@skillsmith/core 0.11.7 → 0.12.0

package/dist/src/security/scanner/typosquat.d.ts

@@ -64,6 +64,16 @@ export type { TyposquatEnforcementMode };
  * cross-boundary-import constraint.
  */
 export declare const BRAND_ALIASES: Readonly<Record<string, string>>;
+/**
+ * A small, curated "claims official status" affix list. Deliberately narrow —
+ * benign functional affixes (`mcp`, `tools`, `community`, `helper`, ...)
+ * simply aren't in this list, so they never trigger this check.
+ *
+ * SMI-6033 Wave 1 (Gap 6): exported (was module-private) so the decoy/
+ * misdirection detector (`SecurityScanner.decoy.ts`, Wave 4) can reuse the
+ * same curated affix corpus rather than duplicating it.
+ */
+export declare const AUTHORITY_CLAIMING_AFFIXES: ReadonlySet<string>;
 /**
  * Standard iterative-DP Levenshtein edit distance (insertion/deletion/
  * substitution). Inputs here are short skill-name strings, so an O(n*m) table

package/dist/src/security/scanner/typosquat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typosquat.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/typosquat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAG3E,YAAY,EAAE,wBAAwB,EAAE,CAAA;AAMxC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO1D,CAAA;AAmDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAyBhE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,eAAe,EAAE,CAgEnB;AAMD;gFACgF;AAChF,eAAO,MAAM,kCAAkC,EAAE,wBAAiC,CAAA;AAElF,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAC7C,IAAI,CAAC,EAAE,wBAAwB,GAC9B,wBAAwB,CAE1B;AAID;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,eAAe,EAAE,EAC3B,IAAI,GAAE,wBAA6D,GAClE,eAAe,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,IAAI,GAAE,wBAA6D,GAClE,eAAe,EAAE,CAEnB"}
+{"version":3,"file":"typosquat.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/typosquat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAG3E,YAAY,EAAE,wBAAwB,EAAE,CAAA;AAMxC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO1D,CAAA;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAKzD,CAAA;AAmCF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAyBhE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,eAAe,EAAE,CAgEnB;AAMD;gFACgF;AAChF,eAAO,MAAM,kCAAkC,EAAE,wBAAiC,CAAA;AAElF,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAC7C,IAAI,CAAC,EAAE,wBAAwB,GAC9B,wBAAwB,CAE1B;AAID;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,eAAe,EAAE,EAC3B,IAAI,GAAE,wBAA6D,GAClE,eAAe,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,IAAI,GAAE,wBAA6D,GAClE,eAAe,EAAE,CAEnB"}

package/dist/src/security/scanner/typosquat.js

@@ -80,8 +80,12 @@ export const BRAND_ALIASES = {
  * A small, curated "claims official status" affix list. Deliberately narrow —
  * benign functional affixes (`mcp`, `tools`, `community`, `helper`, ...)
  * simply aren't in this list, so they never trigger this check.
+ *
+ * SMI-6033 Wave 1 (Gap 6): exported (was module-private) so the decoy/
+ * misdirection detector (`SecurityScanner.decoy.ts`, Wave 4) can reuse the
+ * same curated affix corpus rather than duplicating it.
  */
-const AUTHORITY_CLAIMING_AFFIXES = new Set([
+export const AUTHORITY_CLAIMING_AFFIXES = new Set([
     'official',
     'verified',
     'authentic',

package/dist/src/security/scanner/typosquat.js.map

@@ -1 +1 @@
-{"version":3,"file":"typosquat.js","sourceRoot":"","sources":["../../../../src/security/scanner/typosquat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAIrD,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,yBAAyB;CACtC,CAAA;AAED,+EAA+E;AAC/E,qDAAqD;AACrD,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,UAAU;IACV,WAAW;IACX,SAAS;CACV,CAAC,CAAA;AAEF;;2EAE2E;AAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAA;AAE1C,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAElC,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;AAChE,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,GAAG;SACP,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS,EAAE,CAAS;IACtD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAA;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAA;IACrB,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAE3B,IAAI,OAAO,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAA;IACzC,IAAI,OAAO,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW;YAC3B,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,YAAY;YAChC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe;aACtC,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,cAAmC;IAEnC,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;IAClD,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IAEpD,6EAA6E;IAC7E,qEAAqE;IACrE,sEAAsE;IACtE,2EAA2E;IAC3E,kEAAkE;IAClE,+DAA+D;IAC/D,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,IAAI,eAAe,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,qFAAqF,SAAS,qCAAqC;gBAC5I,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,wCAAwC;aACnD,CAAC,CAAA;YACF,MAAK;QACP,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,MAAM,GAAG,gCAAgC;gBAAE,SAAQ;YACjE,sDAAsD;YACtD,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,wBAAwB;gBAAE,SAAQ;YAC5F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;YAChE,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,wBAAwB,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,kCAAkC,QAAQ,6CAA6C,SAAS,KAAK;oBAC9G,QAAQ,EAAE,aAAa;oBACvB,QAAQ,EAAE,uBAAuB;iBAClC,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAA;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;IAChG,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,IAAI,aAAa,IAAI,iBAAiB,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,6FAA6F;YACtG,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,2BAA2B;SACtC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;gFACgF;AAChF,MAAM,CAAC,MAAM,kCAAkC,GAA6B,MAAM,CAAA;AAElF,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAC7C,IAA+B;IAE/B,OAAO,IAAI,IAAI,kCAAkC,CAAA;AACnD,CAAC;AAED,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA2B,EAC3B,OAAiC,kCAAkC;IAEnE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,CAAA;IAC7B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9B,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACzF,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,aAAqB,EACrB,cAAmC,EACnC,OAAiC,kCAAkC;IAEnE,OAAO,6BAA6B,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;AAC1F,CAAC"}
+{"version":3,"file":"typosquat.js","sourceRoot":"","sources":["../../../../src/security/scanner/typosquat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAIrD,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,yBAAyB;CACtC,CAAA;AAED,+EAA+E;AAC/E,qDAAqD;AACrD,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IACrE,UAAU;IACV,UAAU;IACV,WAAW;IACX,SAAS;CACV,CAAC,CAAA;AAEF;;2EAE2E;AAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAA;AAE1C,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAElC,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;AAChE,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,GAAG;SACP,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS,EAAE,CAAS;IACtD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAA;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAA;IACrB,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAE3B,IAAI,OAAO,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAA;IACzC,IAAI,OAAO,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW;YAC3B,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,YAAY;YAChC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe;aACtC,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,cAAmC;IAEnC,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;IAClD,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IAEpD,6EAA6E;IAC7E,qEAAqE;IACrE,sEAAsE;IACtE,2EAA2E;IAC3E,kEAAkE;IAClE,+DAA+D;IAC/D,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,IAAI,eAAe,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,qFAAqF,SAAS,qCAAqC;gBAC5I,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,wCAAwC;aACnD,CAAC,CAAA;YACF,MAAK;QACP,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,MAAM,GAAG,gCAAgC;gBAAE,SAAQ;YACjE,sDAAsD;YACtD,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,wBAAwB;gBAAE,SAAQ;YAC5F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;YAChE,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,wBAAwB,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,kCAAkC,QAAQ,6CAA6C,SAAS,KAAK;oBAC9G,QAAQ,EAAE,aAAa;oBACvB,QAAQ,EAAE,uBAAuB;iBAClC,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAA;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;IAChG,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,IAAI,aAAa,IAAI,iBAAiB,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,6FAA6F;YACtG,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,2BAA2B;SACtC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;gFACgF;AAChF,MAAM,CAAC,MAAM,kCAAkC,GAA6B,MAAM,CAAA;AAElF,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAC7C,IAA+B;IAE/B,OAAO,IAAI,IAAI,kCAAkC,CAAA;AACnD,CAAC;AAED,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA2B,EAC3B,OAAiC,kCAAkC;IAEnE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,CAAA;IAC7B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9B,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACzF,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,aAAqB,EACrB,cAAmC,EACnC,OAAiC,kCAAkC;IAEnE,OAAO,6BAA6B,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;AAC1F,CAAC"}

package/dist/src/security/scanner/weights.d.ts

@@ -3,13 +3,22 @@
  *
  * Weight constants for risk score calculation.
  */
-import type { SecuritySeverity } from './types.js';
+import type { SecurityFindingType, SecuritySeverity } from './types.js';
 /**
  * Severity weights for risk score calculation
  */
 export declare const SEVERITY_WEIGHTS: Record<SecuritySeverity, number>;
 /**
- * Category weights for risk score calculation
+ * Category weights for risk score calculation.
+ *
+ * SMI-6033 Wave 2 gap-closing pass: typed against `SecurityFindingType`
+ * (was `Record<string, number>`) so a future new finding type that ships
+ * without a weight entry here is a TypeScript compile error, not a silent
+ * runtime `?? 1.0` fallback in SecurityScanner.helpers.ts's
+ * `calculateRiskScore` — the exact class of gap
+ * scripts/tests/indexer/parity.test.ts's new consolidated core<->edge
+ * coverage test (SMI-6033 Wave 2) was added to catch on the edge side; this
+ * closes the equivalent hole on the core side, one layer earlier.
  */
-export declare const CATEGORY_WEIGHTS: Record<string, number>;
+export declare const CATEGORY_WEIGHTS: Record<SecurityFindingType, number>;
 //# sourceMappingURL=weights.d.ts.map

package/dist/src/security/scanner/weights.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"weights.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/weights.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAK7D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA4BnD,CAAA"}
+{"version":3,"file":"weights.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/weights.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAEvE;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAK7D,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAoEhE,CAAA"}

package/dist/src/security/scanner/weights.js

@@ -13,7 +13,16 @@ export const SEVERITY_WEIGHTS = {
     critical: 50,
 };
 /**
- * Category weights for risk score calculation
+ * Category weights for risk score calculation.
+ *
+ * SMI-6033 Wave 2 gap-closing pass: typed against `SecurityFindingType`
+ * (was `Record<string, number>`) so a future new finding type that ships
+ * without a weight entry here is a TypeScript compile error, not a silent
+ * runtime `?? 1.0` fallback in SecurityScanner.helpers.ts's
+ * `calculateRiskScore` — the exact class of gap
+ * scripts/tests/indexer/parity.test.ts's new consolidated core<->edge
+ * coverage test (SMI-6033 Wave 2) was added to catch on the edge side; this
+ * closes the equivalent hole on the core side, one layer earlier.
  */
 export const CATEGORY_WEIGHTS = {
     jailbreak: 2.0,
@@ -43,5 +52,45 @@ export const CATEGORY_WEIGHTS = {
     // comfortably under the riskThreshold: 40 quarantine cutoff on its own. See the
     // stacked-risk test in SecurityScanner.scoring.test.ts.
     typosquat: 1.2,
+    // SMI-6033 Wave 2 (Gap 5/Gap 3): top-tier weight matching code_execution/
+    // obfuscated_directive — the SAME single weight is used for both the
+    // critical (standalone-quarantining) and medium (advisory, co-signal-
+    // eligible) forms of each type; severity alone (SEVERITY_WEIGHTS 50 vs 15)
+    // does the two-tier split, exactly as scanChmodFetchCompound's own
+    // privilege_escalation compound signal already does with ONE weight
+    // (1.9/0.11) across its high/low severities. Paired with the 0.40
+    // coefficient in calculateRiskScore: a single CRITICAL finding reaches
+    // exactly the 40 quarantine threshold on its own (50 * 2.0 * 1.0 = 100 ->
+    // capped 100 -> * 0.40 = 40); a single MEDIUM finding contributes 12
+    // (15 * 2.0 * 1.0 = 30 -> * 0.40 = 12) — well under threshold alone.
+    gatekeeper_bypass: 2.0,
+    archive_evasion: 2.0,
+    // SMI-6033 Wave 2 (Gap 4): same top-tier weight as gatekeeper_bypass/
+    // archive_evasion, for the same reason — a paste-host URL that is the
+    // TARGET of a fetch command reaches exactly the 40 quarantine threshold
+    // standalone (50 * 2.0 * 1.0 = 100 -> capped 100 -> * 0.40 = 40), while a
+    // paste-host URL that is merely linked never reaches this detector at all
+    // (see SecurityScanner.paste-host.ts) and stays covered by the existing
+    // url:medium finding instead.
+    paste_host_fetch: 2.0,
+    // SMI-6033 Wave 2 (Gap 2): the sensitive_path/typosquat tier (1.2/0.04 —
+    // NOT the 2.0/0.40 tier every other Wave 2 detector above uses). This
+    // detector's wrapper finding is deliberately advisory-only: the escalation
+    // Gap 2 achieves comes for free from the decoded content's OWN findings
+    // (e.g. a decoded `curl|bash` natively trips code_execution at ITS OWN
+    // top-tier weight), not from encoded_payload itself. A single medium,
+    // high-confidence finding scores 15 * 1.2 * 1.0 = 18 -> * 0.04 = 0.72
+    // (rounds to ~1); a saturated breakdown (capped at 100) contributes 4 —
+    // comfortably under the riskThreshold: 40 quarantine cutoff on its own.
+    encoded_payload: 1.2,
+    // SMI-6033 Wave 4 (Gap 6): same advisory tier as typosquat/encoded_payload/
+    // sensitive_path (1.2/0.04) — NOT the 2.0/0.40 top tier gatekeeper_bypass/
+    // archive_evasion/paste_host_fetch use, since this finding type must never
+    // be standalone-critical (plan §9: "N/A — never standalone... Approximate
+    // NL heuristic by construction; co-signal required"). A single medium,
+    // high-confidence finding scores 15 * 1.2 * 1.0 = 18 -> * 0.04 = 0.72
+    // (rounds to ~1); a saturated breakdown (capped at 100) contributes 4 —
+    // comfortably under the riskThreshold: 40 quarantine cutoff on its own.
+    decoy_misdirection: 1.2,
 };
 //# sourceMappingURL=weights.js.map

package/dist/src/security/scanner/weights.js.map

@@ -1 +1 @@
-{"version":3,"file":"weights.js","sourceRoot":"","sources":["../../../../src/security/scanner/weights.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;CACb,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,SAAS,EAAE,GAAG;IACd,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,iBAAiB,EAAE,GAAG;IACtB,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,GAAG,EAAE,GAAG;IACR,UAAU,EAAE,GAAG,EAAE,iDAAiD;IAClE,IAAI,EAAE,GAAG,EAAE,uCAAuC;IAClD,GAAG,EAAE,GAAG,EAAE,8CAA8C;IACxD,8EAA8E;IAC9E,iFAAiF;IACjF,kFAAkF;IAClF,kEAAkE;IAClE,cAAc,EAAE,GAAG;IACnB,oBAAoB,EAAE,GAAG;IACzB,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,+DAA+D;IAC/D,+EAA+E;IAC/E,gFAAgF;IAChF,0EAA0E;IAC1E,gFAAgF;IAChF,wDAAwD;IACxD,SAAS,EAAE,GAAG;CACf,CAAA"}
+{"version":3,"file":"weights.js","sourceRoot":"","sources":["../../../../src/security/scanner/weights.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;CACb,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE,SAAS,EAAE,GAAG;IACd,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,iBAAiB,EAAE,GAAG;IACtB,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,GAAG,EAAE,GAAG;IACR,UAAU,EAAE,GAAG,EAAE,iDAAiD;IAClE,IAAI,EAAE,GAAG,EAAE,uCAAuC;IAClD,GAAG,EAAE,GAAG,EAAE,8CAA8C;IACxD,8EAA8E;IAC9E,iFAAiF;IACjF,kFAAkF;IAClF,kEAAkE;IAClE,cAAc,EAAE,GAAG;IACnB,oBAAoB,EAAE,GAAG;IACzB,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,+DAA+D;IAC/D,+EAA+E;IAC/E,gFAAgF;IAChF,0EAA0E;IAC1E,gFAAgF;IAChF,wDAAwD;IACxD,SAAS,EAAE,GAAG;IACd,0EAA0E;IAC1E,qEAAqE;IACrE,sEAAsE;IACtE,2EAA2E;IAC3E,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,qEAAqE;IACrE,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,GAAG;IACpB,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,8BAA8B;IAC9B,gBAAgB,EAAE,GAAG;IACrB,yEAAyE;IACzE,sEAAsE;IACtE,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,eAAe,EAAE,GAAG;IACpB,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,kBAAkB,EAAE,GAAG;CACxB,CAAA"}

package/dist/src/services/agent-pack/prompt-source.js

@@ -155,7 +155,7 @@ export const PAYWALL_TRIGGERS = [
     {
         id: 'T2',
         title: 'T2 - quota forecast (to Individual)',
-        body: 'When usage is on track to exhaust the free 1,000-call monthly quota, you may note the forecast ("at this pace you reach the cap in about K days") and mention Individual\'s 10,000 calls. Use this sparingly; a quota nag reads as a tax.',
+        body: 'When usage is on track to exhaust the free 100-call monthly quota, you may note the forecast ("at this pace you reach the cap in about K days") and mention Individual\'s 1,000 calls. Use this sparingly; a quota nag reads as a tax.',
     },
     {
         id: 'T4',

package/dist/src/services/agent-pack/prompt-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-source.js","sourceRoot":"","sources":["../../../../src/services/agent-pack/prompt-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,gMAAgM;IAChM,kYAAkY;IAClY,qUAAqU;CACtU,CAAA;AAED,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,kYAAkY;IAClY,wMAAwM;IACxM,2JAA2J;CAC5J,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,yCAAyC;QAChD,IAAI,EAAE,sUAAsU;KAC7U;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wDAAwD;QAC/D,IAAI,EAAE,qRAAqR;KAC5R;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,wPAAwP;KAC/P;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,8BAA8B;QACrC,IAAI,EAAE,sTAAsT;KAC7T;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE,4PAA4P;KACnQ;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,ieAAie;KACxe;CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAA6B;IAC5C;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE;YACJ,uFAAuF;YACvF,oIAAoI;YACpI,sNAAsN;YACtN,6GAA6G;YAC7G,qJAAqJ;SACtJ,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,CAAC;KAC7E;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE;YACJ,2GAA2G;YAC3G,kKAAkK;YAClK,uNAAuN;YACvN,qGAAqG;YACrG,mIAAmI;SACpI,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE;YACL,uBAAuB;YACvB,wBAAwB;YACxB,wBAAwB;YACxB,YAAY;SACb;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE;YACJ,oDAAoD;YACpD,2GAA2G;YAC3G,8HAA8H;YAC9H,yJAAyJ;YACzJ,oIAAoI;SACrI,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE;YACL,QAAQ;YACR,WAAW;YACX,gBAAgB;YAChB,eAAe;YACf,aAAa;YACb,eAAe;SAChB;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,qTAAqT;QAC3T,KAAK,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;KACrC;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,+SAA+S;QACrT,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,6YAA6Y;QACnZ,KAAK,EAAE,EAAE;KACV;CACF,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,qOAAqO;IACrO,iQAAiQ;IACjQ,6QAA6Q;CAC9Q,CAAA;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,uCAAuC;QAC9C,IAAI,EAAE,sTAAsT;KAC7T;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,2OAA2O;KAClP;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,uQAAuQ;KAC9Q;CACF,CAAA;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,mTAAmT;IACnT,sJAAsJ;IACtJ,sZAAsZ;CACvZ,CAAA;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,2EAA2E;IAC3E,0HAA0H;IAC1H,wGAAwG;IACxG,iFAAiF;IACjF,qFAAqF;CACtF,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,8PAA8P;CAC/P,CAAA;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,uBAAuB;IACvB,2EAA2E;IAC3E,6DAA6D;IAC7D,EAAE;IACF,gCAAgC;IAChC,6BAA6B;IAC7B,EAAE;IACF,iCAAiC;IACjC,6CAA6C;IAC7C,uCAAuC;IACvC,mDAAmD;IACnD,uCAAuC;IACvC,0CAA0C;CAC3C,CAAA;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,+LAA+L,CAAA;AAEjM,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAC3B,kbAAkb,CAAA"}
+{"version":3,"file":"prompt-source.js","sourceRoot":"","sources":["../../../../src/services/agent-pack/prompt-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,gMAAgM;IAChM,kYAAkY;IAClY,qUAAqU;CACtU,CAAA;AAED,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,kYAAkY;IAClY,wMAAwM;IACxM,2JAA2J;CAC5J,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,yCAAyC;QAChD,IAAI,EAAE,sUAAsU;KAC7U;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wDAAwD;QAC/D,IAAI,EAAE,qRAAqR;KAC5R;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,wPAAwP;KAC/P;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,8BAA8B;QACrC,IAAI,EAAE,sTAAsT;KAC7T;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE,4PAA4P;KACnQ;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,ieAAie;KACxe;CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAA6B;IAC5C;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE;YACJ,uFAAuF;YACvF,oIAAoI;YACpI,sNAAsN;YACtN,6GAA6G;YAC7G,qJAAqJ;SACtJ,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,CAAC;KAC7E;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE;YACJ,2GAA2G;YAC3G,kKAAkK;YAClK,uNAAuN;YACvN,qGAAqG;YACrG,mIAAmI;SACpI,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE;YACL,uBAAuB;YACvB,wBAAwB;YACxB,wBAAwB;YACxB,YAAY;SACb;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE;YACJ,oDAAoD;YACpD,2GAA2G;YAC3G,8HAA8H;YAC9H,yJAAyJ;YACzJ,oIAAoI;SACrI,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE;YACL,QAAQ;YACR,WAAW;YACX,gBAAgB;YAChB,eAAe;YACf,aAAa;YACb,eAAe;SAChB;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,qTAAqT;QAC3T,KAAK,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;KACrC;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,+SAA+S;QACrT,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,6YAA6Y;QACnZ,KAAK,EAAE,EAAE;KACV;CACF,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,qOAAqO;IACrO,iQAAiQ;IACjQ,6QAA6Q;CAC9Q,CAAA;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,uCAAuC;QAC9C,IAAI,EAAE,sTAAsT;KAC7T;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,qCAAqC;QAC5C,IAAI,EAAE,wOAAwO;KAC/O;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,uQAAuQ;KAC9Q;CACF,CAAA;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,mTAAmT;IACnT,sJAAsJ;IACtJ,sZAAsZ;CACvZ,CAAA;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,2EAA2E;IAC3E,0HAA0H;IAC1H,wGAAwG;IACxG,iFAAiF;IACjF,qFAAqF;CACtF,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,8PAA8P;CAC/P,CAAA;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,uBAAuB;IACvB,2EAA2E;IAC3E,6DAA6D;IAC7D,EAAE;IACF,gCAAgC;IAChC,6BAA6B;IAC7B,EAAE;IACF,iCAAiC;IACjC,6CAA6C;IAC7C,uCAAuC;IACvC,mDAAmD;IACnD,uCAAuC;IACvC,0CAA0C;CAC3C,CAAA;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,+LAA+L,CAAA;AAEjM,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAC3B,kbAAkb,CAAA"}

package/dist/src/services/bundled-sibling-scan.d.ts

@@ -4,7 +4,8 @@
  *
  * Walks an installed skill's bundle directory and scans its sibling bundled
  * files (`.mcp.json`, `.claude/settings*.json`, `package.json` lifecycle hooks,
- * `config.json`, `scripts/*.sh` + top-level `*.sh`) so `skill_rescan` can
+ * `config.json`, and executable-code files under `scripts/`/`src/`/`bin/`
+ * plus the skill's top level) so `skill_rescan` can
  * quarantine a skill whose MALICIOUS sibling — not its `SKILL.md` — carries the
  * threat (CVE-2025-59536 hook execution, `curl|bash` postinstall, a
  * remote-fetch-execute install script).
@@ -35,13 +36,35 @@
  * INHERITED DETECTION GAPS (FN, tracked SMI-5424): bare-interpreter hook
  * payloads (`node evil.js`, `python evil.py`, `bun`/`deno`), `&&`/`;`-chained
  * fetch-then-exec, `npx`, and JSON `\uXXXX`-escaped commands inside raw-scanned
- * structured files are NOT detected. `.js`/`.py`/`.mjs`/`.ts` payload files and
- * nested/non-`scripts/` `.sh` are a Phase-3 follow-up (recursive bundle walk).
+ * structured files are NOT detected.
+ *
+ * SMI-6033 Wave 2 (Gap 8) CLOSED PART OF THE PHASE-3 TODO: the glob is no
+ * longer `.sh`-only and no longer `scripts/`-only. It now covers every
+ * {@link EXECUTABLE_CODE_EXTENSIONS} file at the skill's top level and as a
+ * DIRECT child of `scripts/`, `src/` or `bin/` — the same SCOPE, RANKING and
+ * COUNT cap the indexer applies registry-side (`scripts/indexer/
+ * skill-processor.security.tree.ts`'s `MAX_EXTENDED_SIBLING_FILES = 20`), so
+ * a skill scanned locally and the same skill scanned in the registry select
+ * the same candidate FILES. The per-file BYTE cap is deliberately NOT
+ * unified: {@link MAX_SIBLING_FILE_BYTES} (512 KB) here vs the indexer's
+ * `MAX_SIBLING_CONTENT_BYTES` (256 KB, `skill-processor.security.ts`) — a
+ * pre-existing divergence this wave did not introduce and did not reconcile
+ * (adversarial review, 2026-08-16). A file between 256 KB and 512 KB is
+ * therefore scanned locally but `size_cap`-dropped registry-side; harmless
+ * (fail-open, surfaced via `scan_coverage_incomplete`/`skippedOversize`, never
+ * silent) but worth knowing before assuming the two verdicts always agree.
+ * Still deliberately shallow: a fully recursive bundle walk remains out of
+ * scope.
+ *
  * COUNT-CAP DECOY-PADDING (FN): the fixed bundled files are cap-exempt, but the
- * `.sh` glob is capped — an author can name the malicious script to sort last
- * and pad `scripts/` with cap-many benign decoys so it lands in `droppedForCount`
- * and is never scanned. This is surfaced (never a silent drop) but not blocked;
- * a cumulative-resource bound is a Phase-3 follow-up.
+ * executable-code glob is capped — an author can name the malicious script to
+ * rank last and pad the scanned directories with cap-many benign decoys so it
+ * lands in `droppedForCount` and is never scanned. Wave 2's four-tier ranking
+ * (SKILL.md-referenced, then entry-point-named, then shallow, then
+ * lexicographic) raises the bar — to land past the cap the payload must also
+ * be unreferenced from SKILL.md and not entry-point-named, which cuts against
+ * it actually being executed — but does not close the gap. Surfaced (never a
+ * silent drop), not blocked; a cumulative-resource bound is a follow-up.
  *
  * config.json IS scanned here (only doc-class siblings are skipped), whereas the
  * Phase-1 validate helper (validate-bundled-scan.ts) also skips `config` — rescan
@@ -49,16 +72,47 @@
  */
 import type { SecurityFinding } from '../security/scanner/types.js';
 import type { SecurityScanner } from '../security/index.js';
-/** Max `.sh` glob files scanned per skill (fixed bundled files are exempt). */
-export declare const MAX_SIBLING_SH_FILES = 50;
+/**
+ * Operational-code extensions scanned by the glob (SMI-6033 Wave 2, Gap 8).
+ *
+ * Deliberately duplicated from `scripts/indexer/skill-processor.security.tree.ts`
+ * rather than shared: that module lives in the Node/Deno indexer trees, which
+ * cannot import `@skillsmith/core` (git-crypt boundary + Deno bundling — see
+ * that file's twin header). `parity.test.ts` pins the two lists equal, so the
+ * duplication cannot drift silently.
+ */
+export declare const EXECUTABLE_CODE_EXTENSIONS: readonly [".sh", ".py", ".js", ".mjs", ".cjs", ".ts", ".rb", ".php", ".ps1", ".pl"];
+/** Directories globbed for operational code, relative to the skill directory. */
+export declare const EXTENDED_SCAN_DIRS: readonly ["scripts", "src", "bin"];
+/** Basenames (extension-stripped, lowercased) that rank as entry points (tier 2). */
+export declare const ENTRY_POINT_BASENAMES: Set<string>;
+/**
+ * Max globbed operational-code files scanned per skill (fixed bundled files
+ * are exempt).
+ *
+ * SMI-6033 Wave 2 (Gap 8): narrowed from the previous `.sh`-only cap of 50 to
+ * 20, matching `MAX_EXTENDED_SIBLING_FILES` on the indexer side. Intentional
+ * behaviour change: the glob now covers ten extensions across four directories
+ * instead of one extension across two, so an uncapped-at-50 policy would fetch
+ * and scan far more per skill than before. 20 ranked files is the plan's
+ * chosen budget on BOTH surfaces, and keeping the two equal is what makes the
+ * local and registry verdicts comparable.
+ */
+export declare const MAX_EXTENDED_SIBLING_FILES = 20;
 /** Per-file byte ceiling; larger siblings are skipped (recorded, never silent). */
 export declare const MAX_SIBLING_FILE_BYTES: number;
 /** Tunable caps for {@link scanLocalBundleSiblings}. */
 export interface BundledSiblingScanOptions {
-    /** Override {@link MAX_SIBLING_SH_FILES}. */
-    maxShFiles?: number;
+    /** Override {@link MAX_EXTENDED_SIBLING_FILES}. */
+    maxExtendedFiles?: number;
     /** Override {@link MAX_SIBLING_FILE_BYTES}. */
     maxBytesPerFile?: number;
+    /**
+     * The skill's own `SKILL.md` text, used only for the tier-1 ranking check
+     * ("is this file referenced by path from SKILL.md?"). Omitted, tier 1 simply
+     * never matches and ranking falls through to tiers 2-4 — never an error.
+     */
+    primaryContent?: string;
 }
 /**
  * Result of scanning a skill bundle's sibling files. All path fields are
@@ -83,19 +137,39 @@ export interface BundledSiblingScanResult {
      * mis-attribute a quarantine's surfaced score.
      */
     maxSiblingRiskScore: number;
-    /** `.sh` files beyond the count cap — surfaced, never silently dropped. */
+    /** Executable-code files beyond the count cap — surfaced, never silently dropped. */
     droppedForCount: string[];
     /** Files skipped for exceeding the byte cap. */
     skippedOversize: string[];
     /** Symlink siblings resolving outside the skill dir (SMI-4287 guard). */
     skippedSymlinkEscape: string[];
 }
+/**
+ * SMI-6033 Wave 2 (Gap 8): rank operational-code candidates so the count cap
+ * keeps the files most likely to actually be executed.
+ *
+ * Four tiers, in order: (1) referenced literally by path from `SKILL.md`,
+ * (2) entry-point basename, (3) shallower path first, (4) lexicographic.
+ *
+ * DETERMINISM is a required property, not incidental: the same candidate set
+ * must always produce the same order. Tier 4 is a TOTAL order over unique
+ * relative paths, so the result never depends on `Array.prototype.sort` being
+ * stable; and the compare uses raw `<`/`>` rather than `localeCompare`, whose
+ * collation is ICU/locale dependent. This mirrors the identical comparator in
+ * the indexer's `enumerateExtendedSiblingTargets`, so the two surfaces select
+ * the same files in the same order from the same bundle.
+ *
+ * NOTE: ranking does NOT defeat decoy-padding — see the module header. The
+ * dropped names are always surfaced in `droppedForCount` (no silent drop).
+ */
+export declare function rankExecutableCodeFiles(relPaths: readonly string[], primaryContent: string): string[];
 /**
  * Scan a skill bundle's sibling files and return the structured result.
  *
  * Fixed {@link BUNDLED_SCAN_FILES} are always scanned (exempt from the count
  * cap, so a decoy-padding attack on `scripts/` cannot push the primary hook /
- * postinstall surface out of the scan window). The `.sh` glob is capped and
+ * postinstall surface out of the scan window). The executable-code glob is
+ * ranked then capped, and
  * any overflow is reported in `droppedForCount`.
  *
  * Doc-class siblings (`README.md`, `examples.md`) are intentionally NOT scanned:

package/dist/src/services/bundled-sibling-scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundled-sibling-scan.d.ts","sourceRoot":"","sources":["../../../src/services/bundled-sibling-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAc,MAAM,8BAA8B,CAAA;AAI/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAQ3D,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,QAAa,CAAA;AAEhD,wDAAwD;AACxD,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,2EAA2E;IAC3E,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAA;IACnB,2DAA2D;IAC3D,kBAAkB,EAAE,eAAe,EAAE,CAAA;IACrC,2CAA2C;IAC3C,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,uCAAuC;IACvC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAA;IAC3B,2EAA2E;IAC3E,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,gDAAgD;IAChD,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,yEAAyE;IACzE,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAgCD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,wBAAwB,CAAC,CAuEnC"}
+{"version":3,"file":"bundled-sibling-scan.d.ts","sourceRoot":"","sources":["../../../src/services/bundled-sibling-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAc,MAAM,8BAA8B,CAAA;AAI/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAQ3D;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,qFAW7B,CAAA;AAEV,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,oCAAqC,CAAA;AAEpE,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,aAOhC,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAA;AAC5C,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,QAAa,CAAA;AAEhD,wDAAwD;AACxD,MAAM,WAAW,yBAAyB;IACxC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,2EAA2E;IAC3E,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAA;IACnB,2DAA2D;IAC3D,kBAAkB,EAAE,eAAe,EAAE,CAAA;IACrC,2CAA2C;IAC3C,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,uCAAuC;IACvC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAA;IAC3B,qFAAqF;IACrF,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,gDAAgD;IAChD,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,yEAAyE;IACzE,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAqCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,cAAc,EAAE,MAAM,GACrB,MAAM,EAAE,CAcV;AA8BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,wBAAwB,CAAC,CAqFnC"}

package/dist/src/services/bundled-sibling-scan.js

@@ -4,7 +4,8 @@
  *
  * Walks an installed skill's bundle directory and scans its sibling bundled
  * files (`.mcp.json`, `.claude/settings*.json`, `package.json` lifecycle hooks,
- * `config.json`, `scripts/*.sh` + top-level `*.sh`) so `skill_rescan` can
+ * `config.json`, and executable-code files under `scripts/`/`src/`/`bin/`
+ * plus the skill's top level) so `skill_rescan` can
  * quarantine a skill whose MALICIOUS sibling — not its `SKILL.md` — carries the
  * threat (CVE-2025-59536 hook execution, `curl|bash` postinstall, a
  * remote-fetch-execute install script).
@@ -35,13 +36,35 @@
  * INHERITED DETECTION GAPS (FN, tracked SMI-5424): bare-interpreter hook
  * payloads (`node evil.js`, `python evil.py`, `bun`/`deno`), `&&`/`;`-chained
  * fetch-then-exec, `npx`, and JSON `\uXXXX`-escaped commands inside raw-scanned
- * structured files are NOT detected. `.js`/`.py`/`.mjs`/`.ts` payload files and
- * nested/non-`scripts/` `.sh` are a Phase-3 follow-up (recursive bundle walk).
+ * structured files are NOT detected.
+ *
+ * SMI-6033 Wave 2 (Gap 8) CLOSED PART OF THE PHASE-3 TODO: the glob is no
+ * longer `.sh`-only and no longer `scripts/`-only. It now covers every
+ * {@link EXECUTABLE_CODE_EXTENSIONS} file at the skill's top level and as a
+ * DIRECT child of `scripts/`, `src/` or `bin/` — the same SCOPE, RANKING and
+ * COUNT cap the indexer applies registry-side (`scripts/indexer/
+ * skill-processor.security.tree.ts`'s `MAX_EXTENDED_SIBLING_FILES = 20`), so
+ * a skill scanned locally and the same skill scanned in the registry select
+ * the same candidate FILES. The per-file BYTE cap is deliberately NOT
+ * unified: {@link MAX_SIBLING_FILE_BYTES} (512 KB) here vs the indexer's
+ * `MAX_SIBLING_CONTENT_BYTES` (256 KB, `skill-processor.security.ts`) — a
+ * pre-existing divergence this wave did not introduce and did not reconcile
+ * (adversarial review, 2026-08-16). A file between 256 KB and 512 KB is
+ * therefore scanned locally but `size_cap`-dropped registry-side; harmless
+ * (fail-open, surfaced via `scan_coverage_incomplete`/`skippedOversize`, never
+ * silent) but worth knowing before assuming the two verdicts always agree.
+ * Still deliberately shallow: a fully recursive bundle walk remains out of
+ * scope.
+ *
  * COUNT-CAP DECOY-PADDING (FN): the fixed bundled files are cap-exempt, but the
- * `.sh` glob is capped — an author can name the malicious script to sort last
- * and pad `scripts/` with cap-many benign decoys so it lands in `droppedForCount`
- * and is never scanned. This is surfaced (never a silent drop) but not blocked;
- * a cumulative-resource bound is a Phase-3 follow-up.
+ * executable-code glob is capped — an author can name the malicious script to
+ * rank last and pad the scanned directories with cap-many benign decoys so it
+ * lands in `droppedForCount` and is never scanned. Wave 2's four-tier ranking
+ * (SKILL.md-referenced, then entry-point-named, then shallow, then
+ * lexicographic) raises the bar — to land past the cap the payload must also
+ * be unreferenced from SKILL.md and not entry-point-named, which cuts against
+ * it actually being executed — but does not close the gap. Surfaced (never a
+ * silent drop), not blocked; a cumulative-resource bound is a follow-up.
  *
  * config.json IS scanned here (only doc-class siblings are skipped), whereas the
  * Phase-1 validate helper (validate-bundled-scan.ts) also skips `config` — rescan
@@ -50,46 +73,158 @@
 import { join } from 'path';
 import { safeFs, resolveSafeRealpath } from '../sources/LocalFilesystemAdapter.helpers.js';
 import { BUNDLED_SCAN_FILES, classifyBundledFile, extractPackageJsonLifecycleScripts, } from './skill-installation.policy.js';
-/** Max `.sh` glob files scanned per skill (fixed bundled files are exempt). */
-export const MAX_SIBLING_SH_FILES = 50;
+/**
+ * Operational-code extensions scanned by the glob (SMI-6033 Wave 2, Gap 8).
+ *
+ * Deliberately duplicated from `scripts/indexer/skill-processor.security.tree.ts`
+ * rather than shared: that module lives in the Node/Deno indexer trees, which
+ * cannot import `@skillsmith/core` (git-crypt boundary + Deno bundling — see
+ * that file's twin header). `parity.test.ts` pins the two lists equal, so the
+ * duplication cannot drift silently.
+ */
+export const EXECUTABLE_CODE_EXTENSIONS = [
+    '.sh',
+    '.py',
+    '.js',
+    '.mjs',
+    '.cjs',
+    '.ts',
+    '.rb',
+    '.php',
+    '.ps1',
+    '.pl',
+];
+/** Directories globbed for operational code, relative to the skill directory. */
+export const EXTENDED_SCAN_DIRS = ['scripts', 'src', 'bin'];
+/** Basenames (extension-stripped, lowercased) that rank as entry points (tier 2). */
+export const ENTRY_POINT_BASENAMES = new Set([
+    'install',
+    'setup',
+    'main',
+    'index',
+    'run',
+    'postinstall',
+]);
+/**
+ * Max globbed operational-code files scanned per skill (fixed bundled files
+ * are exempt).
+ *
+ * SMI-6033 Wave 2 (Gap 8): narrowed from the previous `.sh`-only cap of 50 to
+ * 20, matching `MAX_EXTENDED_SIBLING_FILES` on the indexer side. Intentional
+ * behaviour change: the glob now covers ten extensions across four directories
+ * instead of one extension across two, so an uncapped-at-50 policy would fetch
+ * and scan far more per skill than before. 20 ranked files is the plan's
+ * chosen budget on BOTH surfaces, and keeping the two equal is what makes the
+ * local and registry verdicts comparable.
+ */
+export const MAX_EXTENDED_SIBLING_FILES = 20;
 /** Per-file byte ceiling; larger siblings are skipped (recorded, never silent). */
 export const MAX_SIBLING_FILE_BYTES = 512 * 1024;
-/** A finding is a quarantine driver only if it is a direct execution threat. */
-function isExecutionThreat(finding) {
-    return finding.type === 'code_execution' || finding.type === 'obfuscated_directive';
+/**
+ * A finding is a quarantine driver only if it is a direct execution threat.
+ *
+ * SMI-6033 Wave 2 (Gap 8) fix (adversarial review finding, 2026-08-16): for a
+ * file from the NEW extended (`scripts/`/`src/`/`bin/`/top-level executable
+ * code) surface, `code_execution` only drives rejection at `critical`
+ * severity — a bare `medium` code_execution finding (the severity
+ * `scanCodeExecution` assigns a lone `curl | bash` by design) must NOT
+ * standalone-quarantine an install script that uses the same idiom as
+ * rustup/Homebrew/nvm/bun. The original fixed `BUNDLED_SCAN_FILES` keep the
+ * unchanged, severity-agnostic rule — those are config/doc formats where a
+ * literal `curl | bash` string is inherently anomalous, not a real installer.
+ * `obfuscated_directive` remains rejectable at any severity on BOTH surfaces
+ * — it is delta-gated against a real decode step and has no legitimate
+ * installer-script shape.
+ */
+function isExecutionThreat(finding, isExtended) {
+    if (finding.type === 'obfuscated_directive')
+        return true;
+    if (finding.type !== 'code_execution')
+        return false;
+    return isExtended ? finding.severity === 'critical' : true;
+}
+/** True when `path`'s final extension is in {@link EXECUTABLE_CODE_EXTENSIONS}. */
+function hasExecutableCodeExtension(path) {
+    const lower = path.toLowerCase();
+    return EXECUTABLE_CODE_EXTENSIONS.some((ext) => lower.endsWith(ext));
+}
+/** Lowercased basename with its final extension removed (`Setup.SH` -> `setup`). */
+function entryPointKey(path) {
+    const base = (path.split('/').pop() ?? path).toLowerCase();
+    const dotIdx = base.lastIndexOf('.');
+    return dotIdx > 0 ? base.slice(0, dotIdx) : base;
 }
 /**
- * Collect `*.sh` candidates: top-level then `scripts/`, regular files only
- * (symlinked scripts are not followed by the glob — Phase 3). Sorted so the cap
- * and `droppedForCount` are reproducible rather than dependent on readdir order.
- * NOTE: sorting does NOT defeat decoy-padding — an author can name the malicious
- * file to sort last; that residual FN is documented in the module header and the
+ * SMI-6033 Wave 2 (Gap 8): rank operational-code candidates so the count cap
+ * keeps the files most likely to actually be executed.
+ *
+ * Four tiers, in order: (1) referenced literally by path from `SKILL.md`,
+ * (2) entry-point basename, (3) shallower path first, (4) lexicographic.
+ *
+ * DETERMINISM is a required property, not incidental: the same candidate set
+ * must always produce the same order. Tier 4 is a TOTAL order over unique
+ * relative paths, so the result never depends on `Array.prototype.sort` being
+ * stable; and the compare uses raw `<`/`>` rather than `localeCompare`, whose
+ * collation is ICU/locale dependent. This mirrors the identical comparator in
+ * the indexer's `enumerateExtendedSiblingTargets`, so the two surfaces select
+ * the same files in the same order from the same bundle.
+ *
+ * NOTE: ranking does NOT defeat decoy-padding — see the module header. The
  * dropped names are always surfaced in `droppedForCount` (no silent drop).
  */
-async function collectShFiles(skillDir) {
+export function rankExecutableCodeFiles(relPaths, primaryContent) {
+    return [...relPaths].sort((a, b) => {
+        const aRef = primaryContent.includes(a);
+        const bRef = primaryContent.includes(b);
+        if (aRef !== bRef)
+            return aRef ? -1 : 1;
+        const aEntry = ENTRY_POINT_BASENAMES.has(entryPointKey(a));
+        const bEntry = ENTRY_POINT_BASENAMES.has(entryPointKey(b));
+        if (aEntry !== bEntry)
+            return aEntry ? -1 : 1;
+        const aDepth = a.split('/').length;
+        const bDepth = b.split('/').length;
+        if (aDepth !== bDepth)
+            return aDepth - bDepth;
+        if (a === b)
+            return 0;
+        return a < b ? -1 : 1;
+    });
+}
+/**
+ * Collect executable-code candidates: the skill's top level, then direct
+ * children of `scripts/`, `src/` and `bin/` — regular files only (symlinked
+ * scripts are not followed by the glob). Ranked by
+ * {@link rankExecutableCodeFiles} so the cap and `droppedForCount` are
+ * reproducible rather than dependent on readdir order.
+ */
+async function collectExecutableCodeFiles(skillDir, primaryContent) {
     const out = [];
     const top = await safeFs.readdir(skillDir);
     if (top.ok) {
         for (const e of top.value) {
-            if (e.isFile() && e.name.endsWith('.sh'))
+            if (e.isFile() && hasExecutableCodeExtension(e.name))
                 out.push(e.name);
         }
     }
-    const scripts = await safeFs.readdir(join(skillDir, 'scripts'));
-    if (scripts.ok) {
-        for (const e of scripts.value) {
-            if (e.isFile() && e.name.endsWith('.sh'))
-                out.push(join('scripts', e.name));
+    for (const sub of EXTENDED_SCAN_DIRS) {
+        const entries = await safeFs.readdir(join(skillDir, sub));
+        if (!entries.ok)
+            continue;
+        for (const e of entries.value) {
+            if (e.isFile() && hasExecutableCodeExtension(e.name))
+                out.push(`${sub}/${e.name}`);
         }
     }
-    return out.sort();
+    return rankExecutableCodeFiles(out, primaryContent);
 }
 /**
  * Scan a skill bundle's sibling files and return the structured result.
  *
  * Fixed {@link BUNDLED_SCAN_FILES} are always scanned (exempt from the count
  * cap, so a decoy-padding attack on `scripts/` cannot push the primary hook /
- * postinstall surface out of the scan window). The `.sh` glob is capped and
+ * postinstall surface out of the scan window). The executable-code glob is
+ * ranked then capped, and
  * any overflow is reported in `droppedForCount`.
  *
  * Doc-class siblings (`README.md`, `examples.md`) are intentionally NOT scanned:
@@ -102,7 +237,7 @@ async function collectShFiles(skillDir) {
  * @param opts     optional caps
  */
 export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
-    const maxShFiles = opts.maxShFiles ?? MAX_SIBLING_SH_FILES;
+    const maxExtendedFiles = opts.maxExtendedFiles ?? MAX_EXTENDED_SIBLING_FILES;
     const maxBytes = opts.maxBytesPerFile ?? MAX_SIBLING_FILE_BYTES;
     const result = {
         findings: [],
@@ -115,10 +250,15 @@ export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
         skippedOversize: [],
         skippedSymlinkEscape: [],
     };
-    const shFiles = await collectShFiles(skillDir);
-    result.droppedForCount = shFiles.slice(maxShFiles);
-    // Fixed files first (cap-exempt), then the capped, sorted .sh glob.
-    const candidates = [...BUNDLED_SCAN_FILES, ...shFiles.slice(0, maxShFiles)];
+    const codeFiles = await collectExecutableCodeFiles(skillDir, opts.primaryContent ?? '');
+    result.droppedForCount = codeFiles.slice(maxExtendedFiles);
+    const extendedCandidates = codeFiles.slice(0, maxExtendedFiles);
+    // Fixed files first (cap-exempt), then the capped, ranked executable-code glob.
+    const candidates = [...BUNDLED_SCAN_FILES, ...extendedCandidates];
+    // SMI-6033 Wave 2 (Gap 8) fix: which candidates came from the new extended
+    // surface, so isExecutionThreat can apply its narrower rule to them without
+    // touching BUNDLED_SCAN_FILES's unchanged behavior at all.
+    const extendedCandidateSet = new Set(extendedCandidates);
     for (const rel of candidates) {
         const fileClass = classifyBundledFile(rel);
         if (fileClass === 'doc')
@@ -150,12 +290,16 @@ export async function scanLocalBundleSiblings(skillDir, scanner, opts = {}) {
                 continue; // no install-time hooks — nothing risky
             textToScan = lifecycle;
         }
-        const report = scanner.scan(`${skillDir}/${rel}`, textToScan);
+        // SMI-6033 Wave 2 (Gap 8) fix: extended candidates are real source files,
+        // not markdown — see SecurityScanner.scan()'s own header for why the
+        // markdown-only indented-code-block heuristic must be disabled for them.
+        // BUNDLED_SCAN_FILES keep the default (isMarkdown=true) unchanged.
+        const report = scanner.scan(`${skillDir}/${rel}`, textToScan, false, !extendedCandidateSet.has(rel));
         result.scannedFiles.push(rel);
         // Fresh objects (no mutation of the report's findings array) tagged with the file.
         const tagged = report.findings.map((f) => ({ ...f, location: rel }));
         result.findings.push(...tagged);
-        const drivers = tagged.filter(isExecutionThreat);
+        const drivers = tagged.filter((f) => isExecutionThreat(f, extendedCandidateSet.has(rel)));
         if (drivers.length > 0) {
             result.rejectable = true;
             result.rejectableFindings.push(...drivers);