@xopcai/xopc 0.0.283 → 0.0.284

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.283";
+var version = "0.0.284";
 //#endregion
 export { version };

package/dist/src/cli/command-loaders.js

@@ -26,6 +26,7 @@ const REGISTRY_COMMAND_MODULES = {
 	voice: () => import("./commands/voice.js"),
 	search: () => import("./commands/search.js"),
 	auth: () => import("./commands/auth.js"),
+	import: () => import("./commands/import.js"),
 	skills: () => import("./commands/skills.js"),
 	connectors: () => import("./commands/connectors.js"),
 	browser: () => import("./commands/browser.js"),

package/dist/src/cli/command-manifest.js

@@ -127,6 +127,10 @@ const ROOT_HELP_COMMANDS = [
 		name: "search",
 		description: "Manage web-search providers (brave / tavily / bing / searxng)"
 	},
+	{
+		name: "import [source]",
+		description: "Import skills, context and projects from another AI app"
+	},
 	{
 		name: "skills",
 		description: "Manage skills"

package/dist/src/cli/commands/agent.js

@@ -8,10 +8,10 @@ import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
 import "../../infra/bus/index.js";
 import { AgentService } from "../../agent/service.js";
 import "../../agent/index.js";
-import { formatExamples, register } from "../registry.js";
-import { getContextWithOpts } from "../context.js";
 import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
+import { formatExamples, register } from "../registry.js";
+import { getContextWithOpts } from "../context.js";
 import { getXopcCloudCatalogCoordinator } from "../../providers/xopc-cloud-catalog-coordinator.js";
 import { listSessions } from "./agent/sessions.js";
 import { renderStreamToTerminal } from "./agent/stream-renderer.js";

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v173).`,
+		message: `SQLite schema v${status.dbVersion} (current release v174).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
-import "../../../config/index.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
+import "../../../config/index.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";

package/dist/src/cli/commands/import.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function createImportCommand(): Command;

package/dist/src/cli/commands/import.js

@@ -0,0 +1,30 @@
+import { closeXopcDatabase, isXopcDatabaseOpen, openXopcDatabase } from "../../storage/sqlite/connection.js";
+import { register } from "../registry.js";
+import { isImportSource } from "../../imports/sources.js";
+import { createRuntimeImportService, recoverCapabilityImports } from "../../imports/runtime.js";
+import { importProduct, listImportSources } from "../../imports/productImport.js";
+import { Command } from "commander";
+//#region src/cli/commands/import.ts
+function createImportCommand() {
+	return new Command("import").description("Import skills, context and projects from another AI app").argument("[source]", "codex or claude-code; omit to list detected apps").action(async (source) => {
+		const selected = source && isImportSource(source) ? source : void 0;
+		if (source && !selected) throw new Error("Unsupported import source");
+		const opened = !isXopcDatabaseOpen();
+		if (opened) openXopcDatabase();
+		try {
+			await recoverCapabilityImports();
+			console.log(JSON.stringify(selected ? await importProduct(createRuntimeImportService("gateway-owner"), selected) : listImportSources("gateway-owner"), null, 2));
+		} finally {
+			if (opened) closeXopcDatabase();
+		}
+	});
+}
+register({
+	id: "import",
+	name: "import",
+	description: "Import from other AI apps",
+	factory: createImportCommand,
+	metadata: { category: "utility" }
+});
+//#endregion
+export { createImportCommand };

package/dist/src/cli/commands/models.js

@@ -2,9 +2,9 @@ import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
-import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colors } from "../utils/colors.js";

package/dist/src/cli/commands/onboard.js

@@ -2,8 +2,8 @@ import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { saveConfig } from "../../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
-import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { formatExamples, register } from "../registry.js";
 import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";

package/dist/src/cli/commands/platform.js

@@ -1,6 +1,6 @@
 import { loadConfig, saveConfig } from "../../config/loader.js";
-import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { formatExamples, register } from "../registry.js";
 import { PLATFORM_RUNTIME_PROFILE, PLATFORM_RUNTIME_PROVIDER, PlatformRuntimeClient, discoverPlatform } from "../../platform/client.js";
 import "../../platform/index.js";
 import { getProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";

package/dist/src/cli/commands/profile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { formatExamples, register } from "../registry.js";
 import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
+import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 import Table from "cli-table3";

package/dist/src/cli/commands/tunnel.js

@@ -7,8 +7,8 @@ import { ensureFrpcBinary } from "../../tunnel/frpc-binary.js";
 import { resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "../../tunnel/env.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { getTunnelService } from "../../tunnel/tunnel-service.js";
-import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { formatExamples, register } from "../registry.js";
 import { resolveGatewayAuth } from "../../gateway/auth.js";
 import { requireTunnelGatewayToken } from "../../tunnel/auth-policy.js";
 import { TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, hasValidTunnelConsent } from "../../tunnel/consent.js";

package/dist/src/cli/commands/update.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { loadConfig } from "../../config/loader.js";
-import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { formatExamples, register } from "../registry.js";
 import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";

package/dist/src/cli/extension-cli-register.js

@@ -4,9 +4,9 @@ import { ExtensionLoader } from "../extensions/loader.js";
 import "../extensions/index.js";
 import { MessageBus } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
-import { createDefaultContext } from "./registry.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
+import { createDefaultContext } from "./registry.js";
 import { registerExtensionCliProgram } from "../extensions/sdk/channel-helpers.js";
 import { join } from "path";
 //#region src/cli/extension-cli-register.ts

package/dist/src/config/index.js

@@ -13,10 +13,10 @@ import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
+import { diffConfigPaths } from "./diff.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { listAgentProfileMarkdownDirs, listAgentWorkspaceDirs } from "./workspace-dirs.js";
 import { ProfileManager, createProfile, deleteProfile, getCurrentProfile, getProfileManager, getProfileNameFromDir, getSwitchCommand, listProfiles, resolveProfileStateDir } from "./profile.js";
-import { diffConfigPaths } from "./diff.js";
 import { BASE_RELOAD_RULES, buildReloadPlan, matchReloadRule } from "./rules.js";
 import { ConfigHotReloader } from "./reload.js";
 //#region src/config/index.ts

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/routes/imports.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerImportRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/imports.js

@@ -0,0 +1,44 @@
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+import { ImportError } from "../../../imports/types.js";
+import { isImportSource } from "../../../imports/sources.js";
+import { createRuntimeImportService } from "../../../imports/runtime.js";
+import { importProduct, listImportSources } from "../../../imports/productImport.js";
+import { z } from "zod";
+//#region src/gateway/hono/routes/imports.ts
+const requestSchema = z.object({ requestId: z.string().uuid() }).strict();
+function registerImportRoutes(app, deps) {
+	const respond = async (c, run) => {
+		try {
+			if (getGatewayPrincipal(c).kind !== "owner") throw new ImportError("owner_required", "Only the Gateway owner can import local capabilities", 403);
+			return c.json({
+				ok: true,
+				data: await run()
+			});
+		} catch (error) {
+			if (error instanceof z.ZodError) return c.json({
+				ok: false,
+				code: "invalid_input",
+				error: "Invalid import request"
+			}, 400);
+			if (error instanceof ImportError) return c.json({
+				ok: false,
+				code: error.code,
+				error: error.message
+			}, error.status);
+			return c.json({
+				ok: false,
+				code: "import_failed",
+				error: "Import could not finish. Try again; existing content is preserved."
+			}, 400);
+		}
+	};
+	app.get("/api/imports/sources", (c) => respond(c, () => ({ sources: listImportSources("gateway-owner") })));
+	app.post("/api/imports/sources/:source/import", deps.strictRateLimitMiddleware, (c) => respond(c, async () => {
+		const source = c.req.param("source");
+		if (!isImportSource(source)) throw new ImportError("unsupported_source", "Unsupported source");
+		const { requestId } = requestSchema.parse(await c.req.json());
+		return importProduct(createRuntimeImportService("gateway-owner", () => deps.service.agentService.refreshSkillsAfterDiskChange(), (root) => deps.service.agentService.getWorkspaceTrust(root).trusted), source, requestId);
+	}));
+}
+//#endregion
+export { registerImportRoutes };

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -3,6 +3,14 @@ function startsWithAny(path, prefixes) {
 	return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
 }
 const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
+	{
+		id: "imports",
+		match: (path) => startsWithAny(path, ["/api/imports"]),
+		load: async () => {
+			const { registerImportRoutes } = await import("./imports.js");
+			return { register: registerImportRoutes };
+		}
+	},
 	{
 		id: "project-understanding",
 		match: (path) => /^\/api\/projects\/[^/]+\/understanding$/.test(path),

package/dist/src/gateway/run-loop.js

@@ -1,6 +1,6 @@
 import { loadConfig } from "../config/loader.js";
-import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
+import "../config/index.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { acquireGatewayLock } from "./lock.js";

package/dist/src/gateway/service.js

@@ -955,6 +955,8 @@ var GatewayService = class {
 		});
 		log.debug("Starting gateway service...");
 		openXopcDatabase();
+		const { recoverCapabilityImports } = await import("../imports/runtime.js");
+		await recoverCapabilityImports();
 		this.createNotificationService().start();
 		this.startTime = Date.now();
 		this.running = true;

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/imports/compatibility.d.ts

@@ -0,0 +1,7 @@
+import type { ImportCandidate, ImportFile } from './types.js';
+export declare function parseSkill(raw: string): {
+    metadata: Record<string, unknown>;
+    body: string;
+};
+export declare function inspectSkill(base: Pick<ImportCandidate, 'id' | 'source' | 'scope' | 'location' | 'shared'>, files: ImportFile[]): ImportCandidate;
+export declare function inspectMcp(base: Pick<ImportCandidate, 'id' | 'source' | 'scope' | 'location' | 'shared'>, name: string, raw: unknown): ImportCandidate;

package/dist/src/imports/compatibility.js

@@ -0,0 +1,174 @@
+import { McpServerSchema, init_schema } from "../config/schema.js";
+import { isValidSkillId } from "../agent/skills/managed-store.js";
+import { containsSecret, isCredentialPath } from "./secrets.js";
+import { digest, fileHash } from "./files.js";
+import yaml from "js-yaml";
+//#region src/imports/compatibility.ts
+init_schema();
+function parseSkill(raw) {
+	const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/.exec(raw);
+	if (!match || match[1].length > 64 * 1024) throw new Error("A valid YAML header is required");
+	if (/(?:^|\s)[&*][\w-]+/.test(match[1])) throw new Error("YAML aliases are not supported");
+	let metadata;
+	try {
+		metadata = yaml.load(match[1], { schema: yaml.JSON_SCHEMA });
+	} catch {
+		throw new Error("Invalid YAML header");
+	}
+	if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) throw new Error("Invalid skill metadata");
+	return {
+		metadata,
+		body: match[2]
+	};
+}
+function inspectSkill(base, files) {
+	const item = {
+		...base,
+		kind: "skill",
+		name: base.id,
+		description: "",
+		files,
+		hash: fileHash(files),
+		compatibility: "compatible",
+		findings: [],
+		requiredEnv: []
+	};
+	try {
+		if (files.reduce((n, f) => n + Buffer.byteLength(f.data, "base64"), 0) > 15 * 1024 * 1024) throw new Error("Skill exceeds 15 MiB");
+		if (files.some((f) => f.path.endsWith("/SKILL.md"))) throw new Error("Nested skill scopes need separate imports");
+		const primary = files.find((f) => f.path === "SKILL.md");
+		if (!primary || Buffer.byteLength(primary.data, "base64") > 1024 * 1024) throw new Error("SKILL.md is missing or exceeds 1 MiB");
+		const { metadata, body } = parseSkill(Buffer.from(primary.data, "base64").toString("utf8"));
+		if (typeof metadata.name !== "string" || !isValidSkillId(metadata.name)) throw new Error("Skill name must be a portable identifier");
+		item.name = metadata.name;
+		if (typeof metadata.description !== "string" || !metadata.description.trim() || metadata.description.length > 1024) throw new Error("Skill description must contain 1–1024 characters");
+		item.description = metadata.description;
+		const supported = new Set([
+			"name",
+			"description",
+			"license",
+			"compatibility",
+			"metadata",
+			"disable-model-invocation",
+			"allowed-tools"
+		]);
+		for (const key of Object.keys(metadata)) if (!supported.has(key)) item.findings.push(`Unsupported skill field: ${key}`);
+		if (metadata["disable-model-invocation"] !== void 0 && typeof metadata["disable-model-invocation"] !== "boolean") item.findings.push("disable-model-invocation must be boolean");
+		if (/\$ARGUMENTS|\$\{?(?:CLAUDE_|CODEX_)|!`/.test(body)) item.findings.push("Product-specific variables or command expansion require adaptation");
+		const meta = metadata.metadata;
+		if (meta && (typeof meta !== "object" || Array.isArray(meta))) item.findings.push("Invalid metadata");
+		if (meta && Object.keys(meta).some((k) => ![
+			"author",
+			"version",
+			"short-description",
+			"short_description",
+			"category",
+			"tags",
+			"license",
+			"homepage"
+		].includes(k))) item.findings.push("Extended metadata needs manual compatibility review");
+		for (const match of body.matchAll(/\[[^\]]*\]\(([^)\s]+)\)/g)) {
+			const ref = match[1].split("#")[0];
+			if (ref && !/^(?:[a-z]+:|#)/i.test(ref) && !files.some((f) => f.path === ref.replace(/^\.\//, ""))) item.findings.push("A referenced local file is missing or outside the skill");
+		}
+		if (item.findings.length) item.compatibility = "blocked";
+		if (metadata["allowed-tools"]) item.findings.push("Source tool pre-approvals are not transferred; xopc permissions apply");
+		for (const file of files) if (isCredentialPath(file.path) || containsSecret(Buffer.from(file.data, "base64").toString("utf8"))) {
+			item.compatibility = "blocked";
+			item.findings.push("Possible credentials found; remove them from the source and scan again");
+			item.files = [];
+			item.description = "";
+			break;
+		}
+	} catch (error) {
+		item.compatibility = "blocked";
+		item.findings.push(error instanceof Error ? error.message : "Invalid skill");
+	}
+	if (files.some((f) => containsSecret(Buffer.from(f.data, "base64").toString("utf8")))) {
+		item.files = [];
+		item.description = "";
+		item.compatibility = "blocked";
+		item.findings = ["Possible credentials found; remove them and scan again"];
+	}
+	return item;
+}
+function inspectMcp(base, name, raw) {
+	const item = {
+		...base,
+		kind: "mcp",
+		name,
+		description: "MCP connection draft",
+		files: [],
+		hash: "",
+		compatibility: "needs_setup",
+		findings: [],
+		requiredEnv: []
+	};
+	const value = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+	const draft = {};
+	const supported = new Set([
+		"command",
+		"args",
+		"cwd",
+		"url",
+		"type",
+		"env",
+		"headers",
+		"http_headers",
+		"startup_timeout_sec",
+		"tool_timeout_sec"
+	]);
+	for (const [key, v] of Object.entries(value)) {
+		if (!supported.has(key)) {
+			item.compatibility = "blocked";
+			item.findings.push(`Unsupported MCP field: ${key}`);
+			continue;
+		}
+		if ([
+			"env",
+			"headers",
+			"http_headers"
+		].includes(key)) {
+			if (v && typeof v === "object") item.requiredEnv.push(...Object.keys(v));
+			item.findings.push(`${key} values omitted; configure them in xopc`);
+		} else if (key === "type") {
+			if (v === "http") draft.transport = "streamable-http";
+			else if (v === "sse") draft.transport = "sse";
+			else if (v !== "stdio") {
+				item.compatibility = "blocked";
+				item.findings.push("Unsupported MCP transport");
+			}
+		} else if (key === "startup_timeout_sec" || key === "tool_timeout_sec") if (typeof v === "number") draft[key === "startup_timeout_sec" ? "connectionTimeoutMs" : "requestTimeoutMs"] = v * 1e3;
+		else {
+			item.compatibility = "blocked";
+			item.findings.push("Invalid MCP timeout");
+		}
+		else draft[key] = v;
+	}
+	if (typeof draft.url === "string") try {
+		const url = new URL(draft.url);
+		if (url.username || url.password || url.search || url.hash) {
+			delete draft.url;
+			item.findings.push("URL credentials or query parameters omitted; enter a clean endpoint");
+		}
+	} catch {
+		delete draft.url;
+	}
+	if (containsSecret(JSON.stringify(draft)) || /--?[a-z-]*(?:token|password|secret|api-key|authorization)(?:[=\s\"]|$)/i.test(JSON.stringify(draft))) {
+		Object.keys(draft).forEach((k) => delete draft[k]);
+		item.findings.push("Possible credentials omitted from connection fields");
+	}
+	if (!McpServerSchema.safeParse(draft).success || !draft.command && !draft.url) {
+		item.compatibility = "blocked";
+		item.findings.push("A valid command or URL is required");
+	}
+	if (base.scope === "project") {
+		item.compatibility = "blocked";
+		item.findings.push("Project-scoped MCP activation is not supported");
+	}
+	item.mcp = draft;
+	item.hash = digest(draft);
+	return item;
+}
+//#endregion
+export { inspectMcp, inspectSkill, parseSkill };

package/dist/src/imports/contextImport.d.ts

@@ -0,0 +1,3 @@
+import type { ImportCandidate } from './types.js';
+/** Small source records fit the existing retrieval budget without injecting entire documents. */
+export declare function importContextDocument(item: ImportCandidate, projectId?: string): 'created' | 'unchanged' | 'kept';

package/dist/src/imports/contextImport.js

@@ -0,0 +1,56 @@
+import { runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { listKnowledgeItems, writeKnowledgeItem } from "../knowledge-memory/repository.js";
+import "../knowledge-memory/index.js";
+import { digest } from "./files.js";
+//#region src/imports/contextImport.ts
+/** Small source records fit the existing retrieval budget without injecting entire documents. */
+function importContextDocument(item, projectId) {
+	const content = item.content?.trim();
+	if (!content) throw new Error("Missing context");
+	const scope = projectId ? {
+		type: "project",
+		id: projectId
+	} : { type: "global" };
+	const canonicalKey = `product-import:${item.source}:${digest(item.location)}`;
+	return runSqliteWriteTransaction(() => {
+		const existing = listKnowledgeItems({
+			canonicalKey,
+			scope,
+			statuses: [
+				"active",
+				"candidate",
+				"needs_review",
+				"stale",
+				"archived",
+				"rejected"
+			]
+		})[0];
+		if (existing) return existing.source.hash === item.hash ? "unchanged" : "kept";
+		for (let offset = 0, part = 0; offset < content.length; offset += 2e3, part++) {
+			const chunk = content.slice(offset, offset + 2e3).trim();
+			if (!chunk) continue;
+			writeKnowledgeItem({
+				kind: "note",
+				scope,
+				content: chunk,
+				canonicalKey: part === 0 ? canonicalKey : `${canonicalKey}:part:${part}`,
+				recordClass: "source_index",
+				status: "active",
+				confidence: .7,
+				importance: .7,
+				originClass: "system",
+				source: {
+					kind: "product_import",
+					product: item.source,
+					path: item.location,
+					hash: item.hash,
+					part,
+					importedAt: Date.now()
+				}
+			});
+		}
+		return "created";
+	});
+}
+//#endregion
+export { importContextDocument };

package/dist/src/imports/files.d.ts

@@ -0,0 +1,13 @@
+import { type ImportFile } from './types.js';
+export declare const IMPORT_LIMITS: {
+    file: number;
+    total: number;
+    count: number;
+    depth: number;
+};
+export declare function digest(value: unknown): string;
+export declare function fileHash(files: ImportFile[]): string;
+export declare function inside(root: string, path: string): boolean;
+export declare function safePath(path: string): boolean;
+export declare function readRegularFile(path: string, limit?: number): Buffer;
+export declare function readTree(rootPath: string): ImportFile[];

package/dist/src/imports/files.js

@@ -0,0 +1,77 @@
+import { ImportError } from "./types.js";
+import { isAbsolute, join, relative } from "node:path";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, readdirSync, realpathSync } from "node:fs";
+import { createHash } from "node:crypto";
+//#region src/imports/files.ts
+const IMPORT_LIMITS = {
+	file: 15 * 1024 * 1024,
+	total: 100 * 1024 * 1024,
+	count: 5e3,
+	depth: 16
+};
+function digest(value) {
+	return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+function fileHash(files) {
+	return digest([...files].sort((a, b) => a.path.localeCompare(b.path, "en")));
+}
+function inside(root, path) {
+	const rel = relative(root, path);
+	return rel === "" || !isAbsolute(rel) && rel !== ".." && !rel.startsWith("../") && !rel.startsWith("..\\");
+}
+function safePath(path) {
+	return !!path && !path.includes("\\") && !path.includes("\0") && !path.startsWith("/") && path.split("/").every((p) => !!p && p !== "." && p !== ".." && !/[<>:"|?*]/.test(p) && !/[. ]$/.test(p) && !/^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(p));
+}
+function readRegularFile(path, limit = IMPORT_LIMITS.file) {
+	if (!lstatSync(path).isFile()) throw new ImportError("unsafe_file", "Only regular files are supported");
+	const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+	try {
+		const before = fstatSync(fd);
+		if (!before.isFile() || before.size > limit) throw new ImportError("limit_exceeded", "File exceeds import limit", 413);
+		const data = readFileSync(fd);
+		const after = fstatSync(fd);
+		if (data.length > limit || before.size !== after.size || before.mtimeMs !== after.mtimeMs) throw new ImportError("source_changed", "Source changed while reading", 409);
+		return data;
+	} finally {
+		closeSync(fd);
+	}
+}
+function readTree(rootPath) {
+	const root = realpathSync(rootPath);
+	const files = [];
+	let total = 0;
+	const names = /* @__PURE__ */ new Set();
+	function walk(dir, prefix, depth) {
+		if (depth > IMPORT_LIMITS.depth) throw new ImportError("limit_exceeded", "Directory is too deep", 413);
+		for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+			if ([
+				".git",
+				".DS_Store",
+				"__MACOSX"
+			].includes(entry.name)) continue;
+			const rel = prefix + entry.name;
+			if (!safePath(rel)) throw new ImportError("unsafe_file", "Unsupported file name");
+			const key = rel.normalize("NFC").toLowerCase();
+			if (names.has(key)) throw new ImportError("conflict", "File names collide on the target filesystem", 409);
+			names.add(key);
+			if (names.size > IMPORT_LIMITS.count) throw new ImportError("limit_exceeded", "Too many files", 413);
+			const path = join(dir, entry.name);
+			if (entry.isSymbolicLink() || !inside(root, realpathSync(path))) throw new ImportError("unsafe_file", "Symbolic links must be replaced with local files before importing");
+			if (entry.isDirectory()) walk(path, rel + "/", depth + 1);
+			else {
+				const data = readRegularFile(path);
+				total += data.length;
+				if (total > IMPORT_LIMITS.total) throw new ImportError("limit_exceeded", "Import is too large", 413);
+				files.push({
+					path: rel,
+					data: data.toString("base64"),
+					executable: (lstatSync(path).mode & 73) !== 0
+				});
+			}
+		}
+	}
+	walk(root, "", 0);
+	return files;
+}
+//#endregion
+export { IMPORT_LIMITS, digest, fileHash, inside, readRegularFile, readTree, safePath };