psyclaw 0.24.0

package/dist/src/agents/discover.js

@@ -0,0 +1,127 @@
+import { lstat, readdir } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { KNOWN_AGENTS } from "./catalog.js";
+function safeCatalogPath(home, relativePath) {
+    const normalized = relativePath.replaceAll("\\", "/");
+    if (isAbsolute(relativePath) || normalized.split("/").some((segment) => segment === ".."))
+        return undefined;
+    const candidate = resolve(home, relativePath);
+    const rel = relative(resolve(home), candidate).replaceAll("\\", "/");
+    if (rel === ".." || rel.startsWith("../") || isAbsolute(rel))
+        return undefined;
+    return candidate;
+}
+async function hasSymlinkAncestor(path, boundary) {
+    let cursor = resolve(path);
+    const root = resolve(boundary);
+    while (true) {
+        try {
+            if ((await lstat(cursor)).isSymbolicLink())
+                return true;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return false;
+            return true;
+        }
+        if (cursor === root)
+            return false;
+        const rel = relative(root, cursor).replaceAll("\\", "/");
+        if (rel === ".." || rel.startsWith("../") || isAbsolute(rel))
+            return true;
+        cursor = dirname(cursor);
+    }
+}
+async function isDirectory(path, boundary) {
+    try {
+        const stat = await lstat(path);
+        return stat.isDirectory() && !stat.isSymbolicLink() && !(await hasSymlinkAncestor(path, boundary));
+    }
+    catch {
+        return false;
+    }
+}
+async function exists(path, boundary) {
+    try {
+        const stat = await lstat(path);
+        return !stat.isSymbolicLink() && !(await hasSymlinkAncestor(path, boundary));
+    }
+    catch {
+        return false;
+    }
+}
+async function listSkillEntries(dir, boundary) {
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    const skills = [];
+    for (const entry of entries) {
+        if (entry.isSymbolicLink())
+            continue;
+        const path = join(dir, entry.name);
+        if (await hasSymlinkAncestor(path, boundary))
+            continue;
+        if (entry.isDirectory()) {
+            skills.push({ name: entry.name, path, kind: "dir" });
+        }
+        else if (entry.isFile() && entry.name.endsWith(".md")) {
+            skills.push({ name: entry.name.replace(/\.md$/, ""), path, kind: "file" });
+        }
+    }
+    return skills.sort((left, right) => left.name.localeCompare(right.name));
+}
+/**
+ * Read-only scan of local agent configurations. This never reads credential
+ * contents, never follows symlinks, and never executes an install command; it
+ * only records what exists on disk for display and import planning.
+ */
+export async function discoverAgents(options = {}) {
+    const home = options.homeDir ?? homedir();
+    if (isAbsolute(home) === false)
+        throw new Error("homeDir must be absolute");
+    const agents = options.agents ?? KNOWN_AGENTS;
+    const scans = [];
+    for (const agent of agents) {
+        let configPath;
+        for (const dir of agent.configDirs) {
+            const absolute = safeCatalogPath(home, dir);
+            if (absolute !== undefined && await isDirectory(absolute, home)) {
+                configPath = absolute;
+                break;
+            }
+        }
+        const skillDirs = [];
+        const skills = [];
+        for (const dir of agent.skillDirs) {
+            const absolute = safeCatalogPath(home, dir);
+            if (absolute !== undefined && await isDirectory(absolute, home)) {
+                skillDirs.push(absolute);
+                skills.push(...await listSkillEntries(absolute, home));
+            }
+        }
+        const credentialPaths = [];
+        for (const file of agent.credentialFiles) {
+            const absolute = safeCatalogPath(home, file);
+            if (absolute !== undefined && await exists(absolute, home))
+                credentialPaths.push(absolute);
+        }
+        scans.push({
+            id: agent.id,
+            name: agent.name,
+            found: configPath !== undefined,
+            ...(configPath === undefined ? {} : { configPath }),
+            skills,
+            skillDirs,
+            hasCredentials: credentialPaths.length > 0,
+            credentialPaths,
+            ...(agent.install === undefined ? {} : { install: agent.install }),
+        });
+    }
+    return scans;
+}
+//# sourceMappingURL=discover.js.map

package/dist/src/agents/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/agents/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,YAAY,EAA0C,MAAM,cAAc,CAAC;AAqBpF,SAAS,eAAe,CAAC,IAAY,EAAE,YAAoB;IACzD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IAC9D,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,QAAgB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,QAAgB;IAC3D,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,SAAS;QACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA2B,EAAE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,UAA8B,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAChE,UAAU,GAAG,QAAQ,CAAC;gBACtB,MAAM;YACR,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,UAAU,KAAK,SAAS;YAC/B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YACnD,MAAM;YACN,SAAS;YACT,cAAc,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;YAC1C,eAAe;YACf,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/agents/import.d.ts

@@ -0,0 +1,67 @@
+import type { ToolReceipt } from "../core/contracts.js";
+import type { AgentScan } from "./discover.js";
+declare const IMPORT_SCHEMA_VERSION: "psyclaw/skill-import/v1";
+export interface ImportedFile {
+    sourcePath: string;
+    /** Canonical source path captured during the stable read. */
+    resolvedSourcePath: string;
+    destinationPath: string;
+    /** Path relative to the imported skill root. */
+    relativePath: string;
+    sha256: string;
+}
+export interface ImportedSkill {
+    name: string;
+    kind: "dir" | "file";
+    sourcePath: string;
+    resolvedSourcePath: string;
+    destinationPath: string;
+    files: ImportedFile[];
+}
+export interface ImportDiagnostic {
+    code: string;
+    /** A path is included only after it has passed redaction and length bounds. */
+    path?: string;
+}
+export interface SkillImportManifest {
+    schemaVersion: typeof IMPORT_SCHEMA_VERSION;
+    agentId: string;
+    agentName: string;
+    approval: {
+        actor: string;
+        reason: string;
+    };
+    importedAt: string;
+    skills: ImportedSkill[];
+    diagnostics: ImportDiagnostic[];
+    receipt: ToolReceipt;
+}
+export interface SkillImportResult {
+    manifest: SkillImportManifest;
+    manifestPath: string;
+    importedCount: number;
+    receipt: ToolReceipt;
+}
+export interface ImportAgentSkillsOptions {
+    root: string;
+    agent: AgentScan;
+    approval: {
+        approved: boolean;
+        actor: string;
+        reason: string;
+    };
+    now?: () => string;
+}
+/** Stable, non-sensitive import failure. Callers can inspect `code` without parsing prose. */
+export declare class SkillImportError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+/**
+ * Import only a discovered agent's allowlisted, stable Skill files. The source
+ * tree is copied to a private staging directory first; activation uses
+ * no-clobber primitives and every manifest is itself no-clobber/idempotent.
+ * Importing never enables a Skill.
+ */
+export declare function importAgentSkills(options: ImportAgentSkillsOptions): Promise<SkillImportResult>;
+export {};