skiller 0.7.11 → 0.7.12

package/dist/core/SkillsProcessor.js

@@ -49,6 +49,92 @@ const yaml = __importStar(require("js-yaml"));
 const constants_1 = require("../constants");
 const SkillsUtils_1 = require("./SkillsUtils");
 const FrontmatterParser_1 = require("./FrontmatterParser");
+/**
+ * For non-Claude agents, compile a wrapper SKILL.md (body is a single @reference)
+ * into a standalone SKILL.md with the referenced file's body inlined.
+ *
+ * We intentionally keep this conservative: only expand when the body is *just*
+ * an @reference line, to avoid accidentally treating email addresses or
+ * "@mentions" inside real content as file references.
+ */
+async function compileSkillMdForNonClaudeAgents(skillMdContent, projectRoot, skillFolderPath) {
+    const { frontmatter, rawFrontmatter, body } = (0, FrontmatterParser_1.parseFrontmatter)(skillMdContent);
+    const refCheck = isReferenceBody(body);
+    if (!refCheck.isReference || !refCheck.referencePath) {
+        return skillMdContent;
+    }
+    const referencePath = refCheck.referencePath;
+    const absoluteRefPath = referencePath.startsWith('./') || referencePath.startsWith('../')
+        ? path.resolve(skillFolderPath, referencePath)
+        : path.resolve(projectRoot, referencePath);
+    // Security: only inline references within the project root.
+    const normalizedProjectRoot = path.resolve(projectRoot);
+    const normalizedAbsoluteRefPath = path.resolve(absoluteRefPath);
+    if (!normalizedAbsoluteRefPath.startsWith(normalizedProjectRoot + path.sep)) {
+        return skillMdContent;
+    }
+    let referencedContent;
+    try {
+        referencedContent = await fs.readFile(normalizedAbsoluteRefPath, 'utf8');
+    }
+    catch {
+        return skillMdContent;
+    }
+    const { body: referencedBody } = (0, FrontmatterParser_1.parseFrontmatter)(referencedContent);
+    const fmData = rawFrontmatter && Object.keys(rawFrontmatter).length > 0
+        ? rawFrontmatter
+        : frontmatter && Object.keys(frontmatter).length > 0
+            ? frontmatter
+            : null;
+    if (fmData) {
+        return `---
+${yaml.dump(fmData, { lineWidth: -1, noRefs: true }).trim()}
+---
+
+${referencedBody}
+`;
+    }
+    return `${referencedBody}\n`;
+}
+/**
+ * Copies a single skill directory to an agent skill directory:
+ * - SKILL.md is compiled (inlines @reference wrapper content)
+ * - .mdc files are excluded (Claude-only sources)
+ * - all other files are copied as-is
+ */
+async function copySkillDirectoryForNonClaudeAgents(src, dest, projectRoot, skillFolderPath, depth = 0) {
+    // Security: Prevent DoS via deeply nested directories
+    if (depth >= constants_1.MAX_RECURSION_DEPTH) {
+        return;
+    }
+    const stat = await fs.stat(src);
+    if (stat.isDirectory()) {
+        await fs.mkdir(dest, { recursive: true });
+        const entries = await fs.readdir(src, { withFileTypes: true });
+        for (const entry of entries) {
+            // Exclude all .mdc files from agent skills directories.
+            if (entry.isFile() && entry.name.endsWith('.mdc')) {
+                continue;
+            }
+            const srcPath = path.join(src, entry.name);
+            const destPath = path.join(dest, entry.name);
+            await copySkillDirectoryForNonClaudeAgents(srcPath, destPath, projectRoot, skillFolderPath, depth + 1);
+        }
+        return;
+    }
+    // Files
+    if (path.basename(src) === constants_1.SKILL_MD_FILENAME) {
+        const content = await fs.readFile(src, 'utf8');
+        const compiled = await compileSkillMdForNonClaudeAgents(content, projectRoot, skillFolderPath);
+        await fs.writeFile(dest, compiled, 'utf8');
+        return;
+    }
+    // Extra guard: skip .mdc even if reached via recursion.
+    if (src.endsWith('.mdc')) {
+        return;
+    }
+    await fs.copyFile(src, dest);
+}
 /**
  * Check if SKILL.md body is just a reference (single non-empty line starting with @).
  * This replaces the previous synced: true frontmatter detection.
@@ -373,7 +459,7 @@ async function discoverSkills(projectRoot, skillerDir) {
  * Copies skills from source directory to target agent's skills directory.
  * Validates skill structure and returns copy count and warnings.
  */
-async function copySkillsToAgent(sourceSkillsDir, targetSkillsDir, verbose, dryRun) {
+async function copySkillsToAgent(sourceSkillsDir, targetSkillsDir, projectRoot, verbose, dryRun) {
     const warnings = [];
     let copied = 0;
     try {
@@ -402,7 +488,7 @@ async function copySkillsToAgent(sourceSkillsDir, targetSkillsDir, verbose, dryR
         const relativeSkillPath = path.relative(sourceSkillsDir, skill.path);
         const targetSkillPath = path.join(targetSkillsDir, relativeSkillPath);
         if (!dryRun) {
-            await (0, SkillsUtils_1.copySkillsDirectory)(skillPath, targetSkillPath);
+            await copySkillDirectoryForNonClaudeAgents(skillPath, targetSkillPath, projectRoot, skillPath);
         }
         (0, constants_1.logVerboseInfo)(dryRun
             ? `DRY RUN: Would copy skill '${skill.name}' to ${targetSkillsDir}`
@@ -492,7 +578,7 @@ async function propagateSkills(projectRoot, agents, skillsEnabled, verbose, dryR
     }
     // Copy skills to each unique destination
     for (const targetPath of destinationPaths) {
-        const result = await copySkillsToAgent(skillsDir, targetPath, verbose, dryRun);
+        const result = await copySkillsToAgent(skillsDir, targetPath, projectRoot, verbose, dryRun);
         if (result.copied > 0) {
             (0, constants_1.logVerboseInfo)(`Copied ${result.copied} skill(s) to ${targetPath}`, verbose, dryRun);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "skiller",
-	"version": "0.7.11",
+	"version": "0.7.12",
 	"description": "Skiller — apply the same rules to all coding agents",
 	"main": "dist/lib.js",
 	"publishConfig": {