@skillsmith/cli 0.6.3 → 0.6.5

package/dist/tests/e2e/audit-sources-affix.test.js

@@ -0,0 +1,121 @@
+/**
+ * @fileoverview SMI-5413 e2e — affix-tolerant registry-name recovery.
+ *
+ * A skill installed under a SHORT local dir name (`affixdemo`) is recovered from
+ * its `claude-skill-affixdemo` registry entry; an EXACT name match is preferred
+ * over affix variants so a clean hit is never downgraded to ambiguous. Real temp
+ * filesystem + real temp SQLite (seeded `skills`); $HOME redirected before the
+ * dynamic import so the action's module-level MANIFEST_PATH freezes onto it.
+ */
+import { describe, it, expect, beforeAll, afterAll, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { skillMd, seedSkillsDb } from './utils/source-recovery-fixture.js';
+let runAuditSources;
+let tempHome = '';
+let originalHome;
+beforeAll(async () => {
+    originalHome = process.env['HOME'];
+    tempHome = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5413-home-'));
+    process.env['HOME'] = tempHome;
+    ({ runAuditSources } = await import('../../src/commands/audit-sources.action.js'));
+});
+afterAll(() => {
+    if (originalHome === undefined)
+        delete process.env['HOME'];
+    else
+        process.env['HOME'] = originalHome;
+    if (tempHome)
+        fs.rmSync(tempHome, { recursive: true, force: true });
+});
+function writeLocalSkill(root, name) {
+    const dir = path.join(root, name);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'SKILL.md'), skillMd(name));
+}
+function makeOpts(skillsRoot, db) {
+    return {
+        skillsRoot,
+        apply: false,
+        yes: false,
+        set: undefined,
+        minConfidence: 'high',
+        json: true,
+        embedding: false,
+        catalogHint: false,
+        writeFrontmatter: false,
+        forceWriteFrontmatter: false,
+        db,
+    };
+}
+async function recover(skillsRoot, db) {
+    const chunks = [];
+    const spy = vi
+        .spyOn(process.stdout, 'write')
+        .mockImplementation((chunk) => {
+        chunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
+        return true;
+    });
+    try {
+        await runAuditSources(makeOpts(skillsRoot, db));
+    }
+    finally {
+        spy.mockRestore();
+    }
+    return JSON.parse(chunks.join('').trim()).skills;
+}
+function tmpRoot(tag) {
+    return fs.mkdtempSync(path.join(os.tmpdir(), `smi5413-${tag}-`));
+}
+function tmpDb(tag) {
+    return path.join(fs.mkdtempSync(path.join(os.tmpdir(), `smi5413-db-${tag}-`)), 'skills.db');
+}
+describe('SMI-5413 e2e — affix-tolerant registry-name recovery', () => {
+    it('recovers a short local name from its claude-skill-<name> registry entry', async () => {
+        const root = tmpRoot('affix');
+        writeLocalSkill(root, 'affixdemo');
+        const db = tmpDb('affix');
+        await seedSkillsDb(db, [
+            {
+                id: 'uuid-affix',
+                name: 'claude-skill-affixdemo',
+                repoUrl: 'https://github.com/wrsmith108/claude-skill-affixdemo',
+                qualityScore: 0.5,
+            },
+        ]);
+        const skills = await recover(root, db);
+        const s = skills.find((x) => x.skillName === 'affixdemo');
+        expect(s?.method).toBe('registry-name');
+        expect(s?.confidence).toBe('medium');
+        expect(s?.recoveredSource?.url).toBe('https://github.com/wrsmith108/claude-skill-affixdemo');
+        fs.rmSync(root, { recursive: true, force: true });
+    });
+    it('prefers an EXACT name match over affix variants (no ambiguous downgrade)', async () => {
+        const root = tmpRoot('exact');
+        writeLocalSkill(root, 'affixdemo');
+        const db = tmpDb('exact');
+        // Both an exact `affixdemo` and an affixed `claude-skill-affixdemo` exist;
+        // the exact one must win as a single medium candidate, not become low/ambiguous.
+        await seedSkillsDb(db, [
+            {
+                id: 'uuid-exact',
+                name: 'affixdemo',
+                repoUrl: 'https://github.com/someone/affixdemo',
+                qualityScore: 0.4,
+            },
+            {
+                id: 'uuid-affix2',
+                name: 'claude-skill-affixdemo',
+                repoUrl: 'https://github.com/wrsmith108/claude-skill-affixdemo',
+                qualityScore: 0.9,
+            },
+        ]);
+        const skills = await recover(root, db);
+        const s = skills.find((x) => x.skillName === 'affixdemo');
+        expect(s?.confidence).toBe('medium');
+        expect(s?.recoveredSource?.url).toBe('https://github.com/someone/affixdemo');
+        fs.rmSync(root, { recursive: true, force: true });
+    });
+});
+//# sourceMappingURL=audit-sources-affix.test.js.map

package/dist/tests/e2e/audit-sources-affix.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-affix.test.js","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-affix.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AAI1E,IAAI,eAA0D,CAAA;AAC9D,IAAI,QAAQ,GAAG,EAAE,CAAA;AACjB,IAAI,YAAgC,CAAA;AAEpC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,CAC7B;IAAA,CAAC,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAA;AACrF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;;QACrD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,CAAA;IACvC,IAAI,QAAQ;QAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACrE,CAAC,CAAC,CAAA;AAEF,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,UAAkB,EAAE,EAAU;IAC9C,OAAO;QACL,UAAU;QACV,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,KAAK;QAC5B,EAAE;KACH,CAAA;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,EAAU;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,EAAE;SACX,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;SAC9B,kBAAkB,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACrF,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACJ,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAA;IACjD,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,WAAW,EAAE,CAAA;IACnB,CAAC;IACD,OAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAuC,CAAC,MAAM,CAAA;AACzF,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,GAAG,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAC7F,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC7B,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QACzB,MAAM,YAAY,CAAC,EAAE,EAAE;YACrB;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,sDAAsD;gBAC/D,YAAY,EAAE,GAAG;aAClB;SACF,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAA;QACzD,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAA;QAC5F,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC7B,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QACzB,2EAA2E;QAC3E,iFAAiF;QACjF,MAAM,YAAY,CAAC,EAAE,EAAE;YACrB;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,sCAAsC;gBAC/C,YAAY,EAAE,GAAG;aAClB;YACD;gBACE,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,sDAAsD;gBAC/D,YAAY,EAAE,GAAG;aAClB;SACF,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAA;QACzD,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QAC5E,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/e2e/audit-sources-apply.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview SMI-5407 end-to-end — `sklx audit sources --apply` write paths.
+ *
+ * Real temp manifest (redirected via $HOME) + real temp SQLite. Covers:
+ *   3. Collision safety — ambiguous low match is NOT auto-written; `--set` then
+ *      writes the user-specified owner/skill-name id + https source.
+ *   6. Idempotency + never-clobber — a second `--apply` is a no-op; a pre-existing
+ *      healthy entry with a differing source is left untouched.
+ *   8. --write-frontmatter churn guard — never writes `repository:` into a `.git`
+ *      dir or when one already exists; DOES write into a non-git dir lacking it.
+ */
+export {};
+//# sourceMappingURL=audit-sources-apply.test.d.ts.map

package/dist/tests/e2e/audit-sources-apply.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-apply.test.d.ts","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-apply.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/tests/e2e/audit-sources-apply.test.js

@@ -0,0 +1,166 @@
+/**
+ * @fileoverview SMI-5407 end-to-end — `sklx audit sources --apply` write paths.
+ *
+ * Real temp manifest (redirected via $HOME) + real temp SQLite. Covers:
+ *   3. Collision safety — ambiguous low match is NOT auto-written; `--set` then
+ *      writes the user-specified owner/skill-name id + https source.
+ *   6. Idempotency + never-clobber — a second `--apply` is a no-op; a pre-existing
+ *      healthy entry with a differing source is left untouched.
+ *   8. --write-frontmatter churn guard — never writes `repository:` into a `.git`
+ *      dir or when one already exists; DOES write into a non-git dir lacking it.
+ */
+import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { writeSourceFixture, seedSkillsDb, skillMd, FIXTURE_DIRS, } from './utils/source-recovery-fixture.js';
+let runAuditSources;
+let tempHome = '';
+let skillsRoot = '';
+let manifestPath = '';
+let originalHome;
+let dbCounter = 0;
+function makeOpts(o) {
+    return {
+        skillsRoot: o.skillsRoot ?? skillsRoot,
+        apply: o.apply ?? false,
+        yes: o.yes ?? false,
+        set: o.set,
+        minConfidence: o.minConfidence ?? 'high',
+        json: o.json ?? false,
+        embedding: false,
+        catalogHint: false,
+        writeFrontmatter: o.writeFrontmatter ?? false,
+        forceWriteFrontmatter: o.forceWriteFrontmatter ?? false,
+        db: o.db,
+    };
+}
+function readManifest() {
+    return JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+}
+function entry(name) {
+    return readManifest().installedSkills[name];
+}
+async function seededDb() {
+    const dbPath = path.join(tempHome, `cands-${dbCounter++}.db`);
+    await seedSkillsDb(dbPath, [
+        { id: 'coll-1', name: FIXTURE_DIRS.collision, repoUrl: 'https://github.com/coll1/repoA' },
+        { id: 'coll-2', name: FIXTURE_DIRS.collision, repoUrl: 'https://github.com/coll2/repoB' },
+    ]);
+    return dbPath;
+}
+async function emptyDb() {
+    const dbPath = path.join(tempHome, `empty-${dbCounter++}.db`);
+    await seedSkillsDb(dbPath, []);
+    return dbPath;
+}
+beforeAll(async () => {
+    originalHome = process.env['HOME'];
+    tempHome = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5407-apply-home-'));
+    process.env['HOME'] = tempHome;
+    skillsRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5407-apply-skills-'));
+    manifestPath = path.join(tempHome, '.skillsmith', 'manifest.json');
+    writeSourceFixture(skillsRoot);
+    ({ runAuditSources } = await import('../../src/commands/audit-sources.action.js'));
+});
+afterAll(() => {
+    if (originalHome === undefined)
+        delete process.env['HOME'];
+    else
+        process.env['HOME'] = originalHome;
+    for (const dir of [tempHome, skillsRoot]) {
+        if (dir)
+            fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+beforeEach(() => {
+    fs.rmSync(manifestPath, { force: true });
+});
+describe('SMI-5407 e2e — collision safety (scenario 3)', () => {
+    it('does not auto-write an ambiguous (low) collision, then writes it via --set', async () => {
+        const db = await seededDb();
+        // Default min high: the low collision match must NOT land in the manifest.
+        await runAuditSources(makeOpts({ db, apply: true, yes: true }));
+        expect(entry(FIXTURE_DIRS.collision)).toBeUndefined();
+        // git + plugin (exact/high) DID land.
+        expect(entry(FIXTURE_DIRS.git)).toBeDefined();
+        expect(entry(FIXTURE_DIRS.plugin)).toBeDefined();
+        // --set resolves it explicitly at user-specified confidence.
+        await runAuditSources(makeOpts({
+            db,
+            apply: true,
+            yes: true,
+            set: [`${FIXTURE_DIRS.collision}=picked-owner/picked-repo`],
+        }));
+        const resolved = entry(FIXTURE_DIRS.collision);
+        expect(resolved).toBeDefined();
+        expect(resolved.id).toBe(`picked-owner/${FIXTURE_DIRS.collision}`);
+        expect(resolved.source).toBe('https://github.com/picked-owner/picked-repo');
+    });
+});
+describe('SMI-5407 e2e — idempotency + never-clobber (scenario 6)', () => {
+    it('a second --apply writes nothing and leaves the manifest byte-identical', async () => {
+        const db = await emptyDb();
+        await runAuditSources(makeOpts({ db, apply: true, yes: true }));
+        const afterFirst = fs.readFileSync(manifestPath, 'utf-8');
+        await runAuditSources(makeOpts({ db, apply: true, yes: true }));
+        const afterSecond = fs.readFileSync(manifestPath, 'utf-8');
+        expect(afterSecond).toBe(afterFirst);
+    });
+    it('never clobbers a healthy pre-existing entry whose source differs', async () => {
+        const preExisting = {
+            version: '1.0.0',
+            installedSkills: {
+                [FIXTURE_DIRS.git]: {
+                    id: 'preexisting-id',
+                    name: FIXTURE_DIRS.git,
+                    version: '9.9.9',
+                    source: 'https://github.com/someoneelse/different',
+                    installPath: path.join(skillsRoot, FIXTURE_DIRS.git),
+                    installedAt: '2020-01-01T00:00:00.000Z',
+                    lastUpdated: '2020-01-01T00:00:00.000Z',
+                },
+            },
+        };
+        fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
+        fs.writeFileSync(manifestPath, JSON.stringify(preExisting, null, 2));
+        await runAuditSources(makeOpts({ db: await emptyDb(), apply: true, yes: true }));
+        const git = entry(FIXTURE_DIRS.git);
+        expect(git.id).toBe('preexisting-id');
+        expect(git.source).toBe('https://github.com/someoneelse/different');
+        expect(git.version).toBe('9.9.9');
+    });
+});
+describe('SMI-5407 e2e — --write-frontmatter churn guard (scenario 8)', () => {
+    it('writes repository: only into non-git dirs lacking one', async () => {
+        // Isolated, mutable fixture (write-frontmatter rewrites SKILL.md).
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5407-fm-'));
+        writeSourceFixture(root); // provides git-skill (.git) + plugin-skill (plugin.json)
+        const nosrc = path.join(root, 'nosrc-skill');
+        fs.mkdirSync(nosrc, { recursive: true });
+        fs.writeFileSync(path.join(nosrc, 'SKILL.md'), skillMd('nosrc-skill'));
+        const hasrepo = path.join(root, 'hasrepo-skill');
+        fs.mkdirSync(hasrepo, { recursive: true });
+        fs.writeFileSync(path.join(hasrepo, 'SKILL.md'), skillMd('hasrepo-skill', 'repository: https://github.com/existing/existing'));
+        const gitBefore = fs.readFileSync(path.join(root, FIXTURE_DIRS.git, 'SKILL.md'), 'utf-8');
+        const hasrepoBefore = fs.readFileSync(path.join(hasrepo, 'SKILL.md'), 'utf-8');
+        await runAuditSources(makeOpts({
+            db: await emptyDb(),
+            skillsRoot: root,
+            apply: true,
+            yes: true,
+            writeFrontmatter: true,
+            forceWriteFrontmatter: true,
+            set: ['nosrc-skill=me/no', 'hasrepo-skill=me/has'],
+        }));
+        // .git dir: never rewritten.
+        expect(fs.readFileSync(path.join(root, FIXTURE_DIRS.git, 'SKILL.md'), 'utf-8')).toBe(gitBefore);
+        // Non-git, no existing repository: gets the recovered source written in.
+        expect(fs.readFileSync(path.join(root, FIXTURE_DIRS.plugin, 'SKILL.md'), 'utf-8')).toContain('repository: https://github.com/o/r');
+        expect(fs.readFileSync(path.join(nosrc, 'SKILL.md'), 'utf-8')).toContain('repository: https://github.com/me/no');
+        // Already-present repository: never duplicated / overwritten.
+        expect(fs.readFileSync(path.join(hasrepo, 'SKILL.md'), 'utf-8')).toBe(hasrepoBefore);
+        fs.rmSync(root, { recursive: true, force: true });
+    });
+});
+//# sourceMappingURL=audit-sources-apply.test.js.map

package/dist/tests/e2e/audit-sources-apply.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-apply.test.js","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-apply.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC9E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,OAAO,EACP,YAAY,GACb,MAAM,oCAAoC,CAAA;AAI3C,IAAI,eAA0D,CAAA;AAC9D,IAAI,QAAQ,GAAG,EAAE,CAAA;AACjB,IAAI,UAAU,GAAG,EAAE,CAAA;AACnB,IAAI,YAAY,GAAG,EAAE,CAAA;AACrB,IAAI,YAAgC,CAAA;AACpC,IAAI,SAAS,GAAG,CAAC,CAAA;AAEjB,SAAS,QAAQ,CAAC,CAAgD;IAChE,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,UAAU;QACtC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK;QACvB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,KAAK;QACnB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK;QACrB,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,KAAK;QAC7C,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,KAAK;QACvD,EAAE,EAAE,CAAC,CAAC,EAAE;KACT,CAAA;AACH,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAkB,CAAA;AAC5E,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,YAAY,CAAC,MAAM,EAAE;QACzB,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,gCAAgC,EAAE;QACzF,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,gCAAgC,EAAE;KAC1F,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAA;IACxE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAA;IAC9B,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC5E,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;IAClE,kBAAkB,CAAC,UAAU,CAAC,CAC7B;IAAA,CAAC,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAA;AACrF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;;QACrD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,CAAA;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAA;QAE3B,2EAA2E;QAC3E,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QACrD,sCAAsC;QACtC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAEhD,6DAA6D;QAC7D,MAAM,eAAe,CACnB,QAAQ,CAAC;YACP,EAAE;YACF,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,CAAC,GAAG,YAAY,CAAC,SAAS,2BAA2B,CAAC;SAC5D,CAAC,CACH,CAAA;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9B,MAAM,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,SAAS,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,QAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACvE,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAA;QAC1B,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/D,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAEzD,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/D,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAE1D,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,WAAW,GAAkB;YACjC,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;oBAClB,EAAE,EAAE,gBAAgB;oBACpB,IAAI,EAAE,YAAY,CAAC,GAAG;oBACtB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,0CAA0C;oBAClD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC;oBACpD,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAEpE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAEhF,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAE,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACrC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,mEAAmE;QACnE,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAA;QAClE,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAC,yDAAyD;QAElF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QAC5C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAA;QAEtE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAChD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAC9B,OAAO,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAC7E,CAAA;QAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QACzF,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QAE9E,MAAM,eAAe,CACnB,QAAQ,CAAC;YACP,EAAE,EAAE,MAAM,OAAO,EAAE;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,IAAI;YACT,gBAAgB,EAAE,IAAI;YACtB,qBAAqB,EAAE,IAAI;YAC3B,GAAG,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;SACnD,CAAC,CACH,CAAA;QAED,6BAA6B;QAC7B,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/F,yEAAyE;QACzE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAC1F,oCAAoC,CACrC,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CACtE,sCAAsC,CACvC,CAAA;QACD,8DAA8D;QAC9D,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAEpF,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/e2e/audit-sources-recovery.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview SMI-5407 end-to-end — `sklx audit sources` recovery (read paths).
+ *
+ * Real temp filesystem fixture + real temp SQLite (seeded `skills`) + real temp
+ * manifest (redirected via $HOME). No value-baked mocks: the only injected edge
+ * is network absence (an empty / unseeded candidate DB). Covers:
+ *   1. CLI full-path `--json` — per-dir method/confidence/status; no manifest write.
+ *   4. ssh-vs-https — both git fixtures normalize to one owner/repo + parse via buildRawUrl.
+ *   7. Offline degradation — empty DB: git+plugin resolve, registry/collision unknown, no throw.
+ *
+ * $HOME is set BEFORE the dynamic import of the action module so its
+ * module-level MANIFEST_PATH (utils/manifest.ts) freezes onto the temp home.
+ */
+export {};
+//# sourceMappingURL=audit-sources-recovery.test.d.ts.map

package/dist/tests/e2e/audit-sources-recovery.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-recovery.test.d.ts","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-recovery.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/tests/e2e/audit-sources-recovery.test.js

@@ -0,0 +1,179 @@
+/**
+ * @fileoverview SMI-5407 end-to-end — `sklx audit sources` recovery (read paths).
+ *
+ * Real temp filesystem fixture + real temp SQLite (seeded `skills`) + real temp
+ * manifest (redirected via $HOME). No value-baked mocks: the only injected edge
+ * is network absence (an empty / unseeded candidate DB). Covers:
+ *   1. CLI full-path `--json` — per-dir method/confidence/status; no manifest write.
+ *   4. ssh-vs-https — both git fixtures normalize to one owner/repo + parse via buildRawUrl.
+ *   7. Offline degradation — empty DB: git+plugin resolve, registry/collision unknown, no throw.
+ *
+ * $HOME is set BEFORE the dynamic import of the action module so its
+ * module-level MANIFEST_PATH (utils/manifest.ts) freezes onto the temp home.
+ */
+import { describe, it, expect, beforeAll, afterAll, beforeEach, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { writeSourceFixture, seedSkillsDb, buildRawUrl, FIXTURE_DIRS, GIT_OWNER, GIT_REPO, } from './utils/source-recovery-fixture.js';
+let runAuditSources;
+let tempHome = '';
+let skillsRoot = '';
+let manifestPath = '';
+let originalHome;
+let dbCounter = 0;
+function makeOpts(o) {
+    return {
+        skillsRoot,
+        apply: o.apply ?? false,
+        yes: o.yes ?? false,
+        set: o.set,
+        minConfidence: o.minConfidence ?? 'high',
+        json: o.json ?? false,
+        embedding: false,
+        catalogHint: false,
+        writeFrontmatter: o.writeFrontmatter ?? false,
+        forceWriteFrontmatter: o.forceWriteFrontmatter ?? false,
+        db: o.db,
+    };
+}
+/** Run `audit sources --json` and return the parsed `{ skills, summary }`. */
+async function runJson(dbPath) {
+    const chunks = [];
+    const spy = vi
+        .spyOn(process.stdout, 'write')
+        .mockImplementation((chunk) => {
+        chunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
+        return true;
+    });
+    try {
+        await runAuditSources(makeOpts({ db: dbPath, json: true }));
+    }
+    finally {
+        spy.mockRestore();
+    }
+    return JSON.parse(chunks.join('').trim());
+}
+function bySkill(skills, name) {
+    const found = skills.find((s) => s.skillName === name);
+    if (!found)
+        throw new Error(`fixture skill not found in report: ${name}`);
+    return found;
+}
+/** A fresh seeded candidate DB: registry-skill (1 row) + collision-skill (2 rows). */
+async function seededDb() {
+    const dbPath = path.join(tempHome, `cands-${dbCounter++}.db`);
+    await seedSkillsDb(dbPath, [
+        {
+            id: 'reg-uuid-0001',
+            name: FIXTURE_DIRS.registry,
+            repoUrl: 'https://github.com/regowner/regrepo',
+        },
+        {
+            id: 'coll-uuid-0001',
+            name: FIXTURE_DIRS.collision,
+            repoUrl: 'https://github.com/coll1/repoA',
+        },
+        {
+            id: 'coll-uuid-0002',
+            name: FIXTURE_DIRS.collision,
+            repoUrl: 'https://github.com/coll2/repoB',
+        },
+    ]);
+    return dbPath;
+}
+/** A fresh EMPTY candidate DB (no skills rows) — models the offline path. */
+async function emptyDb() {
+    const dbPath = path.join(tempHome, `empty-${dbCounter++}.db`);
+    await seedSkillsDb(dbPath, []);
+    return dbPath;
+}
+beforeAll(async () => {
+    originalHome = process.env['HOME'];
+    tempHome = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5407-recov-home-'));
+    process.env['HOME'] = tempHome;
+    skillsRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'smi5407-recov-skills-'));
+    manifestPath = path.join(tempHome, '.skillsmith', 'manifest.json');
+    writeSourceFixture(skillsRoot);
+    ({ runAuditSources } = await import('../../src/commands/audit-sources.action.js'));
+});
+afterAll(() => {
+    if (originalHome === undefined)
+        delete process.env['HOME'];
+    else
+        process.env['HOME'] = originalHome;
+    for (const dir of [tempHome, skillsRoot]) {
+        if (dir)
+            fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+beforeEach(() => {
+    fs.rmSync(manifestPath, { force: true });
+});
+describe('SMI-5407 e2e — audit sources --json (scenario 1)', () => {
+    it('reports the correct method/confidence/status per directory', async () => {
+        const { skills, summary } = await runJson(await seededDb());
+        const git = bySkill(skills, FIXTURE_DIRS.git);
+        expect(git.method).toBe('git-remote');
+        expect(git.confidence).toBe('exact');
+        expect(git.status).toBe('recovered');
+        const plugin = bySkill(skills, FIXTURE_DIRS.plugin);
+        expect(plugin.method).toBe('plugin-json');
+        expect(plugin.confidence).toBe('high');
+        expect(plugin.status).toBe('recovered');
+        const registry = bySkill(skills, FIXTURE_DIRS.registry);
+        expect(registry.method).toBe('registry-name');
+        expect(registry.confidence).toBe('medium');
+        expect(registry.registryId).toBe('reg-uuid-0001');
+        expect(registry.status).toBe('recovered');
+        const collision = bySkill(skills, FIXTURE_DIRS.collision);
+        expect(collision.candidates).toHaveLength(2);
+        expect(collision.confidence).toBe('low');
+        expect(collision.status).toBe('unknown');
+        const backup = bySkill(skills, FIXTURE_DIRS.backup);
+        expect(backup.status).toBe('skipped_backup');
+        const unknown = bySkill(skills, FIXTURE_DIRS.unknown);
+        expect(unknown.status).toBe('unknown');
+        expect(unknown.confidence).toBe('unknown');
+        // Summary echoes the per-dir tally (3 recovered: git + https + plugin).
+        expect(summary['skipped_backup']).toBe(1);
+        expect(summary['total']).toBe(skills.length);
+    });
+    it('does not write the manifest on a dry-run (--json)', async () => {
+        await runJson(await seededDb());
+        expect(fs.existsSync(manifestPath)).toBe(false);
+    });
+});
+describe('SMI-5407 e2e — ssh vs https git remotes (scenario 4)', () => {
+    it('normalizes both git fixtures to one owner/repo and a buildRawUrl-parseable source', async () => {
+        const { skills } = await runJson(await seededDb());
+        const git = bySkill(skills, FIXTURE_DIRS.git);
+        const https = bySkill(skills, FIXTURE_DIRS.https);
+        for (const result of [git, https]) {
+            expect(result.recoveredSource).not.toBeNull();
+            expect(result.recoveredSource?.owner).toBe(GIT_OWNER);
+            expect(result.recoveredSource?.repo).toBe(GIT_REPO);
+            expect(result.recoveredSource?.url).toBe(`https://github.com/${GIT_OWNER}/${GIT_REPO}`);
+            expect(buildRawUrl(result.recoveredSource.url)).toBe(`https://raw.githubusercontent.com/${GIT_OWNER}/${GIT_REPO}/main/SKILL.md`);
+        }
+        expect(git.recoveredSource).toEqual(https.recoveredSource);
+    });
+});
+describe('SMI-5407 e2e — offline degradation (scenario 7)', () => {
+    it('resolves git+plugin and degrades registry/collision to unknown without throwing', async () => {
+        let report;
+        await expect((async () => {
+            report = await runJson(await emptyDb());
+        })()).resolves.toBeUndefined();
+        const skills = report.skills;
+        expect(bySkill(skills, FIXTURE_DIRS.git).status).toBe('recovered');
+        expect(bySkill(skills, FIXTURE_DIRS.https).status).toBe('recovered');
+        expect(bySkill(skills, FIXTURE_DIRS.plugin).status).toBe('recovered');
+        // With no candidate rows, the name tiers degrade — no throw, no network.
+        expect(bySkill(skills, FIXTURE_DIRS.registry).status).toBe('unknown');
+        expect(bySkill(skills, FIXTURE_DIRS.registry).confidence).toBe('unknown');
+        expect(bySkill(skills, FIXTURE_DIRS.collision).status).toBe('unknown');
+        expect(bySkill(skills, FIXTURE_DIRS.collision).candidates).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=audit-sources-recovery.test.js.map

package/dist/tests/e2e/audit-sources-recovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-recovery.test.js","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-recovery.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,SAAS,EACT,QAAQ,GACT,MAAM,oCAAoC,CAAA;AAI3C,IAAI,eAA0D,CAAA;AAC9D,IAAI,QAAQ,GAAG,EAAE,CAAA;AACjB,IAAI,UAAU,GAAG,EAAE,CAAA;AACnB,IAAI,YAAY,GAAG,EAAE,CAAA;AACrB,IAAI,YAAgC,CAAA;AACpC,IAAI,SAAS,GAAG,CAAC,CAAA;AAEjB,SAAS,QAAQ,CAAC,CAAgD;IAChE,OAAO;QACL,UAAU;QACV,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK;QACvB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,KAAK;QACnB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK;QACrB,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,KAAK;QAC7C,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,KAAK;QACvD,EAAE,EAAE,CAAC,CAAC,EAAE;KACT,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,OAAO,CAAC,MAAc;IAInC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,EAAE;SACX,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;SAC9B,kBAAkB,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACrF,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACJ,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC7D,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,WAAW,EAAE,CAAA;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,MAA6B,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,QAAQ;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,YAAY,CAAC,MAAM,EAAE;QACzB;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,YAAY,CAAC,QAAQ;YAC3B,OAAO,EAAE,qCAAqC;SAC/C;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,YAAY,CAAC,SAAS;YAC5B,OAAO,EAAE,gCAAgC;SAC1C;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,YAAY,CAAC,SAAS;YAC5B,OAAO,EAAE,gCAAgC;SAC1C;KACF,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,OAAO;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAA;IACxE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAA;IAC9B,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC5E,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;IAClE,kBAAkB,CAAC,UAAU,CAAC,CAC7B;IAAA,CAAC,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAA;AACrF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;;QACrD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,CAAA;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAA;QAE3D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAA;QAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACrC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEvC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC7C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACjD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAExC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE1C,wEAAwE;QACxE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAA;QAC/B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAA;QAElD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAEjD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC7C,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACrD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACnD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAA;YACvF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,eAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACnD,qCAAqC,SAAS,IAAI,QAAQ,gBAAgB,CAC3E,CAAA;QACH,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,IAAI,MAAqD,CAAA;QACzD,MAAM,MAAM,CACV,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,OAAO,EAAE,CAAC,CAAA;QACzC,CAAC,CAAC,EAAE,CACL,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;QAE1B,MAAM,MAAM,GAAG,MAAO,CAAC,MAAM,CAAA;QAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAErE,yEAAyE;QACzE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACzE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/e2e/audit-sources-roundtrip.test.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @fileoverview SMI-5407 end-to-end — GATE (write half): recover -> backfill.
+ *
+ * Drives the REAL CLI apply path (`audit sources --apply --yes --min-confidence
+ * medium`) into a REAL temp manifest and asserts the load-bearing backfill keys:
+ *   - a single registry-name match (medium) writes the registry UUID as `id`
+ *     (the only id form `skill_outdated` can resolve a registry skill by);
+ *   - a git remote (exact) writes an owner/skill-name `id` (no UUID — the git
+ *     tier has none);
+ *   - both write an https `source` that `buildRawUrl` accepts (View-Changes).
+ *
+ * The READ half — that real `skill_outdated` resolves the UUID id (and NOT the
+ * owner/skill-name, owner/repo, or URL decoy forms), while the git owner/skill-
+ * name id resolves to `unknown` yet keeps a working View-Changes source — lives
+ * in `packages/mcp-server/src/__tests__/skill-outdated-resolution.test.ts`.
+ * It cannot live here: importing the mcp-server `executeOutdated`/`ToolContext`
+ * source across the package boundary is structurally invalid under the CLI
+ * tsconfig rootDir (TS6059/TS6307), and those symbols are not part of the
+ * mcp-server package's public exports. The shared REG_UUID + manifest shape are
+ * the contract linking the two halves.
+ */
+export {};
+//# sourceMappingURL=audit-sources-roundtrip.test.d.ts.map

package/dist/tests/e2e/audit-sources-roundtrip.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sources-roundtrip.test.d.ts","sourceRoot":"","sources":["../../../tests/e2e/audit-sources-roundtrip.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG"}