@skillsmith/cli 0.7.1 → 0.7.3

package/dist/src/commands/audit-sources.test.js

@@ -1,228 +0,0 @@
-/**
- * @fileoverview Unit tests for `sklx audit sources` CLI command.
- * @see SMI-5407: Skill Source Provenance Recovery
- *
- * Tests the action layer (`runAuditSources`) with injected mocks so the test
- * suite runs fully offline without a real DB or skills directory.
- */
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
-import * as os from 'node:os';
-import * as path from 'node:path';
-// ============================================================================
-// Module mocks — must be declared before the imports that use them
-// ============================================================================
-const mockOpenCliDatabase = vi.fn();
-vi.mock('../utils/open-database.js', () => ({
-    openCliDatabase: (...args) => mockOpenCliDatabase(...args),
-}));
-const mockLoadManifest = vi.fn();
-vi.mock('../utils/manifest.js', () => ({
-    loadManifest: () => mockLoadManifest(),
-}));
-const mockRecoverSources = vi.fn();
-const mockBackfillManifest = vi.fn();
-vi.mock('@skillsmith/core', async (importOriginal) => {
-    const actual = await importOriginal();
-    return {
-        ...actual,
-        // Must be a regular function (not arrow) so `new SourceRecoveryService()` works.
-        SourceRecoveryService: function MockSourceRecoveryService() {
-            return { recoverSources: (...args) => mockRecoverSources(...args) };
-        },
-        backfillManifest: (...args) => mockBackfillManifest(...args),
-        defaultSkillsRoot: () => path.join(os.homedir(), '.claude', 'skills'),
-    };
-});
-// ============================================================================
-// Import after mocks
-// ============================================================================
-import { runAuditSources } from './audit-sources.action.js';
-function makeReport(overrides = {}) {
-    return {
-        skills: [
-            {
-                skillName: 'linear',
-                installPath: '/home/user/.claude/skills/linear',
-                recoveredSource: {
-                    owner: 'williamsmith',
-                    repo: 'linear',
-                    url: 'https://github.com/williamsmith/linear',
-                },
-                registryId: 'uuid-linear',
-                method: 'git-remote',
-                confidence: 'exact',
-                candidates: [],
-                status: 'recovered',
-            },
-        ],
-        summary: { total: 1, recovered: 1, already_tracked: 0, unknown: 0, skipped_backup: 0 },
-        ...overrides,
-    };
-}
-function makeDb() {
-    return {
-        prepare: vi.fn().mockReturnValue({ all: vi.fn().mockReturnValue([]) }),
-        close: vi.fn(),
-    };
-}
-function baseOptions(overrides = {}) {
-    return {
-        skillsRoot: '/tmp/test-skills',
-        apply: false,
-        yes: false,
-        set: undefined,
-        minConfidence: 'high',
-        json: false,
-        embedding: false,
-        catalogHint: false,
-        writeFrontmatter: false,
-        forceWriteFrontmatter: false,
-        db: ':memory:',
-        ...overrides,
-    };
-}
-// ============================================================================
-// Tests
-// ============================================================================
-describe('runAuditSources', () => {
-    beforeEach(() => {
-        vi.clearAllMocks();
-        mockOpenCliDatabase.mockResolvedValue(makeDb());
-        mockLoadManifest.mockResolvedValue({ version: '1.0.0', installedSkills: {} });
-        mockRecoverSources.mockResolvedValue(makeReport());
-        mockBackfillManifest.mockResolvedValue({ planned: [], written: [], skipped: [] });
-    });
-    afterEach(() => {
-        vi.clearAllMocks();
-    });
-    // --------------------------------------------------------------------------
-    // --json shape + exit 0
-    // --------------------------------------------------------------------------
-    it('--json emits valid JSON with skills and summary', async () => {
-        const report = makeReport();
-        mockRecoverSources.mockResolvedValue(report);
-        const written = [];
-        vi.spyOn(process.stdout, 'write').mockImplementation((chunk) => {
-            if (typeof chunk === 'string')
-                written.push(chunk);
-            return true;
-        });
-        await runAuditSources(baseOptions({ json: true }));
-        const output = written.join('');
-        const parsed = JSON.parse(output);
-        expect(Array.isArray(parsed.skills)).toBe(true);
-        expect(parsed.summary.total).toBe(1);
-    });
-    // --------------------------------------------------------------------------
-    // Dry-run: default run does NOT write the manifest
-    // --------------------------------------------------------------------------
-    it('dry-run by default: does not call backfillManifest', async () => {
-        const logSpy = vi.spyOn(console, 'log').mockImplementation(() => { });
-        await runAuditSources(baseOptions());
-        expect(mockBackfillManifest).not.toHaveBeenCalled();
-        logSpy.mockRestore();
-    });
-    // --------------------------------------------------------------------------
-    // already_tracked overlay
-    // --------------------------------------------------------------------------
-    it('overlays already_tracked when manifest already has a source', async () => {
-        mockLoadManifest.mockResolvedValue({
-            version: '1.0.0',
-            installedSkills: {
-                linear: {
-                    id: 'uuid-linear',
-                    name: 'linear',
-                    version: '1.0.0',
-                    source: 'https://github.com/williamsmith/linear',
-                    installPath: '/home/user/.claude/skills/linear',
-                    installedAt: '2024-01-01T00:00:00.000Z',
-                    lastUpdated: '2024-01-01T00:00:00.000Z',
-                },
-            },
-        });
-        const jsonChunks = [];
-        vi.spyOn(process.stdout, 'write').mockImplementation((chunk) => {
-            if (typeof chunk === 'string')
-                jsonChunks.push(chunk);
-            return true;
-        });
-        await runAuditSources(baseOptions({ json: true }));
-        const parsed = JSON.parse(jsonChunks.join(''));
-        const alreadyTracked = parsed.skills.find((s) => s.status === 'already_tracked');
-        expect(alreadyTracked).toBeDefined();
-        expect(parsed.summary.already_tracked).toBe(1);
-    });
-    // --------------------------------------------------------------------------
-    // --apply --yes writes the manifest
-    // --------------------------------------------------------------------------
-    it('--apply --yes calls backfillManifest with apply: true', async () => {
-        mockBackfillManifest.mockResolvedValue({ planned: [], written: ['linear'], skipped: [] });
-        const logSpy = vi.spyOn(console, 'log').mockImplementation(() => { });
-        await runAuditSources(baseOptions({ apply: true, yes: true }));
-        expect(mockBackfillManifest).toHaveBeenCalledWith(expect.objectContaining({ summary: expect.any(Object) }), expect.objectContaining({ apply: true }));
-        logSpy.mockRestore();
-    });
-    // --------------------------------------------------------------------------
-    // Multi-candidate row appears in JSON output
-    // --------------------------------------------------------------------------
-    it('--json includes candidates array when ambiguous (multi-match)', async () => {
-        const ambiguousReport = makeReport({
-            skills: [
-                {
-                    skillName: 'git-helper',
-                    installPath: '/home/user/.claude/skills/git-helper',
-                    recoveredSource: null,
-                    registryId: null,
-                    method: 'registry-name',
-                    confidence: 'low',
-                    candidates: [
-                        {
-                            id: 'id-1',
-                            name: 'git-helper',
-                            owner: 'alice',
-                            repo: 'git-helper',
-                            url: 'https://github.com/alice/git-helper',
-                            qualityScore: 80,
-                        },
-                        {
-                            id: 'id-2',
-                            name: 'git-helper',
-                            owner: 'bob',
-                            repo: 'git-helper',
-                            url: 'https://github.com/bob/git-helper',
-                            qualityScore: 60,
-                        },
-                    ],
-                    status: 'unknown',
-                },
-            ],
-            summary: { total: 1, recovered: 0, already_tracked: 0, unknown: 1, skipped_backup: 0 },
-        });
-        mockRecoverSources.mockResolvedValue(ambiguousReport);
-        const written = [];
-        vi.spyOn(process.stdout, 'write').mockImplementation((chunk) => {
-            if (typeof chunk === 'string')
-                written.push(chunk);
-            return true;
-        });
-        await runAuditSources(baseOptions({ json: true }));
-        const parsed = JSON.parse(written.join(''));
-        expect(parsed.skills[0]?.candidates).toHaveLength(2);
-    });
-    // --------------------------------------------------------------------------
-    // --write-frontmatter without --force-write-frontmatter exits non-zero
-    // --------------------------------------------------------------------------
-    it('--write-frontmatter without --force-write-frontmatter exits with code 1', async () => {
-        const exitSpy = vi
-            .spyOn(process, 'exit')
-            .mockImplementation((_code) => {
-            throw new Error('process.exit');
-        });
-        const errSpy = vi.spyOn(console, 'error').mockImplementation(() => { });
-        await expect(runAuditSources(baseOptions({ writeFrontmatter: true, forceWriteFrontmatter: false }))).rejects.toThrow('process.exit');
-        expect(exitSpy).toHaveBeenCalledWith(1);
-        exitSpy.mockRestore();
-        errSpy.mockRestore();
-    });
-});
-//# sourceMappingURL=audit-sources.test.js.map

package/dist/src/commands/audit-sources.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-sources.test.js","sourceRoot":"","sources":["../../../src/commands/audit-sources.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AACnC,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,eAAe,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC;CACtE,CAAC,CAAC,CAAA;AAEH,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAChC,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,YAAY,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE;CACvC,CAAC,CAAC,CAAA;AAEH,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAClC,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAEpC,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACnD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAqC,CAAA;IACxE,OAAO;QACL,GAAG,MAAM;QACT,iFAAiF;QACjF,qBAAqB,EAAE,SAAS,yBAAyB;YACvD,OAAO,EAAE,cAAc,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,EAAE,CAAA;QAChF,CAAC;QACD,gBAAgB,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC;QACvE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;KACtE,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,OAAO,EAAE,eAAe,EAA4B,MAAM,2BAA2B,CAAA;AAsCrF,SAAS,UAAU,CAAC,YAAmC,EAAE;IACvD,OAAO;QACL,MAAM,EAAE;YACN;gBACE,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,kCAAkC;gBAC/C,eAAe,EAAE;oBACf,KAAK,EAAE,cAAc;oBACrB,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,wCAAwC;iBAC9C;gBACD,UAAU,EAAE,aAAa;gBACzB,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,OAAO;gBACnB,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,WAAW;aACpB;SACF;QACD,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;QACtF,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,MAAM;IACb,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;QACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACf,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,YAA0C,EAAE;IAC/D,OAAO;QACL,UAAU,EAAE,kBAAkB;QAC9B,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,KAAK;QAC5B,EAAE,EAAE,UAAU;QACd,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,mBAAmB,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/C,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7E,kBAAkB,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAA;QAClD,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAE7E,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,kBAAkB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE5C,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAElD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsD,CAAA;QACtF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,mDAAmD;IACnD,6EAA6E;IAE7E,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpE,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACnD,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,0BAA0B;IAC1B,6EAA6E;IAE7E,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,gBAAgB,CAAC,iBAAiB,CAAC;YACjC,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,MAAM,EAAE;oBACN,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,wCAAwC;oBAChD,WAAW,EAAE,kCAAkC;oBAC/C,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAC,CAAA;QAEF,MAAM,UAAU,GAAa,EAAE,CAAA;QAC/B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAG5C,CAAA;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAA;QAChF,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,oCAAoC;IACpC,6EAA6E;IAE7E,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAEpE,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAE9D,MAAM,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EACxD,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACzC,CAAA;QAED,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,6CAA6C;IAC7C,6EAA6E;IAE7E,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,eAAe,GAAG,UAAU,CAAC;YACjC,MAAM,EAAE;gBACN;oBACE,SAAS,EAAE,YAAY;oBACvB,WAAW,EAAE,sCAAsC;oBACnD,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,eAAe;oBACvB,UAAU,EAAE,KAAK;oBACjB,UAAU,EAAE;wBACV;4BACE,EAAE,EAAE,MAAM;4BACV,IAAI,EAAE,YAAY;4BAClB,KAAK,EAAE,OAAO;4BACd,IAAI,EAAE,YAAY;4BAClB,GAAG,EAAE,qCAAqC;4BAC1C,YAAY,EAAE,EAAE;yBACjB;wBACD;4BACE,EAAE,EAAE,MAAM;4BACV,IAAI,EAAE,YAAY;4BAClB,KAAK,EAAE,KAAK;4BACZ,IAAI,EAAE,YAAY;4BAClB,GAAG,EAAE,mCAAmC;4BACxC,YAAY,EAAE,EAAE;yBACjB;qBACF;oBACD,MAAM,EAAE,SAAS;iBAClB;aACF;YACD,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;SACvF,CAAC,CAAA;QACF,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAA;QAErD,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAEzC,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,uEAAuE;IACvE,6EAA6E;IAE7E,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,OAAO,GAAG,EAAE;aACf,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;aACtB,kBAAkB,CAAC,CAAC,KAA8B,EAAE,EAAE;YACrD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACJ,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAEtE,MAAM,MAAM,CACV,eAAe,CAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC,CACvF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QAEjC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACvC,OAAO,CAAC,WAAW,EAAE,CAAA;QACrB,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/commands/audit.d.ts

@@ -1,40 +0,0 @@
-/**
- * @fileoverview skillsmith audit command — CLI security advisory checker
- * @module @skillsmith/cli/commands/audit
- * @see SMI-skill-version-tracking Wave 3 (advisories subcommand)
- * @see SMI-4590 Wave 4 Step 0a — restructured into parent `audit` command
- *
- * Lists active security advisories for installed skills in npm-audit style
- * output. Advisories are published by the Skillsmith team as security
- * issues are identified.
- *
- * Tier gate: Team (via requireTier).
- * Use --fix to attempt `skillsmith update <skill>` for each advisory with a patch.
- *
- * Surface (post-SMI-4590 Step 0a):
- * - `sklx audit advisories <skill-id>` (canonical)
- * - `sklx audit <skill-id>` (deprecation alias — emits warning, forwards to advisories)
- * - `sklx audit collisions` is the namespace-collision audit (SMI-4590 PR 5/6).
- */
-import { Command } from 'commander';
-export declare const advisoriesAction: (opts: Record<string, string | boolean | undefined>) => Promise<void>;
-export declare function createAuditAdvisoriesSubcommand(): Command;
-/**
- * Deprecation warning for top-level `sklx audit <skill-id>` flat invocation.
- * Removal target: next minor release.
- *
- * @internal exported for tests.
- */
-export declare const AUDIT_FLAT_DEPRECATION_NOTICE = "[DEPRECATED] sklx audit <skill-id> is deprecated; use 'sklx audit advisories <skill-id>' instead. This alias will be removed in the next minor version.";
-/**
- * Build the parent `audit` command. Subcommands:
- * - `advisories` — security advisory checker (canonical, Team tier).
- * - `<skill-id>` (positional fallback) — deprecation alias forwarding to
- *   `advisories`. Emits a stderr warning. Removed in next minor release.
- *
- * `sklx audit collisions` is added by SMI-4590 PR 5/6.
- */
-export declare function createAuditCommand(): Command;
-export declare const auditAction: (skillId: string | undefined, opts: Record<string, string | boolean | undefined>, command: Command) => Promise<void>;
-export default createAuditCommand;
-//# sourceMappingURL=audit.d.ts.map

package/dist/src/commands/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAiKnC,eAAO,MAAM,gBAAgB,uEAI3B,CAAA;AAEF,wBAAgB,+BAA+B,IAAI,OAAO,CAMzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,4JACiH,CAAA;AAE3J;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CA0B5C;AA4BD,eAAO,MAAM,WAAW,sHAItB,CAAA;AAEF,eAAe,kBAAkB,CAAA"}

package/dist/src/commands/audit.js

@@ -1,223 +0,0 @@
-/**
- * @fileoverview skillsmith audit command — CLI security advisory checker
- * @module @skillsmith/cli/commands/audit
- * @see SMI-skill-version-tracking Wave 3 (advisories subcommand)
- * @see SMI-4590 Wave 4 Step 0a — restructured into parent `audit` command
- *
- * Lists active security advisories for installed skills in npm-audit style
- * output. Advisories are published by the Skillsmith team as security
- * issues are identified.
- *
- * Tier gate: Team (via requireTier).
- * Use --fix to attempt `skillsmith update <skill>` for each advisory with a patch.
- *
- * Surface (post-SMI-4590 Step 0a):
- * - `sklx audit advisories <skill-id>` (canonical)
- * - `sklx audit <skill-id>` (deprecation alias — emits warning, forwards to advisories)
- * - `sklx audit collisions` is the namespace-collision audit (SMI-4590 PR 5/6).
- */
-import { Command } from 'commander';
-import chalk from 'chalk';
-import { AdvisoryRepository } from '@skillsmith/core';
-import { withTelemetry } from '@skillsmith/core/telemetry';
-import { openCliDatabase } from '../utils/open-database.js';
-import { DEFAULT_DB_PATH } from '../config.js';
-import { sanitizeError } from '../utils/sanitize.js';
-import { requireTier } from '../utils/require-tier.js';
-import { createAuditCollisionsSubcommand } from './audit-collisions.js';
-import { createAuditSourcesSubcommand } from './audit-sources.js';
-// ============================================================================
-// Severity display helpers
-// ============================================================================
-const SEVERITY_COLORS = {
-    critical: chalk.bgRed.white.bold,
-    high: chalk.red.bold,
-    medium: chalk.yellow.bold,
-    low: chalk.cyan,
-};
-const SEVERITY_PREFIXES = {
-    critical: '[!]',
-    high: '[*]',
-    medium: '[+]',
-    low: '[-]',
-};
-function colorSeverity(severity) {
-    const colorFn = SEVERITY_COLORS[severity] ?? chalk.white;
-    const prefix = SEVERITY_PREFIXES[severity] ?? '   ';
-    return colorFn(prefix + ' ' + severity.padEnd(8));
-}
-// ============================================================================
-// Output formatting
-// ============================================================================
-/**
- * Print advisories in npm-audit style format
- */
-function printAdvisories(advisories) {
-    for (const adv of advisories) {
-        const fixLabel = adv.patchedVersions
-            ? chalk.green(`Fix: skillsmith update ${adv.skillId}`)
-            : chalk.dim('No fix available');
-        console.log(`${colorSeverity(adv.severity)}  ${chalk.bold(adv.title)}\n` +
-            `          ${chalk.dim(adv.id)}\n` +
-            `          ${fixLabel}\n`);
-    }
-}
-/**
- * Print severity summary
- */
-function printSummary(counts) {
-    const total = Object.values(counts).reduce((a, b) => a + b, 0);
-    console.log(chalk.bold('Summary:'));
-    if (counts['critical'])
-        console.log(`  ${chalk.bgRed.white.bold('[!] critical')}  ${counts['critical']}`);
-    if (counts['high'])
-        console.log(`  ${chalk.red.bold('[*] high    ')}  ${counts['high']}`);
-    if (counts['medium'])
-        console.log(`  ${chalk.yellow.bold('[+] medium  ')}  ${counts['medium']}`);
-    if (counts['low'])
-        console.log(`  ${chalk.cyan('[-] low     ')}  ${counts['low']}`);
-    console.log(`  ${'    total   '.padEnd(14)}  ${total}`);
-}
-async function runAdvisoriesAudit(options) {
-    // Team tier required for security advisories
-    await requireTier('team');
-    const db = await openCliDatabase(options.db);
-    try {
-        const advisoryRepo = new AdvisoryRepository(db);
-        const advisories = advisoryRepo.getActiveAdvisories();
-        if (advisories.length === 0) {
-            console.log(chalk.dim('\nNo advisories found.'));
-            console.log(chalk.dim('No advisories have been published yet. This does not indicate installed\n' +
-                'skills have been reviewed. Run `skillsmith sync` to fetch the latest.'));
-            console.log();
-            return;
-        }
-        console.log(chalk.bold.blue('\n=== Skill Security Audit ===\n'));
-        printAdvisories(advisories);
-        // Count by severity
-        const counts = {};
-        for (const adv of advisories) {
-            counts[adv.severity] = (counts[adv.severity] ?? 0) + 1;
-        }
-        printSummary(counts);
-        console.log();
-        if (options.fix) {
-            const fixable = advisories.filter((a) => a.patchedVersions);
-            if (fixable.length === 0) {
-                console.log(chalk.yellow('No fixable advisories found.'));
-                return;
-            }
-            console.log(chalk.bold(`\nAttempting to fix ${fixable.length} advisory(s)...\n`));
-            const skillsToUpdate = [...new Set(fixable.map((a) => a.skillId))];
-            for (const skillId of skillsToUpdate) {
-                console.log(chalk.cyan(`  Running: skillsmith update ${skillId}`));
-                // Wave 2 will implement full update logic; this surfaces the intent clearly
-                console.log(chalk.dim(`    (update for ${skillId} — requires Wave 2 update implementation)`));
-            }
-        }
-    }
-    finally {
-        db.close();
-    }
-}
-// ============================================================================
-// Command factories
-// ============================================================================
-/**
- * Build the `advisories` subcommand. Same body as the pre-SMI-4590 flat
- * `audit` command — only the surface (parent + name) changed.
- *
- * @internal exported for tests; consumers should use {@link createAuditCommand}.
- */
-// SMI-5128: extracted from inline .action() closure so withTelemetry can wrap
-// it at the export boundary (SMI-5040 coverage gate).
-async function advisoriesActionImpl(opts) {
-    try {
-        await runAdvisoriesAudit({
-            db: opts['db'],
-            fix: opts['fix'] ?? false,
-        });
-    }
-    catch (error) {
-        console.error(chalk.red('Error:'), sanitizeError(error));
-        process.exit(1);
-    }
-}
-export const advisoriesAction = withTelemetry(advisoriesActionImpl, {
-    source: 'cli',
-    extractSkillId: () => 'advisories',
-    extractFramework: () => 'cli',
-});
-export function createAuditAdvisoriesSubcommand() {
-    return new Command('advisories')
-        .description('Check installed skills for known security advisories (Team tier required)')
-        .option('-d, --db <path>', 'Database file path', DEFAULT_DB_PATH)
-        .option('--fix', 'Attempt to update skills with available patches')
-        .action(advisoriesAction);
-}
-/**
- * Deprecation warning for top-level `sklx audit <skill-id>` flat invocation.
- * Removal target: next minor release.
- *
- * @internal exported for tests.
- */
-export const AUDIT_FLAT_DEPRECATION_NOTICE = "[DEPRECATED] sklx audit <skill-id> is deprecated; use 'sklx audit advisories <skill-id>' instead. This alias will be removed in the next minor version.";
-/**
- * Build the parent `audit` command. Subcommands:
- * - `advisories` — security advisory checker (canonical, Team tier).
- * - `<skill-id>` (positional fallback) — deprecation alias forwarding to
- *   `advisories`. Emits a stderr warning. Removed in next minor release.
- *
- * `sklx audit collisions` is added by SMI-4590 PR 5/6.
- */
-export function createAuditCommand() {
-    const audit = new Command('audit').description('Audit installed skills (advisories, namespace collisions)');
-    audit.addCommand(createAuditAdvisoriesSubcommand());
-    // SMI-4590 PR 5/6 — register `collisions` sibling subcommand.
-    audit.addCommand(createAuditCollisionsSubcommand());
-    // SMI-5407 — register `sources` sibling subcommand.
-    audit.addCommand(createAuditSourcesSubcommand());
-    // Deprecation alias: `sklx audit <skill-id>` → forward to `advisories`.
-    // Implemented as a default-action on the parent: when Commander is invoked
-    // with positional args that don't match a registered subcommand, emit the
-    // deprecation notice and route to the advisories action.
-    //
-    // We use `.argument('[skillId]')` + `.action()` to capture the positional
-    // fallback. Commander resolves registered subcommands first, so this fires
-    // only for unknown subcommand strings (treated as <skill-id>).
-    audit
-        .argument('[skillId]', 'Legacy positional skill-id (deprecated; use `advisories <skill-id>`)')
-        .option('-d, --db <path>', 'Database file path (deprecated alias)', DEFAULT_DB_PATH)
-        .option('--fix', 'Attempt to update skills with available patches (deprecated alias)')
-        .action(auditAction);
-    return audit;
-}
-// SMI-5128: extracted from the parent `audit` inline .action() closure so
-// withTelemetry can wrap it. `command.help()` (commander passes the Command as
-// the final action arg) replaces the closure's `audit.help()`.
-async function auditActionImpl(skillId, opts, command) {
-    if (skillId === undefined) {
-        // No subcommand and no positional — print parent help.
-        command.help();
-        return;
-    }
-    // Emit deprecation warning to stderr; do not pollute stdout.
-    console.error(chalk.yellow(AUDIT_FLAT_DEPRECATION_NOTICE));
-    try {
-        await runAdvisoriesAudit({
-            db: opts['db'],
-            fix: opts['fix'] ?? false,
-        });
-    }
-    catch (error) {
-        console.error(chalk.red('Error:'), sanitizeError(error));
-        process.exit(1);
-    }
-}
-export const auditAction = withTelemetry(auditActionImpl, {
-    source: 'cli',
-    extractSkillId: () => 'audit',
-    extractFramework: () => 'cli',
-});
-export default createAuditCommand;
-//# sourceMappingURL=audit.js.map

package/dist/src/commands/audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,kBAAkB,EAAsB,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAA;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAEjE,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,eAAe,GAA6C;IAChE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;IAChC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;IACzB,GAAG,EAAE,KAAK,CAAC,IAAI;CAChB,CAAA;AAED,MAAM,iBAAiB,GAA2B;IAChD,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;CACX,CAAA;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,CAAA;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAA;IACnD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,eAAe,CAAC,UAA2B;IAClD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe;YAClC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QAEjC,OAAO,CAAC,GAAG,CACT,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;YAC1D,aAAa,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI;YAClC,aAAa,QAAQ,IAAI,CAC5B,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,MAA8B;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACnF,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACzF,IAAI,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAChG,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;AACzD,CAAC;AAWD,KAAK,UAAU,kBAAkB,CAAC,OAA+B;IAC/D,6CAA6C;IAC7C,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;IAEzB,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAE5C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,mBAAmB,EAAE,CAAA;QAErD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAA;YAChD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,2EAA2E;gBACzE,uEAAuE,CAC1E,CACF,CAAA;YACD,OAAO,CAAC,GAAG,EAAE,CAAA;YACb,OAAM;QACR,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAA;QAChE,eAAe,CAAC,UAAU,CAAC,CAAA;QAE3B,oBAAoB;QACpB,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACxD,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,CAAA;QACpB,OAAO,CAAC,GAAG,EAAE,CAAA;QAEb,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;YAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAA;gBACzD,OAAM;YACR,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAA;YAEjF,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACjF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC,CAAA;gBAClE,4EAA4E;gBAC5E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,mBAAmB,OAAO,2CAA2C,CAAC,CACjF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;GAKG;AACH,8EAA8E;AAC9E,sDAAsD;AACtD,KAAK,UAAU,oBAAoB,CACjC,IAAkD;IAElD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC;YACvB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAW;YACxB,GAAG,EAAG,IAAI,CAAC,KAAK,CAAa,IAAI,KAAK;SACvC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC,oBAAoB,EAAE;IAClE,MAAM,EAAE,KAAK;IACb,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY;IAClC,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK;CAC9B,CAAC,CAAA;AAEF,MAAM,UAAU,+BAA+B;IAC7C,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;SAC7B,WAAW,CAAC,2EAA2E,CAAC;SACxF,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,CAAC;SAChE,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;SAClE,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GACxC,yJAAyJ,CAAA;AAE3J;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAC5C,2DAA2D,CAC5D,CAAA;IAED,KAAK,CAAC,UAAU,CAAC,+BAA+B,EAAE,CAAC,CAAA;IACnD,8DAA8D;IAC9D,KAAK,CAAC,UAAU,CAAC,+BAA+B,EAAE,CAAC,CAAA;IACnD,oDAAoD;IACpD,KAAK,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC,CAAA;IAEhD,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK;SACF,QAAQ,CAAC,WAAW,EAAE,sEAAsE,CAAC;SAC7F,MAAM,CAAC,iBAAiB,EAAE,uCAAuC,EAAE,eAAe,CAAC;SACnF,MAAM,CAAC,OAAO,EAAE,oEAAoE,CAAC;SACrF,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,+EAA+E;AAC/E,+DAA+D;AAC/D,KAAK,UAAU,eAAe,CAC5B,OAA2B,EAC3B,IAAkD,EAClD,OAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uDAAuD;QACvD,OAAO,CAAC,IAAI,EAAE,CAAA;QACd,OAAM;IACR,CAAC;IACD,6DAA6D;IAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC;YACvB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAW;YACxB,GAAG,EAAG,IAAI,CAAC,KAAK,CAAa,IAAI,KAAK;SACvC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE;IACxD,MAAM,EAAE,KAAK;IACb,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO;IAC7B,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK;CAC9B,CAAC,CAAA;AAEF,eAAe,kBAAkB,CAAA"}

package/dist/src/commands/audit.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * @fileoverview Unit tests for `skillsmith audit` CLI command
- * @see SMI-skill-version-tracking Wave 3
- *
- * Uses SKILLSMITH_SKIP_LICENSE_CHECK=true to bypass tier gate in tests.
- */
-export {};
-//# sourceMappingURL=audit.test.d.ts.map

package/dist/src/commands/audit.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.test.d.ts","sourceRoot":"","sources":["../../../src/commands/audit.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/commands/audit.test.js

@@ -1,97 +0,0 @@
-/**
- * @fileoverview Unit tests for `skillsmith audit` CLI command
- * @see SMI-skill-version-tracking Wave 3
- *
- * Uses SKILLSMITH_SKIP_LICENSE_CHECK=true to bypass tier gate in tests.
- */
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { AdvisoryRepository } from '@skillsmith/core';
-import { createTestDatabase, closeDatabase } from '@skillsmith/core/testkit';
-// ============================================================================
-// Helpers
-// ============================================================================
-function makeAdvisory(overrides = {}) {
-    return {
-        id: 'SSA-2026-001',
-        skillId: 'community/commit-helper',
-        severity: 'critical',
-        title: 'Prompt Injection in commit-helper',
-        description: 'A test advisory for CLI tests.',
-        publishedAt: '2026-01-15T00:00:00Z',
-        ...overrides,
-    };
-}
-// ============================================================================
-// Tests — isolate the core logic by testing AdvisoryRepository output
-// that the audit command displays, without spawning an actual Commander
-// process (which would require SKILLSMITH_SKIP_LICENSE_CHECK in env).
-// The command action itself is thin formatting logic over the repo.
-// ============================================================================
-describe('audit command — AdvisoryRepository integration', () => {
-    let db;
-    let repo;
-    beforeEach(async () => {
-        process.env['SKILLSMITH_SKIP_LICENSE_CHECK'] = 'true';
-        db = await createTestDatabase();
-        repo = new AdvisoryRepository(db);
-    });
-    afterEach(() => {
-        delete process.env['SKILLSMITH_SKIP_LICENSE_CHECK'];
-        closeDatabase(db);
-    });
-    it('returns empty array when DB has no advisories', () => {
-        const advisories = repo.getActiveAdvisories();
-        expect(advisories).toHaveLength(0);
-    });
-    it('returns advisory data for display when advisories exist', () => {
-        repo.upsertAdvisory(makeAdvisory({ id: 'SSA-2026-001', severity: 'critical', skillId: 'community/commit-helper' }));
-        repo.upsertAdvisory(makeAdvisory({ id: 'SSA-2026-002', severity: 'high', skillId: 'community/jest-helper' }));
-        const advisories = repo.getActiveAdvisories();
-        expect(advisories).toHaveLength(2);
-        const critical = advisories.filter((a) => a.severity === 'critical');
-        const high = advisories.filter((a) => a.severity === 'high');
-        expect(critical).toHaveLength(1);
-        expect(high).toHaveLength(1);
-        expect(critical[0].skillId).toBe('community/commit-helper');
-        expect(high[0].skillId).toBe('community/jest-helper');
-    });
-    it('reflects npm audit style data: title and id are present per advisory', () => {
-        repo.upsertAdvisory(makeAdvisory({
-            id: 'SSA-2026-003',
-            title: 'Prompt Injection in commit-helper',
-            severity: 'critical',
-        }));
-        const advisories = repo.getActiveAdvisories();
-        expect(advisories[0].title).toBe('Prompt Injection in commit-helper');
-        expect(advisories[0].id).toBe('SSA-2026-003');
-    });
-    it('fixAvailable is determined by presence of patchedVersions', () => {
-        repo.upsertAdvisory(makeAdvisory({ id: 'SSA-2026-004', patchedVersions: '[">=2.0.0"]' }));
-        repo.upsertAdvisory(makeAdvisory({ id: 'SSA-2026-005', skillId: 'community/other-skill' }));
-        const withPatch = repo.getAdvisoriesForSkill('community/commit-helper')[0];
-        const withoutPatch = repo.getAdvisoriesForSkill('community/other-skill')[0];
-        expect(withPatch.patchedVersions).toBeTruthy();
-        expect(withoutPatch.patchedVersions).toBeUndefined();
-    });
-});
-// ============================================================================
-// Tests — requireTier bypass with SKILLSMITH_SKIP_LICENSE_CHECK
-// ============================================================================
-describe('audit command — requireTier bypass', () => {
-    it('does not throw when SKILLSMITH_SKIP_LICENSE_CHECK=true', async () => {
-        process.env['SKILLSMITH_SKIP_LICENSE_CHECK'] = 'true';
-        // requireTier should return without throwing
-        const { requireTier } = await import('../utils/require-tier.js');
-        await expect(requireTier('team')).resolves.toBeUndefined();
-        delete process.env['SKILLSMITH_SKIP_LICENSE_CHECK'];
-    });
-    it('throws when no license key and tier is required', async () => {
-        delete process.env['SKILLSMITH_SKIP_LICENSE_CHECK'];
-        delete process.env['SKILLSMITH_LICENSE_KEY'];
-        const { requireTier } = await import('../utils/require-tier.js');
-        // With no license key, community tier — should reject team requirement
-        // getLicenseStatus returns community tier when no key is present
-        await expect(requireTier('team')).rejects.toThrow(/team tier/);
-    });
-});
-//# sourceMappingURL=audit.test.js.map

package/dist/src/commands/audit.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.test.js","sourceRoot":"","sources":["../../../src/commands/audit.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI5E,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,YAAY,CAAC,YAAoC,EAAE;IAC1D,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,gCAAgC;QAC7C,WAAW,EAAE,sBAAsB;QACnC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,+EAA+E;AAE/E,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,IAAI,EAAgB,CAAA;IACpB,IAAI,IAAwB,CAAA;IAE5B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,GAAG,MAAM,CAAA;QACrD,EAAE,GAAG,MAAM,kBAAkB,EAAE,CAAA;QAC/B,IAAI,GAAG,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QACnD,aAAa,CAAC,EAAE,CAAC,CAAA;IACnB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAA;QAC7C,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAI,CAAC,cAAc,CACjB,YAAY,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAC/F,CAAA;QACD,IAAI,CAAC,cAAc,CACjB,YAAY,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CACzF,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAA;QAC7C,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAElC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAA;QAC3E,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,IAAI,CAAC,cAAc,CACjB,YAAY,CAAC;YACX,EAAE,EAAE,cAAc;YAClB,KAAK,EAAE,mCAAmC;YAC1C,QAAQ,EAAE,UAAU;SACrB,CAAC,CACH,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAA;QAC7C,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAA;QAE3F,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAE,CAAA;QAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAE,CAAA;QAE5E,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE,CAAA;QAC9C,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,+EAA+E;AAC/E,gEAAgE;AAChE,+EAA+E;AAE/E,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,GAAG,MAAM,CAAA;QAErD,6CAA6C;QAC7C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;QAChE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;QAE1D,OAAO,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QACnD,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QAE5C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;QAEhE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}