javi-forge 1.6.0 → 1.7.0

package/dist/commands/plugin.js

@@ -1,6 +1,6 @@
-import { installPlugin, removePlugin, listInstalledPlugins, validatePlugin, searchRegistry, syncPlugins, } from '../lib/plugin.js';
-import { exportPluginAsAgentSkills, importAgentSkillsPackage } from '../lib/agent-skills.js';
-import { exportPluginAsCodexToml } from '../lib/codex-export.js';
+import { exportPluginAsAgentSkills, generateGlobalSkillsJson, generateProjectSkillsJson, importAgentSkillsPackage, } from "../lib/agent-skills.js";
+import { exportPluginAsCodexToml } from "../lib/codex-export.js";
+import { installPlugin, listInstalledPlugins, removePlugin, searchRegistry, syncPlugins, validatePlugin, } from "../lib/plugin.js";
 function report(onStep, id, label, status, detail) {
     onStep({ id, label, status, detail });
 }
@@ -8,140 +8,185 @@ function report(onStep, id, label, status, detail) {
  * Add (install) a plugin from a GitHub source.
  */
 export async function runPluginAdd(source, dryRun, onStep) {
-    const stepId = 'plugin-add';
-    report(onStep, stepId, `Install plugin: ${source}`, 'running');
+    const stepId = "plugin-add";
+    report(onStep, stepId, `Install plugin: ${source}`, "running");
     const result = await installPlugin(source, { dryRun });
     if (result.success) {
-        report(onStep, stepId, `Install plugin: ${source}`, 'done', dryRun ? `dry-run: would install ${result.name}` : `installed ${result.name}`);
+        report(onStep, stepId, `Install plugin: ${source}`, "done", dryRun
+            ? `dry-run: would install ${result.name}`
+            : `installed ${result.name}`);
     }
     else {
-        report(onStep, stepId, `Install plugin: ${source}`, 'error', result.error);
+        report(onStep, stepId, `Install plugin: ${source}`, "error", result.error);
     }
 }
 /**
  * Remove an installed plugin by name.
  */
 export async function runPluginRemove(name, dryRun, onStep) {
-    const stepId = 'plugin-remove';
-    report(onStep, stepId, `Remove plugin: ${name}`, 'running');
+    const stepId = "plugin-remove";
+    report(onStep, stepId, `Remove plugin: ${name}`, "running");
     const result = await removePlugin(name, { dryRun });
     if (result.success) {
-        report(onStep, stepId, `Remove plugin: ${name}`, 'done', dryRun ? `dry-run: would remove ${name}` : `removed ${name}`);
+        report(onStep, stepId, `Remove plugin: ${name}`, "done", dryRun ? `dry-run: would remove ${name}` : `removed ${name}`);
     }
     else {
-        report(onStep, stepId, `Remove plugin: ${name}`, 'error', result.error);
+        report(onStep, stepId, `Remove plugin: ${name}`, "error", result.error);
     }
 }
 /**
  * List all installed plugins.
  */
 export async function runPluginList(onStep) {
-    const stepId = 'plugin-list';
-    report(onStep, stepId, 'List installed plugins', 'running');
+    const stepId = "plugin-list";
+    report(onStep, stepId, "List installed plugins", "running");
     const plugins = await listInstalledPlugins();
     if (plugins.length === 0) {
-        report(onStep, stepId, 'List installed plugins', 'done', 'no plugins installed');
+        report(onStep, stepId, "List installed plugins", "done", "no plugins installed");
     }
     else {
-        const summary = plugins.map(p => `${p.name}@${p.version}`).join(', ');
-        report(onStep, stepId, 'List installed plugins', 'done', `${plugins.length} plugins: ${summary}`);
+        const summary = plugins.map((p) => `${p.name}@${p.version}`).join(", ");
+        report(onStep, stepId, "List installed plugins", "done", `${plugins.length} plugins: ${summary}`);
     }
 }
 /**
  * Search the remote plugin registry.
  */
 export async function runPluginSearch(query, onStep) {
-    const stepId = 'plugin-search';
-    report(onStep, stepId, `Search plugins${query ? `: ${query}` : ''}`, 'running');
+    const stepId = "plugin-search";
+    report(onStep, stepId, `Search plugins${query ? `: ${query}` : ""}`, "running");
     const results = await searchRegistry(query);
     if (results.length === 0) {
-        report(onStep, stepId, `Search plugins${query ? `: ${query}` : ''}`, 'done', query ? `no plugins matching "${query}"` : 'registry empty or unreachable');
+        report(onStep, stepId, `Search plugins${query ? `: ${query}` : ""}`, "done", query
+            ? `no plugins matching "${query}"`
+            : "registry empty or unreachable");
     }
     else {
-        const summary = results.map(p => `${p.id} — ${p.description}`).join('\n  ');
-        report(onStep, stepId, `Search plugins${query ? `: ${query}` : ''}`, 'done', `${results.length} results:\n  ${summary}`);
+        const summary = results
+            .map((p) => `${p.id} — ${p.description}`)
+            .join("\n  ");
+        report(onStep, stepId, `Search plugins${query ? `: ${query}` : ""}`, "done", `${results.length} results:\n  ${summary}`);
     }
 }
 /**
  * Validate a local plugin directory.
  */
 export async function runPluginValidate(pluginDir, onStep) {
-    const stepId = 'plugin-validate';
-    report(onStep, stepId, `Validate plugin: ${pluginDir}`, 'running');
+    const stepId = "plugin-validate";
+    report(onStep, stepId, `Validate plugin: ${pluginDir}`, "running");
     const result = await validatePlugin(pluginDir);
     if (result.valid) {
-        report(onStep, stepId, `Validate plugin: ${pluginDir}`, 'done', `valid — ${result.manifest?.name}@${result.manifest?.version}`);
+        report(onStep, stepId, `Validate plugin: ${pluginDir}`, "done", `valid — ${result.manifest?.name}@${result.manifest?.version}`);
     }
     else {
-        const msgs = result.errors.map(e => `  ${e.path}: ${e.message}`).join('\n');
-        report(onStep, stepId, `Validate plugin: ${pluginDir}`, 'error', `${result.errors.length} errors:\n${msgs}`);
+        const msgs = result.errors
+            .map((e) => `  ${e.path}: ${e.message}`)
+            .join("\n");
+        report(onStep, stepId, `Validate plugin: ${pluginDir}`, "error", `${result.errors.length} errors:\n${msgs}`);
     }
 }
 /**
  * Sync detected plugins into the project manifest.
  */
 export async function runPluginSync(projectDir, dryRun, onStep) {
-    const stepId = 'plugin-sync';
-    report(onStep, stepId, 'Sync plugins', 'running');
+    const stepId = "plugin-sync";
+    report(onStep, stepId, "Sync plugins", "running");
     try {
         const result = await syncPlugins(projectDir, { dryRun });
         const parts = [];
         if (result.added.length > 0)
-            parts.push(`added: ${result.added.join(', ')}`);
+            parts.push(`added: ${result.added.join(", ")}`);
         if (result.removed.length > 0)
-            parts.push(`removed: ${result.removed.join(', ')}`);
+            parts.push(`removed: ${result.removed.join(", ")}`);
         if (result.unchanged.length > 0)
-            parts.push(`unchanged: ${result.unchanged.join(', ')}`);
+            parts.push(`unchanged: ${result.unchanged.join(", ")}`);
+        if (result.wired.length > 0)
+            parts.push(`wired: ${result.wired.length} capabilities`);
+        if (result.unwired.length > 0)
+            parts.push(`unwired: ${result.unwired.length} capabilities`);
         if (parts.length === 0)
-            parts.push('no plugins detected');
-        const prefix = dryRun ? 'dry-run: ' : '';
-        report(onStep, stepId, 'Sync plugins', 'done', `${prefix}${parts.join(' | ')}`);
+            parts.push("no plugins detected");
+        const prefix = dryRun ? "dry-run: " : "";
+        report(onStep, stepId, "Sync plugins", "done", `${prefix}${parts.join(" | ")}`);
     }
     catch (e) {
         const msg = e instanceof Error ? e.message : String(e);
-        report(onStep, stepId, 'Sync plugins', 'error', msg);
+        report(onStep, stepId, "Sync plugins", "error", msg);
     }
 }
 /**
  * Export an installed plugin to Agent Skills spec format.
  */
 export async function runPluginExport(name, onStep) {
-    const stepId = 'plugin-export';
-    report(onStep, stepId, `Export plugin: ${name}`, 'running');
+    const stepId = "plugin-export";
+    report(onStep, stepId, `Export plugin: ${name}`, "running");
     const result = await exportPluginAsAgentSkills(name);
     if (result.success) {
-        report(onStep, stepId, `Export plugin: ${name}`, 'done', `exported to ${result.path}`);
+        report(onStep, stepId, `Export plugin: ${name}`, "done", `exported to ${result.path}`);
     }
     else {
-        report(onStep, stepId, `Export plugin: ${name}`, 'error', result.error);
+        report(onStep, stepId, `Export plugin: ${name}`, "error", result.error);
     }
 }
 /**
  * Export an installed plugin to Codex-compatible TOML subagent files.
  */
 export async function runPluginExportCodex(name, onStep) {
-    const stepId = 'plugin-export-codex';
-    report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, 'running');
+    const stepId = "plugin-export-codex";
+    report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, "running");
     const result = await exportPluginAsCodexToml(name);
     if (result.success) {
-        report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, 'done', `exported ${result.files.length} TOML file(s)`);
+        report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, "done", `exported ${result.files?.length} TOML file(s)`);
     }
     else {
-        report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, 'error', result.error);
+        report(onStep, stepId, `Export plugin as Codex TOML: ${name}`, "error", result.error);
     }
 }
 /**
  * Import an Agent Skills spec package and convert to javi-forge plugin format.
  */
 export async function runPluginImport(sourceDir, dryRun, onStep) {
-    const stepId = 'plugin-import';
-    report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, 'running');
+    const stepId = "plugin-import";
+    report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, "running");
     const result = await importAgentSkillsPackage(sourceDir, { dryRun });
     if (result.success) {
-        report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, 'done', dryRun ? `dry-run: would import ${result.name}` : `imported ${result.name}`);
+        report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, "done", dryRun
+            ? `dry-run: would import ${result.name}`
+            : `imported ${result.name}`);
     }
     else {
-        report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, 'error', result.error);
+        report(onStep, stepId, `Import agent-skills package: ${sourceDir}`, "error", result.error);
+    }
+}
+/**
+ * Generate a project-level skills.json from all installed plugins.
+ * Makes the project discoverable by `npx skills add` and 40+ AI agents.
+ */
+export async function runPluginExportSkillsJson(projectDir, dryRun, onStep) {
+    const stepId = "plugin-export-skills-json";
+    report(onStep, stepId, "Generate project skills.json", "running");
+    const result = await generateProjectSkillsJson(projectDir, { dryRun });
+    if (result.success) {
+        const prefix = dryRun ? "dry-run: would generate" : "generated";
+        report(onStep, stepId, "Generate project skills.json", "done", `${prefix} ${result.path} (${result.skillCount} skills from ${result.pluginCount} plugins)`);
+    }
+    else {
+        report(onStep, stepId, "Generate project skills.json", "error", result.error);
+    }
+}
+/**
+ * Generate a global skills.json from all globally installed plugins.
+ */
+export async function runPluginExportGlobalSkillsJson(dryRun, onStep) {
+    const stepId = "plugin-export-global-skills-json";
+    report(onStep, stepId, "Generate global skills.json", "running");
+    const result = await generateGlobalSkillsJson({ dryRun });
+    if (result.success) {
+        const prefix = dryRun ? "dry-run: would generate" : "generated";
+        report(onStep, stepId, "Generate global skills.json", "done", `${prefix} ${result.path} (${result.skillCount} skills from ${result.pluginCount} plugins)`);
+    }
+    else {
+        report(onStep, stepId, "Generate global skills.json", "error", result.error);
     }
 }
 //# sourceMappingURL=plugin.js.map

package/dist/commands/security.d.ts

@@ -1,6 +1,6 @@
-import type { Stack, SecurityFinding, SecurityBaseline, SecurityCheckResult } from '../types/index.js';
-export type SecurityMode = 'baseline' | 'check' | 'update';
-export type SecurityStepStatus = 'pending' | 'running' | 'done' | 'error' | 'skipped';
+import type { SecurityBaseline, SecurityCheckOptions, SecurityCheckResult, SecurityFinding, SecuritySeverity, SecuritySummary, Stack } from "../types/index.js";
+export type SecurityMode = "baseline" | "check" | "update" | "allowlist";
+export type SecurityStepStatus = "pending" | "running" | "done" | "error" | "skipped";
 export interface SecurityStep {
     id: string;
     label: string;
@@ -18,8 +18,14 @@ export declare function parsePipAudit(raw: string): SecurityFinding[];
 export declare function parseCargoAudit(raw: string): SecurityFinding[];
 export declare function parseGovulncheck(raw: string): SecurityFinding[];
 export declare function parseAuditOutput(stack: Stack, raw: string): SecurityFinding[];
-export declare function detectRegressions(baseline: SecurityBaseline, current: SecurityFinding[]): SecurityCheckResult;
+export declare function severityAtOrAbove(severity: SecuritySeverity, threshold: SecuritySeverity): boolean;
+export declare function filterBySeverity(findings: SecurityFinding[], minSeverity: SecuritySeverity): SecurityFinding[];
+export declare function filterAllowlisted(findings: SecurityFinding[], allowlist: string[]): SecurityFinding[];
+export declare function checkStaleness(baseline: SecurityBaseline, staleDays: number): string | undefined;
+export declare function baselineAgeDays(baseline: SecurityBaseline): number;
+export declare function computeSummary(current: SecurityFinding[], regressions: SecurityFinding[], resolved: SecurityFinding[], filteredRegressions: SecurityFinding[], baseline: SecurityBaseline): SecuritySummary;
+export declare function detectRegressions(baseline: SecurityBaseline, current: SecurityFinding[], options?: SecurityCheckOptions): SecurityCheckResult;
 export declare function readBaseline(projectDir: string): Promise<SecurityBaseline | null>;
 export declare function writeBaseline(projectDir: string, baseline: SecurityBaseline): Promise<void>;
-export declare function runSecurity(mode: SecurityMode, projectDir: string, onStep: SecurityStepCallback): Promise<SecurityCheckResult | null>;
+export declare function runSecurity(mode: SecurityMode, projectDir: string, onStep: SecurityStepCallback, options?: SecurityCheckOptions): Promise<SecurityCheckResult | null>;
 //# sourceMappingURL=security.d.ts.map