@tankpkg/sdk 0.14.4 → 0.15.0

package/dist/client.d.ts

@@ -24,7 +24,7 @@ export declare class TankClient {
             publishedAt: string;
         }>;
     }>;
-    download(name: string, version: string, options?: DownloadOptions): Promise<ReadableStream | Buffer | void>;
+    download(name: string, version: string, options?: DownloadOptions): Promise<ReadableStream | Buffer | undefined>;
     audit(name: string, version?: string): Promise<VersionDetail>;
     permissions(name: string, version?: string): Promise<Permissions | null>;
     whoami(): Promise<UserInfo | null>;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACd,MAAM,YAAY,CAAC;AAyDpB,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,GAAE,iBAAsB;YAQ7B,mBAAmB;IAiBjC,OAAO,CAAC,OAAO;YAaD,OAAO;YAwCP,IAAI;IAsBZ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAO3F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,KAAK,CAAC;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;IAII,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,IAAI,CAAC;IAsD3G,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU7D,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKxE,MAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAUlC,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAKnE,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IASnF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO5D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAalE,SAAS;IAqBjB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA4BhE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAI1E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACd,MAAM,YAAY,CAAC;AAyDpB,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,GAAE,iBAAsB;YAQ7B,mBAAmB;IAiBjC,OAAO,CAAC,OAAO;YAaD,OAAO;YAwCP,IAAI;IAsBZ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAO3F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,KAAK,CAAC;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;IAII,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;IAsDzC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU7D,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKxE,MAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAUlC,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAKnE,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IASnF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO5D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAalE,SAAS;IAqBjB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA4BhE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAI1E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C"}

package/dist/index.mjs

@@ -4236,6 +4236,30 @@ object({
 	visibility: _enum(["public", "private"]).optional(),
 	audit: object({ min_score: number().min(0).max(10) }).strict().optional()
 }).strict();
+const commandSchema = string().min(1, "command must not be empty");
+const argSchema = array(string()).default([]);
+const envSchema = record(string(), string()).optional();
+const remoteUrlSchema = string().url("remote must be a valid URL");
+const mcpServerSchema = union([object({
+	command: commandSchema,
+	args: argSchema,
+	env: envSchema,
+	requires_auth: literal(false).optional()
+}).strict(), object({
+	remote: remoteUrlSchema,
+	requires_auth: boolean().default(false),
+	env: envSchema
+}).strict()]);
+const perToolOverrideSchema = object({
+	scan: boolean().optional(),
+	blockOnMatch: boolean().optional()
+}).strict();
+object({
+	perfBudgetMs: number().positive().optional(),
+	blockOnMatch: boolean().optional(),
+	resetPinsOnMismatch: boolean().optional(),
+	perTool: record(string(), perToolOverrideSchema).optional()
+}).strict();
 const baseManifestFields = {
 	name: string().min(1, "Name must not be empty").max(214, `Name must be 214 characters or fewer`).regex(/^@[a-z0-9-]+\/[a-z0-9][a-z0-9-]*$/, "Name must be scoped (@org/name), lowercase alphanumeric and hyphens"),
 	version: string().regex(/^\d+\.\d+\.\d+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/, "Version must be valid semver"),
@@ -4244,7 +4268,8 @@ const baseManifestFields = {
 	permissions: permissionsSchema.optional(),
 	repository: string().url("Repository must be a valid URL").optional(),
 	visibility: _enum(["public", "private"]).optional(),
-	audit: object({ min_score: number().min(0).max(10) }).strict().optional()
+	audit: object({ min_score: number().min(0).max(10) }).strict().optional(),
+	mcp_server: mcpServerSchema.optional()
 };
 object(baseManifestFields).strict();
 object({
@@ -4653,83 +4678,6 @@ function hasNativeAcceleration() {
 	return tryLoadNative() !== null;
 }
 //#endregion
-//#region src/install/permissions.ts
-function checkPermissionBudget(budget, skillPerms, skillName) {
-	if (!skillPerms) return;
-	if (skillPerms.subprocess === true && budget.subprocess !== true) throw new TankPermissionError(`${skillName} requires subprocess access, but project budget does not allow it`);
-	if (skillPerms.network?.outbound && skillPerms.network.outbound.length > 0) {
-		const budgetDomains = budget.network?.outbound ?? [];
-		for (const domain of skillPerms.network.outbound) if (!isDomainAllowed(domain, budgetDomains)) throw new TankPermissionError(`${skillName} requests network access to "${domain}", which is not in the project's permission budget`);
-	}
-	if (skillPerms.filesystem?.read && skillPerms.filesystem.read.length > 0) {
-		const budgetPaths = budget.filesystem?.read ?? [];
-		for (const p of skillPerms.filesystem.read) if (!isPathAllowed(p, budgetPaths)) throw new TankPermissionError(`${skillName} requests filesystem read access to "${p}", which is not in the project's permission budget`);
-	}
-	if (skillPerms.filesystem?.write && skillPerms.filesystem.write.length > 0) {
-		const budgetPaths = budget.filesystem?.write ?? [];
-		for (const p of skillPerms.filesystem.write) if (!isPathAllowed(p, budgetPaths)) throw new TankPermissionError(`${skillName} requests filesystem write access to "${p}", which is not in the project's permission budget`);
-	}
-}
-function isDomainAllowed(domain, allowedDomains) {
-	for (const allowed of allowedDomains) {
-		if (allowed === domain) return true;
-		if (allowed.startsWith("*.")) {
-			const suffix = allowed.slice(1);
-			if (domain.endsWith(suffix) || domain === allowed.slice(2)) return true;
-			if (domain === allowed) return true;
-		}
-	}
-	return false;
-}
-function isPathAllowed(requestedPath, allowedPaths) {
-	const norm = (p) => p.replaceAll("\\", "/");
-	const req = norm(requestedPath);
-	if (req.includes("..")) return false;
-	for (const allowed of allowedPaths) {
-		const a = norm(allowed);
-		if (a === req) return true;
-		if (a.endsWith("/**")) {
-			const prefix = a.slice(0, -3);
-			if (req === prefix || req.startsWith(`${prefix}/`)) return true;
-		}
-	}
-	return false;
-}
-function collectPermissionViolations(budget, skillPerms, skillName) {
-	const violations = [];
-	if (!skillPerms) return violations;
-	if (skillPerms.subprocess === true && budget.subprocess !== true) violations.push({
-		skillName,
-		type: "subprocess",
-		requested: "true"
-	});
-	if (skillPerms.network?.outbound) {
-		const budgetDomains = budget.network?.outbound ?? [];
-		for (const domain of skillPerms.network.outbound) if (!isDomainAllowed(domain, budgetDomains)) violations.push({
-			skillName,
-			type: "network.outbound",
-			requested: domain
-		});
-	}
-	if (skillPerms.filesystem?.read) {
-		const budgetPaths = budget.filesystem?.read ?? [];
-		for (const p of skillPerms.filesystem.read) if (!isPathAllowed(p, budgetPaths)) violations.push({
-			skillName,
-			type: "filesystem.read",
-			requested: p
-		});
-	}
-	if (skillPerms.filesystem?.write) {
-		const budgetPaths = budget.filesystem?.write ?? [];
-		for (const p of skillPerms.filesystem.write) if (!isPathAllowed(p, budgetPaths)) violations.push({
-			skillName,
-			type: "filesystem.write",
-			requested: p
-		});
-	}
-	return violations;
-}
-//#endregion
 //#region ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const SEMVER_SPEC_VERSION = "2.0.0";
@@ -6066,6 +6014,8 @@ var import_semver = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exp
 		rcompareIdentifiers: identifiers.rcompareIdentifiers
 	};
 })))(), 1);
+const ALPHANUMERIC = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+`${ALPHANUMERIC}`, `${ALPHANUMERIC}`, `${ALPHANUMERIC}`, `${ALPHANUMERIC}`;
 function resolve(range, versions) {
 	try {
 		if (!range || !import_semver.default.validRange(range)) return null;
@@ -6076,6 +6026,107 @@ function resolve(range, versions) {
 		return null;
 	}
 }
+function isDomainAllowed(domain, allowedDomains) {
+	for (const allowed of allowedDomains) {
+		if (allowed === domain) return true;
+		if (allowed.startsWith("*.")) {
+			const suffix = allowed.slice(1);
+			if (domain.endsWith(suffix) || domain === allowed.slice(2)) return true;
+			if (domain === allowed) return true;
+		}
+	}
+	return false;
+}
+function isPathAllowed(requestedPath, allowedPaths) {
+	const norm = (p) => p.replaceAll("\\", "/");
+	const req = norm(requestedPath);
+	if (req.includes("..")) return false;
+	for (const allowed of allowedPaths) {
+		const a = norm(allowed);
+		if (a === req) return true;
+		if (a.endsWith("/**")) {
+			const prefix = a.slice(0, -3);
+			if (req === prefix || req.startsWith(`${prefix}/`)) return true;
+		}
+	}
+	return false;
+}
+/**
+* Thrown by checkPermissionBudget when a skill's declared permissions exceed the project budget.
+*
+* internals-helpers cannot import from @tankpkg/sdk (would invert dep graph).
+* sdk shim catches this and re-throws as TankPermissionError to preserve
+* the public sdk error API. See D7 / INTENT C25b.
+*/
+var PermissionBudgetError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "PermissionBudgetError";
+	}
+};
+function checkPermissionBudget$1(budget, skillPerms, skillName) {
+	if (!skillPerms) return;
+	if (skillPerms.subprocess === true && budget.subprocess !== true) throw new PermissionBudgetError(`${skillName} requires subprocess access, but project budget does not allow it`);
+	if (skillPerms.network?.outbound && skillPerms.network.outbound.length > 0) {
+		const budgetDomains = budget.network?.outbound ?? [];
+		for (const domain of skillPerms.network.outbound) if (!isDomainAllowed(domain, budgetDomains)) throw new PermissionBudgetError(`${skillName} requests network access to "${domain}", which is not in the project's permission budget`);
+	}
+	if (skillPerms.filesystem?.read && skillPerms.filesystem.read.length > 0) {
+		const budgetPaths = budget.filesystem?.read ?? [];
+		for (const p of skillPerms.filesystem.read) if (!isPathAllowed(p, budgetPaths)) throw new PermissionBudgetError(`${skillName} requests filesystem read access to "${p}", which is not in the project's permission budget`);
+	}
+	if (skillPerms.filesystem?.write && skillPerms.filesystem.write.length > 0) {
+		const budgetPaths = budget.filesystem?.write ?? [];
+		for (const p of skillPerms.filesystem.write) if (!isPathAllowed(p, budgetPaths)) throw new PermissionBudgetError(`${skillName} requests filesystem write access to "${p}", which is not in the project's permission budget`);
+	}
+}
+function collectPermissionViolations$1(budget, skillPerms, skillName) {
+	const violations = [];
+	if (!skillPerms) return violations;
+	if (skillPerms.subprocess === true && budget.subprocess !== true) violations.push({
+		skillName,
+		type: "subprocess",
+		requested: "true"
+	});
+	if (skillPerms.network?.outbound) {
+		const budgetDomains = budget.network?.outbound ?? [];
+		for (const domain of skillPerms.network.outbound) if (!isDomainAllowed(domain, budgetDomains)) violations.push({
+			skillName,
+			type: "network.outbound",
+			requested: domain
+		});
+	}
+	if (skillPerms.filesystem?.read) {
+		const budgetPaths = budget.filesystem?.read ?? [];
+		for (const p of skillPerms.filesystem.read) if (!isPathAllowed(p, budgetPaths)) violations.push({
+			skillName,
+			type: "filesystem.read",
+			requested: p
+		});
+	}
+	if (skillPerms.filesystem?.write) {
+		const budgetPaths = budget.filesystem?.write ?? [];
+		for (const p of skillPerms.filesystem.write) if (!isPathAllowed(p, budgetPaths)) violations.push({
+			skillName,
+			type: "filesystem.write",
+			requested: p
+		});
+	}
+	return violations;
+}
+//#endregion
+//#region src/install/permissions.ts
+function checkPermissionBudget(budget, skillPerms, skillName) {
+	try {
+		checkPermissionBudget$1(budget, skillPerms, skillName);
+	} catch (e) {
+		if (e instanceof PermissionBudgetError) throw new TankPermissionError(e.message);
+		throw e;
+	}
+}
+function collectPermissionViolations(budget, skillPerms, skillName) {
+	return collectPermissionViolations$1(budget, skillPerms, skillName);
+}
 //#endregion
 //#region src/install/resolver.ts
 function buildSkillKey(name, version) {

package/dist/install/permissions.d.ts

@@ -1,11 +1,6 @@
+import { isDomainAllowed, isPathAllowed, type PermissionViolation } from '@internals/helpers';
 import type { Permissions } from '@internals/schemas';
-export interface PermissionViolation {
-    skillName: string;
-    type: 'network.outbound' | 'filesystem.read' | 'filesystem.write' | 'subprocess';
-    requested: string;
-}
+export { isDomainAllowed, isPathAllowed, type PermissionViolation };
 export declare function checkPermissionBudget(budget: Permissions, skillPerms: Permissions | undefined, skillName: string): void;
-export declare function isDomainAllowed(domain: string, allowedDomains: string[]): boolean;
-export declare function isPathAllowed(requestedPath: string, allowedPaths: string[]): boolean;
 export declare function collectPermissionViolations(budget: Permissions, skillPerms: Permissions | undefined, skillName: string): PermissionViolation[];
 //# sourceMappingURL=permissions.d.ts.map

package/dist/install/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/install/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,YAAY,CAAC;IACjF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,WAAW,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAChB,IAAI,CAuCN;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAYjF;AAED,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAepF;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,WAAW,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAChB,mBAAmB,EAAE,CAoCvB"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/install/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EACf,aAAa,EAGb,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,CAAC;AAIpE,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,WAAW,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAChB,IAAI,CASN;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,WAAW,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAChB,mBAAmB,EAAE,CAEvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tankpkg/sdk",
-  "version": "0.14.4",
+  "version": "0.15.0",
   "description": "Official TypeScript SDK for the Tank registry — search, download, install, and audit AI agent skills programmatically",
   "type": "module",
   "exports": {