@ccoalm/ccl-skills 0.15.0 → 0.15.1

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.15.0",
-  "sourceCommit": "7c3a2fbb2253f218e26acdb729edf16481982b26",
+  "version": "0.15.1",
+  "sourceCommit": "32570b61c4ffb37f6e931ba7f2d16b6617136507",
   "sourceState": "clean",
   "files": [
     {
@@ -162,12 +162,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/packages/opencode-plugin/ccl-skills.ts",
-      "sha256": "6480da2f8a293209cf4e2f8c290bf7b7b6e007a1ff4fd3c272d3408239b56ca9",
+      "sha256": "4cc8c560cbbcfe9c7723c9986ea93645ca1926503a0ea80ae93af80f0eabd10e",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/packages/opencode-plugin/commands/ccl-install-skills.md",
-      "sha256": "449d9bee6e89b66c7247bf27c417967fa0a7d8b56e51098a49c57e5a4ad67c3a",
+      "sha256": "323c5055bf608ac70fffac47d8581a3e31c3f21489fd325983f022511e711a55",
       "mode": 420
     },
     {
@@ -197,7 +197,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/scripts/owner-dispatch/owner-dispatch.sh",
-      "sha256": "cb033d816d33ea43a71b1a5a7e2a056cf95f31f6dabff9e6bece27a1d94e15ee",
+      "sha256": "76efb7c5d98b8944aaee11c537aabc82259faddfa6b60bb2bfabdbf7d0602ce2",
       "mode": 493
     },
     {
@@ -207,7 +207,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/scripts/owner-dispatch/test.sh",
-      "sha256": "d8d9600bd37608c13bf8ef91e07302f30a0435ccfd634c5365361f18b74030cc",
+      "sha256": "df5d23aef020066b427d0424c200eb64863427ea03a90de84ba5c3fbe76d450d",
       "mode": 493
     },
     {
@@ -372,7 +372,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/review_gate.py",
-      "sha256": "56e1eaf01a4af639260cfb7193dc6c14eef9bd883751e4831f7e4925db11af81",
+      "sha256": "31841b7feda1fc2ddf36654cfdc94df0bbee84d590b23cde867aae821e2b1218",
       "mode": 493
     },
     {
@@ -477,7 +477,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate.sh",
-      "sha256": "51ea90cd42ce9661f84c1a0f5daee4f2a17072b5f0cdfa5d3c0e27a0ec2af235",
+      "sha256": "55366dc96415e175c1b9a23f6fa6e118679bb656ed96c818f4a534ca14826ef0",
       "mode": 493
     },
     {
@@ -1087,7 +1087,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-observability/references/alerting-and-on-call.md",
-      "sha256": "e1363c5ca688cb596e1a96127dd14730cd679cd6fb7344c33b6acfac6f0258dc",
+      "sha256": "8124c37f30783970ce681ba1aa05cfe507f0054640ed68b19f89da32a35105ce",
       "mode": 420
     },
     {
@@ -1132,7 +1132,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-observability/SKILL.md",
-      "sha256": "6cec53c15ec23b7bd5ef060fb5442667924593fdcb72e6b4f2866eef3343dfd0",
+      "sha256": "3da20332d76fba3b982f5b920794074f7599826f063352fe5c394aaf5e66ad58",
       "mode": 420
     },
     {
@@ -1217,7 +1217,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/references/dual-sidecar-and-traffic-config-center.md",
-      "sha256": "a08191d88586922182e83183282f9ef6f94c46d2097de05179f689dd6e2761ed",
+      "sha256": "9f929f6b9bdc03c88f415cf99169d1b7bd508a49a0a80d9f2da2ffc4e079f4a7",
       "mode": 420
     },
     {
@@ -1227,7 +1227,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/references/grpc-authority-workaround.md",
-      "sha256": "f936a8f95c1fad672fcdaadb723af2ea316fbd0dc0270c9f77b846e7d8704bdb",
+      "sha256": "40c7c658a86e08afd47aa7e6cecdf71e2af08ef6c7b5768c5571e17f78b55b32",
       "mode": 420
     },
     {
@@ -1237,7 +1237,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/references/mesh-architecture.md",
-      "sha256": "4eaa070fb7669b5be1e33f267558f49f09d9102d07906efb579570adbf9a2d4e",
+      "sha256": "41b7e324969a3d21065fa9139ecabfda86439a5b02eeb18bac4300c1de0e6767",
       "mode": 420
     },
     {
@@ -1252,7 +1252,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/references/retry-timeout-circuit-breaker.md",
-      "sha256": "4158a44920b029352eff86ca1eb555218073b69b0cc58ea39286745fee312d08",
+      "sha256": "936383132340fec08539ded8cce57a9d3027af3b90eab6673af562b5c358a412",
       "mode": 420
     },
     {
@@ -1272,12 +1272,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/references/service-discovery-recipe.md",
-      "sha256": "6adefb920ae5b0b2496ef5feed9b1b5c44c944111da0bd282d0afecbd30de599",
+      "sha256": "e0f46825eeb423505e44d2deb7d3c4abecd859bc7b61c304085b02dc2a798533",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/platform-service-connectivity/SKILL.md",
-      "sha256": "17c0927bfaaf723480a73f962d9c5675fe41710e487ae8c8a62eaf6b2617c3fa",
+      "sha256": "558b1d6864527d981d5811fb709acb08405218aced5a1515ae9394ab2fb1a81a",
       "mode": 420
     },
     {
@@ -1332,7 +1332,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/delivery-lifecycle.md",
-      "sha256": "17b5f7eee4049894cb855de31878abfda1196a20278a0ccd5c03c87ecf4d720c",
+      "sha256": "3cf969368a7c0343c74ea891fbf78dde8f63295e73c7121a700757df9d0ab1e5",
       "mode": 420
     },
     {
@@ -1977,7 +1977,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/requirement-scope/SKILL.md",
-      "sha256": "45c277944ab2129ee6ff50cd135b527eee8f48514ba1957fd7bc4d929ca5e8f8",
+      "sha256": "31f46a35743b8da351f5a517a3d15a0cbe92ca4f0b778d21aec6d0b5574a9546",
       "mode": 420
     },
     {
@@ -2042,7 +2042,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/external-practice-controls.md",
-      "sha256": "105606307b875fab01dacf8e7492966de6148fe45ae8336b2fbc95cce03c336b",
+      "sha256": "98c8ef6d9250f96feb9e996e108ca473475c9b690c7a0efc57ed5a30e2665d2c",
       "mode": 420
     },
     {
@@ -2127,7 +2127,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "244615335846d51d47798dc428c543ff7ae03b09026deda649f8a2ba07ca9f2d",
+      "sha256": "006325a862d0bac253bfdd61c940c29fa20b1ddcf1ddebae4726a7a866a45f5a",
       "mode": 420
     },
     {
@@ -2207,7 +2207,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/eval-golden-trace.rb",
-      "sha256": "14c3c7c1437c6d70c5ab48ac8b1312fab3a421de31b110da84fa0528762b924c",
+      "sha256": "70d0b824c79f701606f752e815fbe7b643324b6f56d601e4e55b3ceae578ad62",
       "mode": 493
     },
     {
@@ -2247,7 +2247,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/impact-chain-gate.rb",
-      "sha256": "b24246416f7b26bf7d1e262c388dc4a752135193a8ac2ca06a7e1e6fb1caca85",
+      "sha256": "c2a4816b7c7043a7868c0ced2b7a4046b5aba088dda622ffec49360306f59ce1",
       "mode": 493
     },
     {
@@ -2277,7 +2277,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/skill-behavior-eval.py",
-      "sha256": "c6e82dbbf5b9ea8ac05e38cba1f9404cde4c6f9609bfef8fd645ea3c61d1647e",
+      "sha256": "d65c8a76ae6d4ceacbe16885abc3e0c51d6fd152d491437db7e1e8fc9988ad08",
       "mode": 493
     },
     {
@@ -2307,7 +2307,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_impact_chain_refscripts.sh",
-      "sha256": "8c7ddf91ab9987bd8aa34eb204e420a9e930270bcf877fb743cc1f1a0f3a89e4",
+      "sha256": "dbc090be57b6f14795e6b7dcd79abe83bb1efa3d2f090040c4b7225b4e10d2fa",
       "mode": 493
     },
     {
@@ -2405,6 +2405,11 @@
       "sha256": "8ddd704eac6f4ffdc5d5b6566f9a2b3d5e940b944af448586dfec0e920a54ee5",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_eval_runtime.py",
+      "sha256": "b40fb184ba6e98d767f3d9c8e9c7d20a834bba79e644b1626c6071aa777d3f60",
+      "mode": 420
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_extraction_review_gate.sh",
       "sha256": "b3284aef648eb0b6bde2cd6084b4ac9b7d060e3fb244dace59fe491bab0e05e2",
@@ -3264,7 +3269,7 @@
     },
     {
       "path": "claude-adapter.js",
-      "sha256": "661a9486abcf1bf44ecb34ef77c66b8bf1ab5d5fbd006587888d092c4348119c",
+      "sha256": "75386ab4c98d7e4056fa22683168da1867536bdc2de4d02c8b6fbef68e908713",
       "mode": 420
     },
     {
@@ -3289,12 +3294,12 @@
     },
     {
       "path": "codex-host.d.ts",
-      "sha256": "4a45f6fc30732210a684cde96b37dc96242a56b565723f8267edbdfd5d44011c",
+      "sha256": "1f1987b0820ff80c915e2a66f5324fa3790465d23b9d1fca55be178ed1c0dbdd",
       "mode": 420
     },
     {
       "path": "codex-host.js",
-      "sha256": "53d2b44b4dacab1170402a70ed857fb46645dd91b6b8a08b0454f43bb033b120",
+      "sha256": "09649bcb081b97b947a1b83441d0ac8fd2868461e5f295f241d731932d3ba04a",
       "mode": 420
     },
     {
@@ -3307,6 +3312,16 @@
       "sha256": "4e2cf0e4742d91d8f9b2024d7df3fc93690fa3a71ab35a4762bed59705e87044",
       "mode": 420
     },
+    {
+      "path": "host-probe.d.ts",
+      "sha256": "49974a5794f49a27b1bbacdb476f4d6049aad756e17a0f9856172053ed746173",
+      "mode": 420
+    },
+    {
+      "path": "host-probe.js",
+      "sha256": "db73d028fa5fc9f70887c09539bcce10ff21b0cef76101445c8820028153e2d5",
+      "mode": 420
+    },
     {
       "path": "index.d.ts",
       "sha256": "37bf7ef65f13c512112942fa78257e84d42535993669cd97fbea2374dd20e174",
@@ -3334,7 +3349,7 @@
     },
     {
       "path": "opencode-adapter.js",
-      "sha256": "51f09cfe6138cfe3db8587a644de528e51177af273d374db303cd1675c947c28",
+      "sha256": "637d3df5182ad6a51ed310736be65471fd0b432c078483af163d340ac04d6460",
       "mode": 420
     },
     {
@@ -3374,7 +3389,7 @@
     },
     {
       "path": "unified.js",
-      "sha256": "2aeabe2364755dc91d7058bf3e3b8e2bb4086a0392da6b8f87a3892879334915",
+      "sha256": "e5f2870f5ba9689b3cc903c9403b8ade85b7df5364e2037fe7a3eed04aeedc4a",
       "mode": 420
     },
     {
@@ -3408,5 +3423,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "6e6c0f7d8b6ed499d7cf1a4701958fbd38d70219ddb72f1d985b5ea8605853cc"
+  "snapshotHash": "8fd7e270f237790aff425a4e1ece90ddd91919b4a94191b3bfb17e2e75780e04"
 }

package/dist/claude-adapter.js

@@ -5,6 +5,7 @@ import { fileURLToPath } from "node:url";
 import { atomicJson, canonicalAlias, copyRegularTree, verifyTree } from "./fs-safe.js";
 import { manifestFor, readManifest, readRelease } from "./manifest.js";
 import { compare } from "./version.js";
+import { probeHostVersion } from "./host-probe.js";
 const MARKET = "ccl-skills-npm", REF = `ccl-skills@${MARKET}`;
 function paths(context) {
     const rawHome = context.home ?? (context.env ? context.env.HOME : process.env.HOME);
@@ -46,9 +47,9 @@ function command(args, context, allowFailure = false) {
     return result;
 }
 function state(context) {
-    const version = command(["--version"], context, true);
-    if (version.status !== 0)
-        return { host: false, marketplace: null, plugin: false, legacy: false };
+    const version = probeHostVersion("claude", context.env || process.env);
+    if (!version.ok)
+        return { host: false, hostFailure: { code: 4, status: `host-${version.kind}`, message: version.message } };
     const marketsRaw = command(["plugin", "marketplace", "list", "--json"], context), pluginsRaw = command(["plugin", "list", "--json"], context);
     let markets, plugins;
     try {
@@ -100,6 +101,8 @@ function prepare(context, old) {
 }
 function removeRegistration(context) {
     const current = state(context);
+    if (!current.host)
+        throw new Error(current.hostFailure.message);
     if (current.plugin)
         command(["plugin", "uninstall", REF, "--scope", "user"], context);
     if (current.marketplace)
@@ -109,6 +112,8 @@ function installRegistration(marketplace, context) {
     command(["plugin", "marketplace", "add", marketplace, "--scope", "user"], context);
     command(["plugin", "install", REF, "--scope", "user"], context);
     const current = state(context);
+    if (!current.host)
+        throw new Error(current.hostFailure.message);
     if (!current.plugin || !samePath(current.marketplace || "", marketplace))
         throw new Error("Claude did not expose the exact npm marketplace candidate");
 }
@@ -117,7 +122,7 @@ function doctor(context) {
     assertExclusiveRoot(p.claudeHome, p.root);
     const current = state(context);
     if (!current.host)
-        return { code: 4, status: "host-missing", message: "Claude CLI is not installed" };
+        return current.hostFailure;
     if (current.legacy)
         return { code: 3, status: "double-install", message: "Git marketplace and npm marketplace are both present; keep exactly one" };
     const manifest = readManifest(p.manifest);
@@ -138,7 +143,7 @@ function installOrUpdate(commandName, options, context) {
     assertExclusiveRoot(p.claudeHome, p.root, true);
     const current = state(context);
     if (!current.host)
-        return { code: 4, status: "host-missing", message: "Claude CLI is not installed" };
+        return current.hostFailure;
     if (current.legacy)
         return { code: 3, status: "double-install", message: "Remove the Git marketplace install or choose it instead of npm" };
     const old = readManifest(p.manifest), release = readRelease(p.release);
@@ -199,18 +204,20 @@ function uninstall(options, context) {
     const p = paths(context);
     assertExclusiveRoot(p.claudeHome, p.root);
     const manifest = readManifest(p.manifest), current = state(context);
+    if (!current.host)
+        return { ...current.hostFailure, message: `${current.hostFailure.message}; refusing to drop ownership evidence while registration cannot be verified` };
     if (!manifest && !current.plugin && !current.marketplace)
         return { code: 0, status: "absent", message: "Claude npm install is already absent" };
     if (!manifest)
         return { code: 3, status: "unowned-registration", message: "refusing to remove an unowned Claude registration" };
-    if (!current.host)
-        return { code: 4, status: "host-missing", message: "Claude CLI is not installed; refusing to drop ownership evidence while registration cannot be verified" };
     if (!options.yes)
         return { code: 0, status: "dry-run", message: "Claude uninstall preview", plan: ["remove npm plugin", "remove npm marketplace", "delete exclusive owned snapshots"] };
     if (context.isInterrupted?.())
         return { code: 130, status: "interrupted", message: "Claude uninstall interrupted before registration mutation", interrupted: true };
     removeRegistration(context);
     const after = state(context);
+    if (!after.host)
+        return { code: 5, status: "partial", message: `${after.hostFailure.message}; uninstall state is unverified, retaining ownership evidence` };
     if (after.plugin || after.marketplace)
         return { code: 5, status: "partial", message: "Claude registration remains after uninstall" };
     try {

package/dist/codex-host.d.ts

@@ -11,12 +11,10 @@ export declare function checkHost(codexHome?: string): {
     ok: false;
     kind: string;
     message: string;
-    version?: undefined;
+    output?: undefined;
 } | {
     ok: true;
     version: string;
-    kind?: undefined;
-    message?: undefined;
 };
 export declare function parsePluginList(text: string, marketplaceSource: string | null): {
     ok: boolean;

package/dist/codex-host.js

@@ -4,6 +4,7 @@ import { isAbsolute, join, resolve } from "node:path";
 import { LEGACY_REF, MARKET, REF } from "./paths.js";
 import { canonicalAlias } from "./fs-safe.js";
 import { compare, parseVersion } from "./version.js";
+import { probeHostVersion } from "./host-probe.js";
 function call(args, codexHome) {
     const env = {
         ...process.env,
@@ -16,14 +17,10 @@ function call(args, codexHome) {
     });
 }
 export function checkHost(codexHome) {
-    const p = call(["--version"], codexHome);
-    if (p.error || p.status !== 0)
-        return {
-            ok: false,
-            kind: "missing",
-            message: "Codex CLI is missing",
-        };
-    const version = parseVersion(`${p.stdout}\n${p.stderr}`);
+    const p = probeHostVersion("codex", { ...process.env, ...(codexHome ? { CODEX_HOME: codexHome } : {}) });
+    if (!p.ok)
+        return p;
+    const version = parseVersion(p.output);
     if (!version || compare(version, "0.133.0") < 0)
         return {
             ok: false,
@@ -37,7 +34,7 @@ export function parsePluginList(text, marketplaceSource) {
     if (lines.length === 0 ||
         (lines.length === 1 && lines[0] === "No marketplace plugins found."))
         return { ok: true, plugin: false, legacy: false };
-    const header = /^PLUGIN\s+STATUS\s+VERSION\s+PATH\s*$/;
+    const header = /^PLUGIN\s+STATUS\s+VERSION\s+(?:PATH|SOURCE)\s*$/;
     const provenance = /^Marketplace `([^`]+)`$/;
     const sensitiveRefs = new Set();
     let plugin = false;

package/dist/host-probe.d.ts

@@ -0,0 +1,11 @@
+export declare function probeHostVersion(command: string, env?: NodeJS.ProcessEnv): {
+    ok: false;
+    kind: string;
+    message: string;
+    output?: undefined;
+} | {
+    ok: true;
+    output: string;
+    kind?: undefined;
+    message?: undefined;
+};

package/dist/host-probe.js

@@ -0,0 +1,27 @@
+import { spawnSync } from "node:child_process";
+// Version discovery must not hold up other hosts or wait for interactive input.
+const HOST_PROBE_TIMEOUT_MS = 10000;
+export function probeHostVersion(command, env = process.env) {
+    const result = spawnSync(command, ["--version"], {
+        encoding: "utf8",
+        env,
+        stdio: ["ignore", "pipe", "pipe"],
+        timeout: HOST_PROBE_TIMEOUT_MS,
+        // spawnSync still waits if a child catches SIGTERM and does not exit.
+        killSignal: "SIGKILL",
+    });
+    if (result.error || result.status !== 0) {
+        const errorCode = result.error?.code;
+        const kind = errorCode === "ETIMEDOUT" ? "timeout" : errorCode === "ENOENT" ? "missing" : "probe-failed";
+        return {
+            ok: false,
+            kind,
+            message: kind === "timeout"
+                ? `${command} --version timed out after ${HOST_PROBE_TIMEOUT_MS}ms`
+                : kind === "missing"
+                    ? `${command} CLI is unavailable (ENOENT)`
+                    : `${command} --version failed (${errorCode || (result.signal ? `signal ${result.signal}` : result.error ? "spawn error" : `exit ${result.status}`)})`,
+        };
+    }
+    return { ok: true, output: `${result.stdout}\n${result.stderr}` };
+}

package/dist/opencode-adapter.js

@@ -6,6 +6,7 @@ import { fileURLToPath } from "node:url";
 import { atomicJson, sha256 } from "./fs-safe.js";
 import { readRelease } from "./manifest.js";
 import { compare } from "./version.js";
+import { probeHostVersion } from "./host-probe.js";
 const PACKAGE = "@ccoalm/ccl-skills";
 function paths(context) {
     const rawHome = context.home ?? (context.env ? context.env.HOME : process.env.HOME);
@@ -21,7 +22,7 @@ function assertExclusiveRoot(base, root, createBase = false) {
         throw new Error("managed root is not canonical");
     if (createBase)
         mkdirSync(base, { recursive: true });
-    for (const component of [base, root]) {
+    for (const component of [base, root, join(root, "snapshots")]) {
         if (!existsSync(component))
             continue;
         const stat = lstatSync(component);
@@ -124,10 +125,6 @@ function readManifest(path, root) {
     }).sort((a, b) => a.destination.localeCompare(b.destination));
     return { schema: 1, npmPackage: PACKAGE, installedAt: raw.installedAt, version: raw.version, sourceCommit: raw.sourceCommit, sourceKind: raw.sourceKind, snapshot, snapshotHash: raw.snapshotHash, entries };
 }
-function hostAvailable(context) {
-    const result = spawnSync("opencode", ["--version"], { encoding: "utf8", env: context.env || process.env });
-    return !result.error && result.status === 0;
-}
 function sharedPath(base, rel) {
     const path = resolve(base, safeRel(rel, "OpenCode destination"));
     if (!path.startsWith(`${resolve(base)}${sep}`))
@@ -190,17 +187,19 @@ function actualFiles(directory) {
 function preflight(base, next, old) {
     assertSafeSharedParents(base, next);
     const previous = new Map((old?.entries || []).map((entry) => [entry.destination, entry]));
+    const drift = [];
     if (old) {
+        assertSafeSharedParents(base, old.entries);
         for (const entry of old.entries) {
             const path = sharedPath(base, entry.destination);
             if (!existsSync(path) || (regular(path).mode & 0o777) !== entry.mode || sha256(path) !== entry.sha256)
-                throw new Error(`owned OpenCode file drifted: ${entry.destination}`);
+                drift.push(entry.destination);
         }
         const skillNames = new Set(old.entries.filter((entry) => entry.destination.startsWith("skills/")).map((entry) => entry.destination.split("/")[1]));
         for (const skill of skillNames) {
             const expected = old.entries.filter((entry) => entry.destination.startsWith(`skills/${skill}/`)).map((entry) => entry.destination.slice(`skills/${skill}/`.length)).sort();
             if (JSON.stringify(actualFiles(join(base, "skills", skill))) !== JSON.stringify(expected))
-                throw new Error(`owned OpenCode skill directory drifted: ${skill}`);
+                drift.push(`skills/${skill}`);
         }
     }
     const nextSkills = new Set(next.filter((entry) => entry.destination.startsWith("skills/")).map((entry) => entry.destination.split("/")[1]));
@@ -211,6 +210,7 @@ function preflight(base, next, old) {
     for (const entry of next)
         if (!previous.has(entry.destination) && existsSync(sharedPath(base, entry.destination)))
             throw new Error(`OpenCode path collision: ${entry.destination}`);
+    return drift;
 }
 function prepareSnapshot(p, candidate) {
     const snapshotRel = join("snapshots", candidate.snapshotHash, "source"), snapshot = join(p.root, snapshotRel);
@@ -305,8 +305,9 @@ function writeShared(p, snapshot, entries, old, isInterrupted, copyShared = (fro
 function doctor(context) {
     const p = paths(context);
     assertExclusiveRoot(p.base, p.root);
-    if (!hostAvailable(context))
-        return { code: 4, status: "host-missing", message: "OpenCode CLI is not installed" };
+    const host = probeHostVersion("opencode", context.env || process.env);
+    if (!host.ok)
+        return { code: 4, status: `host-${host.kind}`, message: host.message };
     const legacy = existsSync(join(p.base, "ccl-skills/install-manifest.json")), manifest = readManifest(p.manifest, p.root);
     if (legacy && manifest)
         return { code: 3, status: "double-install", message: "legacy checkout and npm OpenCode installs are both present; keep exactly one" };
@@ -315,20 +316,22 @@ function doctor(context) {
             return { code: 3, status: legacy ? "legacy-install" : "unowned-registration", message: "OpenCode ccl-skills files exist without an npm ownership receipt" };
         return { code: 3, status: "absent", message: "ccl-skills is not installed for OpenCode" };
     }
-    const drift = [];
-    for (const entry of manifest.entries) {
-        const path = sharedPath(p.base, entry.destination);
-        if (!existsSync(path) || sha256(path) !== entry.sha256)
-            drift.push(entry.destination);
+    let drift = [], reason;
+    try {
+        drift = preflight(p.base, manifest.entries, manifest);
+    }
+    catch (error) {
+        reason = String(error);
     }
-    if (drift.length)
-        return { code: 3, status: "shared-drift", message: "OpenCode shared files changed after npm install; they will never be auto-deleted", details: { drift } };
+    if (drift.length || reason)
+        return { code: 3, status: "shared-drift", message: "OpenCode shared files changed after npm install; they will never be auto-deleted", details: { drift, ...(reason ? { reason } : {}) } };
     return { code: 0, status: "healthy", message: `OpenCode uses @ccoalm/ccl-skills ${manifest.version}` };
 }
 function installOrUpdate(commandName, options, context) {
     const p = paths(context);
-    if (!hostAvailable(context))
-        return { code: 4, status: "host-missing", message: "OpenCode CLI is not installed" };
+    const host = probeHostVersion("opencode", context.env || process.env);
+    if (!host.ok)
+        return { code: 4, status: `host-${host.kind}`, message: host.message };
     let candidate;
     try {
         candidate = source(context);
@@ -350,7 +353,9 @@ function installOrUpdate(commandName, options, context) {
             return { code: 3, status: "downgrade-refused", message: "newer OpenCode assets are installed" };
     }
     try {
-        preflight(p.base, candidate.entries, old);
+        const drift = preflight(p.base, candidate.entries, old);
+        if (drift.length)
+            throw new Error(`owned OpenCode paths drifted: ${drift.join(", ")}`);
     }
     catch (error) {
         return { code: 3, status: "collision", message: String(error) };

package/dist/unified.js

@@ -1,14 +1,9 @@
-import { spawnSync } from "node:child_process";
+import { probeHostVersion } from "./host-probe.js";
 import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { runClaude } from "./claude-adapter.js";
 import { run as runCodex } from "./operations.js";
 import { runOpenCode } from "./opencode-adapter.js";
-function available(host) {
-    const command = host === "opencode" ? "opencode" : host;
-    const result = spawnSync(command, ["--version"], { encoding: "utf8" });
-    return !result.error && result.status === 0;
-}
 function owned(host) {
     const home = process.env.HOME;
     if (!home)
@@ -57,8 +52,15 @@ export function runUnified(command, options = {}, codexContext = {}) {
     if (options.host)
         return dispatch(options.host, command, options, codexContext);
     const includeOwned = command === "doctor" || command === "uninstall";
-    const hosts = ["claude", "codex", "opencode"].filter((host) => command === "update" ? available(host) && owned(host) : available(host) || (includeOwned && owned(host)));
+    const candidates = ["claude", "codex", "opencode"].filter((host) => command !== "update" || owned(host));
+    const probes = candidates.map((host) => ({ host, probe: probeHostVersion(host) }));
+    const hosts = probes.filter(({ host, probe }) => probe.ok || probe.kind !== "missing" || (includeOwned && owned(host))).map(({ host }) => host);
     if (!hosts.length)
-        return { code: 4, status: "host-missing", message: "none of Claude Code, Codex, or OpenCode is installed" };
-    return runHostSequence(hosts, (host) => dispatch(host, command, { ...options, host }, codexContext));
+        return { code: 4, status: "host-missing", message: "no Claude Code, Codex, or OpenCode CLI is available" };
+    return runHostSequence(hosts, (host) => {
+        const probe = probes.find((entry) => entry.host === host).probe;
+        if (!probe.ok && probe.kind !== "missing")
+            return { code: 4, status: `host-${probe.kind}`, message: probe.message };
+        return dispatch(host, command, { ...options, host }, codexContext);
+    });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccoalm/ccl-skills",
-	"version": "0.15.0",
+	"version": "0.15.1",
   "description": "Reusable workflows that help coding agents plan, build, test, review, and release software — for Claude Code, Codex, and OpenCode",
 	"keywords": ["skills", "agent-skills", "claude", "claude-code", "codex", "opencode", "agent", "ai", "ai-agents", "cli", "anthropic", "developer-tools"],
   "type": "module",