@cleocode/caamp 2026.5.90 → 2026.5.92

package/dist/cli.js

@@ -4202,18 +4202,30 @@ Show example inputs and expected outputs.
 
 // src/commands/skills/install.ts
 import { existsSync as existsSync11 } from "fs";
+import { createRequire } from "module";
+import { pushWarning } from "@cleocode/lafs";
 import pc11 from "picocolors";
 var cachedCore;
+var defaultCoreResolver = async () => {
+  const require2 = createRequire(import.meta.url);
+  require2.resolve("@cleocode/core");
+  return await import("@cleocode/core");
+};
+var coreResolver = defaultCoreResolver;
 async function resolveCore() {
   if (cachedCore !== void 0) return cachedCore;
   try {
-    const mod = await import("@cleocode/core");
-    cachedCore = mod;
-  } catch {
+    cachedCore = await coreResolver();
+  } catch (err) {
     cachedCore = null;
-    process.stderr.write(
-      "[caamp] WARNING: @cleocode/core unavailable \u2014 skipping trust gate (skill installs not security-checked)\n"
-    );
+    pushWarning({
+      code: "W_CORE_UNAVAILABLE",
+      severity: "warn",
+      message: "caamp running without @cleocode/core \u2014 trust gate skipped (skill installs not security-checked)",
+      context: {
+        error: err instanceof Error ? err.message : String(err)
+      }
+    });
   }
   return cachedCore;
 }
@@ -4263,10 +4275,13 @@ async function recordSkillTrustBypass(scan, reason = null) {
   try {
     core.recordTrustBypass(scan, reason);
   } catch (err) {
-    process.stderr.write(
-      `[caamp] WARNING: failed to record trust-bypass audit row: ${err instanceof Error ? err.message : String(err)}
-`
-    );
+    const msg = err instanceof Error ? err.message : String(err);
+    pushWarning({
+      code: "W_AUDIT_LOG_FAILED",
+      severity: "warn",
+      message: "trust-bypass audit record failed",
+      context: { error: msg }
+    });
   }
 }
 function registerSkillsInstall(parent) {