codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
@@ -0,0 +1,353 @@
1
+ import fs from "node:fs";
2
+ import fsp from "node:fs/promises";
3
+ import path from "node:path";
4
+ import os from "node:os";
5
+ import { createHash } from "node:crypto";
6
+ import { isSubpath, normalizeRelPath } from "../guard.js";
7
+ import { normalizeGuidancePathInput, readGuidanceText } from "./safeTextReader.js";
8
+ import { parseSkillMetadata } from "./skillMetadata.js";
9
+ import { parseOpenAISkillMetadata } from "./openaiSkillMetadata.js";
10
+ import { redactSensitiveText } from "../redact.js";
11
+ function skillDiagnostic(code, candidatePath, count = 1) {
12
+ const actions = {
13
+ SKILL_METADATA_INVALID: "Fix the Skill frontmatter or remove the invalid candidate.",
14
+ SKILL_SCAN_TRUNCATED: "Reduce Skill candidates or raise the bounded candidate limit.",
15
+ SKILL_RESULTS_TRUNCATED: "Use a narrower target or raise the bounded returned-Skill limit.",
16
+ SKILL_PATH_REDACTED: "Rename the Skill path so it does not resemble a credential."
17
+ };
18
+ return {
19
+ status: "warning",
20
+ code,
21
+ path: candidatePath === null ? null : redactSensitiveText(candidatePath),
22
+ count,
23
+ action: actions[code]
24
+ };
25
+ }
26
+ async function targetDirectory(root, targetPath) {
27
+ const requestedTargetPath = targetPath || ".";
28
+ if (redactSensitiveText(requestedTargetPath) !== requestedTargetPath)
29
+ throw new Error("Target is blocked by safety rules.");
30
+ const normalizedTargetPath = normalizeGuidancePathInput(requestedTargetPath);
31
+ const requested = path.resolve(root, normalizedTargetPath);
32
+ if (!isSubpath(requested, root))
33
+ throw new Error("Target escapes workspace.");
34
+ try {
35
+ const real = await fsp.realpath(requested);
36
+ if (!isSubpath(real, root))
37
+ throw new Error("Target resolves outside workspace.");
38
+ const stat = await fsp.stat(real);
39
+ return stat.isDirectory() ? real : path.dirname(real);
40
+ }
41
+ catch (error) {
42
+ if (error instanceof Error && error.message.includes("outside"))
43
+ throw error;
44
+ let current = path.dirname(requested);
45
+ while (!fs.existsSync(current)) {
46
+ const parent = path.dirname(current);
47
+ if (parent === current)
48
+ break;
49
+ current = parent;
50
+ }
51
+ const real = await fsp.realpath(current);
52
+ if (!isSubpath(real, root))
53
+ throw new Error("Target parent resolves outside workspace.");
54
+ return (await fsp.stat(real)).isDirectory() ? real : path.dirname(real);
55
+ }
56
+ }
57
+ function ancestors(root, targetDir) {
58
+ const result = [];
59
+ let current = targetDir;
60
+ while (isSubpath(current, root)) {
61
+ result.push(current);
62
+ if (current === root)
63
+ break;
64
+ current = path.dirname(current);
65
+ }
66
+ return result;
67
+ }
68
+ function selector(root, absPath) {
69
+ return `$WORKSPACE/${normalizeRelPath(path.relative(root, absPath))}`;
70
+ }
71
+ async function boundedDirents(directory, limit) {
72
+ const entries = [];
73
+ let handle;
74
+ try {
75
+ handle = await fsp.opendir(directory);
76
+ for await (const entry of handle) {
77
+ if (entries.length >= Math.max(1, limit))
78
+ return { entries, truncated: true };
79
+ entries.push(entry);
80
+ }
81
+ return { entries, truncated: false };
82
+ }
83
+ catch {
84
+ return { entries: [], truncated: false };
85
+ }
86
+ finally {
87
+ await handle?.close().catch(() => undefined);
88
+ }
89
+ }
90
+ async function readRecord(root, skillFile, proximity, blockedGlobs, identity) {
91
+ const loaded = await readGuidanceText({ root, relativePath: path.relative(root, skillFile), maxBytes: 100_000, blockedGlobs });
92
+ if (!loaded.ok)
93
+ return null;
94
+ const parsed = parseSkillMetadata(loaded.text, { directoryName: path.basename(path.dirname(skillFile)) });
95
+ if (!parsed.ok)
96
+ return null;
97
+ let companion = { implicitInvocation: true, requirementsState: "none" };
98
+ const companionPath = path.join(path.dirname(skillFile), "agents", "openai.yaml");
99
+ if (fs.existsSync(companionPath)) {
100
+ const companionLoaded = await readGuidanceText({ root, relativePath: path.relative(root, companionPath), maxBytes: 16_384, blockedGlobs });
101
+ if (!companionLoaded.ok)
102
+ return null;
103
+ const parsedCompanion = parseOpenAISkillMetadata(companionLoaded.text);
104
+ if (!parsedCompanion)
105
+ return null;
106
+ companion = parsedCompanion;
107
+ }
108
+ return {
109
+ name: parsed.metadata.name,
110
+ description: parsed.metadata.description,
111
+ source: identity?.source ?? "workspace",
112
+ path: identity?.path ?? selector(root, skillFile),
113
+ compatibility: parsed.metadata.compatibility ?? null,
114
+ loadable: true,
115
+ implicitInvocation: companion.implicitInvocation,
116
+ requirementsState: companion.requirementsState,
117
+ implicitEligible: companion.implicitInvocation && companion.requirementsState === "none",
118
+ specCompliant: parsed.specCompliant,
119
+ legacyParse: parsed.legacyParse,
120
+ metadataRedacted: parsed.metadataRedacted,
121
+ proximity,
122
+ warnings: parsed.warnings,
123
+ absPath: skillFile,
124
+ root
125
+ };
126
+ }
127
+ async function collectSkillFiles(root, maxCandidates, maxDepth) {
128
+ const files = [];
129
+ let truncated = false;
130
+ let inspected = 0;
131
+ async function walk(directory, depth) {
132
+ if (depth < 0 || truncated)
133
+ return;
134
+ const remaining = Math.max(1, maxCandidates - inspected);
135
+ const bounded = await boundedDirents(directory, remaining);
136
+ const entries = bounded.entries;
137
+ if (bounded.truncated)
138
+ truncated = true;
139
+ entries.sort((left, right) => left.name.localeCompare(right.name));
140
+ for (const entry of entries) {
141
+ if (inspected >= maxCandidates) {
142
+ truncated = true;
143
+ return;
144
+ }
145
+ inspected += 1;
146
+ const abs = path.join(directory, entry.name);
147
+ if (entry.isFile() && entry.name === "SKILL.md")
148
+ files.push(abs);
149
+ else if (entry.isDirectory() || entry.isSymbolicLink())
150
+ await walk(abs, depth - 1);
151
+ if (truncated)
152
+ return;
153
+ }
154
+ }
155
+ await walk(root, maxDepth);
156
+ return { files, truncated };
157
+ }
158
+ function rootId(root) {
159
+ return `root_${createHash("sha256").update(root).digest("hex").slice(0, 16)}`;
160
+ }
161
+ const SOURCE_RANK = {
162
+ workspace: 0,
163
+ user: 1,
164
+ plugin: 2,
165
+ other: 3
166
+ };
167
+ export async function discoverExplicitGlobalSkills(options) {
168
+ const configuredCodexDir = fs.existsSync(options.codexDir)
169
+ ? fs.realpathSync.native(options.codexDir)
170
+ : path.resolve(options.codexDir);
171
+ const candidates = [];
172
+ let scanTruncated = false;
173
+ const roots = [
174
+ { root: path.join(configuredCodexDir, "skills"), source: "user", prefix: "$CODEX_DIR/skills", depth: 4 },
175
+ { root: path.join(os.homedir(), ".agents", "skills"), source: "user", prefix: "$USER_SKILLS", depth: 2 },
176
+ { root: path.join(configuredCodexDir, "plugins", "cache"), source: "plugin", prefix: "", depth: 10 }
177
+ ];
178
+ for (const item of roots) {
179
+ if (!fs.existsSync(item.root))
180
+ continue;
181
+ const realRoot = fs.realpathSync.native(item.root);
182
+ const remaining = Math.max(1, options.maxCandidates - candidates.length);
183
+ const found = await collectSkillFiles(realRoot, remaining, item.depth);
184
+ for (const file of found.files) {
185
+ const relative = normalizeRelPath(path.relative(realRoot, file));
186
+ candidates.push({
187
+ file,
188
+ root: realRoot,
189
+ source: item.source,
190
+ publicPath: item.source === "plugin"
191
+ ? `$PLUGIN_ROOT/${rootId(realRoot)}/${relative}`
192
+ : `${item.prefix}/${relative}`
193
+ });
194
+ }
195
+ scanTruncated ||= found.truncated;
196
+ if (candidates.length >= options.maxCandidates) {
197
+ scanTruncated = true;
198
+ break;
199
+ }
200
+ }
201
+ const valid = [];
202
+ let invalidCount = 0;
203
+ const diagnostics = [];
204
+ for (const candidate of candidates) {
205
+ if (redactSensitiveText(candidate.publicPath) !== candidate.publicPath) {
206
+ invalidCount += 1;
207
+ diagnostics.push(skillDiagnostic("SKILL_PATH_REDACTED", candidate.publicPath));
208
+ continue;
209
+ }
210
+ const record = await readRecord(candidate.root, candidate.file, 0, options.blockedGlobs, { source: candidate.source, path: candidate.publicPath });
211
+ if (record)
212
+ valid.push(record);
213
+ else {
214
+ invalidCount += 1;
215
+ diagnostics.push(skillDiagnostic("SKILL_METADATA_INVALID", candidate.publicPath));
216
+ }
217
+ }
218
+ valid.sort((left, right) => SOURCE_RANK[left.source] - SOURCE_RANK[right.source] || left.name.localeCompare(right.name) || left.path.localeCompare(right.path));
219
+ const returnedTruncated = valid.length > options.maxSkills;
220
+ if (scanTruncated)
221
+ diagnostics.push(skillDiagnostic("SKILL_SCAN_TRUNCATED", null));
222
+ if (returnedTruncated)
223
+ diagnostics.push(skillDiagnostic("SKILL_RESULTS_TRUNCATED", null, valid.length - options.maxSkills));
224
+ return {
225
+ skills: valid.slice(0, options.maxSkills),
226
+ candidateCount: candidates.length,
227
+ validCount: valid.length,
228
+ invalidCount,
229
+ scanComplete: !scanTruncated,
230
+ scanTruncated,
231
+ returnedTruncated,
232
+ diagnostics
233
+ };
234
+ }
235
+ export async function resolveExactGlobalSkill(options) {
236
+ if (redactSensitiveText(options.selector) !== options.selector)
237
+ throw new Error("Unsafe global Skill selector.");
238
+ const configuredCodexDir = fs.existsSync(options.codexDir) ? fs.realpathSync.native(options.codexDir) : path.resolve(options.codexDir);
239
+ let root;
240
+ let relative;
241
+ let source;
242
+ if (options.selector.startsWith("$CODEX_DIR/skills/")) {
243
+ root = fs.realpathSync.native(path.join(configuredCodexDir, "skills"));
244
+ relative = options.selector.slice("$CODEX_DIR/skills/".length);
245
+ source = "user";
246
+ }
247
+ else if (options.selector.startsWith("$USER_SKILLS/")) {
248
+ root = fs.realpathSync.native(path.join(os.homedir(), ".agents", "skills"));
249
+ relative = options.selector.slice("$USER_SKILLS/".length);
250
+ source = "user";
251
+ }
252
+ else {
253
+ const pluginRoot = fs.realpathSync.native(path.join(configuredCodexDir, "plugins", "cache"));
254
+ const prefix = `$PLUGIN_ROOT/${rootId(pluginRoot)}/`;
255
+ if (!options.selector.startsWith(prefix))
256
+ throw new Error("Unknown configured global Skill root.");
257
+ root = pluginRoot;
258
+ relative = options.selector.slice(prefix.length);
259
+ source = "plugin";
260
+ }
261
+ const normalized = relative.replace(/\\/g, "/");
262
+ if (!normalized || path.posix.normalize(normalized) !== normalized || normalized.startsWith("../") || !normalized.endsWith("/SKILL.md"))
263
+ throw new Error("Unsafe global Skill selector.");
264
+ const abs = path.resolve(root, ...normalized.split("/"));
265
+ if (!isSubpath(abs, root))
266
+ throw new Error("Global Skill boundary violation.");
267
+ const record = await readRecord(root, abs, 0, options.blockedGlobs, { source, path: options.selector });
268
+ if (!record)
269
+ throw new Error("Global Skill unavailable.");
270
+ return record;
271
+ }
272
+ export async function discoverTargetSkills(options) {
273
+ const root = fs.realpathSync.native(path.resolve(options.root));
274
+ const targetDir = await targetDirectory(root, options.targetPath);
275
+ const candidates = [];
276
+ let scanTruncated = false;
277
+ for (const [proximity, directory] of ancestors(root, targetDir).entries()) {
278
+ const skillsDir = path.join(directory, ".agents", "skills");
279
+ const remaining = Math.max(1, options.maxCandidates - candidates.length);
280
+ const bounded = await boundedDirents(skillsDir, remaining);
281
+ const entries = bounded.entries;
282
+ scanTruncated ||= bounded.truncated;
283
+ entries.sort((left, right) => left.name.localeCompare(right.name));
284
+ for (const entry of entries) {
285
+ if (candidates.length >= Math.max(1, options.maxCandidates)) {
286
+ scanTruncated = true;
287
+ break;
288
+ }
289
+ const possible = path.join(skillsDir, entry.name, "SKILL.md");
290
+ candidates.push({ file: possible, proximity });
291
+ }
292
+ if (scanTruncated)
293
+ break;
294
+ }
295
+ const valid = [];
296
+ let invalidCount = 0;
297
+ const diagnostics = [];
298
+ for (const candidate of candidates) {
299
+ const publicPath = selector(root, candidate.file);
300
+ if (redactSensitiveText(publicPath) !== publicPath) {
301
+ invalidCount += 1;
302
+ diagnostics.push(skillDiagnostic("SKILL_PATH_REDACTED", publicPath));
303
+ continue;
304
+ }
305
+ const record = await readRecord(root, candidate.file, candidate.proximity, options.blockedGlobs);
306
+ if (record)
307
+ valid.push(record);
308
+ else {
309
+ invalidCount += 1;
310
+ diagnostics.push(skillDiagnostic("SKILL_METADATA_INVALID", publicPath));
311
+ }
312
+ }
313
+ valid.sort((left, right) => left.proximity - right.proximity || left.name.localeCompare(right.name) || left.path.localeCompare(right.path));
314
+ const maxSkills = Math.max(1, options.maxSkills);
315
+ const returnedTruncated = valid.length > maxSkills;
316
+ if (scanTruncated)
317
+ diagnostics.push(skillDiagnostic("SKILL_SCAN_TRUNCATED", null));
318
+ if (returnedTruncated)
319
+ diagnostics.push(skillDiagnostic("SKILL_RESULTS_TRUNCATED", null, valid.length - maxSkills));
320
+ return {
321
+ skills: valid.slice(0, maxSkills),
322
+ candidateCount: candidates.length,
323
+ validCount: valid.length,
324
+ invalidCount,
325
+ scanComplete: !scanTruncated,
326
+ scanTruncated,
327
+ returnedTruncated,
328
+ diagnostics
329
+ };
330
+ }
331
+ export async function resolveExactWorkspaceSkill(options) {
332
+ if (redactSensitiveText(options.selector) !== options.selector)
333
+ throw new Error("Unsafe Skill selector.");
334
+ if (!options.selector.startsWith("$WORKSPACE/"))
335
+ throw new Error("Standard workspace selector required.");
336
+ const relative = options.selector.slice("$WORKSPACE/".length).replace(/\\/g, "/");
337
+ if (!relative || path.posix.normalize(relative) !== relative || path.posix.isAbsolute(relative) || relative.startsWith("../"))
338
+ throw new Error("Unsafe Skill selector.");
339
+ const root = fs.realpathSync.native(path.resolve(options.root));
340
+ const targetDir = await targetDirectory(root, options.targetPath);
341
+ const abs = path.resolve(root, relative);
342
+ if (path.basename(abs) !== "SKILL.md" || !isSubpath(abs, root))
343
+ throw new Error("Skill selector boundary violation.");
344
+ const scopeRoots = ancestors(root, targetDir).map((directory) => path.join(directory, ".agents", "skills"));
345
+ if (!scopeRoots.some((scopeRoot) => isSubpath(abs, scopeRoot)))
346
+ throw new Error("Skill is outside the target scope.");
347
+ const proximity = scopeRoots.findIndex((scopeRoot) => isSubpath(abs, scopeRoot));
348
+ const record = await readRecord(root, abs, proximity, options.blockedGlobs);
349
+ if (!record)
350
+ throw new Error("Skill metadata is unavailable.");
351
+ return record;
352
+ }
353
+ //# sourceMappingURL=skillDiscovery.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"skillDiscovery.js","sourceRoot":"","sources":["../../src/guidance/skillDiscovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAwCnD,SAAS,eAAe,CAAC,IAAsC,EAAE,aAA4B,EAAE,KAAK,GAAG,CAAC;IACtG,MAAM,OAAO,GAAqD;QAChE,sBAAsB,EAAE,4DAA4D;QACpF,oBAAoB,EAAE,+DAA+D;QACrF,uBAAuB,EAAE,kEAAkE;QAC3F,mBAAmB,EAAE,6DAA6D;KACnF,CAAC;IACF,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,IAAI;QACJ,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC;QACxE,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,UAAkB;IAC7D,MAAM,mBAAmB,GAAG,UAAU,IAAI,GAAG,CAAC;IAC9C,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5H,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAC7E,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM;YAC9B,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACzF,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM;QAC5B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO,cAAc,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAa;IAC5D,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,YAAsB,EACtB,QAAkE;IAElE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/H,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,SAAS,GAAwB,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClF,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3I,IAAI,CAAC,eAAe,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,eAAe,GAAG,wBAAwB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAClC,SAAS,GAAG,eAAe,CAAC;IAC9B,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;QAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;QACxC,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,WAAW;QACvC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QACjD,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,IAAI,IAAI;QACpD,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,gBAAgB,EAAE,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,iBAAiB,KAAK,MAAM;QACxF,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,SAAS;QAClB,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,aAAqB,EAAE,QAAgB;IACpF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,UAAU,IAAI,CAAC,SAAiB,EAAE,KAAa;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,SAAS;YAAE,OAAO;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,SAAS;YAAE,SAAS,GAAG,IAAI,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7D,SAAS,IAAI,CAAC,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACnF,IAAI,SAAS;gBAAE,OAAO;QACxB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,QAAQ,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,WAAW,GAAkD;IACjE,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAKlD;IACC,MAAM,kBAAkB,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,UAAU,GAAyF,EAAE,CAAC;IAC5G,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG;QACZ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KAC9G,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAClC,CAAC,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE;oBAChD,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QACD,aAAa,KAAK,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAAC,aAAa,GAAG,IAAI,CAAC;YAAC,MAAM;QAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAA+B,EAAE,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YACvE,YAAY,IAAI,CAAC,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QACnJ,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAAM,CAAC;YACpC,YAAY,IAAI,CAAC,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChK,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAC3D,IAAI,aAAa;QAAE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,IAAI,iBAAiB;QAAE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5H,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;QACzC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,YAAY;QACZ,YAAY,EAAE,CAAC,aAAa;QAC5B,aAAa;QACb,iBAAiB;QACjB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAI7C;IACC,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjH,MAAM,kBAAkB,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvI,IAAI,IAAY,CAAC;IACjB,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAyB,CAAC;IAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5E,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,gBAAgB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACnG,IAAI,GAAG,UAAU,CAAC;QAClB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1L,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAM1C;IACC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,UAAU,GAA+C,EAAE,CAAC;IAClE,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,aAAa,KAAK,OAAO,CAAC,SAAS,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,aAAa;YAAE,MAAM;IAC3B,CAAC;IACD,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAA+B,EAAE,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,mBAAmB,CAAC,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACnD,YAAY,IAAI,CAAC,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACjG,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAAM,CAAC;YACpC,YAAY,IAAI,CAAC,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5I,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACnD,IAAI,aAAa;QAAE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,IAAI,iBAAiB;QAAE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACpH,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,YAAY;QACZ,YAAY,EAAE,CAAC,aAAa;QAC5B,aAAa;QACb,iBAAiB;QACjB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAKhD;IACC,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1G,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1G,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzK,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtH,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtH,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,115 @@
1
+ import { parseDocument } from "yaml";
2
+ import { redactSensitiveText } from "../redact.js";
3
+ const MAX_FRONTMATTER_BYTES = 16_384;
4
+ const MAX_NAME_CHARS = 240;
5
+ const MAX_DESCRIPTION_CHARS = 4_000;
6
+ const MAX_OPTIONAL_CHARS = 1_000;
7
+ const MAX_DEPTH = 8;
8
+ const SAFE_NAME = /^[A-Za-z0-9_-]+$/;
9
+ const SPEC_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
10
+ function frontmatter(text) {
11
+ const source = text.startsWith("\ufeff") ? text.slice(1) : text;
12
+ if (!source.startsWith("---\n") && !source.startsWith("---\r\n"))
13
+ return null;
14
+ const match = source.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
15
+ return match?.[1] ?? null;
16
+ }
17
+ function depth(value, current = 0) {
18
+ if (current > MAX_DEPTH)
19
+ return current;
20
+ if (!value || typeof value !== "object")
21
+ return current;
22
+ let maximum = current + 1;
23
+ const children = Array.isArray(value)
24
+ ? value
25
+ : Object.values(value);
26
+ for (const child of children)
27
+ maximum = Math.max(maximum, depth(child, current + 1));
28
+ return maximum;
29
+ }
30
+ function boundedString(value, max) {
31
+ if (typeof value !== "string")
32
+ return undefined;
33
+ const normalized = value.replace(/[\r\n\t]+/g, " ").replace(/\s+/g, " ").trim();
34
+ if (!normalized || normalized.length > max || /[\u0000-\u001f\u007f]/.test(normalized))
35
+ return undefined;
36
+ return normalized;
37
+ }
38
+ function sanitize(value) {
39
+ const safe = redactSensitiveText(value);
40
+ return { value: safe, redacted: safe !== value };
41
+ }
42
+ export function parseSkillMetadata(text, options) {
43
+ const source = frontmatter(text);
44
+ if (source === null || Buffer.byteLength(source, "utf8") > MAX_FRONTMATTER_BYTES) {
45
+ return { ok: false, code: "SKILL_METADATA_INVALID", warnings: [] };
46
+ }
47
+ let value;
48
+ try {
49
+ const document = parseDocument(source, {
50
+ schema: "core",
51
+ customTags: [],
52
+ strict: true,
53
+ uniqueKeys: true
54
+ });
55
+ if (document.errors.length > 0 || document.warnings.some((warning) => warning.code === "TAG_RESOLVE_FAILED")) {
56
+ return { ok: false, code: "SKILL_METADATA_INVALID", warnings: [] };
57
+ }
58
+ value = document.toJS({ maxAliasCount: 0 });
59
+ }
60
+ catch {
61
+ return { ok: false, code: "SKILL_METADATA_INVALID", warnings: [] };
62
+ }
63
+ if (!value || typeof value !== "object" || Array.isArray(value) || depth(value) > MAX_DEPTH) {
64
+ return { ok: false, code: "SKILL_METADATA_INVALID", warnings: [] };
65
+ }
66
+ const raw = value;
67
+ const rawName = boundedString(raw.name, MAX_NAME_CHARS);
68
+ const rawDescription = boundedString(raw.description, MAX_DESCRIPTION_CHARS);
69
+ if (!rawName || !rawDescription || !SAFE_NAME.test(rawName)) {
70
+ return { ok: false, code: "SKILL_METADATA_INVALID", warnings: [] };
71
+ }
72
+ const warnings = [];
73
+ const specCompliant = rawName.length <= 64 && SPEC_NAME.test(rawName) && rawName === options.directoryName;
74
+ if (!specCompliant)
75
+ warnings.push("SKILL_METADATA_COMPATIBILITY_WARNING");
76
+ const name = sanitize(rawName);
77
+ const description = sanitize(rawDescription);
78
+ let metadataRedacted = name.redacted || description.redacted;
79
+ const metadata = { name: name.value, description: description.value };
80
+ for (const [inputKey, outputKey] of [["license", "license"], ["compatibility", "compatibility"], ["allowed-tools", "allowedTools"]]) {
81
+ if (!(inputKey in raw))
82
+ continue;
83
+ const item = boundedString(raw[inputKey], MAX_OPTIONAL_CHARS);
84
+ if (!item) {
85
+ warnings.push("SKILL_METADATA_COMPATIBILITY_WARNING");
86
+ continue;
87
+ }
88
+ const sanitized = sanitize(item);
89
+ metadataRedacted ||= sanitized.redacted;
90
+ metadata[outputKey] = sanitized.value;
91
+ }
92
+ if ("metadata" in raw) {
93
+ if (!raw.metadata || typeof raw.metadata !== "object" || Array.isArray(raw.metadata)) {
94
+ warnings.push("SKILL_METADATA_COMPATIBILITY_WARNING");
95
+ }
96
+ else {
97
+ const entries = Object.entries(raw.metadata);
98
+ if (entries.length > 32 || entries.some(([key, item]) => !boundedString(key, 120) || !boundedString(item, 500))) {
99
+ warnings.push("SKILL_METADATA_COMPATIBILITY_WARNING");
100
+ }
101
+ else {
102
+ metadata.metadata = Object.fromEntries(entries.map(([key, item]) => [key, String(item)]));
103
+ }
104
+ }
105
+ }
106
+ return {
107
+ ok: true,
108
+ metadata,
109
+ metadataRedacted,
110
+ specCompliant,
111
+ legacyParse: options.legacy === true,
112
+ warnings: [...new Set(warnings)]
113
+ };
114
+ }
115
+ //# sourceMappingURL=skillMetadata.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"skillMetadata.js","sourceRoot":"","sources":["../../src/guidance/skillMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,SAAS,GAAG,4BAA4B,CAAC;AA0B/C,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,OAAO,GAAG,CAAC;IACxC,IAAI,OAAO,GAAG,SAAS;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACxD,IAAI,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAW;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACzG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OAAoD;IAEpD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,qBAAqB,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;YAC7G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC;IAC3G,IAAI,CAAC,aAAa;QAAE,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,gBAAgB,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC;IAC7D,MAAM,QAAQ,GAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;IAErF,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAU,EAAE,CAAC;QAC7I,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,gBAAgB,KAAK,SAAS,CAAC,QAAQ,CAAC;QACxC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;IACxC,CAAC;IAED,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAmC,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChH,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ;QACR,gBAAgB;QAChB,aAAa;QACb,WAAW,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI;QACpC,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,146 @@
1
+ import fs from "node:fs";
2
+ import fsp from "node:fs/promises";
3
+ import path from "node:path";
4
+ import { isSubpath, normalizeRelPath, PathGuard } from "../guard.js";
5
+ import { readGuidanceText } from "./safeTextReader.js";
6
+ import { redactSensitiveText } from "../redact.js";
7
+ const RESOURCE_DIRS = ["references", "scripts", "assets"];
8
+ export function normalizeSkillResourcePath(input) {
9
+ const normalized = input.replace(/\\/g, "/").replace(/\/{2,}/g, "/").replace(/^(?:\.\/)+/, "");
10
+ if (!normalized || normalized.trim() !== normalized || normalized.startsWith("/") || /^[A-Za-z]:/.test(normalized) || normalized.includes(":") || /[\u0000-\u001f\u007f]/.test(normalized)) {
11
+ throw new Error("SKILL_RESOURCE_BOUNDARY_VIOLATION");
12
+ }
13
+ const segments = normalized.split("/");
14
+ if (segments.some((segment) => !segment || segment === "." || segment === ".." || segment.endsWith(".") || segment.endsWith(" "))) {
15
+ throw new Error("SKILL_RESOURCE_BOUNDARY_VIOLATION");
16
+ }
17
+ return segments.join("/");
18
+ }
19
+ function validatedRoots(rootInput, skillRootInput) {
20
+ const root = fs.realpathSync.native(path.resolve(rootInput));
21
+ const skillRoot = fs.realpathSync.native(path.resolve(skillRootInput));
22
+ if (!isSubpath(skillRoot, root))
23
+ throw new Error("SKILL_RESOURCE_BOUNDARY_VIOLATION");
24
+ return { root, skillRoot };
25
+ }
26
+ export async function loadSkillResource(options) {
27
+ const { root, skillRoot } = validatedRoots(options.root, options.skillRoot);
28
+ const resourcePath = normalizeSkillResourcePath(options.resourcePath);
29
+ if (redactSensitiveText(resourcePath) !== resourcePath)
30
+ throw new Error("SKILL_RESOURCE_BLOCKED");
31
+ const abs = path.resolve(skillRoot, ...resourcePath.split("/"));
32
+ if (!isSubpath(abs, skillRoot))
33
+ throw new Error("SKILL_RESOURCE_BOUNDARY_VIOLATION");
34
+ const relativeRootPath = normalizeRelPath(path.relative(root, abs));
35
+ const guard = new PathGuard({ blockedGlobs: options.blockedGlobs });
36
+ if (guard.isBlockedRelativePath(relativeRootPath) || guard.isBlockedRelativePath(resourcePath)) {
37
+ throw new Error("SKILL_RESOURCE_BLOCKED");
38
+ }
39
+ const loaded = await readGuidanceText({ root, relativePath: relativeRootPath, maxBytes: options.maxBytes, blockedGlobs: options.blockedGlobs });
40
+ if (!loaded.ok) {
41
+ const code = loaded.reason === "READ_BLOCKED"
42
+ ? "SKILL_RESOURCE_BLOCKED"
43
+ : loaded.reason === "READ_BOUNDARY_VIOLATION" || loaded.reason === "READ_IDENTITY_CHANGED"
44
+ ? "SKILL_RESOURCE_BOUNDARY_VIOLATION"
45
+ : loaded.reason === "READ_NOT_TEXT" || loaded.reason === "READ_NOT_REGULAR"
46
+ ? "SKILL_RESOURCE_NOT_TEXT"
47
+ : loaded.reason === "READ_HARDLINK_UNSAFE"
48
+ ? "SKILL_RESOURCE_HARDLINK_UNSAFE"
49
+ : "SKILL_RESOURCE_READ_FAILED";
50
+ throw new Error(code);
51
+ }
52
+ const currentReal = await fsp.realpath(abs);
53
+ if (!isSubpath(currentReal, skillRoot))
54
+ throw new Error("SKILL_RESOURCE_BOUNDARY_VIOLATION");
55
+ return { path: resourcePath, text: loaded.text, sourceBytes: loaded.sourceBytes, returnedBytes: loaded.returnedBytes };
56
+ }
57
+ export async function indexSkillResources(options) {
58
+ const { root, skillRoot } = validatedRoots(options.root, options.skillRoot);
59
+ const guard = new PathGuard({ blockedGlobs: options.blockedGlobs });
60
+ const limit = Math.max(1, Math.floor(options.maxEntries));
61
+ const paths = [];
62
+ let truncated = false;
63
+ const visitedDirectories = new Set();
64
+ let inspectedDirectories = 0;
65
+ let inspectedEntries = 0;
66
+ const maxDirectories = Math.max(16, limit * 8);
67
+ const maxEntriesInspected = Math.max(32, limit * 16);
68
+ async function walk(directory, prefix) {
69
+ let canonicalDirectory;
70
+ try {
71
+ canonicalDirectory = await fsp.realpath(directory);
72
+ }
73
+ catch {
74
+ return;
75
+ }
76
+ const directoryKey = process.platform === "win32" ? canonicalDirectory.toLocaleLowerCase("en-US") : canonicalDirectory;
77
+ if (visitedDirectories.has(directoryKey))
78
+ return;
79
+ if (inspectedDirectories >= maxDirectories) {
80
+ truncated = true;
81
+ return;
82
+ }
83
+ visitedDirectories.add(directoryKey);
84
+ inspectedDirectories += 1;
85
+ const entries = [];
86
+ let handle;
87
+ try {
88
+ handle = await fsp.opendir(canonicalDirectory);
89
+ for await (const entry of handle) {
90
+ if (inspectedEntries >= maxEntriesInspected) {
91
+ truncated = true;
92
+ break;
93
+ }
94
+ inspectedEntries += 1;
95
+ entries.push(entry);
96
+ }
97
+ }
98
+ catch {
99
+ return;
100
+ }
101
+ finally {
102
+ await handle?.close().catch(() => undefined);
103
+ }
104
+ entries.sort((left, right) => left.name.localeCompare(right.name));
105
+ for (const entry of entries) {
106
+ if (paths.length >= limit) {
107
+ truncated = true;
108
+ return;
109
+ }
110
+ const relative = `${prefix}/${entry.name}`;
111
+ if (guard.isBlockedRelativePath(relative))
112
+ continue;
113
+ if (redactSensitiveText(relative) !== relative)
114
+ continue;
115
+ const abs = path.join(canonicalDirectory, entry.name);
116
+ let real;
117
+ try {
118
+ real = await fsp.realpath(abs);
119
+ }
120
+ catch {
121
+ continue;
122
+ }
123
+ if (!isSubpath(real, skillRoot) || !isSubpath(real, root))
124
+ continue;
125
+ const workspaceRelative = normalizeRelPath(path.relative(root, real));
126
+ if (guard.isBlockedRelativePath(workspaceRelative))
127
+ continue;
128
+ const stat = await fsp.stat(real).catch(() => null);
129
+ if (!stat)
130
+ continue;
131
+ if (stat.isDirectory())
132
+ await walk(real, relative);
133
+ else if (stat.isFile())
134
+ paths.push(relative);
135
+ if (truncated)
136
+ return;
137
+ }
138
+ }
139
+ for (const name of RESOURCE_DIRS) {
140
+ await walk(path.join(skillRoot, name), name);
141
+ if (truncated)
142
+ break;
143
+ }
144
+ return { paths, truncated };
145
+ }
146
+ //# sourceMappingURL=skillResources.js.map