skill-preflight 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SkillPreflight contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,132 @@
+# SkillPreflight
+
+SkillPreflight is a pre-install safety, token, and maintainability scorecard for AI agent skills.
+
+It helps users decide whether a Codex, Claude Code, Cursor, Gemini CLI, or other agent skill is safe and lightweight enough to install.
+
+## Quick Start
+
+Run without installing:
+
+```bash
+npx skill-preflight scan ./my-skill
+```
+
+Scan a GitHub repository before installing it:
+
+```bash
+npx skill-preflight scan https://github.com/user/some-skill
+```
+
+Scan common local skill directories:
+
+```bash
+npx skill-preflight scan --installed
+```
+
+## Local Development
+
+```bash
+npm install
+npm run build
+npm test
+npm run dev -- scan examples/risky-skill
+```
+
+## Score Model
+
+SkillPreflight uses a 100-point score:
+
+| Category | Points | What it checks |
+| --- | ---: | --- |
+| Security | 35 | Dangerous commands, secret access, exfiltration, prompt injection, remote script execution |
+| Permission restraint | 15 | Over-broad activation, unnecessary shell/network/file access |
+| Token efficiency | 15 | Oversized `SKILL.md`, repeated content, poor progressive disclosure |
+| Lightweight footprint | 10 | File count, total size, dependencies, large assets |
+| Maintainability | 10 | README, license, frontmatter, examples, documentation hygiene |
+| Reliability | 10 | Tests, fixtures, deterministic workflow, error handling |
+| Compatibility | 5 | Hardcoded local paths, OS-specific assumptions, fragile shell usage |
+
+## CLI
+
+```bash
+skill-preflight scan <target>
+```
+
+Options:
+
+```text
+--installed             Scan common installed skill directories.
+--format <format>       text, json, markdown, html, or sarif. Default: text.
+--out <file>            Write report to a file.
+--fail-below <score>    Exit with code 1 if any scanned skill is below this score.
+--keep-temp             Keep temporary clones for debugging.
+```
+
+Generate Shields-compatible badge JSON:
+
+```bash
+skill-preflight badge ./my-skill --out skill-preflight-badge.json
+```
+
+The badge payload can be served through a static endpoint or GitHub Pages:
+
+```json
+{
+  "schemaVersion": 1,
+  "label": "SkillPreflight",
+  "message": "91/100 A",
+  "color": "brightgreen"
+}
+```
+
+## GitHub Action
+
+After the package is published to npm and the repository is tagged, skill authors can scan every PR:
+
+```yaml
+name: SkillPreflight
+
+on: [pull_request, push]
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: agent-contracts/skill-preflight@v1
+        with:
+          target: "."
+          fail-below: "70"
+```
+
+For GitHub code scanning, emit SARIF:
+
+```bash
+skill-preflight scan . --format sarif --out skill-preflight.sarif
+```
+
+See `docs/github-action.md` for the full workflow.
+
+## Safety Principle
+
+SkillPreflight does not execute scripts inside scanned skills. It only reads files and performs static analysis.
+
+## Example Output
+
+```text
+shell-super-agent: 35/100 (F) - High risk, do not install blindly
+
+Top findings:
+- [CRITICAL] Remote script execution pattern (SKILL.md:15)
+- [HIGH] Prompt injection language (SKILL.md:8)
+- [HIGH] Potential secret or credential access (SKILL.md:10)
+```
+
+## Rule Catalog
+
+See `docs/rules.md` for the current static analysis rule catalog, including dependency, install-script, MCP config, token, and compatibility checks.
+
+## Publishing
+
+See `docs/release.md` for the first npm and GitHub release checklist.

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export declare function runCli(argv: string[]): Promise<void>;

package/dist/cli.js

@@ -0,0 +1,109 @@
+import { writeFile } from "node:fs/promises";
+import path from "node:path";
+import { Command } from "commander";
+import { scan } from "./core/scan.js";
+import { parseFormat, renderReport } from "./report/render.js";
+export async function runCli(argv) {
+    const program = new Command();
+    program
+        .name("skill-preflight")
+        .description("Pre-install safety, token, and maintainability scorecard for AI agent skills.")
+        .version("0.1.0");
+    program
+        .command("scan")
+        .argument("[target]", "Local skill path or GitHub repository URL")
+        .option("--installed", "Scan common installed skill directories")
+        .option("--format <format>", "Report format: text, json, markdown, html, sarif", "text")
+        .option("--out <file>", "Write report to a file")
+        .option("--fail-below <score>", "Exit with code 1 if any skill score is below this threshold")
+        .option("--keep-temp", "Keep temporary GitHub clones for debugging")
+        .action(async (target, options) => {
+        const format = parseFormat(options.format ?? "text");
+        const report = await scan({
+            target,
+            installed: options.installed,
+            keepTemp: options.keepTemp
+        });
+        const rendered = renderReport(report, format);
+        if (options.out) {
+            const outPath = path.resolve(options.out);
+            await writeFile(outPath, rendered, "utf8");
+            process.stdout.write(`Wrote ${format} report to ${outPath}\n`);
+        }
+        else {
+            process.stdout.write(rendered);
+        }
+        if (options.failBelow !== undefined) {
+            const threshold = Number(options.failBelow);
+            if (!Number.isFinite(threshold)) {
+                throw new Error(`Invalid --fail-below value: ${options.failBelow}`);
+            }
+            const failed = report.reports.some((skill) => skill.score < threshold);
+            if (failed) {
+                process.exitCode = 1;
+            }
+        }
+    });
+    program
+        .command("badge")
+        .argument("[target]", "Local skill path or GitHub repository URL")
+        .option("--installed", "Scan common installed skill directories")
+        .option("--out <file>", "Write Shields endpoint JSON to a file")
+        .option("--keep-temp", "Keep temporary GitHub clones for debugging")
+        .action(async (target, options) => {
+        const report = await scan({
+            target,
+            installed: options.installed,
+            keepTemp: options.keepTemp
+        });
+        const badge = renderBadge(report.summary.averageScore, report.summary.highRiskCount);
+        const rendered = `${JSON.stringify(badge, null, 2)}\n`;
+        if (options.out) {
+            const outPath = path.resolve(options.out);
+            await writeFile(outPath, rendered, "utf8");
+            process.stdout.write(`Wrote badge JSON to ${outPath}\n`);
+        }
+        else {
+            process.stdout.write(rendered);
+        }
+    });
+    program.showHelpAfterError();
+    try {
+        await program.parseAsync(argv);
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 1;
+    }
+}
+function renderBadge(score, highRiskCount) {
+    return {
+        schemaVersion: 1,
+        label: "SkillPreflight",
+        message: `${score}/100 ${badgeGrade(score)}`,
+        color: highRiskCount > 0 ? "red" : badgeColor(score)
+    };
+}
+function badgeGrade(score) {
+    if (score >= 90)
+        return "A";
+    if (score >= 80)
+        return "B";
+    if (score >= 70)
+        return "C";
+    if (score >= 60)
+        return "D";
+    return "F";
+}
+function badgeColor(score) {
+    if (score >= 90)
+        return "brightgreen";
+    if (score >= 80)
+        return "green";
+    if (score >= 70)
+        return "yellowgreen";
+    if (score >= 60)
+        return "orange";
+    return "red";
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAgB/D,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,iBAAiB,CAAC;SACvB,WAAW,CAAC,+EAA+E,CAAC;SAC5F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,UAAU,EAAE,2CAA2C,CAAC;SACjE,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,kDAAkD,EAAE,MAAM,CAAC;SACvF,MAAM,CAAC,cAAc,EAAE,wBAAwB,CAAC;SAChD,MAAM,CAAC,sBAAsB,EAAE,6DAA6D,CAAC;SAC7F,MAAM,CAAC,aAAa,EAAE,4CAA4C,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,OAA2B,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,cAAc,OAAO,IAAI,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;YACvE,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,UAAU,EAAE,2CAA2C,CAAC;SACjE,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,cAAc,EAAE,uCAAuC,CAAC;SAC/D,MAAM,CAAC,aAAa,EAAE,4CAA4C,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,OAA4B,EAAE,EAAE;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAEvD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,aAAqB;IAMvD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,GAAG,KAAK,QAAQ,UAAU,CAAC,KAAK,CAAC,EAAE;QAC5C,KAAK,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC;IACtC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC;IACtC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/categories.d.ts

@@ -0,0 +1,3 @@
+import type { CategoryDefinition } from "./types.js";
+export declare const CATEGORIES: CategoryDefinition[];
+export declare const MAX_SCORE: number;

package/dist/core/categories.js

@@ -0,0 +1,11 @@
+export const CATEGORIES = [
+    { id: "security", label: "Security", maxScore: 35 },
+    { id: "permissions", label: "Permission restraint", maxScore: 15 },
+    { id: "token", label: "Token efficiency", maxScore: 15 },
+    { id: "footprint", label: "Lightweight footprint", maxScore: 10 },
+    { id: "maintainability", label: "Maintainability", maxScore: 10 },
+    { id: "reliability", label: "Reliability", maxScore: 10 },
+    { id: "compatibility", label: "Compatibility", maxScore: 5 }
+];
+export const MAX_SCORE = CATEGORIES.reduce((sum, category) => sum + category.maxScore, 0);
+//# sourceMappingURL=categories.js.map

package/dist/core/categories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.js","sourceRoot":"","sources":["../../src/core/categories.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAyB;IAC9C,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnD,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,EAAE,EAAE;IAClE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE;IACxD,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjE,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjE,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE;IACzD,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC"}

package/dist/core/filesystem.d.ts

@@ -0,0 +1,9 @@
+import type { ResolvedTarget, ScannedFile, TextFile } from "./types.js";
+export declare function resolveTarget(target: string, keepTemp?: boolean): Promise<ResolvedTarget>;
+export declare function isGitHubUrl(value: string): boolean;
+export declare function discoverSkillRoots(rootPath: string): Promise<string[]>;
+export declare function readSkillFiles(rootPath: string): Promise<{
+    files: ScannedFile[];
+    textFiles: TextFile[];
+}>;
+export declare function commonInstalledSkillDirs(): string[];

package/dist/core/filesystem.js

@@ -0,0 +1,115 @@
+import { readdir, readFile, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { isProbablyText, pathExists, toPosixPath } from "./utils.js";
+const execFileAsync = promisify(execFile);
+const IGNORED_DIRS = new Set([
+    ".git",
+    "node_modules",
+    "dist",
+    "build",
+    "coverage",
+    ".next",
+    ".nuxt",
+    ".turbo",
+    ".cache",
+    "__pycache__"
+]);
+const MAX_TEXT_FILE_BYTES = 1024 * 1024;
+export async function resolveTarget(target, keepTemp = false) {
+    if (isGitHubUrl(target)) {
+        const tempRoot = path.join(os.tmpdir(), `skill-preflight-${randomUUID()}`);
+        await execFileAsync("git", ["clone", "--depth", "1", target, tempRoot], {
+            timeout: 120000,
+            windowsHide: true
+        });
+        return {
+            displayTarget: target,
+            localPath: tempRoot,
+            cleanup: keepTemp
+                ? undefined
+                : async () => {
+                    await rm(tempRoot, { recursive: true, force: true });
+                }
+        };
+    }
+    const localPath = path.resolve(target);
+    if (!(await pathExists(localPath))) {
+        throw new Error(`Target does not exist: ${target}`);
+    }
+    return {
+        displayTarget: target,
+        localPath
+    };
+}
+export function isGitHubUrl(value) {
+    return /^https:\/\/github\.com\/[^/]+\/[^/]+\/?$/.test(value.trim());
+}
+export async function discoverSkillRoots(rootPath) {
+    const directSkill = path.join(rootPath, "SKILL.md");
+    if (await pathExists(directSkill)) {
+        return [rootPath];
+    }
+    const roots = [];
+    await walk(rootPath, async (filePath) => {
+        if (path.basename(filePath).toLowerCase() === "skill.md") {
+            roots.push(path.dirname(filePath));
+        }
+    });
+    return [...new Set(roots)].sort();
+}
+export async function readSkillFiles(rootPath) {
+    const files = [];
+    const textFiles = [];
+    await walk(rootPath, async (absolutePath) => {
+        const buffer = await readFile(absolutePath);
+        const relativePath = toPosixPath(path.relative(rootPath, absolutePath));
+        const isText = buffer.length <= MAX_TEXT_FILE_BYTES && isProbablyText(buffer);
+        files.push({
+            path: relativePath,
+            absolutePath,
+            bytes: buffer.length,
+            isText
+        });
+        if (isText) {
+            const content = buffer.toString("utf8");
+            textFiles.push({
+                path: relativePath,
+                absolutePath,
+                bytes: buffer.length,
+                content,
+                lines: content.split(/\r?\n/)
+            });
+        }
+    });
+    return { files, textFiles };
+}
+async function walk(rootPath, onFile) {
+    const entries = await readdir(rootPath, { withFileTypes: true });
+    for (const entry of entries) {
+        const absolutePath = path.join(rootPath, entry.name);
+        if (entry.isDirectory()) {
+            if (!IGNORED_DIRS.has(entry.name)) {
+                await walk(absolutePath, onFile);
+            }
+            continue;
+        }
+        if (entry.isFile()) {
+            await onFile(absolutePath);
+        }
+    }
+}
+export function commonInstalledSkillDirs() {
+    const home = os.homedir();
+    const cwd = process.cwd();
+    return [
+        path.join(home, ".codex", "skills"),
+        path.join(home, ".claude", "skills"),
+        path.join(cwd, ".codex", "skills"),
+        path.join(cwd, ".claude", "skills")
+    ];
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/core/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/core/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,QAAQ,GAAG,KAAK;IAClE,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YACtE,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,OAAO;YACL,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,QAAQ;gBACf,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,IAAI,EAAE;oBACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;SACN,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,aAAa,EAAE,MAAM;QACrB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IAInD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,SAAS,GAAe,EAAE,CAAC;IAEjC,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAmB,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QAE9E,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,YAAY;YACZ,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,YAAY;gBACZ,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,QAAgB,EAAE,MAA2C;IAC/E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC;KACpC,CAAC;AACJ,CAAC"}

package/dist/core/rules.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "./types.js";
+export declare const rules: Rule[];