vskill 1.1.1 → 1.2.1

package/dist/lib/private-source.js

@@ -0,0 +1,392 @@
+// ---------------------------------------------------------------------------
+// private-source.ts — the one place that decides whether an installed skill
+// may be mentioned to verified-skill.com.
+//
+// Rule: nothing about a skill from a private GitHub repo (its name, the repo,
+// paths, hashes) is sent to the platform. A GitHub-sourced skill whose repo
+// visibility is unknown is treated as private: visibility is resolved through
+// the cached `GET /repos/{owner}/{repo}` call (getDefaultBranch), and if that
+// does not confirm the repo is public (404, no token, rate limit, network
+// error) the skill stays local. Registry installs came from the platform, so
+// they are always fine to send. A local plugin-dir install counts as public
+// only when its checkout's `origin` remote is a GitHub repo confirmed public.
+// ---------------------------------------------------------------------------
+import { execFileSync } from "node:child_process";
+import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { readLockfile } from "../lockfile/lockfile.js";
+import { parseSource } from "../resolvers/source-resolver.js";
+import { getRepoVisibility, getRepoVisibilityFailure, } from "./repo-visibility.js";
+/** Parse "owner/repo", "github.com/owner/repo" URLs and git@github.com remotes. */
+export function parseGitHubRepoRef(ref) {
+    if (!ref)
+        return null;
+    const trimmed = ref.trim();
+    const url = trimmed.match(/^(?:git\+)?(?:https?:\/\/|ssh:\/\/git@|git:\/\/)(?:www\.)?github\.com[/:]([^/\s]+)\/([^/\s?#]+?)(?:\.git)?\/?(?:[?#].*)?$/i);
+    if (url)
+        return { owner: url[1], repo: url[2] };
+    const scp = trimmed.match(/^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i);
+    if (scp)
+        return { owner: scp[1], repo: scp[2] };
+    // Bare "owner/repo" only — anything with a scheme or host is not GitHub.
+    if (/[:@]/.test(trimmed))
+        return null;
+    const bare = trimmed.match(/^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?$/);
+    return bare ? { owner: bare[1], repo: bare[2] } : null;
+}
+// Loaded lazily: the GitHub client pulls in the keychain, which modules that
+// only read lockfiles (e.g. the Studio routes) should not load. One shared
+// promise so concurrent lookups wait for the same module.
+let githubTree = null;
+// ---------------------------------------------------------------------------
+// Remembered public repos. When GitHub rate-limits us or is unreachable, a
+// repo confirmed public within the last 30 days still counts as public, so
+// its skills keep getting registry checks and updates. Only public repos are
+// stored (private repo names never land on disk), and a repo GitHub later
+// reports as private or missing is dropped.
+// ---------------------------------------------------------------------------
+const REMEMBERED_PUBLIC_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+/** Path of the remembered-public file; null when disabled (VSKILL_VISIBILITY_CACHE=0). */
+export function visibilityCachePath() {
+    const override = process.env.VSKILL_VISIBILITY_CACHE;
+    if (override === "0" || override === "off")
+        return null;
+    if (override)
+        return override;
+    const dir = process.env.VSKILL_CONFIG_DIR || join(homedir(), ".vskill");
+    return join(dir, "repo-visibility.json");
+}
+function readRemembered() {
+    const path = visibilityCachePath();
+    if (!path)
+        return {};
+    try {
+        const data = JSON.parse(readFileSync(path, "utf8"));
+        return data && typeof data.public === "object" && data.public ? data.public : {};
+    }
+    catch {
+        return {};
+    }
+}
+function writeRemembered(update) {
+    const path = visibilityCachePath();
+    if (!path)
+        return;
+    try {
+        const entries = readRemembered();
+        if (!update(entries))
+            return;
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        writeFileSync(path, JSON.stringify({ public: entries }, null, 2) + "\n", { mode: 0o600 });
+    }
+    catch {
+        // Best-effort: the live GitHub answer still decides this run.
+    }
+}
+// Keys already written by this process, so repeated lookups write once.
+const rememberedThisRun = new Set();
+function rememberVisibility(key, visibility) {
+    const marker = `${key}:${visibility}`;
+    if (rememberedThisRun.has(marker))
+        return;
+    rememberedThisRun.add(marker);
+    writeRemembered((entries) => {
+        if (visibility === "public") {
+            entries[key] = { checkedAt: Date.now() };
+            return true;
+        }
+        if (!(key in entries))
+            return false;
+        delete entries[key];
+        return true;
+    });
+}
+function rememberedPublicAt(key) {
+    const at = readRemembered()[key]?.checkedAt;
+    if (typeof at !== "number" || Date.now() - at > REMEMBERED_PUBLIC_TTL_MS)
+        return null;
+    return at;
+}
+// ---------------------------------------------------------------------------
+// Repos GitHub could not answer for. Their skills are kept private for this
+// run; commands list them so the skip is never silent.
+// ---------------------------------------------------------------------------
+const unconfirmed = new Map();
+// In-flight lookups, so concurrent checks of one repo share a request.
+const inFlight = new Map();
+let unconfirmedWarned = false;
+let rememberedWarned = false;
+function failureText(reason) {
+    return reason === "rate_limited" ? "GitHub is rate-limiting requests" : "GitHub could not be reached";
+}
+function warnUnconfirmed(ref, reason) {
+    if (unconfirmedWarned)
+        return;
+    unconfirmedWarned = true;
+    process.stderr.write(`vskill: ${failureText(reason)}, so ${ref} could not be confirmed public. ` +
+        "Its skills are treated as private this run (no verified-skill.com checks or registry updates). " +
+        "Set GITHUB_TOKEN or run `vskill auth login`, then retry.\n");
+}
+function warnRemembered(ref, reason, checkedAt) {
+    if (rememberedWarned)
+        return;
+    rememberedWarned = true;
+    const day = new Date(checkedAt).toISOString().slice(0, 10);
+    process.stderr.write(`vskill: ${failureText(reason)}; using the visibility of ${ref} last confirmed public on ${day}.\n`);
+}
+/**
+ * Repos whose visibility GitHub could not confirm in this process (rate
+ * limit or outage), with the reason. Their skills were treated as private.
+ */
+export function getUnconfirmedRepos() {
+    return [...unconfirmed.values()];
+}
+/** One line naming the skills that were skipped because GitHub did not answer, or null. */
+export function unconfirmedSkipNote() {
+    const repos = getUnconfirmedRepos();
+    if (repos.length === 0)
+        return null;
+    const reason = repos.some((r) => r.reason === "rate_limited")
+        ? "GitHub rate limit"
+        : "GitHub unreachable";
+    const names = repos.slice(0, 5).map((r) => r.repo).join(", ");
+    const more = repos.length > 5 ? ` and ${repos.length - 5} more` : "";
+    return (`Skipped registry checks for skills from ${repos.length} repo${repos.length === 1 ? "" : "s"} ` +
+        `whose visibility could not be confirmed (${reason}): ${names}${more}. ` +
+        "Set GITHUB_TOKEN or run `vskill auth login`, then retry.");
+}
+/** @internal test-only */
+export function _resetPrivateSourceForTests() {
+    unconfirmed.clear();
+    inFlight.clear();
+    rememberedThisRun.clear();
+    unconfirmedWarned = false;
+    rememberedWarned = false;
+}
+async function lookUpVisibility(owner, repo) {
+    const ref = `${owner}/${repo}`;
+    const key = ref.toLowerCase();
+    const known = getRepoVisibility(ref);
+    if (known !== "unknown")
+        return known;
+    try {
+        githubTree ??= import("../discovery/github-tree.js");
+        const { getDefaultBranch } = await githubTree;
+        await getDefaultBranch(owner, repo);
+    }
+    catch {
+        // getDefaultBranch never throws today; stay fail-closed if it ever does.
+    }
+    const live = getRepoVisibility(ref);
+    const failure = getRepoVisibilityFailure(ref);
+    if (live !== "unknown" || !failure) {
+        // A real answer: public, private, or 404 (private or gone).
+        rememberVisibility(key, live);
+        return live;
+    }
+    const checkedAt = rememberedPublicAt(key);
+    if (checkedAt !== null) {
+        warnRemembered(ref, failure, checkedAt);
+        return "public";
+    }
+    unconfirmed.set(key, { repo: ref, reason: failure });
+    warnUnconfirmed(ref, failure);
+    return "unknown";
+}
+/**
+ * Visibility check for a repo the user named themselves (`vskill diff
+ * owner/repo/skill`, `vskill submit owner/repo`, a Studio install
+ * identifier) that is not installed. Private when GitHub says private or
+ * hides it (404). When GitHub does not answer (rate limit, outage), the
+ * user's own request goes ahead: the name came from them, and blocking it
+ * would break public lookups on shared CI runners. Installed skills never
+ * use this; they fail closed (isPrivateSource).
+ */
+export async function isTypedRepoPrivate(owner, repo) {
+    const ref = `${owner}/${repo}`;
+    if (getRepoVisibility(ref) === "unknown") {
+        try {
+            githubTree ??= import("../discovery/github-tree.js");
+            const { getDefaultBranch } = await githubTree;
+            await getDefaultBranch(owner, repo);
+        }
+        catch {
+            // getDefaultBranch never throws today.
+        }
+    }
+    const visibility = getRepoVisibility(ref);
+    if (visibility !== "unknown")
+        return visibility === "private";
+    return !getRepoVisibilityFailure(ref);
+}
+/**
+ * Resolve a GitHub repo's visibility, reusing the process-wide cached
+ * `GET /repos/{owner}/{repo}` call. When GitHub rate-limits or is
+ * unreachable, a repo confirmed public in the last 30 days still counts as
+ * public; otherwise it stays "unknown" (treated as private) and is reported
+ * by getUnconfirmedRepos(). Never throws.
+ */
+export function resolveRepoVisibility(owner, repo) {
+    const key = `${owner}/${repo}`.toLowerCase();
+    let pending = inFlight.get(key);
+    if (!pending) {
+        pending = lookUpVisibility(owner, repo).finally(() => inFlight.delete(key));
+        inFlight.set(key, pending);
+    }
+    return pending;
+}
+/** True unless GitHub confirms the repo is public. */
+export async function isPrivateOrUnknownRepo(owner, repo) {
+    return (await resolveRepoVisibility(owner, repo)) !== "public";
+}
+/**
+ * The GitHub repo behind a local checkout's `origin` remote; null when the
+ * directory is not a git checkout, has no remote, or the remote is not GitHub.
+ */
+export function localDirGitHubRepo(dir, opts = {}) {
+    if (!dir)
+        return null;
+    const cwd = resolve(dir);
+    const git = (args) => execFileSync("git", args, { cwd, stdio: ["ignore", "pipe", "ignore"], timeout: 5_000 })
+        .toString()
+        .trim();
+    try {
+        // Only the directory's own checkout counts. git searches parent folders,
+        // so a private plugin copied into a public repo (vendor/, dotfiles)
+        // would otherwise inherit that repo's public origin.
+        // (A skill authored inside a checkout passes allowParentCheckout: it
+        // belongs to that repo.)
+        if (!opts.allowParentCheckout && !sameDir(git(["rev-parse", "--show-toplevel"]), cwd))
+            return null;
+        const remote = git(["remote", "get-url", "origin"]);
+        // A remote must be a GitHub URL or scp-style address; a bare "a/b" is a
+        // local path, not the GitHub repo a/b.
+        if (!/[:@]/.test(remote))
+            return null;
+        return parseGitHubRepoRef(remote);
+    }
+    catch {
+        return null;
+    }
+}
+function sameDir(a, b) {
+    const norm = (p) => {
+        try {
+            return realpathSync(p);
+        }
+        catch {
+            return resolve(p);
+        }
+    };
+    return norm(a) === norm(b);
+}
+/** The GitHub repo a lock entry was installed from, when it has one. */
+export function lockEntryGitHubRepo(entry) {
+    const parsed = parseSource(entry.source ?? "");
+    if (parsed.type === "github" || parsed.type === "github-plugin" || parsed.type === "marketplace") {
+        return { owner: parsed.owner, repo: parsed.repo };
+    }
+    if (parsed.type === "registry" || parsed.type === "local")
+        return null;
+    return parseGitHubRepoRef(entry.sourceRepoUrl);
+}
+/**
+ * True when nothing about this installed skill may be sent to the platform.
+ * GitHub-sourced entries are checked against GitHub (fail closed).
+ */
+export async function isPrivateSource(entry) {
+    if (!entry)
+        return false;
+    if (entry.sourcePrivate)
+        return true;
+    const parsed = parseSource(entry.source ?? "");
+    if (parsed.type === "registry")
+        return false;
+    const gh = parsed.type === "local" ? localDirGitHubRepo(parsed.baseName) : lockEntryGitHubRepo(entry);
+    if (gh)
+        return isPrivateOrUnknownRepo(gh.owner, gh.repo);
+    // A local plugin dir without its own GitHub origin, or a source vskill
+    // cannot parse, has no confirmed-public origin. Only legacy entries with no
+    // source at all (registry-era installs) still count as public.
+    if (parsed.type === "local")
+        return true;
+    return parsed.type === "unknown" && (entry.source ?? "").trim() !== "";
+}
+/** Lock entries that may be sent to the platform, in their original order. */
+export async function filterPublicEntries(entries) {
+    const flags = await Promise.all(entries.map(([, entry]) => isPrivateSource(entry)));
+    return entries.filter((_, i) => !flags[i]);
+}
+/**
+ * Find the lock entry a user-typed skill name refers to: the lock key itself,
+ * or the canonical "owner/repo/skill" form of a GitHub-sourced entry.
+ */
+export function findLockEntry(lock, name) {
+    if (!lock?.skills)
+        return null;
+    const direct = lock.skills[name];
+    if (direct)
+        return direct;
+    const parts = name.split("/");
+    if (parts.length === 1) {
+        // A skill inside a plugin install (keyed by plugin name): match the
+        // recorded files, then the key ignoring case.
+        const file = `${name}/SKILL.md`;
+        const lower = name.toLowerCase();
+        for (const [key, entry] of Object.entries(lock.skills)) {
+            if (key.toLowerCase() === lower)
+                return entry;
+            if (entry.files?.some((f) => f === file || f.endsWith(`/${file}`)))
+                return entry;
+        }
+        return null;
+    }
+    if (parts.length !== 3)
+        return null;
+    const [owner, repo, skill] = parts;
+    const entry = lock.skills[skill];
+    if (!entry)
+        return null;
+    const gh = lockEntryGitHubRepo(entry);
+    if (!gh)
+        return null;
+    return gh.owner.toLowerCase() === owner.toLowerCase() && gh.repo.toLowerCase() === repo.toLowerCase()
+        ? entry
+        : null;
+}
+/**
+ * True when a skill name the user typed must not be sent to the platform:
+ * an installed skill from a private (or unconfirmed) source, or an
+ * "owner/repo/skill" name whose repo GitHub reports as private or hides
+ * (that covers skills inside private plugins, whose lock entries are keyed
+ * by the plugin). A bare name that is not installed is a registry lookup.
+ */
+export async function isPrivateSkillName(name) {
+    const entry = findInstalledLockEntry(name);
+    if (entry)
+        return isPrivateSource(entry);
+    const parts = name.split("/");
+    if (parts.length === 3 && parts.every(Boolean)) {
+        // Not installed: the user typed this name (see isTypedRepoPrivate).
+        return isTypedRepoPrivate(parts[0], parts[1]);
+    }
+    return false;
+}
+/**
+ * The lock entry for a skill name the user typed, from the project lockfile
+ * or, failing that, the user-global one (`~/.agents/vskill.lock`), so a skill
+ * installed with `--global` is recognised from any directory.
+ */
+export function findInstalledLockEntry(name) {
+    const project = findLockEntry(readLockfile(), name);
+    if (project)
+        return project;
+    try {
+        return findLockEntry(readLockfile(join(homedir(), ".agents")), name);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=private-source.js.map

package/dist/lib/private-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-source.js","sourceRoot":"","sources":["../../src/lib/private-source.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GAGzB,MAAM,sBAAsB,CAAC;AAO9B,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,GAA8B;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CACvB,4HAA4H,CAC7H,CAAC;IACF,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnF,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,yEAAyE;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,0DAA0D;AAC1D,IAAI,UAAU,GAAiE,IAAI,CAAC;AAEpF,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAM1D,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACrD,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkC,CAAC;QACrF,OAAO,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA8C;IACrE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO;QAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5C,SAAS,kBAAkB,CAAC,GAAW,EAAE,UAA0B;IACjE,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IACtC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC1C,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE;QAC1B,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,wBAAwB;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,uDAAuD;AACvD,8EAA8E;AAE9E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuD,CAAC;AACnF,uEAAuE;AACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;AAC5D,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,SAAS,WAAW,CAAC,MAAyB;IAC5C,OAAO,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,6BAA6B,CAAC;AACxG,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,MAAyB;IAC7D,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,WAAW,CAAC,MAAM,CAAC,QAAQ,GAAG,kCAAkC;QACzE,iGAAiG;QACjG,4DAA4D,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,MAAyB,EAAE,SAAiB;IAC/E,IAAI,gBAAgB;QAAE,OAAO;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,WAAW,CAAC,MAAM,CAAC,6BAA6B,GAAG,6BAA6B,GAAG,KAAK,CACpG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB;IACjC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC;QAC3D,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,oBAAoB,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,OAAO,CACL,2CAA2C,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;QAC/F,4CAA4C,MAAM,MAAM,KAAK,GAAG,IAAI,IAAI;QACxE,0DAA0D,CAC3D,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,2BAA2B;IACzC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC1B,iBAAiB,GAAG,KAAK,CAAC;IAC1B,gBAAgB,GAAG,KAAK,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACzD,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,UAAU,KAAK,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACrD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;QAC9C,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,4DAA4D;QAC5D,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY;IAClE,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,UAAU,KAAK,MAAM,CAAC,6BAA6B,CAAC,CAAC;YACrD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;YAC9C,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,KAAK,SAAS,CAAC;IAC9D,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,IAAY;IAC/D,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAa,EAAE,IAAY;IACtE,OAAO,CAAC,MAAM,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAA8B,EAC9B,OAA0C,EAAE;IAE5C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,IAAc,EAAU,EAAE,CACrC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACpF,QAAQ,EAAE;SACV,IAAI,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,yEAAyE;QACzE,oEAAoE;QACpE,qDAAqD;QACrD,qEAAqE;QACrE,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnG,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAwC;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtG,IAAI,EAAE;QAAE,OAAO,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACzD,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwC;IAExC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAmC,EACnC,IAAY;IAEZ,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,oEAAoE;QACpE,8CAA8C;QAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,WAAW,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC9C,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE;QACnG,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,oEAAoE;QACpE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/repo-visibility.d.ts

@@ -0,0 +1,25 @@
+export type RepoVisibility = "public" | "private" | "unknown";
+/**
+ * Why GitHub gave no visibility answer for a repo: it is rate-limiting us, or
+ * it (or the network) is unavailable. A plain 404 is not a failure: the repo
+ * is private (or gone), and stays "unknown".
+ */
+export type VisibilityFailure = "rate_limited" | "unavailable";
+/** Record what GitHub reported for a repo's visibility. */
+export declare function recordRepoVisibility(owner: string, repo: string, data: {
+    private?: unknown;
+    visibility?: unknown;
+}): void;
+/**
+ * What this process has learned about a repo's visibility. Callers must treat
+ * "unknown" as private (see lib/private-source.ts).
+ */
+export declare function getRepoVisibility(ref: string | undefined | null): RepoVisibility;
+/** Record that GitHub could not answer the visibility lookup for a repo. */
+export declare function recordRepoVisibilityFailure(owner: string, repo: string, reason: VisibilityFailure): void;
+/** Why the last visibility lookup for `ref` failed, if it did. */
+export declare function getRepoVisibilityFailure(ref: string | undefined | null): VisibilityFailure | undefined;
+/** True when `ref` ("owner/repo" or a github.com URL) was seen as private. */
+export declare function isKnownPrivateRepo(ref: string | undefined | null): boolean;
+/** @internal test-only */
+export declare function _resetRepoVisibilityForTests(): void;

package/dist/lib/repo-visibility.js

@@ -0,0 +1,80 @@
+// ---------------------------------------------------------------------------
+// repo-visibility.ts — remembers which GitHub repos this process has seen as
+// private, so nothing about them (names, URLs, skill paths) is sent to
+// verified-skill.com: no install telemetry, no auto-submission for scanning.
+// Populated from the `GET /repos/{owner}/{repo}` call install already makes
+// (getDefaultBranch), so it costs no extra requests.
+// ---------------------------------------------------------------------------
+const privateRepos = new Set();
+const publicRepos = new Set();
+const failures = new Map();
+function keyOf(ref) {
+    const m = ref
+        .trim()
+        .replace(/^https?:\/\/github\.com\//i, "")
+        .match(/^([^/\s]+)\/([^/\s?#]+)/);
+    if (!m)
+        return null;
+    return `${m[1]}/${m[2].replace(/\.git$/i, "")}`.toLowerCase();
+}
+/** Record what GitHub reported for a repo's visibility. */
+export function recordRepoVisibility(owner, repo, data) {
+    const key = keyOf(`${owner}/${repo}`);
+    if (!key)
+        return;
+    failures.delete(key);
+    const isPrivate = data.private === true || data.visibility === "private" || data.visibility === "internal";
+    if (isPrivate) {
+        privateRepos.add(key);
+        publicRepos.delete(key);
+        return;
+    }
+    privateRepos.delete(key);
+    // Only an explicit "public" answer confirms a repo is public; anything
+    // else stays unknown, which every caller treats as private.
+    if (data.private === false || data.visibility === "public")
+        publicRepos.add(key);
+}
+/**
+ * What this process has learned about a repo's visibility. Callers must treat
+ * "unknown" as private (see lib/private-source.ts).
+ */
+export function getRepoVisibility(ref) {
+    if (!ref)
+        return "unknown";
+    const key = keyOf(ref);
+    if (!key)
+        return "unknown";
+    if (privateRepos.has(key))
+        return "private";
+    if (publicRepos.has(key))
+        return "public";
+    return "unknown";
+}
+/** Record that GitHub could not answer the visibility lookup for a repo. */
+export function recordRepoVisibilityFailure(owner, repo, reason) {
+    const key = keyOf(`${owner}/${repo}`);
+    if (key)
+        failures.set(key, reason);
+}
+/** Why the last visibility lookup for `ref` failed, if it did. */
+export function getRepoVisibilityFailure(ref) {
+    if (!ref)
+        return undefined;
+    const key = keyOf(ref);
+    return key ? failures.get(key) : undefined;
+}
+/** True when `ref` ("owner/repo" or a github.com URL) was seen as private. */
+export function isKnownPrivateRepo(ref) {
+    if (!ref)
+        return false;
+    const key = keyOf(ref);
+    return key ? privateRepos.has(key) : false;
+}
+/** @internal test-only */
+export function _resetRepoVisibilityForTests() {
+    privateRepos.clear();
+    publicRepos.clear();
+    failures.clear();
+}
+//# sourceMappingURL=repo-visibility.js.map

package/dist/lib/repo-visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-visibility.js","sourceRoot":"","sources":["../../src/lib/repo-visibility.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;AACvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;AACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;AAWtD,SAAS,KAAK,CAAC,GAAW;IACxB,MAAM,CAAC,GAAG,GAAG;SACV,IAAI,EAAE;SACN,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,IAAY,EACZ,IAAiD;IAEjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,SAAS,GACb,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC;IAC3F,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;QAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA8B;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B,CACzC,KAAa,EACb,IAAY,EACZ,MAAyB;IAEzB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,GAAG;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,wBAAwB,CACtC,GAA8B;IAE9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,GAA8B;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,4BAA4B;IAC1C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/lockfile/lockfile.d.ts

@@ -4,6 +4,8 @@ import type { VskillLock, SkillLockEntry } from "./types.js";
  * Returns null if the lockfile does not exist.
  */
 export declare function readLockfile(dir?: string): VskillLock | null;
+/** "owner/repo" (or a github.com URL) for a lock entry's upstream repo. */
+export declare function sourceRepoRef(entry: SkillLockEntry): string | null;
 /**
  * Write a VskillLock object to disk.
  */

package/dist/lockfile/lockfile.js

@@ -5,6 +5,7 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { getProjectRoot } from "./project-root.js";
 import { migrateLock } from "./migration.js";
+import { isKnownPrivateRepo } from "../lib/repo-visibility.js";
 const LOCKFILE_NAME = "vskill.lock";
 const SKILLS_SH_LOCKFILE = ".skill-lock.json";
 function lockPath(dir) {
@@ -26,11 +27,23 @@ export function readLockfile(dir) {
         return null;
     }
 }
+/** "owner/repo" (or a github.com URL) for a lock entry's upstream repo. */
+export function sourceRepoRef(entry) {
+    if (entry.sourceRepoUrl)
+        return entry.sourceRepoUrl;
+    const m = (entry.source ?? "").match(/^(?:github|github-plugin|marketplace):([^/#\s]+\/[^/#\s]+)/);
+    return m ? m[1] : null;
+}
 /**
  * Write a VskillLock object to disk.
  */
 export function writeLockfile(lock, dir) {
     lock.updatedAt = new Date().toISOString();
+    for (const entry of Object.values(lock.skills)) {
+        if (!entry.sourcePrivate && isKnownPrivateRepo(sourceRepoRef(entry))) {
+            entry.sourcePrivate = true;
+        }
+    }
     const p = lockPath(dir);
     mkdirSync(dirname(p), { recursive: true });
     writeFileSync(p, JSON.stringify(lock, null, 2) + "\n", "utf-8");

package/dist/lockfile/lockfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/lockfile/lockfile.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,GAAY;IAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAoB,EACpB,GAAY;IAEZ,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,wEAAwE;QACxE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI;gBACJ,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAY;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/lockfile/lockfile.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,aAAa,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,GAAY;IAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,kBAAkB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAoB,EACpB,GAAY;IAEZ,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,wEAAwE;QACxE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI;gBACJ,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAY;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/lockfile/types.d.ts

@@ -28,6 +28,11 @@ export interface SkillLockEntry {
     sourceCommitSha?: string;
     /** Plugin namespace that provided this skill, when installed from a plugin layout. */
     sourcePluginName?: string;
+    /**
+     * Installed from a private GitHub repo. Such skills are only ever updated
+     * from that repo: no registry fallback, no registry lookups, no telemetry.
+     */
+    sourcePrivate?: boolean;
 }
 export interface VskillLock {
     version: 1;

package/dist/marketplace/marketplace.js

@@ -1,6 +1,7 @@
 // ---------------------------------------------------------------------------
 // Marketplace.json parser -- parse .claude-plugin/marketplace.json
 // ---------------------------------------------------------------------------
+import { githubFetch } from "../lib/github-fetch.js";
 // ---- Parser ---------------------------------------------------------------
 /**
  * Parse marketplace.json content and extract available plugins.
@@ -129,13 +130,19 @@ export async function discoverUnregisteredPlugins(owner, repo, manifestContent,
         .map((p) => p.source.replace(/^\.\//, "").replace(/^plugins\//, ""))
         .filter(Boolean));
     try {
-        const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/contents/plugins`, {
+        // githubFetch carries the user's token, so private marketplace repos
+        // list too (a bare fetch is anonymous and 404s on a private repo).
+        const res = await githubFetch(`https://api.github.com/repos/${owner}/${repo}/contents/plugins`, {
             headers: {
                 Accept: "application/vnd.github.v3+json",
                 "User-Agent": "vskill-cli",
             },
             signal: AbortSignal.timeout(10000),
         });
+        // No plugins/ folder is a normal layout (skills/ at the repo root), not a
+        // failed lookup.
+        if (res.status === 404)
+            return { plugins: [], failed: false };
         if (!res.ok) {
             onResponse?.(res);
             return { plugins: [], failed: true };