skillctl-secure 0.30.0__tar.gz → 0.30.2__tar.gz

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: skillctl-secure
-Version: 0.30.0
+Version: 0.30.2
 Summary: Package manager, trust layer, and portability layer for Agent Skills
 Project-URL: Homepage, https://github.com/brian-scardina/skillctl
 Project-URL: Repository, https://github.com/brian-scardina/skillctl
@@ -412,7 +412,7 @@ presence is reported in the result, not the exit status.
 
 ### Installed-skills attack surface and risk
 
-Open **Skills → Inventory → Attack surface & risk** for an interactive tree of AI
+Open the top-level **Attack Surface & Risk** tab beside **Skills** for an interactive tree of AI
 app destinations, local skill copies, and observed indicators such as credential
 references, code execution, network references, and instruction overrides. Select
 any copy or indicator for its source locations, findings, risks, and suggested
@@ -422,9 +422,9 @@ shown but excluded from the installed-copy rating.
 
 Choose **Assess installed skills** to take fresh, read-only audits of up to 100
 copies. Enable the CVE checkbox to include OSV checks. The map initially shows
-**UNKNOWN** because discovery alone is not an audit. Closing the map stops the
-assessment between copies; an in-progress bounded audit may finish in the
-background. Reopening starts a new assessment, rather than reusing old findings.
+**UNKNOWN** because discovery alone is not an audit. The assessment remains available when switching tabs. Opening the page performs
+metadata discovery; choose **Assess installed skills** to refresh findings.
+Restarting the app starts a new assessment.
 
 The overall **installed-skill risk** uses the highest observed heuristic severity.
 An affected dependency advisory imposes a **MEDIUM** review floor; this is a

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/README.md

@@ -388,7 +388,7 @@ presence is reported in the result, not the exit status.
 
 ### Installed-skills attack surface and risk
 
-Open **Skills → Inventory → Attack surface & risk** for an interactive tree of AI
+Open the top-level **Attack Surface & Risk** tab beside **Skills** for an interactive tree of AI
 app destinations, local skill copies, and observed indicators such as credential
 references, code execution, network references, and instruction overrides. Select
 any copy or indicator for its source locations, findings, risks, and suggested
@@ -398,9 +398,9 @@ shown but excluded from the installed-copy rating.
 
 Choose **Assess installed skills** to take fresh, read-only audits of up to 100
 copies. Enable the CVE checkbox to include OSV checks. The map initially shows
-**UNKNOWN** because discovery alone is not an audit. Closing the map stops the
-assessment between copies; an in-progress bounded audit may finish in the
-background. Reopening starts a new assessment, rather than reusing old findings.
+**UNKNOWN** because discovery alone is not an audit. The assessment remains available when switching tabs. Opening the page performs
+metadata discovery; choose **Assess installed skills** to refresh findings.
+Restarting the app starts a new assessment.
 
 The overall **installed-skill risk** uses the highest observed heuristic severity.
 An affected dependency advisory imposes a **MEDIUM** review floor; this is a

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "skillctl-secure"
-version = "0.30.0"
+version = "0.30.2"
 description = "Package manager, trust layer, and portability layer for Agent Skills"
 readme = "README.md"
 license = "Apache-2.0"

skillctl_secure-0.30.2/skillctl/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.30.2"

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/skillctl/attack_surface_tui.py

@@ -9,11 +9,10 @@ from .attack_surface import (scan_inventory, build_surface, surface_summary, nod
                              assess_inventory, METHOD)
 
 
-class AttackSurfaceScreen(ModalScreen):
-    BINDINGS = [('escape', 'close', 'Close')]
-    CSS = '''
-    AttackSurfaceScreen { align: center middle; background: $background 85%; }
-    #surface-dialog { width: 96%; height: 95%; background: $surface; border: solid $accent; padding: 1; }
+class AttackSurfacePanel(Vertical):
+    DEFAULT_CSS = '''
+    AttackSurfacePanel { height: 1fr; width: 1fr; }
+    #surface-dialog { width: 100%; height: 100%; background: $surface; border: solid $accent; padding: 1; }
     #surface-summary { height: auto; max-height: 8; overflow-y: auto; }
     #surface-body { height: 1fr; }
     #surface-tree { width: 45%; }
@@ -23,9 +22,11 @@ class AttackSurfaceScreen(ModalScreen):
     #surface-actions Button { width: 1fr; }
     '''
 
-    def __init__(self, manager):
+    def __init__(self, manager, auto_load=True):
         super().__init__()
         self.manager = manager
+        self.auto_load = auto_load
+        self._loaded = False
         self.inventory = {'rows': [], 'errors': []}
 
     def compose(self):
@@ -38,10 +39,17 @@ class AttackSurfaceScreen(ModalScreen):
                     yield Static(METHOD + '\n\nSelect a skill or indicator to see evidence and fixes. Shared copies appear under each destination but count once. Each run assesses at most 100 copies; remaining copies stay UNKNOWN.', id='surface-detail', markup=False)
             with Horizontal(id='surface-actions'):
                 yield Button('Assess installed skills', id='surface-assess', variant='primary', disabled=True)
-                yield Button('Close', id='surface-close')
+                if self.auto_load:
+                    yield Button('Close', id='surface-close')
 
     def on_mount(self):
-        self.load_surface()
+        if self.auto_load:
+            self.ensure_loaded()
+
+    def ensure_loaded(self):
+        if not self._loaded:
+            self._loaded = True
+            self.load_surface()
 
     @work(thread=True, exclusive=True, group='surface-assessment')
     def load_surface(self, assess=False, online=False):
@@ -95,7 +103,7 @@ class AttackSurfaceScreen(ModalScreen):
 
     def action_close(self):
         self.workers.cancel_group(self, 'surface-assessment')
-        self.dismiss()
+        self.screen.dismiss()
 
     def on_button_pressed(self, event):
         event.stop()
@@ -105,3 +113,21 @@ class AttackSurfaceScreen(ModalScreen):
             event.button.disabled = True
             self.query_one('#surface-detail', Static).update(METHOD + '\n\nAssessment in progress. Select a copy for current findings.')
             self.load_surface(True, self.query_one('#surface-cves', Checkbox).value)
+
+
+class AttackSurfaceScreen(ModalScreen):
+    BINDINGS = [('escape', 'close', 'Close')]
+    CSS = """
+    AttackSurfaceScreen { align: center middle; background: $background 85%; }
+    AttackSurfaceScreen AttackSurfacePanel { width: 96%; height: 95%; }
+    """
+
+    def __init__(self, manager):
+        super().__init__()
+        self.manager = manager
+
+    def compose(self):
+        yield AttackSurfacePanel(self.manager)
+
+    def action_close(self):
+        self.query_one(AttackSurfacePanel).action_close()

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/skillctl/section_navigation.py

@@ -4,6 +4,7 @@ from textual.widgets import Tabs, TabbedContent
 SECTIONS = {
     'home': ('home',),
     'skills': ('available', 'inventory', 'installed', 'updates', 'custom'),
+    'risk': ('attack-surface',),
     'reviews': ('reviews',),
     'organize': ('collections', 'workbenches', 'profiles', 'environments'),
     'system': ('doctor', 'policy', 'permissions', 'publishers', 'hosts', 'toolbox'),
@@ -29,6 +30,8 @@ def activate_section(app, event):
     if event.tabs.id != 'sections':
         return
     event.stop()
+    if event.tab.id != event.tabs.active:
+        return
     section = event.tab.id.removeprefix('section-')
     pages = SECTIONS[section]
     catalog = app.query_one('#catalog', TabbedContent)

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/skillctl/tui_original.py

@@ -53,8 +53,8 @@ class ConfirmScreen(ModalScreen[bool]):
     def on_button_pressed(self, event: Button.Pressed) -> None:
         if event.button.id == "btn-attack-surface":
             event.stop()
-            from .attack_surface_tui import AttackSurfaceScreen
-            self.push_screen(AttackSurfaceScreen(self.manager))
+            self.set_focus(None)
+            self.query_one("#sections", Tabs).active = "section-risk"
             return
         event.stop()
         self.dismiss(event.button.id == "confirm-ok")
@@ -89,8 +89,8 @@ class AddSkillScreen(ModalScreen[dict | None]):
     def on_button_pressed(self, event: Button.Pressed) -> None:
         if event.button.id == "btn-attack-surface":
             event.stop()
-            from .attack_surface_tui import AttackSurfaceScreen
-            self.push_screen(AttackSurfaceScreen(self.manager))
+            self.set_focus(None)
+            self.query_one("#sections", Tabs).active = "section-risk"
             return
         if event.button.id == "cancel":
             self.dismiss(None)
@@ -270,12 +270,15 @@ class SkillCtlTUI(App):
         yield Header()
         yield Static("", id="summary", markup=True)
         with Horizontal(id="navigation"):
-            yield Tabs(*(Tab(label, id="section-" + key) for key, label in (("home", "Home"), ("skills", "Skills"), ("reviews", "Reviews"), ("organize", "Organize"), ("system", "System"))), id="sections")
+            yield Tabs(*(Tab(label, id="section-" + key) for key, label in (("home", "Home"), ("skills", "Skills"), ("risk", "Attack Surface & Risk"), ("reviews", "Reviews"), ("organize", "Organize"), ("system", "System"))), id="sections")
             yield Input(placeholder="Search…  [/]", id="search", tooltip="Search skills, descriptions, categories, and collections. Press / to focus.")
         with Horizontal(id="body"):
             with TabbedContent(id="catalog"):
                 with TabPane("Home", id="home"):
                     yield DataTable(id="table-home", cursor_type="row")
+                with TabPane("Attack Surface & Risk", id="attack-surface"):
+                    from .attack_surface_tui import AttackSurfacePanel
+                    yield AttackSurfacePanel(self.manager, auto_load=False)
                 with TabPane("Available", id="available"):
                     yield DataTable(id="table-available", cursor_type="row")
                 with TabPane("Inventory", id="inventory"):
@@ -1282,8 +1285,8 @@ class SkillCtlTUI(App):
     def on_button_pressed(self, event: Button.Pressed) -> None:
         if event.button.id == "btn-attack-surface":
             event.stop()
-            from .attack_surface_tui import AttackSurfaceScreen
-            self.push_screen(AttackSurfaceScreen(self.manager))
+            self.set_focus(None)
+            self.query_one("#sections", Tabs).active = "section-risk"
             return
         if event.button.id == "btn-findings":
             event.stop()

{skillctl_secure-0.30.0 → skillctl_secure-0.30.2}/skillctl/tui_progressive.py

@@ -74,8 +74,19 @@ def install_progressive_startup(SkillCtlTUI, legacy_on_mount) -> None:
         pane = getattr(event, "pane", None)
         pane_id = getattr(pane, "id", None)
         if pane_id:
+            from textual.widgets import TabbedContent
+            if pane_id != self.query_one("#catalog", TabbedContent).active:
+                return
             from .section_navigation import sync_section
             sync_section(self, str(pane_id))
+            if pane_id == "attack-surface":
+                from .attack_surface_tui import AttackSurfacePanel
+                self._close_detail()
+                self.selected_kind = "attack-surface"
+                self.selected_name = None
+                self._update_skill_action_buttons(None)
+                self.query_one(AttackSurfacePanel).ensure_loaded()
+                return
             self._hydrate_secondary_tab(str(pane_id))
             if pane_id in {"home", "available", "inventory", "installed", "updates", "custom", "collections", "workbenches", "reviews"}:
                 table = self.query_one(f"#table-{pane_id}", DataTable)

skillctl_secure-0.30.0/skillctl/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.30.0"