octoflow-core 1.0.0

package/dist/capabilities/skills/discovery.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/skills/discovery.ts"],
+  "sourcesContent": ["import { promises as fs } from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport type { LocalContextVendorId } from '../../runtime/sessions/local-context-types.js';\nimport { discoverLocalContext } from '../local-context/index.js';\nimport type { LocalContextSource } from '../local-context/types.js';\nimport {\n  loadSkillBundle,\n  type SkillBundleLoaderOptions,\n} from './bundle-loader.js';\nimport { parseFrontmatter } from './frontmatter.js';\nimport { scanSkillDirs } from './scanner.js';\nimport type { AgentSkillMetadata, FrontmatterParser } from './types.js';\n\n/**\n * Origin tag carried on each discovered skill \u2014 surfaced for telemetry,\n * UI (\"which agent does this skill belong to?\"), and conflict reporting.\n */\nexport interface DiscoveredSkillOrigin {\n  /**\n   * Vendor descriptor that owned the path:\n   *   - one of `LocalContextVendorId` for tool-managed dirs\n   *   - `'extra'` for caller-supplied paths in `extraPaths`\n   */\n  source: LocalContextVendorId | 'extra';\n  /** Absolute path to the skill bundle directory. */\n  path: string;\n  scope: 'project' | 'user' | 'custom';\n}\n\nexport interface DiscoveredSkill {\n  meta: AgentSkillMetadata;\n  origin: DiscoveredSkillOrigin;\n}\n\n/**\n * Configures the parent-directory walk that picks up `skills/` (or any\n * other named) folders relative to the running code.\n *\n * Use case: a template, plugin, or sub-app ships its own bundles under\n * `<code>/skills/*` and wants them auto-discovered without hardcoding\n * the absolute path. Pass `from: import.meta.url` (or `__dirname`).\n */\nexport interface RelativePathDiscovery {\n  /**\n   * Starting directory or file. Accepts:\n   *   - an absolute or relative directory\n   *   - an absolute or relative file path (uses its `dirname`)\n   *   - a `file://` URL (the value of `import.meta.url`)\n   * Default: `process.cwd()`.\n   */\n  from?: string;\n  /** Folder names to look for at each level. Default: `['skills']`. */\n  dirNames?: string[];\n  /** How many parent levels to walk up from `from`. Default: `6`. */\n  maxDepth?: number;\n  /**\n   * Stop walking once this absolute directory has been visited (inclusive).\n   * Default: no extra stop \u2014 the walk terminates at the filesystem root or\n   * when `maxDepth` is exhausted.\n   */\n  stopAt?: string;\n}\n\nexport interface DiscoverLocalSkillsOptions {\n  /** Override CWD; defaults to `process.cwd()`. */\n  cwd?: string;\n  /** Override `$HOME`; defaults to `os.homedir()`. */\n  home?: string;\n  /** Restrict discovery to specific tool/agent vendors. */\n  vendors?: LocalContextVendorId[];\n  /** Exclude specific vendors. */\n  excludeVendors?: LocalContextVendorId[];\n  /** Filter to scopes; defaults `['project', 'user']`. */\n  scopes?: Array<'project' | 'user'>;\n  /**\n   * Filter the final result to skills whose `name` matches one of these.\n   * Useful for `addByName` flows. Names not found are returned in\n   * `result.missingNames` rather than throwing \u2014 caller decides.\n   */\n  names?: string[];\n  /**\n   * Extra filesystem paths to also scan. Each entry may be:\n   *   - a single skill bundle directory (containing `SKILL.md`)\n   *   - a parent directory containing many skill bundles\n   * Project/user discovery still runs unless disabled by setting\n   * `vendors: []` and `excludeVendors: []` together.\n   */\n  extraPaths?: string[];\n  /** Disable the built-in vendor scan (only `extraPaths` and `walkUp` paths will be searched). */\n  skipVendorScan?: boolean;\n  /**\n   * Walk parent directories from a starting location looking for any\n   * folder whose name matches `dirNames` (default `['skills']`), and\n   * scan each match the same way as `extraPaths`.\n   *\n   * Pass `walkUp: true` to use defaults (`from = process.cwd()`,\n   * `dirNames = ['skills']`, `maxDepth = 6`).\n   */\n  walkUp?: boolean | RelativePathDiscovery;\n  parser?: FrontmatterParser;\n  onWarn?: SkillBundleLoaderOptions['onWarn'];\n  onValidation?: SkillBundleLoaderOptions['onValidation'];\n}\n\nexport interface DiscoverLocalSkillsResult {\n  /** Discovered + filtered skills (deduped on `name`, project > user > custom). */\n  skills: DiscoveredSkill[];\n  /** Names listed in `opts.names` that did not match any discovered skill. */\n  missingNames: string[];\n  /** Tool-vendor sources that contributed skills (mirrors LocalContextResult.sources). */\n  sources: LocalContextSource[];\n  /** Non-fatal issues \u2014 same shape as `LocalContextResult.warnings`. */\n  warnings: string[];\n}\n\n/**\n * One-stop skill discovery across every well-known location octoflow\n * already knows about (Claude Code, Cursor, Codex, Gemini, Cline, Roo,\n * Junie, Continue, Goose, Amp, Crush, Kilo Code, Qwen Code, Trae, Windsurf,\n * Zed, OpenCode, Copilot, VSCode, Claude Desktop) plus any caller-supplied\n * `extraPaths`.\n *\n * - Vendor scan reuses {@link discoverLocalContext} with `mcp: false`.\n * - `extraPaths` accepts both bundle dirs and parent dirs of bundles.\n * - `names` filters the final result; missing names are reported, not thrown.\n *\n * The output ships with an {@link DiscoveredSkillOrigin} tag per skill so\n * callers can distinguish \"claude-code at user scope\" from \"extra path\".\n *\n * @example\n * ```ts\n * import { discoverLocalSkills } from 'octoflow-core';\n *\n * const { skills, missingNames } = await discoverLocalSkills({\n *   names: ['grill-me', 'octocode-news'],\n *   extraPaths: ['./vendor/skills'],\n * });\n *\n * const bridge = await createBridge({\n *   agentSkills: { bundles: skills.map((s) => s.meta) },\n * });\n * ```\n */\nexport async function discoverLocalSkills(\n  options: DiscoverLocalSkillsOptions = {}\n): Promise<DiscoverLocalSkillsResult> {\n  const cwd = options.cwd ?? process.cwd();\n  const parser = options.parser ?? parseFrontmatter;\n  const warnings: string[] = [];\n  const sources: LocalContextSource[] = [];\n  const collected = new Map<string, DiscoveredSkill>();\n\n  if (!options.skipVendorScan) {\n    const local = await discoverLocalContext({\n      mcp: false,\n      skills: true,\n      cwd: options.cwd,\n      home: options.home,\n      vendors: options.vendors,\n      excludeVendors: options.excludeVendors,\n      scopes: options.scopes,\n    });\n    sources.push(...local.sources);\n    warnings.push(...local.warnings);\n    for (const meta of local.skills) {\n      const vendor = meta._source?.vendor;\n      const scope = meta._source?.scope ?? meta.scope;\n      const origin: DiscoveredSkillOrigin = {\n        source: (vendor ?? 'extra') as LocalContextVendorId | 'extra',\n        path: meta.baseDir,\n        scope: scope === 'admin' ? 'custom' : scope,\n      };\n      // First write wins \u2014 discoverLocalContext already orders by scope.\n      if (!collected.has(meta.name)) {\n        collected.set(meta.name, { meta, origin });\n      }\n    }\n  }\n\n  const candidatePaths: string[] = [];\n  for (const extra of options.extraPaths ?? []) {\n    candidatePaths.push(path.resolve(cwd, extra));\n  }\n  if (options.walkUp) {\n    const spec =\n      options.walkUp === true ? ({} as RelativePathDiscovery) : options.walkUp;\n    candidatePaths.push(...(await expandWalkUp(spec, cwd)));\n  }\n\n  for (const abs of candidatePaths) {\n    const found = await loadFromExtraPath(abs, {\n      parser,\n      onWarn: options.onWarn,\n      onValidation: options.onValidation,\n    });\n    for (const meta of found) {\n      const origin: DiscoveredSkillOrigin = {\n        source: 'extra',\n        path: meta.baseDir,\n        scope: 'custom',\n      };\n      if (!collected.has(meta.name)) {\n        collected.set(meta.name, { meta, origin });\n      }\n    }\n  }\n\n  const allSkills = [...collected.values()];\n  if (!options.names || options.names.length === 0) {\n    return { skills: allSkills, missingNames: [], sources, warnings };\n  }\n\n  const wanted = new Set(options.names);\n  const found = allSkills.filter((s) => wanted.has(s.meta.name));\n  const foundNames = new Set(found.map((s) => s.meta.name));\n  const missingNames = options.names.filter((n) => !foundNames.has(n));\n  return { skills: found, missingNames, sources, warnings };\n}\n\nasync function loadFromExtraPath(\n  abs: string,\n  opts: {\n    parser: FrontmatterParser;\n    onWarn?: SkillBundleLoaderOptions['onWarn'];\n    onValidation?: SkillBundleLoaderOptions['onValidation'];\n  }\n): Promise<AgentSkillMetadata[]> {\n  let stat;\n  try {\n    stat = await fs.stat(abs);\n  } catch {\n    return [];\n  }\n  if (!stat.isDirectory()) return [];\n\n  const direct = path.join(abs, 'SKILL.md');\n  try {\n    await fs.access(direct);\n    const meta = await loadSkillBundle(abs, {\n      parser: opts.parser,\n      onWarn: opts.onWarn,\n      onValidation: opts.onValidation,\n      strict: false,\n    });\n    return [meta];\n  } catch {\n    // Not a bundle dir \u2014 fall through to parent-dir scan.\n  }\n\n  return scanSkillDirs({\n    basePath: abs,\n    scope: 'custom',\n    vendorPaths: ['.'],\n    parser: opts.parser,\n    onWarn: opts.onWarn,\n    onValidation: opts.onValidation,\n  });\n}\n\nasync function expandWalkUp(\n  spec: RelativePathDiscovery,\n  cwd: string\n): Promise<string[]> {\n  const fromRaw = spec.from ?? cwd;\n  let start: string;\n  if (fromRaw.startsWith('file://')) {\n    start = fileURLToPath(fromRaw);\n  } else {\n    start = path.resolve(cwd, fromRaw);\n  }\n  // If `from` points at a file (e.g., `__filename`), use its dirname.\n  try {\n    const stat = await fs.stat(start);\n    if (!stat.isDirectory()) start = path.dirname(start);\n  } catch {\n    start = path.dirname(start);\n  }\n\n  const dirNames = spec.dirNames ?? ['skills'];\n  const maxDepth = spec.maxDepth ?? 6;\n  const stopAt = spec.stopAt ? path.resolve(spec.stopAt) : null;\n  const matched: string[] = [];\n\n  let cur = start;\n  for (let depth = 0; depth <= maxDepth; depth++) {\n    for (const name of dirNames) {\n      const candidate = path.join(cur, name);\n      try {\n        const s = await fs.stat(candidate);\n        if (s.isDirectory()) matched.push(candidate);\n      } catch {\n        // Missing or unreadable \u2014 skip silently.\n      }\n    }\n    if (stopAt && cur === stopAt) break;\n    const parent = path.dirname(cur);\n    if (parent === cur) break;\n    cur = parent;\n  }\n  return matched;\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,UAAU;AAC/B,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAG9B,SAAS,4BAA4B;AAErC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAqI9B,eAAsB,oBACpB,UAAsC,CAAC,GACH;AACpC,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACvC,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,WAAqB,CAAC;AAC5B,QAAM,UAAgC,CAAC;AACvC,QAAM,YAAY,oBAAI,IAA6B;AAEnD,MAAI,CAAC,QAAQ,gBAAgB;AAC3B,UAAM,QAAQ,MAAM,qBAAqB;AAAA,MACvC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,KAAK,QAAQ;AAAA,MACb,MAAM,QAAQ;AAAA,MACd,SAAS,QAAQ;AAAA,MACjB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD,YAAQ,KAAK,GAAG,MAAM,OAAO;AAC7B,aAAS,KAAK,GAAG,MAAM,QAAQ;AAC/B,eAAW,QAAQ,MAAM,QAAQ;AAC/B,YAAM,SAAS,KAAK,SAAS;AAC7B,YAAM,QAAQ,KAAK,SAAS,SAAS,KAAK;AAC1C,YAAM,SAAgC;AAAA,QACpC,QAAS,UAAU;AAAA,QACnB,MAAM,KAAK;AAAA,QACX,OAAO,UAAU,UAAU,WAAW;AAAA,MACxC;AAEA,UAAI,CAAC,UAAU,IAAI,KAAK,IAAI,GAAG;AAC7B,kBAAU,IAAI,KAAK,MAAM,EAAE,MAAM,OAAO,CAAC;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAA2B,CAAC;AAClC,aAAW,SAAS,QAAQ,cAAc,CAAC,GAAG;AAC5C,mBAAe,KAAK,KAAK,QAAQ,KAAK,KAAK,CAAC;AAAA,EAC9C;AACA,MAAI,QAAQ,QAAQ;AAClB,UAAM,OACJ,QAAQ,WAAW,OAAQ,CAAC,IAA8B,QAAQ;AACpE,mBAAe,KAAK,GAAI,MAAM,aAAa,MAAM,GAAG,CAAE;AAAA,EACxD;AAEA,aAAW,OAAO,gBAAgB;AAChC,UAAMA,SAAQ,MAAM,kBAAkB,KAAK;AAAA,MACzC;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,cAAc,QAAQ;AAAA,IACxB,CAAC;AACD,eAAW,QAAQA,QAAO;AACxB,YAAM,SAAgC;AAAA,QACpC,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,OAAO;AAAA,MACT;AACA,UAAI,CAAC,UAAU,IAAI,KAAK,IAAI,GAAG;AAC7B,kBAAU,IAAI,KAAK,MAAM,EAAE,MAAM,OAAO,CAAC;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,GAAG,UAAU,OAAO,CAAC;AACxC,MAAI,CAAC,QAAQ,SAAS,QAAQ,MAAM,WAAW,GAAG;AAChD,WAAO,EAAE,QAAQ,WAAW,cAAc,CAAC,GAAG,SAAS,SAAS;AAAA,EAClE;AAEA,QAAM,SAAS,IAAI,IAAI,QAAQ,KAAK;AACpC,QAAM,QAAQ,UAAU,OAAO,CAAC,MAAM,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC;AAC7D,QAAM,aAAa,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;AACxD,QAAM,eAAe,QAAQ,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;AACnE,SAAO,EAAE,QAAQ,OAAO,cAAc,SAAS,SAAS;AAC1D;AAEA,eAAe,kBACb,KACA,MAK+B;AAC/B,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,GAAG,KAAK,GAAG;AAAA,EAC1B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,KAAK,YAAY,EAAG,QAAO,CAAC;AAEjC,QAAM,SAAS,KAAK,KAAK,KAAK,UAAU;AACxC,MAAI;AACF,UAAM,GAAG,OAAO,MAAM;AACtB,UAAM,OAAO,MAAM,gBAAgB,KAAK;AAAA,MACtC,QAAQ,KAAK;AAAA,MACb,QAAQ,KAAK;AAAA,MACb,cAAc,KAAK;AAAA,MACnB,QAAQ;AAAA,IACV,CAAC;AACD,WAAO,CAAC,IAAI;AAAA,EACd,QAAQ;AAAA,EAER;AAEA,SAAO,cAAc;AAAA,IACnB,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa,CAAC,GAAG;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,EACrB,CAAC;AACH;AAEA,eAAe,aACb,MACA,KACmB;AACnB,QAAM,UAAU,KAAK,QAAQ;AAC7B,MAAI;AACJ,MAAI,QAAQ,WAAW,SAAS,GAAG;AACjC,YAAQ,cAAc,OAAO;AAAA,EAC/B,OAAO;AACL,YAAQ,KAAK,QAAQ,KAAK,OAAO;AAAA,EACnC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,GAAG,KAAK,KAAK;AAChC,QAAI,CAAC,KAAK,YAAY,EAAG,SAAQ,KAAK,QAAQ,KAAK;AAAA,EACrD,QAAQ;AACN,YAAQ,KAAK,QAAQ,KAAK;AAAA,EAC5B;AAEA,QAAM,WAAW,KAAK,YAAY,CAAC,QAAQ;AAC3C,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,SAAS,KAAK,SAAS,KAAK,QAAQ,KAAK,MAAM,IAAI;AACzD,QAAM,UAAoB,CAAC;AAE3B,MAAI,MAAM;AACV,WAAS,QAAQ,GAAG,SAAS,UAAU,SAAS;AAC9C,eAAW,QAAQ,UAAU;AAC3B,YAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACrC,UAAI;AACF,cAAM,IAAI,MAAM,GAAG,KAAK,SAAS;AACjC,YAAI,EAAE,YAAY,EAAG,SAAQ,KAAK,SAAS;AAAA,MAC7C,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,UAAU,QAAQ,OAAQ;AAC9B,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;",
+  "names": ["found"]
+}

package/dist/capabilities/skills/frontmatter.d.ts

@@ -0,0 +1,2 @@
+export { parseFrontmatter, parseFrontmatterLoose } from 'octoflow-skill-runner';
+//# sourceMappingURL=frontmatter.d.ts.map

package/dist/capabilities/skills/frontmatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../../../src/capabilities/skills/frontmatter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/capabilities/skills/frontmatter.js

@@ -0,0 +1,6 @@
+import { parseFrontmatter, parseFrontmatterLoose } from "octoflow-skill-runner";
+export {
+  parseFrontmatter,
+  parseFrontmatterLoose
+};
+//# sourceMappingURL=frontmatter.js.map

package/dist/capabilities/skills/frontmatter.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/skills/frontmatter.ts"],
+  "sourcesContent": ["export { parseFrontmatter, parseFrontmatterLoose } from 'octoflow-skill-runner';\n"],
+  "mappings": "AAAA,SAAS,kBAAkB,6BAA6B;",
+  "names": []
+}

package/dist/capabilities/skills/github-loader.d.ts

@@ -0,0 +1,101 @@
+import { type SkillBundleLoaderOptions, type SkillBundleMetadata } from './bundle-loader.js';
+/**
+ * Which CLI fetches the bundle. Library never re-implements the fetch —
+ * we delegate to a mature, security-hardened external tool.
+ *
+ * - `'gh'`     → `gh repo clone` (GitHub CLI, recommended when authed)
+ * - `'git'`    → `git clone --depth 1` over HTTPS
+ * - `'skills'` → `npx --yes skills add` (the Vercel `skills` CLI)
+ * - `'auto'`   → try `gh` → `git` → `skills` in that order
+ */
+export type SkillFetcher = 'gh' | 'git' | 'skills' | 'auto';
+/**
+ * Parsed GitHub coordinates. Built by {@link parseSkillGithubSource}.
+ *
+ * `subPath` is `''` when the bundle lives at the repo root.
+ * `ref` is `undefined` when the caller wants the default branch.
+ */
+export interface ParsedGithubSource {
+    owner: string;
+    repo: string;
+    ref?: string;
+    subPath: string;
+    /** The original input string, kept for the `skills` fetcher passthrough. */
+    raw: string;
+}
+export interface SkillFetcherRunArgs {
+    fetcher: Exclude<SkillFetcher, 'auto'>;
+    parsed: ParsedGithubSource;
+    destination: string;
+    log: (msg: string) => void;
+}
+/** Test seam: replace the spawn implementation. */
+export type SkillFetcherRunner = (args: SkillFetcherRunArgs) => Promise<void>;
+export interface LoadSkillFromGithubOptions extends SkillBundleLoaderOptions {
+    /** Fetcher selection. Defaults to `'auto'` (gh → git → skills). */
+    fetcher?: SkillFetcher;
+    /**
+     * Where to put the cloned bundle. Default: a tmpdir
+     * (auto-cleaned only when `cleanup !== false`).
+     */
+    destination?: string;
+    /** Branch / tag / SHA. Wins over any `#ref` parsed from the URL. */
+    ref?: string;
+    /**
+     * When `destination` is auto-allocated, remove it after `loadSkillBundle`
+     * resolves. Default: `true`. Set `false` to keep the cache for re-use.
+     */
+    cleanup?: boolean;
+    onLog?: (msg: string) => void;
+    /** Test seam — bypass real CLIs. */
+    runner?: SkillFetcherRunner;
+}
+/**
+ * Parse a GitHub source spec into an owner/repo/ref/path tuple.
+ *
+ * Accepts (no API call — purely lexical):
+ *   - `https://github.com/owner/repo`
+ *   - `https://github.com/owner/repo/tree/branch/sub/path`
+ *   - `https://github.com/owner/repo/blob/branch/sub/path/SKILL.md`
+ *   - `git@github.com:owner/repo.git`
+ *   - `owner/repo`
+ *   - `owner/repo/sub/path`
+ *   - `owner/repo#branch`
+ *   - `owner/repo/sub/path#branch`
+ *
+ * Rejects shell metacharacters, `..` segments, leading `/`, and anything
+ * that isn't `[A-Za-z0-9._/-]`.
+ *
+ * Branch ambiguity: GitHub URLs can't disambiguate `tree/foo/bar` between
+ * `branch=foo path=bar` and `branch=foo/bar path=`. We assume the first
+ * segment is the branch — pass `ref` explicitly to override.
+ */
+export declare function parseSkillGithubSource(input: string): ParsedGithubSource;
+/**
+ * Load a SKILL.md bundle straight from a public GitHub repository.
+ *
+ * Fetch is delegated to a CLI you already have — no in-tree git client,
+ * no in-tree archive extractor. Default order tries `gh` (fastest, depth-1
+ * authed clone), then plain `git`, then `npx skills` as a last resort.
+ *
+ * The function is fully programmatic — it returns the same
+ * {@link SkillBundleMetadata} shape as {@link loadSkillBundle}, ready to
+ * feed straight into `agentSkills.bundles`.
+ *
+ * @example
+ * ```ts
+ * import { createAgent, loadSkillFromGithub } from 'octoflow-core';
+ *
+ * const news = await loadSkillFromGithub(
+ *   'https://github.com/bgauryy/octocode-mcp/tree/main/skills/octocode-news',
+ * );
+ *
+ * const agent = await createAgent({
+ *   priority: ['ollama'],
+ *   model: 'qwen3:8b',
+ *   agentSkills: { bundles: [news] },
+ * });
+ * ```
+ */
+export declare function loadSkillFromGithub(source: string | ParsedGithubSource, options?: LoadSkillFromGithubOptions): Promise<SkillBundleMetadata>;
+//# sourceMappingURL=github-loader.d.ts.map

package/dist/capabilities/skills/github-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-loader.d.ts","sourceRoot":"","sources":["../../../src/capabilities/skills/github-loader.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAI5B;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAED,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9E,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,mEAAmE;IACnE,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,oCAAoC;IACpC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B;AAKD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CA0DxE;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EACnC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,mBAAmB,CAAC,CAwD9B"}

package/dist/capabilities/skills/github-loader.js

@@ -0,0 +1,182 @@
+import { execFile } from "node:child_process";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+import {
+  loadSkillBundle
+} from "./bundle-loader.js";
+const execFileAsync = promisify(execFile);
+const SAFE_SEGMENT = /^[A-Za-z0-9._-]+$/;
+const SAFE_PATH = /^[A-Za-z0-9._/-]+$/;
+function parseSkillGithubSource(input) {
+  const raw = input.trim();
+  if (!raw) throw new Error("[octoflow] parseSkillGithubSource: empty input");
+  const hashIdx = raw.indexOf("#");
+  const body = hashIdx >= 0 ? raw.slice(0, hashIdx) : raw;
+  let parsedRef = hashIdx >= 0 ? raw.slice(hashIdx + 1) || void 0 : void 0;
+  let owner;
+  let repo;
+  let subPath = "";
+  const httpsMatch = body.match(
+    /^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:\/(tree|blob)\/([^/]+)(?:\/(.+))?)?\/?$/
+  );
+  const sshMatch = body.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
+  if (httpsMatch) {
+    owner = httpsMatch[1] ?? "";
+    repo = httpsMatch[2] ?? "";
+    const kind = httpsMatch[3];
+    if (kind) {
+      parsedRef = parsedRef ?? httpsMatch[4];
+      subPath = httpsMatch[5] ?? "";
+      if (kind === "blob" && subPath.endsWith("/SKILL.md")) {
+        subPath = subPath.slice(0, -"/SKILL.md".length);
+      } else if (kind === "blob" && subPath === "SKILL.md") {
+        subPath = "";
+      }
+    }
+  } else if (sshMatch) {
+    owner = sshMatch[1] ?? "";
+    repo = sshMatch[2] ?? "";
+  } else {
+    const segs = body.split("/").filter((s) => s.length > 0);
+    if (segs.length < 2 || !segs[0] || !segs[1]) {
+      throw new Error(
+        `[octoflow] parseSkillGithubSource: not a recognized GitHub source: ${input}`
+      );
+    }
+    owner = segs[0];
+    repo = segs[1];
+    subPath = segs.slice(2).join("/");
+  }
+  validateSegment("owner", owner);
+  validateSegment("repo", repo);
+  if (parsedRef) validatePathish("ref", parsedRef);
+  if (subPath) validatePathish("path", subPath);
+  return {
+    owner,
+    repo,
+    ref: parsedRef,
+    subPath,
+    raw
+  };
+}
+function validateSegment(label, value) {
+  if (!SAFE_SEGMENT.test(value)) {
+    throw new Error(
+      `[octoflow] parseSkillGithubSource: unsafe ${label} segment "${value}"`
+    );
+  }
+}
+function validatePathish(label, value) {
+  if (!SAFE_PATH.test(value) || value.startsWith("/") || value.split("/").some((seg) => seg === ".." || seg === ".")) {
+    throw new Error(
+      `[octoflow] parseSkillGithubSource: unsafe ${label} value "${value}"`
+    );
+  }
+}
+async function loadSkillFromGithub(source, options = {}) {
+  const parsed = typeof source === "string" ? parseSkillGithubSource(source) : source;
+  if (options.ref) parsed.ref = options.ref;
+  const log = options.onLog ?? (() => {
+  });
+  const cleanupRequested = options.cleanup !== false && !options.destination;
+  const destination = options.destination ?? await fs.mkdtemp(path.join(os.tmpdir(), "ab-skill-gh-"));
+  const order = options.fetcher && options.fetcher !== "auto" ? [options.fetcher] : ["gh", "git", "skills"];
+  const runner = options.runner ?? defaultRunner;
+  let lastErr;
+  let usedFetcher;
+  for (const fetcher of order) {
+    try {
+      log(`[skill-github-loading] fetcher="${fetcher}"`);
+      await runner({ fetcher, parsed, destination, log });
+      usedFetcher = fetcher;
+      break;
+    } catch (err) {
+      lastErr = err instanceof Error ? err : new Error(String(err));
+      log(
+        `[skill-github-loading] fetcher="${fetcher}" failed: ${lastErr.message}`
+      );
+    }
+  }
+  if (!usedFetcher) {
+    if (cleanupRequested) {
+      await fs.rm(destination, { recursive: true, force: true });
+    }
+    throw new Error(
+      `[octoflow] loadSkillFromGithub: every fetcher failed.
+Tried: ${order.join(", ")}.
+Last error: ${lastErr?.message ?? "unknown"}`
+    );
+  }
+  const bundleDir = parsed.subPath ? path.join(destination, parsed.subPath) : await resolveBundleDir(destination);
+  try {
+    return await loadSkillBundle(bundleDir, options);
+  } finally {
+    if (cleanupRequested) {
+      await fs.rm(destination, { recursive: true, force: true });
+    }
+  }
+}
+async function resolveBundleDir(root) {
+  if (await fileExists(path.join(root, "SKILL.md"))) return root;
+  let entries;
+  try {
+    entries = await fs.readdir(root);
+  } catch {
+    return root;
+  }
+  for (const entry of entries) {
+    const candidate = path.join(root, entry);
+    if (await fileExists(path.join(candidate, "SKILL.md"))) return candidate;
+  }
+  return root;
+}
+async function fileExists(p) {
+  try {
+    await fs.access(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+const defaultRunner = async ({
+  fetcher,
+  parsed,
+  destination
+}) => {
+  if (fetcher === "gh") return runGh(parsed, destination);
+  if (fetcher === "git") return runGit(parsed, destination);
+  if (fetcher === "skills") return runSkillsCli(parsed, destination);
+  throw new Error(`[octoflow] unknown fetcher "${fetcher}"`);
+};
+async function runGh(parsed, dest) {
+  const args = [
+    "repo",
+    "clone",
+    `${parsed.owner}/${parsed.repo}`,
+    dest,
+    "--",
+    "--depth",
+    "1"
+  ];
+  if (parsed.ref) args.push("--branch", parsed.ref, "--single-branch");
+  await execFileAsync("gh", args);
+}
+async function runGit(parsed, dest) {
+  const args = ["clone", "--depth", "1"];
+  if (parsed.ref) args.push("--branch", parsed.ref, "--single-branch");
+  args.push(`https://github.com/${parsed.owner}/${parsed.repo}.git`, dest);
+  await execFileAsync("git", args);
+}
+async function runSkillsCli(parsed, dest) {
+  const sourceForCli = parsed.subPath ? `https://github.com/${parsed.owner}/${parsed.repo}/tree/${parsed.ref ?? "HEAD"}/${parsed.subPath}` : `https://github.com/${parsed.owner}/${parsed.repo}${parsed.ref ? `/tree/${parsed.ref}` : ""}`;
+  await execFileAsync("npx", ["--yes", "skills", "add", sourceForCli], {
+    cwd: dest
+  });
+}
+export {
+  loadSkillFromGithub,
+  parseSkillGithubSource
+};
+//# sourceMappingURL=github-loader.js.map

package/dist/capabilities/skills/github-loader.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/skills/github-loader.ts"],
+  "sourcesContent": ["import { execFile } from 'node:child_process';\nimport { promises as fs } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { promisify } from 'node:util';\n\nimport {\n  loadSkillBundle,\n  type SkillBundleLoaderOptions,\n  type SkillBundleMetadata,\n} from './bundle-loader.js';\n\nconst execFileAsync = promisify(execFile);\n\n/**\n * Which CLI fetches the bundle. Library never re-implements the fetch \u2014\n * we delegate to a mature, security-hardened external tool.\n *\n * - `'gh'`     \u2192 `gh repo clone` (GitHub CLI, recommended when authed)\n * - `'git'`    \u2192 `git clone --depth 1` over HTTPS\n * - `'skills'` \u2192 `npx --yes skills add` (the Vercel `skills` CLI)\n * - `'auto'`   \u2192 try `gh` \u2192 `git` \u2192 `skills` in that order\n */\nexport type SkillFetcher = 'gh' | 'git' | 'skills' | 'auto';\n\n/**\n * Parsed GitHub coordinates. Built by {@link parseSkillGithubSource}.\n *\n * `subPath` is `''` when the bundle lives at the repo root.\n * `ref` is `undefined` when the caller wants the default branch.\n */\nexport interface ParsedGithubSource {\n  owner: string;\n  repo: string;\n  ref?: string;\n  subPath: string;\n  /** The original input string, kept for the `skills` fetcher passthrough. */\n  raw: string;\n}\n\nexport interface SkillFetcherRunArgs {\n  fetcher: Exclude<SkillFetcher, 'auto'>;\n  parsed: ParsedGithubSource;\n  destination: string;\n  log: (msg: string) => void;\n}\n\n/** Test seam: replace the spawn implementation. */\nexport type SkillFetcherRunner = (args: SkillFetcherRunArgs) => Promise<void>;\n\nexport interface LoadSkillFromGithubOptions extends SkillBundleLoaderOptions {\n  /** Fetcher selection. Defaults to `'auto'` (gh \u2192 git \u2192 skills). */\n  fetcher?: SkillFetcher;\n  /**\n   * Where to put the cloned bundle. Default: a tmpdir\n   * (auto-cleaned only when `cleanup !== false`).\n   */\n  destination?: string;\n  /** Branch / tag / SHA. Wins over any `#ref` parsed from the URL. */\n  ref?: string;\n  /**\n   * When `destination` is auto-allocated, remove it after `loadSkillBundle`\n   * resolves. Default: `true`. Set `false` to keep the cache for re-use.\n   */\n  cleanup?: boolean;\n  onLog?: (msg: string) => void;\n  /** Test seam \u2014 bypass real CLIs. */\n  runner?: SkillFetcherRunner;\n}\n\nconst SAFE_SEGMENT = /^[A-Za-z0-9._-]+$/;\nconst SAFE_PATH = /^[A-Za-z0-9._/-]+$/;\n\n/**\n * Parse a GitHub source spec into an owner/repo/ref/path tuple.\n *\n * Accepts (no API call \u2014 purely lexical):\n *   - `https://github.com/owner/repo`\n *   - `https://github.com/owner/repo/tree/branch/sub/path`\n *   - `https://github.com/owner/repo/blob/branch/sub/path/SKILL.md`\n *   - `git@github.com:owner/repo.git`\n *   - `owner/repo`\n *   - `owner/repo/sub/path`\n *   - `owner/repo#branch`\n *   - `owner/repo/sub/path#branch`\n *\n * Rejects shell metacharacters, `..` segments, leading `/`, and anything\n * that isn't `[A-Za-z0-9._/-]`.\n *\n * Branch ambiguity: GitHub URLs can't disambiguate `tree/foo/bar` between\n * `branch=foo path=bar` and `branch=foo/bar path=`. We assume the first\n * segment is the branch \u2014 pass `ref` explicitly to override.\n */\nexport function parseSkillGithubSource(input: string): ParsedGithubSource {\n  const raw = input.trim();\n  if (!raw) throw new Error('[octoflow] parseSkillGithubSource: empty input');\n\n  const hashIdx = raw.indexOf('#');\n  const body = hashIdx >= 0 ? raw.slice(0, hashIdx) : raw;\n  let parsedRef: string | undefined =\n    hashIdx >= 0 ? raw.slice(hashIdx + 1) || undefined : undefined;\n\n  let owner: string;\n  let repo: string;\n  let subPath = '';\n\n  const httpsMatch = body.match(\n    /^https?:\\/\\/github\\.com\\/([^/]+)\\/([^/]+?)(?:\\.git)?(?:\\/(tree|blob)\\/([^/]+)(?:\\/(.+))?)?\\/?$/\n  );\n  const sshMatch = body.match(/^git@github\\.com:([^/]+)\\/([^/]+?)(?:\\.git)?$/);\n\n  if (httpsMatch) {\n    owner = httpsMatch[1] ?? '';\n    repo = httpsMatch[2] ?? '';\n    const kind = httpsMatch[3];\n    if (kind) {\n      parsedRef = parsedRef ?? httpsMatch[4];\n      subPath = httpsMatch[5] ?? '';\n      if (kind === 'blob' && subPath.endsWith('/SKILL.md')) {\n        subPath = subPath.slice(0, -'/SKILL.md'.length);\n      } else if (kind === 'blob' && subPath === 'SKILL.md') {\n        subPath = '';\n      }\n    }\n  } else if (sshMatch) {\n    owner = sshMatch[1] ?? '';\n    repo = sshMatch[2] ?? '';\n  } else {\n    const segs = body.split('/').filter((s) => s.length > 0);\n    if (segs.length < 2 || !segs[0] || !segs[1]) {\n      throw new Error(\n        `[octoflow] parseSkillGithubSource: not a recognized GitHub source: ${input}`\n      );\n    }\n    owner = segs[0];\n    repo = segs[1];\n    subPath = segs.slice(2).join('/');\n  }\n\n  validateSegment('owner', owner);\n  validateSegment('repo', repo);\n  if (parsedRef) validatePathish('ref', parsedRef);\n  if (subPath) validatePathish('path', subPath);\n\n  return {\n    owner,\n    repo,\n    ref: parsedRef,\n    subPath,\n    raw,\n  };\n}\n\nfunction validateSegment(label: string, value: string): void {\n  if (!SAFE_SEGMENT.test(value)) {\n    throw new Error(\n      `[octoflow] parseSkillGithubSource: unsafe ${label} segment \"${value}\"`\n    );\n  }\n}\n\nfunction validatePathish(label: string, value: string): void {\n  if (\n    !SAFE_PATH.test(value) ||\n    value.startsWith('/') ||\n    value.split('/').some((seg) => seg === '..' || seg === '.')\n  ) {\n    throw new Error(\n      `[octoflow] parseSkillGithubSource: unsafe ${label} value \"${value}\"`\n    );\n  }\n}\n\n/**\n * Load a SKILL.md bundle straight from a public GitHub repository.\n *\n * Fetch is delegated to a CLI you already have \u2014 no in-tree git client,\n * no in-tree archive extractor. Default order tries `gh` (fastest, depth-1\n * authed clone), then plain `git`, then `npx skills` as a last resort.\n *\n * The function is fully programmatic \u2014 it returns the same\n * {@link SkillBundleMetadata} shape as {@link loadSkillBundle}, ready to\n * feed straight into `agentSkills.bundles`.\n *\n * @example\n * ```ts\n * import { createAgent, loadSkillFromGithub } from 'octoflow-core';\n *\n * const news = await loadSkillFromGithub(\n *   'https://github.com/bgauryy/octocode-mcp/tree/main/skills/octocode-news',\n * );\n *\n * const agent = await createAgent({\n *   priority: ['ollama'],\n *   model: 'qwen3:8b',\n *   agentSkills: { bundles: [news] },\n * });\n * ```\n */\nexport async function loadSkillFromGithub(\n  source: string | ParsedGithubSource,\n  options: LoadSkillFromGithubOptions = {}\n): Promise<SkillBundleMetadata> {\n  const parsed =\n    typeof source === 'string' ? parseSkillGithubSource(source) : source;\n  if (options.ref) parsed.ref = options.ref;\n\n  const log = options.onLog ?? (() => {});\n  const cleanupRequested = options.cleanup !== false && !options.destination;\n  const destination =\n    options.destination ??\n    (await fs.mkdtemp(path.join(os.tmpdir(), 'ab-skill-gh-')));\n\n  const order: Array<Exclude<SkillFetcher, 'auto'>> =\n    options.fetcher && options.fetcher !== 'auto'\n      ? [options.fetcher]\n      : ['gh', 'git', 'skills'];\n\n  const runner = options.runner ?? defaultRunner;\n  let lastErr: Error | undefined;\n  let usedFetcher: Exclude<SkillFetcher, 'auto'> | undefined;\n\n  for (const fetcher of order) {\n    try {\n      log(`[skill-github-loading] fetcher=\"${fetcher}\"`);\n      await runner({ fetcher, parsed, destination, log });\n      usedFetcher = fetcher;\n      break;\n    } catch (err) {\n      lastErr = err instanceof Error ? err : new Error(String(err));\n      log(\n        `[skill-github-loading] fetcher=\"${fetcher}\" failed: ${lastErr.message}`\n      );\n    }\n  }\n\n  if (!usedFetcher) {\n    if (cleanupRequested) {\n      await fs.rm(destination, { recursive: true, force: true });\n    }\n    throw new Error(\n      `[octoflow] loadSkillFromGithub: every fetcher failed.\\n` +\n        `Tried: ${order.join(', ')}.\\n` +\n        `Last error: ${lastErr?.message ?? 'unknown'}`\n    );\n  }\n\n  const bundleDir = parsed.subPath\n    ? path.join(destination, parsed.subPath)\n    : await resolveBundleDir(destination);\n\n  try {\n    return await loadSkillBundle(bundleDir, options);\n  } finally {\n    if (cleanupRequested) {\n      await fs.rm(destination, { recursive: true, force: true });\n    }\n  }\n}\n\nasync function resolveBundleDir(root: string): Promise<string> {\n  // Caller didn't give us a subPath \u2014 first try the root, then a single\n  // child dir if it directly contains SKILL.md (covers the `npx skills add`\n  // case where the CLI dropped the bundle into `<root>/<skill-name>`).\n  if (await fileExists(path.join(root, 'SKILL.md'))) return root;\n  let entries: string[];\n  try {\n    entries = await fs.readdir(root);\n  } catch {\n    return root;\n  }\n  for (const entry of entries) {\n    const candidate = path.join(root, entry);\n    if (await fileExists(path.join(candidate, 'SKILL.md'))) return candidate;\n  }\n  return root;\n}\n\nasync function fileExists(p: string): Promise<boolean> {\n  try {\n    await fs.access(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nconst defaultRunner: SkillFetcherRunner = async ({\n  fetcher,\n  parsed,\n  destination,\n}) => {\n  if (fetcher === 'gh') return runGh(parsed, destination);\n  if (fetcher === 'git') return runGit(parsed, destination);\n  if (fetcher === 'skills') return runSkillsCli(parsed, destination);\n  throw new Error(`[octoflow] unknown fetcher \"${fetcher as string}\"`);\n};\n\nasync function runGh(parsed: ParsedGithubSource, dest: string): Promise<void> {\n  const args = [\n    'repo',\n    'clone',\n    `${parsed.owner}/${parsed.repo}`,\n    dest,\n    '--',\n    '--depth',\n    '1',\n  ];\n  if (parsed.ref) args.push('--branch', parsed.ref, '--single-branch');\n  await execFileAsync('gh', args);\n}\n\nasync function runGit(parsed: ParsedGithubSource, dest: string): Promise<void> {\n  const args = ['clone', '--depth', '1'];\n  if (parsed.ref) args.push('--branch', parsed.ref, '--single-branch');\n  args.push(`https://github.com/${parsed.owner}/${parsed.repo}.git`, dest);\n  await execFileAsync('git', args);\n}\n\nasync function runSkillsCli(\n  parsed: ParsedGithubSource,\n  dest: string\n): Promise<void> {\n  // The Vercel `skills` CLI installs into the current dir; we cd into the\n  // destination and let it lay down the bundle there. `--agent` is left\n  // unset so the CLI uses its `add-skill` portable layout.\n  const sourceForCli = parsed.subPath\n    ? `https://github.com/${parsed.owner}/${parsed.repo}/tree/${parsed.ref ?? 'HEAD'}/${parsed.subPath}`\n    : `https://github.com/${parsed.owner}/${parsed.repo}${parsed.ref ? `/tree/${parsed.ref}` : ''}`;\n  await execFileAsync('npx', ['--yes', 'skills', 'add', sourceForCli], {\n    cwd: dest,\n  });\n}\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,YAAY,UAAU;AAC/B,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,OAGK;AAEP,MAAM,gBAAgB,UAAU,QAAQ;AA0DxC,MAAM,eAAe;AACrB,MAAM,YAAY;AAsBX,SAAS,uBAAuB,OAAmC;AACxE,QAAM,MAAM,MAAM,KAAK;AACvB,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,gDAAgD;AAE1E,QAAM,UAAU,IAAI,QAAQ,GAAG;AAC/B,QAAM,OAAO,WAAW,IAAI,IAAI,MAAM,GAAG,OAAO,IAAI;AACpD,MAAI,YACF,WAAW,IAAI,IAAI,MAAM,UAAU,CAAC,KAAK,SAAY;AAEvD,MAAI;AACJ,MAAI;AACJ,MAAI,UAAU;AAEd,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,EACF;AACA,QAAM,WAAW,KAAK,MAAM,+CAA+C;AAE3E,MAAI,YAAY;AACd,YAAQ,WAAW,CAAC,KAAK;AACzB,WAAO,WAAW,CAAC,KAAK;AACxB,UAAM,OAAO,WAAW,CAAC;AACzB,QAAI,MAAM;AACR,kBAAY,aAAa,WAAW,CAAC;AACrC,gBAAU,WAAW,CAAC,KAAK;AAC3B,UAAI,SAAS,UAAU,QAAQ,SAAS,WAAW,GAAG;AACpD,kBAAU,QAAQ,MAAM,GAAG,CAAC,YAAY,MAAM;AAAA,MAChD,WAAW,SAAS,UAAU,YAAY,YAAY;AACpD,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,WAAW,UAAU;AACnB,YAAQ,SAAS,CAAC,KAAK;AACvB,WAAO,SAAS,CAAC,KAAK;AAAA,EACxB,OAAO;AACL,UAAM,OAAO,KAAK,MAAM,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AACvD,QAAI,KAAK,SAAS,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;AAC3C,YAAM,IAAI;AAAA,QACR,sEAAsE,KAAK;AAAA,MAC7E;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AACd,WAAO,KAAK,CAAC;AACb,cAAU,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AAAA,EAClC;AAEA,kBAAgB,SAAS,KAAK;AAC9B,kBAAgB,QAAQ,IAAI;AAC5B,MAAI,UAAW,iBAAgB,OAAO,SAAS;AAC/C,MAAI,QAAS,iBAAgB,QAAQ,OAAO;AAE5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,KAAK;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,OAAe,OAAqB;AAC3D,MAAI,CAAC,aAAa,KAAK,KAAK,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,6CAA6C,KAAK,aAAa,KAAK;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,OAAe,OAAqB;AAC3D,MACE,CAAC,UAAU,KAAK,KAAK,KACrB,MAAM,WAAW,GAAG,KACpB,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,QAAQ,QAAQ,QAAQ,QAAQ,GAAG,GAC1D;AACA,UAAM,IAAI;AAAA,MACR,6CAA6C,KAAK,WAAW,KAAK;AAAA,IACpE;AAAA,EACF;AACF;AA4BA,eAAsB,oBACpB,QACA,UAAsC,CAAC,GACT;AAC9B,QAAM,SACJ,OAAO,WAAW,WAAW,uBAAuB,MAAM,IAAI;AAChE,MAAI,QAAQ,IAAK,QAAO,MAAM,QAAQ;AAEtC,QAAM,MAAM,QAAQ,UAAU,MAAM;AAAA,EAAC;AACrC,QAAM,mBAAmB,QAAQ,YAAY,SAAS,CAAC,QAAQ;AAC/D,QAAM,cACJ,QAAQ,eACP,MAAM,GAAG,QAAQ,KAAK,KAAK,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1D,QAAM,QACJ,QAAQ,WAAW,QAAQ,YAAY,SACnC,CAAC,QAAQ,OAAO,IAChB,CAAC,MAAM,OAAO,QAAQ;AAE5B,QAAM,SAAS,QAAQ,UAAU;AACjC,MAAI;AACJ,MAAI;AAEJ,aAAW,WAAW,OAAO;AAC3B,QAAI;AACF,UAAI,mCAAmC,OAAO,GAAG;AACjD,YAAM,OAAO,EAAE,SAAS,QAAQ,aAAa,IAAI,CAAC;AAClD,oBAAc;AACd;AAAA,IACF,SAAS,KAAK;AACZ,gBAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAC5D;AAAA,QACE,mCAAmC,OAAO,aAAa,QAAQ,OAAO;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,QAAI,kBAAkB;AACpB,YAAM,GAAG,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC3D;AACA,UAAM,IAAI;AAAA,MACR;AAAA,SACY,MAAM,KAAK,IAAI,CAAC;AAAA,cACX,SAAS,WAAW,SAAS;AAAA,IAChD;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,UACrB,KAAK,KAAK,aAAa,OAAO,OAAO,IACrC,MAAM,iBAAiB,WAAW;AAEtC,MAAI;AACF,WAAO,MAAM,gBAAgB,WAAW,OAAO;AAAA,EACjD,UAAE;AACA,QAAI,kBAAkB;AACpB,YAAM,GAAG,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC3D;AAAA,EACF;AACF;AAEA,eAAe,iBAAiB,MAA+B;AAI7D,MAAI,MAAM,WAAW,KAAK,KAAK,MAAM,UAAU,CAAC,EAAG,QAAO;AAC1D,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,GAAG,QAAQ,IAAI;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,UAAM,YAAY,KAAK,KAAK,MAAM,KAAK;AACvC,QAAI,MAAM,WAAW,KAAK,KAAK,WAAW,UAAU,CAAC,EAAG,QAAO;AAAA,EACjE;AACA,SAAO;AACT;AAEA,eAAe,WAAW,GAA6B;AACrD,MAAI;AACF,UAAM,GAAG,OAAO,CAAC;AACjB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,gBAAoC,OAAO;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AACF,MAAM;AACJ,MAAI,YAAY,KAAM,QAAO,MAAM,QAAQ,WAAW;AACtD,MAAI,YAAY,MAAO,QAAO,OAAO,QAAQ,WAAW;AACxD,MAAI,YAAY,SAAU,QAAO,aAAa,QAAQ,WAAW;AACjE,QAAM,IAAI,MAAM,+BAA+B,OAAiB,GAAG;AACrE;AAEA,eAAe,MAAM,QAA4B,MAA6B;AAC5E,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA,GAAG,OAAO,KAAK,IAAI,OAAO,IAAI;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,IAAK,MAAK,KAAK,YAAY,OAAO,KAAK,iBAAiB;AACnE,QAAM,cAAc,MAAM,IAAI;AAChC;AAEA,eAAe,OAAO,QAA4B,MAA6B;AAC7E,QAAM,OAAO,CAAC,SAAS,WAAW,GAAG;AACrC,MAAI,OAAO,IAAK,MAAK,KAAK,YAAY,OAAO,KAAK,iBAAiB;AACnE,OAAK,KAAK,sBAAsB,OAAO,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI;AACvE,QAAM,cAAc,OAAO,IAAI;AACjC;AAEA,eAAe,aACb,QACA,MACe;AAIf,QAAM,eAAe,OAAO,UACxB,sBAAsB,OAAO,KAAK,IAAI,OAAO,IAAI,SAAS,OAAO,OAAO,MAAM,IAAI,OAAO,OAAO,KAChG,sBAAsB,OAAO,KAAK,IAAI,OAAO,IAAI,GAAG,OAAO,MAAM,SAAS,OAAO,GAAG,KAAK,EAAE;AAC/F,QAAM,cAAc,OAAO,CAAC,SAAS,UAAU,OAAO,YAAY,GAAG;AAAA,IACnE,KAAK;AAAA,EACP,CAAC;AACH;",
+  "names": []
+}

package/dist/capabilities/skills/scanner.d.ts

@@ -0,0 +1,43 @@
+import type { AgentSkillMetadata, FrontmatterParser, SkillScope } from './types.js';
+import { type SkillValidationIssue } from './validator.js';
+export declare const VENDOR_PATHS_PROJECT: string[];
+export declare const VENDOR_PATHS_USER: string[];
+interface ScanSkillDirsInput {
+    basePath: string;
+    scope: SkillScope;
+    vendorPaths: string[];
+    /**
+     * Optional vendor tag per path — keyed by a path the scanner just visited.
+     * When null, the skills in that directory carry `_source.vendor = null`.
+     */
+    vendorByPath?: (relPath: string) => string | null;
+    parser?: FrontmatterParser;
+    onWarn?: (w: {
+        path: string;
+        reason: string;
+        field?: string;
+    }) => void;
+    /**
+     * Conformance hook called once per scanned skill. `errors` non-empty means
+     * the skill was skipped (the scanner already dropped it from its output).
+     * `info` reports Claude-Code-style extension fields for telemetry.
+     */
+    onValidation?: (v: {
+        path: string;
+        errors: SkillValidationIssue[];
+        warnings: SkillValidationIssue[];
+        info: Array<{
+            field: string;
+            reason: string;
+        }>;
+    }) => void;
+    /** Optional disallow-list — skills whose `name` matches are skipped. */
+    disabled?: Set<string>;
+}
+export declare function scanSkillDirs(input: ScanSkillDirsInput): Promise<AgentSkillMetadata[]>;
+/**
+ * Cross-scope merge: `project` wins over `user` on name collision.
+ */
+export declare function mergeSkillScopes(project: AgentSkillMetadata[], user: AgentSkillMetadata[]): AgentSkillMetadata[];
+export {};
+//# sourceMappingURL=scanner.d.ts.map

package/dist/capabilities/skills/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../../src/capabilities/skills/scanner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAGL,KAAK,oBAAoB,EAG1B,MAAM,gBAAgB,CAAC;AAKxB,eAAO,MAAM,oBAAoB,UAYhC,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAW7B,CAAC;AAUF,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACvE;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC/B,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChD,KAAK,IAAI,CAAC;IACX,wEAAwE;IACxE,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAuH/B;AAmBD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE,kBAAkB,EAAE,GACzB,kBAAkB,EAAE,CAKtB"}

package/dist/capabilities/skills/scanner.js

@@ -0,0 +1,167 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { parseFrontmatter } from "./frontmatter.js";
+import {
+  classifyFrontmatterField,
+  partitionIssues,
+  validateSkillBody,
+  validateSkillMeta
+} from "./validator.js";
+const VENDOR_PATHS_PROJECT = [
+  ".agents/skills",
+  ".claude/skills",
+  ".cursor/skills",
+  ".codex/skills",
+  ".copilot/skills",
+  ".github/skills",
+  ".gemini/skills",
+  ".opencode/skills",
+  ".roo/skills",
+  ".kilocode/skills",
+  ".junie/skills"
+];
+const VENDOR_PATHS_USER = [
+  ".agents/skills",
+  ".claude/skills",
+  ".cursor/skills",
+  ".codex/skills",
+  ".copilot/skills",
+  ".gemini/skills",
+  ".opencode/skills",
+  ".roo/skills",
+  ".kilocode/skills",
+  ".junie/skills"
+];
+const SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "__pycache__"
+]);
+async function scanSkillDirs(input) {
+  const parser = input.parser ?? parseFrontmatter;
+  const seen = /* @__PURE__ */ new Map();
+  for (const rel of input.vendorPaths) {
+    const vendorRoot = path.resolve(input.basePath, rel);
+    let entries;
+    try {
+      entries = await fs.readdir(vendorRoot);
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      if (SKIP_DIRS.has(entry)) continue;
+      const skillDir = path.join(vendorRoot, entry);
+      let stat;
+      try {
+        stat = await fs.stat(skillDir);
+      } catch {
+        continue;
+      }
+      if (!stat.isDirectory()) continue;
+      const skillFile = path.join(skillDir, "SKILL.md");
+      let raw;
+      try {
+        raw = await fs.readFile(skillFile, "utf8");
+      } catch {
+        continue;
+      }
+      const { data, body, warnings } = parser(raw);
+      for (const w of warnings) input.onWarn?.({ path: skillFile, reason: w });
+      const name = typeof data.name === "string" ? data.name : "";
+      const description = typeof data.description === "string" ? data.description : "";
+      if (!name) {
+        input.onWarn?.({
+          path: skillFile,
+          reason: 'missing required field "name"',
+          field: "name"
+        });
+        continue;
+      }
+      if (!description) {
+        input.onWarn?.({
+          path: skillFile,
+          reason: 'missing required field "description"',
+          field: "description"
+        });
+        continue;
+      }
+      if (input.disabled?.has(name)) continue;
+      const meta = {
+        name,
+        description,
+        location: skillFile,
+        baseDir: skillDir,
+        scope: input.scope,
+        source: `${input.scope}:${rel}`,
+        license: typeof data.license === "string" ? data.license : void 0,
+        compatibility: typeof data.compatibility === "string" ? data.compatibility : void 0,
+        disableModelInvocation: data["disable-model-invocation"] === true,
+        userInvocable: data["user-invocable"] !== false,
+        argumentHint: typeof data["argument-hint"] === "string" ? data["argument-hint"] : void 0,
+        allowedTools: toStringArray(data["allowed-tools"]),
+        metadata: pickStringMap(data.metadata),
+        _source: {
+          vendor: input.vendorByPath ? input.vendorByPath(rel) : null,
+          scope: input.scope,
+          path: skillFile
+        }
+      };
+      const allIssues = [
+        ...validateSkillMeta(meta),
+        ...validateSkillBody({ meta, body, frontmatterData: data })
+      ];
+      const { errors, warnings: validationWarnings } = partitionIssues(allIssues);
+      const info = [];
+      for (const k of Object.keys(data)) {
+        const kind = classifyFrontmatterField(k);
+        if (kind === "claude-code-extension") {
+          info.push({
+            field: k,
+            reason: "claude-code extension field (non-spec)"
+          });
+        }
+      }
+      if (errors.length > 0 || validationWarnings.length > 0 || info.length > 0) {
+        input.onValidation?.({
+          path: skillFile,
+          errors,
+          warnings: validationWarnings,
+          info
+        });
+      }
+      if (errors.length > 0) continue;
+      if (!seen.has(name)) seen.set(name, meta);
+    }
+  }
+  return [...seen.values()];
+}
+function toStringArray(v) {
+  if (Array.isArray(v)) return v.map(String);
+  if (typeof v === "string" && v.trim()) {
+    return v.split(/\s+/).filter((x) => x.length > 0);
+  }
+  return void 0;
+}
+function pickStringMap(v) {
+  if (typeof v !== "object" || v === null || Array.isArray(v)) return void 0;
+  const out = {};
+  for (const [k, val] of Object.entries(v)) {
+    if (typeof val === "string") out[k] = val;
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+function mergeSkillScopes(project, user) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const s of user) byName.set(s.name, s);
+  for (const s of project) byName.set(s.name, s);
+  return [...byName.values()];
+}
+export {
+  VENDOR_PATHS_PROJECT,
+  VENDOR_PATHS_USER,
+  mergeSkillScopes,
+  scanSkillDirs
+};
+//# sourceMappingURL=scanner.js.map

package/dist/capabilities/skills/scanner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/skills/scanner.ts"],
+  "sourcesContent": ["import { promises as fs } from 'node:fs';\nimport path from 'node:path';\n\nimport { parseFrontmatter } from './frontmatter.js';\nimport type {\n  AgentSkillMetadata,\n  FrontmatterParser,\n  SkillScope,\n} from './types.js';\nimport {\n  classifyFrontmatterField,\n  partitionIssues,\n  type SkillValidationIssue,\n  validateSkillBody,\n  validateSkillMeta,\n} from './validator.js';\n\n// `.agents/skills` wins collisions; vendor-specific paths follow. Claude Code\n// does NOT yet read `.agents/skills` (Anthropic issue #31005), so its own\n// `.claude/skills` remains authoritative for claude-code-cli.\nexport const VENDOR_PATHS_PROJECT = [\n  '.agents/skills',\n  '.claude/skills',\n  '.cursor/skills',\n  '.codex/skills',\n  '.copilot/skills',\n  '.github/skills',\n  '.gemini/skills',\n  '.opencode/skills',\n  '.roo/skills',\n  '.kilocode/skills',\n  '.junie/skills',\n];\n\nexport const VENDOR_PATHS_USER = [\n  '.agents/skills',\n  '.claude/skills',\n  '.cursor/skills',\n  '.codex/skills',\n  '.copilot/skills',\n  '.gemini/skills',\n  '.opencode/skills',\n  '.roo/skills',\n  '.kilocode/skills',\n  '.junie/skills',\n];\n\nconst SKIP_DIRS = new Set([\n  'node_modules',\n  '.git',\n  'dist',\n  'build',\n  '__pycache__',\n]);\n\ninterface ScanSkillDirsInput {\n  basePath: string;\n  scope: SkillScope;\n  vendorPaths: string[];\n  /**\n   * Optional vendor tag per path \u2014 keyed by a path the scanner just visited.\n   * When null, the skills in that directory carry `_source.vendor = null`.\n   */\n  vendorByPath?: (relPath: string) => string | null;\n  parser?: FrontmatterParser;\n  onWarn?: (w: { path: string; reason: string; field?: string }) => void;\n  /**\n   * Conformance hook called once per scanned skill. `errors` non-empty means\n   * the skill was skipped (the scanner already dropped it from its output).\n   * `info` reports Claude-Code-style extension fields for telemetry.\n   */\n  onValidation?: (v: {\n    path: string;\n    errors: SkillValidationIssue[];\n    warnings: SkillValidationIssue[];\n    info: Array<{ field: string; reason: string }>;\n  }) => void;\n  /** Optional disallow-list \u2014 skills whose `name` matches are skipped. */\n  disabled?: Set<string>;\n}\n\nexport async function scanSkillDirs(\n  input: ScanSkillDirsInput\n): Promise<AgentSkillMetadata[]> {\n  const parser = input.parser ?? parseFrontmatter;\n  const seen = new Map<string, AgentSkillMetadata>();\n\n  for (const rel of input.vendorPaths) {\n    const vendorRoot = path.resolve(input.basePath, rel);\n    let entries: string[];\n    try {\n      entries = await fs.readdir(vendorRoot);\n    } catch {\n      continue;\n    }\n\n    for (const entry of entries) {\n      if (SKIP_DIRS.has(entry)) continue;\n      const skillDir = path.join(vendorRoot, entry);\n      let stat;\n      try {\n        stat = await fs.stat(skillDir);\n      } catch {\n        continue;\n      }\n      if (!stat.isDirectory()) continue;\n\n      const skillFile = path.join(skillDir, 'SKILL.md');\n      let raw: string;\n      try {\n        raw = await fs.readFile(skillFile, 'utf8');\n      } catch {\n        continue;\n      }\n      const { data, body, warnings } = parser(raw);\n      for (const w of warnings) input.onWarn?.({ path: skillFile, reason: w });\n\n      const name = typeof data.name === 'string' ? data.name : '';\n      const description =\n        typeof data.description === 'string' ? data.description : '';\n      if (!name) {\n        input.onWarn?.({\n          path: skillFile,\n          reason: 'missing required field \"name\"',\n          field: 'name',\n        });\n        continue;\n      }\n      if (!description) {\n        input.onWarn?.({\n          path: skillFile,\n          reason: 'missing required field \"description\"',\n          field: 'description',\n        });\n        continue;\n      }\n\n      if (input.disabled?.has(name)) continue;\n\n      const meta: AgentSkillMetadata = {\n        name,\n        description,\n        location: skillFile,\n        baseDir: skillDir,\n        scope: input.scope,\n        source: `${input.scope}:${rel}`,\n        license: typeof data.license === 'string' ? data.license : undefined,\n        compatibility:\n          typeof data.compatibility === 'string'\n            ? data.compatibility\n            : undefined,\n        disableModelInvocation: data['disable-model-invocation'] === true,\n        userInvocable: data['user-invocable'] !== false,\n        argumentHint:\n          typeof data['argument-hint'] === 'string'\n            ? data['argument-hint']\n            : undefined,\n        allowedTools: toStringArray(data['allowed-tools']),\n        metadata: pickStringMap(data.metadata),\n        _source: {\n          vendor: input.vendorByPath ? input.vendorByPath(rel) : null,\n          scope: input.scope,\n          path: skillFile,\n        },\n      };\n\n      const allIssues = [\n        ...validateSkillMeta(meta),\n        ...validateSkillBody({ meta, body, frontmatterData: data }),\n      ];\n      const { errors, warnings: validationWarnings } =\n        partitionIssues(allIssues);\n      const info: Array<{ field: string; reason: string }> = [];\n      for (const k of Object.keys(data)) {\n        const kind = classifyFrontmatterField(k);\n        if (kind === 'claude-code-extension') {\n          info.push({\n            field: k,\n            reason: 'claude-code extension field (non-spec)',\n          });\n        }\n      }\n      if (\n        errors.length > 0 ||\n        validationWarnings.length > 0 ||\n        info.length > 0\n      ) {\n        input.onValidation?.({\n          path: skillFile,\n          errors,\n          warnings: validationWarnings,\n          info,\n        });\n      }\n      if (errors.length > 0) continue;\n\n      // First vendor path for this scope wins on name collision.\n      if (!seen.has(name)) seen.set(name, meta);\n    }\n  }\n\n  return [...seen.values()];\n}\n\nfunction toStringArray(v: unknown): string[] | undefined {\n  if (Array.isArray(v)) return v.map(String);\n  if (typeof v === 'string' && v.trim()) {\n    return v.split(/\\s+/).filter((x) => x.length > 0);\n  }\n  return undefined;\n}\n\nfunction pickStringMap(v: unknown): Record<string, string> | undefined {\n  if (typeof v !== 'object' || v === null || Array.isArray(v)) return undefined;\n  const out: Record<string, string> = {};\n  for (const [k, val] of Object.entries(v as Record<string, unknown>)) {\n    if (typeof val === 'string') out[k] = val;\n  }\n  return Object.keys(out).length > 0 ? out : undefined;\n}\n\n/**\n * Cross-scope merge: `project` wins over `user` on name collision.\n */\nexport function mergeSkillScopes(\n  project: AgentSkillMetadata[],\n  user: AgentSkillMetadata[]\n): AgentSkillMetadata[] {\n  const byName = new Map<string, AgentSkillMetadata>();\n  for (const s of user) byName.set(s.name, s);\n  for (const s of project) byName.set(s.name, s);\n  return [...byName.values()];\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,UAAU;AAC/B,OAAO,UAAU;AAEjB,SAAS,wBAAwB;AAMjC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAKA,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,YAAY,oBAAI,IAAI;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AA4BD,eAAsB,cACpB,OAC+B;AAC/B,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,OAAO,oBAAI,IAAgC;AAEjD,aAAW,OAAO,MAAM,aAAa;AACnC,UAAM,aAAa,KAAK,QAAQ,MAAM,UAAU,GAAG;AACnD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,GAAG,QAAQ,UAAU;AAAA,IACvC,QAAQ;AACN;AAAA,IACF;AAEA,eAAW,SAAS,SAAS;AAC3B,UAAI,UAAU,IAAI,KAAK,EAAG;AAC1B,YAAM,WAAW,KAAK,KAAK,YAAY,KAAK;AAC5C,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,GAAG,KAAK,QAAQ;AAAA,MAC/B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,CAAC,KAAK,YAAY,EAAG;AAEzB,YAAM,YAAY,KAAK,KAAK,UAAU,UAAU;AAChD,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,GAAG,SAAS,WAAW,MAAM;AAAA,MAC3C,QAAQ;AACN;AAAA,MACF;AACA,YAAM,EAAE,MAAM,MAAM,SAAS,IAAI,OAAO,GAAG;AAC3C,iBAAW,KAAK,SAAU,OAAM,SAAS,EAAE,MAAM,WAAW,QAAQ,EAAE,CAAC;AAEvE,YAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,YAAM,cACJ,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAC5D,UAAI,CAAC,MAAM;AACT,cAAM,SAAS;AAAA,UACb,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AACA,UAAI,CAAC,aAAa;AAChB,cAAM,SAAS;AAAA,UACb,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AAEA,UAAI,MAAM,UAAU,IAAI,IAAI,EAAG;AAE/B,YAAM,OAA2B;AAAA,QAC/B;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO,MAAM;AAAA,QACb,QAAQ,GAAG,MAAM,KAAK,IAAI,GAAG;AAAA,QAC7B,SAAS,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,QAC3D,eACE,OAAO,KAAK,kBAAkB,WAC1B,KAAK,gBACL;AAAA,QACN,wBAAwB,KAAK,0BAA0B,MAAM;AAAA,QAC7D,eAAe,KAAK,gBAAgB,MAAM;AAAA,QAC1C,cACE,OAAO,KAAK,eAAe,MAAM,WAC7B,KAAK,eAAe,IACpB;AAAA,QACN,cAAc,cAAc,KAAK,eAAe,CAAC;AAAA,QACjD,UAAU,cAAc,KAAK,QAAQ;AAAA,QACrC,SAAS;AAAA,UACP,QAAQ,MAAM,eAAe,MAAM,aAAa,GAAG,IAAI;AAAA,UACvD,OAAO,MAAM;AAAA,UACb,MAAM;AAAA,QACR;AAAA,MACF;AAEA,YAAM,YAAY;AAAA,QAChB,GAAG,kBAAkB,IAAI;AAAA,QACzB,GAAG,kBAAkB,EAAE,MAAM,MAAM,iBAAiB,KAAK,CAAC;AAAA,MAC5D;AACA,YAAM,EAAE,QAAQ,UAAU,mBAAmB,IAC3C,gBAAgB,SAAS;AAC3B,YAAM,OAAiD,CAAC;AACxD,iBAAW,KAAK,OAAO,KAAK,IAAI,GAAG;AACjC,cAAM,OAAO,yBAAyB,CAAC;AACvC,YAAI,SAAS,yBAAyB;AACpC,eAAK,KAAK;AAAA,YACR,OAAO;AAAA,YACP,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AACA,UACE,OAAO,SAAS,KAChB,mBAAmB,SAAS,KAC5B,KAAK,SAAS,GACd;AACA,cAAM,eAAe;AAAA,UACnB,MAAM;AAAA,UACN;AAAA,UACA,UAAU;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH;AACA,UAAI,OAAO,SAAS,EAAG;AAGvB,UAAI,CAAC,KAAK,IAAI,IAAI,EAAG,MAAK,IAAI,MAAM,IAAI;AAAA,IAC1C;AAAA,EACF;AAEA,SAAO,CAAC,GAAG,KAAK,OAAO,CAAC;AAC1B;AAEA,SAAS,cAAc,GAAkC;AACvD,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,MAAM;AACzC,MAAI,OAAO,MAAM,YAAY,EAAE,KAAK,GAAG;AACrC,WAAO,EAAE,MAAM,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAAA,EAClD;AACA,SAAO;AACT;AAEA,SAAS,cAAc,GAAgD;AACrE,MAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,MAAM,QAAQ,CAAC,EAAG,QAAO;AACpE,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAA4B,GAAG;AACnE,QAAI,OAAO,QAAQ,SAAU,KAAI,CAAC,IAAI;AAAA,EACxC;AACA,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAC7C;AAKO,SAAS,iBACd,SACA,MACsB;AACtB,QAAM,SAAS,oBAAI,IAAgC;AACnD,aAAW,KAAK,KAAM,QAAO,IAAI,EAAE,MAAM,CAAC;AAC1C,aAAW,KAAK,QAAS,QAAO,IAAI,EAAE,MAAM,CAAC;AAC7C,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;",
+  "names": []
+}