@yadsh/dsh-qa-surface 0.5.0 → 0.6.0

package/lib/personal-skills/host.js

@@ -0,0 +1,80 @@
+import { WorkspaceId } from "@deepseek-ai/dsh-workspace";
+import { createQaUserSkillProvider } from "./provider.js";
+import { QaPersonalSkills } from "./service.js";
+import { QaSkillWatcher } from "./watcher.js";
+/**
+ * Host owner of the personal-skills feature: the storage service, the DSH
+ * provider registration and the manual-edit watcher.
+ *
+ * The three are one unit because they share a single liveness contract — every
+ * write through the service, and every filesystem event the watcher observes,
+ * invalidates the same provider registration, so the catalog the model reads
+ * and the catalog the editor writes cannot drift apart. The provider is
+ * registered through `ctx.inject`, so a deployment without the skills service
+ * keeps the editor working and simply publishes nothing to DSH.
+ */
+export class QaPersonalSkillsHost {
+    service;
+    watcher;
+    options;
+    /**
+     * The registry's own invalidation callback, guarded by registration
+     * identity on its side: a reference kept past disposal is a no-op.
+     */
+    invalidateCatalog;
+    disposeRegistration;
+    constructor(options) {
+        this.options = options;
+        const { ctx, logger } = options;
+        this.watcher = new QaSkillWatcher({
+            onChange: () => this.invalidateCatalog?.(),
+            onError: (message) => logger.warn("skill.watch-failed", { message }),
+        });
+        this.service = new QaPersonalSkills(ctx, {
+            getConfig: options.getConfig,
+            logger,
+            workspacePath: () => this.registeredWorkspacePath(),
+            invalidate: () => this.invalidateCatalog?.(),
+            onRootDiscovered: (root) => {
+                if (!options.getConfig().accounts.skills.watch)
+                    return;
+                this.watcher.follow(root);
+            },
+        });
+        ctx.inject(["skills"], (skillsCtx) => {
+            const registration = skillsCtx.skills.registerProvider((control) => {
+                this.invalidateCatalog = control.invalidate;
+                return createQaUserSkillProvider(control, this.service);
+            });
+            this.disposeRegistration = registration;
+            skillsCtx.effect(() => () => {
+                registration();
+                this.disposeRegistration = undefined;
+                this.invalidateCatalog = undefined;
+            }, "dsh-qa-surface.personal-skills-provider");
+        });
+    }
+    /** Whether the DSH registry currently owns this deployment's provider. */
+    get registered() {
+        return this.disposeRegistration !== undefined;
+    }
+    dispose() {
+        this.watcher.dispose();
+        this.disposeRegistration?.();
+        this.disposeRegistration = undefined;
+        this.invalidateCatalog = undefined;
+    }
+    /**
+     * The registered workspace path the per-account directories live under.
+     * Resolved per call: a deployment may register the workspace after this
+     * plugin loads.
+     */
+    registeredWorkspacePath() {
+        const workspaceId = this.options.getConfig().session.workspaceId;
+        if (workspaceId === null)
+            return undefined;
+        return this.options.ctx.workspaceRegistry.get(WorkspaceId(workspaceId))
+            ?.path;
+    }
+}
+//# sourceMappingURL=host.js.map

package/lib/personal-skills/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/personal-skills/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAIzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAQ9C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IACtB,OAAO,CAAmB;IAClB,OAAO,CAAiB;IACxB,OAAO,CAA8B;IACtD;;;OAGG;IACK,iBAAiB,CAA2B;IAC5C,mBAAmB,CAA2B;IAEtD,YAAY,OAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC;YAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE;YAC1C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACnD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE;YAC5C,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK;oBAAE,OAAO;gBACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE;YACnC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE;gBACjE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;gBAC5C,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,mBAAmB,GAAG,YAAY,CAAC;YACxC,SAAS,CAAC,MAAM,CACd,GAAG,EAAE,CAAC,GAAG,EAAE;gBACT,YAAY,EAAE,CAAC;gBACf,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;gBACrC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACrC,CAAC,EACD,yCAAyC,CAC1C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACrC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,uBAAuB;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QACjE,IAAI,WAAW,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACrE,EAAE,IAAI,CAAC;IACX,CAAC;CACF"}

package/lib/personal-skills/index.js

@@ -0,0 +1,10 @@
+export { QaPersonalSkillError, } from "./errors.js";
+export { QA_SKILL_TRASH_SUFFIX, resolveSkillRoots, skillDirectory, skillFilePath, } from "./paths.js";
+export { normalizeAllowedTools, parseSkillFile, serializeSkillFile, skillFileBody, skillNameProblem, toJsonValue, } from "./skill-file.js";
+export { skillFileBytes, skillRelativeRootProblem, skillRelativeRootSegments, validateSkillDraft, QA_SKILL_DEFAULT_RELATIVE_ROOT, QA_SKILL_DESCRIPTION_MAX, QA_SKILL_ENABLED_BY_DEFAULT, QA_SKILL_FILE_MAX_BYTES, QA_SKILL_MAX_BYTES_MAX, QA_SKILL_MAX_BYTES_MIN, QA_SKILL_MAX_TOOLS, QA_SKILL_NAME_MAX, QA_SKILL_NAME_PATTERN, QA_SKILL_WHEN_TO_USE_MAX, } from "./skill-format.js";
+export { QA_USER_SKILLS_PROVIDER, QA_USER_SKILLS_RANK, QA_USER_SKILLS_SOURCE, createQaUserSkillProvider, } from "./provider.js";
+export { QaPersonalSkills, } from "./service.js";
+export { createQaPersonalSkillRemotes, } from "./remotes.js";
+export { QaPersonalSkillsHost } from "./host.js";
+export { QaSkillWatcher } from "./watcher.js";
+//# sourceMappingURL=index.js.map

package/lib/personal-skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/personal-skills/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAErB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,aAAa,GAEd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,WAAW,GAIZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,GAEzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,GAIjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,4BAA4B,GAE7B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/lib/personal-skills/paths.js

@@ -0,0 +1,127 @@
+import { lstatSync, mkdirSync, readdirSync, realpathSync, } from "node:fs";
+import path from "node:path";
+import { canonicalCandidate, pathIsInside } from "../user-workspace.js";
+import { QaPersonalSkillError } from "./errors.js";
+import { skillNameProblem, skillRelativeRootSegments } from "./skill-format.js";
+/**
+ * Filesystem boundary of the personal-skills feature.
+ *
+ * Every path is derived, never accepted: the browser names a skill, the Host
+ * combines the authenticated account's own workspace directory with the
+ * configured relative root, and each step re-checks that the canonical result
+ * still sits below that account's root. Symlinked directories are refused
+ * rather than followed, so a link planted inside the personal root cannot
+ * move reads or writes to another account's storage.
+ *
+ * `.dsh/skills-trash` is the removal destination: the last segment of the
+ * configured relative root with a `-trash` suffix, so a deployment that moved
+ * its skill directory keeps the trash beside it.
+ */
+export const QA_SKILL_TRASH_SUFFIX = "-trash";
+function samePath(left, right) {
+    return process.platform === "win32"
+        ? left.toLowerCase() === right.toLowerCase()
+        : left === right;
+}
+/**
+ * Canonicalize a candidate below an already canonical parent. A path that
+ * resolves elsewhere — a symlinked directory, a junction, a replaced ancestor
+ * — is refused. `direct` additionally requires the result to be the parent's
+ * own child, which is what pins each skill to one directory level.
+ */
+function canonicalInside(parent, relative, reason, message, direct) {
+    let canonical;
+    try {
+        canonical = canonicalCandidate(path.join(parent, relative));
+    }
+    catch (error) {
+        throw new QaPersonalSkillError("storage-unavailable", error instanceof Error ? error.message : String(error));
+    }
+    if (!pathIsInside(canonical, parent) ||
+        (direct && !samePath(path.dirname(canonical), parent))) {
+        throw new QaPersonalSkillError(reason, message);
+    }
+    return canonical;
+}
+/** Derive and verify every directory the feature touches for one account. */
+export function resolveSkillRoots(personalRoot, relativeRoot) {
+    const segments = [...skillRelativeRootSegments(relativeRoot)];
+    const last = segments.pop();
+    if (last === undefined) {
+        throw new QaPersonalSkillError("storage-unavailable", "the configured personal-skills root names no directory");
+    }
+    const canonicalPersonal = canonicalCandidate(personalRoot);
+    const skills = canonicalInside(canonicalPersonal, path.join(...segments, last), "storage-unavailable", "the configured personal-skills root escapes this account's directory", false);
+    const trash = canonicalInside(canonicalPersonal, path.join(...segments, `${last}${QA_SKILL_TRASH_SUFFIX}`), "storage-unavailable", "the personal-skills trash directory escapes this account's directory", false);
+    return { personalRoot: canonicalPersonal, skills, trash };
+}
+/** The directory of one skill, validated against the account's skills root. */
+export function skillDirectory(roots, name) {
+    const problem = skillNameProblem(name);
+    if (problem !== null) {
+        throw new QaPersonalSkillError("skill-name-invalid", `skill name is not usable: ${name}`);
+    }
+    return canonicalInside(roots.skills, name, "skill-name-invalid", "the skill directory escapes this account's skills root", true);
+}
+export function skillFilePath(roots, name) {
+    return path.join(skillDirectory(roots, name), "SKILL.md");
+}
+/** Whether the directory exists at all, without following a symlink. */
+export function directoryExists(input) {
+    try {
+        const stat = lstatSync(input);
+        return stat.isDirectory() && !stat.isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+/** Refuse a symlinked or non-directory entry where a real directory belongs. */
+function assertPlainDirectory(input) {
+    const stat = lstatSync(input);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+        throw new QaPersonalSkillError("storage-unavailable", `personal skill storage must be a real directory: ${input}`);
+    }
+}
+/**
+ * Materialize the skills root inside one account's personal root. Creation is
+ * followed by a re-canonicalization, so a directory that appeared as a link
+ * between the check and the `mkdir` is still refused.
+ */
+export function ensureSkillRoots(roots) {
+    if (directoryExists(roots.skills)) {
+        assertPlainDirectory(roots.skills);
+        return;
+    }
+    try {
+        const parent = path.dirname(roots.skills);
+        if (directoryExists(parent))
+            assertPlainDirectory(parent);
+        mkdirSync(roots.skills, { recursive: true, mode: 0o700 });
+    }
+    catch (error) {
+        throw new QaPersonalSkillError("storage-unavailable", error instanceof Error ? error.message : String(error));
+    }
+    assertPlainDirectory(roots.skills);
+    const verified = realpathSync.native(roots.skills);
+    if (!pathIsInside(verified, roots.personalRoot)) {
+        throw new QaPersonalSkillError("storage-unavailable", "personal skill storage escapes this account's directory");
+    }
+}
+/** The skill subdirectories present for one account, sorted by name. */
+export function listSkillDirectories(roots) {
+    let entries;
+    try {
+        entries = readdirSync(roots.skills, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw new QaPersonalSkillError("storage-unavailable", error instanceof Error ? error.message : String(error));
+    }
+    return entries
+        .filter((entry) => entry.isDirectory() && !entry.name.startsWith("."))
+        .map((entry) => entry.name)
+        .sort();
+}
+//# sourceMappingURL=paths.js.map

package/lib/personal-skills/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/personal-skills/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,GAEb,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEhF;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAW9C,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,MAAc,EACd,QAAgB,EAChB,MAAoD,EACpD,OAAe,EACf,MAAe;IAEf,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,IACE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,CAAC,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,eAAe,CAC5B,iBAAiB,EACjB,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,EAC5B,qBAAqB,EACrB,sEAAsE,EACtE,KAAK,CACN,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAC3B,iBAAiB,EACjB,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,qBAAqB,EAAE,CAAC,EACzD,qBAAqB,EACrB,sEAAsE,EACtE,KAAK,CACN,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,KAAmB,EAAE,IAAY;IAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,6BAA6B,IAAI,EAAE,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CACpB,KAAK,CAAC,MAAM,EACZ,IAAI,EACJ,oBAAoB,EACpB,wDAAwD,EACxD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,IAAY;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,oDAAoD,KAAK,EAAE,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,eAAe,CAAC,MAAM,CAAC;YAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1D,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/lib/personal-skills/provider.js

@@ -0,0 +1,109 @@
+/**
+ * Discovery provider for one QA account's own skills.
+ *
+ * It exists because the shipped filesystem provider resolves the project root
+ * through the nearest `.git`, which for a personal QA directory inside a larger
+ * checkout would climb above the account and mix users together. This provider
+ * reads exactly one place — `<cwd>/.dsh/skills` where the cwd is a provisioned
+ * `.qa-users/<uuid>` directory — and replaces the filesystem layer inside the
+ * QA scope rather than adding a second one beside it.
+ */
+export const QA_USER_SKILLS_PROVIDER = "qa-user-skills";
+/** Prompt-visible provenance label for a skill stored in an account directory. */
+export const QA_USER_SKILLS_SOURCE = "qa-user";
+/**
+ * Rank below the project layer (100) and the bundled layer (600): inside the
+ * QA scope a personal skill wins a same-named duplicate from any other layer.
+ */
+export const QA_USER_SKILLS_RANK = 50;
+function locatorOf(value) {
+    const directory = value?.directory;
+    return typeof directory === "string" && directory !== ""
+        ? directory
+        : undefined;
+}
+/**
+ * The cwd a lookup is about. The registry's declared provider contract has
+ * only `cwd`, but it hands the caller's borrowed view options down as they
+ * are, so a scoped read also carries the calling agent — useful because an
+ * agent-scoped lookup does not always repeat the cwd.
+ */
+function lookupCwd(options) {
+    if (typeof options.cwd === "string" && options.cwd !== "")
+        return options.cwd;
+    const scope = options.scope;
+    const cwd = scope?.session?.header?.cwd;
+    return typeof cwd === "string" && cwd !== "" ? cwd : undefined;
+}
+function candidateOf(stored) {
+    const contents = stored.contents;
+    if (contents === undefined)
+        return undefined;
+    return {
+        name: contents.name,
+        description: contents.description,
+        ...(contents.whenToUse === null ? {} : { whenToUse: contents.whenToUse }),
+        invocation: {
+            modelInvocable: contents.modelInvocable,
+            userInvocable: contents.userInvocable,
+        },
+        source: QA_USER_SKILLS_SOURCE,
+        provider: QA_USER_SKILLS_PROVIDER,
+        resourceBase: { kind: "directory", path: stored.directory },
+        rank: QA_USER_SKILLS_RANK,
+        locator: { directory: stored.directoryName },
+        path: stored.filePath,
+        // The registry drops metadata from its summaries, so `allowed-tools` is
+        // readable here and by anyone who inspects a candidate — nothing in the
+        // harness enforces it, and nothing here claims otherwise.
+        metadata: { allowedTools: [...contents.allowedTools] },
+    };
+}
+function definitionOf(stored, candidate) {
+    const contents = stored.contents;
+    if (contents === undefined)
+        return undefined;
+    return { ...candidate, content: contents.body };
+}
+/**
+ * Build the provider for one registration. The factory runs synchronously
+ * during `registerProvider` and all filesystem work stays inside
+ * `list`/`get`, which the registry calls per read.
+ *
+ * Note what the registry caches and what it does not: a loaded definition is
+ * never cached, so an edited body is visible to the next `get` immediately,
+ * while the candidate list behind a catalog summary is cached until something
+ * invalidates it. A save goes through the service, which invalidates; a file
+ * edited by hand is what the watcher exists for.
+ */
+export function createQaUserSkillProvider(control, skills) {
+    return {
+        name: QA_USER_SKILLS_PROVIDER,
+        list: async (options) => {
+            if (control.signal.aborted)
+                return [];
+            const cwd = lookupCwd(options);
+            if (cwd === undefined)
+                return [];
+            return skills
+                .discover(cwd)
+                .map(candidateOf)
+                .filter((candidate) => candidate !== undefined);
+        },
+        get: async (candidate, options) => {
+            if (control.signal.aborted)
+                return undefined;
+            const cwd = lookupCwd(options);
+            if (cwd === undefined)
+                return undefined;
+            const directory = locatorOf(candidate.locator);
+            if (directory === undefined)
+                return undefined;
+            const stored = skills.read(cwd, directory);
+            if (stored === undefined)
+                return undefined;
+            return definitionOf(stored, candidate);
+        },
+    };
+}
+//# sourceMappingURL=provider.js.map

package/lib/personal-skills/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/personal-skills/provider.ts"],"names":[],"mappings":"AASA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACxD,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAC/C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAQtC,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,SAAS,GAAI,KAAoC,EAAE,SAAS,CAAC;IACnE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;QACtD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,OAA2B;IAC5C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC;IAC9E,MAAM,KAAK,GAAI,OAAwC,CAAC,KAAK,CAAC;IAC9D,MAAM,GAAG,GACP,KAGD,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC;IACxB,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzE,UAAU,EAAE;YACV,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC;QACD,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,uBAAuB;QACjC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE;QAC3D,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,EAA2B;QACrE,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,wEAAwE;QACxE,wEAAwE;QACxE,0DAA0D;QAC1D,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAqB,EACrB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA6B,EAC7B,MAAwB;IAExB,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACjC,OAAO,MAAM;iBACV,QAAQ,CAAC,GAAG,CAAC;iBACb,GAAG,CAAC,WAAW,CAAC;iBAChB,MAAM,CACL,CAAC,SAAS,EAA+B,EAAE,CAAC,SAAS,KAAK,SAAS,CACpE,CAAC;QACN,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAChC,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/personal-skills/remotes.js

@@ -0,0 +1,40 @@
+import { QaPersonalSkillError } from "./errors.js";
+export function createQaPersonalSkillRemotes(options) {
+    const { getConfig, logger, skills, accounts } = options;
+    /** The authenticated account behind the wire token; never a named user. */
+    const contextOf = (token) => {
+        const store = accounts.resolve(getConfig());
+        if (store === undefined) {
+            throw new Error("QA accounts are not enabled on this deployment.");
+        }
+        const user = accounts.run(() => store.requireUser(token));
+        return { userId: user.id };
+    };
+    const run = (operation, skill) => {
+        try {
+            return operation();
+        }
+        catch (error) {
+            if (error instanceof QaPersonalSkillError) {
+                logger.warn("skill.rejected", {
+                    reason: error.reason,
+                    ...(skill === undefined ? {} : { skill }),
+                });
+                throw new Error(`QA personal skills refused the request (reason: ${error.reason})`, { cause: error });
+            }
+            throw error;
+        }
+    };
+    return {
+        list: (token) => run(() => ({ skills: skills.list(contextOf(token)) })),
+        get: (token, name) => run(() => skills.get(contextOf(token), name), name),
+        create: (token, input) => run(() => skills.create(contextOf(token), input), input.name),
+        update: (token, name, input) => run(() => skills.update(contextOf(token), name, input), name),
+        remove: (token, name, expectedRevision) => run(() => skills.remove(contextOf(token), name, expectedRevision), name),
+        tools: (token) => run(() => ({
+            tools: skills.tools(contextOf(token)),
+        })),
+        validate: (token, name, input) => run(() => skills.validate(contextOf(token), name, input), input.name),
+    };
+}
+//# sourceMappingURL=remotes.js.map

package/lib/personal-skills/remotes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remotes.js","sourceRoot":"","sources":["../../src/personal-skills/remotes.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAwCnD,MAAM,UAAU,4BAA4B,CAAC,OAK5C;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAExD,2EAA2E;IAC3E,MAAM,SAAS,GAAG,CAAC,KAAa,EAA0B,EAAE;QAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAI,SAAkB,EAAE,KAAc,EAAK,EAAE;QACvD,IAAI,CAAC;YACH,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CACb,mDAAmD,KAAK,CAAC,MAAM,GAAG,EAClE,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QACzE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACvB,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7B,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;QAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CACxC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC;QAC1E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SACtC,CAAC,CAAC;QACL,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;KACxE,CAAC;AACJ,CAAC"}