@skillsmith/core 0.4.14 → 0.4.16

package/dist/src/versioning/change-classifier.test.js

@@ -0,0 +1,275 @@
+/**
+ * @fileoverview Tests for change-classifier.ts
+ * @see SMI-skill-version-tracking Wave 2
+ */
+import { describe, it, expect } from 'vitest';
+import { classifyChange } from './change-classifier.js';
+// ============================================================================
+// Fixtures
+// ============================================================================
+const BASE_SKILL = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+
+## Configuration
+
+Set env vars.
+`;
+const WITH_HEADING_REMOVED = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+`;
+const WITH_HEADING_ADDED = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+
+## Configuration
+
+Set env vars.
+
+## Examples
+
+Here are examples.
+`;
+const WITH_BODY_EDIT_ONLY = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+This is an UPDATED test skill.
+
+## Usage
+
+Run with /test command.
+
+## Configuration
+
+Set your env vars here.
+`;
+const WITH_SEMVER_MAJOR = `---
+name: test-skill
+version: 2.0.0
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+
+## Configuration
+
+Set env vars.
+`;
+const WITH_SEMVER_MINOR = `---
+name: test-skill
+version: 1.1.0
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+
+## Configuration
+
+Set env vars.
+`;
+const WITH_SEMVER_PATCH = `---
+name: test-skill
+version: 1.0.1
+---
+
+## Overview
+
+This is a test skill.
+
+## Usage
+
+Run with /test.
+
+## Configuration
+
+Set env vars.
+`;
+const WITH_DEPENDENCY_REMOVED = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+A test skill with dependencies.
+
+## Dependencies
+
+- dep-b
+
+## Usage
+
+Run with /test.
+`;
+const WITH_DEPENDENCY_ADDED = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+A test skill with dependencies.
+
+## Dependencies
+
+- dep-a
+- dep-b
+- dep-c
+
+## Usage
+
+Run with /test.
+`;
+const BASE_WITH_DEPS = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+A test skill with dependencies.
+
+## Dependencies
+
+- dep-a
+- dep-b
+
+## Usage
+
+Run with /test.
+`;
+// ============================================================================
+// Tests
+// ============================================================================
+describe('classifyChange', () => {
+    describe('heading removal → major', () => {
+        it('returns major when a heading is removed', () => {
+            expect(classifyChange(BASE_SKILL, WITH_HEADING_REMOVED)).toBe('major');
+        });
+        it('returns major when multiple headings are removed', () => {
+            const twoHeadingsGone = `---
+name: test-skill
+version: 1.0.0
+---
+
+## Overview
+
+Only this remains.
+`;
+            expect(classifyChange(BASE_SKILL, twoHeadingsGone)).toBe('major');
+        });
+    });
+    describe('heading addition only → minor', () => {
+        it('returns minor when a heading is added with no removals', () => {
+            expect(classifyChange(BASE_SKILL, WITH_HEADING_ADDED)).toBe('minor');
+        });
+    });
+    describe('body edits only → patch', () => {
+        it('returns patch when only body text changes', () => {
+            expect(classifyChange(BASE_SKILL, WITH_BODY_EDIT_ONLY)).toBe('patch');
+        });
+        it('returns patch when content is identical', () => {
+            expect(classifyChange(BASE_SKILL, BASE_SKILL)).toBe('patch');
+        });
+    });
+    describe('semver in frontmatter overrides heuristic', () => {
+        it('returns major when semver major bumps', () => {
+            // semver overrides even if headings look like minor
+            expect(classifyChange(BASE_SKILL, WITH_SEMVER_MAJOR)).toBe('major');
+        });
+        it('returns minor when semver minor bumps', () => {
+            expect(classifyChange(BASE_SKILL, WITH_SEMVER_MINOR)).toBe('minor');
+        });
+        it('returns patch when semver patch bumps', () => {
+            expect(classifyChange(BASE_SKILL, WITH_SEMVER_PATCH)).toBe('patch');
+        });
+        it('semver override applies even when headings were removed (semver wins)', () => {
+            // new content: semver 2.0.0 + heading removed — semver says major, heuristic also says major
+            const newContent = `---
+name: test-skill
+version: 2.0.0
+---
+
+## Overview
+
+Only overview.
+`;
+            expect(classifyChange(BASE_SKILL, newContent)).toBe('major');
+        });
+    });
+    describe('risk score delta > 20 → major', () => {
+        it('upgrades to major when risk delta exceeds 20', () => {
+            // No heading changes but risk jumped significantly
+            expect(classifyChange(BASE_SKILL, WITH_BODY_EDIT_ONLY, 10, 35)).toBe('major');
+        });
+        it('does not upgrade when risk delta is exactly 20', () => {
+            expect(classifyChange(BASE_SKILL, WITH_BODY_EDIT_ONLY, 10, 30)).toBe('patch');
+        });
+        it('does not upgrade when risk decreases', () => {
+            expect(classifyChange(BASE_SKILL, WITH_BODY_EDIT_ONLY, 50, 20)).toBe('patch');
+        });
+    });
+    describe('dependency changes', () => {
+        it('returns major when a dependency is removed', () => {
+            // No semver change, no heading change, but dep removed
+            const base = BASE_WITH_DEPS;
+            expect(classifyChange(base, WITH_DEPENDENCY_REMOVED)).toBe('major');
+        });
+        it('returns minor when a dependency is added', () => {
+            const base = BASE_WITH_DEPS;
+            expect(classifyChange(base, WITH_DEPENDENCY_ADDED)).toBe('minor');
+        });
+    });
+    describe('error / unknown content', () => {
+        it('returns patch for empty content (no headings or semver)', () => {
+            expect(classifyChange('', '')).toBe('patch');
+        });
+        it('returns unknown when classifier throws (simulated by invalid regex-triggering content)', () => {
+            // Pass valid strings — classifier should not throw, returns patch
+            expect(classifyChange('hello', 'world')).toBe('patch');
+        });
+    });
+});
+//# sourceMappingURL=change-classifier.test.js.map

package/dist/src/versioning/change-classifier.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-classifier.test.js","sourceRoot":"","sources":["../../../src/versioning/change-classifier.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAEvD,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;CAgBlB,CAAA;AAED,MAAM,oBAAoB,GAAG;;;;;;;;;;;;CAY5B,CAAA;AAED,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;CAoB1B,CAAA;AAED,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;CAgB3B,CAAA;AAED,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAA;AAED,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAA;AAED,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAA;AAED,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;CAgB/B,CAAA;AAED,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;CAkB7B,CAAA;AAED,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;CAiBtB,CAAA;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,eAAe,GAAG;;;;;;;;CAQ7B,CAAA;YACK,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACzD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,oDAAoD;YACpD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,6FAA6F;YAC7F,MAAM,UAAU,GAAG;;;;;;;;CAQxB,CAAA;YACK,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,mDAAmD;YACnD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,uDAAuD;YACvD,MAAM,IAAI,GAAG,cAAc,CAAA;YAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,IAAI,GAAG,cAAc,CAAA;YAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;YAChG,kEAAkE;YAClE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/versioning/update-risk.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @fileoverview Update risk scorer for skill version upgrades
+ * @module @skillsmith/core/versioning/update-risk
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Produces a RiskLevel and Recommendation for a proposed skill update
+ * based on change severity, risk score delta, local modification status,
+ * trust tier, and changelog availability.
+ *
+ * Scoring table (additive):
+ *   change_type === 'major'      → +30
+ *   riskScoreDelta > 0           → +20
+ *   hasLocalModifications        → +20
+ *   trustTier === 'verified'     → -20
+ *   hasChangelog                 → -10
+ *
+ * Buckets:
+ *   low      0–20   → auto-update
+ *   medium  21–40   → review-then-update
+ *   high    41–60   → manual-review-required
+ *   critical 61+    → manual-review-required
+ */
+export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export type Recommendation = 'auto-update' | 'review-then-update' | 'manual-review-required';
+export interface UpdateRisk {
+    /** Human-readable risk bucket */
+    level: RiskLevel;
+    /** Raw additive risk score (may be negative — clamped to 0 for level mapping) */
+    score: number;
+    /** Suggested action for the caller */
+    recommendation: Recommendation;
+}
+/**
+ * Compute the update risk for a pending skill upgrade.
+ *
+ * @param params.changeType         Semantic change type from classifyChange()
+ * @param params.riskScoreDelta     newRiskScore - oldRiskScore (optional)
+ * @param params.hasLocalModifications  Whether the user has edited the skill
+ * @param params.trustTier          Registry trust tier for the skill
+ * @param params.hasChangelog       Whether the skill includes a changelog entry
+ * @returns UpdateRisk with level, score, and recommendation
+ */
+export declare function computeUpdateRisk(params: {
+    changeType: 'major' | 'minor' | 'patch' | 'unknown';
+    riskScoreDelta?: number;
+    hasLocalModifications: boolean;
+    trustTier: 'verified' | 'community' | 'experimental';
+    hasChangelog: boolean;
+}): UpdateRisk;
+//# sourceMappingURL=update-risk.d.ts.map

package/dist/src/versioning/update-risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-risk.d.ts","sourceRoot":"","sources":["../../../src/versioning/update-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAC9D,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAE5F,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,KAAK,EAAE,SAAS,CAAA;IAChB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAA;IACb,sCAAsC;IACtC,cAAc,EAAE,cAAc,CAAA;CAC/B;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;IACnD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qBAAqB,EAAE,OAAO,CAAA;IAC9B,SAAS,EAAE,UAAU,GAAG,WAAW,GAAG,cAAc,CAAA;IACpD,YAAY,EAAE,OAAO,CAAA;CACtB,GAAG,UAAU,CAeb"}

package/dist/src/versioning/update-risk.js

@@ -0,0 +1,80 @@
+/**
+ * @fileoverview Update risk scorer for skill version upgrades
+ * @module @skillsmith/core/versioning/update-risk
+ * @see SMI-skill-version-tracking Wave 2
+ *
+ * Produces a RiskLevel and Recommendation for a proposed skill update
+ * based on change severity, risk score delta, local modification status,
+ * trust tier, and changelog availability.
+ *
+ * Scoring table (additive):
+ *   change_type === 'major'      → +30
+ *   riskScoreDelta > 0           → +20
+ *   hasLocalModifications        → +20
+ *   trustTier === 'verified'     → -20
+ *   hasChangelog                 → -10
+ *
+ * Buckets:
+ *   low      0–20   → auto-update
+ *   medium  21–40   → review-then-update
+ *   high    41–60   → manual-review-required
+ *   critical 61+    → manual-review-required
+ */
+// ============================================================================
+// Scoring constants
+// ============================================================================
+const SCORE_MAJOR_CHANGE = 30;
+const SCORE_RISK_DELTA_INCREASE = 20;
+const SCORE_LOCAL_MODIFICATIONS = 20;
+const SCORE_VERIFIED_TRUST = -20;
+const SCORE_HAS_CHANGELOG = -10;
+// ============================================================================
+// Public API
+// ============================================================================
+/**
+ * Compute the update risk for a pending skill upgrade.
+ *
+ * @param params.changeType         Semantic change type from classifyChange()
+ * @param params.riskScoreDelta     newRiskScore - oldRiskScore (optional)
+ * @param params.hasLocalModifications  Whether the user has edited the skill
+ * @param params.trustTier          Registry trust tier for the skill
+ * @param params.hasChangelog       Whether the skill includes a changelog entry
+ * @returns UpdateRisk with level, score, and recommendation
+ */
+export function computeUpdateRisk(params) {
+    const { changeType, riskScoreDelta, hasLocalModifications, trustTier, hasChangelog } = params;
+    let score = 0;
+    if (changeType === 'major')
+        score += SCORE_MAJOR_CHANGE;
+    if (typeof riskScoreDelta === 'number' && riskScoreDelta > 0)
+        score += SCORE_RISK_DELTA_INCREASE;
+    if (hasLocalModifications)
+        score += SCORE_LOCAL_MODIFICATIONS;
+    if (trustTier === 'verified')
+        score += SCORE_VERIFIED_TRUST;
+    if (hasChangelog)
+        score += SCORE_HAS_CHANGELOG;
+    const level = scoreToLevel(score);
+    const recommendation = scoreToRecommendation(score);
+    return { level, score, recommendation };
+}
+// ============================================================================
+// Helpers
+// ============================================================================
+function scoreToLevel(score) {
+    if (score <= 20)
+        return 'low';
+    if (score <= 40)
+        return 'medium';
+    if (score <= 60)
+        return 'high';
+    return 'critical';
+}
+function scoreToRecommendation(score) {
+    if (score <= 20)
+        return 'auto-update';
+    if (score <= 50)
+        return 'review-then-update';
+    return 'manual-review-required';
+}
+//# sourceMappingURL=update-risk.js.map

package/dist/src/versioning/update-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-risk.js","sourceRoot":"","sources":["../../../src/versioning/update-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,yBAAyB,GAAG,EAAE,CAAA;AACpC,MAAM,yBAAyB,GAAG,EAAE,CAAA;AACpC,MAAM,oBAAoB,GAAG,CAAC,EAAE,CAAA;AAChC,MAAM,mBAAmB,GAAG,CAAC,EAAE,CAAA;AAE/B,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAMjC;IACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;IAE7F,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,IAAI,UAAU,KAAK,OAAO;QAAE,KAAK,IAAI,kBAAkB,CAAA;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,GAAG,CAAC;QAAE,KAAK,IAAI,yBAAyB,CAAA;IAChG,IAAI,qBAAqB;QAAE,KAAK,IAAI,yBAAyB,CAAA;IAC7D,IAAI,SAAS,KAAK,UAAU;QAAE,KAAK,IAAI,oBAAoB,CAAA;IAC3D,IAAI,YAAY;QAAE,KAAK,IAAI,mBAAmB,CAAA;IAE9C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAEnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAA;AACzC,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAA;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAA;IAC9B,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAA;IACrC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,oBAAoB,CAAA;IAC5C,OAAO,wBAAwB,CAAA;AACjC,CAAC"}

package/dist/src/versioning/update-risk.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @fileoverview Tests for update-risk.ts
+ * @see SMI-skill-version-tracking Wave 2
+ */
+export {};
+//# sourceMappingURL=update-risk.test.d.ts.map

package/dist/src/versioning/update-risk.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-risk.test.d.ts","sourceRoot":"","sources":["../../../src/versioning/update-risk.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/versioning/update-risk.test.js

@@ -0,0 +1,200 @@
+/**
+ * @fileoverview Tests for update-risk.ts
+ * @see SMI-skill-version-tracking Wave 2
+ */
+import { describe, it, expect } from 'vitest';
+import { computeUpdateRisk } from './update-risk.js';
+describe('computeUpdateRisk', () => {
+    describe('score → level mapping', () => {
+        it('returns low for score <= 20', () => {
+            // community, patch, no local mods, no changelog → 0
+            const result = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.level).toBe('low');
+            expect(result.score).toBe(0);
+        });
+        it('returns medium for score 21–40', () => {
+            // major (+30) + verified (-20) + changelog (-10) = 0 → low
+            // Let's try: major (+30) + community (0) + changelog (-10) = 20 → low
+            // major (+30) + community (0) + no changelog = 30 → medium
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.level).toBe('medium');
+            expect(result.score).toBe(30);
+        });
+        it('returns high for score 41–60', () => {
+            // major (30) + local mods (20) + changelog (-10) = 40 → medium
+            // major (30) + local mods (20) = 50 → high
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                hasLocalModifications: true,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.level).toBe('high');
+            expect(result.score).toBe(50);
+        });
+        it('returns critical for score >= 61', () => {
+            // major (30) + risk delta (20) + local mods (20) = 70 → critical
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                riskScoreDelta: 10, // positive → +20
+                hasLocalModifications: true,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.level).toBe('critical');
+            expect(result.score).toBe(70);
+        });
+    });
+    describe('score → recommendation mapping', () => {
+        it('returns auto-update for score <= 20', () => {
+            const result = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.recommendation).toBe('auto-update');
+        });
+        it('returns review-then-update for score 21–50', () => {
+            // major (30), community, no local, no changelog = 30
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.recommendation).toBe('review-then-update');
+        });
+        it('returns manual-review-required for score >= 51', () => {
+            // major (30) + local mods (20) = 50 → review-then-update
+            // major (30) + local mods (20) + risk delta (20) = 70 → manual
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                riskScoreDelta: 5, // positive → +20
+                hasLocalModifications: true,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.recommendation).toBe('manual-review-required');
+        });
+    });
+    describe('individual score factors', () => {
+        it('verified tier reduces score by 20', () => {
+            const withCommunity = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            const withVerified = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'verified',
+                hasChangelog: false,
+            });
+            expect(withVerified.score).toBe(withCommunity.score - 20);
+        });
+        it('changelog reduces score by 10', () => {
+            const withoutChangelog = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            const withChangelog = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: true,
+            });
+            expect(withChangelog.score).toBe(withoutChangelog.score - 10);
+        });
+        it('hasLocalModifications adds 20', () => {
+            const without = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            const with_ = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: true,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(with_.score).toBe(without.score + 20);
+        });
+        it('riskScoreDelta > 0 adds 20', () => {
+            const without = computeUpdateRisk({
+                changeType: 'patch',
+                riskScoreDelta: 0,
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            const with_ = computeUpdateRisk({
+                changeType: 'patch',
+                riskScoreDelta: 1, // positive
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(with_.score).toBe(without.score + 20);
+        });
+        it('negative riskScoreDelta does not add penalty', () => {
+            const result = computeUpdateRisk({
+                changeType: 'patch',
+                riskScoreDelta: -10,
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            // risk delta ≤ 0 should not add the +20 penalty
+            expect(result.score).toBe(0);
+        });
+        it('undefined riskScoreDelta does not add penalty', () => {
+            const result = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'community',
+                hasChangelog: false,
+            });
+            expect(result.score).toBe(0);
+        });
+    });
+    describe('combined scenarios', () => {
+        it('fully safe update: patch + verified + changelog = -30 → low (clamped to 0 effectively)', () => {
+            const result = computeUpdateRisk({
+                changeType: 'patch',
+                hasLocalModifications: false,
+                trustTier: 'verified',
+                hasChangelog: true,
+            });
+            // 0 - 20 - 10 = -30 → level: low (score <= 20)
+            expect(result.level).toBe('low');
+            expect(result.recommendation).toBe('auto-update');
+        });
+        it('worst case scenario produces critical + manual-review-required', () => {
+            const result = computeUpdateRisk({
+                changeType: 'major',
+                riskScoreDelta: 50,
+                hasLocalModifications: true,
+                trustTier: 'experimental',
+                hasChangelog: false,
+            });
+            expect(result.level).toBe('critical');
+            expect(result.recommendation).toBe('manual-review-required');
+        });
+    });
+});
+//# sourceMappingURL=update-risk.test.js.map

package/dist/src/versioning/update-risk.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-risk.test.js","sourceRoot":"","sources":["../../../src/versioning/update-risk.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,oDAAoD;YACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,2DAA2D;YAC3D,sEAAsE;YACtE,2DAA2D;YAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,+DAA+D;YAC/D,2CAA2C;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,IAAI;gBAC3B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,iEAAiE;YACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,EAAE,EAAE,iBAAiB;gBACrC,qBAAqB,EAAE,IAAI;gBAC3B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,qDAAqD;YACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,yDAAyD;YACzD,+DAA+D;YAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,CAAC,EAAE,iBAAiB;gBACpC,qBAAqB,EAAE,IAAI;gBAC3B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,aAAa,GAAG,iBAAiB,CAAC;gBACtC,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,YAAY,GAAG,iBAAiB,CAAC;gBACrC,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,UAAU;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;gBACzC,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,aAAa,GAAG,iBAAiB,CAAC;gBACtC,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;YACF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC;gBAChC,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,KAAK,GAAG,iBAAiB,CAAC;gBAC9B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,IAAI;gBAC3B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC;gBAChC,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,CAAC;gBACjB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,KAAK,GAAG,iBAAiB,CAAC;gBAC9B,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,CAAC,EAAE,WAAW;gBAC9B,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,CAAC,EAAE;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,gDAAgD;YAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;YAChG,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,SAAS,EAAE,UAAU;gBACrB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;YACF,+CAA+C;YAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,MAAM,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,EAAE;gBAClB,qBAAqB,EAAE,IAAI;gBAC3B,SAAS,EAAE,cAAc;gBACzB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACrC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/AuditLogger.edge-cases.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * SMI-2756: Wave 3 — AuditLogger edge-case tests
+ *
+ * Companion file to AuditLogger.test.ts (which exceeds the 500-line limit).
+ * Covers: DB write error propagation, log retention via cleanupOldLogs,
+ * meta-log written after successful cleanup, query date-range filters,
+ * query action-type filter, and export producing valid JSON.
+ */
+export {};
+//# sourceMappingURL=AuditLogger.edge-cases.test.d.ts.map

package/dist/tests/AuditLogger.edge-cases.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogger.edge-cases.test.d.ts","sourceRoot":"","sources":["../../tests/AuditLogger.edge-cases.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}