatch;
+        const a = parseInt(aStr, 10);
+        const b = parseInt(bStr, 10);
+        const c = parseInt(cStr, 10);
+        const d = parseInt(dStr, 10);
+        // Validate octets
+        if (a <= 255 && b <= 255 && c <= 255 && d <= 255) {
+            // Check if embedded IPv4 is private
+            if (a === 10 ||
+                (a === 172 && b >= 16 && b <= 31) ||
+                (a === 192 && b === 168) ||
+                a === 127 ||
+                (a === 169 && b === 254) ||
+                a === 0) {
+                throw new ValidationError(`Access to IPv4-compatible IPv6 address with private IPv4 blocked: ${hostname}`, 'IPV6_COMPATIBLE_PRIVATE', { hostname, url, embeddedIPv4: `${a}.${b}.${c}.${d}`, ipRange: getIpRangeName(a, b) });
+            }
+        }
+    }
+    // Also check for normalized hex format: ::XXXX:XXXX (without ffff: prefix)
+    // URL parser normalizes ::192.168.1.1 to ::c0a8:101
+    const ipv4CompatibleHexMatch = normalized.match(/^::([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+    if (ipv4CompatibleHexMatch) {
+        const high = parseInt(ipv4CompatibleHexMatch[1], 16);
+        const low = parseInt(ipv4CompatibleHexMatch[2], 16);
+        const a = (high >> 8) & 0xff;
+        const b = high & 0xff;
+        const c = (low >> 8) & 0xff;
+        const d = low & 0xff;
+        // Check if embedded IPv4 is private
+        if (a === 10 ||
+            (a === 172 && b >= 16 && b <= 31) ||
+            (a === 192 && b === 168) ||
+            a === 127 ||
+            (a === 169 && b === 254) ||
+            a === 0) {
+            throw new ValidationError(`Access to IPv4-compatible IPv6 address with private IPv4 blocked: ${hostname}`, 'IPV6_COMPATIBLE_PRIVATE', { hostname, url, embeddedIPv4: `${a}.${b}.${c}.${d}`, ipRange: getIpRangeName(a, b) });
+        }
+    }
+    // Block Teredo addresses (2001:0::/32) - SMI-1006
+    // Teredo tunneling can bypass firewall rules
+    if (normalized.startsWith('2001:0000:') || normalized.startsWith('2001:0:')) {
+        throw new ValidationError(`Access to Teredo tunnel address blocked: ${hostname}`, 'IPV6_TEREDO_BLOCKED', { hostname, url });
+    }
+}
+/**
+ * Validate URL to prevent SSRF attacks (SMI-721, SMI-729)
+ *
+ * Blocks:
+ * - Non-http(s) protocols
+ * - Private IPv4 ranges (10.x, 172.16-31.x, 192.168.x)
+ * - Private IPv6 ranges (fe80::/10, fc00::/7, ff00::/8, ::ffff:0:0/96)
+ * - Localhost variants (127.x, localhost, ::1, 0.0.0.0)
+ * - Link-local addresses (169.254.x, fe80::/10)
+ * - Current network (0.x)
+ *
+ * @param url - URL to validate
+ * @throws {ValidationError} if URL is not allowed
+ *
+ * @example
+ * ```typescript
+ * validateUrl('https://example.com/api')  // OK
+ * validateUrl('http://localhost:3000')    // Throws ValidationError
+ * validateUrl('ftp://example.com')        // Throws ValidationError
+ * validateUrl('http://192.168.1.1')       // Throws ValidationError
+ * validateUrl('http://[fe80::1]')         // Throws ValidationError (IPv6 link-local)
+ * ```
+ */
+export function validateUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch (error) {
+        throw new ValidationError(`Invalid URL format: ${url}`, 'INVALID_URL_FORMAT', error);
+    }
+    // Only allow http/https protocols
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+        throw new ValidationError(`Invalid protocol: ${parsed.protocol}. Only http and https are allowed.`, 'INVALID_PROTOCOL', { protocol: parsed.protocol, url });
+    }
+    let hostname = parsed.hostname.toLowerCase();
+    // Strip brackets from IPv6 addresses for easier comparison
+    // Node.js URL keeps brackets in hostname for IPv6 (e.g., "[::1]")
+    if (hostname.startsWith('[') && hostname.endsWith(']')) {
+        hostname = hostname.slice(1, -1);
+    }
+    // Block localhost variants
+    if (hostname === 'localhost' || hostname === '::1' || hostname === '0.0.0.0') {
+        throw new ValidationError(`Access to localhost is blocked: ${hostname}`, 'LOCALHOST_BLOCKED', {
+            hostname,
+            url,
+        });
+    }
+    // Check for IPv4 addresses
+    const ipv4Match = hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4Match) {
+        const [, a, b, c, d] = ipv4Match.map(Number);
+        // Validate IPv4 octets are in valid range
+        if (a > 255 || b > 255 || c > 255 || d > 255) {
+            throw new ValidationError(`Invalid IPv4 address: ${hostname}`, 'INVALID_IPV4', {
+                hostname,
+                url,
+            });
+        }
+        // Block private/internal IP ranges
+        if (a === 10 || // 10.0.0.0/8 - Private network
+            (a === 172 && b >= 16 && b <= 31) || // 172.16.0.0/12 - Private network
+            (a === 192 && b === 168) || // 192.168.0.0/16 - Private network
+            a === 127 || // 127.0.0.0/8 - Loopback
+            (a === 169 && b === 254) || // 169.254.0.0/16 - Link-local
+            a === 0 // 0.0.0.0/8 - Current network
+        ) {
+            throw new ValidationError(`Access to private/internal network blocked: ${hostname}`, 'PRIVATE_NETWORK_BLOCKED', { hostname, url, ipRange: getIpRangeName(a, b) });
+        }
+    }
+    // Check for IPv6 addresses (SMI-729)
+    // IPv6 addresses in URLs are enclosed in square brackets, but hostname strips them
+    if (hostname.includes(':')) {
+        validateIPv6(hostname, url);
+    }
+}
+//# sourceMappingURL=url-validators.js.map

package/dist/validation/url-validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-validators.js","sourceRoot":"","sources":["../../src/validation/url-validators.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,sBAAsB,CAAA;IAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,yBAAyB,CAAA;IACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,0BAA0B,CAAA;IAC7D,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,wBAAwB,CAAA;IAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,6BAA6B,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAA;IACjD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAW;IACxD,yBAAyB;IACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;IAEzC,8CAA8C;IAC9C,+DAA+D;IAC/D,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7D,MAAM,IAAI,eAAe,CAAC,mCAAmC,QAAQ,EAAE,EAAE,mBAAmB,EAAE;YAC5F,QAAQ;YACR,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAED,yCAAyC;IACzC,qBAAqB;IACrB,IACE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,8CAA8C,QAAQ,EAAE,EACxD,yBAAyB,EACzB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAClB,CAAA;IACH,CAAC;IAED,0CAA0C;IAC1C,qBAAqB;IACrB,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CACvB,gDAAgD,QAAQ,EAAE,EAC1D,kBAAkB,EAClB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAClB,CAAA;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CACvB,6CAA6C,QAAQ,EAAE,EACvD,wBAAwB,EACxB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAClB,CAAA;IACH,CAAC;IAED,mDAAmD;IACnD,2CAA2C;IAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,wCAAwC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,2CAA2C;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAC/E,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACtC,uCAAuC;gBACvC,IACE,CAAC,KAAK,EAAE;oBACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;oBACxB,CAAC,KAAK,GAAG;oBACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;oBACxB,CAAC,KAAK,CAAC,EACP,CAAC;oBACD,MAAM,IAAI,eAAe,CACvB,uDAAuD,QAAQ,EAAE,EACjE,0BAA0B,EAC1B,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACjD,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,2DAA2D;gBAC3D,mEAAmE;gBACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;gBACrE,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;oBACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;oBACvC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;oBAC5B,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;oBACrB,uCAAuC;oBACvC,IACE,CAAC,KAAK,EAAE;wBACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;wBACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;wBACxB,CAAC,KAAK,GAAG;wBACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;wBACxB,CAAC,KAAK,CAAC,EACP,CAAC;wBACD,MAAM,IAAI,eAAe,CACvB,uDAAuD,QAAQ,EAAE,EACjE,0BAA0B,EAC1B,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACjD,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,4CAA4C;gBAC5C,MAAM,IAAI,eAAe,CACvB,+CAA+C,QAAQ,EAAE,EACzD,0BAA0B,EAC1B,EAAE,QAAQ,EAAE,GAAG,EAAE,CAClB,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,gFAAgF;IAChF,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,oEAAoE;YACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAE1C,oCAAoC;YACpC,IACE,CAAC,KAAK,EAAE;gBACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;gBACxB,CAAC,KAAK,GAAG;gBACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;gBACxB,CAAC,KAAK,CAAC,EACP,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,8DAA8D,QAAQ,EAAE,EACxE,mBAAmB,EACnB,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACtF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,kDAAkD;IAClD,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,mBAAmB,GAAG,UAAU,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAC9F,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,mBAAmB,CAAA;QACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAK,EAAE,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAK,EAAE,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAK,EAAE,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAK,EAAE,EAAE,CAAC,CAAA;QAE7B,kBAAkB;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACjD,oCAAoC;YACpC,IACE,CAAC,KAAK,EAAE;gBACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;gBACxB,CAAC,KAAK,GAAG;gBACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;gBACxB,CAAC,KAAK,CAAC,EACP,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,qEAAqE,QAAQ,EAAE,EAC/E,yBAAyB,EACzB,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACtF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,sBAAsB,GAAG,UAAU,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACtF,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;QAC5B,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;QACrB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;QAC3B,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAA;QAEpB,oCAAoC;QACpC,IACE,CAAC,KAAK,EAAE;YACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;YACxB,CAAC,KAAK,GAAG;YACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;YACxB,CAAC,KAAK,CAAC,EACP,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,qEAAqE,QAAQ,EAAE,EAC/E,yBAAyB,EACzB,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACtF,CAAA;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,6CAA6C;IAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,EAAE,EACtD,qBAAqB,EACrB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAClB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAA;IACtF,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CACvB,qBAAqB,MAAM,CAAC,QAAQ,oCAAoC,EACxE,kBAAkB,EAClB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CACnC,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAE5C,2DAA2D;IAC3D,kEAAkE;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IAED,2BAA2B;IAC3B,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,mCAAmC,QAAQ,EAAE,EAAE,mBAAmB,EAAE;YAC5F,QAAQ;YACR,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAE5C,0CAA0C;QAC1C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YAC7C,MAAM,IAAI,eAAe,CAAC,yBAAyB,QAAQ,EAAE,EAAE,cAAc,EAAE;gBAC7E,QAAQ;gBACR,GAAG;aACJ,CAAC,CAAA;QACJ,CAAC;QAED,mCAAmC;QACnC,IACE,CAAC,KAAK,EAAE,IAAI,+BAA+B;YAC3C,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,kCAAkC;YACvE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,mCAAmC;YAC/D,CAAC,KAAK,GAAG,IAAI,yBAAyB;YACtC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,8BAA8B;YAC1D,CAAC,KAAK,CAAC,CAAC,8BAA8B;UACtC,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,+CAA+C,QAAQ,EAAE,EACzD,yBAAyB,EACzB,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACjD,CAAA;QACH,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,mFAAmF;IACnF,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC"}

package/dist/validation/validation-error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Validation Error Class
+ *
+ * Thrown when input fails security validation checks.
+ */
+/**
+ * Validation error thrown when input fails security checks
+ */
+export declare class ValidationError extends Error {
+    readonly code: string;
+    readonly details?: unknown | undefined;
+    constructor(message: string, code: string, details?: unknown | undefined);
+}
+//# sourceMappingURL=validation-error.d.ts.map

package/dist/validation/validation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.d.ts","sourceRoot":"","sources":["../../src/validation/validation-error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,IAAI,EAAE,MAAM;aACZ,OAAO,CAAC,EAAE,OAAO;gBAFjC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC"}

package/dist/validation/validation-error.js

@@ -0,0 +1,19 @@
+/**
+ * Validation Error Class
+ *
+ * Thrown when input fails security validation checks.
+ */
+/**
+ * Validation error thrown when input fails security checks
+ */
+export class ValidationError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'ValidationError';
+    }
+}
+//# sourceMappingURL=validation-error.js.map

package/dist/validation/validation-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.js","sourceRoot":"","sources":["../../src/validation/validation-error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB;IACA;IAHlB,YACE,OAAe,EACC,IAAY,EACZ,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF"}

package/dist/versioning/change-classifier.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @fileoverview Heuristic change classifier for skill content diffs
+ * @module @skillsmith/core/versioning/change-classifier
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Compares old and new SKILL.md content to produce a semantic change type:
+ *   'major'   — structural regression (headings removed, large risk delta)
+ *   'minor'   — new structure added (headings added only, dep added)
+ *   'patch'   — body edits with no structural changes
+ *   'unknown' — could not classify
+ *
+ * When the author provides a semver field in SKILL.md frontmatter the
+ * caller should pass that through; this module trusts the semver bump
+ * over heuristics when it is present and parseable.
+ */
+export type ChangeType = 'major' | 'minor' | 'patch' | 'unknown';
+/**
+ * Classify the change between two versions of a SKILL.md.
+ *
+ * Order of precedence:
+ *  1. Author-provided semver in frontmatter (trusted over heuristics)
+ *  2. Removed headings → 'major'
+ *  3. Risk score delta > 20 → upgrade to 'major'
+ *  4. Removed dependencies → 'major'
+ *  5. Added headings only → 'minor'
+ *  6. Added dependencies → 'minor'
+ *  7. Body edits with no structural changes → 'patch'
+ *  8. No detectable change → 'patch'
+ *  9. Error during classification → 'unknown'
+ *
+ * @param oldContent    Previous SKILL.md content
+ * @param newContent    Updated SKILL.md content
+ * @param oldRiskScore  Risk score of the old version (0–100, optional)
+ * @param newRiskScore  Risk score of the new version (0–100, optional)
+ * @returns Semantic change type
+ */
+export declare function classifyChange(oldContent: string, newContent: string, oldRiskScore?: number, newRiskScore?: number): ChangeType;
+//# sourceMappingURL=change-classifier.d.ts.map

package/dist/versioning/change-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-classifier.d.ts","sourceRoot":"","sources":["../../src/versioning/change-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;AAgHhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,CAgDZ"}

package/dist/versioning/change-classifier.js

@@ -0,0 +1,187 @@
+/**
+ * @fileoverview Heuristic change classifier for skill content diffs
+ * @module @skillsmith/core/versioning/change-classifier
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Compares old and new SKILL.md content to produce a semantic change type:
+ *   'major'   — structural regression (headings removed, large risk delta)
+ *   'minor'   — new structure added (headings added only, dep added)
+ *   'patch'   — body edits with no structural changes
+ *   'unknown' — could not classify
+ *
+ * When the author provides a semver field in SKILL.md frontmatter the
+ * caller should pass that through; this module trusts the semver bump
+ * over heuristics when it is present and parseable.
+ */
+// ============================================================================
+// Frontmatter parsing
+// ============================================================================
+/** Very thin YAML-style frontmatter reader — only extracts key: value pairs */
+function parseFrontmatter(content) {
+    const result = {};
+    const match = /^---\r?\n([\s\S]*?)\r?\n---/.exec(content);
+    if (!match)
+        return result;
+    for (const line of match[1].split('\n')) {
+        const colonIdx = line.indexOf(':');
+        if (colonIdx === -1)
+            continue;
+        const key = line.slice(0, colonIdx).trim();
+        const value = line.slice(colonIdx + 1).trim();
+        if (key && value)
+            result[key] = value;
+    }
+    return result;
+}
+/** Extract a semver string from frontmatter if present */
+function extractSemver(frontmatter) {
+    const raw = frontmatter['version'] ?? frontmatter['semver'] ?? null;
+    if (!raw)
+        return null;
+    // Accept bare semver: 1.2.3 or with optional v prefix
+    return /^\s*v?\d+\.\d+\.\d+/.test(raw) ? raw.replace(/^\s*v/, '') : null;
+}
+/** Parse semver into major/minor/patch numbers */
+function parseSemverParts(v) {
+    const m = /^(\d+)\.(\d+)\.(\d+)/.exec(v);
+    if (!m)
+        return null;
+    return [Number(m[1]), Number(m[2]), Number(m[3])];
+}
+/** Derive ChangeType from two semver strings */
+function classifyBySemver(oldSemver, newSemver) {
+    const oldParts = parseSemverParts(oldSemver);
+    const newParts = parseSemverParts(newSemver);
+    if (!oldParts || !newParts)
+        return null;
+    if (newParts[0] > oldParts[0])
+        return 'major';
+    if (newParts[0] < oldParts[0])
+        return 'major'; // downgrade also = major
+    if (newParts[1] > oldParts[1])
+        return 'minor';
+    if (newParts[1] < oldParts[1])
+        return 'minor'; // minor downgrade = minor
+    if (newParts[2] !== oldParts[2])
+        return 'patch';
+    return 'patch'; // identical semver → treat as patch (re-record)
+}
+// ============================================================================
+// Heading extraction
+// ============================================================================
+/** Extract H2/H3 heading text from markdown */
+function extractHeadings(content) {
+    const headings = new Set();
+    for (const line of content.split('\n')) {
+        const m = /^#{2,3}\s+(.+)/.exec(line);
+        if (m)
+            headings.add(m[1].trim().toLowerCase());
+    }
+    return headings;
+}
+// ============================================================================
+// Dependency extraction
+// ============================================================================
+/**
+ * Extract dependency names from SKILL.md.
+ *
+ * Looks for lines that match common dependency list patterns:
+ *   - `- dep-name` inside a "## Dependencies" or "## Requirements" section
+ *   - `dependencies: [dep1, dep2]` in frontmatter
+ */
+function extractDependencies(content, frontmatter) {
+    const deps = new Set();
+    // Frontmatter array-style: dependencies: [a, b]
+    const fmDeps = frontmatter['dependencies'] ?? frontmatter['requires'] ?? '';
+    if (fmDeps) {
+        for (const d of fmDeps.replace(/[[\]]/g, '').split(',')) {
+            const trimmed = d.trim();
+            if (trimmed)
+                deps.add(trimmed.toLowerCase());
+        }
+    }
+    // Body: lines under a dependencies/requirements heading
+    let inDepsSection = false;
+    for (const line of content.split('\n')) {
+        if (/^#{1,3}\s+(dependencies|requirements|requires)/i.test(line)) {
+            inDepsSection = true;
+            continue;
+        }
+        if (/^#{1,3}\s+/.test(line)) {
+            inDepsSection = false;
+            continue;
+        }
+        if (inDepsSection) {
+            const m = /^[-*]\s+(\S+)/.exec(line);
+            if (m)
+                deps.add(m[1].trim().toLowerCase());
+        }
+    }
+    return deps;
+}
+// ============================================================================
+// Public API
+// ============================================================================
+/**
+ * Classify the change between two versions of a SKILL.md.
+ *
+ * Order of precedence:
+ *  1. Author-provided semver in frontmatter (trusted over heuristics)
+ *  2. Removed headings → 'major'
+ *  3. Risk score delta > 20 → upgrade to 'major'
+ *  4. Removed dependencies → 'major'
+ *  5. Added headings only → 'minor'
+ *  6. Added dependencies → 'minor'
+ *  7. Body edits with no structural changes → 'patch'
+ *  8. No detectable change → 'patch'
+ *  9. Error during classification → 'unknown'
+ *
+ * @param oldContent    Previous SKILL.md content
+ * @param newContent    Updated SKILL.md content
+ * @param oldRiskScore  Risk score of the old version (0–100, optional)
+ * @param newRiskScore  Risk score of the new version (0–100, optional)
+ * @returns Semantic change type
+ */
+export function classifyChange(oldContent, newContent, oldRiskScore, newRiskScore) {
+    try {
+        const oldFm = parseFrontmatter(oldContent);
+        const newFm = parseFrontmatter(newContent);
+        // 1. Trust author-provided semver — only when the semver actually changed
+        const oldSemver = extractSemver(oldFm);
+        const newSemver = extractSemver(newFm);
+        if (oldSemver && newSemver && oldSemver !== newSemver) {
+            const fromSemver = classifyBySemver(oldSemver, newSemver);
+            if (fromSemver)
+                return fromSemver;
+        }
+        // 2. Heading analysis
+        const oldHeadings = extractHeadings(oldContent);
+        const newHeadings = extractHeadings(newContent);
+        const removedHeadings = [...oldHeadings].filter((h) => !newHeadings.has(h));
+        const addedHeadings = [...newHeadings].filter((h) => !oldHeadings.has(h));
+        if (removedHeadings.length > 0)
+            return 'major';
+        // 3. Risk score delta — large increase signals a major change
+        if (typeof oldRiskScore === 'number' &&
+            typeof newRiskScore === 'number' &&
+            newRiskScore - oldRiskScore > 20) {
+            return 'major';
+        }
+        // 4. Dependency analysis
+        const oldDeps = extractDependencies(oldContent, oldFm);
+        const newDeps = extractDependencies(newContent, newFm);
+        const removedDeps = [...oldDeps].filter((d) => !newDeps.has(d));
+        const addedDeps = [...newDeps].filter((d) => !oldDeps.has(d));
+        if (removedDeps.length > 0)
+            return 'major';
+        // 5–6. Additions-only → minor
+        if (addedHeadings.length > 0 || addedDeps.length > 0)
+            return 'minor';
+        // 7–8. Any textual change or no change → patch
+        return 'patch';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=change-classifier.js.map

package/dist/versioning/change-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-classifier.js","sourceRoot":"","sources":["../../src/versioning/change-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAA;IAEzB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAQ;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7C,IAAI,GAAG,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACvC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,0DAA0D;AAC1D,SAAS,aAAa,CAAC,WAAmC;IACxD,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,sDAAsD;IACtD,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1E,CAAC;AAED,kDAAkD;AAClD,SAAS,gBAAgB,CAAC,CAAS;IACjC,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,gDAAgD;AAChD,SAAS,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC5C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEvC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA,CAAC,yBAAyB;IACvE,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA,CAAC,0BAA0B;IACxE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAC/C,OAAO,OAAO,CAAA,CAAC,gDAAgD;AACjE,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,+CAA+C;AAC/C,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,WAAmC;IAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,gDAAgD;IAChD,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACxB,IAAI,OAAO;gBAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,aAAa,GAAG,IAAI,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,aAAa,GAAG,KAAK,CAAA;YACrB,SAAQ;QACV,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,UAAkB,EAClB,YAAqB,EACrB,YAAqB;IAErB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAE1C,0EAA0E;QAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACtC,IAAI,SAAS,IAAI,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YACzD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAA;QACnC,CAAC;QAED,sBAAsB;QACtB,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;QAE/C,MAAM,eAAe,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3E,MAAM,aAAa,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAEzE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAE9C,8DAA8D;QAC9D,IACE,OAAO,YAAY,KAAK,QAAQ;YAChC,OAAO,YAAY,KAAK,QAAQ;YAChC,YAAY,GAAG,YAAY,GAAG,EAAE,EAChC,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,yBAAyB;QACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAEtD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAE7D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAE1C,8BAA8B;QAC9B,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAEpE,+CAA+C;QAC/C,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/versioning/change-classifier.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @fileoverview Tests for change-classifier.ts
+ * @see SMI-skill-version-tracking Wave 2
+ */
+export {};
+//# sourceMappingURL=change-classifier.test.d.ts.map

package/dist/versioning/change-classifier.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-classifier.test.d.ts","sourceRoot":"","sources":["../../src/versioning/change-classifier.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}