@cleocode/caamp 2026.9.18 → 2026.9.19

package/dist/{chunk-52ZWZXEN.js → chunk-IBHW6GEI.js}

@@ -1,13 +1,17 @@
 import {
+  blockPattern,
   getAllProviders,
   getPrimaryProvider,
   groupByInstructFile,
+  inject,
   injectAll,
   normalizeMarkers,
   parseBlocks,
   reconcile,
+  resolveGlobalInstructionPath,
+  resolveInstructionDelivery,
   withFileLock
-} from "./chunk-G3CEXEW2.js";
+} from "./chunk-CHPNPLOK.js";
 import {
   __export,
   getAgentsConfigPath,
@@ -2428,8 +2432,186 @@ async function removeConfig(filePath, format, key, serverName) {
   }
 }
 
-// src/core/mcp/reader.ts
+// src/core/instructions/global-sync.ts
+import { createHash } from "crypto";
 import { existsSync as existsSync8 } from "fs";
+import { readFile as readFile5 } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import {
+  CAAMP_SOURCE_STAMP_PATTERN_SOURCE,
+  GLOBAL_INSTRUCTION_HUB_REFERENCE
+} from "@cleocode/contracts/caamp-markers";
+import { writeFileAtomic as writeFileAtomic2 } from "@cleocode/core/tools/fs.js";
+var LEGACY_CLEO_BLOCK = /\n?<!-- CLEO:START[^>]*-->[\s\S]*?<!-- CLEO:END -->\n?/g;
+var DUPLICATE_LINE_MIN_LENGTH = 24;
+var DUPLICATE_LINE_THRESHOLD = 2;
+function groupGlobalTargets(providers) {
+  const targets = /* @__PURE__ */ new Map();
+  const skipped = [];
+  for (const provider of providers) {
+    const path = resolveGlobalInstructionPath(provider);
+    if (path === null) {
+      skipped.push(provider.id);
+      continue;
+    }
+    targets.set(path, [...targets.get(path) ?? [], provider.id]);
+  }
+  return { targets, skipped };
+}
+async function stripLegacyCleoBlock(path) {
+  if (!existsSync8(path)) return false;
+  return withFileLock(path, async () => {
+    const content = await readFile5(path, "utf8");
+    const stripped = content.replace(LEGACY_CLEO_BLOCK, "");
+    if (stripped === content) return false;
+    await writeFileAtomic2({ path, content: stripped });
+    return true;
+  });
+}
+async function syncGlobalInstructions(options = {}) {
+  const providers = options.providers ?? getInstalledProviders();
+  const { targets, skipped } = groupGlobalTargets(providers);
+  const result = {
+    status: "synced",
+    files: [],
+    findings: [],
+    legacyStripped: [],
+    skippedProviders: skipped
+  };
+  if (targets.size === 0) {
+    result.status = "no-providers";
+    return result;
+  }
+  if (options.dryRun) {
+    result.status = "dry-run";
+    for (const [path, ids] of targets) {
+      result.files.push({ path, providers: ids, action: "planned" });
+    }
+    return result;
+  }
+  const delivery = await resolveInstructionDelivery(
+    options.hubReference ?? GLOBAL_INSTRUCTION_HUB_REFERENCE,
+    options.baseDir ?? homedir3()
+  );
+  const blocking = delivery.findings.filter((finding) => finding.kind !== "duplicate");
+  if (blocking.length > 0) {
+    result.status = "unresolved";
+    result.findings = blocking;
+    return result;
+  }
+  for (const [path, ids] of targets) {
+    const entry = { path, providers: ids, action: "intact" };
+    try {
+      if (await stripLegacyCleoBlock(path)) result.legacyStripped.push(path);
+      entry.action = await inject(path, delivery.content);
+    } catch (err) {
+      entry.action = "failed";
+      entry.error = err instanceof Error ? err.message : String(err);
+    }
+    result.files.push(entry);
+  }
+  return result;
+}
+async function snapshotSource(path) {
+  try {
+    const bytes = await readFile5(path);
+    return {
+      digest: createHash("sha256").update(bytes).digest("hex"),
+      lines: bytes.toString("utf8").split("\n")
+    };
+  } catch {
+    return { digest: null, lines: [] };
+  }
+}
+function evidenceLine(line) {
+  const trimmed = line.trim();
+  if (trimmed.length < DUPLICATE_LINE_MIN_LENGTH) return null;
+  if (trimmed.startsWith("@") || trimmed.startsWith("<!--")) return null;
+  if (/^(`{3,}|~{3,}|[-|: ]+)$/.test(trimmed)) return null;
+  return trimmed;
+}
+async function checkGlobalInstructionStaleness(options = {}) {
+  const providers = options.providers ?? getInstalledProviders();
+  const { targets } = groupGlobalTargets(providers);
+  const sources = /* @__PURE__ */ new Map();
+  const outsideByFile = /* @__PURE__ */ new Map();
+  const files = [];
+  for (const [path, ids] of targets) {
+    const status = {
+      path,
+      providers: ids,
+      state: "current",
+      staleSources: [],
+      duplicateLines: 0
+    };
+    files.push(status);
+    let content;
+    try {
+      content = await readFile5(path, "utf8");
+    } catch {
+      status.state = "absent";
+      continue;
+    }
+    const blocks = parseBlocks(content);
+    if (blocks.length === 0) {
+      status.state = "no-block";
+      continue;
+    }
+    outsideByFile.set(path, content.replace(blockPattern(), ""));
+    const stamps = blocks.flatMap((block) => [
+      ...block.content.matchAll(new RegExp(CAAMP_SOURCE_STAMP_PATTERN_SOURCE, "gm"))
+    ]);
+    if (stamps.length === 0) {
+      status.state = "unembedded";
+      continue;
+    }
+    for (const stamp of stamps) {
+      const encoded = stamp[1];
+      const expected = stamp[2];
+      if (!encoded || !expected) continue;
+      let source;
+      try {
+        source = decodeURIComponent(encoded);
+      } catch {
+        source = encoded;
+      }
+      let snapshot = sources.get(source);
+      if (!snapshot) {
+        snapshot = await snapshotSource(source);
+        sources.set(source, snapshot);
+      }
+      if (snapshot.digest !== expected && !status.staleSources.includes(source)) {
+        status.staleSources.push(source);
+      }
+    }
+    if (status.staleSources.length > 0) status.state = "stale";
+  }
+  const managedLines = /* @__PURE__ */ new Set();
+  for (const snapshot of sources.values()) {
+    for (const line of snapshot.lines) {
+      const evidence = evidenceLine(line);
+      if (evidence !== null) managedLines.add(evidence);
+    }
+  }
+  for (const status of files) {
+    const outside = outsideByFile.get(status.path);
+    if (outside === void 0) continue;
+    let matched = 0;
+    for (const line of outside.split("\n")) {
+      const evidence = evidenceLine(line);
+      if (evidence !== null && managedLines.has(evidence)) matched++;
+    }
+    status.duplicateLines = matched >= DUPLICATE_LINE_THRESHOLD ? matched : 0;
+  }
+  return {
+    files,
+    needsSync: files.filter((file) => file.state === "stale" || file.state === "unembedded").map((file) => file.path),
+    duplicates: files.filter((file) => file.duplicateLines > 0).map((file) => file.path)
+  };
+}
+
+// src/core/mcp/reader.ts
+import { existsSync as existsSync9 } from "fs";
 import { stat as stat2 } from "fs/promises";
 function resolveMcpConfigPath(provider, scope, projectDir) {
   if (provider.capabilities.mcp === null) return null;
@@ -2440,7 +2622,7 @@ async function listMcpServers(provider, scope, projectDir) {
   if (mcp === null) return [];
   const configPath = resolveMcpConfigPath(provider, scope, projectDir);
   if (configPath === null) return [];
-  if (!existsSync8(configPath)) {
+  if (!existsSync9(configPath)) {
     debug(`mcp.list: ${provider.id} (${scope}) \u2014 config file missing at ${configPath}`);
     return [];
   }
@@ -2483,7 +2665,7 @@ async function detectMcpInstallations(scope, projectDir) {
     if (mcp === null) continue;
     const configPath = resolveMcpConfigPath(provider, scope, projectDir);
     if (configPath === null) continue;
-    const exists = existsSync8(configPath);
+    const exists = existsSync9(configPath);
     let serverCount = null;
     let lastModified = null;
     if (exists) {
@@ -2546,7 +2728,7 @@ async function installMcpServer(provider, serverName, config, opts) {
 }
 
 // src/core/mcp/remover.ts
-import { existsSync as existsSync9 } from "fs";
+import { existsSync as existsSync10 } from "fs";
 async function removeMcpServer(provider, serverName, opts) {
   const mcp = provider.capabilities.mcp;
   if (mcp === null) {
@@ -2568,7 +2750,7 @@ async function removeMcpServer(provider, serverName, opts) {
       reason: "no-config-path"
     };
   }
-  if (!existsSync9(configPath)) {
+  if (!existsSync10(configPath)) {
     return {
       providerId: provider.id,
       serverName,
@@ -2761,8 +2943,8 @@ function isMarketplaceScoped(input) {
 }
 
 // src/core/skills/audit/scanner.ts
-import { existsSync as existsSync10 } from "fs";
-import { readFile as readFile5 } from "fs/promises";
+import { existsSync as existsSync11 } from "fs";
+import { readFile as readFile6 } from "fs/promises";
 
 // src/core/skills/audit/rules.ts
 function rule(id, name, description, severity, category, pattern) {
@@ -3134,10 +3316,10 @@ var SEVERITY_WEIGHTS = {
   info: 0
 };
 async function scanFile(filePath, rules) {
-  if (!existsSync10(filePath)) {
+  if (!existsSync11(filePath)) {
     return { file: filePath, findings: [], score: 100, passed: true };
   }
-  const content = await readFile5(filePath, "utf-8");
+  const content = await readFile6(filePath, "utf-8");
   const lines = content.split("\n");
   const activeRules = rules ?? AUDIT_RULES;
   const findings = [];
@@ -3169,13 +3351,13 @@ async function scanFile(filePath, rules) {
 async function scanDirectory(dirPath) {
   const { readdir: readdir3 } = await import("fs/promises");
   const { join: join9 } = await import("path");
-  if (!existsSync10(dirPath)) return [];
+  if (!existsSync11(dirPath)) return [];
   const entries = await readdir3(dirPath, { withFileTypes: true });
   const results = [];
   for (const entry of entries) {
     if (entry.isDirectory() || entry.isSymbolicLink()) {
       const skillFile = join9(dirPath, entry.name, "SKILL.md");
-      if (existsSync10(skillFile)) {
+      if (existsSync11(skillFile)) {
         results.push(await scanFile(skillFile));
       }
     }
@@ -3232,9 +3414,9 @@ import { promisify } from "util";
 import { simpleGit } from "simple-git";
 
 // src/core/lock-utils.ts
-import { existsSync as existsSync11 } from "fs";
-import { readFile as readFile6 } from "fs/promises";
-import { writeFileAtomic as writeFileAtomic2 } from "@cleocode/core/tools/fs.js";
+import { existsSync as existsSync12 } from "fs";
+import { readFile as readFile7 } from "fs/promises";
+import { writeFileAtomic as writeFileAtomic3 } from "@cleocode/core/tools/fs.js";
 
 // src/core/paths/agents.ts
 var AGENTS_HOME = getAgentsHome();
@@ -3245,15 +3427,15 @@ var AGENTS_CONFIG_PATH = getAgentsConfigPath();
 
 // src/core/lock-utils.ts
 async function writeLockFileUnsafe(lock) {
-  await writeFileAtomic2({ path: LOCK_FILE_PATH, content: `${JSON.stringify(lock, null, 2)}
+  await writeFileAtomic3({ path: LOCK_FILE_PATH, content: `${JSON.stringify(lock, null, 2)}
 ` });
 }
 async function readLockFile() {
   try {
-    if (!existsSync11(LOCK_FILE_PATH)) {
+    if (!existsSync12(LOCK_FILE_PATH)) {
       return { version: 1, skills: {}, mcpServers: {} };
     }
-    const content = await readFile6(LOCK_FILE_PATH, "utf-8");
+    const content = await readFile7(LOCK_FILE_PATH, "utf-8");
     return JSON.parse(content);
   } catch {
     return { version: 1, skills: {}, mcpServers: {} };
@@ -3978,7 +4160,7 @@ async function recommendSkills2(query, criteria, options = {}) {
 }
 
 // src/core/skills/library-loader.ts
-import { existsSync as existsSync12, readdirSync, readFileSync } from "fs";
+import { existsSync as existsSync13, readdirSync, readFileSync } from "fs";
 import { createRequire } from "module";
 import { basename as basename3, dirname as dirname3, join as join6 } from "path";
 var require2 = createRequire(import.meta.url);
@@ -4027,7 +4209,7 @@ function loadLibraryFromModule(root) {
 }
 function buildLibraryFromFiles(root) {
   const catalogPath = join6(root, "skills.json");
-  if (!existsSync12(catalogPath)) {
+  if (!existsSync13(catalogPath)) {
     throw new Error(`No skills.json found at ${root}`);
   }
   const catalogData = JSON.parse(readFileSync(catalogPath, "utf-8"));
@@ -4035,7 +4217,7 @@ function buildLibraryFromFiles(root) {
   const version = catalogData.version ?? "0.0.0";
   const manifestPath = join6(root, "skills", "manifest.json");
   let manifest;
-  if (existsSync12(manifestPath)) {
+  if (existsSync13(manifestPath)) {
     manifest = JSON.parse(readFileSync(manifestPath, "utf-8"));
   } else {
     manifest = {
@@ -4047,7 +4229,7 @@ function buildLibraryFromFiles(root) {
   }
   const profilesDir = join6(root, "profiles");
   const profiles = /* @__PURE__ */ new Map();
-  if (existsSync12(profilesDir)) {
+  if (existsSync13(profilesDir)) {
     for (const file of readdirSync(profilesDir)) {
       if (!file.endsWith(".json")) continue;
       try {
@@ -4096,7 +4278,7 @@ function buildLibraryFromFiles(root) {
     return resolveDeps([...new Set(skills)]);
   }
   function discoverFiles(dir, ext) {
-    if (!existsSync12(dir)) return [];
+    if (!existsSync13(dir)) return [];
     return readdirSync(dir).filter((f) => f.endsWith(ext)).map((f) => basename3(f, ext));
   }
   const library = {
@@ -4120,7 +4302,7 @@ function buildLibraryFromFiles(root) {
     getSkillDir: getSkillDir2,
     readSkillContent(name) {
       const skillPath = library.getSkillPath(name);
-      if (!existsSync12(skillPath)) {
+      if (!existsSync13(skillPath)) {
         throw new Error(`Skill content not found: ${skillPath}`);
       }
       return readFileSync(skillPath, "utf-8");
@@ -4151,7 +4333,7 @@ function buildLibraryFromFiles(root) {
     },
     getSharedResourcePath(name) {
       const resourcePath = join6(root, "skills", "_shared", `${name}.md`);
-      return existsSync12(resourcePath) ? resourcePath : void 0;
+      return existsSync13(resourcePath) ? resourcePath : void 0;
     },
     readSharedResource(name) {
       const resourcePath = library.getSharedResourcePath(name);
@@ -4165,9 +4347,9 @@ function buildLibraryFromFiles(root) {
     },
     getProtocolPath(name) {
       const rootPath = join6(root, "protocols", `${name}.md`);
-      if (existsSync12(rootPath)) return rootPath;
+      if (existsSync13(rootPath)) return rootPath;
       const skillsPath = join6(root, "skills", "protocols", `${name}.md`);
-      return existsSync12(skillsPath) ? skillsPath : void 0;
+      return existsSync13(skillsPath) ? skillsPath : void 0;
     },
     readProtocol(name) {
       const protocolPath = library.getProtocolPath(name);
@@ -4193,7 +4375,7 @@ function buildLibraryFromFiles(root) {
         issues.push({ level: "warn", field: "version", message: "Missing version" });
       }
       const skillPath = join6(root, entry.path);
-      if (!existsSync12(skillPath)) {
+      if (!existsSync13(skillPath)) {
         issues.push({
           level: "error",
           field: "path",
@@ -4252,7 +4434,7 @@ __export(catalog_exports, {
   validateAll: () => validateAll,
   validateSkillFrontmatter: () => validateSkillFrontmatter
 });
-import { existsSync as existsSync13 } from "fs";
+import { existsSync as existsSync14 } from "fs";
 import { join as join7 } from "path";
 var _library = null;
 function registerSkillLibrary(library) {
@@ -4260,7 +4442,7 @@ function registerSkillLibrary(library) {
 }
 function registerSkillLibraryFromPath(root) {
   const indexPath = join7(root, "index.js");
-  if (existsSync13(indexPath)) {
+  if (existsSync14(indexPath)) {
     _library = loadLibraryFromModule(root);
     return;
   }
@@ -4271,13 +4453,13 @@ function clearRegisteredLibrary() {
 }
 function discoverLibrary() {
   const envPath = process.env["CAAMP_SKILL_LIBRARY"];
-  if (envPath && existsSync13(envPath)) {
+  if (envPath && existsSync14(envPath)) {
     try {
       const indexPath = join7(envPath, "index.js");
-      if (existsSync13(indexPath)) {
+      if (existsSync14(indexPath)) {
         return loadLibraryFromModule(envPath);
       }
-      if (existsSync13(join7(envPath, "skills.json"))) {
+      if (existsSync14(join7(envPath, "skills.json"))) {
         return buildLibraryFromFiles(envPath);
       }
     } catch {
@@ -4384,8 +4566,8 @@ function getLibraryRoot() {
 }
 
 // src/core/skills/discovery.ts
-import { existsSync as existsSync14 } from "fs";
-import { readdir as readdir2, readFile as readFile7 } from "fs/promises";
+import { existsSync as existsSync15 } from "fs";
+import { readdir as readdir2, readFile as readFile8 } from "fs/promises";
 import { join as join8 } from "path";
 import matter from "gray-matter";
 function toJsonCompatibleYamlValue(value) {
@@ -4408,7 +4590,7 @@ function toJsonCompatibleYamlValue(value) {
 }
 async function parseSkillFile(filePath) {
   try {
-    const content = await readFile7(filePath, "utf-8");
+    const content = await readFile8(filePath, "utf-8");
     const { data } = matter(content);
     if (!data.name || !data.description) {
       return null;
@@ -4434,7 +4616,7 @@ async function parseSkillFile(filePath) {
 }
 async function discoverSkill(skillDir) {
   const skillFile = join8(skillDir, "SKILL.md");
-  if (!existsSync14(skillFile)) return null;
+  if (!existsSync15(skillFile)) return null;
   const metadata = await parseSkillFile(skillFile);
   if (!metadata) return null;
   return {
@@ -4445,7 +4627,7 @@ async function discoverSkill(skillDir) {
   };
 }
 async function discoverSkills(rootDir) {
-  if (!existsSync14(rootDir)) return [];
+  if (!existsSync15(rootDir)) return [];
   const entries = await readdir2(rootDir, { withFileTypes: true });
   const skills = [];
   for (const entry of entries) {
@@ -4474,8 +4656,8 @@ async function discoverSkillsMulti(dirs) {
 }
 
 // src/core/skills/validator.ts
-import { existsSync as existsSync15 } from "fs";
-import { readFile as readFile8 } from "fs/promises";
+import { existsSync as existsSync16 } from "fs";
+import { readFile as readFile9 } from "fs/promises";
 import matter2 from "gray-matter";
 var RESERVED_NAMES = [
   "anthropic",
@@ -4496,14 +4678,14 @@ var WARN_BODY_LINES = 500;
 var WARN_DESCRIPTION_LENGTH = 50;
 async function validateSkill(filePath) {
   const issues = [];
-  if (!existsSync15(filePath)) {
+  if (!existsSync16(filePath)) {
     return {
       valid: false,
       issues: [{ level: "error", field: "file", message: "File does not exist" }],
       metadata: null
     };
   }
-  const content = await readFile8(filePath, "utf-8");
+  const content = await readFile9(filePath, "utf-8");
   if (!content.startsWith("---")) {
     issues.push({
       level: "error",
@@ -4652,6 +4834,8 @@ export {
   writeConfig,
   removeConfig,
   readLockFile,
+  syncGlobalInstructions,
+  checkGlobalInstructionStaleness,
   resolveMcpConfigPath,
   listMcpServers,
   listAllMcpServers,
@@ -4699,4 +4883,4 @@ export {
   discoverSkillsMulti,
   validateSkill
 };
-//# sourceMappingURL=chunk-52ZWZXEN.js.map
+//# sourceMappingURL=chunk-IBHW6GEI.js.map