clawdhub 0.0.1

package/dist/skills.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/skills.test.js

@@ -0,0 +1,83 @@
+/* @vitest-environment node */
+import { mkdir, mkdtemp, readFile, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { strToU8, zipSync } from 'fflate';
+import { describe, expect, it } from 'vitest';
+import { buildSkillFingerprint, extractZipToDir, hashSkillFiles, hashSkillZip, listTextFiles, readLockfile, sha256Hex, writeLockfile, } from './skills';
+describe('skills', () => {
+    it('extracts zip into directory and skips traversal', async () => {
+        const dir = await mkdtemp(join(tmpdir(), 'clawdhub-'));
+        const zip = zipSync({
+            'SKILL.md': strToU8('hello'),
+            '../evil.txt': strToU8('nope'),
+        });
+        await extractZipToDir(new Uint8Array(zip), dir);
+        expect((await readFile(join(dir, 'SKILL.md'), 'utf8')).trim()).toBe('hello');
+        await expect(stat(join(dir, '..', 'evil.txt'))).rejects.toBeTruthy();
+    });
+    it('writes and reads lockfile', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'clawdhub-work-'));
+        await writeLockfile(workdir, {
+            version: 1,
+            skills: { demo: { version: '1.0.0', installedAt: 1 } },
+        });
+        const read = await readLockfile(workdir);
+        expect(read.skills.demo?.version).toBe('1.0.0');
+    });
+    it('returns empty lockfile on invalid json', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'clawdhub-work-bad-'));
+        await mkdir(join(workdir, '.clawdhub'), { recursive: true });
+        await writeFile(join(workdir, '.clawdhub', 'lock.json'), '{', 'utf8');
+        const read = await readLockfile(workdir);
+        expect(read).toEqual({ version: 1, skills: {} });
+    });
+    it('skips dotfiles and node_modules when listing text files', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'clawdhub-files-'));
+        await writeFile(join(workdir, 'SKILL.md'), 'hi', 'utf8');
+        await writeFile(join(workdir, '.secret.txt'), 'no', 'utf8');
+        await mkdir(join(workdir, 'node_modules'), { recursive: true });
+        await writeFile(join(workdir, 'node_modules', 'a.txt'), 'no', 'utf8');
+        const files = await listTextFiles(workdir);
+        expect(files.map((file) => file.relPath)).toEqual(['SKILL.md']);
+    });
+    it('respects .gitignore and .clawdhubignore', async () => {
+        const workdir = await mkdtemp(join(tmpdir(), 'clawdhub-ignore-'));
+        await writeFile(join(workdir, '.gitignore'), 'ignored.md\n', 'utf8');
+        await writeFile(join(workdir, '.clawdhubignore'), 'private.md\n', 'utf8');
+        await writeFile(join(workdir, 'SKILL.md'), 'hi', 'utf8');
+        await writeFile(join(workdir, 'ignored.md'), 'no', 'utf8');
+        await writeFile(join(workdir, 'private.md'), 'no', 'utf8');
+        await writeFile(join(workdir, 'public.json'), '{}', 'utf8');
+        const files = await listTextFiles(workdir);
+        const paths = files.map((file) => file.relPath).sort();
+        expect(paths).toEqual(['SKILL.md', 'public.json']);
+        expect(files.find((file) => file.relPath === 'SKILL.md')?.contentType).toMatch(/^text\//);
+        expect(files.find((file) => file.relPath === 'public.json')?.contentType).toBe('application/json');
+    });
+    it('hashes skill files deterministically', async () => {
+        const { fingerprint } = hashSkillFiles([
+            { relPath: 'b.txt', bytes: strToU8('b') },
+            { relPath: 'a.txt', bytes: strToU8('a') },
+        ]);
+        const expected = buildSkillFingerprint([
+            { path: 'a.txt', sha256: sha256Hex(strToU8('a')) },
+            { path: 'b.txt', sha256: sha256Hex(strToU8('b')) },
+        ]);
+        expect(fingerprint).toBe(expected);
+    });
+    it('hashes text files inside a downloaded zip deterministically', () => {
+        const zip = zipSync({
+            'SKILL.md': strToU8('hello'),
+            'notes.md': strToU8('world'),
+            'image.png': strToU8('nope'),
+        });
+        const { fingerprint } = hashSkillZip(new Uint8Array(zip));
+        const expected = buildSkillFingerprint([
+            { path: 'SKILL.md', sha256: sha256Hex(strToU8('hello')) },
+            { path: 'notes.md', sha256: sha256Hex(strToU8('world')) },
+        ]);
+        expect(fingerprint).toBe(expected);
+    });
+});
+//# sourceMappingURL=skills.test.js.map

package/dist/skills.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.test.js","sourceRoot":"","sources":["../src/skills.test.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,aAAa,GACd,MAAM,UAAU,CAAA;AAEjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC;SAC/B,CAAC,CAAA;QACF,MAAM,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QAE/C,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5E,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;QAC/D,MAAM,aAAa,CAAC,OAAO,EAAE;YAC3B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;SACvD,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;QACnE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QACrE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAChE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;QACjE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;QACpE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;QACzE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAE3D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAC5E,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC;YACrC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;YACzC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;SAC1C,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;YAClD,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;SACnD,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5B,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAA;QACF,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;YACzD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;SAC1D,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/types.d.ts

@@ -0,0 +1,7 @@
+export type Lockfile = {
+    version: 1;
+    skills: Record<string, {
+        version: string | null;
+        installedAt: number;
+    }>;
+};

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "clawdhub",
+  "version": "0.0.1",
+  "description": "ClawdHub CLI — install, update, search, and publish agent skills.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "clawdhub": "bin/clawdhub.js"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "node --enable-source-maps dist/cli.js",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@clack/prompts": "^0.11.0",
+    "clawdhub-schema": "^0.0.1",
+    "commander": "^14.0.2",
+    "fflate": "^0.8.2",
+    "ignore": "^7.0.5",
+    "mime": "^4.1.0",
+    "ora": "^9.0.0",
+    "p-retry": "^7.1.1",
+    "semver": "^7.7.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.0.3",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}