@zibby/skills 0.1.95 → 0.2.0

package/dist/code-scan.d.ts

@@ -1,3 +1,47 @@
+/**
+ * code-scan.js — AGENT-DRIVEN, stack-smart deterministic code scanner (tier ①:
+ * fully local — the code never leaves the box; no API, no OAuth, no browser).
+ *
+ * WHAT IT IS
+ * ──────────
+ * A hand-written single-tool skill (same shape as chartRender.js / kvMemory.js):
+ * `serverName`, `allowedTools`, `tools[]`, `handleToolCall`, and a `resolve()`
+ * that spawns the GENERIC bin/mcp-skill.mjs. The ONE tool — `scan_code` — is
+ * called by the AGENT after it has a repo on disk (a clone). It AUTO-DETECTS the
+ * stack and runs the matching deterministic linter(s), returning structured
+ * findings the agent triages.
+ *
+ * WHY A SKILL, NOT A FLOOR PROBE
+ * ──────────────────────────────
+ * The code-review agent is GENERAL-PURPOSE (Go, Python, Rust, Java, JS/TS, …).
+ * A language-specific linter therefore CANNOT be an always-run deterministic
+ * floor step — that's wrong for a Go/Python repo and doesn't scale. Instead the
+ * AGENT decides: it looks at the repo, calls scan_code, and the tool picks the
+ * right scanner(s) by stack detection. This is exactly what a skill is for.
+ *
+ * NO HARDCODING — the SCANNERS registry is the single extension point
+ * ──────────────────────────────────────────────────────────────────
+ * Every scanner is ONE entry in the SCANNERS array: { id, detect, langs, bin,
+ * args, parse }. Adding a tool (tsc, semgrep, eslint, clippy…) = one more entry,
+ * no changes to scan_code itself. scan_code runs EVERY scanner whose detect(dir)
+ * is true, scoped to files matching its `langs`, and merges the results.
+ *
+ * TWO scanners are WIRED + VERIFIED TODAY, both self-vendored (no image bake, no
+ * upstream-npm binary trust):
+ *   - oxlint (JS/TS) via @zibby/bin-oxlint — a single static binary; see
+ *     resolveOxlintBin.
+ *   - semgrep (Java, Python, Go, Ruby, PHP) via @zibby/bin-semgrep — the OSS
+ *     Semgrep engine `semgrep-core` (LGPL-2.1), spawned DIRECTLY (no Python, no
+ *     `semgrep` CLI, no network, no telemetry, no registry) with a VENDORED curated
+ *     ruleset + a generated local targets file; see resolveSemgrepBin. It scans ALL
+ *     its languages in ONE invocation via a `-targets` file. JS/TS is intentionally
+ *     left to oxlint (semgrep EXCLUDES it) to avoid double-scanning.
+ * ruff (Python) + staticcheck (Go) remain SCAFFOLD entries (registry + parser
+ * present, clearly marked TODO) — semgrep now covers Python/Go for BREADTH; ruff/
+ * staticcheck can still be wired later for DEPTH. Best-effort throughout: a missing
+ * binary (spawn ENOENT), an unreadable file, or a parser hiccup NEVER throws — the
+ * scanner is skipped with a note and the others still run.
+ */
 /**
  * Build the semgrep-core `-targets` document for a set of RELATIVE file paths. This
  * is the internal ATD wire format semgrep-core expects (verified against the pinned
@@ -5,14 +49,7 @@
  * analyzer, products }], … ]]. One entry per file we can map to a language; files
  * of other languages are dropped. EXPORTED for unit-testing the shape.
  */
-export function buildSemgrepTargets(relFiles: any): (string | (string | {
-    path: {
-        fpath: string;
-        ppath: string;
-    };
-    analyzer: any;
-    products: string[];
-})[][])[];
+export declare function buildSemgrepTargets(relFiles: any): (string | any[])[];
 /**
  * Parse `semgrep-core … -json` output into the SAME finding shape as parseOxlint
  * ({ file, line, severity, rule, message }). The engine prints progress DOTS
@@ -21,7 +58,7 @@ export function buildSemgrepTargets(relFiles: any): (string | (string | {
  * end, extra:{ message, severity? } } ], errors, paths }. Best-effort: empty /
  * unparseable → []. EXPORTED for direct unit-testing of the shape assumption.
  */
-export function parseSemgrep(stdout: any): any;
+export declare function parseSemgrep(stdout: any): any;
 /**
  * Parse `oxlint --format json` output. oxlint emits ONE JSON object:
  *   { diagnostics: [ { message, code:"eslint(no-cond-assign)", severity:"warning"|"error",
@@ -30,7 +67,7 @@ export function parseSemgrep(stdout: any): any;
  * The line comes from the first label's span. VERIFIED against oxlint 1.73.0.
  * EXPORTED for direct unit-testing of the shape assumption.
  */
-export function parseOxlint(stdout: any): any;
+export declare function parseOxlint(stdout: any): any;
 /**
  * THE EXTENSION POINT. Each scanner is one self-contained entry:
  *   id      stable scanner id (labels its findings block)
@@ -41,55 +78,12 @@ export function parseOxlint(stdout: any): any;
  *   parse   (stdout, stderr, code) => [{ file, line, severity, rule, message }]
  * Adding a tool = ONE more entry here. NOTHING scanner-specific lives elsewhere.
  */
-export const SCANNERS: {
+export declare const SCANNERS: {
     id: string;
-    detect: (dir: any) => any;
+    detect: (dir: any) => boolean;
     langs: string[];
-    bin: () => any;
-    args: (files: any, ctx?: {}) => any[];
+    bin: () => string;
+    args: (files: any, ctx?: any) => any[];
     parse: typeof parseOxlint;
 }[];
-export namespace codeScanSkill {
-    let id: string;
-    let serverName: string;
-    let meta: any;
-    let allowedTools: string[];
-    let description: string;
-    let promptFragment: string;
-    function resolve(): {
-        command: any;
-        args: any[];
-        env: {};
-        description: string;
-        type?: undefined;
-        alwaysLoad?: undefined;
-    } | {
-        type: string;
-        command: string;
-        args: any[];
-        env: {};
-        description: string;
-        alwaysLoad: boolean;
-    };
-    function handleToolCall(name: any, args: any): Promise<string>;
-    let tools: {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                dir: {
-                    type: string;
-                    description: string;
-                };
-                files: {
-                    type: string;
-                    items: {
-                        type: string;
-                    };
-                    description: string;
-                };
-            };
-        };
-    }[];
-}
+export declare const codeScanSkill: any;

package/dist/codeStats.d.ts

@@ -1,29 +1,44 @@
-export function sizeBucket(added: any, deleted: any): string;
-export function fileExtension(path: any): string;
-export function extKind(ext: any): any;
+/**
+ * code-stats — a PURE, DETERMINISTIC code-statistics skill (zero LLM, zero
+ * network, zero env). Same input → same output, ALWAYS. This is the
+ * reproducible "骨架" beneath any semantic scoring: the numbers a performance
+ * report cites that must survive being challenged (LinearB's one real
+ * advantage is that its metadata metrics are reproducible — these match that
+ * bar while adding per-file / per-path facts LinearB's metadata layer never
+ * sees).
+ *
+ * Design contract:
+ *   - EVERY tool is a pure function of its arguments. No fetch, no env, no
+ *     clock, no randomness → byte-identical results on every run, unit-testable.
+ *   - Distinct from code-scan (linters/scanners, which DO run a tool) — this
+ *     only COUNTS/CLASSIFIES structured facts the caller already has (a
+ *     commit's changed-file list, a column of numbers).
+ *   - Used TWO ways (see engineering-insights): the collect node calls
+ *     `commit_facts` per commit to persist deterministic raw facts (file paths,
+ *     extension mix, size bucket) that would otherwise be thrown away; the
+ *     report agent calls `glob_hit` / `percentile` ON-DEMAND to compute
+ *     core-path coverage against the customer's own globs and to rank people
+ *     within a cohort (percentiles are reproducible and cross-team comparable —
+ *     the "universal" property a raw score lacks).
+ */
+export declare function sizeBucket(added: any, deleted: any): string;
+export declare function fileExtension(path: any): string;
+export declare function extKind(ext: any): any;
 /**
  * commit_facts — deterministic per-commit facts from its changed-file list.
  * `files` is [{ path|newPath|filename, additions?, deletions? }] (the shapes
  * gitlab_get_commit / github_get_commit already return). Pure.
  */
-export function commitFacts(files: any, opts?: {}): {
+export declare function commitFacts(files: any, opts?: any): {
     filesChanged: number;
-    filePaths: string[];
-    extCounts: {};
-    kindCounts: {
-        code: number;
-        test: number;
-        docs: number;
-        config: number;
-        style: number;
-        data: number;
-        other: number;
-    };
+    filePaths: any[];
+    extCounts: any;
+    kindCounts: any;
     additions: number;
     deletions: number;
     sizeBucket: string;
-    largestFile: string;
-    dirs: string[];
+    largestFile: any;
+    dirs: any[];
 };
 /**
  * glob_hit — how many of `paths` match ANY of `globs`. Deterministic. Supports
@@ -31,8 +46,8 @@ export function commitFacts(files: any, opts?: {}): {
  * own core-path globs (e.g. "src/payment/**") are passed at REPORT time — this
  * makes "who works in the core" a reproducible number, not an LLM guess.
  */
-export function globToRegExp(glob: any): RegExp;
-export function globHit(paths: any, globs: any): {
+export declare function globToRegExp(glob: any): RegExp;
+export declare function globHit(paths: any, globs: any): {
     total: number;
     hits: number;
     ratio: number;
@@ -43,121 +58,6 @@ export function globHit(paths: any, globs: any): {
  * `values` (0-100, "% of the cohort at or below value"). Ties count at-or-below
  * (the standard cumulative rank). Empty cohort → null (undefined, not a lie).
  */
-export function percentileRank(values: any, value: any): number;
-export namespace codeStatsSkill {
-    let id: string;
-    let serverName: string;
-    let allowedTools: string[];
-    let description: string;
-    let promptFragment: string;
-    function resolve(): {
-        command: any;
-        args: any[];
-        env: {};
-        description: string;
-        type?: undefined;
-        alwaysLoad?: undefined;
-    } | {
-        type: string;
-        command: string;
-        args: any[];
-        env: {};
-        description: string;
-        alwaysLoad: boolean;
-    };
-    function handleToolCall(name: any, args: any): Promise<string>;
-    let tools: ({
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                files: {
-                    type: string;
-                    description: string;
-                    items: {
-                        type: string;
-                        properties: {
-                            path: {
-                                type: string;
-                            };
-                            additions: {
-                                type: string;
-                            };
-                            deletions: {
-                                type: string;
-                            };
-                        };
-                    };
-                };
-                additions: {
-                    type: string;
-                    description: string;
-                };
-                deletions: {
-                    type: string;
-                    description: string;
-                };
-                paths?: undefined;
-                globs?: undefined;
-                values?: undefined;
-                value?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                paths: {
-                    type: string;
-                    items: {
-                        type: string;
-                    };
-                    description: string;
-                };
-                globs: {
-                    type: string;
-                    items: {
-                        type: string;
-                    };
-                    description: string;
-                };
-                files?: undefined;
-                additions?: undefined;
-                deletions?: undefined;
-                values?: undefined;
-                value?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                values: {
-                    type: string;
-                    items: {
-                        type: string;
-                    };
-                    description: string;
-                };
-                value: {
-                    type: string;
-                    description: string;
-                };
-                files?: undefined;
-                additions?: undefined;
-                deletions?: undefined;
-                paths?: undefined;
-                globs?: undefined;
-            };
-            required: string[];
-        };
-    })[];
-}
+export declare function percentileRank(values: any, value: any): number;
+export declare const codeStatsSkill: any;
 export default codeStatsSkill;

package/dist/codeStats.js

@@ -1,4 +1,4 @@
-import{existsSync as _}from"fs";import{fileURLToPath as v}from"url";import{dirname as x,resolve as k}from"path";function w(){if(process.env.MCP_SKILL_PATH)return process.env.MCP_SKILL_PATH;let s=x(v(import.meta.url)),e=k(s,"..","bin","mcp-skill.mjs");return _(e)?e:null}var S=[{name:"trivial",max:5},{name:"small",max:30},{name:"medium",max:150},{name:"large",max:600},{name:"huge",max:1/0}];function N(s,e){let t=(Number(s)||0)+(Number(e)||0);for(let o of S)if(t<=o.max)return o.name;return"huge"}function T(s){let t=String(s||"").toLowerCase().split("/").pop()||"",o=t.match(/\.(test|spec)\.[a-z0-9]+$/);if(o)return`.${o[1]}`;let i=t.lastIndexOf(".");return i<=0?/^(dockerfile|makefile|jenkinsfile|procfile|gemfile|rakefile)$/i.test(t)?t.toLowerCase():"":t.slice(i)}var C={code:[".js",".jsx",".ts",".tsx",".mjs",".cjs",".py",".go",".rs",".java",".kt",".rb",".php",".c",".cc",".cpp",".h",".hpp",".cs",".swift",".scala",".m",".dart",".ex",".exs",".clj",".sh",".bash"],test:[".test",".spec"],docs:[".md",".mdx",".rst",".txt",".adoc"],config:[".json",".yml",".yaml",".toml",".ini",".env",".cfg",".conf",".lock",".xml",".properties","dockerfile","makefile","jenkinsfile","procfile",".tf",".gradle"],style:[".css",".scss",".sass",".less",".styl"],data:[".csv",".tsv",".sql",".parquet",".proto",".graphql",".gql"]},P=(()=>{let s={};for(let[e,t]of Object.entries(C))for(let o of t)s[o]=e;return s})();function j(s){return P[String(s||"").toLowerCase()]||"other"}function E(s,e={}){let t=Array.isArray(s)?s:[],o=[],i={},n={code:0,test:0,docs:0,config:0,style:0,data:0,other:0},a=0,m=0,c={path:"",changed:-1};for(let r of t){if(!r||typeof r!="object")continue;let l=String(r.path||r.newPath||r.filename||r.new_path||"").trim();if(!l)continue;o.push(l);let g=Number(r.additions??r.add??0)||0,b=Number(r.deletions??r.del??0)||0;a+=g,m+=b;let d=T(l);i[d||"(none)"]=(i[d||"(none)"]||0)+1,n[j(d)]+=1;let y=g+b;y>c.changed&&(c={path:l,changed:y})}let p=Number(e.additions),u=Number(e.deletions),h=Number.isFinite(p)?p:a,f=Number.isFinite(u)?u:m;return{filesChanged:o.length,filePaths:o,extCounts:i,kindCounts:n,additions:h,deletions:f,sizeBucket:N(h,f),largestFile:c.path||null,dirs:[...new Set(o.map(r=>r.includes("/")?r.split("/")[0]:"(root)"))].sort()}}function O(s){let e="",t=String(s||"");for(let o=0;o<t.length;o++){let i=t[o];i==="*"?t[o+1]==="*"?(e+=".*",o++,t[o+1]==="/"&&o++):e+="[^/]*":i==="?"?e+="[^/]":"\\^$.|+()[]{}".includes(i)?e+=`\\${i}`:e+=i}return new RegExp(`^${e}$`)}function A(s,e){let t=Array.isArray(s)?s.map(String):[],o=(Array.isArray(e)?e:[]).filter(Boolean).map(O);if(!o.length)return{total:t.length,hits:0,ratio:0,matched:[]};let i=t.filter(n=>o.some(a=>a.test(n)));return{total:t.length,hits:i.length,ratio:t.length?Number((i.length/t.length).toFixed(4)):0,matched:i}}function L(s,e){let t=(Array.isArray(s)?s:[]).map(Number).filter(n=>Number.isFinite(n)),o=Number(e);if(!t.length||!Number.isFinite(o))return null;let i=t.filter(n=>n<=o).length;return Number((i/t.length*100).toFixed(1))}var R={id:"code-stats",serverName:"code_stats",allowedTools:["mcp__code_stats__*"],description:"Deterministic code statistics \u2014 pure, reproducible facts from changed-file lists + numbers (extension/work-kind mix, size bucket, core-path glob coverage, percentile rank). Zero LLM, zero network.",promptFragment:`## Code Stats (DETERMINISTIC facts \u2014 pure, reproducible, zero-LLM)
+import{existsSync as _}from"fs";import{fileURLToPath as v}from"url";import{dirname as x,resolve as k}from"path";function w(){if(process.env.MCP_SKILL_PATH)return process.env.MCP_SKILL_PATH;let s=x(v(import.meta.url)),e=k(s,"..","bin","mcp-skill.mjs");return _(e)?e:null}var S=[{name:"trivial",max:5},{name:"small",max:30},{name:"medium",max:150},{name:"large",max:600},{name:"huge",max:1/0}];function N(s,e){let t=(Number(s)||0)+(Number(e)||0);for(let o of S)if(t<=o.max)return o.name;return"huge"}function T(s){let t=String(s||"").toLowerCase().split("/").pop()||"",o=t.match(/\.(test|spec)\.[a-z0-9]+$/);if(o)return`.${o[1]}`;let i=t.lastIndexOf(".");return i<=0?/^(dockerfile|makefile|jenkinsfile|procfile|gemfile|rakefile)$/i.test(t)?t.toLowerCase():"":t.slice(i)}var C={code:[".js",".jsx",".ts",".tsx",".mjs",".cjs",".py",".go",".rs",".java",".kt",".rb",".php",".c",".cc",".cpp",".h",".hpp",".cs",".swift",".scala",".m",".dart",".ex",".exs",".clj",".sh",".bash"],test:[".test",".spec"],docs:[".md",".mdx",".rst",".txt",".adoc"],config:[".json",".yml",".yaml",".toml",".ini",".env",".cfg",".conf",".lock",".xml",".properties","dockerfile","makefile","jenkinsfile","procfile",".tf",".gradle"],style:[".css",".scss",".sass",".less",".styl"],data:[".csv",".tsv",".sql",".parquet",".proto",".graphql",".gql"]},P=(()=>{let s={};for(let[e,t]of Object.entries(C))for(let o of t)s[o]=e;return s})();function j(s){return P[String(s||"").toLowerCase()]||"other"}function E(s,e={}){let t=Array.isArray(s)?s:[],o=[],i={},n={code:0,test:0,docs:0,config:0,style:0,data:0,other:0},a=0,m=0,c={path:"",changed:-1};for(let r of t){if(!r||typeof r!="object")continue;let l=String(r.path||r.newPath||r.filename||r.new_path||"").trim();if(!l)continue;o.push(l);let g=Number(r.additions??r.add??0)||0,y=Number(r.deletions??r.del??0)||0;a+=g,m+=y;let d=T(l);i[d||"(none)"]=(i[d||"(none)"]||0)+1,n[j(d)]+=1;let b=g+y;b>c.changed&&(c={path:l,changed:b})}let p=Number(e.additions),u=Number(e.deletions),h=Number.isFinite(p)?p:a,f=Number.isFinite(u)?u:m;return{filesChanged:o.length,filePaths:o,extCounts:i,kindCounts:n,additions:h,deletions:f,sizeBucket:N(h,f),largestFile:c.path||null,dirs:[...new Set(o.map(r=>r.includes("/")?r.split("/")[0]:"(root)"))].sort()}}function O(s){let e="",t=String(s||"");for(let o=0;o<t.length;o++){let i=t[o];i==="*"?t[o+1]==="*"?(e+=".*",o++,t[o+1]==="/"&&o++):e+="[^/]*":i==="?"?e+="[^/]":"\\^$.|+()[]{}".includes(i)?e+=`\\${i}`:e+=i}return new RegExp(`^${e}$`)}function A(s,e){let t=Array.isArray(s)?s.map(String):[],o=(Array.isArray(e)?e:[]).filter(Boolean).map(O);if(!o.length)return{total:t.length,hits:0,ratio:0,matched:[]};let i=t.filter(n=>o.some(a=>a.test(n)));return{total:t.length,hits:i.length,ratio:t.length?Number((i.length/t.length).toFixed(4)):0,matched:i}}function L(s,e){let t=(Array.isArray(s)?s:[]).map(Number).filter(n=>Number.isFinite(n)),o=Number(e);if(!t.length||!Number.isFinite(o))return null;let i=t.filter(n=>n<=o).length;return Number((i/t.length*100).toFixed(1))}var R={id:"code-stats",serverName:"code_stats",allowedTools:["mcp__code_stats__*"],description:"Deterministic code statistics \u2014 pure, reproducible facts from changed-file lists + numbers (extension/work-kind mix, size bucket, core-path glob coverage, percentile rank). Zero LLM, zero network.",promptFragment:`## Code Stats (DETERMINISTIC facts \u2014 pure, reproducible, zero-LLM)
 These tools COMPUTE reproducible facts from data you already have. Use them so
 your numbers are auditable and survive challenge (same input \u2192 same output).
 

package/dist/codebaseMemory.d.ts

@@ -1,32 +1,52 @@
-export namespace codebaseMemorySkill {
-    let id: string;
-    let serverName: string;
-    let meta: any;
-    let allowedTools: string[];
-    let description: string;
-    let promptFragment: string;
-    /**
-     * stdio MCP server = the BARE binary with NO subcommand (verified for
-     * v0.8.1). Never returns { command: null } — the binary is baked into the
-     * image; if it's somehow absent the server simply fails to spawn and its
-     * tools are unavailable, which does not crash the run.
-     */
-    function resolve(): {
-        type: string;
-        command: any;
-        args: any[];
-        env: {
-            CBM_CACHE_DIR: any;
-        };
-        description: string;
-        alwaysLoad: boolean;
-    };
-    /**
-     * Pre-run hook (graph.js calls this for every skill declared on the node,
-     * before the agent runs). Index the checked-out repo ONCE per run with the
-     * imperative `cli index_repository` path. Idempotent via a per-repo marker
-     * under CBM_CACHE_DIR; fully wrapped so it NEVER throws into the run.
-     * Returns {} — it contributes no agent-visible options.
-     */
-    function invokeAgentOptions(): {};
-}
+/**
+ * codebaseMemory.js — code-graph + semantic codebase memory skill, backed by
+ * the DeusData/codebase-memory-mcp binary BAKED INTO the agent image.
+ *
+ * WHAT IT IS
+ * ──────────
+ * A hand-written stdio MCP skill (same shape as kvMemory.js) that points the
+ * agent at the `codebase-memory-mcp` server binary already on the image PATH
+ * (/usr/local/bin/codebase-memory-mcp — see agent-ops/Dockerfile and
+ * backend/lib/docker/zibby-agent/Dockerfile, which fetch the v0.8.1 portable
+ * static build at build time, sha256-verified, multi-arch). The server indexes
+ * a checked-out repository into a code graph + embeddings (Apache-2.0 nomic
+ * embeddings) and exposes architecture / search / trace tools over it.
+ *
+ * RELATIONSHIP TO THE BINARY (VERIFIED GROUND TRUTH for v0.8.1)
+ * ─────────────────────────────────────────────────────────────
+ *   - stdio MCP server  = the BARE binary, NO subcommand → command + args:[].
+ *   - imperative one-shot = `codebase-memory-mcp cli <tool> '<json>'`.
+ *     Indexing            = `cli index_repository '{"repo_path":"<absDir>"}'`.
+ *   - DB / cache dir env  = CBM_CACHE_DIR (we point it at a writable workspace
+ *     dir so a read-only / ephemeral HOME never wedges the server).
+ *
+ * WHY UNGATED (no integration token)
+ * ──────────────────────────────────
+ * Fully local — no API, no OAuth, no paste-token. It is therefore deliberately
+ * LEFT OUT of backend/src/services/skill-integrations.js
+ * (REQUIRED_/OPTIONAL_INTEGRATION_MAP). Leaving it out = ungated = correct.
+ * The skill ACTIVATES ONLY when a node declares 'codebase-memory' in its
+ * `skills` array — the registry never auto-loads it, so existing agents are
+ * unaffected (this is what makes the integration additive). `alwaysLoad: true`
+ * (matching every other skill) only means: once a node HAS declared it, its
+ * MCP tools load eagerly rather than lazily — it does NOT make the skill
+ * global.
+ *
+ * INDEX-AT-START HOOK
+ * ───────────────────
+ * invokeAgentOptions() runs ONCE per run (idempotent via a per-repo marker
+ * file under CBM_CACHE_DIR) to index the checked-out repo with the imperative
+ * `cli index_repository` path BEFORE the node's agent runs, so the graph/search
+ * tools have data on the very first tool call. It is wrapped in try/catch and
+ * NEVER throws — a failed index degrades to "tools return empty", not a crashed
+ * run. The hook returns {} (it contributes no agent-visible options); its only
+ * job is the side-effect of building the index.
+ *
+ * It only helps agents whose repo is ALREADY checked out when the node starts.
+ * An agent that clones INSIDE its own run has nothing to index at hook time —
+ * the hook then NO-OPS (see repoDirToIndex) and that agent must call
+ * index_repository itself right after cloning. Do NOT "fix" the empty case by
+ * falling back to the workspace root: that indexes the agent's own template
+ * source, which is worse than no index at all.
+ */
+export declare const codebaseMemorySkill: any;

package/dist/codebaseMemory.js

@@ -1,4 +1,4 @@
-import{spawnSync as d}from"node:child_process";import{existsSync as n,mkdirSync as c,readdirSync as h,writeFileSync as m}from"node:fs";import{createHash as u}from"node:crypto";import{join as s}from"node:path";import{SKILL_META as y}from"@zibby/skill-ids";function i(){return process.env.CBM_BIN||"/usr/local/bin/codebase-memory-mcp"}function a(){if(process.env.CBM_CACHE_DIR)return process.env.CBM_CACHE_DIR;let e=process.env.WORKSPACE||process.env.ZIBBY_WORKSPACE;return e?s(e,".zibby","cbm-cache"):"/tmp/zibby-cbm-cache"}function l(){let e=process.env.WORKSPACE||process.env.ZIBBY_WORKSPACE||"/workspace",r=s(e,".zibby","repos");try{if(n(r)){let t=h(r,{withFileTypes:!0}).filter(o=>o.isDirectory()).map(o=>s(r,o.name));if(t.length===1)return t[0];if(t.length>1)return r}}catch{}return null}function _(e){return u("sha256").update(e).digest("hex").slice(0,16)}var x={id:"codebase-memory",serverName:"codebase_memory",meta:y["codebase-memory"],allowedTools:["mcp__codebase_memory__*"],description:"Codebase memory \u2014 code-graph + semantic index over the checked-out repo (architecture, graph search, dependency trace, change detection)",promptFragment:`## Codebase Memory (code-graph + semantic index over THIS repo)
+import{spawnSync as d}from"node:child_process";import{existsSync as s,mkdirSync as c,readdirSync as h,writeFileSync as m}from"node:fs";import{createHash as u}from"node:crypto";import{join as n}from"node:path";import{SKILL_META as y}from"@zibby/skill-ids";function i(){return process.env.CBM_BIN||"/usr/local/bin/codebase-memory-mcp"}function a(){if(process.env.CBM_CACHE_DIR)return process.env.CBM_CACHE_DIR;let e=process.env.WORKSPACE||process.env.ZIBBY_WORKSPACE;return e?n(e,".zibby","cbm-cache"):"/tmp/zibby-cbm-cache"}function l(){let e=process.env.WORKSPACE||process.env.ZIBBY_WORKSPACE||"/workspace",r=n(e,".zibby","repos");try{if(s(r)){let t=h(r,{withFileTypes:!0}).filter(o=>o.isDirectory()).map(o=>n(r,o.name));if(t.length===1)return t[0];if(t.length>1)return r}}catch{}return null}function _(e){return u("sha256").update(e).digest("hex").slice(0,16)}var x={id:"codebase-memory",serverName:"codebase_memory",meta:y["codebase-memory"],allowedTools:["mcp__codebase_memory__*"],description:"Codebase memory \u2014 code-graph + semantic index over the checked-out repo (architecture, graph search, dependency trace, change detection)",promptFragment:`## Codebase Memory (code-graph + semantic index over THIS repo)
 The checked-out repository is indexed into a queryable code graph + semantic
 index. Reach for these instead of blindly grepping when you need structure,
 relationships, or "where does X live / what depends on Y":
@@ -10,5 +10,5 @@ relationships, or "where does X live / what depends on Y":
 - get_code_snippet / search_code: pull the exact code for a node / text match.
 - index_status / list_projects: confirm the index is present before querying.
 The repo is indexed for you at the start of the run; if a query comes back
-empty, call index_status, and only re-index (index_repository) if needed.`,resolve(){let e=a();try{c(e,{recursive:!0})}catch{}let r={CBM_CACHE_DIR:e};return process.env.WORKSPACE&&(r.WORKSPACE=process.env.WORKSPACE),{type:"stdio",command:i(),args:[],env:r,description:this.description,alwaysLoad:!0}},invokeAgentOptions(){try{let e=l();if(!e)return{};let r=a();try{c(r,{recursive:!0})}catch{}let t=s(r,`.cbm-indexed-${_(e)}`);if(n(t))return{};let o=i();if(!n(o)&&!process.env.CBM_BIN)return{};let p=d(o,["cli","index_repository",JSON.stringify({repo_path:e})],{env:{...process.env,CBM_CACHE_DIR:r},encoding:"utf-8",timeout:300*1e3,maxBuffer:32*1024*1024});try{m(t,`${new Date().toISOString()} status=${p.status}
+empty, call index_status, and only re-index (index_repository) if needed.`,resolve(){let e=a();try{c(e,{recursive:!0})}catch{}let r={CBM_CACHE_DIR:e};return process.env.WORKSPACE&&(r.WORKSPACE=process.env.WORKSPACE),{type:"stdio",command:i(),args:[],env:r,description:this.description,alwaysLoad:!0}},invokeAgentOptions(){try{let e=l();if(!e)return{};let r=a();try{c(r,{recursive:!0})}catch{}let t=n(r,`.cbm-indexed-${_(e)}`);if(s(t))return{};let o=i();if(!s(o)&&!process.env.CBM_BIN)return{};let p=d(o,["cli","index_repository",JSON.stringify({repo_path:e})],{env:{...process.env,CBM_CACHE_DIR:r},encoding:"utf-8",timeout:300*1e3,maxBuffer:32*1024*1024});try{m(t,`${new Date().toISOString()} status=${p.status}
 `)}catch{}}catch{}return{}}};export{x as codebaseMemorySkill};

package/dist/core-tools.d.ts

@@ -1,131 +1,10 @@
-export namespace coreToolsSkill {
-    let id: string;
-    let description: string;
-    let envKeys: any[];
-    let tools: ({
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                path: {
-                    type: string;
-                    description: string;
-                };
-                content?: undefined;
-                command?: undefined;
-                cwd?: undefined;
-                url?: undefined;
-                seconds?: undefined;
-                reason?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                path: {
-                    type: string;
-                    description: string;
-                };
-                content: {
-                    type: string;
-                    description: string;
-                };
-                command?: undefined;
-                cwd?: undefined;
-                url?: undefined;
-                seconds?: undefined;
-                reason?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                path: {
-                    type: string;
-                    description: string;
-                };
-                content?: undefined;
-                command?: undefined;
-                cwd?: undefined;
-                url?: undefined;
-                seconds?: undefined;
-                reason?: undefined;
-            };
-            required?: undefined;
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                command: {
-                    type: string;
-                    description: string;
-                };
-                cwd: {
-                    type: string;
-                    description: string;
-                };
-                path?: undefined;
-                content?: undefined;
-                url?: undefined;
-                seconds?: undefined;
-                reason?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                url: {
-                    type: string;
-                    description: string;
-                };
-                path?: undefined;
-                content?: undefined;
-                command?: undefined;
-                cwd?: undefined;
-                seconds?: undefined;
-                reason?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                seconds: {
-                    type: string;
-                    description: string;
-                };
-                reason: {
-                    type: string;
-                    description: string;
-                };
-                path?: undefined;
-                content?: undefined;
-                command?: undefined;
-                cwd?: undefined;
-                url?: undefined;
-            };
-            required?: undefined;
-        };
-    })[];
-    function handleToolCall(name: any, args: any, context: any): Promise<any>;
-    function resolve(): any;
-}
+/**
+ * Core Tools Skill
+ *
+ * Provides baseline local capabilities for the chat agent:
+ * file read, directory listing, shell execution, and URL opening.
+ *
+ * These are the equivalent of what Cursor/Claude agents get natively.
+ * All handlers run locally in the Node.js process — no MCP server needed.
+ */
+export declare const coreToolsSkill: any;