skilld 1.5.2 → 1.5.3

package/dist/_chunks/sanitize.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.mjs","names":[],"sources":["../../src/core/sanitize.ts"],"sourcesContent":["/**\n * Markdown sanitizer for prompt injection defense.\n *\n * Strips injection vectors from untrusted markdown before it reaches\n * agent-readable files (cached references, SKILL.md, search output).\n *\n * Threat model: agent instruction injection, not browser XSS.\n * Lightweight regex-based — markdown is consumed as text by AI agents.\n */\n\n/** Zero-width and invisible formatting characters used to hide text from human review */\n// eslint-disable-next-line no-misleading-character-class -- intentionally matching individual invisible chars\nconst ZERO_WIDTH_RE = /[\\u200B\\u200C\\uFEFF\\u2060\\u200D\\u061C\\u180E\\u200E\\u200F\\u2028\\u2029]/gu\n\n/** HTML comments (single-line and multi-line), except skilld section markers */\nconst HTML_COMMENT_RE = /<!--(?!\\s*\\/?skilld:)[\\s\\S]*?-->/g\n\n/**\n * Agent directive tags — stripped globally (including inside code blocks).\n * These are never legitimate in any context; they're purely injection vectors.\n */\nconst AGENT_DIRECTIVE_TAGS = [\n  'system',\n  'instructions',\n  'override',\n  'prompt',\n  'context',\n  'role',\n  'user-prompt',\n  'assistant',\n  'tool-use',\n  'tool-result',\n  'system-prompt',\n  'human',\n  'admin',\n]\n\n/**\n * Dangerous HTML tags — stripped only outside fenced code blocks.\n * May appear legitimately in code examples (e.g. `<script setup>` in Vue docs).\n */\nconst DANGEROUS_HTML_TAGS = [\n  'script',\n  'iframe',\n  'style',\n  'meta',\n  'object',\n  'embed',\n  'form',\n]\n/**\n * Decode HTML entity-encoded angle brackets so tag stripping catches encoded variants.\n * Only decodes < and > (named, decimal, hex) — minimal to avoid false positives.\n */\nfunction decodeAngleBracketEntities(text: string): string {\n  return text\n    .replace(/&lt;/gi, '<')\n    .replace(/&gt;/gi, '>')\n    .replace(/&#0*60;/g, '<')\n    .replace(/&#0*62;/g, '>')\n    .replace(/&#x0*3c;/gi, '<')\n    .replace(/&#x0*3e;/gi, '>')\n}\n\n/** Strip paired and standalone instances of the given tag names */\nfunction stripTags(text: string, tags: string[]): string {\n  if (!tags.length)\n    return text\n  const tagGroup = tags.join('|')\n  // First strip paired tags with content between them\n  const pairedRe = new RegExp(`<(${tagGroup})(\\\\s[^>]*)?>([\\\\s\\\\S]*?)<\\\\/\\\\1>`, 'gi')\n  let result = text.replace(pairedRe, '')\n  // Then strip any remaining standalone open/close/self-closing tags\n  const standaloneRe = new RegExp(`<\\\\/?(${tagGroup})(\\\\s[^>]*)?\\\\/?>`, 'gi')\n  result = result.replace(standaloneRe, '')\n  return result\n}\n\n/** External image markdown: ![alt](https://...) or ![alt](http://...) */\nconst EXTERNAL_IMAGE_RE = /!\\[([^\\]]*)\\]\\(https?:\\/\\/[^)]+\\)/gi\n\n/**\n * External link markdown: [text](https://...) or [text](http://...)\n * Preserves relative links and anchors.\n */\nconst EXTERNAL_LINK_RE = /\\[([^\\]]*)\\]\\((https?:\\/\\/[^)]+)\\)/gi\n\n/** Dangerous URI protocols in links/images — match entire [text](protocol:...) */\nconst DANGEROUS_PROTOCOL_RE = /!?\\[([^\\]]*)\\]\\(\\s*(javascript|data|vbscript|file)\\s*:[^)]*\\)/gi\nconst DANGEROUS_PROTOCOL_ENCODED_RE = /!?\\[([^\\]]*)\\]\\(\\s*(?:(?:j|%6a|%4a)(?:a|%61|%41)(?:v|%76|%56)(?:a|%61|%41)(?:s|%73|%53)(?:c|%63|%43)(?:r|%72|%52)(?:i|%69|%49)(?:p|%70|%50)(?:t|%74|%54)|(?:d|%64|%44)(?:a|%61|%41)(?:t|%74|%54)(?:a|%61|%41)|(?:v|%76|%56)(?:b|%62|%42)(?:s|%73|%53)(?:c|%63|%43)(?:r|%72|%52)(?:i|%69|%49)(?:p|%70|%50)(?:t|%74|%54))\\s*:[^)]*\\)/gi\n\n/** Directive-style lines that look like agent instructions */\nconst DIRECTIVE_LINE_RE = /^[ \\t]*(SYSTEM|OVERRIDE|INSTRUCTION|NOTE TO AI|IGNORE PREVIOUS|IGNORE ALL PREVIOUS|DISREGARD|FORGET ALL|NEW INSTRUCTIONS?|IMPORTANT SYSTEM|ADMIN OVERRIDE)\\s*[:>].*/gim\n\n/** Base64 blob: 100+ chars of pure base64 alphabet on a single line */\nconst BASE64_BLOB_RE = /^[A-Z0-9+/=]{100,}$/gim\n\n/** Unicode escape spam: 4+ consecutive \\uXXXX sequences */\nconst UNICODE_ESCAPE_SPAM_RE = /(\\\\u[\\dA-Fa-f]{4}){4,}/g\n\n/**\n * Claude Code dynamic context: !`command` executes shell commands inline when a skill loads.\n * Matches !` followed by content and closing backtick(s) of same length.\n * Stripped globally — never legitimate in generated skills, always a command injection vector.\n */\nconst DYNAMIC_COMMAND_RE = /!(`+)([^`]+)\\1/g\n\n/** Emoji characters — token-inefficient (2-3x cost), distort embeddings, semantically ambiguous for LLMs */\n// Also strips variation selectors (\\uFE0E text, \\uFE0F emoji) which dangle after emoji removal\nconst EMOJI_RE = /[\\p{Extended_Pictographic}\\uFE0E\\uFE0F]/gu\n\n/**\n * Process content outside of fenced code blocks.\n * Uses a line-by-line state machine to properly track fence boundaries,\n * handling nested fences, mismatched lengths, and mixed backtick/tilde fences.\n * Unclosed fences are treated as non-code for security (prevents bypass via malformed fences).\n */\nexport function processOutsideCodeBlocks(content: string, fn: (text: string) => string): string {\n  const lines = content.split('\\n')\n  const result: string[] = []\n  let nonCodeBuffer: string[] = []\n  let codeBuffer: string[] = []\n  let inCodeBlock = false\n  let fenceChar = ''\n  let fenceLen = 0\n\n  function flushNonCode() {\n    if (nonCodeBuffer.length > 0) {\n      result.push(fn(nonCodeBuffer.join('\\n')))\n      nonCodeBuffer = []\n    }\n  }\n\n  for (const line of lines) {\n    const trimmed = line.trimStart()\n\n    if (!inCodeBlock) {\n      const match = trimmed.match(/^(`{3,}|~{3,})/)\n      if (match) {\n        flushNonCode()\n        inCodeBlock = true\n        fenceChar = match[1]![0]!\n        fenceLen = match[1]!.length\n        codeBuffer = [line]\n        continue\n      }\n      nonCodeBuffer.push(line)\n    }\n    else {\n      const match = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (match && match[1]![0] === fenceChar && match[1]!.length >= fenceLen) {\n        // Properly closed — emit code block as-is\n        result.push(codeBuffer.join('\\n'))\n        result.push(line)\n        codeBuffer = []\n        inCodeBlock = false\n        fenceChar = ''\n        fenceLen = 0\n        continue\n      }\n      codeBuffer.push(line)\n    }\n  }\n\n  flushNonCode()\n\n  // Unclosed fence: treat as non-code so sanitization still applies\n  if (inCodeBlock && codeBuffer.length > 0) {\n    result.push(fn(codeBuffer.join('\\n')))\n  }\n\n  return result.join('\\n')\n}\n\n/**\n * Sanitize markdown content to strip prompt injection vectors.\n * Applied at every markdown emission point (cache writes, SKILL.md, search output).\n */\nexport function sanitizeMarkdown(content: string): string {\n  if (!content)\n    return content\n\n  // Layer 1: Strip zero-width characters (global, including in code blocks)\n  let result = content.replace(ZERO_WIDTH_RE, '')\n\n  // Layer 2: Strip dynamic command placeholders globally (!`command` → command injection vector)\n  result = result.replace(DYNAMIC_COMMAND_RE, '')\n\n  // Layer 3: Strip agent directive tags globally (never legitimate, even in code blocks)\n  result = stripTags(result, AGENT_DIRECTIVE_TAGS)\n\n  // Layers 4-10: Only outside fenced code blocks\n  result = processOutsideCodeBlocks(result, (text) => {\n    // Protect inline code spans from tag stripping (e.g. `<script setup>` in Vue docs)\n    const inlineCodeSpans: string[] = []\n    let t = text.replace(/(`+)([^`]+)\\1/g, (match) => {\n      const idx = inlineCodeSpans.length\n      inlineCodeSpans.push(match)\n      return `\\x00IC${idx}\\x00`\n    })\n\n    // Layer 4: Strip HTML comments (outside code blocks where they're hidden from review;\n    // inside code blocks they render as visible text and are legitimate documentation)\n    t = t.replace(HTML_COMMENT_RE, '')\n\n    // Layer 5: Decode entities + strip remaining dangerous tags (HTML + entity-encoded agent directives)\n    t = decodeAngleBracketEntities(t)\n    t = stripTags(t, [...AGENT_DIRECTIVE_TAGS, ...DANGEROUS_HTML_TAGS])\n\n    // Layer 6: Strip external images (exfil via query params)\n    t = t.replace(EXTERNAL_IMAGE_RE, '')\n\n    // Layer 7: Convert external links to plain text\n    t = t.replace(EXTERNAL_LINK_RE, '$1')\n\n    // Layer 8: Strip dangerous protocols (raw and URL-encoded)\n    t = t.replace(DANGEROUS_PROTOCOL_RE, '')\n    t = t.replace(DANGEROUS_PROTOCOL_ENCODED_RE, '')\n\n    // Layer 9: Strip directive-style lines\n    t = t.replace(DIRECTIVE_LINE_RE, '')\n\n    // Layer 10: Strip encoded payloads\n    t = t.replace(BASE64_BLOB_RE, '')\n    t = t.replace(UNICODE_ESCAPE_SPAM_RE, '')\n\n    // Layer 11: Strip emoji (token-inefficient, distort embeddings, semantically ambiguous)\n    t = t.replace(EMOJI_RE, '')\n\n    // Restore inline code spans\n    t = t.replace(/\\0IC(\\d+)\\0/g, (_, idx) => inlineCodeSpans[Number(idx)] || '')\n\n    return t\n  })\n\n  return result\n}\n\n// --- Markdown repair ---\n\n/** Heading missing space after #: `##Heading` → `## Heading` */\nconst HEADING_NO_SPACE_RE = /^(#{1,6})([^\\s#])/gm\n\n/** 3+ consecutive blank lines → 2 */\nconst EXCESSIVE_BLANKS_RE = /\\n{4,}/g\n\n/** Trailing whitespace on lines (preserve intentional double-space line breaks) */\nconst TRAILING_WHITESPACE_RE = /[ \\t]+$/gm\n\n/** Emoji at start of line inside a code block — LLM forgot to close the block */\nconst EMOJI_LINE_START_RE = /^\\p{Extended_Pictographic}/u\n\n/**\n * Close unclosed fenced code blocks.\n * Walks line-by-line tracking open/close state.\n */\nfunction closeUnclosedCodeBlocks(content: string): string {\n  const lines = content.split('\\n')\n  const result: string[] = []\n  let inCodeBlock = false\n  let fence = ''\n\n  for (const line of lines) {\n    const trimmed = line.trimStart()\n    if (!inCodeBlock) {\n      const match = trimmed.match(/^(`{3,}|~{3,})/)\n      if (match) {\n        inCodeBlock = true\n        fence = match[1]![0]!.repeat(match[1]!.length)\n      }\n    }\n    else {\n      // Check for closing fence (same char, at least same length)\n      const match = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (match && match[1]![0] === fence[0] && match[1]!.length >= fence.length) {\n        inCodeBlock = false\n        fence = ''\n      }\n      else {\n        // New fence opener inside unclosed block (same char, same length, with lang tag)\n        // LLMs commonly forget to close a code block before starting a new one\n        const openMatch = trimmed.match(/^(`{3,}|~{3,})\\S/)\n        if (openMatch && openMatch[1]![0] === fence[0] && openMatch[1]!.length === fence.length) {\n          result.push(fence)\n          // fence char/length stays the same since both match\n        }\n        // Emoji at line start → LLM forgot to close code block before markdown content\n        else if (EMOJI_LINE_START_RE.test(trimmed)) {\n          result.push(fence)\n          inCodeBlock = false\n          fence = ''\n        }\n      }\n    }\n    result.push(line)\n  }\n\n  // If still inside a code block, close it\n  if (inCodeBlock) {\n    // Ensure trailing newline before closing fence\n    if (result.length > 0 && result.at(-1) !== '')\n      result.push('')\n    result.push(fence)\n  }\n\n  return result.join('\\n')\n}\n\n/**\n * Remove empty code blocks and deduplicate consecutive identical code blocks.\n * Empty blocks arise when emoji/fence recovery leaves orphaned fences.\n * Duplicate blocks arise when LLMs repeat the same code example.\n */\nfunction cleanupCodeBlocks(content: string): string {\n  const lines = content.split('\\n')\n  const toRemove = new Set<number>()\n  let prevCodeContent: string | undefined\n  let i = 0\n\n  while (i < lines.length) {\n    const trimmed = lines[i]!.trimStart()\n    const fm = trimmed.match(/^(`{3,}|~{3,})/)\n    if (!fm) {\n      // Non-blank text between code blocks resets dedup tracking\n      if (trimmed)\n        prevCodeContent = undefined\n      i++\n      continue\n    }\n\n    const fChar = fm[1]![0]!\n    const fLen = fm[1]!.length\n    const openIdx = i\n    i++\n\n    let closeIdx = -1\n    while (i < lines.length) {\n      const ct = lines[i]!.trimStart()\n      const cm = ct.match(/^(`{3,}|~{3,})\\s*$/)\n      if (cm && cm[1]![0] === fChar && cm[1]!.length >= fLen) {\n        closeIdx = i\n        i++\n        break\n      }\n      i++\n    }\n\n    if (closeIdx === -1)\n      continue\n\n    const inner = lines.slice(openIdx + 1, closeIdx).join('\\n').trim()\n\n    if (!inner) {\n      for (let j = openIdx; j <= closeIdx; j++) toRemove.add(j)\n    }\n    else if (inner === prevCodeContent) {\n      for (let j = openIdx; j <= closeIdx; j++) toRemove.add(j)\n    }\n    else {\n      prevCodeContent = inner\n    }\n  }\n\n  if (!toRemove.size)\n    return content\n  return lines.filter((_, idx) => !toRemove.has(idx)).join('\\n')\n}\n\n/**\n * Close unclosed inline code spans.\n * Scans each line for unmatched backtick(s) and appends closing backtick(s).\n * Tracks fenced code blocks internally to handle any fence length.\n */\nfunction closeUnclosedInlineCode(content: string): string {\n  const lines = content.split('\\n')\n  let inFence = false\n  let fenceChar = ''\n  let fenceLen = 0\n\n  return lines.map((line) => {\n    const trimmed = line.trimStart()\n    if (!inFence) {\n      const m = trimmed.match(/^(`{3,}|~{3,})/)\n      if (m) {\n        inFence = true\n        fenceChar = m[1]![0]!\n        fenceLen = m[1]!.length\n        return line\n      }\n    }\n    else {\n      const m = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (m && m[1]![0] === fenceChar && m[1]!.length >= fenceLen) {\n        inFence = false\n      }\n      return line\n    }\n\n    // Outside fenced code blocks — fix unclosed inline backticks\n    let i = 0\n    while (i < line.length) {\n      if (line[i] === '`') {\n        const seqStart = i\n        while (i < line.length && line[i] === '`') i++\n        const seqLen = i - seqStart\n        let found = false\n        let j = i\n        while (j < line.length) {\n          if (line[j] === '`') {\n            const closeStart = j\n            while (j < line.length && line[j] === '`') j++\n            if (j - closeStart === seqLen) {\n              found = true\n              i = j\n              break\n            }\n          }\n          else {\n            j++\n          }\n        }\n        if (!found) {\n          line = `${line}${'`'.repeat(seqLen)}`\n          i = line.length\n        }\n      }\n      else {\n        i++\n      }\n    }\n    return line\n  }).join('\\n')\n}\n\n/**\n * Repair broken markdown syntax.\n * Fixes common issues in fetched documentation:\n * - Unclosed fenced code blocks\n * - Unclosed inline code spans\n * - Missing space after heading # markers\n * - Excessive consecutive blank lines\n * - Trailing whitespace\n */\nexport function repairMarkdown(content: string): string {\n  if (!content)\n    return content\n\n  let result = content\n\n  // Fix unclosed fenced code blocks (must run before other line-level fixes)\n  result = closeUnclosedCodeBlocks(result)\n\n  // Remove empty and duplicate code blocks (artifacts from fence recovery)\n  result = cleanupCodeBlocks(result)\n\n  // Fix unclosed inline code spans\n  result = closeUnclosedInlineCode(result)\n\n  // Fix heading spacing (only outside code blocks)\n  result = processOutsideCodeBlocks(result, text =>\n    text.replace(HEADING_NO_SPACE_RE, '$1 $2'))\n\n  // Normalize excessive blank lines\n  result = result.replace(EXCESSIVE_BLANKS_RE, '\\n\\n\\n')\n\n  // Strip trailing whitespace\n  result = result.replace(TRAILING_WHITESPACE_RE, '')\n\n  return result\n}\n"],"mappings":";;;;;;;;;;;AAYA,MAAM,gBAAgB;;AAGtB,MAAM,kBAAkB;;;;;AAMxB,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;AAMD,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;AAKD,SAAS,2BAA2B,MAAsB;AACxD,QAAO,KACJ,QAAQ,UAAU,IAAI,CACtB,QAAQ,UAAU,IAAI,CACtB,QAAQ,YAAY,IAAI,CACxB,QAAQ,YAAY,IAAI,CACxB,QAAQ,cAAc,IAAI,CAC1B,QAAQ,cAAc,IAAI;;;AAI/B,SAAS,UAAU,MAAc,MAAwB;AACvD,KAAI,CAAC,KAAK,OACR,QAAO;CACT,MAAM,WAAW,KAAK,KAAK,IAAI;CAE/B,MAAM,WAAW,IAAI,OAAO,KAAK,SAAS,oCAAoC,KAAK;CACnF,IAAI,SAAS,KAAK,QAAQ,UAAU,GAAG;CAEvC,MAAM,eAAe,IAAI,OAAO,SAAS,SAAS,oBAAoB,KAAK;AAC3E,UAAS,OAAO,QAAQ,cAAc,GAAG;AACzC,QAAO;;;AAIT,MAAM,oBAAoB;;;;;AAM1B,MAAM,mBAAmB;;AAGzB,MAAM,wBAAwB;AAC9B,MAAM,gCAAgC;;AAGtC,MAAM,oBAAoB;;AAG1B,MAAM,iBAAiB;;AAGvB,MAAM,yBAAyB;;;;;;AAO/B,MAAM,qBAAqB;;AAI3B,MAAM,WAAW;;;;;;;AAQjB,SAAgB,yBAAyB,SAAiB,IAAsC;CAC9F,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,SAAmB,EAAE;CAC3B,IAAI,gBAA0B,EAAE;CAChC,IAAI,aAAuB,EAAE;CAC7B,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI,WAAW;CAEf,SAAS,eAAe;AACtB,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAO,KAAK,GAAG,cAAc,KAAK,KAAK,CAAC,CAAC;AACzC,mBAAgB,EAAE;;;AAItB,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,WAAW;AAEhC,MAAI,CAAC,aAAa;GAChB,MAAM,QAAQ,QAAQ,MAAM,iBAAiB;AAC7C,OAAI,OAAO;AACT,kBAAc;AACd,kBAAc;AACd,gBAAY,MAAM,GAAI;AACtB,eAAW,MAAM,GAAI;AACrB,iBAAa,CAAC,KAAK;AACnB;;AAEF,iBAAc,KAAK,KAAK;SAErB;GACH,MAAM,QAAQ,QAAQ,MAAM,qBAAqB;AACjD,OAAI,SAAS,MAAM,GAAI,OAAO,aAAa,MAAM,GAAI,UAAU,UAAU;AAEvE,WAAO,KAAK,WAAW,KAAK,KAAK,CAAC;AAClC,WAAO,KAAK,KAAK;AACjB,iBAAa,EAAE;AACf,kBAAc;AACd,gBAAY;AACZ,eAAW;AACX;;AAEF,cAAW,KAAK,KAAK;;;AAIzB,eAAc;AAGd,KAAI,eAAe,WAAW,SAAS,EACrC,QAAO,KAAK,GAAG,WAAW,KAAK,KAAK,CAAC,CAAC;AAGxC,QAAO,OAAO,KAAK,KAAK;;;;;;AAO1B,SAAgB,iBAAiB,SAAyB;AACxD,KAAI,CAAC,QACH,QAAO;CAGT,IAAI,SAAS,QAAQ,QAAQ,eAAe,GAAG;AAG/C,UAAS,OAAO,QAAQ,oBAAoB,GAAG;AAG/C,UAAS,UAAU,QAAQ,qBAAqB;AAGhD,UAAS,yBAAyB,SAAS,SAAS;EAElD,MAAM,kBAA4B,EAAE;EACpC,IAAI,IAAI,KAAK,QAAQ,mBAAmB,UAAU;GAChD,MAAM,MAAM,gBAAgB;AAC5B,mBAAgB,KAAK,MAAM;AAC3B,UAAO,SAAS,IAAI;IACpB;AAIF,MAAI,EAAE,QAAQ,iBAAiB,GAAG;AAGlC,MAAI,2BAA2B,EAAE;AACjC,MAAI,UAAU,GAAG,CAAC,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAGnE,MAAI,EAAE,QAAQ,mBAAmB,GAAG;AAGpC,MAAI,EAAE,QAAQ,kBAAkB,KAAK;AAGrC,MAAI,EAAE,QAAQ,uBAAuB,GAAG;AACxC,MAAI,EAAE,QAAQ,+BAA+B,GAAG;AAGhD,MAAI,EAAE,QAAQ,mBAAmB,GAAG;AAGpC,MAAI,EAAE,QAAQ,gBAAgB,GAAG;AACjC,MAAI,EAAE,QAAQ,wBAAwB,GAAG;AAGzC,MAAI,EAAE,QAAQ,UAAU,GAAG;AAG3B,MAAI,EAAE,QAAQ,iBAAiB,GAAG,QAAQ,gBAAgB,OAAO,IAAI,KAAK,GAAG;AAE7E,SAAO;GACP;AAEF,QAAO;;;AAMT,MAAM,sBAAsB;;AAG5B,MAAM,sBAAsB;;AAG5B,MAAM,yBAAyB;;AAG/B,MAAM,sBAAsB;;;;;AAM5B,SAAS,wBAAwB,SAAyB;CACxD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,SAAmB,EAAE;CAC3B,IAAI,cAAc;CAClB,IAAI,QAAQ;AAEZ,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,CAAC,aAAa;GAChB,MAAM,QAAQ,QAAQ,MAAM,iBAAiB;AAC7C,OAAI,OAAO;AACT,kBAAc;AACd,YAAQ,MAAM,GAAI,GAAI,OAAO,MAAM,GAAI,OAAO;;SAG7C;GAEH,MAAM,QAAQ,QAAQ,MAAM,qBAAqB;AACjD,OAAI,SAAS,MAAM,GAAI,OAAO,MAAM,MAAM,MAAM,GAAI,UAAU,MAAM,QAAQ;AAC1E,kBAAc;AACd,YAAQ;UAEL;IAGH,MAAM,YAAY,QAAQ,MAAM,mBAAmB;AACnD,QAAI,aAAa,UAAU,GAAI,OAAO,MAAM,MAAM,UAAU,GAAI,WAAW,MAAM,OAC/E,QAAO,KAAK,MAAM;aAIX,oBAAoB,KAAK,QAAQ,EAAE;AAC1C,YAAO,KAAK,MAAM;AAClB,mBAAc;AACd,aAAQ;;;;AAId,SAAO,KAAK,KAAK;;AAInB,KAAI,aAAa;AAEf,MAAI,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG,KAAK,GACzC,QAAO,KAAK,GAAG;AACjB,SAAO,KAAK,MAAM;;AAGpB,QAAO,OAAO,KAAK,KAAK;;;;;;;AAQ1B,SAAS,kBAAkB,SAAyB;CAClD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,2BAAW,IAAI,KAAa;CAClC,IAAI;CACJ,IAAI,IAAI;AAER,QAAO,IAAI,MAAM,QAAQ;EACvB,MAAM,UAAU,MAAM,GAAI,WAAW;EACrC,MAAM,KAAK,QAAQ,MAAM,iBAAiB;AAC1C,MAAI,CAAC,IAAI;AAEP,OAAI,QACF,mBAAkB,KAAA;AACpB;AACA;;EAGF,MAAM,QAAQ,GAAG,GAAI;EACrB,MAAM,OAAO,GAAG,GAAI;EACpB,MAAM,UAAU;AAChB;EAEA,IAAI,WAAW;AACf,SAAO,IAAI,MAAM,QAAQ;GAEvB,MAAM,KADK,MAAM,GAAI,WAAW,CAClB,MAAM,qBAAqB;AACzC,OAAI,MAAM,GAAG,GAAI,OAAO,SAAS,GAAG,GAAI,UAAU,MAAM;AACtD,eAAW;AACX;AACA;;AAEF;;AAGF,MAAI,aAAa,GACf;EAEF,MAAM,QAAQ,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,KAAK,CAAC,MAAM;AAElE,MAAI,CAAC,MACH,MAAK,IAAI,IAAI,SAAS,KAAK,UAAU,IAAK,UAAS,IAAI,EAAE;WAElD,UAAU,gBACjB,MAAK,IAAI,IAAI,SAAS,KAAK,UAAU,IAAK,UAAS,IAAI,EAAE;MAGzD,mBAAkB;;AAItB,KAAI,CAAC,SAAS,KACZ,QAAO;AACT,QAAO,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK;;;;;;;AAQhE,SAAS,wBAAwB,SAAyB;CACxD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,IAAI,WAAW;AAEf,QAAO,MAAM,KAAK,SAAS;EACzB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,CAAC,SAAS;GACZ,MAAM,IAAI,QAAQ,MAAM,iBAAiB;AACzC,OAAI,GAAG;AACL,cAAU;AACV,gBAAY,EAAE,GAAI;AAClB,eAAW,EAAE,GAAI;AACjB,WAAO;;SAGN;GACH,MAAM,IAAI,QAAQ,MAAM,qBAAqB;AAC7C,OAAI,KAAK,EAAE,GAAI,OAAO,aAAa,EAAE,GAAI,UAAU,SACjD,WAAU;AAEZ,UAAO;;EAIT,IAAI,IAAI;AACR,SAAO,IAAI,KAAK,OACd,KAAI,KAAK,OAAO,KAAK;GACnB,MAAM,WAAW;AACjB,UAAO,IAAI,KAAK,UAAU,KAAK,OAAO,IAAK;GAC3C,MAAM,SAAS,IAAI;GACnB,IAAI,QAAQ;GACZ,IAAI,IAAI;AACR,UAAO,IAAI,KAAK,OACd,KAAI,KAAK,OAAO,KAAK;IACnB,MAAM,aAAa;AACnB,WAAO,IAAI,KAAK,UAAU,KAAK,OAAO,IAAK;AAC3C,QAAI,IAAI,eAAe,QAAQ;AAC7B,aAAQ;AACR,SAAI;AACJ;;SAIF;AAGJ,OAAI,CAAC,OAAO;AACV,WAAO,GAAG,OAAO,IAAI,OAAO,OAAO;AACnC,QAAI,KAAK;;QAIX;AAGJ,SAAO;GACP,CAAC,KAAK,KAAK;;;;;;;;;;;AAYf,SAAgB,eAAe,SAAyB;AACtD,KAAI,CAAC,QACH,QAAO;CAET,IAAI,SAAS;AAGb,UAAS,wBAAwB,OAAO;AAGxC,UAAS,kBAAkB,OAAO;AAGlC,UAAS,wBAAwB,OAAO;AAGxC,UAAS,yBAAyB,SAAQ,SACxC,KAAK,QAAQ,qBAAqB,QAAQ,CAAC;AAG7C,UAAS,OAAO,QAAQ,qBAAqB,SAAS;AAGtD,UAAS,OAAO,QAAQ,wBAAwB,GAAG;AAEnD,QAAO"}
+{"version":3,"file":"sanitize.mjs","names":[],"sources":["../../src/core/sanitize.ts"],"sourcesContent":["/**\n * Markdown sanitizer for prompt injection defense.\n *\n * Strips injection vectors from untrusted markdown before it reaches\n * agent-readable files (cached references, SKILL.md, search output).\n *\n * Threat model: agent instruction injection, not browser XSS.\n * Lightweight regex-based — markdown is consumed as text by AI agents.\n */\n\n/** Zero-width and invisible formatting characters used to hide text from human review */\n// eslint-disable-next-line no-misleading-character-class -- intentionally matching individual invisible chars\nconst ZERO_WIDTH_RE = /[\\u200B\\u200C\\uFEFF\\u2060\\u200D\\u061C\\u180E\\u200E\\u200F\\u2028\\u2029]/gu\n\n/** HTML comments (single-line and multi-line), except skilld section markers */\nconst HTML_COMMENT_RE = /<!--(?!\\s*\\/?skilld:)[\\s\\S]*?-->/g\n\n/**\n * Agent directive tags — stripped globally (including inside code blocks).\n * These are never legitimate in any context; they're purely injection vectors.\n */\nconst AGENT_DIRECTIVE_TAGS = [\n  'system',\n  'instructions',\n  'override',\n  'prompt',\n  'context',\n  'role',\n  'user-prompt',\n  'assistant',\n  'tool-use',\n  'tool-result',\n  'tool_call',\n  'tool_response',\n  'tool_result',\n  'system-prompt',\n  'human',\n  'admin',\n]\n\n/**\n * Dangerous HTML tags — stripped only outside fenced code blocks.\n * May appear legitimately in code examples (e.g. `<script setup>` in Vue docs).\n */\nconst DANGEROUS_HTML_TAGS = [\n  'script',\n  'iframe',\n  'style',\n  'meta',\n  'object',\n  'embed',\n  'form',\n]\n/**\n * Decode HTML entity-encoded angle brackets so tag stripping catches encoded variants.\n * Only decodes < and > (named, decimal, hex) — minimal to avoid false positives.\n */\nfunction decodeAngleBracketEntities(text: string): string {\n  return text\n    .replace(/&lt;/gi, '<')\n    .replace(/&gt;/gi, '>')\n    .replace(/&#0*60;/g, '<')\n    .replace(/&#0*62;/g, '>')\n    .replace(/&#x0*3c;/gi, '<')\n    .replace(/&#x0*3e;/gi, '>')\n}\n\n/** Strip paired and standalone instances of the given tag names */\nfunction stripTags(text: string, tags: string[]): string {\n  if (!tags.length)\n    return text\n  const tagGroup = tags.join('|')\n  // First strip paired tags with content between them\n  const pairedRe = new RegExp(`<(${tagGroup})(\\\\s[^>]*)?>([\\\\s\\\\S]*?)<\\\\/\\\\1>`, 'gi')\n  let result = text.replace(pairedRe, '')\n  // Then strip any remaining standalone open/close/self-closing tags\n  const standaloneRe = new RegExp(`<\\\\/?(${tagGroup})(\\\\s[^>]*)?\\\\/?>`, 'gi')\n  result = result.replace(standaloneRe, '')\n  return result\n}\n\n/** External image markdown: ![alt](https://...) or ![alt](http://...) */\nconst EXTERNAL_IMAGE_RE = /!\\[([^\\]]*)\\]\\(https?:\\/\\/[^)]+\\)/gi\n\n/**\n * External link markdown: [text](https://...) or [text](http://...)\n * Preserves relative links and anchors.\n */\nconst EXTERNAL_LINK_RE = /\\[([^\\]]*)\\]\\((https?:\\/\\/[^)]+)\\)/gi\n\n/** Dangerous URI protocols in links/images — match entire [text](protocol:...) */\nconst DANGEROUS_PROTOCOL_RE = /!?\\[([^\\]]*)\\]\\(\\s*(javascript|data|vbscript|file)\\s*:[^)]*\\)/gi\nconst DANGEROUS_PROTOCOL_ENCODED_RE = /!?\\[([^\\]]*)\\]\\(\\s*(?:(?:j|%6a|%4a)(?:a|%61|%41)(?:v|%76|%56)(?:a|%61|%41)(?:s|%73|%53)(?:c|%63|%43)(?:r|%72|%52)(?:i|%69|%49)(?:p|%70|%50)(?:t|%74|%54)|(?:d|%64|%44)(?:a|%61|%41)(?:t|%74|%54)(?:a|%61|%41)|(?:v|%76|%56)(?:b|%62|%42)(?:s|%73|%53)(?:c|%63|%43)(?:r|%72|%52)(?:i|%69|%49)(?:p|%70|%50)(?:t|%74|%54))\\s*:[^)]*\\)/gi\n\n/** Directive-style lines that look like agent instructions */\nconst DIRECTIVE_LINE_RE = /^[ \\t]*(SYSTEM|OVERRIDE|INSTRUCTION|NOTE TO AI|IGNORE PREVIOUS|IGNORE ALL PREVIOUS|DISREGARD|FORGET ALL|NEW INSTRUCTIONS?|IMPORTANT SYSTEM|ADMIN OVERRIDE)\\s*[:>].*/gim\n\n/** Base64 blob: 100+ chars of pure base64 alphabet on a single line */\nconst BASE64_BLOB_RE = /^[A-Z0-9+/=]{100,}$/gim\n\n/** Unicode escape spam: 4+ consecutive \\uXXXX sequences */\nconst UNICODE_ESCAPE_SPAM_RE = /(\\\\u[\\dA-Fa-f]{4}){4,}/g\n\n/**\n * Claude Code dynamic context: !`command` executes shell commands inline when a skill loads.\n * Matches !` followed by content and closing backtick(s) of same length.\n * Stripped globally — never legitimate in generated skills, always a command injection vector.\n */\nconst DYNAMIC_COMMAND_RE = /!(`+)([^`]+)\\1/g\n\n/** Emoji characters — token-inefficient (2-3x cost), distort embeddings, semantically ambiguous for LLMs */\n// Also strips variation selectors (\\uFE0E text, \\uFE0F emoji) which dangle after emoji removal\nconst EMOJI_RE = /[\\p{Extended_Pictographic}\\uFE0E\\uFE0F]/gu\n\n/**\n * Process content outside of fenced code blocks.\n * Uses a line-by-line state machine to properly track fence boundaries,\n * handling nested fences, mismatched lengths, and mixed backtick/tilde fences.\n * Unclosed fences are treated as non-code for security (prevents bypass via malformed fences).\n */\nexport function processOutsideCodeBlocks(content: string, fn: (text: string) => string): string {\n  const lines = content.split('\\n')\n  const result: string[] = []\n  let nonCodeBuffer: string[] = []\n  let codeBuffer: string[] = []\n  let inCodeBlock = false\n  let fenceChar = ''\n  let fenceLen = 0\n\n  function flushNonCode() {\n    if (nonCodeBuffer.length > 0) {\n      result.push(fn(nonCodeBuffer.join('\\n')))\n      nonCodeBuffer = []\n    }\n  }\n\n  for (const line of lines) {\n    const trimmed = line.trimStart()\n\n    if (!inCodeBlock) {\n      const match = trimmed.match(/^(`{3,}|~{3,})/)\n      if (match) {\n        flushNonCode()\n        inCodeBlock = true\n        fenceChar = match[1]![0]!\n        fenceLen = match[1]!.length\n        codeBuffer = [line]\n        continue\n      }\n      nonCodeBuffer.push(line)\n    }\n    else {\n      const match = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (match && match[1]![0] === fenceChar && match[1]!.length >= fenceLen) {\n        // Properly closed — emit code block as-is\n        result.push(codeBuffer.join('\\n'))\n        result.push(line)\n        codeBuffer = []\n        inCodeBlock = false\n        fenceChar = ''\n        fenceLen = 0\n        continue\n      }\n      codeBuffer.push(line)\n    }\n  }\n\n  flushNonCode()\n\n  // Unclosed fence: treat as non-code so sanitization still applies\n  if (inCodeBlock && codeBuffer.length > 0) {\n    result.push(fn(codeBuffer.join('\\n')))\n  }\n\n  return result.join('\\n')\n}\n\n/**\n * Sanitize markdown content to strip prompt injection vectors.\n * Applied at every markdown emission point (cache writes, SKILL.md, search output).\n */\nexport function sanitizeMarkdown(content: string): string {\n  if (!content)\n    return content\n\n  // Layer 1: Strip zero-width characters (global, including in code blocks)\n  let result = content.replace(ZERO_WIDTH_RE, '')\n\n  // Layer 2: Strip dynamic command placeholders globally (!`command` → command injection vector)\n  result = result.replace(DYNAMIC_COMMAND_RE, '')\n\n  // Layer 3: Strip agent directive tags globally (never legitimate, even in code blocks)\n  result = stripTags(result, AGENT_DIRECTIVE_TAGS)\n\n  // Layers 4-10: Only outside fenced code blocks\n  result = processOutsideCodeBlocks(result, (text) => {\n    // Protect inline code spans from tag stripping (e.g. `<script setup>` in Vue docs)\n    const inlineCodeSpans: string[] = []\n    let t = text.replace(/(`+)([^`]+)\\1/g, (match) => {\n      const idx = inlineCodeSpans.length\n      inlineCodeSpans.push(match)\n      return `\\x00IC${idx}\\x00`\n    })\n\n    // Layer 4: Strip HTML comments (outside code blocks where they're hidden from review;\n    // inside code blocks they render as visible text and are legitimate documentation)\n    t = t.replace(HTML_COMMENT_RE, '')\n\n    // Layer 5: Decode entities + strip remaining dangerous tags (HTML + entity-encoded agent directives)\n    t = decodeAngleBracketEntities(t)\n    t = stripTags(t, [...AGENT_DIRECTIVE_TAGS, ...DANGEROUS_HTML_TAGS])\n\n    // Layer 6: Strip external images (exfil via query params)\n    t = t.replace(EXTERNAL_IMAGE_RE, '')\n\n    // Layer 7: Convert external links to plain text\n    t = t.replace(EXTERNAL_LINK_RE, '$1')\n\n    // Layer 8: Strip dangerous protocols (raw and URL-encoded)\n    t = t.replace(DANGEROUS_PROTOCOL_RE, '')\n    t = t.replace(DANGEROUS_PROTOCOL_ENCODED_RE, '')\n\n    // Layer 9: Strip directive-style lines\n    t = t.replace(DIRECTIVE_LINE_RE, '')\n\n    // Layer 10: Strip encoded payloads\n    t = t.replace(BASE64_BLOB_RE, '')\n    t = t.replace(UNICODE_ESCAPE_SPAM_RE, '')\n\n    // Layer 11: Strip emoji (token-inefficient, distort embeddings, semantically ambiguous)\n    t = t.replace(EMOJI_RE, '')\n\n    // Restore inline code spans\n    t = t.replace(/\\0IC(\\d+)\\0/g, (_, idx) => inlineCodeSpans[Number(idx)] || '')\n\n    return t\n  })\n\n  return result\n}\n\n// --- Markdown repair ---\n\n/** Heading missing space after #: `##Heading` → `## Heading` */\nconst HEADING_NO_SPACE_RE = /^(#{1,6})([^\\s#])/gm\n\n/** 3+ consecutive blank lines → 2 */\nconst EXCESSIVE_BLANKS_RE = /\\n{4,}/g\n\n/** Trailing whitespace on lines (preserve intentional double-space line breaks) */\nconst TRAILING_WHITESPACE_RE = /[ \\t]+$/gm\n\n/** Emoji at start of line inside a code block — LLM forgot to close the block */\nconst EMOJI_LINE_START_RE = /^\\p{Extended_Pictographic}/u\n\n/**\n * Close unclosed fenced code blocks.\n * Walks line-by-line tracking open/close state.\n */\nfunction closeUnclosedCodeBlocks(content: string): string {\n  const lines = content.split('\\n')\n  const result: string[] = []\n  let inCodeBlock = false\n  let fence = ''\n\n  for (const line of lines) {\n    const trimmed = line.trimStart()\n    if (!inCodeBlock) {\n      const match = trimmed.match(/^(`{3,}|~{3,})/)\n      if (match) {\n        inCodeBlock = true\n        fence = match[1]![0]!.repeat(match[1]!.length)\n      }\n    }\n    else {\n      // Check for closing fence (same char, at least same length)\n      const match = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (match && match[1]![0] === fence[0] && match[1]!.length >= fence.length) {\n        inCodeBlock = false\n        fence = ''\n      }\n      else {\n        // New fence opener inside unclosed block (same char, same length, with lang tag)\n        // LLMs commonly forget to close a code block before starting a new one\n        const openMatch = trimmed.match(/^(`{3,}|~{3,})\\S/)\n        if (openMatch && openMatch[1]![0] === fence[0] && openMatch[1]!.length === fence.length) {\n          result.push(fence)\n          // fence char/length stays the same since both match\n        }\n        // Emoji at line start → LLM forgot to close code block before markdown content\n        else if (EMOJI_LINE_START_RE.test(trimmed)) {\n          result.push(fence)\n          inCodeBlock = false\n          fence = ''\n        }\n      }\n    }\n    result.push(line)\n  }\n\n  // If still inside a code block, close it\n  if (inCodeBlock) {\n    // Ensure trailing newline before closing fence\n    if (result.length > 0 && result.at(-1) !== '')\n      result.push('')\n    result.push(fence)\n  }\n\n  return result.join('\\n')\n}\n\n/**\n * Remove empty code blocks and deduplicate consecutive identical code blocks.\n * Empty blocks arise when emoji/fence recovery leaves orphaned fences.\n * Duplicate blocks arise when LLMs repeat the same code example.\n */\nfunction cleanupCodeBlocks(content: string): string {\n  const lines = content.split('\\n')\n  const toRemove = new Set<number>()\n  let prevCodeContent: string | undefined\n  let i = 0\n\n  while (i < lines.length) {\n    const trimmed = lines[i]!.trimStart()\n    const fm = trimmed.match(/^(`{3,}|~{3,})/)\n    if (!fm) {\n      // Non-blank text between code blocks resets dedup tracking\n      if (trimmed)\n        prevCodeContent = undefined\n      i++\n      continue\n    }\n\n    const fChar = fm[1]![0]!\n    const fLen = fm[1]!.length\n    const openIdx = i\n    i++\n\n    let closeIdx = -1\n    while (i < lines.length) {\n      const ct = lines[i]!.trimStart()\n      const cm = ct.match(/^(`{3,}|~{3,})\\s*$/)\n      if (cm && cm[1]![0] === fChar && cm[1]!.length >= fLen) {\n        closeIdx = i\n        i++\n        break\n      }\n      i++\n    }\n\n    if (closeIdx === -1)\n      continue\n\n    const inner = lines.slice(openIdx + 1, closeIdx).join('\\n').trim()\n\n    if (!inner) {\n      for (let j = openIdx; j <= closeIdx; j++) toRemove.add(j)\n    }\n    else if (inner === prevCodeContent) {\n      for (let j = openIdx; j <= closeIdx; j++) toRemove.add(j)\n    }\n    else {\n      prevCodeContent = inner\n    }\n  }\n\n  if (!toRemove.size)\n    return content\n  return lines.filter((_, idx) => !toRemove.has(idx)).join('\\n')\n}\n\n/**\n * Close unclosed inline code spans.\n * Scans each line for unmatched backtick(s) and appends closing backtick(s).\n * Tracks fenced code blocks internally to handle any fence length.\n */\nfunction closeUnclosedInlineCode(content: string): string {\n  const lines = content.split('\\n')\n  let inFence = false\n  let fenceChar = ''\n  let fenceLen = 0\n\n  return lines.map((line) => {\n    const trimmed = line.trimStart()\n    if (!inFence) {\n      const m = trimmed.match(/^(`{3,}|~{3,})/)\n      if (m) {\n        inFence = true\n        fenceChar = m[1]![0]!\n        fenceLen = m[1]!.length\n        return line\n      }\n    }\n    else {\n      const m = trimmed.match(/^(`{3,}|~{3,})\\s*$/)\n      if (m && m[1]![0] === fenceChar && m[1]!.length >= fenceLen) {\n        inFence = false\n      }\n      return line\n    }\n\n    // Outside fenced code blocks — fix unclosed inline backticks\n    let i = 0\n    while (i < line.length) {\n      if (line[i] === '`') {\n        const seqStart = i\n        while (i < line.length && line[i] === '`') i++\n        const seqLen = i - seqStart\n        let found = false\n        let j = i\n        while (j < line.length) {\n          if (line[j] === '`') {\n            const closeStart = j\n            while (j < line.length && line[j] === '`') j++\n            if (j - closeStart === seqLen) {\n              found = true\n              i = j\n              break\n            }\n          }\n          else {\n            j++\n          }\n        }\n        if (!found) {\n          line = `${line}${'`'.repeat(seqLen)}`\n          i = line.length\n        }\n      }\n      else {\n        i++\n      }\n    }\n    return line\n  }).join('\\n')\n}\n\n/**\n * Repair broken markdown syntax.\n * Fixes common issues in fetched documentation:\n * - Unclosed fenced code blocks\n * - Unclosed inline code spans\n * - Missing space after heading # markers\n * - Excessive consecutive blank lines\n * - Trailing whitespace\n */\nexport function repairMarkdown(content: string): string {\n  if (!content)\n    return content\n\n  let result = content\n\n  // Fix unclosed fenced code blocks (must run before other line-level fixes)\n  result = closeUnclosedCodeBlocks(result)\n\n  // Remove empty and duplicate code blocks (artifacts from fence recovery)\n  result = cleanupCodeBlocks(result)\n\n  // Fix unclosed inline code spans\n  result = closeUnclosedInlineCode(result)\n\n  // Fix heading spacing (only outside code blocks)\n  result = processOutsideCodeBlocks(result, text =>\n    text.replace(HEADING_NO_SPACE_RE, '$1 $2'))\n\n  // Normalize excessive blank lines\n  result = result.replace(EXCESSIVE_BLANKS_RE, '\\n\\n\\n')\n\n  // Strip trailing whitespace\n  result = result.replace(TRAILING_WHITESPACE_RE, '')\n\n  return result\n}\n"],"mappings":";;;;;;;;;;;AAYA,MAAM,gBAAgB;;AAGtB,MAAM,kBAAkB;;;;;AAMxB,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;AAMD,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;AAKD,SAAS,2BAA2B,MAAsB;AACxD,QAAO,KACJ,QAAQ,UAAU,IAAI,CACtB,QAAQ,UAAU,IAAI,CACtB,QAAQ,YAAY,IAAI,CACxB,QAAQ,YAAY,IAAI,CACxB,QAAQ,cAAc,IAAI,CAC1B,QAAQ,cAAc,IAAI;;;AAI/B,SAAS,UAAU,MAAc,MAAwB;AACvD,KAAI,CAAC,KAAK,OACR,QAAO;CACT,MAAM,WAAW,KAAK,KAAK,IAAI;CAE/B,MAAM,WAAW,IAAI,OAAO,KAAK,SAAS,oCAAoC,KAAK;CACnF,IAAI,SAAS,KAAK,QAAQ,UAAU,GAAG;CAEvC,MAAM,eAAe,IAAI,OAAO,SAAS,SAAS,oBAAoB,KAAK;AAC3E,UAAS,OAAO,QAAQ,cAAc,GAAG;AACzC,QAAO;;;AAIT,MAAM,oBAAoB;;;;;AAM1B,MAAM,mBAAmB;;AAGzB,MAAM,wBAAwB;AAC9B,MAAM,gCAAgC;;AAGtC,MAAM,oBAAoB;;AAG1B,MAAM,iBAAiB;;AAGvB,MAAM,yBAAyB;;;;;;AAO/B,MAAM,qBAAqB;;AAI3B,MAAM,WAAW;;;;;;;AAQjB,SAAgB,yBAAyB,SAAiB,IAAsC;CAC9F,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,SAAmB,EAAE;CAC3B,IAAI,gBAA0B,EAAE;CAChC,IAAI,aAAuB,EAAE;CAC7B,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI,WAAW;CAEf,SAAS,eAAe;AACtB,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAO,KAAK,GAAG,cAAc,KAAK,KAAK,CAAC,CAAC;AACzC,mBAAgB,EAAE;;;AAItB,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,WAAW;AAEhC,MAAI,CAAC,aAAa;GAChB,MAAM,QAAQ,QAAQ,MAAM,iBAAiB;AAC7C,OAAI,OAAO;AACT,kBAAc;AACd,kBAAc;AACd,gBAAY,MAAM,GAAI;AACtB,eAAW,MAAM,GAAI;AACrB,iBAAa,CAAC,KAAK;AACnB;;AAEF,iBAAc,KAAK,KAAK;SAErB;GACH,MAAM,QAAQ,QAAQ,MAAM,qBAAqB;AACjD,OAAI,SAAS,MAAM,GAAI,OAAO,aAAa,MAAM,GAAI,UAAU,UAAU;AAEvE,WAAO,KAAK,WAAW,KAAK,KAAK,CAAC;AAClC,WAAO,KAAK,KAAK;AACjB,iBAAa,EAAE;AACf,kBAAc;AACd,gBAAY;AACZ,eAAW;AACX;;AAEF,cAAW,KAAK,KAAK;;;AAIzB,eAAc;AAGd,KAAI,eAAe,WAAW,SAAS,EACrC,QAAO,KAAK,GAAG,WAAW,KAAK,KAAK,CAAC,CAAC;AAGxC,QAAO,OAAO,KAAK,KAAK;;;;;;AAO1B,SAAgB,iBAAiB,SAAyB;AACxD,KAAI,CAAC,QACH,QAAO;CAGT,IAAI,SAAS,QAAQ,QAAQ,eAAe,GAAG;AAG/C,UAAS,OAAO,QAAQ,oBAAoB,GAAG;AAG/C,UAAS,UAAU,QAAQ,qBAAqB;AAGhD,UAAS,yBAAyB,SAAS,SAAS;EAElD,MAAM,kBAA4B,EAAE;EACpC,IAAI,IAAI,KAAK,QAAQ,mBAAmB,UAAU;GAChD,MAAM,MAAM,gBAAgB;AAC5B,mBAAgB,KAAK,MAAM;AAC3B,UAAO,SAAS,IAAI;IACpB;AAIF,MAAI,EAAE,QAAQ,iBAAiB,GAAG;AAGlC,MAAI,2BAA2B,EAAE;AACjC,MAAI,UAAU,GAAG,CAAC,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAGnE,MAAI,EAAE,QAAQ,mBAAmB,GAAG;AAGpC,MAAI,EAAE,QAAQ,kBAAkB,KAAK;AAGrC,MAAI,EAAE,QAAQ,uBAAuB,GAAG;AACxC,MAAI,EAAE,QAAQ,+BAA+B,GAAG;AAGhD,MAAI,EAAE,QAAQ,mBAAmB,GAAG;AAGpC,MAAI,EAAE,QAAQ,gBAAgB,GAAG;AACjC,MAAI,EAAE,QAAQ,wBAAwB,GAAG;AAGzC,MAAI,EAAE,QAAQ,UAAU,GAAG;AAG3B,MAAI,EAAE,QAAQ,iBAAiB,GAAG,QAAQ,gBAAgB,OAAO,IAAI,KAAK,GAAG;AAE7E,SAAO;GACP;AAEF,QAAO;;;AAMT,MAAM,sBAAsB;;AAG5B,MAAM,sBAAsB;;AAG5B,MAAM,yBAAyB;;AAG/B,MAAM,sBAAsB;;;;;AAM5B,SAAS,wBAAwB,SAAyB;CACxD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,SAAmB,EAAE;CAC3B,IAAI,cAAc;CAClB,IAAI,QAAQ;AAEZ,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,CAAC,aAAa;GAChB,MAAM,QAAQ,QAAQ,MAAM,iBAAiB;AAC7C,OAAI,OAAO;AACT,kBAAc;AACd,YAAQ,MAAM,GAAI,GAAI,OAAO,MAAM,GAAI,OAAO;;SAG7C;GAEH,MAAM,QAAQ,QAAQ,MAAM,qBAAqB;AACjD,OAAI,SAAS,MAAM,GAAI,OAAO,MAAM,MAAM,MAAM,GAAI,UAAU,MAAM,QAAQ;AAC1E,kBAAc;AACd,YAAQ;UAEL;IAGH,MAAM,YAAY,QAAQ,MAAM,mBAAmB;AACnD,QAAI,aAAa,UAAU,GAAI,OAAO,MAAM,MAAM,UAAU,GAAI,WAAW,MAAM,OAC/E,QAAO,KAAK,MAAM;aAIX,oBAAoB,KAAK,QAAQ,EAAE;AAC1C,YAAO,KAAK,MAAM;AAClB,mBAAc;AACd,aAAQ;;;;AAId,SAAO,KAAK,KAAK;;AAInB,KAAI,aAAa;AAEf,MAAI,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG,KAAK,GACzC,QAAO,KAAK,GAAG;AACjB,SAAO,KAAK,MAAM;;AAGpB,QAAO,OAAO,KAAK,KAAK;;;;;;;AAQ1B,SAAS,kBAAkB,SAAyB;CAClD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,2BAAW,IAAI,KAAa;CAClC,IAAI;CACJ,IAAI,IAAI;AAER,QAAO,IAAI,MAAM,QAAQ;EACvB,MAAM,UAAU,MAAM,GAAI,WAAW;EACrC,MAAM,KAAK,QAAQ,MAAM,iBAAiB;AAC1C,MAAI,CAAC,IAAI;AAEP,OAAI,QACF,mBAAkB,KAAA;AACpB;AACA;;EAGF,MAAM,QAAQ,GAAG,GAAI;EACrB,MAAM,OAAO,GAAG,GAAI;EACpB,MAAM,UAAU;AAChB;EAEA,IAAI,WAAW;AACf,SAAO,IAAI,MAAM,QAAQ;GAEvB,MAAM,KADK,MAAM,GAAI,WAAW,CAClB,MAAM,qBAAqB;AACzC,OAAI,MAAM,GAAG,GAAI,OAAO,SAAS,GAAG,GAAI,UAAU,MAAM;AACtD,eAAW;AACX;AACA;;AAEF;;AAGF,MAAI,aAAa,GACf;EAEF,MAAM,QAAQ,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,KAAK,CAAC,MAAM;AAElE,MAAI,CAAC,MACH,MAAK,IAAI,IAAI,SAAS,KAAK,UAAU,IAAK,UAAS,IAAI,EAAE;WAElD,UAAU,gBACjB,MAAK,IAAI,IAAI,SAAS,KAAK,UAAU,IAAK,UAAS,IAAI,EAAE;MAGzD,mBAAkB;;AAItB,KAAI,CAAC,SAAS,KACZ,QAAO;AACT,QAAO,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK;;;;;;;AAQhE,SAAS,wBAAwB,SAAyB;CACxD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,IAAI,WAAW;AAEf,QAAO,MAAM,KAAK,SAAS;EACzB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,CAAC,SAAS;GACZ,MAAM,IAAI,QAAQ,MAAM,iBAAiB;AACzC,OAAI,GAAG;AACL,cAAU;AACV,gBAAY,EAAE,GAAI;AAClB,eAAW,EAAE,GAAI;AACjB,WAAO;;SAGN;GACH,MAAM,IAAI,QAAQ,MAAM,qBAAqB;AAC7C,OAAI,KAAK,EAAE,GAAI,OAAO,aAAa,EAAE,GAAI,UAAU,SACjD,WAAU;AAEZ,UAAO;;EAIT,IAAI,IAAI;AACR,SAAO,IAAI,KAAK,OACd,KAAI,KAAK,OAAO,KAAK;GACnB,MAAM,WAAW;AACjB,UAAO,IAAI,KAAK,UAAU,KAAK,OAAO,IAAK;GAC3C,MAAM,SAAS,IAAI;GACnB,IAAI,QAAQ;GACZ,IAAI,IAAI;AACR,UAAO,IAAI,KAAK,OACd,KAAI,KAAK,OAAO,KAAK;IACnB,MAAM,aAAa;AACnB,WAAO,IAAI,KAAK,UAAU,KAAK,OAAO,IAAK;AAC3C,QAAI,IAAI,eAAe,QAAQ;AAC7B,aAAQ;AACR,SAAI;AACJ;;SAIF;AAGJ,OAAI,CAAC,OAAO;AACV,WAAO,GAAG,OAAO,IAAI,OAAO,OAAO;AACnC,QAAI,KAAK;;QAIX;AAGJ,SAAO;GACP,CAAC,KAAK,KAAK;;;;;;;;;;;AAYf,SAAgB,eAAe,SAAyB;AACtD,KAAI,CAAC,QACH,QAAO;CAET,IAAI,SAAS;AAGb,UAAS,wBAAwB,OAAO;AAGxC,UAAS,kBAAkB,OAAO;AAGlC,UAAS,wBAAwB,OAAO;AAGxC,UAAS,yBAAyB,SAAQ,SACxC,KAAK,QAAQ,qBAAqB,QAAQ,CAAC;AAG7C,UAAS,OAAO,QAAQ,qBAAqB,SAAS;AAGtD,UAAS,OAAO,QAAQ,wBAAwB,GAAG;AAEnD,QAAO"}

package/dist/_chunks/search-interactive.mjs

@@ -1,4 +1,3 @@
-import "./agent.mjs";
 import "./config.mjs";
 import "./package-json.mjs";
 import "./prepare.mjs";
@@ -11,6 +10,8 @@ import "./shared.mjs";
 import "./sources.mjs";
 import "./detect.mjs";
 import "./prompts.mjs";
+import "./agent.mjs";
+import "./libs/@sinclair/typebox.mjs";
 import "./cli-helpers.mjs";
 import "./lockfile.mjs";
 import "./skills.mjs";

package/dist/_chunks/search-interactive.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"search-interactive.mjs","names":[],"sources":["../../src/commands/search-interactive.ts"],"sourcesContent":["import type { SearchFilter, SearchSnippet } from '../retriv/index.ts'\nimport { createLogUpdate } from 'log-update'\nimport { formatCompactSnippet, highlightTerms, normalizeScores, sanitizeMarkdown, scoreLabel } from '../core/index.ts'\nimport { closePool, openPool, SearchDepsUnavailableError, searchPooled } from '../retriv/index.ts'\nimport { findPackageDbs, getPackageVersions, listLockPackages, parseFilterPrefix } from './search.ts'\n\nconst FILTER_CYCLE = [undefined, 'docs', 'issues', 'releases'] as const\ntype FilterLabel = typeof FILTER_CYCLE[number]\n\nfunction filterToSearchFilter(label: FilterLabel): SearchFilter | undefined {\n  if (!label)\n    return undefined\n  if (label === 'issues')\n    return { type: 'issue' }\n  if (label === 'releases')\n    return { type: 'release' }\n  return { type: { $in: ['doc', 'docs'] } }\n}\n\nconst SPINNER_FRAMES = ['◐', '◓', '◑', '◒']\n\nexport async function interactiveSearch(packageFilter?: string): Promise<void> {\n  const dbs = findPackageDbs(packageFilter)\n  const versions = getPackageVersions()\n  if (dbs.length === 0) {\n    let msg: string\n    if (packageFilter) {\n      const available = listLockPackages()\n      msg = available.length > 0\n        ? `No docs indexed for \"${packageFilter}\". Available: ${available.join(', ')}`\n        : `No docs indexed for \"${packageFilter}\". Run \\`skilld add ${packageFilter}\\` first.`\n    }\n    else {\n      msg = 'No docs indexed yet. Run `skilld add <package>` first.'\n    }\n    process.stderr.write(`\\x1B[33m${msg}\\x1B[0m\\n`)\n    return\n  }\n\n  const logUpdate = createLogUpdate(process.stderr, { showCursor: true })\n  let pool: Awaited<ReturnType<typeof openPool>>\n  try {\n    pool = await openPool(dbs)\n  }\n  catch (err) {\n    if (err instanceof SearchDepsUnavailableError) {\n      process.stderr.write('\\x1B[31mSearch requires native dependencies (sqlite-vec) that are not installed.\\nInstall skilld globally or in a project to use search: npm i -g skilld\\x1B[0m\\n')\n      return\n    }\n    throw err\n  }\n\n  // State\n  let query = ''\n  let results: SearchSnippet[] = []\n  let selectedIndex = 0\n  let isSearching = false\n  let searchId = 0\n  let filterIndex = 0\n  let error = ''\n  let elapsed = 0\n  let spinFrame = 0\n  let debounceTimer: ReturnType<typeof setTimeout> | null = null\n\n  const cols = process.stdout.columns || 80\n  const maxResults = 7\n  const titleLabel = packageFilter ? `Search ${packageFilter} docs` : 'Search docs'\n\n  function getFilterLabel(): string {\n    const f = FILTER_CYCLE[filterIndex]\n    if (!f)\n      return ''\n    return `\\x1B[36m${f}:\\x1B[0m`\n  }\n\n  function render() {\n    const lines: string[] = []\n\n    // Title\n    lines.push('')\n    lines.push(`  \\x1B[1m${titleLabel}\\x1B[0m`)\n    lines.push('')\n\n    // Input line\n    const filterPrefix = getFilterLabel()\n    const prefix = filterPrefix ? `${filterPrefix}` : ''\n    lines.push(`  \\x1B[36m❯\\x1B[0m ${prefix}${query}\\x1B[7m \\x1B[0m`)\n\n    // Separator / spinner\n    if (isSearching) {\n      const frame = SPINNER_FRAMES[spinFrame % SPINNER_FRAMES.length]\n      lines.push(`  \\x1B[36m${frame}\\x1B[0m \\x1B[90mSearching…\\x1B[0m`)\n    }\n    else {\n      lines.push(`  \\x1B[90m${'─'.repeat(Math.min(cols - 4, 40))}\\x1B[0m`)\n    }\n\n    // Results or empty state\n    if (error) {\n      lines.push('')\n      lines.push(`  \\x1B[31m${error}\\x1B[0m`)\n    }\n    else if (query.length === 0) {\n      lines.push('')\n      lines.push('  \\x1B[90mType to search…\\x1B[0m')\n    }\n    else if (query.length < 2 && !isSearching) {\n      lines.push('')\n      lines.push('  \\x1B[90mKeep typing…\\x1B[0m')\n    }\n    else if (results.length === 0 && !isSearching) {\n      lines.push('')\n      lines.push('  \\x1B[90mNo results\\x1B[0m')\n    }\n    else {\n      lines.push('')\n      const shown = results.slice(0, maxResults)\n      const scores = normalizeScores(results)\n      for (let i = 0; i < shown.length; i++) {\n        const r = shown[i]!\n        const selected = i === selectedIndex\n        const bullet = selected ? '\\x1B[36m●\\x1B[0m' : '\\x1B[90m○\\x1B[0m'\n        const sc = scoreLabel(scores.get(r) ?? 0)\n        const { title, path, preview } = formatCompactSnippet(r, cols)\n        const highlighted = highlightTerms(preview, r.highlights)\n\n        const ver = versions.get(r.package)\n        const pkgLabel = ver ? `${r.package}@${ver}` : r.package\n\n        if (selected) {\n          lines.push(`  ${bullet} \\x1B[1m${pkgLabel}\\x1B[0m ${sc}  \\x1B[36m${title}\\x1B[0m`)\n          lines.push(`    \\x1B[90m${path}\\x1B[0m`)\n          lines.push(`    ${highlighted}`)\n        }\n        else {\n          lines.push(`  ${bullet} \\x1B[90m${pkgLabel}\\x1B[0m ${sc}  \\x1B[90m${title}\\x1B[0m`)\n        }\n      }\n    }\n\n    // Footer\n    lines.push('')\n    const parts: string[] = []\n    if (results.length > 0)\n      parts.push(`${results.length} results`)\n    if (elapsed > 0 && !isSearching)\n      parts.push(`${elapsed.toFixed(2)}s`)\n    const footer = parts.length > 0 ? `${parts.join(' · ')}    ` : ''\n    lines.push(`  \\x1B[90m${footer}↑↓ navigate  ↵ select  tab filter  esc quit\\x1B[0m`)\n    lines.push('')\n\n    logUpdate(lines.join('\\n'))\n  }\n\n  async function doSearch() {\n    const id = ++searchId\n    const fullQuery = query.trim()\n    if (fullQuery.length < 2) {\n      results = []\n      isSearching = false\n      render()\n      return\n    }\n\n    isSearching = true\n    error = ''\n    render()\n\n    // Spin animation\n    const spinInterval = setInterval(() => {\n      spinFrame++\n      if (isSearching)\n        render()\n    }, 80)\n\n    const { query: parsed, filter: parsedFilter } = parseFilterPrefix(fullQuery)\n    const filter = parsedFilter || filterToSearchFilter(FILTER_CYCLE[filterIndex])\n    const start = performance.now()\n\n    const res = await searchPooled(parsed, pool, { limit: maxResults, filter }).catch((e) => {\n      if (id === searchId)\n        error = e instanceof Error ? e.message : String(e)\n      return [] as SearchSnippet[]\n    })\n\n    clearInterval(spinInterval)\n\n    // Discard stale results\n    if (id !== searchId)\n      return\n\n    results = res\n    elapsed = (performance.now() - start) / 1000\n    selectedIndex = 0\n    isSearching = false\n    render()\n  }\n\n  function scheduleSearch() {\n    if (debounceTimer)\n      clearTimeout(debounceTimer)\n    debounceTimer = setTimeout(doSearch, 100)\n  }\n\n  // Show initial state\n  render()\n\n  // Raw stdin for keystroke handling\n  const { stdin } = process\n  if (stdin.isTTY)\n    stdin.setRawMode(true)\n  stdin.resume()\n  stdin.setEncoding('utf-8')\n\n  return new Promise<void>((resolve) => {\n    function cleanup() {\n      if (debounceTimer)\n        clearTimeout(debounceTimer)\n      if (stdin.isTTY)\n        stdin.setRawMode(false)\n      stdin.removeListener('data', onData)\n      stdin.pause()\n      closePool(pool)\n    }\n\n    function exit() {\n      cleanup()\n      logUpdate.done()\n      resolve()\n    }\n\n    function selectResult() {\n      if (results.length === 0 || selectedIndex >= results.length)\n        return\n      const r = results[selectedIndex]!\n      cleanup()\n      logUpdate.done()\n\n      // Print full result\n      const refPath = `.claude/skills/${r.package}/.skilld/${r.source}`\n      const lineRange = r.lineStart === r.lineEnd ? `L${r.lineStart}` : `L${r.lineStart}-${r.lineEnd}`\n      const highlighted = highlightTerms(sanitizeMarkdown(r.content), r.highlights)\n      const rVer = versions.get(r.package)\n      const rLabel = rVer ? `${r.package}@${rVer}` : r.package\n      const rScores = normalizeScores(results)\n      const out = [\n        '',\n        `  \\x1B[1m${rLabel}\\x1B[0m ${scoreLabel(rScores.get(r) ?? 0)}`,\n        `  \\x1B[90m${refPath}:${lineRange}\\x1B[0m`,\n        '',\n        `  ${highlighted.replace(/\\n/g, '\\n  ')}`,\n        '',\n      ].join('\\n')\n      process.stdout.write(`${out}\\n`)\n      resolve()\n    }\n\n    function onData(data: string) {\n      // Ctrl+C\n      if (data === '\\x03') {\n        exit()\n        return\n      }\n\n      // Escape\n      if (data === '\\x1B' || data === '\\x1B\\x1B') {\n        exit()\n        return\n      }\n\n      // Enter\n      if (data === '\\r' || data === '\\n') {\n        selectResult()\n        return\n      }\n\n      // Tab — cycle filter\n      if (data === '\\t') {\n        filterIndex = (filterIndex + 1) % FILTER_CYCLE.length\n        if (query.length >= 2)\n          scheduleSearch()\n        render()\n        return\n      }\n\n      // Backspace\n      if (data === '\\x7F' || data === '\\b') {\n        if (query.length > 0) {\n          query = query.slice(0, -1)\n          scheduleSearch()\n          render()\n        }\n        return\n      }\n\n      // Arrow keys (escape sequences)\n      if (data === '\\x1B[A' || data === '\\x1BOA') {\n        // Up\n        if (selectedIndex > 0) {\n          selectedIndex--\n          render()\n        }\n        return\n      }\n      if (data === '\\x1B[B' || data === '\\x1BOB') {\n        // Down\n        if (selectedIndex < results.length - 1) {\n          selectedIndex++\n          render()\n        }\n        return\n      }\n\n      // Ignore other escape sequences\n      if (data.startsWith('\\x1B'))\n        return\n\n      // Printable characters\n      query += data\n      scheduleSearch()\n      render()\n    }\n\n    stdin.on('data', onData)\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMA,MAAM,eAAe;CAAC,KAAA;CAAW;CAAQ;CAAU;CAAW;AAG9D,SAAS,qBAAqB,OAA8C;AAC1E,KAAI,CAAC,MACH,QAAO,KAAA;AACT,KAAI,UAAU,SACZ,QAAO,EAAE,MAAM,SAAS;AAC1B,KAAI,UAAU,WACZ,QAAO,EAAE,MAAM,WAAW;AAC5B,QAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,OAAO,EAAE,EAAE;;AAG3C,MAAM,iBAAiB;CAAC;CAAK;CAAK;CAAK;CAAI;AAE3C,eAAsB,kBAAkB,eAAuC;CAC7E,MAAM,MAAM,eAAe,cAAc;CACzC,MAAM,WAAW,oBAAoB;AACrC,KAAI,IAAI,WAAW,GAAG;EACpB,IAAI;AACJ,MAAI,eAAe;GACjB,MAAM,YAAY,kBAAkB;AACpC,SAAM,UAAU,SAAS,IACrB,wBAAwB,cAAc,gBAAgB,UAAU,KAAK,KAAK,KAC1E,wBAAwB,cAAc,sBAAsB,cAAc;QAG9E,OAAM;AAER,UAAQ,OAAO,MAAM,WAAW,IAAI,WAAW;AAC/C;;CAGF,MAAM,YAAY,gBAAgB,QAAQ,QAAQ,EAAE,YAAY,MAAM,CAAC;CACvE,IAAI;AACJ,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;UAErB,KAAK;AACV,MAAI,eAAe,4BAA4B;AAC7C,WAAQ,OAAO,MAAM,oKAAoK;AACzL;;AAEF,QAAM;;CAIR,IAAI,QAAQ;CACZ,IAAI,UAA2B,EAAE;CACjC,IAAI,gBAAgB;CACpB,IAAI,cAAc;CAClB,IAAI,WAAW;CACf,IAAI,cAAc;CAClB,IAAI,QAAQ;CACZ,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,IAAI,gBAAsD;CAE1D,MAAM,OAAO,QAAQ,OAAO,WAAW;CACvC,MAAM,aAAa;CACnB,MAAM,aAAa,gBAAgB,UAAU,cAAc,SAAS;CAEpE,SAAS,iBAAyB;EAChC,MAAM,IAAI,aAAa;AACvB,MAAI,CAAC,EACH,QAAO;AACT,SAAO,WAAW,EAAE;;CAGtB,SAAS,SAAS;EAChB,MAAM,QAAkB,EAAE;AAG1B,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,YAAY,WAAW,SAAS;AAC3C,QAAM,KAAK,GAAG;EAGd,MAAM,eAAe,gBAAgB;EACrC,MAAM,SAAS,eAAe,GAAG,iBAAiB;AAClD,QAAM,KAAK,sBAAsB,SAAS,MAAM,iBAAiB;AAGjE,MAAI,aAAa;GACf,MAAM,QAAQ,eAAe,YAAY,eAAe;AACxD,SAAM,KAAK,aAAa,MAAM,mCAAmC;QAGjE,OAAM,KAAK,aAAa,IAAI,OAAO,KAAK,IAAI,OAAO,GAAG,GAAG,CAAC,CAAC,SAAS;AAItE,MAAI,OAAO;AACT,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,aAAa,MAAM,SAAS;aAEhC,MAAM,WAAW,GAAG;AAC3B,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,mCAAmC;aAEvC,MAAM,SAAS,KAAK,CAAC,aAAa;AACzC,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,gCAAgC;aAEpC,QAAQ,WAAW,KAAK,CAAC,aAAa;AAC7C,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,8BAA8B;SAEtC;AACH,SAAM,KAAK,GAAG;GACd,MAAM,QAAQ,QAAQ,MAAM,GAAG,WAAW;GAC1C,MAAM,SAAS,gBAAgB,QAAQ;AACvC,QAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;IACrC,MAAM,IAAI,MAAM;IAChB,MAAM,WAAW,MAAM;IACvB,MAAM,SAAS,WAAW,qBAAqB;IAC/C,MAAM,KAAK,WAAW,OAAO,IAAI,EAAE,IAAI,EAAE;IACzC,MAAM,EAAE,OAAO,MAAM,YAAY,qBAAqB,GAAG,KAAK;IAC9D,MAAM,cAAc,eAAe,SAAS,EAAE,WAAW;IAEzD,MAAM,MAAM,SAAS,IAAI,EAAE,QAAQ;IACnC,MAAM,WAAW,MAAM,GAAG,EAAE,QAAQ,GAAG,QAAQ,EAAE;AAEjD,QAAI,UAAU;AACZ,WAAM,KAAK,KAAK,OAAO,UAAU,SAAS,UAAU,GAAG,YAAY,MAAM,SAAS;AAClF,WAAM,KAAK,eAAe,KAAK,SAAS;AACxC,WAAM,KAAK,OAAO,cAAc;UAGhC,OAAM,KAAK,KAAK,OAAO,WAAW,SAAS,UAAU,GAAG,YAAY,MAAM,SAAS;;;AAMzF,QAAM,KAAK,GAAG;EACd,MAAM,QAAkB,EAAE;AAC1B,MAAI,QAAQ,SAAS,EACnB,OAAM,KAAK,GAAG,QAAQ,OAAO,UAAU;AACzC,MAAI,UAAU,KAAK,CAAC,YAClB,OAAM,KAAK,GAAG,QAAQ,QAAQ,EAAE,CAAC,GAAG;EACtC,MAAM,SAAS,MAAM,SAAS,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,QAAQ;AAC/D,QAAM,KAAK,aAAa,OAAO,oDAAoD;AACnF,QAAM,KAAK,GAAG;AAEd,YAAU,MAAM,KAAK,KAAK,CAAC;;CAG7B,eAAe,WAAW;EACxB,MAAM,KAAK,EAAE;EACb,MAAM,YAAY,MAAM,MAAM;AAC9B,MAAI,UAAU,SAAS,GAAG;AACxB,aAAU,EAAE;AACZ,iBAAc;AACd,WAAQ;AACR;;AAGF,gBAAc;AACd,UAAQ;AACR,UAAQ;EAGR,MAAM,eAAe,kBAAkB;AACrC;AACA,OAAI,YACF,SAAQ;KACT,GAAG;EAEN,MAAM,EAAE,OAAO,QAAQ,QAAQ,iBAAiB,kBAAkB,UAAU;EAC5E,MAAM,SAAS,gBAAgB,qBAAqB,aAAa,aAAa;EAC9E,MAAM,QAAQ,YAAY,KAAK;EAE/B,MAAM,MAAM,MAAM,aAAa,QAAQ,MAAM;GAAE,OAAO;GAAY;GAAQ,CAAC,CAAC,OAAO,MAAM;AACvF,OAAI,OAAO,SACT,SAAQ,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACpD,UAAO,EAAE;IACT;AAEF,gBAAc,aAAa;AAG3B,MAAI,OAAO,SACT;AAEF,YAAU;AACV,aAAW,YAAY,KAAK,GAAG,SAAS;AACxC,kBAAgB;AAChB,gBAAc;AACd,UAAQ;;CAGV,SAAS,iBAAiB;AACxB,MAAI,cACF,cAAa,cAAc;AAC7B,kBAAgB,WAAW,UAAU,IAAI;;AAI3C,SAAQ;CAGR,MAAM,EAAE,UAAU;AAClB,KAAI,MAAM,MACR,OAAM,WAAW,KAAK;AACxB,OAAM,QAAQ;AACd,OAAM,YAAY,QAAQ;AAE1B,QAAO,IAAI,SAAe,YAAY;EACpC,SAAS,UAAU;AACjB,OAAI,cACF,cAAa,cAAc;AAC7B,OAAI,MAAM,MACR,OAAM,WAAW,MAAM;AACzB,SAAM,eAAe,QAAQ,OAAO;AACpC,SAAM,OAAO;AACb,aAAU,KAAK;;EAGjB,SAAS,OAAO;AACd,YAAS;AACT,aAAU,MAAM;AAChB,YAAS;;EAGX,SAAS,eAAe;AACtB,OAAI,QAAQ,WAAW,KAAK,iBAAiB,QAAQ,OACnD;GACF,MAAM,IAAI,QAAQ;AAClB,YAAS;AACT,aAAU,MAAM;GAGhB,MAAM,UAAU,kBAAkB,EAAE,QAAQ,WAAW,EAAE;GACzD,MAAM,YAAY,EAAE,cAAc,EAAE,UAAU,IAAI,EAAE,cAAc,IAAI,EAAE,UAAU,GAAG,EAAE;GACvF,MAAM,cAAc,eAAe,iBAAiB,EAAE,QAAQ,EAAE,EAAE,WAAW;GAC7E,MAAM,OAAO,SAAS,IAAI,EAAE,QAAQ;GAGpC,MAAM,MAAM;IACV;IACA,YAJa,OAAO,GAAG,EAAE,QAAQ,GAAG,SAAS,EAAE,QAI5B,UAAU,WAHf,gBAAgB,QAAQ,CAGU,IAAI,EAAE,IAAI,EAAE;IAC5D,aAAa,QAAQ,GAAG,UAAU;IAClC;IACA,KAAK,YAAY,QAAQ,OAAO,OAAO;IACvC;IACD,CAAC,KAAK,KAAK;AACZ,WAAQ,OAAO,MAAM,GAAG,IAAI,IAAI;AAChC,YAAS;;EAGX,SAAS,OAAO,MAAc;AAE5B,OAAI,SAAS,KAAQ;AACnB,UAAM;AACN;;AAIF,OAAI,SAAS,UAAU,SAAS,YAAY;AAC1C,UAAM;AACN;;AAIF,OAAI,SAAS,QAAQ,SAAS,MAAM;AAClC,kBAAc;AACd;;AAIF,OAAI,SAAS,KAAM;AACjB,mBAAe,cAAc,KAAK,aAAa;AAC/C,QAAI,MAAM,UAAU,EAClB,iBAAgB;AAClB,YAAQ;AACR;;AAIF,OAAI,SAAS,OAAU,SAAS,MAAM;AACpC,QAAI,MAAM,SAAS,GAAG;AACpB,aAAQ,MAAM,MAAM,GAAG,GAAG;AAC1B,qBAAgB;AAChB,aAAQ;;AAEV;;AAIF,OAAI,SAAS,YAAY,SAAS,UAAU;AAE1C,QAAI,gBAAgB,GAAG;AACrB;AACA,aAAQ;;AAEV;;AAEF,OAAI,SAAS,YAAY,SAAS,UAAU;AAE1C,QAAI,gBAAgB,QAAQ,SAAS,GAAG;AACtC;AACA,aAAQ;;AAEV;;AAIF,OAAI,KAAK,WAAW,OAAO,CACzB;AAGF,YAAS;AACT,mBAAgB;AAChB,WAAQ;;AAGV,QAAM,GAAG,QAAQ,OAAO;GACxB"}
+{"version":3,"file":"search-interactive.mjs","names":[],"sources":["../../src/commands/search-interactive.ts"],"sourcesContent":["import type { SearchFilter, SearchSnippet } from '../retriv/index.ts'\nimport { createLogUpdate } from 'log-update'\nimport { formatCompactSnippet, highlightTerms, normalizeScores, sanitizeMarkdown, scoreLabel } from '../core/index.ts'\nimport { closePool, openPool, SearchDepsUnavailableError, searchPooled } from '../retriv/index.ts'\nimport { findPackageDbs, getPackageVersions, listLockPackages, parseFilterPrefix } from './search.ts'\n\nconst FILTER_CYCLE = [undefined, 'docs', 'issues', 'releases'] as const\ntype FilterLabel = typeof FILTER_CYCLE[number]\n\nfunction filterToSearchFilter(label: FilterLabel): SearchFilter | undefined {\n  if (!label)\n    return undefined\n  if (label === 'issues')\n    return { type: 'issue' }\n  if (label === 'releases')\n    return { type: 'release' }\n  return { type: { $in: ['doc', 'docs'] } }\n}\n\nconst SPINNER_FRAMES = ['◐', '◓', '◑', '◒']\n\nexport async function interactiveSearch(packageFilter?: string): Promise<void> {\n  const dbs = findPackageDbs(packageFilter)\n  const versions = getPackageVersions()\n  if (dbs.length === 0) {\n    let msg: string\n    if (packageFilter) {\n      const available = listLockPackages()\n      msg = available.length > 0\n        ? `No docs indexed for \"${packageFilter}\". Available: ${available.join(', ')}`\n        : `No docs indexed for \"${packageFilter}\". Run \\`skilld add ${packageFilter}\\` first.`\n    }\n    else {\n      msg = 'No docs indexed yet. Run `skilld add <package>` first.'\n    }\n    process.stderr.write(`\\x1B[33m${msg}\\x1B[0m\\n`)\n    return\n  }\n\n  const logUpdate = createLogUpdate(process.stderr, { showCursor: true })\n  let pool: Awaited<ReturnType<typeof openPool>>\n  try {\n    pool = await openPool(dbs)\n  }\n  catch (err) {\n    if (err instanceof SearchDepsUnavailableError) {\n      process.stderr.write('\\x1B[31mSearch requires native dependencies (sqlite-vec) that are not installed.\\nInstall skilld globally or in a project to use search: npm i -g skilld\\x1B[0m\\n')\n      return\n    }\n    throw err\n  }\n\n  // State\n  let query = ''\n  let results: SearchSnippet[] = []\n  let selectedIndex = 0\n  let isSearching = false\n  let searchId = 0\n  let filterIndex = 0\n  let error = ''\n  let elapsed = 0\n  let spinFrame = 0\n  let debounceTimer: ReturnType<typeof setTimeout> | null = null\n\n  const cols = process.stdout.columns || 80\n  const maxResults = 7\n  const titleLabel = packageFilter ? `Search ${packageFilter} docs` : 'Search docs'\n\n  function getFilterLabel(): string {\n    const f = FILTER_CYCLE[filterIndex]\n    if (!f)\n      return ''\n    return `\\x1B[36m${f}:\\x1B[0m`\n  }\n\n  function render() {\n    const lines: string[] = []\n\n    // Title\n    lines.push('')\n    lines.push(`  \\x1B[1m${titleLabel}\\x1B[0m`)\n    lines.push('')\n\n    // Input line\n    const filterPrefix = getFilterLabel()\n    const prefix = filterPrefix ? `${filterPrefix}` : ''\n    lines.push(`  \\x1B[36m❯\\x1B[0m ${prefix}${query}\\x1B[7m \\x1B[0m`)\n\n    // Separator / spinner\n    if (isSearching) {\n      const frame = SPINNER_FRAMES[spinFrame % SPINNER_FRAMES.length]\n      lines.push(`  \\x1B[36m${frame}\\x1B[0m \\x1B[90mSearching…\\x1B[0m`)\n    }\n    else {\n      lines.push(`  \\x1B[90m${'─'.repeat(Math.min(cols - 4, 40))}\\x1B[0m`)\n    }\n\n    // Results or empty state\n    if (error) {\n      lines.push('')\n      lines.push(`  \\x1B[31m${error}\\x1B[0m`)\n    }\n    else if (query.length === 0) {\n      lines.push('')\n      lines.push('  \\x1B[90mType to search…\\x1B[0m')\n    }\n    else if (query.length < 2 && !isSearching) {\n      lines.push('')\n      lines.push('  \\x1B[90mKeep typing…\\x1B[0m')\n    }\n    else if (results.length === 0 && !isSearching) {\n      lines.push('')\n      lines.push('  \\x1B[90mNo results\\x1B[0m')\n    }\n    else {\n      lines.push('')\n      const shown = results.slice(0, maxResults)\n      const scores = normalizeScores(results)\n      for (let i = 0; i < shown.length; i++) {\n        const r = shown[i]!\n        const selected = i === selectedIndex\n        const bullet = selected ? '\\x1B[36m●\\x1B[0m' : '\\x1B[90m○\\x1B[0m'\n        const sc = scoreLabel(scores.get(r) ?? 0)\n        const { title, path, preview } = formatCompactSnippet(r, cols)\n        const highlighted = highlightTerms(preview, r.highlights)\n\n        const ver = versions.get(r.package)\n        const pkgLabel = ver ? `${r.package}@${ver}` : r.package\n\n        if (selected) {\n          lines.push(`  ${bullet} \\x1B[1m${pkgLabel}\\x1B[0m ${sc}  \\x1B[36m${title}\\x1B[0m`)\n          lines.push(`    \\x1B[90m${path}\\x1B[0m`)\n          lines.push(`    ${highlighted}`)\n        }\n        else {\n          lines.push(`  ${bullet} \\x1B[90m${pkgLabel}\\x1B[0m ${sc}  \\x1B[90m${title}\\x1B[0m`)\n        }\n      }\n    }\n\n    // Footer\n    lines.push('')\n    const parts: string[] = []\n    if (results.length > 0)\n      parts.push(`${results.length} results`)\n    if (elapsed > 0 && !isSearching)\n      parts.push(`${elapsed.toFixed(2)}s`)\n    const footer = parts.length > 0 ? `${parts.join(' · ')}    ` : ''\n    lines.push(`  \\x1B[90m${footer}↑↓ navigate  ↵ select  tab filter  esc quit\\x1B[0m`)\n    lines.push('')\n\n    logUpdate(lines.join('\\n'))\n  }\n\n  async function doSearch() {\n    const id = ++searchId\n    const fullQuery = query.trim()\n    if (fullQuery.length < 2) {\n      results = []\n      isSearching = false\n      render()\n      return\n    }\n\n    isSearching = true\n    error = ''\n    render()\n\n    // Spin animation\n    const spinInterval = setInterval(() => {\n      spinFrame++\n      if (isSearching)\n        render()\n    }, 80)\n\n    const { query: parsed, filter: parsedFilter } = parseFilterPrefix(fullQuery)\n    const filter = parsedFilter || filterToSearchFilter(FILTER_CYCLE[filterIndex])\n    const start = performance.now()\n\n    const res = await searchPooled(parsed, pool, { limit: maxResults, filter }).catch((e) => {\n      if (id === searchId)\n        error = e instanceof Error ? e.message : String(e)\n      return [] as SearchSnippet[]\n    })\n\n    clearInterval(spinInterval)\n\n    // Discard stale results\n    if (id !== searchId)\n      return\n\n    results = res\n    elapsed = (performance.now() - start) / 1000\n    selectedIndex = 0\n    isSearching = false\n    render()\n  }\n\n  function scheduleSearch() {\n    if (debounceTimer)\n      clearTimeout(debounceTimer)\n    debounceTimer = setTimeout(doSearch, 100)\n  }\n\n  // Show initial state\n  render()\n\n  // Raw stdin for keystroke handling\n  const { stdin } = process\n  if (stdin.isTTY)\n    stdin.setRawMode(true)\n  stdin.resume()\n  stdin.setEncoding('utf-8')\n\n  return new Promise<void>((resolve) => {\n    function cleanup() {\n      if (debounceTimer)\n        clearTimeout(debounceTimer)\n      if (stdin.isTTY)\n        stdin.setRawMode(false)\n      stdin.removeListener('data', onData)\n      stdin.pause()\n      closePool(pool)\n    }\n\n    function exit() {\n      cleanup()\n      logUpdate.done()\n      resolve()\n    }\n\n    function selectResult() {\n      if (results.length === 0 || selectedIndex >= results.length)\n        return\n      const r = results[selectedIndex]!\n      cleanup()\n      logUpdate.done()\n\n      // Print full result\n      const refPath = `.claude/skills/${r.package}/.skilld/${r.source}`\n      const lineRange = r.lineStart === r.lineEnd ? `L${r.lineStart}` : `L${r.lineStart}-${r.lineEnd}`\n      const highlighted = highlightTerms(sanitizeMarkdown(r.content), r.highlights)\n      const rVer = versions.get(r.package)\n      const rLabel = rVer ? `${r.package}@${rVer}` : r.package\n      const rScores = normalizeScores(results)\n      const out = [\n        '',\n        `  \\x1B[1m${rLabel}\\x1B[0m ${scoreLabel(rScores.get(r) ?? 0)}`,\n        `  \\x1B[90m${refPath}:${lineRange}\\x1B[0m`,\n        '',\n        `  ${highlighted.replace(/\\n/g, '\\n  ')}`,\n        '',\n      ].join('\\n')\n      process.stdout.write(`${out}\\n`)\n      resolve()\n    }\n\n    function onData(data: string) {\n      // Ctrl+C\n      if (data === '\\x03') {\n        exit()\n        return\n      }\n\n      // Escape\n      if (data === '\\x1B' || data === '\\x1B\\x1B') {\n        exit()\n        return\n      }\n\n      // Enter\n      if (data === '\\r' || data === '\\n') {\n        selectResult()\n        return\n      }\n\n      // Tab — cycle filter\n      if (data === '\\t') {\n        filterIndex = (filterIndex + 1) % FILTER_CYCLE.length\n        if (query.length >= 2)\n          scheduleSearch()\n        render()\n        return\n      }\n\n      // Backspace\n      if (data === '\\x7F' || data === '\\b') {\n        if (query.length > 0) {\n          query = query.slice(0, -1)\n          scheduleSearch()\n          render()\n        }\n        return\n      }\n\n      // Arrow keys (escape sequences)\n      if (data === '\\x1B[A' || data === '\\x1BOA') {\n        // Up\n        if (selectedIndex > 0) {\n          selectedIndex--\n          render()\n        }\n        return\n      }\n      if (data === '\\x1B[B' || data === '\\x1BOB') {\n        // Down\n        if (selectedIndex < results.length - 1) {\n          selectedIndex++\n          render()\n        }\n        return\n      }\n\n      // Ignore other escape sequences\n      if (data.startsWith('\\x1B'))\n        return\n\n      // Printable characters\n      query += data\n      scheduleSearch()\n      render()\n    }\n\n    stdin.on('data', onData)\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMA,MAAM,eAAe;CAAC,KAAA;CAAW;CAAQ;CAAU;CAAW;AAG9D,SAAS,qBAAqB,OAA8C;AAC1E,KAAI,CAAC,MACH,QAAO,KAAA;AACT,KAAI,UAAU,SACZ,QAAO,EAAE,MAAM,SAAS;AAC1B,KAAI,UAAU,WACZ,QAAO,EAAE,MAAM,WAAW;AAC5B,QAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,OAAO,EAAE,EAAE;;AAG3C,MAAM,iBAAiB;CAAC;CAAK;CAAK;CAAK;CAAI;AAE3C,eAAsB,kBAAkB,eAAuC;CAC7E,MAAM,MAAM,eAAe,cAAc;CACzC,MAAM,WAAW,oBAAoB;AACrC,KAAI,IAAI,WAAW,GAAG;EACpB,IAAI;AACJ,MAAI,eAAe;GACjB,MAAM,YAAY,kBAAkB;AACpC,SAAM,UAAU,SAAS,IACrB,wBAAwB,cAAc,gBAAgB,UAAU,KAAK,KAAK,KAC1E,wBAAwB,cAAc,sBAAsB,cAAc;QAG9E,OAAM;AAER,UAAQ,OAAO,MAAM,WAAW,IAAI,WAAW;AAC/C;;CAGF,MAAM,YAAY,gBAAgB,QAAQ,QAAQ,EAAE,YAAY,MAAM,CAAC;CACvE,IAAI;AACJ,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;UAErB,KAAK;AACV,MAAI,eAAe,4BAA4B;AAC7C,WAAQ,OAAO,MAAM,oKAAoK;AACzL;;AAEF,QAAM;;CAIR,IAAI,QAAQ;CACZ,IAAI,UAA2B,EAAE;CACjC,IAAI,gBAAgB;CACpB,IAAI,cAAc;CAClB,IAAI,WAAW;CACf,IAAI,cAAc;CAClB,IAAI,QAAQ;CACZ,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,IAAI,gBAAsD;CAE1D,MAAM,OAAO,QAAQ,OAAO,WAAW;CACvC,MAAM,aAAa;CACnB,MAAM,aAAa,gBAAgB,UAAU,cAAc,SAAS;CAEpE,SAAS,iBAAyB;EAChC,MAAM,IAAI,aAAa;AACvB,MAAI,CAAC,EACH,QAAO;AACT,SAAO,WAAW,EAAE;;CAGtB,SAAS,SAAS;EAChB,MAAM,QAAkB,EAAE;AAG1B,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,YAAY,WAAW,SAAS;AAC3C,QAAM,KAAK,GAAG;EAGd,MAAM,eAAe,gBAAgB;EACrC,MAAM,SAAS,eAAe,GAAG,iBAAiB;AAClD,QAAM,KAAK,sBAAsB,SAAS,MAAM,iBAAiB;AAGjE,MAAI,aAAa;GACf,MAAM,QAAQ,eAAe,YAAY,eAAe;AACxD,SAAM,KAAK,aAAa,MAAM,mCAAmC;QAGjE,OAAM,KAAK,aAAa,IAAI,OAAO,KAAK,IAAI,OAAO,GAAG,GAAG,CAAC,CAAC,SAAS;AAItE,MAAI,OAAO;AACT,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,aAAa,MAAM,SAAS;aAEhC,MAAM,WAAW,GAAG;AAC3B,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,mCAAmC;aAEvC,MAAM,SAAS,KAAK,CAAC,aAAa;AACzC,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,gCAAgC;aAEpC,QAAQ,WAAW,KAAK,CAAC,aAAa;AAC7C,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,8BAA8B;SAEtC;AACH,SAAM,KAAK,GAAG;GACd,MAAM,QAAQ,QAAQ,MAAM,GAAG,WAAW;GAC1C,MAAM,SAAS,gBAAgB,QAAQ;AACvC,QAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;IACrC,MAAM,IAAI,MAAM;IAChB,MAAM,WAAW,MAAM;IACvB,MAAM,SAAS,WAAW,qBAAqB;IAC/C,MAAM,KAAK,WAAW,OAAO,IAAI,EAAE,IAAI,EAAE;IACzC,MAAM,EAAE,OAAO,MAAM,YAAY,qBAAqB,GAAG,KAAK;IAC9D,MAAM,cAAc,eAAe,SAAS,EAAE,WAAW;IAEzD,MAAM,MAAM,SAAS,IAAI,EAAE,QAAQ;IACnC,MAAM,WAAW,MAAM,GAAG,EAAE,QAAQ,GAAG,QAAQ,EAAE;AAEjD,QAAI,UAAU;AACZ,WAAM,KAAK,KAAK,OAAO,UAAU,SAAS,UAAU,GAAG,YAAY,MAAM,SAAS;AAClF,WAAM,KAAK,eAAe,KAAK,SAAS;AACxC,WAAM,KAAK,OAAO,cAAc;UAGhC,OAAM,KAAK,KAAK,OAAO,WAAW,SAAS,UAAU,GAAG,YAAY,MAAM,SAAS;;;AAMzF,QAAM,KAAK,GAAG;EACd,MAAM,QAAkB,EAAE;AAC1B,MAAI,QAAQ,SAAS,EACnB,OAAM,KAAK,GAAG,QAAQ,OAAO,UAAU;AACzC,MAAI,UAAU,KAAK,CAAC,YAClB,OAAM,KAAK,GAAG,QAAQ,QAAQ,EAAE,CAAC,GAAG;EACtC,MAAM,SAAS,MAAM,SAAS,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,QAAQ;AAC/D,QAAM,KAAK,aAAa,OAAO,oDAAoD;AACnF,QAAM,KAAK,GAAG;AAEd,YAAU,MAAM,KAAK,KAAK,CAAC;;CAG7B,eAAe,WAAW;EACxB,MAAM,KAAK,EAAE;EACb,MAAM,YAAY,MAAM,MAAM;AAC9B,MAAI,UAAU,SAAS,GAAG;AACxB,aAAU,EAAE;AACZ,iBAAc;AACd,WAAQ;AACR;;AAGF,gBAAc;AACd,UAAQ;AACR,UAAQ;EAGR,MAAM,eAAe,kBAAkB;AACrC;AACA,OAAI,YACF,SAAQ;KACT,GAAG;EAEN,MAAM,EAAE,OAAO,QAAQ,QAAQ,iBAAiB,kBAAkB,UAAU;EAC5E,MAAM,SAAS,gBAAgB,qBAAqB,aAAa,aAAa;EAC9E,MAAM,QAAQ,YAAY,KAAK;EAE/B,MAAM,MAAM,MAAM,aAAa,QAAQ,MAAM;GAAE,OAAO;GAAY;GAAQ,CAAC,CAAC,OAAO,MAAM;AACvF,OAAI,OAAO,SACT,SAAQ,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACpD,UAAO,EAAE;IACT;AAEF,gBAAc,aAAa;AAG3B,MAAI,OAAO,SACT;AAEF,YAAU;AACV,aAAW,YAAY,KAAK,GAAG,SAAS;AACxC,kBAAgB;AAChB,gBAAc;AACd,UAAQ;;CAGV,SAAS,iBAAiB;AACxB,MAAI,cACF,cAAa,cAAc;AAC7B,kBAAgB,WAAW,UAAU,IAAI;;AAI3C,SAAQ;CAGR,MAAM,EAAE,UAAU;AAClB,KAAI,MAAM,MACR,OAAM,WAAW,KAAK;AACxB,OAAM,QAAQ;AACd,OAAM,YAAY,QAAQ;AAE1B,QAAO,IAAI,SAAe,YAAY;EACpC,SAAS,UAAU;AACjB,OAAI,cACF,cAAa,cAAc;AAC7B,OAAI,MAAM,MACR,OAAM,WAAW,MAAM;AACzB,SAAM,eAAe,QAAQ,OAAO;AACpC,SAAM,OAAO;AACb,aAAU,KAAK;;EAGjB,SAAS,OAAO;AACd,YAAS;AACT,aAAU,MAAM;AAChB,YAAS;;EAGX,SAAS,eAAe;AACtB,OAAI,QAAQ,WAAW,KAAK,iBAAiB,QAAQ,OACnD;GACF,MAAM,IAAI,QAAQ;AAClB,YAAS;AACT,aAAU,MAAM;GAGhB,MAAM,UAAU,kBAAkB,EAAE,QAAQ,WAAW,EAAE;GACzD,MAAM,YAAY,EAAE,cAAc,EAAE,UAAU,IAAI,EAAE,cAAc,IAAI,EAAE,UAAU,GAAG,EAAE;GACvF,MAAM,cAAc,eAAe,iBAAiB,EAAE,QAAQ,EAAE,EAAE,WAAW;GAC7E,MAAM,OAAO,SAAS,IAAI,EAAE,QAAQ;GAGpC,MAAM,MAAM;IACV;IACA,YAJa,OAAO,GAAG,EAAE,QAAQ,GAAG,SAAS,EAAE,QAI5B,UAAU,WAHf,gBAAgB,QAAQ,CAGU,IAAI,EAAE,IAAI,EAAE;IAC5D,aAAa,QAAQ,GAAG,UAAU;IAClC;IACA,KAAK,YAAY,QAAQ,OAAO,OAAO;IACvC;IACD,CAAC,KAAK,KAAK;AACZ,WAAQ,OAAO,MAAM,GAAG,IAAI,IAAI;AAChC,YAAS;;EAGX,SAAS,OAAO,MAAc;AAE5B,OAAI,SAAS,KAAQ;AACnB,UAAM;AACN;;AAIF,OAAI,SAAS,UAAU,SAAS,YAAY;AAC1C,UAAM;AACN;;AAIF,OAAI,SAAS,QAAQ,SAAS,MAAM;AAClC,kBAAc;AACd;;AAIF,OAAI,SAAS,KAAM;AACjB,mBAAe,cAAc,KAAK,aAAa;AAC/C,QAAI,MAAM,UAAU,EAClB,iBAAgB;AAClB,YAAQ;AACR;;AAIF,OAAI,SAAS,OAAU,SAAS,MAAM;AACpC,QAAI,MAAM,SAAS,GAAG;AACpB,aAAQ,MAAM,MAAM,GAAG,GAAG;AAC1B,qBAAgB;AAChB,aAAQ;;AAEV;;AAIF,OAAI,SAAS,YAAY,SAAS,UAAU;AAE1C,QAAI,gBAAgB,GAAG;AACrB;AACA,aAAQ;;AAEV;;AAEF,OAAI,SAAS,YAAY,SAAS,UAAU;AAE1C,QAAI,gBAAgB,QAAQ,SAAS,GAAG;AACtC;AACA,aAAQ;;AAEV;;AAIF,OAAI,KAAK,WAAW,OAAO,CACzB;AAGF,YAAS;AACT,mBAAgB;AAChB,WAAQ;;AAGV,QAAM,GAAG,QAAQ,OAAO;GACxB"}

package/dist/_chunks/search.mjs

@@ -1,4 +1,3 @@
-import "./agent.mjs";
 import "./config.mjs";
 import "./package-json.mjs";
 import "./prepare.mjs";
@@ -11,6 +10,8 @@ import "./shared.mjs";
 import "./sources.mjs";
 import "./detect.mjs";
 import "./prompts.mjs";
+import "./agent.mjs";
+import "./libs/@sinclair/typebox.mjs";
 import "./cli-helpers.mjs";
 import "./lockfile.mjs";
 import "./skills.mjs";

package/dist/_chunks/setup.mjs

@@ -1,4 +1,3 @@
-import "./agent.mjs";
 import "./config.mjs";
 import "./package-json.mjs";
 import "./prepare.mjs";
@@ -8,6 +7,8 @@ import "./yaml.mjs";
 import "./shared.mjs";
 import "./detect.mjs";
 import "./prompts.mjs";
+import "./agent.mjs";
+import "./libs/@sinclair/typebox.mjs";
 import { b as resolveAgent, x as sharedArgs } from "./cli-helpers.mjs";
 import { t as runWizard } from "./wizard.mjs";
 import { defineCommand } from "citty";

package/dist/_chunks/setup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"setup.mjs","names":[],"sources":["../../src/commands/setup.ts"],"sourcesContent":["import type { AgentType } from '../agent/index.ts'\nimport { defineCommand } from 'citty'\nimport { resolveAgent, sharedArgs } from '../cli-helpers.ts'\nimport { runWizard } from './wizard.ts'\n\nexport const setupCommandDef = defineCommand({\n  meta: {\n    name: 'setup',\n    description: 'Re-run the setup wizard to configure features and model',\n  },\n  args: {\n    agent: sharedArgs.agent,\n  },\n  async run({ args }) {\n    const agent = resolveAgent(args.agent)\n    await runWizard({\n      agent: agent && agent !== 'none' ? agent as AgentType : undefined,\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;AAKA,MAAa,kBAAkB,cAAc;CAC3C,MAAM;EACJ,MAAM;EACN,aAAa;EACd;CACD,MAAM,EACJ,OAAO,WAAW,OACnB;CACD,MAAM,IAAI,EAAE,QAAQ;EAClB,MAAM,QAAQ,aAAa,KAAK,MAAM;AACtC,QAAM,UAAU,EACd,OAAO,SAAS,UAAU,SAAS,QAAqB,KAAA,GACzD,CAAC;;CAEL,CAAC"}
+{"version":3,"file":"setup.mjs","names":[],"sources":["../../src/commands/setup.ts"],"sourcesContent":["import type { AgentType } from '../agent/index.ts'\nimport { defineCommand } from 'citty'\nimport { resolveAgent, sharedArgs } from '../cli-helpers.ts'\nimport { runWizard } from './wizard.ts'\n\nexport const setupCommandDef = defineCommand({\n  meta: {\n    name: 'setup',\n    description: 'Re-run the setup wizard to configure features and model',\n  },\n  args: {\n    agent: sharedArgs.agent,\n  },\n  async run({ args }) {\n    const agent = resolveAgent(args.agent)\n    await runWizard({\n      agent: agent && agent !== 'none' ? agent as AgentType : undefined,\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;AAKA,MAAa,kBAAkB,cAAc;CAC3C,MAAM;EACJ,MAAM;EACN,aAAa;EACd;CACD,MAAM,EACJ,OAAO,WAAW,OACnB;CACD,MAAM,IAAI,EAAE,QAAQ;EAClB,MAAM,QAAQ,aAAa,KAAK,MAAM;AACtC,QAAM,UAAU,EACd,OAAO,SAAS,UAAU,SAAS,QAAqB,KAAA,GACzD,CAAC;;CAEL,CAAC"}

package/dist/_chunks/sources.mjs

@@ -870,9 +870,10 @@ function fetchIssuesByState(owner, repo, state, count, releasedAt, fromDate) {
 	let datePart = "";
 	if (fromDate) datePart = state === "closed" ? `+closed:>=${fromDate}` : `+created:>=${fromDate}`;
 	else if (state === "closed") if (releasedAt) {
-		const date = new Date(releasedAt);
-		date.setMonth(date.getMonth() + 6);
-		datePart = `+closed:<=${isoDate(date.toISOString())}`;
+		datePart = `+closed:>=${isoDate(releasedAt)}`;
+		const cap = new Date(releasedAt);
+		cap.setMonth(cap.getMonth() + 6);
+		if (cap < /* @__PURE__ */ new Date()) datePart += `+closed:<=${isoDate(cap.toISOString())}`;
 	} else datePart = `+closed:>${oneYearAgo()}`;
 	else if (releasedAt) {
 		const date = new Date(releasedAt);