@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/validators/skill-policy.d.ts

@@ -0,0 +1,248 @@
+import { z } from "zod";
+export declare const SKILL_POLICY_ACTIONS: readonly ["skills.create", "skills.import", "skills.install", "skills.edit", "skills.update", "skills.test", "skills.reset", "skills.remove"];
+export declare const SKILL_POLICY_SOURCE_TYPES: readonly ["workspace", "catalog", "git", "external_package", "generated", "unknown"];
+export declare const skillPolicyActionSchema: z.ZodEnum<{
+    "skills.create": "skills.create";
+    "skills.edit": "skills.edit";
+    "skills.import": "skills.import";
+    "skills.install": "skills.install";
+    "skills.remove": "skills.remove";
+    "skills.reset": "skills.reset";
+    "skills.test": "skills.test";
+    "skills.update": "skills.update";
+}>;
+export declare const skillPolicySourceTypeSchema: z.ZodEnum<{
+    catalog: "catalog";
+    external_package: "external_package";
+    generated: "generated";
+    git: "git";
+    unknown: "unknown";
+    workspace: "workspace";
+}>;
+export declare const skillPolicyEffectSchema: z.ZodEnum<{
+    allow: "allow";
+    deny: "deny";
+}>;
+export declare function normalizeSkillPolicySourceLocator(value: string): string;
+export declare const skillPolicySubjectSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"all_agents">;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"agents">;
+    agentIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"roles">;
+    roles: z.ZodArray<z.ZodString>;
+}, z.core.$strict>], "type">;
+export declare const skillPolicyResourceSelectorSchema: z.ZodObject<{
+    skillIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    skillKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    sourceTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        catalog: "catalog";
+        external_package: "external_package";
+        generated: "generated";
+        git: "git";
+        unknown: "unknown";
+        workspace: "workspace";
+    }>>>;
+    sourceLocators: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+}, z.core.$strict>;
+export declare const skillPolicyRuleSchema: z.ZodObject<{
+    id: z.ZodString;
+    priority: z.ZodNumber;
+    effect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"all_agents">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"agents">;
+        agentIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"roles">;
+        roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>], "type">;
+    actions: z.ZodArray<z.ZodEnum<{
+        "skills.create": "skills.create";
+        "skills.edit": "skills.edit";
+        "skills.import": "skills.import";
+        "skills.install": "skills.install";
+        "skills.remove": "skills.remove";
+        "skills.reset": "skills.reset";
+        "skills.test": "skills.test";
+        "skills.update": "skills.update";
+    }>>;
+    resources: z.ZodOptional<z.ZodObject<{
+        skillIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        skillKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sourceTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            catalog: "catalog";
+            external_package: "external_package";
+            generated: "generated";
+            git: "git";
+            unknown: "unknown";
+            workspace: "workspace";
+        }>>>;
+        sourceLocators: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const skillPolicyDocumentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    defaultEffect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    rules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        priority: z.ZodNumber;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"all_agents">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"agents">;
+            agentIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"roles">;
+            roles: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>], "type">;
+        actions: z.ZodArray<z.ZodEnum<{
+            "skills.create": "skills.create";
+            "skills.edit": "skills.edit";
+            "skills.import": "skills.import";
+            "skills.install": "skills.install";
+            "skills.remove": "skills.remove";
+            "skills.reset": "skills.reset";
+            "skills.test": "skills.test";
+            "skills.update": "skills.update";
+        }>>;
+        resources: z.ZodOptional<z.ZodObject<{
+            skillIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            skillKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            sourceTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                catalog: "catalog";
+                external_package: "external_package";
+                generated: "generated";
+                git: "git";
+                unknown: "unknown";
+                workspace: "workspace";
+            }>>>;
+            sourceLocators: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const replaceSkillPolicySchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    defaultEffect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    rules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        priority: z.ZodNumber;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"all_agents">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"agents">;
+            agentIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"roles">;
+            roles: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>], "type">;
+        actions: z.ZodArray<z.ZodEnum<{
+            "skills.create": "skills.create";
+            "skills.edit": "skills.edit";
+            "skills.import": "skills.import";
+            "skills.install": "skills.install";
+            "skills.remove": "skills.remove";
+            "skills.reset": "skills.reset";
+            "skills.test": "skills.test";
+            "skills.update": "skills.update";
+        }>>;
+        resources: z.ZodOptional<z.ZodObject<{
+            skillIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            skillKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            sourceTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                catalog: "catalog";
+                external_package: "external_package";
+                generated: "generated";
+                git: "git";
+                unknown: "unknown";
+                workspace: "workspace";
+            }>>>;
+            sourceLocators: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    expectedRevision: z.ZodNumber;
+}, z.core.$strict>;
+export declare const skillPolicyEvaluationResourceSchema: z.ZodObject<{
+    skillId: z.ZodOptional<z.ZodString>;
+    skillKey: z.ZodOptional<z.ZodString>;
+    sourceType: z.ZodOptional<z.ZodEnum<{
+        catalog: "catalog";
+        external_package: "external_package";
+        generated: "generated";
+        git: "git";
+        unknown: "unknown";
+        workspace: "workspace";
+    }>>;
+    sourceLocator: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strict>;
+export declare const evaluateSkillPolicySchema: z.ZodObject<{
+    action: z.ZodEnum<{
+        "skills.create": "skills.create";
+        "skills.edit": "skills.edit";
+        "skills.import": "skills.import";
+        "skills.install": "skills.install";
+        "skills.remove": "skills.remove";
+        "skills.reset": "skills.reset";
+        "skills.test": "skills.test";
+        "skills.update": "skills.update";
+    }>;
+    resource: z.ZodDefault<z.ZodObject<{
+        skillId: z.ZodOptional<z.ZodString>;
+        skillKey: z.ZodOptional<z.ZodString>;
+        sourceType: z.ZodOptional<z.ZodEnum<{
+            catalog: "catalog";
+            external_package: "external_package";
+            generated: "generated";
+            git: "git";
+            unknown: "unknown";
+            workspace: "workspace";
+        }>>;
+        sourceLocator: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    }, z.core.$strict>>;
+    principal: z.ZodOptional<z.ZodObject<{
+        agentId: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type SkillPolicyAction = z.infer<typeof skillPolicyActionSchema>;
+export type SkillPolicySourceType = z.infer<typeof skillPolicySourceTypeSchema>;
+export type SkillPolicyEffect = z.infer<typeof skillPolicyEffectSchema>;
+export type SkillPolicySubject = z.infer<typeof skillPolicySubjectSchema>;
+export type SkillPolicyResourceSelector = z.infer<typeof skillPolicyResourceSelectorSchema>;
+export type SkillPolicyRule = z.infer<typeof skillPolicyRuleSchema>;
+export type SkillPolicyDocument = z.infer<typeof skillPolicyDocumentSchema>;
+export type ReplaceSkillPolicy = z.infer<typeof replaceSkillPolicySchema>;
+export type SkillPolicyEvaluationResource = z.infer<typeof skillPolicyEvaluationResourceSchema>;
+export type EvaluateSkillPolicy = z.infer<typeof evaluateSkillPolicySchema>;
+export type EffectiveSkillPolicy = SkillPolicyDocument & {
+    revision: number;
+    materialized: boolean;
+};
+export type SkillPolicyDecisionReason = "platform_invariant" | "no_policy_default" | "explicit_rule" | "policy_default" | "legacy_compatibility";
+export type SkillPolicyDecision = {
+    allowed: boolean;
+    action: SkillPolicyAction;
+    reason: SkillPolicyDecisionReason;
+    policyRevision: number;
+    matchedRuleId: string | null;
+    remediation: string | null;
+};
+//# sourceMappingURL=skill-policy.d.ts.map

package/dist/validators/skill-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-policy.d.ts","sourceRoot":"","sources":["../../src/validators/skill-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB,YAC/B,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,CACP,CAAC;AAEX,eAAO,MAAM,yBAAyB,YACpC,WAAW,EACX,SAAS,EACT,KAAK,EACL,kBAAkB,EAClB,WAAW,EACX,SAAS,CACD,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;EAA+B,CAAC;AACpE,eAAO,MAAM,2BAA2B;;;;;;;EAAoC,CAAC;AAC7E,eAAO,MAAM,uBAAuB;;;EAA4B,CAAC;AAuBjE,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBvE;AAMD,eAAO,MAAM,wBAAwB;;;;;;;;4BAQnC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;kBAS4D,CAAC;AAE3G,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQvB,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAK3B,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAE1B,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;;;;;;;kBAKrC,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAI3B,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAChG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AACrG,MAAM,MAAM,yBAAyB,GACjC,oBAAoB,GACpB,mBAAmB,GACnB,eAAe,GACf,gBAAgB,GAChB,sBAAsB,CAAC;AAC3B,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,yBAAyB,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC"}

package/dist/validators/skill-policy.js

@@ -0,0 +1,123 @@
+import { z } from "zod";
+export const SKILL_POLICY_ACTIONS = [
+    "skills.create",
+    "skills.import",
+    "skills.install",
+    "skills.edit",
+    "skills.update",
+    "skills.test",
+    "skills.reset",
+    "skills.remove",
+];
+export const SKILL_POLICY_SOURCE_TYPES = [
+    "workspace",
+    "catalog",
+    "git",
+    "external_package",
+    "generated",
+    "unknown",
+];
+export const skillPolicyActionSchema = z.enum(SKILL_POLICY_ACTIONS);
+export const skillPolicySourceTypeSchema = z.enum(SKILL_POLICY_SOURCE_TYPES);
+export const skillPolicyEffectSchema = z.enum(["allow", "deny"]);
+const nonEmptyUniqueStrings = z.array(z.string().trim().min(1).max(512)).min(1).max(500)
+    .refine((values) => new Set(values).size === values.length, "Values must be unique");
+function isSafeSourceLocator(value) {
+    if (/:\/\/[^/@\s]+:[^/@\s]+@/.test(value))
+        return false;
+    try {
+        const url = new URL(value);
+        if (url.username || url.password)
+            return false;
+        const credentialParameter = /token|secret|password|api[-_]?key|authorization/i;
+        if ([...url.searchParams.keys()].some((key) => credentialParameter.test(key)))
+            return false;
+        const fragment = url.hash.slice(1);
+        return !/(?:^|[?&;])(?:token|secret|password|api[-_]?key|authorization)=/i.test(fragment);
+    }
+    catch {
+        return true;
+    }
+}
+// Canonical form matching the server-side remote-import normalization: repo-style
+// https URLs get a lowercased host (www.github.com -> github.com), lowercased
+// owner/repo, and a stripped .git suffix. Evaluation resources are normalized the
+// same way, so rules must be too or deny rules silently never match.
+export function normalizeSkillPolicySourceLocator(value) {
+    const trimmed = value.trim();
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        return trimmed;
+    }
+    if (url.protocol !== "https:" && url.protocol !== "http:")
+        return trimmed;
+    const hostname = url.hostname.toLowerCase() === "www.github.com" ? "github.com" : url.hostname.toLowerCase();
+    const segments = url.pathname.split("/").filter(Boolean);
+    const isRepoStyle = url.protocol === "https:"
+        && !hostname.endsWith(".githubusercontent.com")
+        && hostname !== "gist.github.com"
+        && segments.length >= 2
+        && !url.pathname.endsWith(".md")
+        && !url.username && !url.password && !url.search && !url.hash;
+    if (!isRepoStyle)
+        return url.toString();
+    const owner = segments[0].toLowerCase();
+    const repo = segments[1].replace(/\.git$/i, "").toLowerCase();
+    const suffix = segments.slice(2).join("/");
+    return `https://${hostname}/${owner}/${repo}${suffix ? `/${suffix}` : ""}`;
+}
+const skillPolicySourceLocatorSchema = z.string().trim().min(1).max(2_048)
+    .refine(isSafeSourceLocator, "Source locators must not contain credentials or secret query or fragment parameters")
+    .transform(normalizeSkillPolicySourceLocator);
+export const skillPolicySubjectSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("all_agents") }).strict(),
+    z.object({
+        type: z.literal("agents"),
+        agentIds: z.array(z.string().guid()).min(1).max(500)
+            .refine((values) => new Set(values).size === values.length, "Agent IDs must be unique"),
+    }).strict(),
+    z.object({ type: z.literal("roles"), roles: nonEmptyUniqueStrings }).strict(),
+]);
+export const skillPolicyResourceSelectorSchema = z.object({
+    skillIds: z.array(z.string().guid()).min(1).max(500).optional(),
+    skillKeys: nonEmptyUniqueStrings.optional(),
+    sourceTypes: z.array(skillPolicySourceTypeSchema).min(1)
+        .refine((values) => new Set(values).size === values.length, "Source types must be unique")
+        .optional(),
+    sourceLocators: z.array(skillPolicySourceLocatorSchema).min(1).max(500)
+        .refine((values) => new Set(values).size === values.length, "Source locators must be unique")
+        .optional(),
+}).strict().refine((value) => Object.keys(value).length > 0, "At least one resource selector is required");
+export const skillPolicyRuleSchema = z.object({
+    id: z.string().trim().min(1).max(128).regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]*$/),
+    priority: z.number().int().min(-1_000_000).max(1_000_000),
+    effect: skillPolicyEffectSchema,
+    subject: skillPolicySubjectSchema,
+    actions: z.array(skillPolicyActionSchema).min(1)
+        .refine((values) => new Set(values).size === values.length, "Actions must be unique"),
+    resources: skillPolicyResourceSelectorSchema.optional(),
+}).strict();
+export const skillPolicyDocumentSchema = z.object({
+    schemaVersion: z.literal(1),
+    defaultEffect: skillPolicyEffectSchema,
+    rules: z.array(skillPolicyRuleSchema).max(1_000)
+        .refine((rules) => new Set(rules.map((rule) => rule.id)).size === rules.length, "Rule IDs must be unique"),
+}).strict();
+export const replaceSkillPolicySchema = skillPolicyDocumentSchema.extend({
+    expectedRevision: z.number().int().nonnegative(),
+}).strict();
+export const skillPolicyEvaluationResourceSchema = z.object({
+    skillId: z.string().guid().optional(),
+    skillKey: z.string().trim().min(1).max(512).optional(),
+    sourceType: skillPolicySourceTypeSchema.optional(),
+    sourceLocator: skillPolicySourceLocatorSchema.optional(),
+}).strict();
+export const evaluateSkillPolicySchema = z.object({
+    action: skillPolicyActionSchema,
+    resource: skillPolicyEvaluationResourceSchema.default({}),
+    principal: z.object({ agentId: z.string().guid() }).strict().optional(),
+}).strict();
+//# sourceMappingURL=skill-policy.js.map

package/dist/validators/skill-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-policy.js","sourceRoot":"","sources":["../../src/validators/skill-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,aAAa;IACb,cAAc;IACd,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW;IACX,SAAS;IACT,KAAK;IACL,kBAAkB;IAClB,WAAW;IACX,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACrF,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAEvF,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,mBAAmB,GAAG,kDAAkD,CAAC;QAC/E,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5F,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,kEAAkE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,kFAAkF;AAClF,qEAAqE;AACrE,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7G,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ;WACxC,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;WAC5C,QAAQ,KAAK,iBAAiB;WAC9B,QAAQ,CAAC,MAAM,IAAI,CAAC;WACpB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC7B,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IAChE,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,WAAW,QAAQ,IAAI,KAAK,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KACvE,MAAM,CAAC,mBAAmB,EAAE,qFAAqF,CAAC;KAClH,SAAS,CAAC,iCAAiC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACpD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;aACjD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC;KAC1F,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/D,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC;SACzF,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;SACpE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC;SAC5F,QAAQ,EAAE;CACd,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,4CAA4C,CAAC,CAAC;AAE3G,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC;IAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACzD,MAAM,EAAE,uBAAuB;IAC/B,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC;IACvF,SAAS,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,uBAAuB;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC;CAC7G,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,uBAAuB;IAC/B,QAAQ,EAAE,mCAAmC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/validators/skill-policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skill-policy.test.d.ts.map

package/dist/validators/skill-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-policy.test.d.ts","sourceRoot":"","sources":["../../src/validators/skill-policy.test.ts"],"names":[],"mappings":""}

package/dist/validators/skill-policy.test.js

@@ -0,0 +1,92 @@
+import { describe, expect, it } from "vitest";
+import { normalizeSkillPolicySourceLocator, skillPolicyDocumentSchema, skillPolicyEvaluationResourceSchema, } from "./skill-policy.js";
+const credentialBearingLocators = [
+    "https://vault.example/?token=hvs.x",
+    "https://vault.example/?api_key=secret",
+    "https://vault.example/#token=hvs.x",
+    "https://vault.example/#section?authorization=Bearer",
+];
+describe("skill policy source locators", () => {
+    it.each(credentialBearingLocators)("rejects credential-bearing locator %s in policy rules", (sourceLocator) => {
+        expect(() => skillPolicyDocumentSchema.parse({
+            schemaVersion: 1,
+            defaultEffect: "allow",
+            rules: [{
+                    id: "deny-secret-source",
+                    priority: 1,
+                    effect: "deny",
+                    subject: { type: "all_agents" },
+                    actions: ["skills.import"],
+                    resources: { sourceLocators: [sourceLocator] },
+                }],
+        })).toThrow(/credentials or secret query or fragment parameters/i);
+    });
+    it.each(credentialBearingLocators)("rejects credential-bearing locator %s in evaluations", (sourceLocator) => {
+        expect(() => skillPolicyEvaluationResourceSchema.parse({ sourceLocator }))
+            .toThrow(/credentials or secret query or fragment parameters/i);
+    });
+    it("allows non-secret URL fragments", () => {
+        expect(skillPolicyEvaluationResourceSchema.parse({
+            sourceLocator: "https://docs.example/skill#installation",
+        })).toEqual({ sourceLocator: "https://docs.example/skill#installation" });
+    });
+});
+describe("normalizeSkillPolicySourceLocator", () => {
+    it.each([
+        ["https://github.com/Owner/Repo.git", "https://github.com/owner/repo"],
+        ["https://WWW.GitHub.com/Owner/Repo", "https://github.com/owner/repo"],
+        ["https://GitLab.com/Owner/Repo.git", "https://gitlab.com/owner/repo"],
+        ["https://github.com/Owner/Repo/tree/Main/Skills", "https://github.com/owner/repo/tree/Main/Skills"],
+        ["  https://github.com/owner/repo  ", "https://github.com/owner/repo"],
+    ])("canonicalizes repo-style locator %s", (input, expected) => {
+        expect(normalizeSkillPolicySourceLocator(input)).toBe(expected);
+    });
+    it.each([
+        "/srv/company/skills/pr-gardening",
+        "@tickernelz/paperclip-pro-skill-pack",
+        "https://gist.github.com/Owner/abc123",
+        "https://raw.githubusercontent.com/Owner/Repo/main/SKILL.md",
+        "https://docs.example/skill#installation",
+    ])("leaves non-repo locator %s unchanged", (input) => {
+        expect(normalizeSkillPolicySourceLocator(input)).toBe(input);
+    });
+    it("is idempotent", () => {
+        const once = normalizeSkillPolicySourceLocator("https://github.com/Owner/Repo.git");
+        expect(normalizeSkillPolicySourceLocator(once)).toBe(once);
+    });
+    it("normalizes rule sourceLocators on parse so deny rules match normalized resources", () => {
+        const parsed = skillPolicyDocumentSchema.parse({
+            schemaVersion: 1,
+            defaultEffect: "allow",
+            rules: [{
+                    id: "deny-repo",
+                    priority: 1,
+                    effect: "deny",
+                    subject: { type: "all_agents" },
+                    actions: ["skills.import"],
+                    resources: { sourceLocators: ["https://github.com/Owner/Repo.git"] },
+                }],
+        });
+        expect(parsed.rules[0].resources.sourceLocators).toEqual(["https://github.com/owner/repo"]);
+    });
+    it("normalizes evaluation resource sourceLocators on parse", () => {
+        expect(skillPolicyEvaluationResourceSchema.parse({
+            sourceLocator: "https://WWW.GitHub.com/Owner/Repo.git",
+        })).toEqual({ sourceLocator: "https://github.com/owner/repo" });
+    });
+    it("rejects locators that collapse to duplicates after normalization", () => {
+        expect(() => skillPolicyDocumentSchema.parse({
+            schemaVersion: 1,
+            defaultEffect: "allow",
+            rules: [{
+                    id: "deny-repo",
+                    priority: 1,
+                    effect: "deny",
+                    subject: { type: "all_agents" },
+                    actions: ["skills.import"],
+                    resources: { sourceLocators: ["https://github.com/Owner/Repo.git", "https://github.com/owner/repo"] },
+                }],
+        })).toThrow(/unique/i);
+    });
+});
+//# sourceMappingURL=skill-policy.test.js.map

package/dist/validators/skill-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-policy.test.js","sourceRoot":"","sources":["../../src/validators/skill-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EACzB,mCAAmC,GACpC,MAAM,mBAAmB,CAAC;AAE3B,MAAM,yBAAyB,GAAG;IAChC,oCAAoC;IACpC,uCAAuC;IACvC,oCAAoC;IACpC,qDAAqD;CACtD,CAAC;AAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,uDAAuD,EAAE,CAAC,aAAa,EAAE,EAAE;QAC5G,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC;YAC3C,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,OAAO;YACtB,KAAK,EAAE,CAAC;oBACN,EAAE,EAAE,oBAAoB;oBACxB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;oBAC/B,OAAO,EAAE,CAAC,eAAe,CAAC;oBAC1B,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,aAAa,CAAC,EAAE;iBAC/C,CAAC;SACH,CAAC,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,sDAAsD,EAAE,CAAC,aAAa,EAAE,EAAE;QAC3G,MAAM,CAAC,GAAG,EAAE,CAAC,mCAAmC,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;aACvE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC;YAC/C,aAAa,EAAE,yCAAyC;SACzD,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,mCAAmC,EAAE,+BAA+B,CAAC;QACtE,CAAC,mCAAmC,EAAE,+BAA+B,CAAC;QACtE,CAAC,mCAAmC,EAAE,+BAA+B,CAAC;QACtE,CAAC,gDAAgD,EAAE,gDAAgD,CAAC;QACpG,CAAC,mCAAmC,EAAE,+BAA+B,CAAC;KACvE,CAAC,CAAC,qCAAqC,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC5D,MAAM,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,kCAAkC;QAClC,sCAAsC;QACtC,sCAAsC;QACtC,4DAA4D;QAC5D,yCAAyC;KAC1C,CAAC,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,EAAE;QACnD,MAAM,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QACvB,MAAM,IAAI,GAAG,iCAAiC,CAAC,mCAAmC,CAAC,CAAC;QACpF,MAAM,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC;YAC7C,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,OAAO;YACtB,KAAK,EAAE,CAAC;oBACN,EAAE,EAAE,WAAW;oBACf,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;oBAC/B,OAAO,EAAE,CAAC,eAAe,CAAC;oBAC1B,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,mCAAmC,CAAC,EAAE;iBACrE,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,SAAU,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC;YAC/C,aAAa,EAAE,uCAAuC;SACvD,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC;YAC3C,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,OAAO;YACtB,KAAK,EAAE,CAAC;oBACN,EAAE,EAAE,WAAW;oBACf,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;oBAC/B,OAAO,EAAE,CAAC,eAAe,CAAC;oBAC1B,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,mCAAmC,EAAE,+BAA+B,CAAC,EAAE;iBACtG,CAAC;SACH,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/validators/smoke-lab.d.ts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+export declare const smokeRunTriggerSchema: z.ZodEnum<{
+    ci: "ci";
+    manual: "manual";
+    routine: "routine";
+}>;
+export declare const smokeRunStatusSchema: z.ZodEnum<{
+    cancelled: "cancelled";
+    failed: "failed";
+    passed: "passed";
+    running: "running";
+}>;
+export declare const smokeRunStepPathSchema: z.ZodEnum<{
+    P1: "P1";
+    P2: "P2";
+    P3: "P3";
+    P4: "P4";
+    P5: "P5";
+    P6: "P6";
+    P7: "P7";
+}>;
+export declare const smokeRunStepStatusSchema: z.ZodEnum<{
+    fail: "fail";
+    pass: "pass";
+    skipped: "skipped";
+}>;
+export declare const createSmokeRunSchema: z.ZodObject<{
+    trigger: z.ZodDefault<z.ZodEnum<{
+        ci: "ci";
+        manual: "manual";
+        routine: "routine";
+    }>>;
+    summary: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export declare const updateSmokeRunSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        cancelled: "cancelled";
+        failed: "failed";
+        passed: "passed";
+        running: "running";
+    }>;
+    summary: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export declare const recordSmokeRunStepSchema: z.ZodObject<{
+    path: z.ZodEnum<{
+        P1: "P1";
+        P2: "P2";
+        P3: "P3";
+        P4: "P4";
+        P5: "P5";
+        P6: "P6";
+        P7: "P7";
+    }>;
+    scenarioStep: z.ZodString;
+    status: z.ZodEnum<{
+        fail: "fail";
+        pass: "pass";
+        skipped: "skipped";
+    }>;
+    detail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    screenshotArtifactRef: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    durationMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strict>;
+export type CreateSmokeRun = z.infer<typeof createSmokeRunSchema>;
+export type UpdateSmokeRun = z.infer<typeof updateSmokeRunSchema>;
+export type RecordSmokeRunStep = z.infer<typeof recordSmokeRunStepSchema>;
+//# sourceMappingURL=smoke-lab.d.ts.map

package/dist/validators/smoke-lab.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-lab.d.ts","sourceRoot":"","sources":["../../src/validators/smoke-lab.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,qBAAqB;;;;EAA6B,CAAC;AAChE,eAAO,MAAM,oBAAoB;;;;;EAA6B,CAAC;AAC/D,eAAO,MAAM,sBAAsB;;;;;;;;EAA+B,CAAC;AACnE,eAAO,MAAM,wBAAwB;;;;EAAkC,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;kBAGtB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;kBAGtB,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;kBAO1B,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/validators/smoke-lab.js

@@ -0,0 +1,23 @@
+import { z } from "zod";
+import { SMOKE_RUN_STATUSES, SMOKE_RUN_STEP_PATHS, SMOKE_RUN_STEP_STATUSES, SMOKE_RUN_TRIGGERS, } from "../types/smoke-lab.js";
+export const smokeRunTriggerSchema = z.enum(SMOKE_RUN_TRIGGERS);
+export const smokeRunStatusSchema = z.enum(SMOKE_RUN_STATUSES);
+export const smokeRunStepPathSchema = z.enum(SMOKE_RUN_STEP_PATHS);
+export const smokeRunStepStatusSchema = z.enum(SMOKE_RUN_STEP_STATUSES);
+export const createSmokeRunSchema = z.object({
+    trigger: smokeRunTriggerSchema.default("manual"),
+    summary: z.record(z.string(), z.unknown()).default({}),
+}).strict();
+export const updateSmokeRunSchema = z.object({
+    status: smokeRunStatusSchema,
+    summary: z.record(z.string(), z.unknown()).optional(),
+}).strict();
+export const recordSmokeRunStepSchema = z.object({
+    path: smokeRunStepPathSchema,
+    scenarioStep: z.string().min(1).max(200),
+    status: smokeRunStepStatusSchema,
+    detail: z.string().max(4_000).nullable().optional(),
+    screenshotArtifactRef: z.record(z.string(), z.unknown()).nullable().optional(),
+    durationMs: z.number().int().min(0).max(24 * 60 * 60 * 1000).nullable().optional(),
+}).strict();
+//# sourceMappingURL=smoke-lab.js.map

package/dist/validators/smoke-lab.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-lab.js","sourceRoot":"","sources":["../../src/validators/smoke-lab.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,sBAAsB;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC,MAAM,EAAE,CAAC"}