@spinabot/brigade 0.1.1 → 1.0.0

package/dist/agents/skills/discovery.js

@@ -0,0 +1,136 @@
+/**
+ * Skill discovery — the Brigade-native facade over Pi's skill loader.
+ *
+ * Pi (`loadSkillsFromDir`) does the heavy lifting we want to reuse: SKILL.md
+ * discovery (folder-per-skill), frontmatter parse + validation (name matches
+ * dir, lowercase, description present), and the standard agentskills.io
+ * `<available_skills>` XML render (`formatSkillsForPrompt`). Brigade layers on
+ * what Pi structurally lacks: two-root merge (bundled + user workspace),
+ * config enable/disable, and OS/binary/env ELIGIBILITY filtering — see
+ * `eligibility.ts`.
+ *
+ * WHY render here instead of letting Pi inject: Brigade pins the whole system
+ * prompt via `applyPersonaOverrideToSession`, which replaces Pi's prompt-build
+ * hook — so Pi's own skills injection never survives. The agent-loop passes
+ * the rendered block into the assembler, so the assembled persona prompt owns
+ * the `<available_skills>` section directly. The session's Pi resource loader
+ * runs with `noSkills` so nothing is discovered twice.
+ *
+ * Discovery is a synchronous filesystem scan (Pi's loader is sync). At
+ * single-user scale with a handful of skills it's sub-millisecond, so it runs
+ * per turn with no cache — a dropped-in skill is live on the very next turn
+ * (the "drop-a-folder-it-works" contract) with no watcher to wire.
+ */
+import * as fs from "node:fs";
+import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
+import { createSubsystemLogger } from "../../logging/subsystem-logger.js";
+import { isSkillEligible, readSkillEligibility, } from "./eligibility.js";
+const log = createSubsystemLogger("skills/discovery");
+/** Source roots, lowest → highest precedence (later wins on a name collision). */
+const SOURCE_BUNDLED = "bundled";
+const SOURCE_CONFIG = "config";
+/** `~/.brigade/skills/` — managed-dir installs (`skills.install` RPC). */
+export const SOURCE_MANAGED = "managed";
+/** `~/.agents/skills/` — operator's personal skills shared across projects. */
+export const SOURCE_PERSONAL = "agents-skills-personal";
+/** `<workspace>/.agents/skills/` — project-scoped skills. */
+export const SOURCE_PROJECT = "agents-skills-project";
+const SOURCE_WORKSPACE = "workspace";
+/** Scan one root, tolerating a missing dir. Returns Pi skills + diagnostics. */
+function scanRoot(dir, source) {
+    if (!dir || !fs.existsSync(dir))
+        return { skills: [], diagnostics: [] };
+    try {
+        const res = loadSkillsFromDir({ dir, source });
+        return { skills: res.skills, diagnostics: res.diagnostics };
+    }
+    catch (err) {
+        log.warn("skill root scan failed", {
+            dir,
+            source,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return { skills: [], diagnostics: [] };
+    }
+}
+/**
+ * Discover skills across the bundled + workspace roots, merge by name
+ * (workspace wins), drop config-disabled and ineligible ones, and render the
+ * survivors into the `<available_skills>` prompt block.
+ */
+export function discoverSkills(args) {
+    const diagnostics = [];
+    // Merge lowest → highest precedence so a workspace skill overrides a
+    // same-named bundled (or config-path / managed / personal / project) one —
+    // the user can shadow a shipped skill by dropping a same-named folder
+    // further up the chain. Order:
+    //   bundled < config.skills.paths < managed (~/.brigade/skills)
+    //          < personal (~/.agents/skills) < project (<ws>/.agents/skills)
+    //          < workspace (<ws>/skills)
+    const roots = [[args.bundledSkillsDir, SOURCE_BUNDLED]];
+    // Org-visible peers sit just above bundled — below everything operator-
+    // placed, so they can shadow only a shipped starter, never a local skill.
+    for (const r of args.orgSkillRoots ?? [])
+        roots.push([r.dir, `org:${r.agentId}`]);
+    for (const p of args.extraPaths ?? [])
+        roots.push([p, SOURCE_CONFIG]);
+    roots.push([args.managedSkillsDir, SOURCE_MANAGED]);
+    roots.push([args.personalSkillsDir, SOURCE_PERSONAL]);
+    roots.push([args.projectSkillsDir, SOURCE_PROJECT]);
+    roots.push([args.workspaceSkillsDir, SOURCE_WORKSPACE]);
+    const byName = new Map();
+    for (const [dir, source] of roots) {
+        const { skills, diagnostics: diags } = scanRoot(dir, source);
+        diagnostics.push(...diags);
+        for (const skill of skills)
+            byName.set(skill.name, { skill, source });
+    }
+    const totalDiscovered = byName.size;
+    const disabled = args.disabledNames ?? new Set();
+    const ctx = args.eligibilityCtx;
+    const allowlist = args.skillAllowlist;
+    const eligiblePi = [];
+    const skills = [];
+    for (const { skill, source } of byName.values()) {
+        if (disabled.has(skill.name))
+            continue;
+        // Per-agent allowlist (S1) — `undefined` is "no restriction"; `[]` is
+        // explicit deny-all. `includes` keeps it O(n*m) for small lists; if
+        // the catalogue grows past dozens of skills this becomes a Set lookup.
+        //
+        // 3a: an agent's OWN workspace skills are EXEMPT from the allowlist —
+        // it is the whole-and-sole owner of what it authored, so a shared
+        // `agents.defaults.skills` allowlist (set for shared-skill hygiene) can
+        // never silently blind an agent to its own self-authored skills. The
+        // allowlist still gates every SHARED root (bundled/config/org/managed/
+        // personal/project). `skills.entries[x].enabled=false` and global
+        // `skills.enabled=false` remain operator kill-switches that DO apply.
+        if (allowlist !== undefined && source !== SOURCE_WORKSPACE && !allowlist.includes(skill.name)) {
+            continue;
+        }
+        const eligibility = readSkillEligibility(skill.filePath);
+        if (!(ctx ? isSkillEligible(eligibility, ctx) : isSkillEligible(eligibility)))
+            continue;
+        eligiblePi.push(skill);
+        skills.push({
+            name: skill.name,
+            description: skill.description,
+            filePath: skill.filePath,
+            source,
+            eligibility,
+        });
+    }
+    skills.sort((a, b) => a.name.localeCompare(b.name));
+    eligiblePi.sort((a, b) => a.name.localeCompare(b.name));
+    // formatSkillsForPrompt itself drops disableModelInvocation skills, so the
+    // rendered block can be empty even when `skills` is not — guard on the
+    // rendered text, and treat a whitespace-only render as "nothing".
+    const rendered = eligiblePi.length > 0 ? formatSkillsForPrompt(eligiblePi).trim() : "";
+    return {
+        skills,
+        promptBlock: rendered.length > 0 ? rendered : undefined,
+        totalDiscovered,
+        diagnostics,
+    };
+}
+//# sourceMappingURL=discovery.js.map

package/dist/agents/skills/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/agents/skills/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAc,MAAM,+BAA+B,CAAC;AAErG,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAEN,eAAe,EACf,oBAAoB,GAEpB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,GAAG,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;AAEtD,kFAAkF;AAClF,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AACxC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACxD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AACtD,MAAM,gBAAgB,GAAG,WAAW,CAAC;AA8DrC,gFAAgF;AAChF,SAAS,QAAQ,CAAC,GAAuB,EAAE,MAAc;IACxD,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACxE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAClC,GAAG;YACH,MAAM;YACN,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAwB;IACtD,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,+BAA+B;IAC/B,gEAAgE;IAChE,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,KAAK,GAAwC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7F,wEAAwE;IACxE,0EAA0E;IAC1E,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;IACnE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7D,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,EAAU,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC;IAEtC,MAAM,UAAU,GAAY,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,EAAE;QACF,sEAAsE;QACtE,kEAAkE;QAClE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;QAClE,sEAAsE;QACtE,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/F,SAAS;QACV,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAAE,SAAS;QACxF,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,WAAW;SACX,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,2EAA2E;IAC3E,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO;QACN,MAAM;QACN,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACvD,eAAe;QACf,WAAW;KACX,CAAC;AACH,CAAC"}

package/dist/agents/skills/eligibility.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Skill eligibility — the filter Pi's loader does NOT provide.
+ *
+ * Pi's `loadSkillsFromDir` discovers + validates skills (name, description,
+ * disable-model-invocation) but has no notion of "only on macOS" or "only when
+ * `gh` is installed". A skill that lists API endpoints for a CLI the user
+ * doesn't have, or workflows for the wrong OS, is noise in the prompt at best
+ * and misleading at worst. So Brigade reads a small set of Brigade-native
+ * eligibility keys from each SKILL.md frontmatter and excludes skills that
+ * can't run here BEFORE they reach the prompt.
+ *
+ * Eligibility is read from the SKILL.md YAML frontmatter, in EITHER of two
+ * shapes (the frontmatter is parsed with a real YAML parser, so block lists,
+ * flow lists, and comma-separated scalars all work — and a YAML formatter
+ * reformatting the file can't silently break it):
+ *
+ *   1. Nested `metadata.brigade` block (how ported skills carry it — preserves
+ *      the upstream metadata structure incl. install specs verbatim):
+ *        metadata:
+ *          { "brigade": { "os": ["darwin"], "requires": { "bins": ["gh"] } } }
+ *
+ *   2. Flat top-level keys (the simplest form, taught by the skill-creator skill
+ *      for hand-authored skills):
+ *        os: macos, linux, windows
+ *        requires-bins: gh
+ *        requires-any-bins: rg, grep
+ *        requires-env: GITHUB_TOKEN
+ *
+ * `metadata.brigade` takes precedence per-field; flat keys fill in anything it
+ * doesn't set. Semantics (all must pass): `os` — current platform must be in the
+ * list (when present); `requires-bins` — every binary on PATH; `requires-any-bins`
+ * — at least one on PATH; `requires-env` — every env var set & non-empty. A skill
+ * declaring none of these is always eligible.
+ */
+/** Parsed Brigade eligibility metadata from a SKILL.md frontmatter block. */
+export interface SkillEligibility {
+    /** Allowed platforms (node `process.platform` values). Empty → any OS. */
+    os: string[];
+    /** Binaries that must ALL be on PATH. */
+    requiresBins: string[];
+    /** Binaries of which at least ONE must be on PATH. */
+    requiresAnyBins: string[];
+    /** Env vars that must ALL be set & non-empty. */
+    requiresEnv: string[];
+    /**
+     * Dotted config paths that must ALL resolve to truthy values in the active
+     * `brigade.json`. Patterned on the reference messaging-stack's same field:
+     * a `bluebubbles` skill (iMessage) declares `requires.config: ["channels.bluebubbles"]`
+     * and is hidden from the prompt entirely when the operator has WhatsApp
+     * but not BlueBubbles configured. Without this, the model sees skills it
+     * can't actually use and goes off-rails trying to invoke them.
+     *
+     * Truthy semantics for the resolved value:
+     *   - object              → truthy when it has at least one key
+     *   - array               → truthy when non-empty
+     *   - string              → truthy when non-empty (after trim)
+     *   - boolean             → truthy when true
+     *   - number              → truthy when non-zero
+     *   - null / undefined    → falsy
+     *
+     * Empty array → no constraint (eligible regardless of config).
+     */
+    requiresConfig: string[];
+}
+/**
+ * Extract the leading `---`-fenced frontmatter block of a file as raw text.
+ * Returns "" when there's no well-formed leading block. Tolerant of a leading
+ * BOM and CRLF line endings.
+ */
+export declare function extractFrontmatterBlock(content: string): string;
+/**
+ * Parse the Brigade eligibility out of a YAML frontmatter block. Reads the
+ * nested `metadata.brigade.{os, requires.{bins,anyBins,env}}` block first (the
+ * faithful ported form), then fills any unset field from the flat top-level
+ * keys (`os` / `requires-bins` / `requires-any-bins` / `requires-env`). Parsed
+ * with a real YAML parser, so block lists, flow lists `[a, b]` (incl. trailing
+ * commas), and comma-separated scalars all work. Never throws.
+ */
+export declare function parseEligibility(frontmatter: string): SkillEligibility;
+/** Read + parse a SKILL.md file's eligibility. Missing/unreadable file → empty (eligible). */
+export declare function readSkillEligibility(filePath: string): SkillEligibility;
+/**
+ * Resolve a dotted path like `"channels.whatsapp"` against a config object and
+ * test for truthy presence. Lifted from the reference implementation's
+ * `isConfigPathTruthy` shape, brand-scrubbed. Used to hide skills that
+ * declare `requires.config: ["channels.whatsapp"]` when the operator has no
+ * whatsapp section in brigade.json. Returns `false` on any traversal failure
+ * (missing intermediate key, null path) — "if the config has nothing there,
+ * the skill is ineligible".
+ */
+export declare function isConfigPathTruthy(config: unknown, dottedPath: string): boolean;
+/**
+ * True when `name` resolves to an executable on PATH. Cross-platform: on
+ * Windows it honours PATHEXT (so `gh` matches `gh.exe`). Result cached per
+ * process — binaries don't appear/disappear within a single run.
+ */
+export declare function hasBinary(name: string, env?: NodeJS.ProcessEnv): boolean;
+/** Reset the binary lookup cache (tests). */
+export declare function clearBinaryCache(): void;
+export interface EligibilityEnv {
+    platform: string;
+    env: NodeJS.ProcessEnv;
+    /**
+     * Active `brigade.json` snapshot. When provided, `requires.config` paths
+     * are evaluated against it; when omitted, config-gated skills are
+     * conservatively allowed (so unit tests without a real config don't have
+     * to mock one). Callers that want the prompt to actually hide the
+     * channel-gated skills MUST pass the real config.
+     */
+    config?: unknown;
+}
+/**
+ * Evaluate whether a skill is eligible to run in this environment. Pure given
+ * the injected `platform`/`env` (binary lookup reads PATH from `env`), so it's
+ * deterministic in tests.
+ */
+export declare function isSkillEligible(meta: SkillEligibility, ctx?: EligibilityEnv): boolean;
+//# sourceMappingURL=eligibility.d.ts.map

package/dist/agents/skills/eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eligibility.d.ts","sourceRoot":"","sources":["../../../src/agents/skills/eligibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAOH,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAChC,0EAA0E;IAC1E,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,yCAAyC;IACzC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sDAAsD;IACtD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iDAAiD;IACjD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;CACzB;AAyCD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAsCtE;AAED,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAcvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,GAChB,OAAO,CAmBT;AASD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAmCrF;AAED,6CAA6C;AAC7C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAID,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC9B,IAAI,EAAE,gBAAgB,EACtB,GAAG,GAAE,cAAiE,GACpE,OAAO,CAuBT"}

package/dist/agents/skills/eligibility.js

@@ -0,0 +1,280 @@
+/**
+ * Skill eligibility — the filter Pi's loader does NOT provide.
+ *
+ * Pi's `loadSkillsFromDir` discovers + validates skills (name, description,
+ * disable-model-invocation) but has no notion of "only on macOS" or "only when
+ * `gh` is installed". A skill that lists API endpoints for a CLI the user
+ * doesn't have, or workflows for the wrong OS, is noise in the prompt at best
+ * and misleading at worst. So Brigade reads a small set of Brigade-native
+ * eligibility keys from each SKILL.md frontmatter and excludes skills that
+ * can't run here BEFORE they reach the prompt.
+ *
+ * Eligibility is read from the SKILL.md YAML frontmatter, in EITHER of two
+ * shapes (the frontmatter is parsed with a real YAML parser, so block lists,
+ * flow lists, and comma-separated scalars all work — and a YAML formatter
+ * reformatting the file can't silently break it):
+ *
+ *   1. Nested `metadata.brigade` block (how ported skills carry it — preserves
+ *      the upstream metadata structure incl. install specs verbatim):
+ *        metadata:
+ *          { "brigade": { "os": ["darwin"], "requires": { "bins": ["gh"] } } }
+ *
+ *   2. Flat top-level keys (the simplest form, taught by the skill-creator skill
+ *      for hand-authored skills):
+ *        os: macos, linux, windows
+ *        requires-bins: gh
+ *        requires-any-bins: rg, grep
+ *        requires-env: GITHUB_TOKEN
+ *
+ * `metadata.brigade` takes precedence per-field; flat keys fill in anything it
+ * doesn't set. Semantics (all must pass): `os` — current platform must be in the
+ * list (when present); `requires-bins` — every binary on PATH; `requires-any-bins`
+ * — at least one on PATH; `requires-env` — every env var set & non-empty. A skill
+ * declaring none of these is always eligible.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import YAML from "yaml";
+/** Friendly OS name → node `process.platform`. Unknown names pass through. */
+const OS_ALIASES = {
+    macos: "darwin",
+    mac: "darwin",
+    osx: "darwin",
+    darwin: "darwin",
+    linux: "linux",
+    windows: "win32",
+    win: "win32",
+    win32: "win32",
+};
+function normalizeOs(token) {
+    const key = token.trim().toLowerCase();
+    return OS_ALIASES[key] ?? key;
+}
+/**
+ * Coerce a parsed YAML value into a clean string-token list. Handles every
+ * shape eligibility values legitimately take: a YAML sequence (block or flow)
+ * → array of strings; a comma-separated scalar (`gh, jq`) → split; a single
+ * scalar (`gh`) → one token. Non-strings are dropped.
+ */
+function toStrList(value) {
+    if (Array.isArray(value)) {
+        return value.filter((x) => typeof x === "string").map((s) => s.trim()).filter(Boolean);
+    }
+    if (typeof value === "string") {
+        return value.split(",").map((s) => s.trim()).filter(Boolean);
+    }
+    return [];
+}
+function asObject(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/**
+ * Extract the leading `---`-fenced frontmatter block of a file as raw text.
+ * Returns "" when there's no well-formed leading block. Tolerant of a leading
+ * BOM and CRLF line endings.
+ */
+export function extractFrontmatterBlock(content) {
+    const text = content.replace(/^/, "");
+    // Must open with `---` on the very first line.
+    const open = text.match(/^---[ \t]*\r?\n/);
+    if (!open)
+        return "";
+    const rest = text.slice(open[0].length);
+    const close = rest.search(/\r?\n---[ \t]*(\r?\n|$)/);
+    if (close === -1)
+        return "";
+    return rest.slice(0, close);
+}
+/**
+ * Parse the Brigade eligibility out of a YAML frontmatter block. Reads the
+ * nested `metadata.brigade.{os, requires.{bins,anyBins,env}}` block first (the
+ * faithful ported form), then fills any unset field from the flat top-level
+ * keys (`os` / `requires-bins` / `requires-any-bins` / `requires-env`). Parsed
+ * with a real YAML parser, so block lists, flow lists `[a, b]` (incl. trailing
+ * commas), and comma-separated scalars all work. Never throws.
+ */
+export function parseEligibility(frontmatter) {
+    const out = {
+        os: [],
+        requiresBins: [],
+        requiresAnyBins: [],
+        requiresEnv: [],
+        requiresConfig: [],
+    };
+    let doc;
+    try {
+        doc = YAML.parse(frontmatter);
+    }
+    catch {
+        return out; // malformed frontmatter → no constraints (eligible)
+    }
+    const fm = asObject(doc);
+    if (!fm)
+        return out;
+    // 1. Nested metadata.brigade — the ported upstream block (preserves install
+    //    specs etc. verbatim). Takes precedence per-field.
+    const brigadeMeta = asObject(asObject(fm.metadata)?.brigade);
+    if (brigadeMeta) {
+        out.os = toStrList(brigadeMeta.os).map(normalizeOs);
+        const req = asObject(brigadeMeta.requires);
+        if (req) {
+            out.requiresBins = toStrList(req.bins);
+            out.requiresAnyBins = toStrList(req.anyBins);
+            out.requiresEnv = toStrList(req.env);
+            out.requiresConfig = toStrList(req.config);
+        }
+    }
+    // 2. Flat top-level keys — the hand-authored form; fills anything unset above.
+    if (out.os.length === 0)
+        out.os = toStrList(fm.os).map(normalizeOs);
+    if (out.requiresBins.length === 0)
+        out.requiresBins = toStrList(fm["requires-bins"]);
+    if (out.requiresAnyBins.length === 0)
+        out.requiresAnyBins = toStrList(fm["requires-any-bins"]);
+    if (out.requiresEnv.length === 0)
+        out.requiresEnv = toStrList(fm["requires-env"]);
+    if (out.requiresConfig.length === 0)
+        out.requiresConfig = toStrList(fm["requires-config"]);
+    return out;
+}
+/** Read + parse a SKILL.md file's eligibility. Missing/unreadable file → empty (eligible). */
+export function readSkillEligibility(filePath) {
+    let content;
+    try {
+        content = fs.readFileSync(filePath, "utf8");
+    }
+    catch {
+        return {
+            os: [],
+            requiresBins: [],
+            requiresAnyBins: [],
+            requiresEnv: [],
+            requiresConfig: [],
+        };
+    }
+    return parseEligibility(extractFrontmatterBlock(content));
+}
+/**
+ * Resolve a dotted path like `"channels.whatsapp"` against a config object and
+ * test for truthy presence. Lifted from the reference implementation's
+ * `isConfigPathTruthy` shape, brand-scrubbed. Used to hide skills that
+ * declare `requires.config: ["channels.whatsapp"]` when the operator has no
+ * whatsapp section in brigade.json. Returns `false` on any traversal failure
+ * (missing intermediate key, null path) — "if the config has nothing there,
+ * the skill is ineligible".
+ */
+export function isConfigPathTruthy(config, dottedPath) {
+    const segments = dottedPath.split(".").map((s) => s.trim()).filter(Boolean);
+    if (segments.length === 0)
+        return false;
+    let cursor = config;
+    for (const segment of segments) {
+        if (cursor === null || typeof cursor !== "object")
+            return false;
+        cursor = cursor[segment];
+        if (cursor === undefined)
+            return false;
+    }
+    // Truthy resolution — see SkillEligibility.requiresConfig doc-comment.
+    if (cursor === null || cursor === undefined)
+        return false;
+    if (typeof cursor === "string")
+        return cursor.trim().length > 0;
+    if (typeof cursor === "number")
+        return cursor !== 0;
+    if (typeof cursor === "boolean")
+        return cursor;
+    if (Array.isArray(cursor))
+        return cursor.length > 0;
+    if (typeof cursor === "object") {
+        return Object.keys(cursor).length > 0;
+    }
+    return Boolean(cursor);
+}
+/* ───────────────────────── binary lookup ───────────────────────── */
+const binaryCache = new Map();
+/** Windows executable extensions to probe when PATHEXT isn't set. */
+const DEFAULT_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+/**
+ * True when `name` resolves to an executable on PATH. Cross-platform: on
+ * Windows it honours PATHEXT (so `gh` matches `gh.exe`). Result cached per
+ * process — binaries don't appear/disappear within a single run.
+ */
+export function hasBinary(name, env = process.env) {
+    if (!name)
+        return false;
+    const pathValue = env.PATH ?? env.Path ?? "";
+    // Key the cache on name + PATH: the answer depends on PATH, and the
+    // injectable `env` seam (tests, future multi-env) must not get a stale hit
+    // from a different PATH. In the normal single-env case the key is constant.
+    const cacheKey = `${name}${pathValue}`;
+    const cached = binaryCache.get(cacheKey);
+    if (cached !== undefined)
+        return cached;
+    const dirs = pathValue.split(path.delimiter).filter((d) => d.length > 0);
+    const isWindows = process.platform === "win32";
+    const exts = isWindows
+        ? (env.PATHEXT ?? DEFAULT_PATHEXT).split(";").map((e) => e.trim()).filter(Boolean)
+        : [""];
+    let found = false;
+    outer: for (const dir of dirs) {
+        // An explicit extension already on the name (e.g. "node.exe") shouldn't
+        // be double-suffixed; probe it bare first on every platform.
+        const candidates = isWindows ? ["", ...exts] : [""];
+        for (const ext of candidates) {
+            const candidate = path.join(dir, name + ext);
+            try {
+                if (fs.statSync(candidate).isFile()) {
+                    found = true;
+                    break outer;
+                }
+            }
+            catch {
+                /* not here; keep looking */
+            }
+        }
+    }
+    binaryCache.set(cacheKey, found);
+    return found;
+}
+/** Reset the binary lookup cache (tests). */
+export function clearBinaryCache() {
+    binaryCache.clear();
+}
+/**
+ * Evaluate whether a skill is eligible to run in this environment. Pure given
+ * the injected `platform`/`env` (binary lookup reads PATH from `env`), so it's
+ * deterministic in tests.
+ */
+export function isSkillEligible(meta, ctx = { platform: process.platform, env: process.env }) {
+    if (meta.os.length > 0 && !meta.os.includes(ctx.platform))
+        return false;
+    for (const bin of meta.requiresBins) {
+        if (!hasBinary(bin, ctx.env))
+            return false;
+    }
+    if (meta.requiresAnyBins.length > 0) {
+        if (!meta.requiresAnyBins.some((bin) => hasBinary(bin, ctx.env)))
+            return false;
+    }
+    for (const key of meta.requiresEnv) {
+        const v = ctx.env[key];
+        if (!v || v.trim().length === 0)
+            return false;
+    }
+    // `requires.config` — channel-gated skills (e.g. bluebubbles needs an
+    // iMessage adapter configured). When no config snapshot is provided, the
+    // constraint is conservatively skipped — the prompt assembler is where
+    // the real config gets passed; tests that don't care about config-gating
+    // don't need to mock one.
+    if (meta.requiresConfig.length > 0 && ctx.config !== undefined) {
+        for (const dottedPath of meta.requiresConfig) {
+            if (!isConfigPathTruthy(ctx.config, dottedPath))
+                return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=eligibility.js.map

package/dist/agents/skills/eligibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eligibility.js","sourceRoot":"","sources":["../../../src/agents/skills/eligibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,IAAI,MAAM,MAAM,CAAC;AAiCxB,8EAA8E;AAC9E,MAAM,UAAU,GAA2B;IAC1C,KAAK,EAAE,QAAQ;IACf,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,OAAO;IACZ,KAAK,EAAE,OAAO;CACd,CAAC;AAEF,SAAS,WAAW,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,+CAA+C;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IACnD,MAAM,GAAG,GAAqB;QAC7B,EAAE,EAAE,EAAE;QACN,YAAY,EAAE,EAAE;QAChB,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,EAAE;KAClB,CAAC;IACF,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC,CAAC,oDAAoD;IACjE,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAEpB,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,GAAG,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC;IAED,+EAA+E;IAC/E,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/F,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,cAAc,GAAG,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3F,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,EAAE,EAAE,EAAE;YACN,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,WAAW,EAAE,EAAE;YACf,cAAc,EAAE,EAAE;SAClB,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAe,EACf,UAAkB;IAElB,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAY,MAAM,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,uEAAuE;IACvE,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAiC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,uEAAuE;AAEvE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;AAE/C,qEAAqE;AACrE,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7C,oEAAoE;IACpE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS;QACrB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAClF,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAER,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,EAAE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACJ,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBACrC,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,4BAA4B;YAC7B,CAAC;QACF,CAAC;IACF,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,gBAAgB;IAC/B,WAAW,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,IAAsB,EACtB,MAAsB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;IAEtE,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IACD,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0BAA0B;IAC1B,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC/D,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/agents/skills/grant.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Skill command grants — bulk pre-approval of a skill's declared commands.
+ *
+ * Point 3b: "an agent is the whole-and-sole owner of its skills; stop asking
+ * me to approve every command its own skill documents." The SAFE realisation
+ * (a SKILL.md is just markdown the model itself can write, so we can NEVER
+ * blanket-trust whatever the file currently says): the operator GRANTS a skill
+ * once; granting copies the skill's CURRENT command manifest into the agent's
+ * exec-approvals allowlist via the normal `recordApproval` path. Because it's a
+ * snapshot, a later edit to the skill can't silently widen the grant — newly
+ * added commands simply aren't in the allowlist until the operator re-grants.
+ *
+ * No schema change: grants land as ordinary `commands` / `patterns` entries the
+ * exec-gate already consults. Hard-deny commands are refused (never approvable).
+ * Revoking re-reads the manifest and removes those entries.
+ *
+ * The grant flow is OPERATOR-INITIATED (the TUI `/grant-skill` command). The
+ * agent can't silently self-trust: a grant always runs in an owner-driven turn
+ * and reports exactly what it approved.
+ */
+import type { BrigadeConfig } from "../../config/io.js";
+import { type SkillCommandManifest } from "./skill-manifest.js";
+export interface SkillGrantResult {
+    /** Whether a skill of this name was found in the agent's discovered set. */
+    found: boolean;
+    /** The resolved skill name (as discovered). */
+    skill: string;
+    /** Commands + patterns the skill declares (its manifest). */
+    manifest: SkillCommandManifest;
+    /** Entries actually granted (excludes hard-denied + already-present). */
+    granted: {
+        commands: string[];
+        patterns: string[];
+    };
+    /** Entries refused because they match a hard-deny pattern. */
+    refused: string[];
+    /** True when the grant was applied; false for a dry-run preview. */
+    applied: boolean;
+    /** Set when the skill has no command manifest to grant. */
+    emptyManifest: boolean;
+}
+/**
+ * Preview or apply a skill grant. `apply: false` (default) is a dry run that
+ * reports the manifest without writing — the operator sees what they'd approve.
+ * `apply: true` records each command/pattern into the agent's allowlist.
+ */
+export declare function grantSkill(args: {
+    config: BrigadeConfig;
+    workspaceDir: string;
+    agentId: string;
+    skillName: string;
+    apply: boolean;
+}): SkillGrantResult;
+/**
+ * Revoke a prior grant by re-reading the skill's CURRENT manifest and removing
+ * those exact entries from the allowlist. Note: if the skill was edited since
+ * the grant, manifest entries that changed won't be matched — the operator can
+ * always remove stragglers with `brigade exec` directly.
+ */
+export declare function revokeSkill(args: {
+    config: BrigadeConfig;
+    workspaceDir: string;
+    agentId: string;
+    skillName: string;
+}): {
+    found: boolean;
+    skill: string;
+    removed: number;
+};
+//# sourceMappingURL=grant.d.ts.map

package/dist/agents/skills/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../../src/agents/skills/grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQxD,OAAO,EAA4B,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAChC,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,yEAAyE;IACzE,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpD,8DAA8D;IAC9D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,aAAa,EAAE,OAAO,CAAC;CACvB;AAeD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CACf,GAAG,gBAAgB,CAqDnB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAUrD"}