@sporesec/arcana 2.4.0 → 3.0.0

package/dist/commands/doctor.js

@@ -9,14 +9,24 @@ function checkNodeVersion() {
     if (major >= 18) {
         return { name: "Node.js", status: "pass", message: `${process.version}` };
     }
-    return { name: "Node.js", status: "fail", message: `${process.version} (need 18+)`, fix: "Install Node.js 18 or later" };
+    return {
+        name: "Node.js",
+        status: "fail",
+        message: `${process.version} (need 18+)`,
+        fix: "Install Node.js 18 or later",
+    };
 }
 function checkInstallDir() {
     const dir = getInstallDir();
     if (!existsSync(dir)) {
-        return { name: "Skills directory", status: "warn", message: "~/.agents/skills/ not found", fix: "Run: arcana install --all" };
-    }
-    const skills = readdirSync(dir).filter(d => statSync(join(dir, d)).isDirectory());
+        return {
+            name: "Skills directory",
+            status: "warn",
+            message: "~/.agents/skills/ not found",
+            fix: "Run: arcana install --all",
+        };
+    }
+    const skills = readdirSync(dir).filter((d) => statSync(join(dir, d)).isDirectory());
     return { name: "Skills directory", status: "pass", message: `${skills.length} skills installed` };
 }
 function checkBrokenSymlinks() {
@@ -24,9 +34,14 @@ function checkBrokenSymlinks() {
     if (symlinks.length === 0) {
         return { name: "Symlinks", status: "pass", message: "No symlink directory" };
     }
-    const broken = symlinks.filter(s => s.broken).length;
+    const broken = symlinks.filter((s) => s.broken).length;
     if (broken > 0) {
-        return { name: "Symlinks", status: "warn", message: `${broken}/${symlinks.length} broken symlinks`, fix: "Run: arcana clean" };
+        return {
+            name: "Symlinks",
+            status: "warn",
+            message: `${broken}/${symlinks.length} broken symlinks`,
+            fix: "Run: arcana clean",
+        };
     }
     return { name: "Symlinks", status: "pass", message: `${symlinks.length} symlinks ok` };
 }
@@ -35,12 +50,22 @@ function checkGitConfig() {
         const name = execSync("git config user.name", { encoding: "utf-8" }).trim();
         const email = execSync("git config user.email", { encoding: "utf-8" }).trim();
         if (!name || !email) {
-            return { name: "Git config", status: "warn", message: "Missing user.name or user.email", fix: "git config --global user.name \"Your Name\"" };
+            return {
+                name: "Git config",
+                status: "warn",
+                message: "Missing user.name or user.email",
+                fix: 'git config --global user.name "Your Name"',
+            };
         }
         return { name: "Git config", status: "pass", message: `${name} <${email}>` };
     }
     catch {
-        return { name: "Git config", status: "warn", message: "Git not found", fix: "Install Git from https://git-scm.com" };
+        return {
+            name: "Git config",
+            status: "warn",
+            message: "Git not found",
+            fix: "Install Git from https://git-scm.com",
+        };
     }
 }
 function checkArcanaConfig() {
@@ -73,10 +98,16 @@ function checkDiskUsage() {
             }
         }
     }
-    catch { /* skip */ }
+    catch {
+        /* skip */
+    }
     const mb = (totalSize / (1024 * 1024)).toFixed(1);
     if (totalSize > DISK_USAGE_THRESHOLD_MB * 1024 * 1024) {
-        return { name: "Disk usage", status: "warn", message: `${mb} MB across ${dirCount} projects (threshold: ${DISK_USAGE_THRESHOLD_MB} MB). Try: arcana clean` };
+        return {
+            name: "Disk usage",
+            status: "warn",
+            message: `${mb} MB across ${dirCount} projects (threshold: ${DISK_USAGE_THRESHOLD_MB} MB). Try: arcana clean`,
+        };
     }
     return { name: "Disk usage", status: "pass", message: `${mb} MB across ${dirCount} projects` };
 }
@@ -118,9 +149,8 @@ function checkSkillValidity() {
     let fix;
     if (missingMd.length > 0) {
         details.push(`${missingMd.length} missing SKILL.md (${missingMd.join(", ")})`);
-        fix = missingMd.length === 1
-            ? `Run: arcana uninstall ${missingMd[0]}`
-            : `Run: arcana uninstall ${missingMd.join(" ")}`;
+        fix =
+            missingMd.length === 1 ? `Run: arcana uninstall ${missingMd[0]}` : `Run: arcana uninstall ${missingMd.join(" ")}`;
     }
     else {
         fix = "Run: arcana validate --all --fix";
@@ -153,14 +183,21 @@ function checkSkillSizes() {
             large.push({ name: entry, kb });
     }
     if (large.length === 0) {
-        return { name: "Skill sizes", status: "pass", message: `All skills under 50 KB (total: ${totalKB.toFixed(0)} KB, ~${Math.round(totalKB * 256 / 1000)}K tokens)` };
+        return {
+            name: "Skill sizes",
+            status: "pass",
+            message: `All skills under 50 KB (total: ${totalKB.toFixed(0)} KB, ~${Math.round((totalKB * 256) / 1000)}K tokens)`,
+        };
     }
     large.sort((a, b) => b.kb - a.kb);
-    const top3 = large.slice(0, 3).map(s => `${s.name} (${s.kb.toFixed(0)} KB)`).join(", ");
+    const top3 = large
+        .slice(0, 3)
+        .map((s) => `${s.name} (${s.kb.toFixed(0)} KB)`)
+        .join(", ");
     return {
         name: "Skill sizes",
         status: "warn",
-        message: `${large.length} skills >50 KB (high token usage). Total: ${totalKB.toFixed(0)} KB (~${Math.round(totalKB * 256 / 1000)}K tokens). Largest: ${top3}`,
+        message: `${large.length} skills >50 KB (high token usage). Total: ${totalKB.toFixed(0)} KB (~${Math.round((totalKB * 256) / 1000)}K tokens). Largest: ${top3}`,
     };
 }
 function checkOrphanedProjects() {
@@ -269,20 +306,25 @@ export async function doctorCommand(opts = {}) {
     }
     const checks = runDoctorChecks();
     if (opts.json) {
-        console.log(JSON.stringify({ checks: checks.map((c) => ({ name: c.name, status: c.status, message: c.message, ...(c.fix ? { fix: c.fix } : {}) })) }, null, 2));
+        console.log(JSON.stringify({
+            checks: checks.map((c) => ({
+                name: c.name,
+                status: c.status,
+                message: c.message,
+                ...(c.fix ? { fix: c.fix } : {}),
+            })),
+        }, null, 2));
         return;
     }
     for (const check of checks) {
-        const icon = check.status === "pass" ? ui.success("[OK]")
-            : check.status === "warn" ? ui.warn("[!!]")
-                : ui.error("[XX]");
+        const icon = check.status === "pass" ? ui.success("[OK]") : check.status === "warn" ? ui.warn("[!!]") : ui.error("[XX]");
         console.log(`  ${icon} ${ui.bold(check.name)}: ${check.message}`);
         if (check.fix) {
             console.log(ui.dim(`    Fix: ${check.fix}`));
         }
     }
-    const fails = checks.filter(c => c.status === "fail").length;
-    const warns = checks.filter(c => c.status === "warn").length;
+    const fails = checks.filter((c) => c.status === "fail").length;
+    const warns = checks.filter((c) => c.status === "warn").length;
     console.log();
     if (fails > 0) {
         console.log(ui.error(`  ${fails} issue${fails > 1 ? "s" : ""} found`));
@@ -298,4 +340,3 @@ export async function doctorCommand(opts = {}) {
         suggest("arcana list");
     }
 }
-//# sourceMappingURL=doctor.js.map

package/dist/commands/export-cmd.d.ts

@@ -0,0 +1,4 @@
+export declare function exportCommand(opts: {
+    json?: boolean;
+    sbom?: boolean;
+}): Promise<void>;

package/dist/commands/export-cmd.js

@@ -0,0 +1,66 @@
+import { readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { getInstallDir, readSkillMeta } from "../utils/fs.js";
+import { readLockfile } from "../utils/integrity.js";
+function getInstalledSkillDirs() {
+    const installDir = getInstallDir();
+    try {
+        return readdirSync(installDir).filter((d) => statSync(join(installDir, d)).isDirectory());
+    }
+    catch {
+        return [];
+    }
+}
+export async function exportCommand(opts) {
+    const dirs = getInstalledSkillDirs();
+    if (dirs.length === 0) {
+        console.log(JSON.stringify({ skills: [], message: "No skills installed" }));
+        return;
+    }
+    if (opts.sbom) {
+        return exportSbom(dirs);
+    }
+    return exportManifest(dirs);
+}
+function exportManifest(dirs) {
+    const skills = [];
+    for (const name of dirs) {
+        const meta = readSkillMeta(name);
+        skills.push({
+            name,
+            version: meta?.version ?? "unknown",
+            source: meta?.source ?? "local",
+            description: meta?.description ?? "",
+        });
+    }
+    const manifest = {
+        exportedAt: new Date().toISOString(),
+        skillCount: skills.length,
+        skills,
+    };
+    console.log(JSON.stringify(manifest, null, 2));
+}
+function exportSbom(dirs) {
+    const lockEntries = readLockfile();
+    const lockMap = new Map(lockEntries.map((e) => [e.skill, e]));
+    const packages = [];
+    for (const name of dirs) {
+        const meta = readSkillMeta(name);
+        const lock = lockMap.get(name);
+        packages.push({
+            name,
+            version: meta?.version ?? lock?.version ?? "unknown",
+            source: meta?.source ?? lock?.source ?? "local",
+            hash: lock?.hash ?? "unknown",
+        });
+    }
+    const sbom = {
+        spdxVersion: "SPDX-2.3",
+        dataLicense: "CC0-1.0",
+        name: "arcana-skills-sbom",
+        documentNamespace: `https://arcana.dev/sbom/${Date.now()}`,
+        createdAt: new Date().toISOString(),
+        packages,
+    };
+    console.log(JSON.stringify(sbom, null, 2));
+}

package/dist/commands/import-cmd.d.ts

@@ -0,0 +1,4 @@
+export declare function importCommand(file: string, opts: {
+    json?: boolean;
+    force?: boolean;
+}): Promise<void>;

package/dist/commands/import-cmd.js

@@ -0,0 +1,131 @@
+import { readFileSync, existsSync } from "node:fs";
+import { getProvider } from "../registry.js";
+import { installSkill, writeSkillMeta } from "../utils/fs.js";
+import { loadConfig } from "../utils/config.js";
+import { updateLockEntry } from "../utils/integrity.js";
+import { validateSlug } from "../utils/validate.js";
+function parseManifest(raw) {
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null || !Array.isArray(parsed.skills)) {
+        throw new Error("Invalid manifest: expected object with 'skills' array");
+    }
+    const obj = parsed;
+    const skills = obj.skills.map((entry, i) => {
+        if (typeof entry !== "object" || entry === null) {
+            throw new Error(`Invalid manifest entry at index ${i}`);
+        }
+        const e = entry;
+        if (typeof e.name !== "string" || e.name.length === 0) {
+            throw new Error(`Invalid manifest entry at index ${i}: missing name`);
+        }
+        return {
+            name: e.name,
+            version: typeof e.version === "string" ? e.version : undefined,
+            source: typeof e.source === "string" ? e.source : undefined,
+            description: typeof e.description === "string" ? e.description : undefined,
+        };
+    });
+    return { skills };
+}
+export async function importCommand(file, opts) {
+    if (!existsSync(file)) {
+        if (opts.json) {
+            console.log(JSON.stringify({ error: `File not found: ${file}` }));
+        }
+        else {
+            console.error(`Error: File not found: ${file}`);
+        }
+        process.exit(1);
+    }
+    let manifest;
+    try {
+        const raw = readFileSync(file, "utf-8");
+        manifest = parseManifest(raw);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : "Failed to parse manifest";
+        if (opts.json) {
+            console.log(JSON.stringify({ error: msg }));
+        }
+        else {
+            console.error(`Error: ${msg}`);
+        }
+        process.exit(1);
+    }
+    if (manifest.skills.length === 0) {
+        if (opts.json) {
+            console.log(JSON.stringify({ installed: [], skipped: [], failed: [], message: "No skills in manifest" }));
+        }
+        else {
+            console.log("No skills found in manifest.");
+        }
+        return;
+    }
+    const config = loadConfig();
+    const installed = [];
+    const skipped = [];
+    const failed = [];
+    const errors = {};
+    for (const entry of manifest.skills) {
+        // Validate skill name
+        try {
+            validateSlug(entry.name, "skill name");
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : "Invalid skill name";
+            failed.push(entry.name);
+            errors[entry.name] = msg;
+            if (!opts.json) {
+                console.error(`Skipping ${entry.name}: ${msg}`);
+            }
+            continue;
+        }
+        // Check if already installed (skip unless --force)
+        const { isSkillInstalled } = await import("../utils/fs.js");
+        if (isSkillInstalled(entry.name) && !opts.force) {
+            skipped.push(entry.name);
+            continue;
+        }
+        // Fetch and install
+        try {
+            const providerName = entry.source ?? config.defaultProvider;
+            const provider = getProvider(providerName);
+            const files = await provider.fetch(entry.name);
+            installSkill(entry.name, files);
+            const remote = await provider.info(entry.name);
+            const version = remote?.version ?? entry.version ?? "0.0.0";
+            writeSkillMeta(entry.name, {
+                version,
+                installedAt: new Date().toISOString(),
+                source: provider.name,
+                description: remote?.description ?? entry.description,
+                fileCount: files.length,
+                sizeBytes: files.reduce((s, f) => s + f.content.length, 0),
+            });
+            updateLockEntry(entry.name, version, provider.name, files);
+            installed.push(entry.name);
+            if (!opts.json) {
+                console.log(`Installed ${entry.name}`);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : "unknown error";
+            failed.push(entry.name);
+            errors[entry.name] = msg;
+            if (!opts.json) {
+                console.error(`Failed to install ${entry.name}: ${msg}`);
+            }
+        }
+    }
+    if (opts.json) {
+        const result = { installed, skipped, failed };
+        if (Object.keys(errors).length > 0)
+            result.errors = errors;
+        console.log(JSON.stringify(result));
+    }
+    else {
+        console.log(`Import complete: ${installed.length} installed, ${skipped.length} skipped, ${failed.length} failed`);
+    }
+    if (failed.length > 0)
+        process.exit(1);
+}

package/dist/commands/info.d.ts

@@ -2,4 +2,3 @@ export declare function infoCommand(skillName: string, opts: {
     provider?: string;
     json?: boolean;
 }): Promise<void>;
-//# sourceMappingURL=info.d.ts.map

package/dist/commands/info.js

@@ -39,7 +39,12 @@ export async function infoCommand(skillName, opts) {
                             installedVersion: meta?.version,
                             source: skill.source,
                             repo: skill.repo,
-                        }
+                            tags: skill.tags,
+                            verified: skill.verified,
+                            author: skill.author,
+                            companions: skill.companions,
+                            conflicts: skill.conflicts,
+                        },
                     }));
                     return;
                 }
@@ -47,11 +52,32 @@ export async function infoCommand(skillName, opts) {
                 if (installed) {
                     const meta = readSkillMeta(skillName);
                     const localVersion = meta?.version ?? "unknown";
-                    console.log("  " + ui.success("Installed") + (localVersion !== skill.version ? ui.warn(` (local: v${localVersion})`) : ""));
+                    console.log("  " +
+                        ui.success("Installed") +
+                        (localVersion !== skill.version ? ui.warn(` (local: v${localVersion})`) : ""));
                 }
                 console.log();
                 console.log("  " + skill.description);
                 console.log();
+                if (skill.verified) {
+                    console.log("  " + ui.success("[Verified]") + " Official skill");
+                }
+                else {
+                    console.log(ui.dim("  Community skill"));
+                }
+                if (skill.author) {
+                    console.log(ui.dim(`  Author: ${skill.author}`));
+                }
+                if (skill.tags && skill.tags.length > 0) {
+                    console.log(ui.dim(`  Tags:   ${skill.tags.join(", ")}`));
+                }
+                if (skill.companions && skill.companions.length > 0) {
+                    console.log(ui.dim(`  Works with: ${skill.companions.join(", ")}`));
+                }
+                if (skill.conflicts && skill.conflicts.length > 0) {
+                    console.log(ui.warn(`  Conflicts: ${skill.conflicts.join(", ")}`));
+                }
+                console.log();
                 console.log(ui.dim(`  Source: ${skill.source}`));
                 if (skill.repo) {
                     console.log(ui.dim(`  Repo:   ${skill.repo}`));
@@ -77,7 +103,7 @@ export async function infoCommand(skillName, opts) {
                         installed: true,
                         source: meta?.source ?? "local",
                         offline: true,
-                    }
+                    },
                 }));
                 return;
             }
@@ -111,4 +137,3 @@ export async function infoCommand(skillName, opts) {
     }
     process.exit(1);
 }
-//# sourceMappingURL=info.js.map

package/dist/commands/init.d.ts

@@ -10,4 +10,3 @@ export declare function initCommand(opts: {
     tool?: string;
 }): Promise<void>;
 export {};
-//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.js

@@ -1,29 +1,12 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
-import { join, basename, dirname } from "node:path";
+import { join, dirname } from "node:path";
 import * as p from "@clack/prompts";
 import chalk from "chalk";
 import { renderBanner } from "../utils/help.js";
+import { detectProjectContext } from "../utils/project-context.js";
 export function detectProject(cwd) {
-    const name = basename(cwd);
-    if (existsSync(join(cwd, "go.mod")))
-        return { name, type: "Go", lang: "go" };
-    if (existsSync(join(cwd, "Cargo.toml")))
-        return { name, type: "Rust", lang: "rust" };
-    if (existsSync(join(cwd, "requirements.txt")) || existsSync(join(cwd, "pyproject.toml")))
-        return { name, type: "Python", lang: "python" };
-    if (existsSync(join(cwd, "package.json"))) {
-        try {
-            const raw = readFileSync(join(cwd, "package.json"), "utf-8");
-            const pkg = JSON.parse(raw);
-            if (pkg.dependencies?.next || pkg.devDependencies?.next)
-                return { name, type: "Next.js", lang: "typescript" };
-            if (pkg.dependencies?.react || pkg.devDependencies?.react)
-                return { name, type: "React", lang: "typescript" };
-        }
-        catch { /* ignore */ }
-        return { name, type: "Node.js", lang: "typescript" };
-    }
-    return { name, type: "Unknown", lang: "general" };
+    const ctx = detectProjectContext(cwd);
+    return { name: ctx.name, type: ctx.type, lang: ctx.lang };
 }
 function claudeTemplate(proj) {
     return `# CLAUDE.md - ${proj.name}
@@ -150,14 +133,19 @@ const TOOL_FILES = {
     aider: { path: ".aider.conf.yml", template: aiderTemplate, label: "Aider" },
 };
 export const SKILL_SUGGESTIONS = {
-    "Go": ["golang-pro", "go-linter-configuration", "testing-strategy", "security-review"],
-    "Rust": ["rust-best-practices", "testing-strategy", "security-review"],
-    "Python": ["python-best-practices", "testing-strategy", "security-review"],
+    Go: ["golang-pro", "go-linter-configuration", "testing-strategy", "security-review"],
+    Rust: ["rust-best-practices", "testing-strategy", "security-review"],
+    Python: ["python-best-practices", "testing-strategy", "security-review"],
     "Next.js": ["typescript", "typescript-advanced", "frontend-design", "performance-optimization", "security-review"],
-    "React": ["typescript", "frontend-design", "frontend-code-review", "testing-strategy"],
+    React: ["typescript", "frontend-design", "frontend-code-review", "testing-strategy"],
     "Node.js": ["typescript", "npm-package", "testing-strategy", "security-review"],
 };
-export const SKILL_SUGGESTIONS_DEFAULT = ["code-reviewer", "security-review", "codebase-dissection", "testing-strategy"];
+export const SKILL_SUGGESTIONS_DEFAULT = [
+    "code-reviewer",
+    "security-review",
+    "codebase-dissection",
+    "testing-strategy",
+];
 export async function initCommand(opts) {
     console.log(renderBanner());
     console.log();
@@ -216,7 +204,9 @@ export async function initCommand(opts) {
             const settings = JSON.parse(readFileSync(globalSettings, "utf-8"));
             hasPreCompactHook = Array.isArray(settings?.hooks?.PreCompact) && settings.hooks.PreCompact.length > 0;
         }
-        catch { /* ignore */ }
+        catch {
+            /* ignore */
+        }
     }
     if (!hasPreCompactHook) {
         const installHook = await p.confirm({
@@ -234,14 +224,18 @@ export async function initCommand(opts) {
                     settings = JSON.parse(readFileSync(globalSettings, "utf-8"));
                 }
                 const hooks = (settings.hooks ?? {});
-                hooks.PreCompact = [{
+                hooks.PreCompact = [
+                    {
                         matcher: "",
-                        hooks: [{
+                        hooks: [
+                            {
                                 type: "command",
-                                command: "bash -c 'PROJ_DIR=\"$HOME/.claude/projects\"; for d in \"$PROJ_DIR\"/*/memory; do if [ -d \"$d\" ]; then echo \"## Handover $(date +%Y-%m-%d_%H%M)\" >> \"$d/HANDOVER.md\"; echo \"Auto-compaction triggered. Review MEMORY.md for preserved context.\" >> \"$d/HANDOVER.md\"; echo \"\" >> \"$d/HANDOVER.md\"; fi; done'",
+                                command: 'bash -c \'PROJ_DIR="$HOME/.claude/projects"; for d in "$PROJ_DIR"/*/memory; do if [ -d "$d" ]; then echo "## Handover $(date +%Y-%m-%d_%H%M)" >> "$d/HANDOVER.md"; echo "Auto-compaction triggered. Review MEMORY.md for preserved context." >> "$d/HANDOVER.md"; echo "" >> "$d/HANDOVER.md"; fi; done\'',
                                 timeout: 10,
-                            }],
-                    }];
+                            },
+                        ],
+                    },
+                ];
                 settings.hooks = hooks;
                 writeFileSync(globalSettings, JSON.stringify(settings, null, 2) + "\n", "utf-8");
                 p.log.success("Installed PreCompact hook in ~/.claude/settings.json");
@@ -259,4 +253,3 @@ export async function initCommand(opts) {
     p.note(skillList, "Recommended skills");
     p.outro(`Next: ${chalk.cyan("arcana install <skill>")} or ${chalk.cyan("arcana install --all")}`);
 }
-//# sourceMappingURL=init.js.map

package/dist/commands/install.d.ts

@@ -4,5 +4,5 @@ export declare function installCommand(skillNames: string[], opts: {
     force?: boolean;
     dryRun?: boolean;
     json?: boolean;
+    noCheck?: boolean;
 }): Promise<void>;
-//# sourceMappingURL=install.d.ts.map