release-skill 0.9.16 → 0.9.18

package/adapters/cursor/bin/release-skill.mjs

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+/**
+ * release-skill CLI entry point.
+ *
+ * Loads the self-contained bundle (release-skill.bundle.mjs) which runs
+ * without node_modules. Fails closed with a clear error when the bundle
+ * is missing — never falls back to source CLI in installed state.
+ */
+
+import { stat } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const bundlePath = join(__dirname, 'release-skill.bundle.mjs');
+
+let bundleExists = false;
+try {
+  const st = await stat(bundlePath);
+  bundleExists = st.isFile();
+} catch {
+  // Bundle does not exist.
+}
+
+if (!bundleExists) {
+  // Fail closed with static text only: never interpolate bundlePath (or any
+  // other machine-specific value) so a copied/installed launcher cannot leak
+  // absolute paths, usernames, or host layout on stdout/stderr. This branch
+  // is self-contained by design — it must not import src/* or rely on the
+  // missing bundle's redaction helpers.
+  console.error(
+    `Error: release-skill bundle not found (release-skill.bundle.mjs).\n` +
+    `The self-contained bundle is required for installed-plugin execution.\n` +
+    `Reinstall the plugin, or run 'node scripts/build-bundle.mjs' in a source checkout to rebuild it.`,
+  );
+  process.exit(1);
+}
+
+// The bundle owns the command lifecycle: its entry awaits command completion
+// and exits with the real business exit code (success, business errors,
+// handled async rejections, unknown commands). The launcher only guards the
+// load itself: if the bundle cannot be evaluated (corrupt or incompatible
+// build), fail closed with static text only — module-load failures carry
+// absolute paths in their messages, so the failure is never interpolated.
+try {
+  await import(bundlePath);
+} catch {
+  console.error(
+    `Error: release-skill bundle failed to load (release-skill.bundle.mjs).\n` +
+    `The self-contained bundle is required for installed-plugin execution.\n` +
+    `Reinstall the plugin, or run 'node scripts/build-bundle.mjs' in a source checkout to rebuild it.`,
+  );
+  process.exit(1);
+}

package/adapters/cursor/bin/rules.json

@@ -0,0 +1,104 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.contracts.rules",
+  "contractsVersion": "1.18.0",
+  "budget": {
+    "firstVersionMax": 20,
+    "absoluteMax": 30,
+    "note": "Mechanical gate: runChecks fails with SFC1008 when the mandatory rule count exceeds firstVersionMax, and fails harder when it exceeds absoluteMax. The count includes every rule with severity mandatory, including budget rules themselves."
+  },
+  "checkTypes": [
+    {
+      "type": "schema.compile",
+      "description": "Each registered schema must compile under its declared dialect; an uncompilable schema fails with SFC1012."
+    },
+    {
+      "type": "schema.unique-id",
+      "description": "No two registered schemas may share a $id; duplicates fail with SFC1003."
+    },
+    {
+      "type": "protocol.unique-name",
+      "description": "No two registered protocols may share the same name and version; duplicates fail with SFC1004."
+    },
+    {
+      "type": "schema.ref-resolves",
+      "description": "Every $ref in registered schemas must resolve within the registered schema set; unresolved targets fail with SFC1005."
+    },
+    {
+      "type": "schema.dialect-declared",
+      "description": "Every registered schema must declare a dialect from the supported set, consistent with its $schema URI; violations fail with SFC1006."
+    },
+    {
+      "type": "fixture.positive-passes",
+      "description": "Every fixture expecting validity must validate against its target schema under its declared dialect and policy; mismatches fail with SFC1010."
+    },
+    {
+      "type": "fixture.negative-coded",
+      "description": "Every fixture expecting invalidity must fail with exactly its declared stable error code; mismatches fail with SFC1010."
+    },
+    {
+      "type": "error-code.registered",
+      "description": "Every error code declared in fixture expectations must exist in the frozen error registry; unknown codes fail with SFC1009."
+    },
+    {
+      "type": "rules.budget",
+      "description": "The mandatory rule count must stay within the first-version budget (and never exceed the absolute cap); excess fails with SFC1008."
+    }
+  ],
+  "rules": [
+    {
+      "ruleId": "CR-001",
+      "severity": "mandatory",
+      "checkType": "schema.compile",
+      "target": { "registry": "schemas" }
+    },
+    {
+      "ruleId": "CR-006",
+      "severity": "mandatory",
+      "checkType": "schema.unique-id",
+      "target": { "registry": "schemas" }
+    },
+    {
+      "ruleId": "CR-007",
+      "severity": "mandatory",
+      "checkType": "protocol.unique-name",
+      "target": { "registry": "protocols" }
+    },
+    {
+      "ruleId": "CR-008",
+      "severity": "mandatory",
+      "checkType": "schema.ref-resolves",
+      "target": { "registry": "schemas" }
+    },
+    {
+      "ruleId": "CR-009",
+      "severity": "mandatory",
+      "checkType": "schema.dialect-declared",
+      "target": { "registry": "schemas" }
+    },
+    {
+      "ruleId": "CR-010",
+      "severity": "mandatory",
+      "checkType": "fixture.positive-passes",
+      "target": { "fixtures": "expect-valid" }
+    },
+    {
+      "ruleId": "CR-011",
+      "severity": "mandatory",
+      "checkType": "fixture.negative-coded",
+      "target": { "fixtures": "expect-invalid" }
+    },
+    {
+      "ruleId": "CR-012",
+      "severity": "mandatory",
+      "checkType": "error-code.registered",
+      "target": { "references": "fixture-expectations" }
+    },
+    {
+      "ruleId": "CR-013",
+      "severity": "mandatory",
+      "checkType": "rules.budget",
+      "target": { "budget": "firstVersionMax" }
+    }
+  ]
+}

package/adapters/cursor/bin/schemas/consumer-contract-vector.schema.json

@@ -0,0 +1,149 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/consumer-contract-vector.json",
+  "title": "ConsumerContractVector",
+  "description": "A public, version-bound input and expected-observation vector for a Foundation consumer contract.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "vectorId", "vectorSetId", "capabilityId", "foundationVersion", "contractId", "caseClass", "strategy", "request", "expected"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.consumer-contract-vector" },
+    "vectorId": { "type": "string", "minLength": 1 },
+    "vectorSetId": { "type": "string", "minLength": 1 },
+    "capabilityId": { "type": "string", "minLength": 1 },
+    "foundationVersion": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" },
+    "contractId": { "type": "string", "minLength": 1 },
+    "caseClass": { "enum": ["positive", "negative", "indeterminate"] },
+    "strategy": { "enum": ["real-pure", "official-fake"] },
+    "request": { "type": "object" },
+    "expected": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["outcome", "valueRelation"],
+          "properties": {
+            "outcome": { "const": "return" },
+            "valueRelation": { "const": "atomic-write-contained-absolute-target" }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["outcome", "value"],
+          "properties": {
+            "outcome": { "const": "return" },
+            "value": {}
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["outcome", "errorCode"],
+          "properties": {
+            "outcome": { "const": "throw" },
+            "errorCode": { "type": "string", "pattern": "^SFC[0-9]{4}$" }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["outcome", "errorCode", "errorKind"],
+          "properties": {
+            "outcome": { "const": "throw" },
+            "errorCode": { "type": "string", "pattern": "^SFC[0-9]{4}$" },
+            "errorKind": { "const": "path-traversal" }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["outcome", "allowedStates", "failClosed"],
+          "properties": {
+            "outcome": { "const": "indeterminate" },
+            "allowedStates": {
+              "type": "array",
+              "minItems": 1,
+              "items": { "enum": ["return", "throw", "indeterminate"] },
+              "uniqueItems": true
+            },
+            "failClosed": { "const": true }
+          }
+        }
+      ]
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": { "capabilityId": { "const": "foundation.harness.atomic-write" } },
+        "required": ["capabilityId"]
+      },
+      "then": {
+        "properties": {
+          "request": {
+            "type": "object",
+            "required": ["root"],
+            "properties": { "root": { "$ref": "#/$defs/atomicRoot" } }
+          }
+        }
+      },
+      "else": {
+        "properties": {
+          "request": {
+            "type": "object",
+            "properties": {
+              "root": {
+                "not": {
+                  "type": "object",
+                  "required": ["runtimeBinding"],
+                  "properties": { "runtimeBinding": { "const": "atomic-write-canonical-root" } }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "capabilityId": { "const": "foundation.harness.atomic-write" },
+          "caseClass": { "const": "negative" }
+        },
+        "required": ["capabilityId", "caseClass"]
+      },
+      "then": {
+        "properties": {
+          "expected": {
+            "type": "object",
+            "required": ["errorKind"],
+            "properties": { "errorKind": { "const": "path-traversal" } }
+          }
+        }
+      },
+      "else": {
+        "properties": {
+          "expected": {
+            "type": "object",
+            "not": {
+              "required": ["errorKind"],
+              "properties": { "errorKind": true }
+            }
+          }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "atomicRoot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runtimeBinding"],
+      "properties": {
+        "runtimeBinding": { "const": "atomic-write-canonical-root" }
+      }
+    }
+  }
+}

package/adapters/cursor/data/hosts/claude/host-descriptor.json

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "claude",
+  "displayName": "Claude Code",
+  "support": "supported",
+  "maturity": "stable",
+  "sourceAliases": [
+    "claude-code"
+  ],
+  "driverId": "claude-version-v1",
+  "adapterFormat": "skill-directory-v1",
+  "verification": {
+    "driverId": "claude-code-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "pathCategories": [
+    {
+      "id": "claude-user-skills",
+      "role": "skill-root",
+      "scope": "user",
+      "anchor": "user-home",
+      "relPath": ".claude/skills"
+    },
+    {
+      "id": "claude-project-skills",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": ".claude/skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/codebuddy/host-descriptor.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "codebuddy",
+  "displayName": "CodeBuddy",
+  "support": "manual",
+  "maturity": "manual",
+  "verification": {
+    "driverId": "codebuddy-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "sourceAliases": [],
+  "pathCategories": [],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/codex/host-descriptor.json

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "codex",
+  "displayName": "Codex",
+  "support": "supported",
+  "maturity": "stable",
+  "sourceAliases": [
+    "openai-codex"
+  ],
+  "driverId": "codex-version-v1",
+  "adapterFormat": "skill-directory-v1",
+  "verification": {
+    "driverId": "codex-exec-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "pathCategories": [
+    {
+      "id": "codex-user-skills",
+      "role": "skill-root",
+      "scope": "user",
+      "anchor": "user-home",
+      "relPath": ".agents/skills"
+    },
+    {
+      "id": "codex-project-skills",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": ".agents/skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/cursor/host-descriptor.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "cursor",
+  "displayName": "Cursor",
+  "support": "manual",
+  "maturity": "developer-preview",
+  "sourceAliases": [],
+  "verification": {
+    "driverId": "cursor-agent-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "pathCategories": [
+    {
+      "id": "cursor-project-skills",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": ".cursor/skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/deepseek-harness/host-descriptor.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "deepseek-harness",
+  "displayName": "DeepSeek Harness",
+  "support": "manual",
+  "maturity": "developer-preview",
+  "sourceAliases": [
+    "dsh"
+  ],
+  "pathCategories": [],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/kimi-code/host-descriptor.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "kimi-code",
+  "displayName": "Kimi Code",
+  "support": "manual",
+  "maturity": "manual",
+  "verification": {
+    "driverId": "kimi-code-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "sourceAliases": [
+    "kimi"
+  ],
+  "pathCategories": [
+    {
+      "id": "plugin-adapter-skill-root",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": "skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/qoder/host-descriptor.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "qoder",
+  "displayName": "Qoder",
+  "support": "manual",
+  "maturity": "manual",
+  "sourceAliases": [],
+  "verification": {
+    "driverId": "qodercli-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "pathCategories": [],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/adapters/cursor/data/hosts/registry.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-registry",
+  "hosts": [
+    "claude",
+    "codex",
+    "cursor",
+    "kimi-code",
+    "workbuddy",
+    "codebuddy",
+    "qoder",
+    "deepseek-harness"
+  ]
+}

package/adapters/cursor/data/hosts/workbuddy/host-descriptor.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "workbuddy",
+  "displayName": "WorkBuddy",
+  "support": "manual",
+  "maturity": "manual",
+  "verification": {
+    "driverId": "workbuddy-codebuddy-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "sourceAliases": [],
+  "pathCategories": [
+    {
+      "id": "plugin-adapter-skill-root",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": "skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}