botmux 3.10.0 → 3.23.1

package/dist/core/skills/references.d.ts

@@ -1,21 +0,0 @@
-import type { BotSkillPolicy } from './types.js';
-export interface SkillReferenceBotInput {
-    larkAppId: string;
-    name?: string;
-    botName?: string;
-    skills?: BotSkillPolicy | null;
-}
-export interface SkillReferenceBot {
-    larkAppId: string;
-    botName: string;
-    direct: boolean;
-}
-export interface SkillReferenceSummary {
-    bots: SkillReferenceBot[];
-}
-export declare function directSkillNames(policy: BotSkillPolicy | null | undefined): string[];
-export declare function policyIncludesDirectSkill(policy: BotSkillPolicy | null | undefined, skillName: string): boolean;
-export declare function analyzeSkillReferences(skillName: string, opts: {
-    bots: SkillReferenceBotInput[];
-}): SkillReferenceSummary;
-//# sourceMappingURL=references.d.ts.map

package/dist/core/skills/references.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,EAAE,CAAC;CAC3B;AAMD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAIpF;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,IAAI,EAAE,sBAAsB,EAAE,CAAC;CAChC,GACA,qBAAqB,CAavB"}

package/dist/core/skills/references.js

@@ -1,27 +0,0 @@
-function directSkillSelector(skillName) {
-    return `skill:${skillName}`;
-}
-export function directSkillNames(policy) {
-    return (policy?.include ?? [])
-        .filter((item) => item.startsWith('skill:'))
-        .map((item) => item.slice('skill:'.length));
-}
-export function policyIncludesDirectSkill(policy, skillName) {
-    return Array.isArray(policy?.include) && policy.include.includes(directSkillSelector(skillName));
-}
-export function analyzeSkillReferences(skillName, opts) {
-    const bots = [];
-    for (const bot of opts.bots) {
-        const direct = policyIncludesDirectSkill(bot.skills, skillName);
-        if (!direct)
-            continue;
-        bots.push({
-            larkAppId: bot.larkAppId,
-            botName: bot.botName ?? bot.name ?? bot.larkAppId,
-            direct,
-        });
-    }
-    bots.sort((a, b) => a.botName.localeCompare(b.botName));
-    return { bots };
-}
-//# sourceMappingURL=references.js.map

package/dist/core/skills/references.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"references.js","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAmBA,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS,SAAS,EAAmB,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyC;IACxE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyC,EACzC,SAAiB;IAEjB,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,IAEC;IAED,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS;YACjD,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}

package/dist/core/skills/registry-paths.d.ts

@@ -1,5 +0,0 @@
-export declare function botmuxSkillsHome(): string;
-export declare function skillRegistryPath(): string;
-export declare function skillStoreDir(): string;
-export declare function skillSourcesDir(): string;
-//# sourceMappingURL=registry-paths.d.ts.map

package/dist/core/skills/registry-paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry-paths.d.ts","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAGA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/core/skills/registry-paths.js

@@ -1,15 +0,0 @@
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-export function botmuxSkillsHome() {
-    return join(homedir(), '.botmux', 'skills');
-}
-export function skillRegistryPath() {
-    return join(botmuxSkillsHome(), 'registry.json');
-}
-export function skillStoreDir() {
-    return join(botmuxSkillsHome(), 'store');
-}
-export function skillSourcesDir() {
-    return join(botmuxSkillsHome(), 'sources');
-}
-//# sourceMappingURL=registry-paths.js.map

package/dist/core/skills/registry-paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry-paths.js","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/skills/resource-reader.d.ts

@@ -1,9 +0,0 @@
-import type { SessionSkillManifest } from './types.js';
-export interface SkillResourceReadResult {
-    path: string;
-    content: string;
-}
-export declare function readSkillResource(manifest: SessionSkillManifest, skillName: string, relativePath: string): SkillResourceReadResult;
-export declare function readSkillEntrypoint(manifest: SessionSkillManifest, skillName: string): SkillResourceReadResult;
-export declare function listSkillResources(manifest: SessionSkillManifest, skillName: string): string[];
-//# sourceMappingURL=resource-reader.d.ts.map

package/dist/core/skills/resource-reader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-reader.d.ts","sourceRoot":"","sources":["../../../src/core/skills/resource-reader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIvD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,uBAAuB,CAgBzB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,uBAAuB,CAI9G;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAkD9F"}

package/dist/core/skills/resource-reader.js

@@ -1,97 +0,0 @@
-import { lstatSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
-import { join, relative, resolve } from 'node:path';
-const MAX_RESOURCE_BYTES = 256 * 1024;
-function assertRelativePath(path) {
-    if (path.startsWith('/') || path.includes('\0'))
-        throw new Error('invalid_skill_resource_path');
-    if (path.split(/[\\/]/).includes('..'))
-        throw new Error('path_outside_skill_root');
-}
-export function readSkillResource(manifest, skillName, relativePath) {
-    assertRelativePath(relativePath);
-    const skill = manifest.prioritySkills.find((s) => s.name === skillName);
-    if (!skill)
-        throw new Error('skill_not_in_session_manifest');
-    const root = realpathSync(skill.rootDir);
-    let target;
-    try {
-        target = realpathSync(resolve(join(root, relativePath)));
-    }
-    catch {
-        throw new Error('skill_resource_not_found');
-    }
-    if (!(target === root || target.startsWith(root + '/')))
-        throw new Error('path_outside_skill_root');
-    const stat = lstatSync(target);
-    if (!stat.isFile())
-        throw new Error('skill_resource_not_file');
-    if (stat.size > MAX_RESOURCE_BYTES)
-        throw new Error('skill_resource_too_large');
-    return { path: relativePath, content: readFileSync(target, 'utf-8') };
-}
-export function readSkillEntrypoint(manifest, skillName) {
-    const skill = manifest.prioritySkills.find((s) => s.name === skillName);
-    if (!skill)
-        throw new Error('skill_not_in_session_manifest');
-    return readSkillResource(manifest, skillName, skill.entrypoint);
-}
-export function listSkillResources(manifest, skillName) {
-    const skill = manifest.prioritySkills.find((s) => s.name === skillName);
-    if (!skill)
-        throw new Error('skill_not_in_session_manifest');
-    const root = realpathSync(skill.rootDir);
-    const out = [];
-    function withinRoot(path) {
-        return path === root || path.startsWith(root + '/');
-    }
-    function walk(dir, depth) {
-        if (depth > 4 || out.length >= 200)
-            return;
-        let entries;
-        try {
-            entries = readdirSync(dir);
-        }
-        catch {
-            return;
-        }
-        for (const name of entries) {
-            if (out.length >= 200)
-                return;
-            const path = join(dir, name);
-            let stat;
-            try {
-                stat = lstatSync(path);
-            }
-            catch {
-                continue;
-            }
-            if (stat.isSymbolicLink())
-                continue;
-            if (stat.isDirectory()) {
-                let realDir;
-                try {
-                    realDir = realpathSync(path);
-                }
-                catch {
-                    continue;
-                }
-                if (withinRoot(realDir))
-                    walk(path, depth + 1);
-            }
-            else if (stat.isFile()) {
-                let realFile;
-                try {
-                    realFile = realpathSync(path);
-                }
-                catch {
-                    continue;
-                }
-                if (withinRoot(realFile))
-                    out.push(relative(root, path));
-            }
-        }
-    }
-    walk(root, 0);
-    return out.sort();
-}
-//# sourceMappingURL=resource-reader.js.map

package/dist/core/skills/resource-reader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-reader.js","sourceRoot":"","sources":["../../../src/core/skills/resource-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpD,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AAOtC,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAA8B,EAC9B,SAAiB,EACjB,YAAoB;IAEpB,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA8B,EAAE,SAAiB;IACnF,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAA8B,EAAE,SAAiB;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,SAAS,UAAU,CAAC,IAAY;QAC9B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO;QAC3C,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAS;YACpC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,OAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,UAAU,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,IAAI,QAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,UAAU,CAAC,QAAQ,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}

package/dist/core/skills/session-resolver.d.ts

@@ -1,15 +0,0 @@
-import type { CliId } from '../../adapters/cli/types.js';
-import type { BotSkillPolicy, SessionSkillManifest, SkillPackage } from './types.js';
-export declare function resolveSessionSkillManifest(opts: {
-    sessionId: string;
-    cliId: CliId;
-    workingDir: string;
-    botPolicy: BotSkillPolicy | undefined;
-    pluginSkills?: SkillPackage[];
-    globalProjectSkills?: 'off' | 'trusted' | 'all';
-    globalDelivery?: 'auto' | 'prompt' | 'native';
-    registrySkills: SkillPackage[];
-    projectSkills: SkillPackage[];
-    now?: () => string;
-}): SessionSkillManifest | null;
-//# sourceMappingURL=session-resolver.d.ts.map

package/dist/core/skills/session-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-resolver.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGrF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC9C,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,oBAAoB,GAAG,IAAI,CAqB9B"}

package/dist/core/skills/session-resolver.js

@@ -1,25 +0,0 @@
-import { resolveSkillPolicy } from './policy.js';
-export function resolveSessionSkillManifest(opts) {
-    const resolved = resolveSkillPolicy({
-        registrySkills: opts.registrySkills,
-        projectSkills: opts.projectSkills,
-        pluginSkills: opts.pluginSkills,
-        globalProjectSkills: opts.globalProjectSkills,
-        globalDelivery: opts.globalDelivery,
-        botPolicy: opts.botPolicy,
-        workingDir: opts.workingDir,
-    });
-    if (!resolved.enabled)
-        return null;
-    return {
-        sessionId: opts.sessionId,
-        cliId: opts.cliId,
-        workingDir: opts.workingDir,
-        policyMode: resolved.mode,
-        delivery: resolved.delivery,
-        prioritySkills: resolved.prioritySkills,
-        diagnostics: resolved.diagnostics,
-        generatedAt: opts.now ? opts.now() : new Date().toISOString(),
-    };
-}
-//# sourceMappingURL=session-resolver.js.map

package/dist/core/skills/session-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-resolver.js","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,IAW3C;IACC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC"}

package/dist/core/skills/session-runtime.d.ts

@@ -1,15 +0,0 @@
-import type { CliId } from '../../adapters/cli/types.js';
-import type { BotSkillPolicy, SessionSkillManifest, SkillPackage } from './types.js';
-export interface PreparedSessionSkillPrompt {
-    prompt: string;
-    manifest: SessionSkillManifest | null;
-}
-export declare function prepareSessionSkillPrompt(opts: {
-    sessionId: string;
-    cliId: CliId;
-    workingDir: string;
-    prompt: string;
-    botPolicy: BotSkillPolicy | undefined;
-    pluginSkills?: SkillPackage[];
-}): PreparedSessionSkillPrompt;
-//# sourceMappingURL=session-runtime.d.ts.map

package/dist/core/skills/session-runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-runtime.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAGzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAMrF,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;CAC/B,GAAG,0BAA0B,CA6B7B"}

package/dist/core/skills/session-runtime.js

@@ -1,37 +0,0 @@
-import { readGlobalConfig } from '../../global-config.js';
-import { readSkillRegistry } from '../../services/skill-registry-store.js';
-import { discoverProjectSkills } from './discovery.js';
-import { removeSessionSkillManifest, writeSessionSkillManifest } from './manifest-store.js';
-import { renderSkillCatalogBlock } from './prompt.js';
-import { resolveSessionSkillManifest } from './session-resolver.js';
-export function prepareSessionSkillPrompt(opts) {
-    if (!opts.botPolicy && !opts.pluginSkills?.length) {
-        removeSessionSkillManifest(opts.sessionId);
-        return { prompt: opts.prompt, manifest: null };
-    }
-    const globalSkills = readGlobalConfig().skills;
-    const manifest = resolveSessionSkillManifest({
-        sessionId: opts.sessionId,
-        cliId: opts.cliId,
-        workingDir: opts.workingDir,
-        botPolicy: opts.botPolicy,
-        pluginSkills: opts.pluginSkills,
-        globalProjectSkills: globalSkills?.trustProjectSkills,
-        globalDelivery: globalSkills?.delivery,
-        registrySkills: Object.values(readSkillRegistry().skills),
-        projectSkills: discoverProjectSkills(opts.workingDir),
-    });
-    if (!manifest || manifest.prioritySkills.length === 0) {
-        removeSessionSkillManifest(opts.sessionId);
-        return { prompt: opts.prompt, manifest };
-    }
-    writeSessionSkillManifest(manifest);
-    if (opts.prompt.trim().length === 0 || opts.prompt.includes('<botmux_skills')) {
-        return { prompt: opts.prompt, manifest };
-    }
-    return {
-        prompt: `${opts.prompt}\n\n${renderSkillCatalogBlock(manifest)}`,
-        manifest,
-    };
-}
-//# sourceMappingURL=session-runtime.js.map

package/dist/core/skills/session-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAOpE,MAAM,UAAU,yBAAyB,CAAC,IAOzC;IACC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAClD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC;IAC/C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,YAAY,EAAE,kBAAkB;QACrD,cAAc,EAAE,YAAY,EAAE,QAAQ;QACtC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACzD,aAAa,EAAE,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,OAAO,uBAAuB,CAAC,QAAQ,CAAC,EAAE;QAChE,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/core/skills/sources.d.ts

@@ -1,53 +0,0 @@
-export interface ParsedSkillInstallSource {
-    kind: 'local' | 'git' | 'github' | 'agentbuddy';
-    value: string;
-    github?: {
-        owner: string;
-        repo: string;
-        path?: string;
-        ref?: string;
-    };
-    agentbuddy?: AgentbuddySource;
-}
-/** A skill (or collection) to fetch through the external `agentbuddy` CLI.
- *  `collection` is mutually exclusive with `group`/`skill`. No registry host or
- *  auth lives here — the daemon host's configured `agentbuddy` binary owns that,
- *  so the public source never carries an internal domain. */
-export interface AgentbuddySource {
-    /** agentbuddy protocol — `skill` (default) or `plugin`. */
-    protocol?: 'skill' | 'plugin';
-    collection?: string;
-    group?: string;
-    skill?: string;
-    version?: string;
-}
-export declare function redactGitUrlCredentials(raw: string): string;
-export declare function assertNoGitUrlCredentials(raw: string): void;
-export declare function assertAllowedGitProtocol(raw: string): void;
-/** Refuse refs that could be mistaken for a `git checkout` option (leading `-`)
- *  or carry control characters. Real branch/tag/commit refs never start with a
- *  dash, so this is safe to reject outright. */
-export declare function assertSafeGitRef(ref: string | undefined): void;
-export declare function assertSafeGitSkillPath(path: string): void;
-/** Parse a pasted agentbuddy install command into an agentbuddy source.
- *  Accepts the exact copy-command the marketplace shows, e.g.:
- *    agentbuddy skill collection add <uid>
- *    agentbuddy plugin collection add <uid>
- *    agentbuddy skill add <group> --skill <name> [--version <v>]
- *  and tolerates a leading `KEY=VALUE … npx [-y] agentbuddy@latest …` prefix
- *  (the env + runner the site prepends). Only install subcommands (`add`,
- *  `collection add`) of `skill`/`plugin` are accepted — other agentbuddy
- *  subcommands (publish/remove/login/…) return null so a stray command can't
- *  drive the CLI. Returns null for anything that isn't such a command. */
-export declare function parseAgentbuddyCommand(raw: string): AgentbuddySource | null;
-/** Recognize the open-source `skills` CLI (vercel-labs/skills) add command and
- *  route its GitHub source into botmux's native GitHub/Git install — no extra
- *  dependency, and public repos need no auth. Accepts:
- *    skills add <owner/repo>              (also the `add-skill <owner/repo>` bin)
- *    npx [-y] skills[@latest] add <owner/repo>
- *  where <owner/repo> is a GitHub shorthand or a GitHub/Git URL. Returns null
- *  for anything that isn't such a command. */
-export declare function parseSkillsInstallCommand(raw: string): ParsedSkillInstallSource | null;
-export declare function parseSkillInstallSource(raw: string): ParsedSkillInstallSource;
-export declare function githubToGitUrl(owner: string, repo: string): string;
-//# sourceMappingURL=sources.d.ts.map

package/dist/core/skills/sources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/core/skills/sources.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;6DAG6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAUD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ3D;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3D;AAeD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU1D;AAED;;gDAEgD;AAChD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG9D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIzD;AAuED;;;;;;;;;0EAS0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CA4B3E;AAED;;;;;;8CAM8C;AAC9C,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAmBtF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAiC7E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE"}

package/dist/core/skills/sources.js

@@ -1,257 +0,0 @@
-import { isAbsolute } from 'node:path';
-function parseMaybeUrl(raw) {
-    try {
-        return new URL(raw.replace(/^git\+/, ''));
-    }
-    catch {
-        return null;
-    }
-}
-export function redactGitUrlCredentials(raw) {
-    const url = parseMaybeUrl(raw);
-    if (!url)
-        return raw;
-    if (!url.username && !url.password)
-        return raw;
-    url.username = url.username ? '***' : '';
-    url.password = url.password ? '***' : '';
-    const redacted = url.toString();
-    return raw.startsWith('git+') ? `git+${redacted}` : redacted;
-}
-export function assertNoGitUrlCredentials(raw) {
-    const url = parseMaybeUrl(raw);
-    if (!url)
-        return;
-    if ((url.protocol === 'http:' || url.protocol === 'https:') && (url.username || url.password)) {
-        throw new Error('git_url_credentials_not_allowed');
-    }
-}
-/** Refuse git transports that execute commands. git's `ext::` (and other
- *  remote-helper) transports run an arbitrary shell command on clone, turning
- *  "install a skill" into RCE on the daemon host. Only the standard fetch
- *  transports are allowed; `file:`/bare local paths are permitted because they
- *  are equivalent to the already-supported local-directory install. `git` is
- *  also invoked with a matching `GIT_ALLOW_PROTOCOL` allowlist as
- *  defense-in-depth. scp-like `user@host:path` carries no URL scheme and is SSH. */
-const ALLOWED_GIT_PROTOCOLS = new Set(['https:', 'http:', 'ssh:', 'git:', 'file:']);
-function isScpLikeGitUrl(raw) {
-    return !raw.includes('://') && /^[A-Za-z0-9._-]+@[^/]+:/.test(raw);
-}
-export function assertAllowedGitProtocol(raw) {
-    if (isScpLikeGitUrl(raw))
-        return; // scp short form → SSH
-    const url = parseMaybeUrl(raw);
-    // No parseable scheme → git treats it as a local path (same trust as a local
-    // directory install). A parseable scheme must be on the allowlist; `ext:` and
-    // friends fall through to the throw.
-    if (!url)
-        return;
-    if (!ALLOWED_GIT_PROTOCOLS.has(url.protocol)) {
-        throw new Error('git_url_protocol_not_allowed');
-    }
-}
-/** Refuse refs that could be mistaken for a `git checkout` option (leading `-`)
- *  or carry control characters. Real branch/tag/commit refs never start with a
- *  dash, so this is safe to reject outright. */
-export function assertSafeGitRef(ref) {
-    if (ref === undefined)
-        return;
-    if (!ref || ref.startsWith('-') || /[\0\s]/.test(ref))
-        throw new Error('invalid_git_ref');
-}
-export function assertSafeGitSkillPath(path) {
-    if (!path || path.includes('\0'))
-        throw new Error('invalid_git_skill_path');
-    if (isAbsolute(path) || /^[A-Za-z]:[\\/]/.test(path))
-        throw new Error('invalid_git_skill_path');
-    if (path.split(/[\\/]+/).filter(Boolean).includes('..'))
-        throw new Error('invalid_git_skill_path');
-}
-function decodeUrlPart(part) {
-    try {
-        return decodeURIComponent(part);
-    }
-    catch {
-        throw new Error('invalid_github_skill_source');
-    }
-}
-function hasRawPathTraversal(raw) {
-    return /(?:^|[\\/])(?:\.\.|%2e%2e)(?=$|[\\/#?])/i.test(raw);
-}
-function parseGitHubBrowserUrl(raw) {
-    const url = parseMaybeUrl(raw);
-    if (!url)
-        return null;
-    if (url.protocol !== 'https:' && url.protocol !== 'http:')
-        return null;
-    if (url.hostname !== 'github.com' && url.hostname !== 'www.github.com')
-        return null;
-    if (hasRawPathTraversal(raw))
-        throw new Error('invalid_git_skill_path');
-    const parts = url.pathname.split('/').filter(Boolean).map(decodeUrlPart);
-    if (parts.length < 2)
-        throw new Error('invalid_github_skill_source');
-    const [owner, repoWithSuffix] = parts;
-    const repo = repoWithSuffix.endsWith('.git') ? repoWithSuffix.slice(0, -'.git'.length) : repoWithSuffix;
-    if (!owner || !repo)
-        throw new Error('invalid_github_skill_source');
-    let ref;
-    let path;
-    if (parts[2] === 'tree' || parts[2] === 'blob') {
-        const rest = parts.slice(3);
-        if (rest.length === 0)
-            throw new Error('invalid_github_skill_source');
-        const skillsIndex = rest.indexOf('skills');
-        if (skillsIndex > 0) {
-            ref = rest.slice(0, skillsIndex).join('/');
-            path = rest.slice(skillsIndex).join('/');
-        }
-        else {
-            ref = rest[0];
-            path = rest.slice(1).join('/') || undefined;
-        }
-        const pathParts = path?.split('/');
-        if (parts[2] === 'blob' && pathParts?.[pathParts.length - 1]?.toLowerCase() === 'skill.md') {
-            path = pathParts.slice(0, -1).join('/') || undefined;
-        }
-    }
-    if (path)
-        assertSafeGitSkillPath(path);
-    return {
-        kind: 'github',
-        value: raw,
-        github: { owner, repo, ...(path ? { path } : {}), ...(ref ? { ref } : {}) },
-    };
-}
-// agentbuddy identifiers are passed as argv to the external CLI (via execFile,
-// never a shell), but we still reject anything that could be mistaken for a
-// flag (leading `-`), a path escape (`..`), or carry whitespace/control chars.
-const AGENTBUDDY_TOKEN_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-const AGENTBUDDY_VERSION_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]*$/;
-const AGENTBUDDY_GROUP_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/;
-function assertSafeAgentbuddyToken(token, kind, re = AGENTBUDDY_TOKEN_RE) {
-    if (!token || token.includes('\0') || /\s/.test(token) || !re.test(token)) {
-        throw new Error(`invalid_agentbuddy_${kind}`);
-    }
-}
-function assertSafeAgentbuddyGroup(group) {
-    assertSafeAgentbuddyToken(group, 'group', AGENTBUDDY_GROUP_RE);
-    if (group.split('/').some((seg) => seg === '' || seg === '.' || seg === '..')) {
-        throw new Error('invalid_agentbuddy_group');
-    }
-}
-/** Parse a pasted agentbuddy install command into an agentbuddy source.
- *  Accepts the exact copy-command the marketplace shows, e.g.:
- *    agentbuddy skill collection add <uid>
- *    agentbuddy plugin collection add <uid>
- *    agentbuddy skill add <group> --skill <name> [--version <v>]
- *  and tolerates a leading `KEY=VALUE … npx [-y] agentbuddy@latest …` prefix
- *  (the env + runner the site prepends). Only install subcommands (`add`,
- *  `collection add`) of `skill`/`plugin` are accepted — other agentbuddy
- *  subcommands (publish/remove/login/…) return null so a stray command can't
- *  drive the CLI. Returns null for anything that isn't such a command. */
-export function parseAgentbuddyCommand(raw) {
-    const tokens = raw.trim().split(/\s+/).filter(Boolean);
-    const binIdx = tokens.findIndex((t) => t === 'agentbuddy' || t.startsWith('agentbuddy@'));
-    if (binIdx < 0)
-        return null;
-    // Drop the user's own -y/--yes (install always adds its own); keep the rest
-    // positional so the structured shape below reads cleanly.
-    const rest = tokens.slice(binIdx + 1).filter((t) => t !== '-y' && t !== '--yes');
-    const protocol = rest[0];
-    if (protocol !== 'skill' && protocol !== 'plugin')
-        return null;
-    // <protocol> collection add <uid>
-    if (rest[1] === 'collection' && rest[2] === 'add' && rest[3]) {
-        assertSafeAgentbuddyToken(rest[3], 'collection');
-        return { protocol, collection: rest[3] };
-    }
-    // <protocol> add <group> --skill <name> [--version <v>]
-    if (rest[1] === 'add' && rest[2] && !rest[2].startsWith('-')) {
-        const group = rest[2];
-        const skillIdx = Math.max(rest.indexOf('--skill'), rest.indexOf('-s'));
-        const skill = skillIdx >= 0 ? rest[skillIdx + 1] : undefined;
-        if (!skill)
-            return null;
-        const verIdx = Math.max(rest.indexOf('--version'), rest.indexOf('-v'));
-        const version = verIdx >= 0 ? rest[verIdx + 1] : undefined;
-        assertSafeAgentbuddyGroup(group);
-        assertSafeAgentbuddyToken(skill, 'skill');
-        if (version)
-            assertSafeAgentbuddyToken(version, 'version', AGENTBUDDY_VERSION_RE);
-        return { protocol, group, skill, ...(version ? { version } : {}) };
-    }
-    return null;
-}
-/** Recognize the open-source `skills` CLI (vercel-labs/skills) add command and
- *  route its GitHub source into botmux's native GitHub/Git install — no extra
- *  dependency, and public repos need no auth. Accepts:
- *    skills add <owner/repo>              (also the `add-skill <owner/repo>` bin)
- *    npx [-y] skills[@latest] add <owner/repo>
- *  where <owner/repo> is a GitHub shorthand or a GitHub/Git URL. Returns null
- *  for anything that isn't such a command. */
-export function parseSkillsInstallCommand(raw) {
-    const tokens = raw.trim().split(/\s+/).filter(Boolean);
-    const binIdx = tokens.findIndex((t) => t === 'skills' || t === 'add-skill' || t.startsWith('skills@'));
-    if (binIdx < 0)
-        return null;
-    const bin = tokens[binIdx];
-    const rest = tokens.slice(binIdx + 1).filter((t) => t !== '-y' && t !== '--yes');
-    const source = rest[0] === 'add'
-        ? rest[1]
-        : (bin === 'add-skill' && rest[0] && !rest[0].startsWith('-') ? rest[0] : undefined);
-    if (!source)
-        return null;
-    // Bare owner/repo[/path] → GitHub shorthand; explicit URLs pass through.
-    const hasScheme = source.includes('://') || /^[A-Za-z0-9._-]+@[^/]+:/.test(source);
-    const normalized = !hasScheme && /^[A-Za-z0-9][\w.-]*\/[\w./-]+$/.test(source) ? `github:${source}` : source;
-    try {
-        const parsed = parseSkillInstallSource(normalized);
-        return parsed.kind === 'github' || parsed.kind === 'git' ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-export function parseSkillInstallSource(raw) {
-    const command = parseAgentbuddyCommand(raw);
-    if (command) {
-        return { kind: 'agentbuddy', value: raw, agentbuddy: command };
-    }
-    const skillsCommand = parseSkillsInstallCommand(raw);
-    if (skillsCommand)
-        return skillsCommand;
-    if (raw.startsWith('github:')) {
-        const rest = raw.slice('github:'.length);
-        const parts = rest.split('/').filter(Boolean);
-        if (parts.length < 2)
-            throw new Error('invalid_github_skill_source');
-        const path = parts.slice(2).join('/') || undefined;
-        if (path)
-            assertSafeGitSkillPath(path);
-        return {
-            kind: 'github',
-            value: raw,
-            github: { owner: parts[0], repo: parts[1], path },
-        };
-    }
-    assertNoGitUrlCredentials(raw);
-    if (raw.startsWith('git+')) {
-        const value = raw.replace(/^git\+/, '');
-        assertAllowedGitProtocol(value);
-        return { kind: 'git', value };
-    }
-    const githubSource = parseGitHubBrowserUrl(raw);
-    if (githubSource)
-        return githubSource;
-    if (raw.endsWith('.git') || raw.startsWith('git@')) {
-        const value = raw;
-        assertAllowedGitProtocol(value);
-        return { kind: 'git', value };
-    }
-    return { kind: 'local', value: raw };
-}
-export function githubToGitUrl(owner, repo) {
-    return `https://github.com/${owner}/${repo}.git`;
-}
-//# sourceMappingURL=sources.js.map