vskill 0.1.0

package/dist/commands/update.js

@@ -0,0 +1,114 @@
+// ---------------------------------------------------------------------------
+// vskill update -- update installed skills
+// ---------------------------------------------------------------------------
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { readLockfile, writeLockfile } from "../lockfile/index.js";
+import { getSkill } from "../api/client.js";
+import { detectInstalledAgents } from "../agents/agents-registry.js";
+import { runTier1Scan } from "../scanner/index.js";
+import { bold, green, red, yellow, dim, cyan, spinner, } from "../utils/output.js";
+export async function updateCommand(skill, opts) {
+    const lock = readLockfile();
+    if (!lock) {
+        console.error(yellow("No vskill.lock found. Run ") +
+            cyan("vskill init") +
+            yellow(" first."));
+        process.exit(1);
+        return; // unreachable but satisfies TS
+    }
+    const skillNames = Object.keys(lock.skills);
+    if (skillNames.length === 0) {
+        console.log(dim("No skills installed. Nothing to update."));
+        return;
+    }
+    // Determine which skills to update
+    let toUpdate;
+    if (skill) {
+        if (!lock.skills[skill]) {
+            console.error(red(`Skill "${skill}" is not installed.`));
+            process.exit(1);
+            return;
+        }
+        toUpdate = [skill];
+    }
+    else if (opts.all) {
+        toUpdate = skillNames;
+    }
+    else {
+        console.log(yellow("Specify a skill name or use --all to update everything."));
+        console.log(dim(`Installed: ${skillNames.join(", ")}`));
+        return;
+    }
+    const agents = await detectInstalledAgents();
+    if (agents.length === 0) {
+        console.error(red("No agents detected. Cannot update."));
+        process.exit(1);
+        return;
+    }
+    let updated = 0;
+    for (const name of toUpdate) {
+        const entry = lock.skills[name];
+        const spin = spinner(`Checking ${name}`);
+        try {
+            const remote = await getSkill(name);
+            spin.stop();
+            // Compare versions
+            if (remote.sha && remote.sha === entry.sha) {
+                console.log(dim(`${name}: already up to date`));
+                continue;
+            }
+            console.log(`${bold(name)}: ${dim(entry.sha?.slice(0, 8) || "unknown")} -> ${green(remote.sha?.slice(0, 8) || "new")}`);
+            // Fetch new content
+            if (!remote.content) {
+                console.log(yellow(`  No content available from registry for ${name}. Skipping.`));
+                continue;
+            }
+            // Run scan on new version
+            const scanResult = runTier1Scan(remote.content);
+            const verdictColor = scanResult.verdict === "PASS"
+                ? green
+                : scanResult.verdict === "CONCERNS"
+                    ? yellow
+                    : red;
+            console.log(`  Scan: ${verdictColor(scanResult.verdict)} (${scanResult.score}/100)`);
+            if (scanResult.verdict === "FAIL") {
+                console.log(red(`  Refusing to update ${name}: scan FAILED`));
+                continue;
+            }
+            // Install to each agent
+            const sha = createHash("sha256")
+                .update(remote.content)
+                .digest("hex")
+                .slice(0, 12);
+            for (const agent of agents) {
+                const skillDir = join(process.cwd(), agent.localSkillsDir, name);
+                try {
+                    mkdirSync(skillDir, { recursive: true });
+                    writeFileSync(join(skillDir, "SKILL.md"), remote.content, "utf-8");
+                }
+                catch {
+                    // Silently skip write failures for update
+                }
+            }
+            // Update lockfile entry
+            lock.skills[name] = {
+                ...entry,
+                version: remote.version || entry.version,
+                sha,
+                tier: remote.tier || entry.tier,
+                installedAt: new Date().toISOString(),
+            };
+            updated++;
+        }
+        catch (err) {
+            spin.stop();
+            console.log(yellow(`  ${name}: `) +
+                dim(`could not fetch from registry (${err.message})`));
+        }
+    }
+    writeLockfile(lock);
+    console.log(`\n${updated > 0 ? green(`${updated} skill${updated === 1 ? "" : "s"} updated`) : dim("No updates available")}`);
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,IAAI,EACJ,KAAK,EACL,GAAG,EACH,MAAM,EACN,GAAG,EACH,IAAI,EACJ,OAAO,GACR,MAAM,oBAAoB,CAAC;AAM5B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAyB,EACzB,IAAmB;IAEnB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CACX,MAAM,CAAC,4BAA4B,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC;YACnB,MAAM,CAAC,SAAS,CAAC,CACpB,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,CAAC,+BAA+B;IACzC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,mCAAmC;IACnC,IAAI,QAAkB,CAAC;IACvB,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,qBAAqB,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,yDAAyD,CAAC,CAClE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YAEZ,mBAAmB;YACnB,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YAED,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAC3G,CAAC;YAEF,oBAAoB;YACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,4CAA4C,IAAI,aAAa,CAAC,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YAED,0BAA0B;YAC1B,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,YAAY,GAChB,UAAU,CAAC,OAAO,KAAK,MAAM;gBAC3B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,UAAU;oBACjC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,GAAG,CAAC;YACZ,OAAO,CAAC,GAAG,CACT,WAAW,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,KAAK,OAAO,CACxE,CAAC;YAEF,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,wBAAwB,IAAI,eAAe,CAAC,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;iBACtB,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,IAAI,CACnB,OAAO,CAAC,GAAG,EAAE,EACb,KAAK,CAAC,cAAc,EACpB,IAAI,CACL,CAAC;gBACF,IAAI,CAAC;oBACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzC,aAAa,CACX,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAC1B,MAAM,CAAC,OAAO,EACd,OAAO,CACR,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBAClB,GAAG,KAAK;gBACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;gBACxC,GAAG;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;gBAC/B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YAEF,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;gBACnB,GAAG,CAAC,kCAAmC,GAAa,CAAC,OAAO,GAAG,CAAC,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,SAAS,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAChH,CAAC;AACJ,CAAC"}

package/dist/commands/version.d.ts

@@ -0,0 +1 @@
+export declare function versionCommand(): Promise<void>;

package/dist/commands/version.js

@@ -0,0 +1,11 @@
+// ---------------------------------------------------------------------------
+// vskill version
+// ---------------------------------------------------------------------------
+import { createRequire } from "node:module";
+import { bold, cyan } from "../utils/output.js";
+const require = createRequire(import.meta.url);
+const pkg = require("../../package.json");
+export async function versionCommand() {
+    console.log(`${bold("vskill")} ${cyan(`v${pkg.version}`)}`);
+}
+//# sourceMappingURL=version.js.map

package/dist/commands/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/commands/version.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const pkg = require("../package.json");
+const program = new Command();
+program
+    .name("vskill")
+    .description("Secure multi-platform AI skill installer -- scan before you install")
+    .version(pkg.version, "-v, --version");
+program
+    .command("init")
+    .description("Initialize vskill and detect installed AI agents")
+    .action(async () => {
+    const { initCommand } = await import("./commands/init.js");
+    await initCommand();
+});
+program
+    .command("add <source>")
+    .description("Install a skill from GitHub with security scanning")
+    .option("--skill <name>", "Skill name within a multi-skill repo")
+    .option("--global", "Install to global agent directories")
+    .option("--force", "Install even if scan finds issues")
+    .action(async (source, opts) => {
+    const { addCommand } = await import("./commands/add.js");
+    await addCommand(source, opts);
+});
+program
+    .command("scan <path>")
+    .description("Run tier-1 security scan on a SKILL.md file")
+    .action(async (path) => {
+    const { scanCommand } = await import("./commands/scan.js");
+    await scanCommand(path);
+});
+program
+    .command("list")
+    .description("List installed skills or detected agents")
+    .option("--agents", "Show all 39 known agents with installed status")
+    .option("--json", "Output as JSON")
+    .action(async (opts) => {
+    const { listCommand } = await import("./commands/list.js");
+    await listCommand(opts);
+});
+program
+    .command("find <query>")
+    .description("Search the verified-skill.com registry")
+    .action(async (query) => {
+    const { findCommand } = await import("./commands/find.js");
+    await findCommand(query);
+});
+program
+    .command("update [skill]")
+    .description("Update installed skills from the registry")
+    .option("--all", "Update all installed skills")
+    .action(async (skill, opts) => {
+    const { updateCommand } = await import("./commands/update.js");
+    await updateCommand(skill, opts);
+});
+program
+    .command("submit <source>")
+    .description("Submit a skill for verification on verified-skill.com")
+    .option("--email <email>", "Email for submission updates")
+    .action(async (source, opts) => {
+    const { submitCommand } = await import("./commands/submit.js");
+    await submitCommand(source, opts);
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEvC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,qEAAqE,CAAC;KAClF,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAEzC,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,gBAAgB,EAAE,sCAAsC,CAAC;KAChE,MAAM,CAAC,UAAU,EAAE,qCAAqC,CAAC;KACzD,MAAM,CAAC,SAAS,EAAE,mCAAmC,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAI,EAAE,EAAE;IACrC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzD,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,UAAU,EAAE,gDAAgD,CAAC;KACpE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;IAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,OAAO,EAAE,6BAA6B,CAAC;KAC9C,MAAM,CAAC,KAAK,EAAE,KAAyB,EAAE,IAAI,EAAE,EAAE;IAChD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC/D,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAI,EAAE,EAAE;IACrC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC/D,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/lockfile/index.d.ts

@@ -0,0 +1,2 @@
+export type { VskillLock, SkillLockEntry } from "./types.js";
+export { readLockfile, writeLockfile, ensureLockfile, addSkillToLock, removeSkillFromLock, } from "./lockfile.js";

package/dist/lockfile/index.js

@@ -0,0 +1,2 @@
+export { readLockfile, writeLockfile, ensureLockfile, addSkillToLock, removeSkillFromLock, } from "./lockfile.js";
+//# sourceMappingURL=index.js.map

package/dist/lockfile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lockfile/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,eAAe,CAAC"}

package/dist/lockfile/lockfile.d.ts

@@ -0,0 +1,23 @@
+import type { VskillLock, SkillLockEntry } from "./types.js";
+/**
+ * Read vskill.lock from cwd or specified directory.
+ * Returns null if the lockfile does not exist.
+ */
+export declare function readLockfile(dir?: string): VskillLock | null;
+/**
+ * Write a VskillLock object to disk.
+ */
+export declare function writeLockfile(lock: VskillLock, dir?: string): void;
+/**
+ * Create a lockfile if one does not already exist.
+ * Returns the existing or newly created lock.
+ */
+export declare function ensureLockfile(dir?: string): VskillLock;
+/**
+ * Add or update a skill entry in the lockfile.
+ */
+export declare function addSkillToLock(name: string, info: SkillLockEntry, dir?: string): void;
+/**
+ * Remove a skill entry from the lockfile.
+ */
+export declare function removeSkillFromLock(name: string, dir?: string): void;

package/dist/lockfile/lockfile.js

@@ -0,0 +1,70 @@
+// ---------------------------------------------------------------------------
+// Read/write vskill.lock
+// ---------------------------------------------------------------------------
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+const LOCKFILE_NAME = "vskill.lock";
+function lockPath(dir) {
+    return join(dir || process.cwd(), LOCKFILE_NAME);
+}
+/**
+ * Read vskill.lock from cwd or specified directory.
+ * Returns null if the lockfile does not exist.
+ */
+export function readLockfile(dir) {
+    const p = lockPath(dir);
+    if (!existsSync(p))
+        return null;
+    try {
+        const raw = readFileSync(p, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write a VskillLock object to disk.
+ */
+export function writeLockfile(lock, dir) {
+    lock.updatedAt = new Date().toISOString();
+    const p = lockPath(dir);
+    writeFileSync(p, JSON.stringify(lock, null, 2) + "\n", "utf-8");
+}
+/**
+ * Create a lockfile if one does not already exist.
+ * Returns the existing or newly created lock.
+ */
+export function ensureLockfile(dir) {
+    const existing = readLockfile(dir);
+    if (existing)
+        return existing;
+    const lock = {
+        version: 1,
+        agents: [],
+        skills: {},
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+    };
+    writeLockfile(lock, dir);
+    return lock;
+}
+/**
+ * Add or update a skill entry in the lockfile.
+ */
+export function addSkillToLock(name, info, dir) {
+    const lock = ensureLockfile(dir);
+    lock.skills[name] = info;
+    writeLockfile(lock, dir);
+}
+/**
+ * Remove a skill entry from the lockfile.
+ */
+export function removeSkillFromLock(name, dir) {
+    const lock = readLockfile(dir);
+    if (!lock)
+        return;
+    delete lock.skills[name];
+    writeLockfile(lock, dir);
+}
+//# sourceMappingURL=lockfile.js.map

package/dist/lockfile/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/lockfile/lockfile.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,aAAa,GAAG,aAAa,CAAC;AAEpC,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,GAAY;IAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAoB,EACpB,GAAY;IAEZ,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAY;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/lockfile/types.d.ts

@@ -0,0 +1,14 @@
+export interface SkillLockEntry {
+    version: string;
+    sha: string;
+    tier: string;
+    installedAt: string;
+    source: string;
+}
+export interface VskillLock {
+    version: 1;
+    agents: string[];
+    skills: Record<string, SkillLockEntry>;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/lockfile/types.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// vskill.lock schema
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lockfile/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lockfile/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E"}

package/dist/scanner/index.d.ts

@@ -0,0 +1,4 @@
+export { scanContent, SCAN_PATTERNS } from "./patterns.js";
+export type { ScanPattern, ScanFinding, ScanVerdict, PatternSeverity, PatternCategory, } from "./patterns.js";
+export { runTier1Scan } from "./tier1.js";
+export type { Tier1Result } from "./tier1.js";

package/dist/scanner/index.js

@@ -0,0 +1,3 @@
+export { scanContent, SCAN_PATTERNS } from "./patterns.js";
+export { runTier1Scan } from "./tier1.js";
+//# sourceMappingURL=index.js.map

package/dist/scanner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scanner/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAS3D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/scanner/patterns.d.ts

@@ -0,0 +1,25 @@
+export type PatternSeverity = "critical" | "high" | "medium" | "low" | "info";
+export type PatternCategory = "command-injection" | "data-exfiltration" | "privilege-escalation" | "credential-theft" | "prompt-injection" | "filesystem-access" | "network-access" | "code-execution";
+export type ScanVerdict = "PASS" | "CONCERNS" | "FAIL";
+export interface ScanPattern {
+    id: string;
+    name: string;
+    severity: PatternSeverity;
+    description: string;
+    pattern: RegExp;
+    category: PatternCategory;
+}
+export interface ScanFinding {
+    patternId: string;
+    patternName: string;
+    severity: PatternSeverity;
+    category: PatternCategory;
+    match: string;
+    lineNumber: number;
+    context: string;
+}
+export declare const SCAN_PATTERNS: ScanPattern[];
+/**
+ * Scan content against all 37 patterns, returning every match found.
+ */
+export declare function scanContent(content: string): ScanFinding[];