@fenglimg/fabric-server 2.0.0-rc.27 → 2.0.0-rc.28

package/dist/{chunk-NZSGNQKE.js → chunk-EEVSGTHG.js}

@@ -1753,6 +1753,7 @@ async function runDoctorReport(target) {
     inspectL2ManagedBlockDrift(projectRoot)
   ]);
   const mcpConfigInWrongFile = inspectMcpConfigInWrongFile(projectRoot);
+  const skillRefMirror = inspectSkillRefMirror(projectRoot);
   const metaManuallyDiverged = await inspectMetaManuallyDiverged(projectRoot);
   const knowledgeDirUnindexed = inspectKnowledgeDirUnindexed(projectRoot, meta);
   const knowledgeDirMissing = inspectKnowledgeDirMissing(projectRoot);
@@ -1815,6 +1816,11 @@ async function runDoctorReport(target) {
     // events.jsonl rows that fail Zod validation because of unknown
     // schema_version or event_type tokens. Previously silently dropped.
     createEventLedgerSchemaCompatCheck(t, eventLedger),
+    // v2.0.0-rc.28 TASK-04 (audit §3.1 follow-up): SKILL ref/ mirror parity.
+    // Detects hand-edits or partial install that breaks the byte-identical
+    // contract between .claude/skills/<slug>/ref/ and .codex/skills/<slug>/
+    // ref/. warning severity — fab install restores parity.
+    createSkillRefMirrorCheck(t, skillRefMirror),
     createMcpConfigInWrongFileCheck(t, mcpConfigInWrongFile),
     createMetaManuallyDivergedCheck(t, metaManuallyDiverged),
     createKnowledgeDirUnindexedCheck(t, knowledgeDirUnindexed),
@@ -2616,6 +2622,53 @@ async function inspectEventLedger(projectRoot) {
     };
   }
 }
+function inspectSkillRefMirror(projectRoot) {
+  const skillSlugs = ["fabric-archive", "fabric-review", "fabric-import"];
+  const driftedPaths = [];
+  for (const slug of skillSlugs) {
+    const claudeRef = join6(projectRoot, ".claude", "skills", slug, "ref");
+    const codexRef = join6(projectRoot, ".codex", "skills", slug, "ref");
+    let claudeFiles = null;
+    let codexFiles = null;
+    try {
+      claudeFiles = readdirSync(claudeRef).filter((n) => n.endsWith(".md"));
+    } catch {
+    }
+    try {
+      codexFiles = readdirSync(codexRef).filter((n) => n.endsWith(".md"));
+    } catch {
+    }
+    if (claudeFiles === null || codexFiles === null) continue;
+    const claudeSet = new Set(claudeFiles);
+    const codexSet = new Set(codexFiles);
+    const union = /* @__PURE__ */ new Set([...claudeFiles, ...codexFiles]);
+    for (const fname of union) {
+      const inClaude = claudeSet.has(fname);
+      const inCodex = codexSet.has(fname);
+      if (!inClaude || !inCodex) {
+        driftedPaths.push(`skills/${slug}/ref/${fname}`);
+        continue;
+      }
+      let claudeBody;
+      let codexBody;
+      try {
+        claudeBody = readFileSync2(join6(claudeRef, fname), "utf8");
+      } catch {
+        continue;
+      }
+      try {
+        codexBody = readFileSync2(join6(codexRef, fname), "utf8");
+      } catch {
+        continue;
+      }
+      if (claudeBody !== codexBody) {
+        driftedPaths.push(`skills/${slug}/ref/${fname}`);
+      }
+    }
+  }
+  if (driftedPaths.length === 0) return { status: "ok" };
+  return { status: "drift", driftedPaths };
+}
 async function inspectKnowledgeTestIndex(projectRoot) {
   const path2 = join6(projectRoot, ".fabric", ".cache", "knowledge-test.index.json");
   const built = await tryBuildRuleMeta(projectRoot);
@@ -3192,6 +3245,25 @@ function createEventLedgerSchemaCompatCheck(t, ledger) {
     t("doctor.check.event_ledger_schema_compat.remediation")
   );
 }
+function createSkillRefMirrorCheck(t, inspection) {
+  if (inspection.status === "ok") {
+    return okCheck(
+      t("doctor.check.skill_ref_mirror.name"),
+      t("doctor.check.skill_ref_mirror.ok")
+    );
+  }
+  return issueCheck(
+    t("doctor.check.skill_ref_mirror.name"),
+    "warn",
+    "warning",
+    "skill_ref_mirror_drift",
+    t("doctor.check.skill_ref_mirror.message", {
+      count: String(inspection.driftedPaths.length),
+      list: inspection.driftedPaths.join(", ")
+    }),
+    t("doctor.check.skill_ref_mirror.remediation")
+  );
+}
 function createEventLedgerPartialWriteCheck(t, ledger) {
   if (!ledger.exists || !ledger.writable) {
     return okCheck(

package/dist/{http-3WADEK3O.js → http-3IIPL3HQ.js}

@@ -14,7 +14,7 @@ import {
   readEventLedger,
   runDoctorReport,
   sha256
-} from "./chunk-NZSGNQKE.js";
+} from "./chunk-EEVSGTHG.js";
 
 // src/http.ts
 import { randomUUID as randomUUID2 } from "crypto";

package/dist/index.js

@@ -37,7 +37,7 @@ import {
   sha256,
   stableStringify,
   writeKnowledgeMeta
-} from "./chunk-NZSGNQKE.js";
+} from "./chunk-EEVSGTHG.js";
 
 // src/index.ts
 import { existsSync as existsSync4 } from "fs";
@@ -2036,7 +2036,7 @@ function formatPreexistingRootMessage(projectRoot) {
 function createFabricServer(tracker) {
   const server = new McpServer({
     name: "fabric-knowledge-server",
-    version: "2.0.0-rc.27"
+    version: "2.0.0-rc.28"
   });
   registerPlanContext(server, tracker);
   registerKnowledgeSections(server, tracker);
@@ -2144,7 +2144,7 @@ function createShutdownHandler(deps) {
   };
 }
 async function startHttpServer(options) {
-  const { createFabricHttpApp } = await import("./http-3WADEK3O.js");
+  const { createFabricHttpApp } = await import("./http-3IIPL3HQ.js");
   const { port, projectRoot, host = "127.0.0.1", authToken } = options;
   const app = createFabricHttpApp({ projectRoot, host, authToken });
   return await new Promise((resolveServer, rejectServer) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fenglimg/fabric-server",
-  "version": "2.0.0-rc.27",
+  "version": "2.0.0-rc.28",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,7 +13,7 @@
     "express": "^5.2.1",
     "minimatch": "^10.0.1",
     "zod": "^3.25.0",
-    "@fenglimg/fabric-shared": "2.0.0-rc.27"
+    "@fenglimg/fabric-shared": "2.0.0-rc.28"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",