@skillsmith/core 0.11.6 → 0.12.0

package/dist/src/services/bundled-sibling-scan.js

@@ -4,7 +4,8 @@
  *
  * Walks an installed skill's bundle directory and scans its sibling bundled
  * files (`.mcp.json`, `.claude/settings*.json`, `package.json` lifecycle hooks,
- * `config.json`, `scripts/*.sh` + top-level `*.sh`) so `skill_rescan` can
+ * `config.json`, and executable-code files under `scripts/`/`src/`/`bin/`
+ * plus the skill's top level) so `skill_rescan` can
  * quarantine a skill whose MALICIOUS sibling — not its `SKILL.md` — carries the
  * threat (CVE-2025-59536 hook execution, `curl|bash` postinstall, a
  * remote-fetch-execute install script).
@@ -35,13 +36,35 @@
  * INHERITED DETECTION GAPS (FN, tracked SMI-5424): bare-interpreter hook
  * payloads (`node evil.js`, `python evil.py`, `bun`/`deno`), `&&`/`;`-chained
  * fetch-then-exec, `npx`, and JSON `\uXXXX`-escaped commands inside raw-scanned
- * structured files are NOT detected. `.js`/`.py`/`.mjs`/`.ts` payload files and
- * nested/non-`scripts/` `.sh` are a Phase-3 follow-up (recursive bundle walk).
+ * structured files are NOT detected.
+ *
+ * SMI-6033 Wave 2 (Gap 8) CLOSED PART OF THE PHASE-3 TODO: the glob is no
+ * longer `.sh`-only and no longer `scripts/`-only. It now covers every
+ * {@link EXECUTABLE_CODE_EXTENSIONS} file at the skill's top level and as a
+ * DIRECT child of `scripts/`, `src/` or `bin/` — the same SCOPE, RANKING and
+ * COUNT cap the indexer applies registry-side (`scripts/indexer/
+ * skill-processor.security.tree.ts`'s `MAX_EXTENDED_SIBLING_FILES = 20`), so
+ * a skill scanned locally and the same skill scanned in the registry select
+ * the same candidate FILES. The per-file BYTE cap is deliberately NOT
+ * unified: {@link MAX_SIBLING_FILE_BYTES} (512 KB) here vs the indexer's
+ * `MAX_SIBLING_CONTENT_BYTES` (256 KB, `skill-processor.security.ts`) — a
+ * pre-existing divergence this wave did not introduce and did not reconcile
+ * (adversarial review, 2026-08-16). A file between 256 KB and 512 KB is
+ * therefore scanned locally but `size_cap`-dropped registry-side; harmless
+ * (fail-open, surfaced via `scan_coverage_incomplete`/`skippedOversize`, never
+ * silent) but worth knowing before assuming the two verdicts always agree.
+ * Still deliberately shallow: a fully recursive bundle walk remains out of
+ * scope.
+ *
  * COUNT-CAP DECOY-PADDING (FN): the fixed bundled files are cap-exempt, but the
- * `.sh` glob is capped — an author can name the malicious script to sort last
- * and pad `scripts/` with cap-many benign decoys so it lands in `droppedForCount`
- * and is never scanned. This is surfaced (never a silent drop) but not blocked;
- * a cumulative-resource bound is a Phase-3 follow-up.
+ * executable-code glob is capped — an author can name the malicious script to
+ * rank last and pad the scanned directories with cap-many benign decoys so it
+ * lands in `droppedForCount` and is never scanned. Wave 2's four-tier ranking
+ * (SKILL.md-referenced, then entry-point-named, then shallow, then
+ * lexicographic) raises the bar — to land past the cap the payload must also
+ * be unreferenced from SKILL.md and not entry-point-named, which cuts against
+ * it actually being executed — but does not close the gap. Surfaced (never a
+ * silent drop), not blocked; a cumulative-resource bound is a follow-up.
  *
  * config.json IS scanned here (only doc-class siblings are skipped), whereas the
  * Phase-1 validate helper (validate-bundled-scan.ts) also skips `config` — rescan
@@ -50,46 +73,158 @@
 import { join } from 'path';
 import { safeFs, resolveSafeRealpath } from '../sources/LocalFilesystemAdapter.helpers.js';
 import { BUNDLED_SCAN_FILES, classifyBundledFile, extractPackageJsonLifecycleScripts, } from './skill-installation.policy.js';
-/** Max `.sh` glob files scanned per skill (fixed bundled files are exempt). */
-export const MAX_SIBLING_SH_FILES = 50;
+/**
+ * Operational-code extensions scanned by the glob (SMI-6033 Wave 2, Gap 8).
+ *
+ * Deliberately duplicated from `scripts/indexer/skill-processor.security.tree.ts`
+ * rather than shared: that module lives in the Node/Deno indexer trees, which
+ * cannot import `@skillsmith/core` (git-crypt boundary + Deno bundling — see
+ * that file's twin header). `parity.test.ts` pins the two lists equal, so the
+ * duplication cannot drift silently.
+ */
+export const EXECUTABLE_CODE_EXTENSIONS = [
+    '.sh',
+    '.py',
+    '.js',
+    '.mjs',
+    '.cjs',
+    '.ts',
+    '.rb',
+    '.php',
+    '.ps1',
+    '.pl',
+];
+/** Directories globbed for operational code, relative to the skill directory. */
+export const EXTENDED_SCAN_DIRS = ['scripts', 'src', 'bin'];
+/** Basenames (extension-stripped, lowercased) that rank as entry points (tier 2). */
+export const ENTRY_POINT_BASENAMES = new Set([
+    'install',
+    'setup',
+    'main',
+    'index',
+    'run',
+    'postinstall',
+]);
+/**
+ * Max globbed operational-code files scanned per skill (fixed bundled files
+ * are exempt).
+ *
+ * SMI-6033 Wave 2 (Gap 8): narrowed from the previous `.sh`-only cap of 50 to
+ * 20, matching `MAX_EXTENDED_SIBLING_FILES` on the indexer side. Intentional
+ * behaviour change: the glob now covers ten extensions across four directories
+ * instead of one extension across two, so an uncapped-at-50 policy would fetch
+ * and scan far more per skill than before. 20 ranked files is the plan's
+ * chosen budget on BOTH surfaces, and keeping the two equal is what makes the
+ * local and registry verdicts comparable.
+ */
+export const MAX_EXTENDED_SIBLING_FILES = 20;
 /** Per-file byte ceiling; larger siblings are skipped (recorded, never silent). */
 export const MAX_SIBLING_FILE_BYTES = 512 * 1024;
-/** A finding is a quarantine driver only if it is a direct execution threat. */
-function isExecutionThreat(finding) {
-    return finding.type === 'code_execution' || finding.type === 'obfuscated_directive';
+/**
+ * A finding is a quarantine driver only if it is a direct execution threat.
+ *
+ * SMI-6033 Wave 2 (Gap 8) fix (adversarial review finding, 2026-08-16): for a
+ * file from the NEW extended (`scripts/`/`src/`/`bin/`/top-level executable
+ * code) surface, `code_execution` only drives rejection at `critical`
+ * severity — a bare `medium` code_execution finding (the severity
+ * `scanCodeExecution` assigns a lone `curl | bash` by design) must NOT
+ * standalone-quarantine an install script that uses the same idiom as
+ * rustup/Homebrew/nvm/bun. The original fixed `BUNDLED_SCAN_FILES` keep the
+ * unchanged, severity-agnostic rule — those are config/doc formats where a
+ * literal `curl | bash` string is inherently anomalous, not a real installer.
+ * `obfuscated_directive` remains rejectable at any severity on BOTH surfaces
+ * — it is delta-gated against a real decode step and has no legitimate
+ * installer-script shape.
+ */
+function isExecutionThreat(finding, isExtended) {
+    if (finding.type === 'obfuscated_directive')
+        return true;
+    if (finding.type !== 'code_execution')
+        return false;
+    return isExtended ? finding.severity === 'critical' : true;
+}
+/** True when `path`'s final extension is in {@link EXECUTABLE_CODE_EXTENSIONS}. */
+function hasExecutableCodeExtension(path) {
+    const lower = path.toLowerCase();
+    return EXECUTABLE_CODE_EXTENSIONS.some((ext) => lower.endsWith(ext));
+}
+/** Lowercased basename with its final extension removed (`Setup.SH` -> `setup`). */
+function entryPointKey(path) {
+    const base = (path.split('/').pop() ?? path).toLowerCase();
+    const dotIdx = base.lastIndexOf('.');
+    return dotIdx > 0 ? base.slice(0, dotIdx) : base;
 }
 /**
- * Collect `*.sh` candidates: top-level then `scripts/`, regular files only
- * (symlinked scripts are not followed by the glob — Phase 3). Sorted so the cap
- * and `droppedForCount` are reproducible rather than dependent on readdir order.
- * NOTE: sorting does NOT defeat decoy-padding — an author can name the malicious
- * file to sort last; that residual FN is documented in the module header and the
+ * SMI-6033 Wave 2 (Gap 8): rank operational-code candidates so the count cap
+ * keeps the files most likely to actually be executed.
+ *
+ * Four tiers, in order: (1) referenced literally by path from `SKILL.md`,
+ * (2) entry-point basename, (3) shallower path first, (4) lexicographic.
+ *
+ * DETERMINISM is a required property, not incidental: the same candidate set
+ * must always produce the same order. Tier 4 is a TOTAL order over unique
+ * relative paths, so the result never depends on `Array.prototype.sort` being
+ * stable; and the compare uses raw `<`/`>` rather than `localeCompare`, whose
+ * collation is ICU/locale dependent. This mirrors the identical comparator in
+ * the indexer's `enumerateExtendedSiblingTargets`, so the two surfaces select
+ * the same files in the same order from the same bundle.
+ *
+ * NOTE: ranking does NOT defeat decoy-padding — see the module header. The
  * dropped names are always surfaced in `droppedForCount` (no silent drop).
  */
-async function collectShFiles(skillDir) {
+export function rankExecutableCodeFiles(relPaths, primaryContent) {
+    return [...relPaths].sort((a, b) => {
+        const aRef = primaryContent.includes(a);
+        const bRef = primaryContent.includes(b);
+        if (aRef !== bRef)
+            return aRef ? -1 : 1;
+        const aEntry = ENTRY_POINT_BASENAMES.has(entryPointKey(a));
+        const bEntry = ENTRY_POINT_BASENAMES.has(entryPointKey(b));
+        if (aEntry !== bEntry)
+            return aEntry ? -1 : 1;
+        const aDepth = a.split('/').length;
+        const bDepth = b.split('/').length;
+        if (aDepth !== bDepth)
+            return aDepth - bDepth;
+        if (a === b)
+            return 0;
+        return a < b ? -1 : 1;
+    });
+}
+/**
+ * Collect executable-code candidates: the skill's top level, then direct
+ * children of `scripts/`, `src/` and `bin/` — regular files only (symlinked
+ * scripts are not followed by the glob). Ranked by
+ * {@link rankExecutableCodeFiles} so the cap and `droppedForCount` are
+ * reproducible rather than dependent on readdir order.
+ */
+async function collectExecutableCodeFiles(skillDir, primaryContent) {
     const out = [];
     const top = await safeFs.readdir(skillDir);
     if (top.ok) {
         for (const e of top.value) {
-            if (e.isFile() && e.name.endsWith('.sh'))
+            if (e.isFile() && hasExecutableCodeExtension(e.name))
                 out.push(e.name);
         }
     }
-    const scripts = await safeFs.readdir(join(skillDir, 'scripts'));
-    if (scripts.ok) {
-        for (const e of scripts.value) {
-            if (e.isFile() && e.name.endsWith('.sh'))
-                out.push(join('scripts', e.name));
+    for (const sub of EXTENDED_SCAN_DIRS) {
+        const entries = await safeFs.readdir(join(skillDir, sub));
+        if (!entries.ok)
+            continue;
+        for (const e of entries.value) {
+            if (e.isFile() && hasExecutableCodeExtension(e.name))
+                out.push(`${sub}/${e.name}`);
         }
     }
-    return out.sort();
+    return rankExecutableCodeFiles(out, primaryContent);
 }
 /**
  * Scan a skill bundle's sibling files and return the structured result.
  *
  * Fixed {@link BUNDLED_SCAN_FILES} are always scanned (exempt from the count
  * cap, so a decoy-padding attack on `scripts/` cannot push the primary hook /
- * postinstall surface out of the scan window). The `.sh` glob is capped and
+ * postinstall surface out of the scan window). The executable-code glob is
+ * ranked then capped, and
  * any overflow is reported in `droppedForCount`.
  *
  * Doc-class siblings (`README.md`, `examples.md`) are intentionally NOT scanned:
@@ -102,7 +237,7 @@ async function collectShFiles(skillDir) {
  * @param opts     optional caps
  */
 export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
-    const maxShFiles = opts.maxShFiles ?? MAX_SIBLING_SH_FILES;
+    const maxExtendedFiles = opts.maxExtendedFiles ?? MAX_EXTENDED_SIBLING_FILES;
     const maxBytes = opts.maxBytesPerFile ?? MAX_SIBLING_FILE_BYTES;
     const result = {
         findings: [],
@@ -115,10 +250,15 @@ export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
         skippedOversize: [],
         skippedSymlinkEscape: [],
     };
-    const shFiles = await collectShFiles(skillDir);
-    result.droppedForCount = shFiles.slice(maxShFiles);
-    // Fixed files first (cap-exempt), then the capped, sorted .sh glob.
-    const candidates = [...BUNDLED_SCAN_FILES, ...shFiles.slice(0, maxShFiles)];
+    const codeFiles = await collectExecutableCodeFiles(skillDir, opts.primaryContent ?? '');
+    result.droppedForCount = codeFiles.slice(maxExtendedFiles);
+    const extendedCandidates = codeFiles.slice(0, maxExtendedFiles);
+    // Fixed files first (cap-exempt), then the capped, ranked executable-code glob.
+    const candidates = [...BUNDLED_SCAN_FILES, ...extendedCandidates];
+    // SMI-6033 Wave 2 (Gap 8) fix: which candidates came from the new extended
+    // surface, so isExecutionThreat can apply its narrower rule to them without
+    // touching BUNDLED_SCAN_FILES's unchanged behavior at all.
+    const extendedCandidateSet = new Set(extendedCandidates);
     for (const rel of candidates) {
         const fileClass = classifyBundledFile(rel);
         if (fileClass === 'doc')
@@ -150,12 +290,16 @@ export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
                 continue; // no install-time hooks — nothing risky
             textToScan = lifecycle;
         }
-        const report = scanner.scan(`${skillDir}/${rel}`, textToScan);
+        // SMI-6033 Wave 2 (Gap 8) fix: extended candidates are real source files,
+        // not markdown — see SecurityScanner.scan()'s own header for why the
+        // markdown-only indented-code-block heuristic must be disabled for them.
+        // BUNDLED_SCAN_FILES keep the default (isMarkdown=true) unchanged.
+        const report = scanner.scan(`${skillDir}/${rel}`, textToScan, false, !extendedCandidateSet.has(rel));
         result.scannedFiles.push(rel);
         // Fresh objects (no mutation of the report's findings array) tagged with the file.
         const tagged = report.findings.map((f) => ({ ...f, location: rel }));
         result.findings.push(...tagged);
-        const drivers = tagged.filter(isExecutionThreat);
+        const drivers = tagged.filter((f) => isExecutionThreat(f, extendedCandidateSet.has(rel)));
         if (drivers.length > 0) {
             result.rejectable = true;
             result.rejectableFindings.push(...drivers);

package/dist/src/services/bundled-sibling-scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundled-sibling-scan.js","sourceRoot":"","sources":["../../../src/services/bundled-sibling-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAM3B,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAA;AAC1F,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,gCAAgC,CAAA;AAEvC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAA;AACtC,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAA;AAyChD,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,OAAwB;IACjD,OAAO,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB,CAAA;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,OAAwB,EACxB,OAAkC,EAAE;IAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAA;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAA;IAE/D,MAAM,MAAM,GAA6B;QACvC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,EAAE;QACtB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE;QAChB,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,EAAE;QACnB,oBAAoB,EAAE,EAAE;KACzB,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAClD,oEAAoE;IACpE,MAAM,UAAU,GAAG,CAAC,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;IAE3E,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAC1C,IAAI,SAAS,KAAK,KAAK;YAAE,SAAQ,CAAC,mDAAmD;QAErF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,6EAA6E;YAC7E,0EAA0E;YAC1E,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnF,SAAQ;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAA;QAE/B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,SAAQ;QACpB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChC,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,SAAQ;QAEtB,IAAI,UAAU,GAAW,IAAI,CAAC,KAAK,CAAA;QACnC,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ,CAAC,wCAAwC;YAC7E,UAAU,GAAG,SAAS,CAAA;QACxB,CAAC;QAED,MAAM,MAAM,GAAe,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;QACzE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE7B,mFAAmF;QACnF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;QAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;YACxB,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;YAC1C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChC,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"bundled-sibling-scan.js","sourceRoot":"","sources":["../../../src/services/bundled-sibling-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAM3B,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAA;AAC1F,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,gCAAgC,CAAA;AAEvC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACG,CAAA;AAEV,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAU,CAAA;AAEpE,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,aAAa;CACd,CAAC,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAA;AAC5C,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAA;AA+ChD;;;;;;;;;;;;;;;GAeG;AACH,SAAS,iBAAiB,CAAC,OAAwB,EAAE,UAAmB;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB;QAAE,OAAO,IAAI,CAAA;IACxD,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5D,CAAC;AAED,mFAAmF;AACnF,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,OAAQ,0BAAgD,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA2B,EAC3B,cAAsB;IAEtB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1D,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAClC,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,GAAG,MAAM,CAAA;QAC7C,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAA;QACrB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,0BAA0B,CACvC,QAAgB,EAChB,cAAsB;IAEtB,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;QACzD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,SAAQ;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,OAAwB,EACxB,OAAkC,EAAE;IAEpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAA;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAA;IAE/D,MAAM,MAAM,GAA6B;QACvC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,EAAE;QACtB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE;QAChB,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,EAAE;QACnB,oBAAoB,EAAE,EAAE;KACzB,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAA;IACvF,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC1D,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;IAC/D,gFAAgF;IAChF,MAAM,UAAU,GAAG,CAAC,GAAG,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,CAAA;IACjE,2EAA2E;IAC3E,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAA;IAEhE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAC1C,IAAI,SAAS,KAAK,KAAK;YAAE,SAAQ,CAAC,mDAAmD;QAErF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,6EAA6E;YAC7E,0EAA0E;YAC1E,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnF,SAAQ;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAA;QAE/B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,SAAQ;QACpB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChC,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,SAAQ;QAEtB,IAAI,UAAU,GAAW,IAAI,CAAC,KAAK,CAAA;QACnC,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ,CAAC,wCAAwC;YAC7E,UAAU,GAAG,SAAS,CAAA;QACxB,CAAC;QAED,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,MAAM,GAAe,OAAO,CAAC,IAAI,CACrC,GAAG,QAAQ,IAAI,GAAG,EAAE,EACpB,UAAU,EACV,KAAK,EACL,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAC/B,CAAA;QACD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE7B,mFAAmF;QACnF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;QAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACzF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;YACxB,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;YAC1C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChC,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/src/services/recommend-guard.d.ts

@@ -25,4 +25,23 @@
  * its own flag here, since the same string serves both.
  */
 export declare function buildEmptyStackGuidance(): string;
+/**
+ * SMI-5893 (Wave 7 Step 2): shared "auto-detected" footer fragment for CLI
+ * `recommend` (`recommend.helpers.ts`) and MCP `skill_recommend`
+ * (`recommend.format.ts`)'s formatted output — both previously hardcoded
+ * "(auto-detected from ~/.claude/skills/)" regardless of which client's
+ * directory was actually scanned.
+ *
+ * **Corrected per plan review — `getInstallPath(client)` is not directly
+ * usable here**, unlike the Wave 1 pattern `list`'s footer reuses (Wave 7
+ * Step 1): neither call site threads a resolved `ClientId` through to this
+ * text today (CLI's `getInstalledSkills()` always scans the canonical
+ * install path; MCP's resolves whatever `SKILLSMITH_CLIENT` happens to be
+ * set to at call time) — there is no single client value shared by both
+ * surfaces to plug into `getInstallPath()`. Rather than hardcode one path
+ * (wrong for any non-canonical/non-default client) or invent two divergent
+ * per-surface resolution rules, both surfaces describe the detection
+ * generically via this one shared helper instead.
+ */
+export declare function getRecommendAutoDetectedFooterText(): string;
 //# sourceMappingURL=recommend-guard.d.ts.map

package/dist/src/services/recommend-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recommend-guard.d.ts","sourceRoot":"","sources":["../../../src/services/recommend-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAQhD"}
+{"version":3,"file":"recommend-guard.d.ts","sourceRoot":"","sources":["../../../src/services/recommend-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAQhD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kCAAkC,IAAI,MAAM,CAS3D"}

package/dist/src/services/recommend-guard.js

@@ -31,4 +31,32 @@ export function buildEmptyStackGuidance() {
         'context (a short description of the project or its tooling) or an ' +
         'explicit list of installed/currently-used skills, then try again.');
 }
+/**
+ * SMI-5893 (Wave 7 Step 2): shared "auto-detected" footer fragment for CLI
+ * `recommend` (`recommend.helpers.ts`) and MCP `skill_recommend`
+ * (`recommend.format.ts`)'s formatted output — both previously hardcoded
+ * "(auto-detected from ~/.claude/skills/)" regardless of which client's
+ * directory was actually scanned.
+ *
+ * **Corrected per plan review — `getInstallPath(client)` is not directly
+ * usable here**, unlike the Wave 1 pattern `list`'s footer reuses (Wave 7
+ * Step 1): neither call site threads a resolved `ClientId` through to this
+ * text today (CLI's `getInstalledSkills()` always scans the canonical
+ * install path; MCP's resolves whatever `SKILLSMITH_CLIENT` happens to be
+ * set to at call time) — there is no single client value shared by both
+ * surfaces to plug into `getInstallPath()`. Rather than hardcode one path
+ * (wrong for any non-canonical/non-default client) or invent two divergent
+ * per-surface resolution rules, both surfaces describe the detection
+ * generically via this one shared helper instead.
+ */
+export function getRecommendAutoDetectedFooterText() {
+    // PR #2375 review follow-up: "across all clients" overclaimed scope —
+    // each surface actually scans exactly one client (CLI: the canonical
+    // install path; MCP: whatever SKILLSMITH_CLIENT resolves to at call
+    // time), never a union across clients. Wording stays generic (no single
+    // client value is available here to name specifically — see the
+    // function-level doc comment above) without asserting a scope neither
+    // surface implements.
+    return 'auto-detected from your installed skills';
+}
 //# sourceMappingURL=recommend-guard.js.map

package/dist/src/services/recommend-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"recommend-guard.js","sourceRoot":"","sources":["../../../src/services/recommend-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CACL,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,mEAAmE,CACpE,CAAA;AACH,CAAC"}
+{"version":3,"file":"recommend-guard.js","sourceRoot":"","sources":["../../../src/services/recommend-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CACL,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,mEAAmE,CACpE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kCAAkC;IAChD,sEAAsE;IACtE,qEAAqE;IACrE,oEAAoE;IACpE,wEAAwE;IACxE,gEAAgE;IAChE,sEAAsE;IACtE,sBAAsB;IACtB,OAAO,0CAA0C,CAAA;AACnD,CAAC"}

package/dist/src/services/recommend-guard.test.js

@@ -1,11 +1,12 @@
 /**
  * @fileoverview Unit tests for the shared empty-derived-stack guidance string
- *   (SMI-5896 Wave 3 Step 2). Both CLI `recommend` and MCP `skill_recommend`
- *   surface this exact string so their empty-stack messaging can't drift.
+ *   (SMI-5896 Wave 3 Step 2) and the shared "auto-detected" footer text
+ *   (SMI-5893 Wave 7 Step 2). Both CLI `recommend` and MCP `skill_recommend`
+ *   surface these exact strings so their messaging can't drift.
  * @module @skillsmith/core/services/recommend-guard.test
  */
 import { describe, expect, it } from 'vitest';
-import { buildEmptyStackGuidance } from './recommend-guard.js';
+import { buildEmptyStackGuidance, getRecommendAutoDetectedFooterText } from './recommend-guard.js';
 describe('buildEmptyStackGuidance (SMI-5896 Wave 3 Step 2)', () => {
     it('returns a non-empty string', () => {
         const guidance = buildEmptyStackGuidance();
@@ -25,4 +26,23 @@ describe('buildEmptyStackGuidance (SMI-5896 Wave 3 Step 2)', () => {
         expect(buildEmptyStackGuidance()).toBe(buildEmptyStackGuidance());
     });
 });
+describe('getRecommendAutoDetectedFooterText (SMI-5893 Wave 7 Step 2)', () => {
+    it('returns a non-empty string', () => {
+        const text = getRecommendAutoDetectedFooterText();
+        expect(typeof text).toBe('string');
+        expect(text.length).toBeGreaterThan(0);
+    });
+    it('describes detection generically instead of naming a single hardcoded path or overclaiming multi-client scope', () => {
+        // PR #2375 review follow-up: this text must not name one hardcoded
+        // client path (the original bug), but must also not claim "all
+        // clients" — each surface (CLI, MCP) actually scans exactly one
+        // client per call, never a union across clients.
+        const text = getRecommendAutoDetectedFooterText();
+        expect(text.toLowerCase()).not.toContain('~/.claude/skills');
+        expect(text.toLowerCase()).not.toContain('all clients');
+    });
+    it('is deterministic (identical wording every call) so CLI and MCP never drift apart', () => {
+        expect(getRecommendAutoDetectedFooterText()).toBe(getRecommendAutoDetectedFooterText());
+    });
+});
 //# sourceMappingURL=recommend-guard.test.js.map

package/dist/src/services/recommend-guard.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"recommend-guard.test.js","sourceRoot":"","sources":["../../../src/services/recommend-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAE9D,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"recommend-guard.test.js","sourceRoot":"","sources":["../../../src/services/recommend-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,MAAM,sBAAsB,CAAA;AAElG,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,IAAI,GAAG,kCAAkC,EAAE,CAAA;QACjD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8GAA8G,EAAE,GAAG,EAAE;QACtH,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,iDAAiD;QACjD,MAAM,IAAI,GAAG,kCAAkC,EAAE,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,kCAAkC,EAAE,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/sync/index.d.ts

@@ -15,4 +15,5 @@ export { buildInventoryPayload } from './inventory-builder.js';
 export { uploadInventory, purgeInventory, InventoryAuthError, InventoryConflictError, InventoryValidationError, InventoryUploadError, } from './inventory-client.js';
 export { pushInventory, maybeAutoPush, type PushInventoryOptions, type MaybeAutoPushOptions, } from './inventory-push.js';
 export { sendAuditDigest, AuditNotifyAuthError, AuditNotifyError, type AuditDigestVerdict, type AuditDigestPushFinding, type AuditDigestPushPayload, type AuditDigestPushResult, } from './audit-notify-client.js';
+export { resolveSessionTier, SessionTierAuthError, SessionTierTransientError, type SessionTierResult, } from './license-status-client.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/sync/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/sync/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,mBAAmB,GACpB,MAAM,yCAAyC,CAAA;AAEhD,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,GACnB,MAAM,0CAA0C,CAAA;AAGjD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGlG,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,KAAK,2BAA2B,EAAE,MAAM,uBAAuB,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,aAAa,EACb,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/sync/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,mBAAmB,GACpB,MAAM,yCAAyC,CAAA;AAEhD,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,GACnB,MAAM,0CAA0C,CAAA;AAGjD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGlG,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,KAAK,2BAA2B,EAAE,MAAM,uBAAuB,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,aAAa,EACb,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAA"}

package/dist/src/sync/index.js

@@ -21,4 +21,6 @@ export { uploadInventory, purgeInventory, InventoryAuthError, InventoryConflictE
 export { pushInventory, maybeAutoPush, } from './inventory-push.js';
 // Continuous-audit email digest push client (SMI-5541 Wave 2C Stage 2)
 export { sendAuditDigest, AuditNotifyAuthError, AuditNotifyError, } from './audit-notify-client.js';
+// Session-token tier self-check client (SMI-6098, umbrella SMI-6085)
+export { resolveSessionTier, SessionTierAuthError, SessionTierTransientError, } from './license-status-client.js';
 //# sourceMappingURL=index.js.map

package/dist/src/sync/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sync/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAe;AACf,OAAO,EACL,oBAAoB,EAIpB,mBAAmB,GACpB,MAAM,yCAAyC,CAAA;AAEhD,OAAO,EACL,qBAAqB,GAItB,MAAM,0CAA0C,CAAA;AAEjD,mBAAmB;AACnB,OAAO,EAAE,UAAU,EAAwD,MAAM,iBAAiB,CAAA;AAElG,qBAAqB;AACrB,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAG5B,MAAM,4BAA4B,CAAA;AAEnC,sDAAsD;AACtD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,GAM1B,MAAM,sBAAsB,CAAA;AAE7B,kEAAkE;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAoC,MAAM,uBAAuB,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,aAAa,EACb,aAAa,GAGd,MAAM,qBAAqB,CAAA;AAE5B,uEAAuE;AACvE,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GAKjB,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sync/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAe;AACf,OAAO,EACL,oBAAoB,EAIpB,mBAAmB,GACpB,MAAM,yCAAyC,CAAA;AAEhD,OAAO,EACL,qBAAqB,GAItB,MAAM,0CAA0C,CAAA;AAEjD,mBAAmB;AACnB,OAAO,EAAE,UAAU,EAAwD,MAAM,iBAAiB,CAAA;AAElG,qBAAqB;AACrB,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAG5B,MAAM,4BAA4B,CAAA;AAEnC,sDAAsD;AACtD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,GAM1B,MAAM,sBAAsB,CAAA;AAE7B,kEAAkE;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAoC,MAAM,uBAAuB,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,aAAa,EACb,aAAa,GAGd,MAAM,qBAAqB,CAAA;AAE5B,uEAAuE;AACvE,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GAKjB,MAAM,0BAA0B,CAAA;AAEjC,qEAAqE;AACrE,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,GAE1B,MAAM,4BAA4B,CAAA"}

package/dist/src/sync/license-status-client.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Session-token tier self-check client (SMI-6098, umbrella SMI-6085).
+ *
+ * SMI-1953 fixed the MCP server's live tier resolution for a personal
+ * `SKILLSMITH_API_KEY`, but a user authenticated only via the standard
+ * `skillsmith login` device-session (no separately-configured API key) was
+ * never covered — the MCP license middleware always fell back to `community`
+ * regardless of real entitlement. This client authenticates with the stored
+ * device-login session (proactively refreshing via `resolveAccessToken`) and
+ * calls the `license-status` edge function with the session token, mirroring
+ * `inventory-client.ts` / `audit-notify-client.ts`.
+ *
+ * @module @skillsmith/core/sync/license-status-client
+ */
+/**
+ * No usable device session — none stored, or a refresh attempt failed. This
+ * is a real, definitive "not authenticated this way" (same class as a
+ * missing/bad API key): callers should fall back to community, cached at
+ * the middleware's normal definitive TTL.
+ */
+export declare class SessionTierAuthError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A transport or server failure that is NOT a definitive tier signal —
+ * network error, timeout, an HTTP 5xx/429 from `license-status`, or an
+ * unparseable/unexpected response shape. Callers MUST treat this as
+ * transient (retry soon / serve a stale cached value), never collapse it
+ * into "community" — a real paying customer must not be downgraded for the
+ * full cache TTL just because the tier check itself glitched.
+ */
+export declare class SessionTierTransientError extends Error {
+    constructor(message: string);
+}
+/** Mirrors `license-status`'s `data` response shape. */
+export interface SessionTierResult {
+    authenticated: boolean;
+    /** Raw tier string from the server; validate against the known enum at the call site. */
+    tier?: string;
+    rateLimit?: number;
+    userId?: string;
+}
+/**
+ * Resolve the caller's real subscription tier via the device-login session.
+ *
+ * `authenticated: false` in the returned result is itself a DEFINITIVE
+ * signal (the server verified the JWT and found no session), distinct from
+ * the thrown errors below, which mean the check couldn't be completed at
+ * all.
+ *
+ * @throws {SessionTierAuthError} No stored session, or the proactive refresh failed.
+ * @throws {SessionTierTransientError} Network error, HTTP 429/5xx, or an
+ *   unparseable/unexpected response — not a definitive tier signal.
+ */
+export declare function resolveSessionTier(): Promise<SessionTierResult>;
+//# sourceMappingURL=license-status-client.d.ts.map

package/dist/src/sync/license-status-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-status-client.d.ts","sourceRoot":"","sources":["../../../src/sync/license-status-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAeH;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,SAA6D;CAIjF;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAA;IACtB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CA8DrE"}

package/dist/src/sync/license-status-client.js

@@ -0,0 +1,118 @@
+/**
+ * Session-token tier self-check client (SMI-6098, umbrella SMI-6085).
+ *
+ * SMI-1953 fixed the MCP server's live tier resolution for a personal
+ * `SKILLSMITH_API_KEY`, but a user authenticated only via the standard
+ * `skillsmith login` device-session (no separately-configured API key) was
+ * never covered — the MCP license middleware always fell back to `community`
+ * regardless of real entitlement. This client authenticates with the stored
+ * device-login session (proactively refreshing via `resolveAccessToken`) and
+ * calls the `license-status` edge function with the session token, mirroring
+ * `inventory-client.ts` / `audit-notify-client.ts`.
+ *
+ * @module @skillsmith/core/sync/license-status-client
+ */
+import { resolveAccessToken as resolveSessionToken } from './access-token.js';
+import { DEFAULT_BASE_URL, PRODUCTION_ANON_KEY } from '../api/utils.js';
+/**
+ * Timeout for the `license-status` request. Matches `license.tier.ts`'s
+ * `LICENSE_STATUS_TIMEOUT_MS` (the API-key resolver's own precedent) — a
+ * stalled connection here must not block `getLicenseInfo()` indefinitely.
+ */
+const LICENSE_STATUS_TIMEOUT_MS = 5000;
+/** The tier values a genuine `authenticated: true` response can carry. */
+const KNOWN_TIERS = new Set(['community', 'individual', 'team', 'enterprise']);
+/**
+ * No usable device session — none stored, or a refresh attempt failed. This
+ * is a real, definitive "not authenticated this way" (same class as a
+ * missing/bad API key): callers should fall back to community, cached at
+ * the middleware's normal definitive TTL.
+ */
+export class SessionTierAuthError extends Error {
+    constructor(message = 'Not authenticated. Run `skillsmith login` and try again.') {
+        super(message);
+        this.name = 'SessionTierAuthError';
+    }
+}
+/**
+ * A transport or server failure that is NOT a definitive tier signal —
+ * network error, timeout, an HTTP 5xx/429 from `license-status`, or an
+ * unparseable/unexpected response shape. Callers MUST treat this as
+ * transient (retry soon / serve a stale cached value), never collapse it
+ * into "community" — a real paying customer must not be downgraded for the
+ * full cache TTL just because the tier check itself glitched.
+ */
+export class SessionTierTransientError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionTierTransientError';
+    }
+}
+/**
+ * Resolve the caller's real subscription tier via the device-login session.
+ *
+ * `authenticated: false` in the returned result is itself a DEFINITIVE
+ * signal (the server verified the JWT and found no session), distinct from
+ * the thrown errors below, which mean the check couldn't be completed at
+ * all.
+ *
+ * @throws {SessionTierAuthError} No stored session, or the proactive refresh failed.
+ * @throws {SessionTierTransientError} Network error, HTTP 429/5xx, or an
+ *   unparseable/unexpected response — not a definitive tier signal.
+ */
+export async function resolveSessionTier() {
+    const accessToken = await resolveSessionToken(() => new SessionTierAuthError());
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), LICENSE_STATUS_TIMEOUT_MS);
+    let res;
+    try {
+        try {
+            res = await fetch(`${DEFAULT_BASE_URL}/license-status`, {
+                method: 'GET',
+                headers: {
+                    apikey: PRODUCTION_ANON_KEY,
+                    Authorization: `Bearer ${accessToken}`,
+                },
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            const detail = controller.signal.aborted
+                ? 'timeout'
+                : error instanceof Error
+                    ? error.message
+                    : String(error);
+            throw new SessionTierTransientError(`license-status request failed: ${detail}`);
+        }
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+    // license-status's own abuse rate limit (429), or a server error — neither
+    // is a stable tier signal (mirrors createTierResolver's API-key handling).
+    if (res.status === 429 || res.status >= 500) {
+        throw new SessionTierTransientError(`license-status returned HTTP ${res.status}`);
+    }
+    let body;
+    try {
+        body = (await res.json());
+    }
+    catch {
+        throw new SessionTierTransientError('license-status returned an unreadable body');
+    }
+    const data = body?.data;
+    if (!res.ok || !data || typeof data.authenticated !== 'boolean') {
+        throw new SessionTierTransientError(`license-status returned an unexpected response (status ${res.status})`);
+    }
+    // A genuine `authenticated: true` response must carry a recognized tier.
+    // Without this, a malformed/buggy response (authenticated:true, no tier,
+    // or a garbage tier string) would fall through the middleware's "no tier"
+    // branch and get silently cached as a DEFINITIVE community result — the
+    // exact anti-pattern the server side already guards against, mirrored
+    // here for defense-in-depth.
+    if (data.authenticated === true && !KNOWN_TIERS.has(data.tier ?? '')) {
+        throw new SessionTierTransientError(`license-status returned authenticated:true with an unrecognized tier: ${String(data.tier)}`);
+    }
+    return data;
+}
+//# sourceMappingURL=license-status-client.js.map