@apnex/network-adapter 0.1.11 → 0.1.12

package/dist/index.js

@@ -37,7 +37,7 @@ export { parseHarnessManifest, loadHarnessManifest, serverCapabilitiesFromManife
 // tool-bridge) consumes the SAME per-call behavior wrapper the MCP CallTool
 // handler uses — without importing an MCP server. This is the concrete payoff of
 // the Slice-B extraction: one dispatch authority, many last-mile bindings.
-export { runToolDispatch } from "./tool-manager/dispatch/dispatch.js";
+export { runToolDispatch, DEFAULT_TRANSIENT_DROP_RETRY, } from "./tool-manager/dispatch/dispatch.js";
 // Slice C: dispatcher is the orchestrator (binding assembly); dispatch authority
 // + OIS policy live under dispatch/; cache/reconcile/health under catalog/.
 export { createSharedDispatcher, pendingKey, injectQueueItemId, assertHostWiringComplete, } from "./tool-manager/orchestrator/dispatcher.js";
@@ -60,4 +60,6 @@ export { appendNotification, buildPendingTaskNotification } from "./notification
 // essentials keeps downstream consumers from needing a separate
 // dependency declaration for the standard-pipeline pattern.
 export { CognitivePipeline, CognitiveTelemetry, CircuitBreaker, HubUnavailableError, WriteCallDedup, DedupTimeoutError, ToolResultCache, FlushAllOnWriteStrategy, ToolDescriptionEnricher, ErrorNormalizer, NormalizedError, ResponseSummarizer, summarizeResult, buildPaginationHint, } from "@apnex/cognitive-layer";
+// hcapskills0 build_core — the harness-neutral, resource-generic HCAP consumer core.
+export * from "./control-plane/index.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAYtE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,sEAAsE;AAEtE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAW9D,4EAA4E;AAC5E,uEAAuE;AACvE,6EAA6E;AAC7E,uEAAuE;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAgB9D,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,yEAAyE;AACzE,oEAAoE;AACpE,qEAAqE;AAErE,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGrE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,EACb,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,WAAW,EACX,MAAM,EACN,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAGnC,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAGrC,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AAuBtC,0EAA0E;AAC1E,sEAAsE;AACtE,4EAA4E;AAC5E,iFAAiF;AACjF,2EAA2E;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAMtE,iFAAiF;AACjF,4EAA4E;AAC5E,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,2CAA2C,CAAC;AAQnD,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAS1F,gFAAgF;AAChF,6EAA6E;AAC7E,oBAAoB;AACpB,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAG7F,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAKlG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAGtF,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAInE,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAMzF,uEAAuE;AACvE,yDAAyD;AACzD,iEAAiE;AACjE,gEAAgE;AAChE,4DAA4D;AAE5D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,mBAAmB,GACpB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAYtE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,sEAAsE;AAEtE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAW9D,4EAA4E;AAC5E,uEAAuE;AACvE,6EAA6E;AAC7E,uEAAuE;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAgB9D,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,yEAAyE;AACzE,oEAAoE;AACpE,qEAAqE;AAErE,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGrE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,EACb,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,WAAW,EACX,MAAM,EACN,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAGnC,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAGrC,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AAuBtC,0EAA0E;AAC1E,sEAAsE;AACtE,4EAA4E;AAC5E,iFAAiF;AACjF,2EAA2E;AAC3E,OAAO,EACL,eAAe,EACf,4BAA4B,GAC7B,MAAM,qCAAqC,CAAC;AAO7C,iFAAiF;AACjF,4EAA4E;AAC5E,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,2CAA2C,CAAC;AAQnD,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAS1F,gFAAgF;AAChF,6EAA6E;AAC7E,oBAAoB;AACpB,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAG7F,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAKlG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAGtF,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAInE,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAMzF,uEAAuE;AACvE,yDAAyD;AACzD,iEAAiE;AACjE,gEAAgE;AAChE,4DAA4D;AAE5D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AA2BhC,qFAAqF;AACrF,cAAc,0BAA0B,CAAC"}

package/dist/skills/claude-skill-actuator.d.ts

@@ -0,0 +1,28 @@
+import type { ResourceActuatorPort, ResourceSpec, ConvergeResult, ManagedObservation } from "../control-plane/contracts.js";
+import type { SkillLedgerPort } from "./contracts.js";
+export interface ClaudeSkillActuatorDeps {
+    /** the seat's skills root — $CLAUDE_CONFIG_DIR/skills (INJECTED by the bin; the
+     *  shared package never reads env). Must exist (the bin creates it cold). */
+    skillsDir: string;
+    /** durable managed-set persistence (invariant 1). */
+    ledger: SkillLedgerPort;
+    log?: (msg: string) => void;
+}
+export declare class ClaudeSkillActuator implements ResourceActuatorPort {
+    private readonly skillsDir;
+    private readonly ledger;
+    private readonly log;
+    /** the DURABLE managed ledger, in memory for this pass — seeded from persistence at
+     *  construct, written back after every converge. The ONLY set removal may touch. */
+    private readonly managed;
+    constructor(deps: ClaudeSkillActuatorDeps);
+    converge(desired: readonly ResourceSpec[]): ConvergeResult;
+    observeManaged(): ManagedObservation;
+    /** merge-copy sourceDir → skillsDir/<name>/ (mkdir -p + recursive force copy). */
+    private materialize;
+    /** unlink skillsDir/<name>/ — only ever called for a name IN the managed ledger. */
+    private unlink;
+    /** the managed-scoped on-disk observation: dirs under skillsDir that hold a SKILL.md
+     *  AND are in our managed ledger. Never reports foreign/bootstrap/legacy skills. */
+    private readManagedOnDisk;
+}

package/dist/skills/claude-skill-actuator.js

@@ -0,0 +1,147 @@
+/**
+ * claude-skill-actuator.ts — ClaudeSkillActuator (hcapskills0 build_claude): the
+ * Claude SKILLS concrete `ResourceActuatorPort` impl. The mirror of `PiToolActuator`
+ * for a different (harness, kind): pi actuates tools via an in-process ExtensionAPI;
+ * this actuates skills via the FILESYSTEM claude watches ($CLAUDE_CONFIG_DIR/skills/).
+ *
+ * RUNTIME-FREE by construction — node:fs only, NO claude SDK — which is what lets the
+ * headless seed bin materialize skills before/without the claude runtime (design §5).
+ * The SOLE coupling to the claude skill surface (the fs layout + SKILL.md tree shape);
+ * skill-isms live here, NEVER in control-plane/ (the import-boundary test guards it).
+ *
+ * COEXISTENCE UNLINK SAFETY (design §9 firebreak; the load-bearing fleet-safety
+ * property during coexist with legacy `mission_kit_sync`, which writes the SAME dir):
+ *   1. The managed ledger is DURABLE (injected `SkillLedgerPort`; the bin file-backs
+ *      it) — a fresh headless process each launch reconstructs its managed set.
+ *   2. Removal is STRICTLY ledger-scoped: the unlink set is `managed \ managedEnabled`,
+ *      iterated over the persisted ledger — NEVER `readdir`. The actuator is
+ *      structurally incapable of unlinking a path it did not itself materialize
+ *      (bootstrap / user / mission_kit_sync skills are not in the ledger → untouchable).
+ *   3. Materialize is merge-copy (mkdir -p + recursive force copy), mirroring
+ *      `mission_kit_sync`'s `cp` — a shared-name collision writes identical pinned
+ *      content, never a split-brain.
+ *
+ * Seed-time materialize is race-free (the bin completes before `exec claude`, so the
+ * watcher is not yet running). Atomic temp-dir+rename is a DEFERRED refinement only
+ * the future mid-session dynamic path needs.
+ */
+import { cpSync, existsSync, mkdirSync, readdirSync, rmSync, statSync, } from "node:fs";
+import { join } from "node:path";
+export class ClaudeSkillActuator {
+    skillsDir;
+    ledger;
+    log;
+    /** the DURABLE managed ledger, in memory for this pass — seeded from persistence at
+     *  construct, written back after every converge. The ONLY set removal may touch. */
+    managed;
+    constructor(deps) {
+        this.skillsDir = deps.skillsDir;
+        this.ledger = deps.ledger;
+        this.log = deps.log ?? (() => { });
+        this.managed = new Set(this.ledger.read());
+    }
+    converge(desired) {
+        const managedEnabled = desired.filter((s) => s.enabled).map((s) => s.name);
+        const managedEnabledSet = new Set(managedEnabled);
+        try {
+            // Level 1 — MATERIALIZE every enabled declared skill (merge-copy, idempotent).
+            // A materialize fault (missing source tree, unwritable target) is an actuation
+            // fault → status:"failed" so the seed bin can fail-closed (abort launch).
+            for (const spec of desired) {
+                if (!spec.enabled)
+                    continue;
+                this.materialize(spec.name, spec.definition);
+                this.managed.add(spec.name); // ledger records only what we actually wrote
+            }
+            // Level 2 — REMOVE the set-subtraction, STRICTLY ledger-scoped (invariant 2):
+            // `managed \ managedEnabled` — a skill THIS actuator materialized in a prior
+            // pass that is no longer desired-enabled. We iterate the persisted ledger, NEVER
+            // readdir, so a foreign/bootstrap/mission_kit_sync skill (absent from the ledger)
+            // can never be unlinked. The set-diff gate (role_map ⊇ mks-delivered) is the
+            // second guarantee that an mks-delivered skill is never in this set.
+            for (const name of [...this.managed]) {
+                if (managedEnabledSet.has(name))
+                    continue;
+                this.unlink(name);
+                this.managed.delete(name);
+            }
+        }
+        catch (err) {
+            // persist whatever we durably achieved before the fault (no ledger/disk skew).
+            this.ledger.write([...this.managed]);
+            return {
+                status: "failed",
+                klass: "actuate-failed",
+                detail: err?.message ?? String(err),
+                desiredManaged: managedEnabled,
+            };
+        }
+        this.ledger.write([...this.managed]);
+        // Observe the MANAGED subset fresh off DISK (readdir ∩ managed). The filesystem is
+        // synchronous + authoritative, so a successful materialize is observable this pass
+        // → converged (no next-turn latency like pi; the claude WATCHER's async pickup is
+        // the harness's concern, not the actuator's convergence signal).
+        const observedManaged = this.readManagedOnDisk();
+        const status = sameSet(observedManaged, managedEnabled) ? "converged" : "pending";
+        return { status, desiredManaged: managedEnabled };
+    }
+    observeManaged() {
+        return {
+            observedManaged: this.readManagedOnDisk(),
+            managedNames: [...this.managed],
+        };
+    }
+    /** merge-copy sourceDir → skillsDir/<name>/ (mkdir -p + recursive force copy). */
+    materialize(name, def) {
+        const sourceDir = def?.sourceDir;
+        if (typeof sourceDir !== "string" || sourceDir.length === 0) {
+            throw new Error(`skill '${name}': definition.sourceDir missing`);
+        }
+        if (!existsSync(join(sourceDir, "SKILL.md"))) {
+            throw new Error(`skill '${name}': source tree has no SKILL.md (${sourceDir}) — refusing to materialize an empty skill`);
+        }
+        const dest = join(this.skillsDir, name);
+        mkdirSync(dest, { recursive: true });
+        cpSync(sourceDir, dest, { recursive: true, force: true });
+        this.log(`[hcap-skills] materialized '${name}' → ${dest}`);
+    }
+    /** unlink skillsDir/<name>/ — only ever called for a name IN the managed ledger. */
+    unlink(name) {
+        const dest = join(this.skillsDir, name);
+        rmSync(dest, { recursive: true, force: true });
+        this.log(`[hcap-skills] unlinked managed skill '${name}' (no longer desired)`);
+    }
+    /** the managed-scoped on-disk observation: dirs under skillsDir that hold a SKILL.md
+     *  AND are in our managed ledger. Never reports foreign/bootstrap/legacy skills. */
+    readManagedOnDisk() {
+        let entries;
+        try {
+            entries = readdirSync(this.skillsDir);
+        }
+        catch {
+            return []; // skillsDir absent (cold seat pre-mkdir) → nothing observed yet.
+        }
+        return entries.filter((name) => this.managed.has(name) &&
+            isDir(join(this.skillsDir, name)) &&
+            existsSync(join(this.skillsDir, name, "SKILL.md")));
+    }
+}
+function isDir(p) {
+    try {
+        return statSync(p).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/** Order-independent set equality over string name lists. */
+function sameSet(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const sa = new Set(a);
+    for (const x of b)
+        if (!sa.has(x))
+            return false;
+    return true;
+}
+//# sourceMappingURL=claude-skill-actuator.js.map

package/dist/skills/claude-skill-actuator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-skill-actuator.js","sourceRoot":"","sources":["../../src/skills/claude-skill-actuator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,MAAM,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC,MAAM,OAAO,mBAAmB;IACb,SAAS,CAAS;IAClB,MAAM,CAAkB;IACxB,GAAG,CAAwB;IAC5C;wFACoF;IACnE,OAAO,CAAc;IAEtC,YAAY,IAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,QAAQ,CAAC,OAAgC;QACvC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,+EAA+E;YAC/E,+EAA+E;YAC/E,0EAA0E;YAC1E,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAA6B,CAAC,CAAC;gBAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;YAC5E,CAAC;YAED,8EAA8E;YAC9E,6EAA6E;YAC7E,iFAAiF;YACjF,kFAAkF;YAClF,6EAA6E;YAC7E,qEAAqE;YACrE,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+EAA+E;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;gBAC9C,cAAc,EAAE,cAAc;aAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAErC,mFAAmF;QACnF,mFAAmF;QACnF,kFAAkF;QAClF,iEAAiE;QACjE,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IAED,cAAc;QACZ,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,iBAAiB,EAAE;YACzC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,WAAW,CAAC,IAAY,EAAE,GAAoB;QACpD,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,mCAAmC,SAAS,4CAA4C,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,oFAAoF;IAC5E,MAAM,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,yCAAyC,IAAI,uBAAuB,CAAC,CAAC;IACjF,CAAC;IAED;wFACoF;IAC5E,iBAAiB;QACvB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,iEAAiE;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,OAAO,CAAC,CAAoB,EAAE,CAAoB;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/skills/contracts.d.ts

@@ -0,0 +1,33 @@
+/**
+ * skills/contracts.ts — skills-kind-LOCAL types (hcapskills0 build_claude). These are
+ * NOT part of the neutral control-plane/ Controller; they carry the skill-ism (a skill is a
+ * directory TREE materialized on a filesystem claude watches). The neutral Controller sees
+ * only `ResourceSpec` with an OPAQUE `definition` — here we pin what that opaque
+ * payload IS for the skills kind, and the ledger the actuator scopes itself with.
+ *
+ * Home rule (ratified 2026-07-13): an actuator lives at the LOWEST layer that can
+ * express its coupling. `ClaudeSkillActuator` is contract-coupled but RUNTIME-FREE
+ * (node:fs to a path claude watches; no claude SDK) → it lives in the shared package
+ * as a control-plane/ SIBLING, reachable by the headless seed bin — which is exactly
+ * what lets §5's entrypoint materialize skills before/without the claude runtime.
+ */
+/**
+ * The opaque `ResourceSpec.definition` payload for a skill: WHERE its SKILL.md tree is
+ * read from. The seed bin resolves this (a path inside the pinned-source clone); the
+ * actuator only materializes it (fs copy) — git/clone never enters the actuator.
+ */
+export interface SkillDefinition {
+    /** absolute path to the source `skills/<name>/` tree (contains SKILL.md; depth:2). */
+    sourceDir: string;
+}
+/**
+ * Persistence for the managed-skill LEDGER — the skill-ids THIS actuator has
+ * materialized. It scopes observe + removal to our OWN set, so a foreign/bootstrap
+ * skill or a legacy `mission_kit_sync`-copied skill is never mistaken for drift nor
+ * unlinked (the coexist firebreak, design §9). Cold seat ⇒ `read()` returns `[]`
+ * (the ledger is created empty on the first `write`).
+ */
+export interface SkillLedgerPort {
+    read(): string[];
+    write(names: readonly string[]): void;
+}

package/dist/skills/contracts.js

@@ -0,0 +1,15 @@
+/**
+ * skills/contracts.ts — skills-kind-LOCAL types (hcapskills0 build_claude). These are
+ * NOT part of the neutral control-plane/ Controller; they carry the skill-ism (a skill is a
+ * directory TREE materialized on a filesystem claude watches). The neutral Controller sees
+ * only `ResourceSpec` with an OPAQUE `definition` — here we pin what that opaque
+ * payload IS for the skills kind, and the ledger the actuator scopes itself with.
+ *
+ * Home rule (ratified 2026-07-13): an actuator lives at the LOWEST layer that can
+ * express its coupling. `ClaudeSkillActuator` is contract-coupled but RUNTIME-FREE
+ * (node:fs to a path claude watches; no claude SDK) → it lives in the shared package
+ * as a control-plane/ SIBLING, reachable by the headless seed bin — which is exactly
+ * what lets §5's entrypoint materialize skills before/without the claude runtime.
+ */
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/skills/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/skills/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/skills/file-skill-ledger.d.ts

@@ -0,0 +1,7 @@
+import type { SkillLedgerPort } from "./contracts.js";
+export declare class FileSkillLedger implements SkillLedgerPort {
+    private readonly path;
+    constructor(path: string);
+    read(): string[];
+    write(names: readonly string[]): void;
+}

package/dist/skills/file-skill-ledger.js

@@ -0,0 +1,38 @@
+/**
+ * file-skill-ledger.ts — FileSkillLedger (hcapskills0 build_claude, invariant 1): the
+ * DURABLE backing for the managed-skill ledger. A JSON sidecar the seed bin points at
+ * (kept OUTSIDE skillsDir so it never confuses claude's `<name>/SKILL.md` scanner).
+ * A fresh headless process each launch reconstructs its managed set from this file.
+ *
+ * Cold seat: the file is absent → `read()` returns `[]` (created empty on first write).
+ * Corrupt ledger: reads as EMPTY (fail-safe) — the actuator re-materializes its desired
+ * set + rewrites a clean ledger, and unlinks NOTHING (removal is managed-scoped and the
+ * managed set starts empty on an unreadable ledger; orphans are safe, missing skills are
+ * not). This is the deliberately-safe failure direction for the coexist firebreak.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+export class FileSkillLedger {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    read() {
+        if (!existsSync(this.path))
+            return [];
+        try {
+            const raw = JSON.parse(readFileSync(this.path, "utf8"));
+            if (!Array.isArray(raw?.managed))
+                return [];
+            return raw.managed.filter((n) => typeof n === "string");
+        }
+        catch {
+            return [];
+        }
+    }
+    write(names) {
+        mkdirSync(dirname(this.path), { recursive: true });
+        writeFileSync(this.path, `${JSON.stringify({ managed: [...names].sort() }, null, 2)}\n`);
+    }
+}
+//# sourceMappingURL=file-skill-ledger.js.map

package/dist/skills/file-skill-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-skill-ledger.js","sourceRoot":"","sources":["../../src/skills/file-skill-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,IAAI;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC;YACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAwB;QAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CACX,IAAI,CAAC,IAAI,EACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/D,CAAC;IACJ,CAAC;CACF"}

package/dist/skills/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * skills/ — the Claude SKILLS kind-module (hcapskills0 build_claude): the SECOND kind
+ * composed onto the neutral control-plane/ Controller (the FIRST being pi-tools, in
+ * adapters/pi-plugin). Contains the ClaudeSkillActuator (outbound edge-seam) +
+ * RoleSkillSource (inbound) + the wanted-bundles manifest expansion + the durable
+ * ledger. Skill-isms (node:fs, SKILL.md layout, the managed ledger) live HERE — NEVER
+ * in control-plane/ (the import-boundary test guards that). The Controller still depends
+ * only on ResourceActuatorPort; the seed bin constructs + injects this actuator.
+ */
+export type { SkillDefinition, SkillLedgerPort } from "./contracts.js";
+export { ClaudeSkillActuator, type ClaudeSkillActuatorDeps, } from "./claude-skill-actuator.js";
+export { FileSkillLedger } from "./file-skill-ledger.js";
+export { RoleSkillSource, type RoleSkillSourceDeps } from "./role-skill-source.js";
+export { parseWantedBundles, parseBundleSkills, expandWantedBundles, type WantedBundles, } from "./manifest.js";
+export { missingFromRoleMap } from "./set-diff-gate.js";

package/dist/skills/index.js

@@ -0,0 +1,6 @@
+export { ClaudeSkillActuator, } from "./claude-skill-actuator.js";
+export { FileSkillLedger } from "./file-skill-ledger.js";
+export { RoleSkillSource } from "./role-skill-source.js";
+export { parseWantedBundles, parseBundleSkills, expandWantedBundles, } from "./manifest.js";
+export { missingFromRoleMap } from "./set-diff-gate.js";
+//# sourceMappingURL=index.js.map

package/dist/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAA4B,MAAM,wBAAwB,CAAC;AACnF,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/skills/manifest.d.ts

@@ -0,0 +1,30 @@
+/**
+ * manifest.ts — wanted-bundles.yaml parsing + MECHANICAL bundle-expand (hcapskills0
+ * build_claude, design §5). Pure functions, NO fs/env/git (the seed bin reads files
+ * and injects a bundle-reader). No yaml dependency — a focused subset parser for the
+ * manifest shape we own (mirrors ois `_mk_yaml_scalar` / `_mk_yaml_list`), matching the
+ * pinned-source contract so the derived role-map is exactly the set legacy delivers.
+ *
+ * Format (ois/manifests/skill-sync/wanted-bundles.yaml):
+ *   source_repo: <git url>
+ *   source_ref:  <sha>            # PINNED for reproducibility
+ *   bundles:     [] | - <name>    # resolved via <clone>/bundles/<name>.yaml `skills:`
+ *   extra_skills: - <name>        # individual skill via <clone>/skills/<name>/SKILL.md
+ */
+export interface WantedBundles {
+    sourceRepo: string;
+    sourceRef: string;
+    bundles: string[];
+    extraSkills: string[];
+}
+/** Parse the top-level manifest (pure). */
+export declare function parseWantedBundles(text: string): WantedBundles;
+/** Parse a bundle file's `skills:` list (pure). */
+export declare function parseBundleSkills(text: string): string[];
+/**
+ * The MECHANICAL expansion: bundle skills (resolved via the injected reader) ∪
+ * extra_skills, deduped + ordered. `readBundleSkills` reads `<clone>/bundles/<b>.yaml`
+ * — injected by the bin so this stays fs-free. Slice-1 manifest has `bundles: []`, so
+ * only extra_skills contribute today; the bundle path is implemented for the general case.
+ */
+export declare function expandWantedBundles(manifest: WantedBundles, readBundleSkills: (bundleName: string) => string[]): string[];

package/dist/skills/manifest.js

@@ -0,0 +1,110 @@
+/**
+ * manifest.ts — wanted-bundles.yaml parsing + MECHANICAL bundle-expand (hcapskills0
+ * build_claude, design §5). Pure functions, NO fs/env/git (the seed bin reads files
+ * and injects a bundle-reader). No yaml dependency — a focused subset parser for the
+ * manifest shape we own (mirrors ois `_mk_yaml_scalar` / `_mk_yaml_list`), matching the
+ * pinned-source contract so the derived role-map is exactly the set legacy delivers.
+ *
+ * Format (ois/manifests/skill-sync/wanted-bundles.yaml):
+ *   source_repo: <git url>
+ *   source_ref:  <sha>            # PINNED for reproducibility
+ *   bundles:     [] | - <name>    # resolved via <clone>/bundles/<name>.yaml `skills:`
+ *   extra_skills: - <name>        # individual skill via <clone>/skills/<name>/SKILL.md
+ */
+/** Parse the top-level manifest (pure). */
+export function parseWantedBundles(text) {
+    return {
+        sourceRepo: scalar(text, "source_repo") ?? "",
+        sourceRef: scalar(text, "source_ref") ?? "",
+        bundles: list(text, "bundles"),
+        extraSkills: list(text, "extra_skills"),
+    };
+}
+/** Parse a bundle file's `skills:` list (pure). */
+export function parseBundleSkills(text) {
+    return list(text, "skills");
+}
+/**
+ * The MECHANICAL expansion: bundle skills (resolved via the injected reader) ∪
+ * extra_skills, deduped + ordered. `readBundleSkills` reads `<clone>/bundles/<b>.yaml`
+ * — injected by the bin so this stays fs-free. Slice-1 manifest has `bundles: []`, so
+ * only extra_skills contribute today; the bundle path is implemented for the general case.
+ */
+export function expandWantedBundles(manifest, readBundleSkills) {
+    const set = new Set();
+    for (const b of manifest.bundles) {
+        for (const s of readBundleSkills(b))
+            set.add(s);
+    }
+    for (const s of manifest.extraSkills)
+        set.add(s);
+    return [...set].sort();
+}
+// ── subset YAML helpers ──────────────────────────────────────────────────────
+function scalar(text, key) {
+    for (const rawLine of text.split("\n")) {
+        const line = stripComment(rawLine);
+        const m = line.match(new RegExp(`^${escapeKey(key)}:\\s*(.*)$`));
+        if (m)
+            return unquote(m[1].trim()) || undefined;
+    }
+    return undefined;
+}
+function list(text, key) {
+    const lines = text.split("\n");
+    const out = [];
+    let inList = false;
+    for (const rawLine of lines) {
+        const line = stripComment(rawLine);
+        if (!inList) {
+            const m = line.match(new RegExp(`^${escapeKey(key)}:\\s*(.*)$`));
+            if (!m)
+                continue;
+            const inline = m[1].trim();
+            if (inline === "[]" || inline === "") {
+                if (inline === "[]")
+                    return []; // explicit empty inline list
+                inList = true; // block list follows on subsequent indented `- ` lines
+                continue;
+            }
+            // inline non-empty list `[a, b]`
+            if (inline.startsWith("[") && inline.endsWith("]")) {
+                return inline
+                    .slice(1, -1)
+                    .split(",")
+                    .map((s) => unquote(s.trim()))
+                    .filter((s) => s.length > 0);
+            }
+            return [];
+        }
+        if (line.trim() === "")
+            continue; // blank inside/after block — tolerate
+        const item = line.match(/^\s+-\s*(.+)$/);
+        if (item) {
+            const v = unquote(item[1].trim());
+            if (v.length > 0)
+                out.push(v);
+            continue;
+        }
+        break; // dedent / next top-level key → list ended
+    }
+    return out;
+}
+function stripComment(line) {
+    // drop a whole-line comment; leave inline `#` inside values alone (our values —
+    // urls, shas, skill-ids — never contain `#`, and quoted values are unquoted below).
+    if (/^\s*#/.test(line))
+        return "";
+    return line.replace(/\s+#.*$/, "");
+}
+function unquote(s) {
+    if ((s.startsWith('"') && s.endsWith('"')) ||
+        (s.startsWith("'") && s.endsWith("'"))) {
+        return s.slice(1, -1);
+    }
+    return s;
+}
+function escapeKey(key) {
+    return key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=manifest.js.map

package/dist/skills/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/skills/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,2CAA2C;AAC3C,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE;QAC7C,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE;QAC3C,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9B,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAuB,EACvB,gBAAkD;IAElD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,gFAAgF;AAEhF,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,GAAW;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;gBACrC,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAC,CAAC,6BAA6B;gBAC7D,MAAM,GAAG,IAAI,CAAC,CAAC,uDAAuD;gBACtE,SAAS;YACX,CAAC;YACD,iCAAiC;YACjC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,MAAM;qBACV,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;qBACZ,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;qBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS,CAAC,sCAAsC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,2CAA2C;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,gFAAgF;IAChF,oFAAoF;IACpF,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,IACE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACtC,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC"}

package/dist/skills/role-skill-source.d.ts

@@ -0,0 +1,29 @@
+/**
+ * role-skill-source.ts — RoleSkillSource (hcapskills0 build_claude): the skills-kind
+ * SOURCE (inbound edge-seam = the desired-set). A STATIC role→skills declaration that
+ * emits `ResourceSpec[]` for the neutral SpecStore — the mirror of pi's HubSpecSource,
+ * but static (no Hub skills-catalog / skillsRevision in slice-1; the source-poll half
+ * is deferred, design §4). The source-poll half is NOT exercised here.
+ *
+ * Slice-1 is role-AGNOSTIC (every fleet role → the same manifest-expanded set, which is
+ * exactly what mission_kit_sync delivers today), but the signature is per-role so
+ * per-role bundles generalize without a reshape. The skill CONTENT source (`sourceDirFor`)
+ * is injected by the bin (the pinned clone), so the source itself stays fs/env-free.
+ */
+import type { ResourceSpec } from "../control-plane/contracts.js";
+export interface RoleSkillSourceDeps {
+    /** static role→skill-ids overrides; a role absent here falls back to `defaultSkills`. */
+    roleSkills?: ReadonlyMap<string, readonly string[]>;
+    /** the set every role receives when not overridden (slice-1: the whole expanded set). */
+    defaultSkills: readonly string[];
+    /** resolve a skill-id → the source tree dir the actuator copies FROM (bin-injected). */
+    sourceDirFor: (skillId: string) => string;
+}
+export declare class RoleSkillSource {
+    private readonly deps;
+    constructor(deps: RoleSkillSourceDeps);
+    /** the declared skill-ids for a role — the load-bearing input to the set-diff gate. */
+    skillIdsForRole(role: string): string[];
+    /** the desired ResourceSpec set for a role: enabled, opaque `{sourceDir}` definition. */
+    specsForRole(role: string): ResourceSpec[];
+}

package/dist/skills/role-skill-source.js

@@ -0,0 +1,20 @@
+export class RoleSkillSource {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** the declared skill-ids for a role — the load-bearing input to the set-diff gate. */
+    skillIdsForRole(role) {
+        const ids = this.deps.roleSkills?.get(role) ?? this.deps.defaultSkills;
+        return [...ids];
+    }
+    /** the desired ResourceSpec set for a role: enabled, opaque `{sourceDir}` definition. */
+    specsForRole(role) {
+        return this.skillIdsForRole(role).map((id) => ({
+            name: id,
+            definition: { sourceDir: this.deps.sourceDirFor(id) },
+            enabled: true,
+        }));
+    }
+}
+//# sourceMappingURL=role-skill-source.js.map

package/dist/skills/role-skill-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-skill-source.js","sourceRoot":"","sources":["../../src/skills/role-skill-source.ts"],"names":[],"mappings":"AAwBA,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;IAAG,CAAC;IAE1D,uFAAuF;IACvF,eAAe,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACvE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,yFAAyF;IACzF,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAA4B;YAC/E,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/skills/set-diff-gate.d.ts

@@ -0,0 +1,20 @@
+/**
+ * set-diff-gate.ts — the coexist acceptance gate (hcapskills0 build_claude; design
+ * §8.2 + unlink-safety invariant 3b). During coexist, `role_map(role)` MUST be a
+ * SUPERSET of what `mission_kit_sync` delivers for that role. Why it's LOAD-BEARING,
+ * not cosmetic: a skill X that this actuator materialized (∈ its ledger) but which is
+ * later dropped from role_map while mks still delivers X lands in `managed \
+ * managedEnabled` → the removal loop would unlink X → an mks-delivered skill is
+ * clobbered. Ledger-scoping does NOT prevent this (X IS in the ledger). ONLY
+ * `role_map ⊇ mks-delivered` holding AT RUNTIME does (X∈mks ⟹ X∈role_map ⟹
+ * X∈managedEnabled ⟹ X never in the removal set).
+ *
+ * So this is evaluated as a LIVE, FAIL-CLOSED check in the seed bin (abort launch on
+ * violation) — the CI unit test is the fast signal, the seed-time gate is the
+ * runtime guarantee under manifest drift. Pure: the bin injects both sets.
+ */
+/**
+ * The mks-delivered skills MISSING from a role's role_map (empty ⇒ the gate passes).
+ * A non-empty result is a HARD fail-closed condition at seed time.
+ */
+export declare function missingFromRoleMap(roleSkills: readonly string[], mksDelivered: readonly string[]): string[];

package/dist/skills/set-diff-gate.js

@@ -0,0 +1,24 @@
+/**
+ * set-diff-gate.ts — the coexist acceptance gate (hcapskills0 build_claude; design
+ * §8.2 + unlink-safety invariant 3b). During coexist, `role_map(role)` MUST be a
+ * SUPERSET of what `mission_kit_sync` delivers for that role. Why it's LOAD-BEARING,
+ * not cosmetic: a skill X that this actuator materialized (∈ its ledger) but which is
+ * later dropped from role_map while mks still delivers X lands in `managed \
+ * managedEnabled` → the removal loop would unlink X → an mks-delivered skill is
+ * clobbered. Ledger-scoping does NOT prevent this (X IS in the ledger). ONLY
+ * `role_map ⊇ mks-delivered` holding AT RUNTIME does (X∈mks ⟹ X∈role_map ⟹
+ * X∈managedEnabled ⟹ X never in the removal set).
+ *
+ * So this is evaluated as a LIVE, FAIL-CLOSED check in the seed bin (abort launch on
+ * violation) — the CI unit test is the fast signal, the seed-time gate is the
+ * runtime guarantee under manifest drift. Pure: the bin injects both sets.
+ */
+/**
+ * The mks-delivered skills MISSING from a role's role_map (empty ⇒ the gate passes).
+ * A non-empty result is a HARD fail-closed condition at seed time.
+ */
+export function missingFromRoleMap(roleSkills, mksDelivered) {
+    const have = new Set(roleSkills);
+    return [...new Set(mksDelivered)].filter((s) => !have.has(s)).sort();
+}
+//# sourceMappingURL=set-diff-gate.js.map

package/dist/skills/set-diff-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-diff-gate.js","sourceRoot":"","sources":["../../src/skills/set-diff-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA6B,EAC7B,YAA+B;IAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC"}