@vauban-org/agent-sdk 1.0.0 → 1.3.0

package/dist/skills/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGhE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG9E,kEAAkE;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,0DAA0D;AAC1D,OAAO,EACL,WAAW,EACX,YAAY,EACZ,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,iBAAiB,GAKlB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGhE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG9E,kEAAkE;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/skills/markdown/loader.d.ts

@@ -0,0 +1,52 @@
+/**
+ * SKILL.md loader — agentskills.io standard parser.
+ *
+ * Reads a SKILL.md file, splits frontmatter from body, parses YAML via the
+ * `yaml` package (battle-tested), validates against `SkillManifestSchema`,
+ * and returns a typed `ParsedSkillFile`.
+ *
+ * Constraints:
+ *   - No new npm deps (uses `yaml` already in package.json).
+ *   - Frontmatter delimiters: `---\n` ... `\n---\n`.
+ *   - Body returned verbatim (markdown — no rendering).
+ *   - Validation errors are typed (SkillMdParseError / SkillMdValidationError).
+ *
+ * Progressive disclosure tiers (per agentskills.io spec):
+ *   - Discovery   (~100 tok) — name + description only
+ *   - Pre-activate (~500 tok) — full frontmatter + body excerpt
+ *   - Activate    — full body (≤8000 tok recommended)
+ *
+ * Spec reference: https://agentskills.io/specification
+ * @see ADR-ECO-034 — skills TS↔MD coexistence
+ * @public
+ */
+import { type SkillManifest, type VaubanSkillTier } from "./schema.js";
+export interface ParsedSkillFile {
+    manifest: SkillManifest;
+    body: string;
+    tier: VaubanSkillTier;
+    /** Tokens (rough heuristic ~4 chars/token) for progressive disclosure. */
+    bodyTokens: number;
+}
+/**
+ * Load and parse a SKILL.md file from disk.
+ *
+ * @throws SkillMdParseError    when frontmatter delimiters are missing or YAML is invalid
+ * @throws SkillMdValidationError when frontmatter fails Zod schema validation
+ */
+export declare function loadSkillMd(filePath: string): Promise<ParsedSkillFile>;
+/**
+ * Parse SKILL.md content from a string (in-memory). Useful for tests and
+ * embedded skills.
+ */
+export declare function parseSkillMd(raw: string, source?: string): ParsedSkillFile;
+/**
+ * Produce the "discovery" projection (~100 tokens): name + description only.
+ * Used by the catalogue / progressive disclosure layer to keep startup cost low.
+ */
+export declare function toDiscoveryEntry(parsed: ParsedSkillFile): {
+    name: string;
+    description: string;
+    tier: VaubanSkillTier;
+};
+//# sourceMappingURL=loader.d.ts.map

package/dist/skills/markdown/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/skills/markdown/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAKrB,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC;IACtB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAG5E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,MAAM,SAAa,GAClB,eAAe,CAkDjB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;CACvB,CAMA"}

package/dist/skills/markdown/loader.js

@@ -0,0 +1,93 @@
+/**
+ * SKILL.md loader — agentskills.io standard parser.
+ *
+ * Reads a SKILL.md file, splits frontmatter from body, parses YAML via the
+ * `yaml` package (battle-tested), validates against `SkillManifestSchema`,
+ * and returns a typed `ParsedSkillFile`.
+ *
+ * Constraints:
+ *   - No new npm deps (uses `yaml` already in package.json).
+ *   - Frontmatter delimiters: `---\n` ... `\n---\n`.
+ *   - Body returned verbatim (markdown — no rendering).
+ *   - Validation errors are typed (SkillMdParseError / SkillMdValidationError).
+ *
+ * Progressive disclosure tiers (per agentskills.io spec):
+ *   - Discovery   (~100 tok) — name + description only
+ *   - Pre-activate (~500 tok) — full frontmatter + body excerpt
+ *   - Activate    — full body (≤8000 tok recommended)
+ *
+ * Spec reference: https://agentskills.io/specification
+ * @see ADR-ECO-034 — skills TS↔MD coexistence
+ * @public
+ */
+import { readFile } from "node:fs/promises";
+import { parse as parseYaml } from "yaml";
+import { SkillMdParseError, SkillMdValidationError } from "../errors.js";
+import { SkillManifestSchema, resolveTier, } from "./schema.js";
+// `---` at line start, then arbitrary content, then `---` at line start. Body follows.
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
+/**
+ * Load and parse a SKILL.md file from disk.
+ *
+ * @throws SkillMdParseError    when frontmatter delimiters are missing or YAML is invalid
+ * @throws SkillMdValidationError when frontmatter fails Zod schema validation
+ */
+export async function loadSkillMd(filePath) {
+    const raw = await readFile(filePath, "utf-8");
+    return parseSkillMd(raw, filePath);
+}
+/**
+ * Parse SKILL.md content from a string (in-memory). Useful for tests and
+ * embedded skills.
+ */
+export function parseSkillMd(raw, source = "<inline>") {
+    const match = raw.match(FRONTMATTER_RE);
+    if (!match) {
+        throw new SkillMdParseError(source, "missing or malformed frontmatter (expected '---' delimiters on first line)");
+    }
+    const [, frontmatterText, body] = match;
+    let parsed;
+    try {
+        parsed = parseYaml(frontmatterText);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new SkillMdParseError(source, `YAML parse error — ${message}`);
+    }
+    if (parsed == null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new SkillMdParseError(source, "frontmatter must be a YAML object (got " +
+            (parsed === null
+                ? "null"
+                : Array.isArray(parsed)
+                    ? "array"
+                    : typeof parsed) +
+            ")");
+    }
+    const result = SkillManifestSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new SkillMdValidationError(source, result.error.issues.map((i) => ({
+            path: i.path.join("."),
+            message: i.message,
+        })));
+    }
+    const manifest = result.data;
+    const trimmedBody = body.trim();
+    return {
+        manifest,
+        body: trimmedBody,
+        tier: resolveTier(manifest),
+        bodyTokens: Math.ceil(trimmedBody.length / 4),
+    };
+}
+/**
+ * Produce the "discovery" projection (~100 tokens): name + description only.
+ * Used by the catalogue / progressive disclosure layer to keep startup cost low.
+ */
+export function toDiscoveryEntry(parsed) {
+    return {
+        name: parsed.manifest.name,
+        description: parsed.manifest.description,
+        tier: parsed.tier,
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/skills/markdown/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/skills/markdown/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAEL,mBAAmB,EAEnB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,uFAAuF;AACvF,MAAM,cAAc,GAAG,6CAA6C,CAAC;AAUrE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,MAAM,GAAG,UAAU;IAEnB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CACzB,MAAM,EACN,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAExC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,iBAAiB,CACzB,MAAM,EACN,yCAAyC;YACvC,CAAC,MAAM,KAAK,IAAI;gBACd,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBACvB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO,MAAM,CAAC;YAClB,GAAG,CACN,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,sBAAsB,CAC9B,MAAM,EACN,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC;QAC3B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IAKtD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;QAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;QACxC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC"}

package/dist/skills/markdown/schema.d.ts

@@ -0,0 +1,432 @@
+/**
+ * SKILL.md frontmatter schema — agentskills.io standard + Vauban extensions.
+ *
+ * Standard fields (agentskills.io spec):
+ *   - `name`         1-64 chars, kebab-case
+ *   - `description`  1-1024 chars
+ *   - `license`      free-text (optional)
+ *   - `compatibility` free-text (optional, e.g. "Requires STARKNET_RPC_URL")
+ *   - `allowed-tools` space-separated string, e.g. "Bash(curl:*) Bash(jq:*) Read"
+ *   - `metadata`     arbitrary k/v map (per spec — extension surface)
+ *
+ * Vauban extensions live UNDER `metadata` (spec-compliant — ignored gracefully
+ * by other agentskills.io-conforming tools). Namespaced as `vauban.*` keys
+ * for clarity:
+ *   - `metadata.vauban.tier`           "official" | "verified" | "unverified"
+ *   - `metadata.vauban.subagent`       agent id this skill belongs to
+ *   - `metadata.vauban.model-hint`     suggested LLM (forwarded to EconomyRouter)
+ *   - `metadata.vauban.proof.poseidon_hash`  hex
+ *   - `metadata.vauban.proof.tsa_token`      base64 RFC3161
+ *   - `metadata.vauban.proof.starknet_tx`    hex
+ *   - `metadata.vauban.biscuit.required_caps` array of capability strings
+ *   - `metadata.vauban.biscuit.max_scope`     "project" | "session" | "global"
+ *   - `metadata.vauban.audit_status`   "approved" | "review" | "rejected"
+ *
+ * Spec reference: https://agentskills.io/specification
+ * @see ADR-ECO-034 — skills TS↔MD coexistence
+ * @public
+ */
+import { z } from "zod";
+export declare const VaubanSkillTier: z.ZodEnum<["official", "verified", "unverified"]>;
+export type VaubanSkillTier = z.infer<typeof VaubanSkillTier>;
+export declare const VaubanBiscuitScope: z.ZodEnum<["project", "session", "global"]>;
+export type VaubanBiscuitScope = z.infer<typeof VaubanBiscuitScope>;
+export declare const VaubanAuditStatus: z.ZodEnum<["approved", "review", "rejected"]>;
+export type VaubanAuditStatus = z.infer<typeof VaubanAuditStatus>;
+export declare const SkillManifestSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    license: z.ZodOptional<z.ZodString>;
+    compatibility: z.ZodOptional<z.ZodString>;
+    "allowed-tools": z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        category: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>>;
+        author: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-required": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-mode": z.ZodOptional<z.ZodOptional<z.ZodEnum<["all", "at-least-one"]>>>;
+        vauban: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            tier: z.ZodOptional<z.ZodOptional<z.ZodEnum<["official", "verified", "unverified"]>>>;
+            subagent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            "model-hint": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            proof: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                poseidon_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                tsa_token: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                starknet_tx: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                anchored_at: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }>>>;
+            biscuit: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                required_caps: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                max_scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<["project", "session", "global"]>>>;
+            }, "strict", z.ZodTypeAny, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }>>>;
+            audit_status: z.ZodOptional<z.ZodOptional<z.ZodEnum<["approved", "review", "rejected"]>>>;
+            observability_metric: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }>>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        category: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>>;
+        author: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-required": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-mode": z.ZodOptional<z.ZodOptional<z.ZodEnum<["all", "at-least-one"]>>>;
+        vauban: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            tier: z.ZodOptional<z.ZodOptional<z.ZodEnum<["official", "verified", "unverified"]>>>;
+            subagent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            "model-hint": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            proof: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                poseidon_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                tsa_token: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                starknet_tx: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                anchored_at: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }>>>;
+            biscuit: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                required_caps: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                max_scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<["project", "session", "global"]>>>;
+            }, "strict", z.ZodTypeAny, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }>>>;
+            audit_status: z.ZodOptional<z.ZodOptional<z.ZodEnum<["approved", "review", "rejected"]>>>;
+            observability_metric: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }>>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        category: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>>;
+        author: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-required": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-mode": z.ZodOptional<z.ZodOptional<z.ZodEnum<["all", "at-least-one"]>>>;
+        vauban: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            tier: z.ZodOptional<z.ZodOptional<z.ZodEnum<["official", "verified", "unverified"]>>>;
+            subagent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            "model-hint": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            proof: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                poseidon_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                tsa_token: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                starknet_tx: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                anchored_at: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }>>>;
+            biscuit: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                required_caps: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                max_scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<["project", "session", "global"]>>>;
+            }, "strict", z.ZodTypeAny, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }>>>;
+            audit_status: z.ZodOptional<z.ZodOptional<z.ZodEnum<["approved", "review", "rejected"]>>>;
+            observability_metric: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }>>>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    description: string;
+    metadata?: z.objectOutputType<{
+        version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        category: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>>;
+        author: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-required": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-mode": z.ZodOptional<z.ZodOptional<z.ZodEnum<["all", "at-least-one"]>>>;
+        vauban: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            tier: z.ZodOptional<z.ZodOptional<z.ZodEnum<["official", "verified", "unverified"]>>>;
+            subagent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            "model-hint": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            proof: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                poseidon_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                tsa_token: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                starknet_tx: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                anchored_at: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }>>>;
+            biscuit: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                required_caps: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                max_scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<["project", "session", "global"]>>>;
+            }, "strict", z.ZodTypeAny, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }>>>;
+            audit_status: z.ZodOptional<z.ZodOptional<z.ZodEnum<["approved", "review", "rejected"]>>>;
+            observability_metric: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }>>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+    license?: string | undefined;
+    compatibility?: string | undefined;
+    "allowed-tools"?: string | undefined;
+}, {
+    name: string;
+    description: string;
+    metadata?: z.objectInputType<{
+        version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        category: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>>;
+        author: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-required": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        "env-mode": z.ZodOptional<z.ZodOptional<z.ZodEnum<["all", "at-least-one"]>>>;
+        vauban: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            tier: z.ZodOptional<z.ZodOptional<z.ZodEnum<["official", "verified", "unverified"]>>>;
+            subagent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            "model-hint": z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            proof: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                poseidon_hash: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                tsa_token: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                starknet_tx: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                anchored_at: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }, {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            }>>>;
+            biscuit: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                required_caps: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                max_scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<["project", "session", "global"]>>>;
+            }, "strict", z.ZodTypeAny, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }, {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            }>>>;
+            audit_status: z.ZodOptional<z.ZodOptional<z.ZodEnum<["approved", "review", "rejected"]>>>;
+            observability_metric: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }, {
+            tier?: "official" | "verified" | "unverified" | undefined;
+            subagent?: string | undefined;
+            "model-hint"?: string | undefined;
+            proof?: {
+                poseidon_hash?: string | undefined;
+                tsa_token?: string | undefined;
+                starknet_tx?: string | undefined;
+                anchored_at?: string | undefined;
+            } | undefined;
+            biscuit?: {
+                required_caps?: string[] | undefined;
+                max_scope?: "project" | "session" | "global" | undefined;
+            } | undefined;
+            audit_status?: "rejected" | "approved" | "review" | undefined;
+            observability_metric?: string | undefined;
+        }>>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+    license?: string | undefined;
+    compatibility?: string | undefined;
+    "allowed-tools"?: string | undefined;
+}>;
+export type SkillManifest = z.infer<typeof SkillManifestSchema>;
+/**
+ * Resolve the Vauban tier from a manifest, defaulting to `unverified` per
+ * the trust-stratification rule: any skill without an explicit tier MUST be
+ * sandboxed as community-untrusted.
+ */
+export declare function resolveTier(manifest: SkillManifest): VaubanSkillTier;
+/**
+ * Parse the space-separated `allowed-tools` string into an array. Empty string
+ * returns []. Whitespace runs collapse. Examples:
+ *   "Bash(curl:*) Read"      → ["Bash(curl:*)", "Read"]
+ *   "Bash(curl:*)  Bash(jq)" → ["Bash(curl:*)", "Bash(jq)"]
+ */
+export declare function parseAllowedTools(manifest: SkillManifest): string[];
+//# sourceMappingURL=schema.d.ts.map

package/dist/skills/markdown/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/skills/markdown/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe,mDAAiD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB,6CAA2C,CAAC;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB,+CAA6C,CAAC;AAC5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AA2DlE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBrB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,eAAe,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,EAAE,CAInE"}