@xskills/connector 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Kyler Zanuck
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,37 @@
+# XSkills Connector
+
+XSkills Connector installs checksum-approved skill packages into a selected local agent harness on macOS. Pair it once, then approvals from XSkills can be delivered automatically when the Mac is online.
+
+## Requirements
+
+- macOS
+- Node.js 22 or newer
+- An XSkills account with Codex, Claude Code, or Cursor selected as its harness
+
+## Install
+
+Use the exact version shown by XSkills. For example:
+
+```bash
+npx --yes @xskills/connector@0.1.0 install --harness codex --app https://xskills.app
+```
+
+The command opens a short-lived browser pairing page, stores the device credential in macOS Keychain, and creates a per-user LaunchAgent. Skills are installed under the selected harness root:
+
+- Codex: `~/.agents/skills`
+- Claude Code: `~/.claude/skills`
+- Cursor: `~/.cursor/skills`
+
+## Commands
+
+```bash
+xskills status
+xskills update
+xskills disconnect
+```
+
+## Security model
+
+The connector validates every file hash and the aggregate package checksum, rejects path traversal and unmanaged-directory collisions, and installs by atomic directory swap. Packaged scripts are written as text and are never executed by the connector. Device credentials are stored in macOS Keychain and can be revoked from XSkills Settings or with `xskills disconnect`.
+
+Source and issue tracking: <https://github.com/kylerzanuck-work/xskillsai>

package/dist/cli.js

@@ -0,0 +1,316 @@
+#!/usr/bin/env node
+import { randomBytes } from "node:crypto";
+import { execFileSync, spawn } from "node:child_process";
+import { chmod, copyFile, mkdir, readFile, rm, writeFile, } from "node:fs/promises";
+import { homedir, hostname, platform, arch as nodeArch } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { INSTALL_ROOTS, InstallError, installJob, } from "./installer.js";
+const VERSION = "0.1.0";
+const SERVICE = "ai.xskills.connector";
+const APP_DIR = join(homedir(), "Library", "Application Support", "XSkills");
+const CONFIG_PATH = join(APP_DIR, "config.json");
+const RUNTIME_PATH = join(APP_DIR, "connector.mjs");
+const INSTALLER_RUNTIME_PATH = join(APP_DIR, "installer.js");
+const LOG_PATH = join(homedir(), "Library", "Logs", "XSkills", "connector.log");
+const PLIST_PATH = join(homedir(), "Library", "LaunchAgents", `${SERVICE}.plist`);
+class FatalConnectorError extends Error {
+}
+function sleep(ms) {
+    return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
+}
+function option(name) {
+    const index = process.argv.indexOf(name);
+    return index >= 0 ? process.argv[index + 1] : undefined;
+}
+function requireMac() {
+    if (platform() !== "darwin")
+        throw new Error("XSkills Connector 0.1 supports macOS only.");
+    if (Number(process.versions.node.split(".")[0]) < 22)
+        throw new Error("Node.js 22 or newer is required.");
+}
+function parseHarness(value) {
+    if (value && value in INSTALL_ROOTS)
+        return value;
+    throw new Error("Choose --harness codex, claude-code, or cursor.");
+}
+function normalizeAppUrl(value) {
+    const url = new URL(value ?? "https://xskills.app");
+    if (url.protocol !== "https:" &&
+        !["localhost", "127.0.0.1"].includes(url.hostname)) {
+        throw new Error("The XSkills app URL must use HTTPS.");
+    }
+    return url.origin;
+}
+function keychainSecret(deviceId) {
+    return execFileSync("/usr/bin/security", ["find-generic-password", "-w", "-s", SERVICE, "-a", deviceId], { encoding: "utf8" }).trim();
+}
+function saveKeychainSecret(deviceId, secret) {
+    execFileSync("/usr/bin/security", ["add-generic-password", "-U", "-s", SERVICE, "-a", deviceId, "-w", secret], { stdio: "ignore" });
+}
+function removeKeychainSecret(deviceId) {
+    try {
+        execFileSync("/usr/bin/security", ["delete-generic-password", "-s", SERVICE, "-a", deviceId], { stdio: "ignore" });
+    }
+    catch {
+        /* Already removed. */
+    }
+}
+async function api(appUrl, path, init = {}) {
+    return fetch(`${appUrl}${path}`, {
+        ...init,
+        headers: { "Content-Type": "application/json", ...init.headers },
+        signal: AbortSignal.timeout(20_000),
+    });
+}
+async function authorizedApi(config, path, init = {}) {
+    const secret = keychainSecret(config.deviceId);
+    return api(config.appUrl, path, {
+        ...init,
+        headers: {
+            ...init.headers,
+            Authorization: `Bearer xsdev_${config.deviceId}.${secret}`,
+        },
+    });
+}
+async function readConfig() {
+    return JSON.parse(await readFile(CONFIG_PATH, "utf8"));
+}
+function xml(value) {
+    return value
+        .replaceAll("&", "&amp;")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;");
+}
+async function installLaunchAgent() {
+    await mkdir(dirname(PLIST_PATH), { recursive: true });
+    await mkdir(dirname(LOG_PATH), { recursive: true });
+    const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+<key>Label</key><string>${SERVICE}</string>
+<key>ProgramArguments</key><array><string>${xml(process.execPath)}</string><string>${xml(RUNTIME_PATH)}</string><string>run</string></array>
+<key>RunAtLoad</key><true/><key>KeepAlive</key><dict><key>NetworkState</key><true/></dict>
+<key>ThrottleInterval</key><integer>10</integer>
+<key>StandardOutPath</key><string>${xml(LOG_PATH)}</string><key>StandardErrorPath</key><string>${xml(LOG_PATH)}</string>
+</dict></plist>\n`;
+    await writeFile(PLIST_PATH, plist, { mode: 0o600 });
+    const domain = `gui/${process.getuid?.() ?? 0}`;
+    try {
+        execFileSync("/bin/launchctl", ["bootout", domain, PLIST_PATH], {
+            stdio: "ignore",
+        });
+    }
+    catch {
+        /* Not loaded yet. */
+    }
+    execFileSync("/bin/launchctl", ["bootstrap", domain, PLIST_PATH], {
+        stdio: "ignore",
+    });
+    execFileSync("/bin/launchctl", ["kickstart", "-k", `${domain}/${SERVICE}`], {
+        stdio: "ignore",
+    });
+}
+async function copyRuntime() {
+    await mkdir(APP_DIR, { recursive: true, mode: 0o700 });
+    const current = fileURLToPath(import.meta.url);
+    if (resolve(current) !== resolve(RUNTIME_PATH))
+        await copyFile(current, RUNTIME_PATH);
+    const installerSource = join(dirname(current), "installer.js");
+    if (resolve(installerSource) !== resolve(INSTALLER_RUNTIME_PATH))
+        await copyFile(installerSource, INSTALLER_RUNTIME_PATH);
+    await chmod(RUNTIME_PATH, 0o700);
+    await chmod(INSTALLER_RUNTIME_PATH, 0o600);
+}
+async function pair(harness, appUrl) {
+    const deviceSecret = randomBytes(32).toString("base64url");
+    const response = await api(appUrl, "/api/connector/device-codes", {
+        method: "POST",
+        body: JSON.stringify({
+            harness,
+            platform: "darwin",
+            arch: nodeArch() === "arm64" ? "arm64" : "x64",
+            deviceName: hostname(),
+            connectorVersion: VERSION,
+            deviceSecret,
+        }),
+    });
+    const started = (await response.json());
+    if (!response.ok || !started.deviceCode || !started.verificationUrl)
+        throw new Error(started.error ?? "Could not start pairing.");
+    console.log(`Pairing code: ${started.userCode}\nOpen: ${started.verificationUrl}`);
+    spawn("/usr/bin/open", [started.verificationUrl], {
+        detached: true,
+        stdio: "ignore",
+    }).unref();
+    const expiresAt = new Date(started.expiresAt ?? Date.now() + 600_000).getTime();
+    while (Date.now() < expiresAt) {
+        await sleep((started.interval ?? 2) * 1000);
+        const tokenResponse = await api(appUrl, "/api/connector/token", {
+            method: "POST",
+            body: JSON.stringify({ deviceCode: started.deviceCode }),
+        });
+        if (tokenResponse.status === 428)
+            continue;
+        const token = (await tokenResponse.json());
+        if (!tokenResponse.ok || !token.deviceId)
+            throw new Error(token.error ?? "Could not finish pairing.");
+        saveKeychainSecret(token.deviceId, deviceSecret);
+        const config = {
+            appUrl,
+            deviceId: token.deviceId,
+            deviceName: hostname(),
+            harness,
+            connectorVersion: VERSION,
+        };
+        await writeFile(CONFIG_PATH, `${JSON.stringify(config, null, 2)}\n`, {
+            mode: 0o600,
+        });
+        return config;
+    }
+    throw new Error("The pairing code expired. Run the install command again.");
+}
+async function reportFailure(config, job, error) {
+    const failure = error instanceof InstallError
+        ? error
+        : new InstallError(error instanceof Error ? error.message : "Installation failed", true);
+    try {
+        await authorizedApi(config, `/api/connector/jobs/${job.installationId}/fail`, {
+            method: "POST",
+            body: JSON.stringify({
+                leaseToken: job.leaseToken,
+                message: failure.message,
+                retryable: failure.retryable,
+            }),
+        });
+    }
+    catch {
+        /* The lease will expire and make the job claimable again. */
+    }
+}
+async function run() {
+    requireMac();
+    const config = await readConfig();
+    let idleDelay = 5000;
+    for (;;) {
+        try {
+            const response = await authorizedApi(config, "/api/connector/jobs/claim", { method: "POST", body: "{}" });
+            if (response.status === 204) {
+                await sleep(idleDelay);
+                idleDelay = Math.min(60_000, idleDelay + 5000);
+                continue;
+            }
+            if (response.status === 401)
+                throw new FatalConnectorError("Connector authorization was revoked. Pair this Mac again.");
+            if (response.status === 426) {
+                const upgrade = (await response.json().catch(() => ({})));
+                const requiredVersion = upgrade.requiredVersion ?? "latest";
+                throw new FatalConnectorError(`Connector ${VERSION} is out of date. Run: npx --yes @xskills/connector@${requiredVersion} update`);
+            }
+            if (!response.ok) {
+                await sleep(15_000);
+                continue;
+            }
+            idleDelay = 5000;
+            const job = (await response.json());
+            try {
+                const installed = await installJob(job, config);
+                await authorizedApi(config, `/api/connector/jobs/${job.installationId}/complete`, {
+                    method: "POST",
+                    body: JSON.stringify({
+                        leaseToken: job.leaseToken,
+                        status: installed.status,
+                        packageChecksum: job.package.checksum,
+                        installedAt: new Date().toISOString(),
+                        location: installed.location,
+                    }),
+                });
+            }
+            catch (error) {
+                await reportFailure(config, job, error);
+            }
+        }
+        catch (error) {
+            console.error(new Date().toISOString(), error instanceof Error ? error.message : error);
+            if (error instanceof FatalConnectorError)
+                return;
+            await sleep(30_000);
+        }
+    }
+}
+async function install() {
+    requireMac();
+    const harness = parseHarness(option("--harness"));
+    const appUrl = normalizeAppUrl(option("--app"));
+    await copyRuntime();
+    const config = await pair(harness, appUrl);
+    await installLaunchAgent();
+    console.log(`${harness} is connected on ${config.deviceName}. Approved skills will install automatically.`);
+}
+async function status() {
+    const config = await readConfig();
+    const response = await authorizedApi(config, "/api/connector/device");
+    console.log(`${config.harness} on ${config.deviceName}: ${response.status === 401 ? "revoked" : "connected"} (connector ${config.connectorVersion})`);
+}
+async function disconnect() {
+    const config = await readConfig();
+    try {
+        await authorizedApi(config, "/api/connector/device", {
+            method: "DELETE",
+            body: "{}",
+        });
+    }
+    catch {
+        /* Continue local cleanup. */
+    }
+    const domain = `gui/${process.getuid?.() ?? 0}`;
+    try {
+        execFileSync("/bin/launchctl", ["bootout", domain, PLIST_PATH], {
+            stdio: "ignore",
+        });
+    }
+    catch {
+        /* Already stopped. */
+    }
+    removeKeychainSecret(config.deviceId);
+    await rm(PLIST_PATH, { force: true });
+    await rm(CONFIG_PATH, { force: true });
+    console.log("XSkills Connector is disconnected.");
+}
+async function update() {
+    requireMac();
+    await copyRuntime();
+    const config = await readConfig();
+    const response = await authorizedApi(config, "/api/connector/device", {
+        method: "PATCH",
+        body: JSON.stringify({ connectorVersion: VERSION }),
+    });
+    if (!response.ok)
+        throw new Error("Could not register the connector update. Pair this Mac again if the problem continues.");
+    await writeFile(CONFIG_PATH, `${JSON.stringify({ ...config, connectorVersion: VERSION }, null, 2)}\n`, { mode: 0o600 });
+    await installLaunchAgent();
+    console.log(`XSkills Connector updated to ${VERSION}.`);
+}
+const command = process.argv[2];
+try {
+    if (command === "install")
+        await install();
+    else if (command === "run")
+        await run();
+    else if (command === "status")
+        await status();
+    else if (command === "disconnect")
+        await disconnect();
+    else if (command === "update")
+        await update();
+    else {
+        console.log("Usage: xskills <install|run|status|update|disconnect> [--harness codex|claude-code|cursor] [--app https://xskills.app]");
+        process.exitCode = command ? 1 : 0;
+    }
+}
+catch (error) {
+    console.error(error instanceof Error ? error.message : error);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,KAAK,EACL,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,aAAa,EACb,YAAY,EACZ,UAAU,GAGX,MAAM,gBAAgB,CAAC;AAExB,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;AAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACpD,MAAM,sBAAsB,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAChF,MAAM,UAAU,GAAG,IAAI,CACrB,OAAO,EAAE,EACT,SAAS,EACT,cAAc,EACd,GAAG,OAAO,QAAQ,CACnB,CAAC;AACF,MAAM,mBAAoB,SAAQ,KAAK;CAAG;AAS1C,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,QAAQ,EAAE,KAAK,QAAQ;QACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,IAAI,KAAK,IAAI,aAAa;QAAE,OAAO,KAAgB,CAAC;IAC7D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;IACpD,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,YAAY,CACjB,mBAAmB,EACnB,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAC9D,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,MAAc;IAC1D,YAAY,CACV,mBAAmB,EACnB,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAC3E,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,YAAY,CACV,mBAAmB,EACnB,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAoB,EAAE;IACrE,OAAO,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE;QAC/B,GAAG,IAAI;QACP,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;QAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,IAAY,EACZ,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;QAC9B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,aAAa,EAAE,gBAAgB,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE;SAC3D;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAW,CAAC;AACnE,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG;;;0BAGU,OAAO;4CACW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,GAAG,CAAC,YAAY,CAAC;;;oCAGlE,GAAG,CAAC,QAAQ,CAAC,gDAAgD,GAAG,CAAC,QAAQ,CAAC;kBAC5F,CAAC;IACjB,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;YAC9D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,YAAY,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;QAChE,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,EAAE;QAC1E,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;QAC5C,MAAM,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,sBAAsB,CAAC;QAC9D,MAAM,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAC1D,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAgB,EAAE,MAAc;IAClD,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,6BAA6B,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO;YACP,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;YAC9C,UAAU,EAAE,QAAQ,EAAE;YACtB,gBAAgB,EAAE,OAAO;YACzB,YAAY;SACb,CAAC;KACH,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOrC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,eAAe;QACjE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,eAAe,EAAE,CACtE,CAAC;IACF,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;QAChD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAC1C,CAAC,OAAO,EAAE,CAAC;IACZ,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG;YAAE,SAAS;QAC3C,MAAM,KAAK,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAGxC,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YACtC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,2BAA2B,CAAC,CAAC;QAC9D,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,MAAM,GAAW;YACrB,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,QAAQ,EAAE;YACtB,OAAO;YACP,gBAAgB,EAAE,OAAO;SAC1B,CAAC;QACF,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACnE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,GAAQ,EAAE,KAAc;IACnE,MAAM,OAAO,GACX,KAAK,YAAY,YAAY;QAC3B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,YAAY,CACd,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAC9D,IAAI,CACL,CAAC;IACR,IAAI,CAAC;QACH,MAAM,aAAa,CACjB,MAAM,EACN,uBAAuB,GAAG,CAAC,cAAc,OAAO,EAChD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG;IAChB,UAAU,EAAE,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,MAAM,EACN,2BAA2B,EAC3B,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAC/B,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;gBACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACzB,MAAM,IAAI,mBAAmB,CAC3B,2DAA2D,CAC5D,CAAC;YACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEvD,CAAC;gBACF,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC;gBAC5D,MAAM,IAAI,mBAAmB,CAC3B,aAAa,OAAO,sDAAsD,eAAe,SAAS,CACnG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,aAAa,CACjB,MAAM,EACN,uBAAuB,GAAG,CAAC,cAAc,WAAW,EACpD;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;wBACxB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;wBACrC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACrC,QAAQ,EAAE,SAAS,CAAC,QAAQ;qBAC7B,CAAC;iBACH,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;YACF,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO;YACjD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,UAAU,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,kBAAkB,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,CACT,GAAG,OAAO,oBAAoB,MAAM,CAAC,UAAU,+CAA+C,CAC/F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,eAAe,MAAM,CAAC,gBAAgB,GAAG,CACzI,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,uBAAuB,EAAE;YACnD,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;YAC9D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,UAAU,EAAE,CAAC;IACb,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,uBAAuB,EAAE;QACpE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,MAAM,SAAS,CACb,WAAW,EACX,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,MAAM,kBAAkB,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChC,IAAI,CAAC;IACH,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,OAAO,EAAE,CAAC;SACtC,IAAI,OAAO,KAAK,KAAK;QAAE,MAAM,GAAG,EAAE,CAAC;SACnC,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,MAAM,EAAE,CAAC;SACzC,IAAI,OAAO,KAAK,YAAY;QAAE,MAAM,UAAU,EAAE,CAAC;SACjD,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,MAAM,EAAE,CAAC;SACzC,CAAC;QACJ,OAAO,CAAC,GAAG,CACT,wHAAwH,CACzH,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/installer.js

@@ -0,0 +1,130 @@
+import { createHash, randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { access, mkdir, readFile, realpath, rename, rm, writeFile, } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve, sep } from "node:path";
+export const INSTALL_ROOTS = {
+    "claude-code": join(homedir(), ".claude", "skills"),
+    codex: join(homedir(), ".agents", "skills"),
+    cursor: join(homedir(), ".cursor", "skills"),
+};
+const ALLOWED_FILE = /^(?:SKILL\.md|manifest\.json|references\/[a-z0-9._-]+\.md|agents\/openai\.yaml|eval_queries\.json|scripts\/[a-z0-9._/-]+)$/;
+export class InstallError extends Error {
+    retryable;
+    constructor(message, retryable = false) {
+        super(message);
+        this.retryable = retryable;
+    }
+}
+export function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+export function packageChecksum(files) {
+    const canonical = [...files]
+        .sort((a, b) => a.path.localeCompare(b.path))
+        .map((file) => [file.path, file.sha256, Buffer.byteLength(file.content)]);
+    return sha256(JSON.stringify(canonical));
+}
+export function validateJob(job, config) {
+    if (!job ||
+        job.harness !== config.harness ||
+        !job.package ||
+        !Array.isArray(job.package.files))
+        throw new InstallError("Package harness does not match this connector.");
+    if (!/^[a-z0-9][a-z0-9-]{0,119}$/.test(job.package.slug))
+        throw new InstallError("Package slug is unsafe.");
+    let total = 0;
+    const seen = new Set();
+    for (const file of job.package.files) {
+        if (!ALLOWED_FILE.test(file.path) ||
+            file.path.includes("..") ||
+            file.path.startsWith("/") ||
+            file.path.includes("\\") ||
+            seen.has(file.path))
+            throw new InstallError(`Unsafe package path: ${file.path}`);
+        seen.add(file.path);
+        const size = Buffer.byteLength(file.content);
+        total += size;
+        if (size > 256 * 1024 || sha256(file.content) !== file.sha256)
+            throw new InstallError(`File checksum failed: ${file.path}`);
+    }
+    if (total > 1024 * 1024)
+        throw new InstallError("Package exceeds 1 MiB.");
+    if (packageChecksum(job.package.files) !== job.package.checksum)
+        throw new InstallError("Package checksum failed.");
+}
+async function directoryMatches(target, files) {
+    try {
+        for (const file of files)
+            if (sha256(await readFile(join(target, file.path))) !== file.sha256)
+                return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function installJob(job, config) {
+    validateJob(job, config);
+    const root = config.installRoot ?? INSTALL_ROOTS[config.harness];
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    const canonicalRoot = await realpath(root);
+    const target = resolve(canonicalRoot, job.package.slug);
+    if (!target.startsWith(`${canonicalRoot}${sep}`))
+        throw new InstallError("Install target escaped the harness root.");
+    let existing = false;
+    try {
+        await access(target, constants.F_OK);
+        existing = true;
+    }
+    catch {
+        /* New install. */
+    }
+    if (existing) {
+        if (await directoryMatches(target, job.package.files))
+            return { status: "already_installed", location: target };
+        try {
+            const manifest = JSON.parse(await readFile(join(target, "manifest.json"), "utf8"));
+            if (manifest.skill_id !== job.package.skillId)
+                throw new InstallError(`A different skill already exists at ${target}.`);
+        }
+        catch (error) {
+            if (error instanceof InstallError)
+                throw error;
+            throw new InstallError(`XSkills will not overwrite an unmanaged directory at ${target}.`);
+        }
+    }
+    const temporary = join(canonicalRoot, `.${job.package.slug}.xskills-${randomUUID()}.tmp`);
+    const backup = join(canonicalRoot, `.${job.package.slug}.xskills-${randomUUID()}.bak`);
+    await mkdir(temporary, { recursive: false, mode: 0o700 });
+    try {
+        for (const file of job.package.files) {
+            const destination = join(temporary, file.path);
+            await mkdir(dirname(destination), { recursive: true, mode: 0o700 });
+            await writeFile(destination, file.content, { mode: 0o600, flag: "wx" });
+        }
+        if (existing)
+            await rename(target, backup);
+        try {
+            await rename(temporary, target);
+        }
+        catch (error) {
+            if (existing)
+                await rename(backup, target);
+            throw error;
+        }
+        if (existing)
+            await rm(backup, { recursive: true, force: true });
+        return { status: "installed", location: target };
+    }
+    catch (error) {
+        await rm(temporary, { recursive: true, force: true });
+        if (error instanceof InstallError)
+            throw error;
+        const code = error instanceof Error && "code" in error
+            ? String(error.code)
+            : "";
+        throw new InstallError(error instanceof Error ? error.message : "Installation failed", !["EACCES", "EPERM", "EROFS", "ENOSPC"].includes(code));
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IACnD,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IAC3C,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;CACpC,CAAC;AAEX,MAAM,YAAY,GAChB,4HAA4H,CAAC;AAmB/H,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG1B;IAFX,YACE,OAAe,EACN,YAAY,KAAK;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,cAAS,GAAT,SAAS,CAAQ;IAG5B,CAAC;CACF;AAED,MAAM,UAAU,MAAM,CAAC,KAAsB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC;SACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ,EAAE,MAAqB;IACzD,IACE,CAAC,GAAG;QACJ,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAC9B,CAAC,GAAG,CAAC,OAAO;QACZ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAEjC,MAAM,IAAI,YAAY,CAAC,gDAAgD,CAAC,CAAC;IAC3E,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAEnB,MAAM,IAAI,YAAY,CAAC,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM;YAC3D,MAAM,IAAI,YAAY,CAAC,yBAAyB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ;QAC7D,MAAM,IAAI,YAAY,CAAC,0BAA0B,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAgB;IAC9D,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK;YACtB,IAAI,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;gBACjE,OAAO,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAQ,EAAE,MAAqB;IAC9D,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,GAAG,EAAE,CAAC;QAC9C,MAAM,IAAI,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACrE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,mBAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAC7B,CAAC;YAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO;gBAC3C,MAAM,IAAI,YAAY,CACpB,uCAAuC,MAAM,GAAG,CACjD,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY;gBAAE,MAAM,KAAK,CAAC;YAC/C,MAAM,IAAI,YAAY,CACpB,wDAAwD,MAAM,GAAG,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CACpB,aAAa,EACb,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,YAAY,UAAU,EAAE,MAAM,CACnD,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CACjB,aAAa,EACb,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,YAAY,UAAU,EAAE,MAAM,CACnD,CAAC;IACF,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,QAAQ;YAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,GACR,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;YACvC,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,CAAC;YAC/C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,YAAY,CACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAC9D,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@xskills/connector",
+  "version": "0.1.0",
+  "description": "Install checksum-approved XSkills packages into local agent harnesses.",
+  "license": "MIT",
+  "keywords": [
+    "agent-skills",
+    "codex",
+    "claude-code",
+    "cursor"
+  ],
+  "homepage": "https://github.com/kylerzanuck-work/xskillsai#readme",
+  "bugs": {
+    "url": "https://github.com/kylerzanuck-work/xskillsai/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kylerzanuck-work/xskillsai.git",
+    "directory": "packages/connector"
+  },
+  "type": "module",
+  "bin": {
+    "xskills": "dist/cli.js"
+  },
+  "files": [
+    "dist/cli.js",
+    "dist/cli.js.map",
+    "dist/installer.js",
+    "dist/installer.js.map"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "typescript": "^5",
+    "vitest": "^4.1.10"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run src/installer.test.ts"
+  }
+}