@vibe-agent-toolkit/claude-marketplace 0.1.15-rc.1

package/dist/compatibility-analyzer.d.ts

@@ -0,0 +1,13 @@
+import type { CompatibilityResult } from './types.js';
+/**
+ * Analyze a Claude plugin directory for compatibility across all target surfaces.
+ *
+ * Walks the plugin directory, runs relevant scanners on each file,
+ * and aggregates evidence into per-target verdicts.
+ *
+ * @param pluginDir - Absolute path to the plugin root directory
+ * @returns Aggregated compatibility result with evidence and verdicts
+ * @throws If the directory does not contain a valid .claude-plugin/plugin.json
+ */
+export declare function analyzeCompatibility(pluginDir: string): Promise<CompatibilityResult>;
+//# sourceMappingURL=compatibility-analyzer.d.ts.map

package/dist/compatibility-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compatibility-analyzer.d.ts","sourceRoot":"","sources":["../src/compatibility-analyzer.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAyB,mBAAmB,EAAgC,MAAM,YAAY,CAAC;AAkM3G;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+C1F"}

package/dist/compatibility-analyzer.js

@@ -0,0 +1,205 @@
+import { readdir, readFile } from 'node:fs/promises';
+import { extname, join, relative } from 'node:path';
+import { toForwardSlash } from '@vibe-agent-toolkit/utils';
+import { classifyScriptFile, scanCodeBlocks, scanFrontmatter, scanHooksConfig, scanMcpConfig, scanPythonImports, } from './scanners/index.js';
+import { ALL_TARGETS } from './types.js';
+/** File extensions treated as scripts by the scanner */
+const SCRIPT_EXTENSIONS = new Set(['.py', '.sh', '.bash', '.mjs', '.js', '.cjs']);
+/** File extensions that are markdown (skills, agents, commands) */
+const MARKDOWN_EXTENSIONS = new Set(['.md']);
+/**
+ * Read and parse .claude-plugin/plugin.json from the plugin directory.
+ * Throws if the file does not exist or is invalid JSON.
+ */
+async function readPluginManifest(pluginDir) {
+    const manifestPath = join(pluginDir, '.claude-plugin', 'plugin.json');
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- path constructed from join(pluginDir, ...)
+    const raw = await readFile(manifestPath, 'utf8');
+    const parsed = JSON.parse(raw);
+    if (!parsed['name'] || typeof parsed['name'] !== 'string') {
+        throw new Error(`plugin.json missing required "name" field in ${manifestPath}`);
+    }
+    const manifest = { name: parsed['name'] };
+    if (typeof parsed['version'] === 'string') {
+        manifest.version = parsed['version'];
+    }
+    if (Array.isArray(parsed['targets'])) {
+        manifest.targets = parsed['targets'];
+    }
+    return manifest;
+}
+/**
+ * Recursively collect all file paths relative to the root directory.
+ * Skips the .claude-plugin directory itself (manifest is read separately).
+ */
+async function collectFiles(rootDir) {
+    const files = [];
+    async function walk(dir) {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- recursive walk of user-provided plugin directory
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = join(dir, entry.name);
+            const relativePath = toForwardSlash(relative(rootDir, fullPath));
+            if (entry.isDirectory()) {
+                // Skip the .claude-plugin metadata directory
+                if (entry.name === '.claude-plugin')
+                    continue;
+                await walk(fullPath);
+            }
+            else {
+                files.push(relativePath);
+            }
+        }
+    }
+    await walk(rootDir);
+    return files;
+}
+/**
+ * Determine if an evidence item has meaningful impact (not all-ok).
+ * Evidence where every target is 'ok' is informational noise and gets filtered out.
+ */
+function hasNonOkImpact(evidence) {
+    return ALL_TARGETS.some(target => evidence.impact[target] !== 'ok');
+}
+/**
+ * Aggregate evidence into a per-target verdict.
+ * Worst impact wins: any 'incompatible' -> incompatible, any 'needs-review' -> needs-review.
+ */
+function aggregateVerdicts(evidence) {
+    const result = {
+        'claude-desktop': 'compatible',
+        cowork: 'compatible',
+        'claude-code': 'compatible',
+    };
+    for (const item of evidence) {
+        for (const target of ALL_TARGETS) {
+            const impact = item.impact[target];
+            if (impact === 'incompatible') {
+                result[target] = 'incompatible';
+            }
+            else if (impact === 'needs-review' && result[target] !== 'incompatible') {
+                result[target] = 'needs-review';
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Scan a single markdown file for compatibility evidence.
+ */
+async function scanMarkdownFile(fullPath, relativePath) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- path from collectFiles walk
+    const content = await readFile(fullPath, 'utf8');
+    return [
+        ...scanCodeBlocks(content, relativePath),
+        ...scanFrontmatter(content, relativePath),
+    ];
+}
+/**
+ * Scan a script file for compatibility evidence.
+ * For Python files, also scans imports for third-party dependencies.
+ */
+async function scanScriptFile(fullPath, relativePath) {
+    const evidence = [];
+    const classification = classifyScriptFile(relativePath);
+    if (classification) {
+        evidence.push(classification);
+    }
+    if (extname(relativePath).toLowerCase() === '.py') {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- path from collectFiles walk
+        const content = await readFile(fullPath, 'utf8');
+        evidence.push(...scanPythonImports(content, relativePath));
+    }
+    return evidence;
+}
+/**
+ * Scan a hooks JSON file for compatibility evidence.
+ */
+async function scanHooksFile(fullPath, relativePath) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- path from collectFiles walk
+    const raw = await readFile(fullPath, 'utf8');
+    const config = JSON.parse(raw);
+    return scanHooksConfig(config, relativePath);
+}
+/**
+ * Scan an MCP config file for compatibility evidence.
+ */
+async function scanMcpFile(fullPath, relativePath) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- path from collectFiles walk
+    const raw = await readFile(fullPath, 'utf8');
+    const config = JSON.parse(raw);
+    return scanMcpConfig(config, relativePath);
+}
+/**
+ * Check if a file path matches a hooks config pattern.
+ * Matches: hooks.json, hooks/hooks.json, hooks/*.json
+ */
+function isHooksFile(relativePath) {
+    if (relativePath === 'hooks.json')
+        return true;
+    // eslint-disable-next-line local/no-path-startswith -- relativePath already normalized via toForwardSlash in collectFiles
+    return relativePath.startsWith('hooks/') && relativePath.endsWith('.json');
+}
+/**
+ * Check if a file path is an MCP config file.
+ */
+function isMcpConfigFile(relativePath) {
+    return relativePath === '.mcp.json';
+}
+/**
+ * Analyze a Claude plugin directory for compatibility across all target surfaces.
+ *
+ * Walks the plugin directory, runs relevant scanners on each file,
+ * and aggregates evidence into per-target verdicts.
+ *
+ * @param pluginDir - Absolute path to the plugin root directory
+ * @returns Aggregated compatibility result with evidence and verdicts
+ * @throws If the directory does not contain a valid .claude-plugin/plugin.json
+ */
+export async function analyzeCompatibility(pluginDir) {
+    const manifest = await readPluginManifest(pluginDir);
+    const files = await collectFiles(pluginDir);
+    const allEvidence = [];
+    const counts = {
+        totalFiles: files.length,
+        skillFiles: 0,
+        scriptFiles: 0,
+        hookFiles: 0,
+        mcpConfigs: 0,
+    };
+    for (const relativePath of files) {
+        const fullPath = join(pluginDir, relativePath);
+        const ext = extname(relativePath).toLowerCase();
+        if (MARKDOWN_EXTENSIONS.has(ext)) {
+            counts.skillFiles++;
+            const evidence = await scanMarkdownFile(fullPath, relativePath);
+            allEvidence.push(...evidence);
+        }
+        else if (SCRIPT_EXTENSIONS.has(ext)) {
+            counts.scriptFiles++;
+            const evidence = await scanScriptFile(fullPath, relativePath);
+            allEvidence.push(...evidence);
+        }
+        else if (isHooksFile(relativePath)) {
+            counts.hookFiles++;
+            const evidence = await scanHooksFile(fullPath, relativePath);
+            allEvidence.push(...evidence);
+        }
+        else if (isMcpConfigFile(relativePath)) {
+            counts.mcpConfigs++;
+            const evidence = await scanMcpFile(fullPath, relativePath);
+            allEvidence.push(...evidence);
+        }
+    }
+    // Filter out evidence where all targets are 'ok' (informational noise)
+    const meaningfulEvidence = allEvidence.filter(hasNonOkImpact);
+    return {
+        plugin: manifest.name,
+        version: manifest.version,
+        declared: manifest.targets,
+        analyzed: aggregateVerdicts(meaningfulEvidence),
+        evidence: meaningfulEvidence,
+        summary: counts,
+    };
+}
+//# sourceMappingURL=compatibility-analyzer.js.map

package/dist/compatibility-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compatibility-analyzer.js","sourceRoot":"","sources":["../src/compatibility-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,wDAAwD;AACxD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAElF,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAgB7C;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACtE,iHAAiH;IACjH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAE1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAE1D,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1C,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAa,CAAC;IACnD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,uHAAuH;QACvH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAEjE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,6CAA6C;gBAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;oBAAE,SAAS;gBAC9C,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,QAA+B;IACrD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAiC;IAC1D,MAAM,MAAM,GAA4B;QACtC,gBAAgB,EAAE,YAAY;QAC9B,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,YAAY;KAC5B,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,MAAM,GAAgB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC;YAClC,CAAC;iBAAM,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;gBAC1E,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,YAAoB;IAEpB,kGAAkG;IAClG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO;QACL,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC;QACxC,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,YAAoB;IAEpB,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,MAAM,cAAc,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAClD,kGAAkG;QAClG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,QAAgB,EAChB,YAAoB;IAEpB,kGAAkG;IAClG,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAC1D,OAAO,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CACxB,QAAgB,EAChB,YAAoB;IAEpB,kGAAkG;IAClG,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAC1D,OAAO,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,YAAoB;IACvC,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/C,0HAA0H;IAC1H,OAAO,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,YAAoB;IAC3C,OAAO,YAAY,KAAK,WAAW,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAE5C,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,MAAM,MAAM,GAAe;QACzB,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,KAAK,MAAM,YAAY,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAEhD,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAChE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC9D,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAE9D,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,QAAQ,EAAE,iBAAiB,CAAC,kBAAkB,CAAC;QAC/C,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @vibe-agent-toolkit/claude-marketplace
+ * Claude plugin marketplace tools: compatibility analysis, provenance tracking, enterprise config
+ */
+export type { CompatibilityEvidence, CompatibilityResult, EvidenceSource, Target, Verdict, } from './types.js';
+export { ALL_TARGETS } from './types.js';
+export { analyzeCompatibility } from './compatibility-analyzer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,OAAO,GACR,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * @vibe-agent-toolkit/claude-marketplace
+ * Claude plugin marketplace tools: compatibility analysis, provenance tracking, enterprise config
+ */
+export { ALL_TARGETS } from './types.js';
+export { analyzeCompatibility } from './compatibility-analyzer.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/scanners/code-block-scanner.d.ts

@@ -0,0 +1,7 @@
+import type { CompatibilityEvidence } from '../types.js';
+/**
+ * Scan markdown content for fenced code blocks containing command invocations.
+ * Only scans blocks with executable languages (bash, sh, shell, zsh, unlabeled).
+ */
+export declare function scanCodeBlocks(content: string, filePath: string): CompatibilityEvidence[];
+//# sourceMappingURL=code-block-scanner.d.ts.map

package/dist/scanners/code-block-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-block-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/code-block-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AASzD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CA0BzF"}

package/dist/scanners/code-block-scanner.js

@@ -0,0 +1,33 @@
+import { COMMAND_RULES } from './command-classifier.js';
+const EXECUTABLE_LANGUAGES = new Set(['bash', 'sh', 'shell', 'zsh', '']);
+/** Regex to extract fenced code blocks: ```lang\ncontent\n``` */
+const CODE_BLOCK_RE = /^```(\w*)\n([\s\S]*?)^```/gm;
+/**
+ * Scan markdown content for fenced code blocks containing command invocations.
+ * Only scans blocks with executable languages (bash, sh, shell, zsh, unlabeled).
+ */
+export function scanCodeBlocks(content, filePath) {
+    const evidence = [];
+    for (const match of content.matchAll(CODE_BLOCK_RE)) {
+        const language = match[1] ?? '';
+        const blockContent = match[2] ?? '';
+        const blockStartOffset = match.index ?? 0;
+        const blockLine = content.slice(0, blockStartOffset).split('\n').length;
+        if (!EXECUTABLE_LANGUAGES.has(language))
+            continue;
+        for (const rule of COMMAND_RULES) {
+            if (rule.pattern.test(blockContent)) {
+                evidence.push({
+                    source: 'code-block',
+                    file: filePath,
+                    line: blockLine,
+                    signal: rule.signal,
+                    detail: `Found "${rule.signal}" command in ${language || 'unlabeled'} code block`,
+                    impact: { ...rule.impact },
+                });
+            }
+        }
+    }
+    return evidence;
+}
+//# sourceMappingURL=code-block-scanner.js.map

package/dist/scanners/code-block-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-block-scanner.js","sourceRoot":"","sources":["../../src/scanners/code-block-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAEzE,iEAAiE;AACjE,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAgB;IAC9D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAExE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QAElD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,YAAY;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,gBAAgB,QAAQ,IAAI,WAAW,aAAa;oBACjF,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scanners/command-classifier.d.ts

@@ -0,0 +1,26 @@
+import type { ImpactLevel, Target } from '../types.js';
+export interface CommandRule {
+    pattern: RegExp;
+    signal: string;
+    impact: Record<Target, ImpactLevel>;
+}
+/** Commands and their impact on each target */
+export declare const COMMAND_RULES: readonly CommandRule[];
+/**
+ * Classify a command string against known command patterns.
+ * Returns the first matching rule or undefined.
+ */
+export declare function classifyCommand(command: string): {
+    signal: string;
+    impact: Record<Target, ImpactLevel>;
+} | undefined;
+/**
+ * Classify a standalone binary name (e.g., "python3", "node", "uv").
+ * Unlike classifyCommand which matches regex patterns against full command strings,
+ * this performs an exact lookup for MCP server command binaries.
+ */
+export declare function classifyCommandBinary(binary: string): {
+    signal: string;
+    impact: Record<Target, ImpactLevel>;
+} | undefined;
+//# sourceMappingURL=command-classifier.d.ts.map

package/dist/scanners/command-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-classifier.d.ts","sourceRoot":"","sources":["../../src/scanners/command-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGvD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACrC;AAaD,+CAA+C;AAC/C,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAqCtC,CAAC;AAEX;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,GACd;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,GAAG,SAAS,CAOrE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GACb;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,GAAG,SAAS,CAIrE"}

package/dist/scanners/command-classifier.js

@@ -0,0 +1,74 @@
+import { IMPACT_ALL_OK, IMPACT_INCOMPATIBLE_DESKTOP, IMPACT_NEEDS_REVIEW_DESKTOP } from '../types.js';
+/** Maps known binary names to their compatibility impact */
+const BINARY_IMPACTS = {
+    bash: { signal: 'bash', impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP } },
+    node: { signal: 'node', impact: { ...IMPACT_ALL_OK } },
+    npx: { signal: 'npx', impact: { ...IMPACT_ALL_OK } },
+    python: { signal: 'python3', impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP } },
+    python3: { signal: 'python3', impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP } },
+    sh: { signal: 'sh', impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP } },
+    uv: { signal: 'uv', impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP } },
+};
+/** Commands and their impact on each target */
+export const COMMAND_RULES = [
+    {
+        pattern: /\bpip3?\s+install\b/,
+        signal: 'pip install',
+        impact: { ...IMPACT_INCOMPATIBLE_DESKTOP },
+    },
+    {
+        pattern: /\bnpm\s+install\b/,
+        signal: 'npm install',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    {
+        pattern: /\buv\s+(?:run|pip|sync)\b/,
+        signal: 'uv',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    {
+        pattern: /\bpython3?\s+/,
+        signal: 'python3',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    {
+        pattern: /\bbash\s+/,
+        signal: 'bash',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    {
+        // The `sh` pattern avoids matching file extensions like `.sh`
+        pattern: /(?<!\.)(?:^|[\s;|&])sh\s+/m,
+        signal: 'sh',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    {
+        pattern: /\bnode\s+/,
+        signal: 'node',
+        impact: { ...IMPACT_ALL_OK },
+    },
+];
+/**
+ * Classify a command string against known command patterns.
+ * Returns the first matching rule or undefined.
+ */
+export function classifyCommand(command) {
+    for (const rule of COMMAND_RULES) {
+        if (rule.pattern.test(command)) {
+            return { signal: rule.signal, impact: { ...rule.impact } };
+        }
+    }
+    return undefined;
+}
+/**
+ * Classify a standalone binary name (e.g., "python3", "node", "uv").
+ * Unlike classifyCommand which matches regex patterns against full command strings,
+ * this performs an exact lookup for MCP server command binaries.
+ */
+export function classifyCommandBinary(binary) {
+    const entry = BINARY_IMPACTS[binary];
+    if (!entry)
+        return undefined;
+    return { signal: entry.signal, impact: { ...entry.impact } };
+}
+//# sourceMappingURL=command-classifier.js.map

package/dist/scanners/command-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-classifier.js","sourceRoot":"","sources":["../../src/scanners/command-classifier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAQtG,4DAA4D;AAC5D,MAAM,cAAc,GAA4E;IAC9F,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,EAAE;IACpE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE,EAAE;IACtD,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE,EAAE;IACpD,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,EAAE;IACzE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,EAAE;IAC1E,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,EAAE;IAChE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,EAAE;CACjE,CAAC;AAEF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD;QACE,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,8DAA8D;QAC9D,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD;QACE,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE;KAC7B;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe;IAEf,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc;IAEd,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;AAC/D,CAAC"}

package/dist/scanners/frontmatter-scanner.d.ts

@@ -0,0 +1,7 @@
+import type { CompatibilityEvidence } from '../types.js';
+/**
+ * Scan SKILL.md frontmatter for compatibility-relevant declarations.
+ * Checks `allowed-tools` for restricted tools and `targets` for author-declared surfaces.
+ */
+export declare function scanFrontmatter(content: string, filePath: string): CompatibilityEvidence[];
+//# sourceMappingURL=frontmatter-scanner.d.ts.map

package/dist/scanners/frontmatter-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/frontmatter-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAuB,MAAM,aAAa,CAAC;AAuD9E;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CAgC1F"}

package/dist/scanners/frontmatter-scanner.js

@@ -0,0 +1,79 @@
+import { parse as parseYaml } from 'yaml';
+import { ALL_TARGETS, IMPACT_ALL_OK, IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW } from '../types.js';
+/** Tools that require local environment access */
+const RESTRICTED_TOOLS = {
+    Bash: { impact: { ...IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW } },
+    Edit: { impact: { ...IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW } },
+    Write: { impact: { ...IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW } },
+    NotebookEdit: { impact: { ...IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW } },
+};
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---/;
+function scanAllowedTools(allowedTools, filePath) {
+    const evidence = [];
+    for (const tool of allowedTools) {
+        const toolName = String(tool);
+        const restriction = RESTRICTED_TOOLS[toolName];
+        if (restriction) {
+            evidence.push({
+                source: 'frontmatter',
+                file: filePath,
+                signal: `allowed-tools: ${toolName}`,
+                detail: `Skill requires "${toolName}" tool which needs local environment access`,
+                impact: { ...restriction.impact },
+            });
+        }
+    }
+    return evidence;
+}
+function scanTargetsDeclaration(targets, filePath) {
+    const declaredTargets = new Set(targets.map(String));
+    const excludedTargets = ALL_TARGETS.filter(t => !declaredTargets.has(t));
+    if (excludedTargets.length === 0)
+        return undefined;
+    const impact = { ...IMPACT_ALL_OK };
+    for (const t of excludedTargets) {
+        impact[t] = 'incompatible';
+    }
+    return {
+        source: 'declaration',
+        file: filePath,
+        signal: `targets: [${targets.map(String).join(', ')}]`,
+        detail: `Author declares plugin targets: ${targets.map(String).join(', ')}. Not listed: ${excludedTargets.join(', ')}`,
+        impact,
+    };
+}
+/**
+ * Scan SKILL.md frontmatter for compatibility-relevant declarations.
+ * Checks `allowed-tools` for restricted tools and `targets` for author-declared surfaces.
+ */
+export function scanFrontmatter(content, filePath) {
+    const fmMatch = FRONTMATTER_RE.exec(content);
+    if (!fmMatch)
+        return [];
+    const rawYaml = fmMatch[1];
+    if (rawYaml === undefined)
+        return [];
+    let parsed;
+    try {
+        parsed = parseYaml(rawYaml);
+    }
+    catch {
+        return [];
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return [];
+    const evidence = [];
+    const allowedTools = parsed['allowed-tools'];
+    if (Array.isArray(allowedTools)) {
+        evidence.push(...scanAllowedTools(allowedTools, filePath));
+    }
+    const targets = parsed['targets'];
+    if (Array.isArray(targets)) {
+        const targetEvidence = scanTargetsDeclaration(targets, filePath);
+        if (targetEvidence) {
+            evidence.push(targetEvidence);
+        }
+    }
+    return evidence;
+}
+//# sourceMappingURL=frontmatter-scanner.js.map

package/dist/scanners/frontmatter-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter-scanner.js","sourceRoot":"","sources":["../../src/scanners/frontmatter-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAEpG,kDAAkD;AAClD,MAAM,gBAAgB,GAA4D;IAChF,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,yCAAyC,EAAE,EAAE;IAClE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,yCAAyC,EAAE,EAAE;IAClE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,yCAAyC,EAAE,EAAE;IACnE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,yCAAyC,EAAE,EAAE;CAC3E,CAAC;AAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C,SAAS,gBAAgB,CACvB,YAAuB,EACvB,QAAgB;IAEhB,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,kBAAkB,QAAQ,EAAE;gBACpC,MAAM,EAAE,mBAAmB,QAAQ,6CAA6C;gBAChF,MAAM,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkB,EAClB,QAAgB;IAEhB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnD,MAAM,MAAM,GAAgC,EAAE,GAAG,aAAa,EAAE,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,aAAa,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACtD,MAAM,EAAE,mCAAmC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtH,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,QAAgB;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAErC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAA4B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,cAAc,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scanners/hook-scanner.d.ts

@@ -0,0 +1,7 @@
+import type { CompatibilityEvidence } from '../types.js';
+/**
+ * Scan a hooks config object for command handlers that indicate runtime requirements.
+ * Expects the parsed JSON from a hooks.json file.
+ */
+export declare function scanHooksConfig(config: Record<string, unknown>, filePath: string): CompatibilityEvidence[];
+//# sourceMappingURL=hook-scanner.d.ts.map

package/dist/scanners/hook-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/hook-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAIzD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CA6B1G"}

package/dist/scanners/hook-scanner.js

@@ -0,0 +1,35 @@
+import { classifyCommand } from './command-classifier.js';
+/**
+ * Scan a hooks config object for command handlers that indicate runtime requirements.
+ * Expects the parsed JSON from a hooks.json file.
+ */
+export function scanHooksConfig(config, filePath) {
+    const evidence = [];
+    const hooks = config['hooks'];
+    if (!hooks || typeof hooks !== 'object')
+        return evidence;
+    for (const [eventName, handlers] of Object.entries(hooks)) {
+        if (!Array.isArray(handlers))
+            continue;
+        for (const handler of handlers) {
+            if (!handler || typeof handler !== 'object')
+                continue;
+            const h = handler;
+            if (h['type'] !== 'command' || typeof h['command'] !== 'string')
+                continue;
+            const command = h['command'];
+            const classification = classifyCommand(command);
+            if (classification) {
+                evidence.push({
+                    source: 'hook',
+                    file: filePath,
+                    signal: `hook-command: ${classification.signal}`,
+                    detail: `Hook "${eventName}" runs command: ${command}`,
+                    impact: classification.impact,
+                });
+            }
+        }
+    }
+    return evidence;
+}
+//# sourceMappingURL=hook-scanner.js.map

package/dist/scanners/hook-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-scanner.js","sourceRoot":"","sources":["../../src/scanners/hook-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAA+B,EAAE,QAAgB;IAC/E,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAEzD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAkC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YACtD,MAAM,CAAC,GAAG,OAAkC,CAAC;YAC7C,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAE1E,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,cAAc,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,iBAAiB,cAAc,CAAC,MAAM,EAAE;oBAChD,MAAM,EAAE,SAAS,SAAS,mBAAmB,OAAO,EAAE;oBACtD,MAAM,EAAE,cAAc,CAAC,MAAM;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scanners/index.d.ts

@@ -0,0 +1,7 @@
+export { scanCodeBlocks } from './code-block-scanner.js';
+export { classifyCommand, classifyCommandBinary, COMMAND_RULES } from './command-classifier.js';
+export { scanFrontmatter } from './frontmatter-scanner.js';
+export { scanHooksConfig } from './hook-scanner.js';
+export { scanMcpConfig } from './mcp-config-scanner.js';
+export { classifyScriptFile, PYTHON_STDLIB_MODULES, scanPythonImports } from './script-file-scanner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/scanners/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/scanners/index.js

@@ -0,0 +1,7 @@
+export { scanCodeBlocks } from './code-block-scanner.js';
+export { classifyCommand, classifyCommandBinary, COMMAND_RULES } from './command-classifier.js';
+export { scanFrontmatter } from './frontmatter-scanner.js';
+export { scanHooksConfig } from './hook-scanner.js';
+export { scanMcpConfig } from './mcp-config-scanner.js';
+export { classifyScriptFile, PYTHON_STDLIB_MODULES, scanPythonImports } from './script-file-scanner.js';
+//# sourceMappingURL=index.js.map

package/dist/scanners/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/scanners/mcp-config-scanner.d.ts

@@ -0,0 +1,7 @@
+import type { CompatibilityEvidence } from '../types.js';
+/**
+ * Scan an MCP config object for server runtime requirements.
+ * Expects the parsed JSON from a .mcp.json file.
+ */
+export declare function scanMcpConfig(config: Record<string, unknown>, filePath: string): CompatibilityEvidence[];
+//# sourceMappingURL=mcp-config-scanner.d.ts.map

package/dist/scanners/mcp-config-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/mcp-config-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAIzD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CAyBxG"}

package/dist/scanners/mcp-config-scanner.js

@@ -0,0 +1,31 @@
+import { classifyCommandBinary } from './command-classifier.js';
+/**
+ * Scan an MCP config object for server runtime requirements.
+ * Expects the parsed JSON from a .mcp.json file.
+ */
+export function scanMcpConfig(config, filePath) {
+    const evidence = [];
+    const servers = config['mcpServers'];
+    if (!servers || typeof servers !== 'object')
+        return evidence;
+    for (const [serverName, serverConfig] of Object.entries(servers)) {
+        if (!serverConfig || typeof serverConfig !== 'object')
+            continue;
+        const sc = serverConfig;
+        const command = sc['command'];
+        if (typeof command !== 'string')
+            continue;
+        const classification = classifyCommandBinary(command);
+        if (classification) {
+            evidence.push({
+                source: 'mcp-server',
+                file: filePath,
+                signal: `mcp-server: ${classification.signal}`,
+                detail: `MCP server "${serverName}" uses command: ${command}`,
+                impact: classification.impact,
+            });
+        }
+    }
+    return evidence;
+}
+//# sourceMappingURL=mcp-config-scanner.js.map

package/dist/scanners/mcp-config-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config-scanner.js","sourceRoot":"","sources":["../../src/scanners/mcp-config-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B,EAAE,QAAgB;IAC7E,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE7D,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,SAAS;QAChE,MAAM,EAAE,GAAG,YAAuC,CAAC;QACnD,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAS;QAE1C,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,cAAc,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,YAAY;gBACpB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,eAAe,cAAc,CAAC,MAAM,EAAE;gBAC9C,MAAM,EAAE,eAAe,UAAU,mBAAmB,OAAO,EAAE;gBAC7D,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scanners/script-file-scanner.d.ts

@@ -0,0 +1,14 @@
+import type { CompatibilityEvidence } from '../types.js';
+/** Python 3.10+ standard library modules */
+export declare const PYTHON_STDLIB_MODULES: ReadonlySet<string>;
+/**
+ * Classify a script file by its extension and return compatibility evidence.
+ * Returns undefined for non-script files.
+ */
+export declare function classifyScriptFile(relativePath: string): CompatibilityEvidence | undefined;
+/**
+ * Parse Python source content for import statements and return evidence
+ * for any third-party (non-stdlib) imports found.
+ */
+export declare function scanPythonImports(content: string, filePath: string): CompatibilityEvidence[];
+//# sourceMappingURL=script-file-scanner.d.ts.map

package/dist/scanners/script-file-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-file-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/script-file-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAuB,MAAM,aAAa,CAAC;AAG9E,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAwJpD,CAAC;AAuCH;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAe1F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CAoC5F"}

package/dist/scanners/script-file-scanner.js

@@ -0,0 +1,241 @@
+import { extname } from 'node:path';
+import { IMPACT_ALL_OK, IMPACT_NEEDS_REVIEW_DESKTOP } from '../types.js';
+/** Python 3.10+ standard library modules */
+export const PYTHON_STDLIB_MODULES = new Set([
+    '_thread',
+    'abc',
+    'argparse',
+    'ast',
+    'asyncio',
+    'base64',
+    'bisect',
+    'builtins',
+    'calendar',
+    'cmath',
+    'cmd',
+    'codecs',
+    'collections',
+    'colorsys',
+    'compileall',
+    'concurrent',
+    'configparser',
+    'contextlib',
+    'contextvars',
+    'copy',
+    'copyreg',
+    'cProfile',
+    'csv',
+    'ctypes',
+    'curses',
+    'dataclasses',
+    'datetime',
+    'decimal',
+    'difflib',
+    'dis',
+    'email',
+    'enum',
+    'errno',
+    'faulthandler',
+    'filecmp',
+    'fileinput',
+    'fnmatch',
+    'fractions',
+    'ftplib',
+    'functools',
+    'gc',
+    'getopt',
+    'getpass',
+    'gettext',
+    'glob',
+    'graphlib',
+    'gzip',
+    'hashlib',
+    'heapq',
+    'hmac',
+    'html',
+    'http',
+    'idlelib',
+    'imaplib',
+    'importlib',
+    'inspect',
+    'io',
+    'ipaddress',
+    'itertools',
+    'json',
+    'keyword',
+    'linecache',
+    'locale',
+    'logging',
+    'lzma',
+    'mailbox',
+    'math',
+    'mimetypes',
+    'modulefinder',
+    'multiprocessing',
+    'netrc',
+    'numbers',
+    'operator',
+    'os',
+    'pathlib',
+    'pdb',
+    'pickle',
+    'pickletools',
+    'platform',
+    'plistlib',
+    'poplib',
+    'posixpath',
+    'pprint',
+    'profile',
+    'pstats',
+    'py_compile',
+    'pyclbr',
+    'pydoc',
+    'queue',
+    'quopri',
+    'random',
+    're',
+    'readline',
+    'reprlib',
+    'runpy',
+    'sched',
+    'secrets',
+    'select',
+    'selectors',
+    'shelve',
+    'shlex',
+    'shutil',
+    'signal',
+    'site',
+    'smtplib',
+    'socket',
+    'socketserver',
+    'sqlite3',
+    'ssl',
+    'stat',
+    'statistics',
+    'string',
+    'stringprep',
+    'struct',
+    'subprocess',
+    'sys',
+    'sysconfig',
+    'syslog',
+    'tabnanny',
+    'tarfile',
+    'tempfile',
+    'test',
+    'textwrap',
+    'threading',
+    'time',
+    'timeit',
+    'tkinter',
+    'token',
+    'tokenize',
+    'tomllib',
+    'trace',
+    'traceback',
+    'tracemalloc',
+    'turtle',
+    'types',
+    'typing',
+    'unicodedata',
+    'unittest',
+    'urllib',
+    'uuid',
+    'venv',
+    'warnings',
+    'wave',
+    'weakref',
+    'webbrowser',
+    'xml',
+    'xmlrpc',
+    'zipapp',
+    'zipfile',
+    'zipimport',
+    'zlib',
+]);
+const SIGNAL_NODE_SCRIPT = 'node-script';
+const SIGNAL_SHELL_SCRIPT = 'shell-script';
+/** Script extension classification rules */
+const SCRIPT_RULES = {
+    '.py': {
+        signal: 'python-script',
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    '.sh': {
+        signal: SIGNAL_SHELL_SCRIPT,
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    '.bash': {
+        signal: SIGNAL_SHELL_SCRIPT,
+        impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+    },
+    '.mjs': {
+        signal: SIGNAL_NODE_SCRIPT,
+        impact: { ...IMPACT_ALL_OK },
+    },
+    '.js': {
+        signal: SIGNAL_NODE_SCRIPT,
+        impact: { ...IMPACT_ALL_OK },
+    },
+    '.cjs': {
+        signal: SIGNAL_NODE_SCRIPT,
+        impact: { ...IMPACT_ALL_OK },
+    },
+};
+/** Regex for `import X` and `import X as Y` */
+const IMPORT_RE = /^import\s+(\w+)/;
+/** Regex for `from X import Y` and `from X.sub import Y` */
+const FROM_IMPORT_RE = /^from\s+(\w+)/;
+/**
+ * Classify a script file by its extension and return compatibility evidence.
+ * Returns undefined for non-script files.
+ */
+export function classifyScriptFile(relativePath) {
+    const ext = extname(relativePath).toLowerCase();
+    const rule = SCRIPT_RULES[ext];
+    if (!rule) {
+        return undefined;
+    }
+    return {
+        source: 'script',
+        file: relativePath,
+        signal: rule.signal,
+        detail: `Script file detected: ${relativePath}`,
+        impact: { ...rule.impact },
+    };
+}
+/**
+ * Parse Python source content for import statements and return evidence
+ * for any third-party (non-stdlib) imports found.
+ */
+export function scanPythonImports(content, filePath) {
+    const thirdPartyModules = new Set();
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        let moduleName;
+        const importMatch = IMPORT_RE.exec(trimmed);
+        if (importMatch) {
+            moduleName = importMatch[1];
+        }
+        const fromMatch = FROM_IMPORT_RE.exec(trimmed);
+        if (fromMatch) {
+            moduleName = fromMatch[1];
+        }
+        if (moduleName && !PYTHON_STDLIB_MODULES.has(moduleName)) {
+            thirdPartyModules.add(moduleName);
+        }
+    }
+    const evidence = [];
+    for (const moduleName of thirdPartyModules) {
+        evidence.push({
+            source: 'script-import',
+            file: filePath,
+            signal: `third-party-import:${moduleName}`,
+            detail: `Third-party Python import "${moduleName}" requires pip install`,
+            impact: { ...IMPACT_NEEDS_REVIEW_DESKTOP },
+        });
+    }
+    return evidence;
+}
+//# sourceMappingURL=script-file-scanner.js.map

package/dist/scanners/script-file-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-file-scanner.js","sourceRoot":"","sources":["../../src/scanners/script-file-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAEzE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAChE,SAAS;IACT,KAAK;IACL,UAAU;IACV,KAAK;IACL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,OAAO;IACP,KAAK;IACL,QAAQ;IACR,aAAa;IACb,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,aAAa;IACb,MAAM;IACN,SAAS;IACT,UAAU;IACV,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,UAAU;IACV,SAAS;IACT,SAAS;IACT,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc;IACd,SAAS;IACT,WAAW;IACX,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;IACX,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,WAAW;IACX,SAAS;IACT,IAAI;IACJ,WAAW;IACX,WAAW;IACX,MAAM;IACN,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;IACT,MAAM;IACN,WAAW;IACX,cAAc;IACd,iBAAiB;IACjB,OAAO;IACP,SAAS;IACT,UAAU;IACV,IAAI;IACJ,SAAS;IACT,KAAK;IACL,QAAQ;IACR,aAAa;IACb,UAAU;IACV,UAAU;IACV,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,UAAU;IACV,SAAS;IACT,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,cAAc;IACd,SAAS;IACT,KAAK;IACL,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,KAAK;IACL,WAAW;IACX,QAAQ;IACR,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,UAAU;IACV,WAAW;IACX,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;IACX,aAAa;IACb,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,aAAa;IACb,UAAU;IACV,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,YAAY;IACZ,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C,4CAA4C;AAC5C,MAAM,YAAY,GAA4E;IAC5F,KAAK,EAAE;QACL,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD,KAAK,EAAE;QACL,MAAM,EAAE,mBAAmB;QAC3B,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD,OAAO,EAAE;QACP,MAAM,EAAE,mBAAmB;QAC3B,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;KAC3C;IACD,MAAM,EAAE;QACN,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE;KAC7B;IACD,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE;KAC7B;IACD,MAAM,EAAE;QACN,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE;KAC7B;CACF,CAAC;AAEF,+CAA+C;AAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC,4DAA4D;AAC5D,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,yBAAyB,YAAY,EAAE;QAC/C,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,QAAgB;IACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,UAA8B,CAAC;QAEnC,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,sBAAsB,UAAU,EAAE;YAC1C,MAAM,EAAE,8BAA8B,UAAU,wBAAwB;YACxE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Core types for Claude plugin compatibility analysis.
+ *
+ * Three Claude surfaces with different runtime capabilities:
+ * - claude-desktop: Most restrictive (MCP servers only, no local scripts)
+ * - cowork: Middle ground (VM with Python 3.10 + Node.js 22, restricted network)
+ * - claude-code: Least restrictive (full local environment)
+ */
+/** Claude surface where plugins can run */
+export type Target = 'claude-desktop' | 'cowork' | 'claude-code';
+/** All targets in order of restrictiveness (most to least) */
+export declare const ALL_TARGETS: readonly Target[];
+/** Per-target impact level used in evidence records */
+export type ImpactLevel = 'ok' | 'needs-review' | 'incompatible';
+/** Common impact patterns reused across scanners */
+export declare const IMPACT_NEEDS_REVIEW_DESKTOP: Record<Target, ImpactLevel>;
+export declare const IMPACT_ALL_OK: Record<Target, ImpactLevel>;
+export declare const IMPACT_INCOMPATIBLE_DESKTOP: Record<Target, ImpactLevel>;
+export declare const IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW: Record<Target, ImpactLevel>;
+/**
+ * Three-tier verdict to handle ambiguity in static analysis.
+ * - compatible: High confidence this works on the target
+ * - needs-review: Signals detected but uncertain — curator decides
+ * - incompatible: Definitive evidence it cannot work on the target
+ */
+export type Verdict = 'compatible' | 'needs-review' | 'incompatible';
+/** Where a compatibility signal was detected */
+export type EvidenceSource = 'declaration' | 'frontmatter' | 'code-block' | 'script' | 'script-import' | 'hook' | 'mcp-server';
+/**
+ * A single piece of compatibility evidence found during analysis.
+ * Each evidence item records what was found, where, and how it impacts each target.
+ */
+export interface CompatibilityEvidence {
+    /** What type of source produced this evidence */
+    source: EvidenceSource;
+    /** File where the signal was found (relative to plugin root) */
+    file: string;
+    /** Line number within the file (1-based, when applicable) */
+    line?: number | undefined;
+    /** Short description of the signal (e.g., "python3 command", "pip install") */
+    signal: string;
+    /** Human-readable detail explaining what was found */
+    detail: string;
+    /** Impact on each target surface */
+    impact: Record<Target, ImpactLevel>;
+}
+/**
+ * Aggregated compatibility result for a single plugin.
+ * Plugin verdict = worst verdict across all evidence for each target.
+ */
+export interface CompatibilityResult {
+    /** Plugin name from plugin.json */
+    plugin: string;
+    /** Plugin version from plugin.json (if present) */
+    version?: string | undefined;
+    /** Author-declared target surfaces (if present in plugin.json) */
+    declared?: Target[] | undefined;
+    /** Analyzed verdict per target */
+    analyzed: Record<Target, Verdict>;
+    /** All evidence collected during analysis */
+    evidence: CompatibilityEvidence[];
+    /** Summary counts for quick assessment */
+    summary: {
+        totalFiles: number;
+        skillFiles: number;
+        scriptFiles: number;
+        hookFiles: number;
+        mcpConfigs: number;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,2CAA2C;AAC3C,MAAM,MAAM,MAAM,GAAG,gBAAgB,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEjE,8DAA8D;AAC9D,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAAyD,CAAC;AAEnG,uDAAuD;AACvD,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,cAAc,GAAG,cAAc,CAAC;AAEjE,oDAAoD;AACpD,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAI1D,CAAC;AAEX,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAI5C,CAAC;AAEX,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAI1D,CAAC;AAEX,eAAO,MAAM,yCAAyC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAIxE,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,cAAc,GAAG,cAAc,CAAC;AAErE,gDAAgD;AAChD,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,eAAe,GACf,MAAM,GACN,YAAY,CAAC;AAEjB;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,MAAM,EAAE,cAAc,CAAC;IACvB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAChC,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,6CAA6C;IAC7C,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,0CAA0C;IAC1C,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH"}

package/dist/types.js

@@ -0,0 +1,32 @@
+/**
+ * Core types for Claude plugin compatibility analysis.
+ *
+ * Three Claude surfaces with different runtime capabilities:
+ * - claude-desktop: Most restrictive (MCP servers only, no local scripts)
+ * - cowork: Middle ground (VM with Python 3.10 + Node.js 22, restricted network)
+ * - claude-code: Least restrictive (full local environment)
+ */
+/** All targets in order of restrictiveness (most to least) */
+export const ALL_TARGETS = ['claude-desktop', 'cowork', 'claude-code'];
+/** Common impact patterns reused across scanners */
+export const IMPACT_NEEDS_REVIEW_DESKTOP = {
+    'claude-desktop': 'needs-review',
+    cowork: 'ok',
+    'claude-code': 'ok',
+};
+export const IMPACT_ALL_OK = {
+    'claude-desktop': 'ok',
+    cowork: 'ok',
+    'claude-code': 'ok',
+};
+export const IMPACT_INCOMPATIBLE_DESKTOP = {
+    'claude-desktop': 'incompatible',
+    cowork: 'ok',
+    'claude-code': 'ok',
+};
+export const IMPACT_DESKTOP_INCOMPATIBLE_COWORK_REVIEW = {
+    'claude-desktop': 'incompatible',
+    cowork: 'needs-review',
+    'claude-code': 'ok',
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAsB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAKnG,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,gBAAgB,EAAE,cAAc;IAChC,MAAM,EAAE,IAAI;IACZ,aAAa,EAAE,IAAI;CACX,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,gBAAgB,EAAE,IAAI;IACtB,MAAM,EAAE,IAAI;IACZ,aAAa,EAAE,IAAI;CACX,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,gBAAgB,EAAE,cAAc;IAChC,MAAM,EAAE,IAAI;IACZ,aAAa,EAAE,IAAI;CACX,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAgC;IACpF,gBAAgB,EAAE,cAAc;IAChC,MAAM,EAAE,cAAc;IACtB,aAAa,EAAE,IAAI;CACX,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@vibe-agent-toolkit/claude-marketplace",
+  "version": "0.1.15-rc.1",
+  "description": "Claude plugin marketplace tools: compatibility analysis, provenance tracking, enterprise config",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "build:watch": "tsc --build --watch",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest watch",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@vibe-agent-toolkit/utils": "0.1.15-rc.1",
+    "yaml": "^2.6.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "~5.7.2",
+    "vitest": "^3.0.3"
+  },
+  "keywords": [
+    "claude",
+    "marketplace",
+    "plugin",
+    "compatibility",
+    "enterprise"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jdutton/vibe-agent-toolkit.git",
+    "directory": "packages/claude-marketplace"
+  },
+  "author": "Jeff Dutton",
+  "license": "MIT"
+}