@skillsmith/core 0.5.3 → 0.5.5

package/dist/src/webhooks/webhook-schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-schemas.d.ts","sourceRoot":"","sources":["../../../src/webhooks/webhook-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;gCAMV,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;gCAQlB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAUpB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;gCAQb,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAQZ,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;gCAMhB,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAMlB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;gCAMpB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASd,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAQZ,CAAA"}
+{"version":3,"file":"webhook-schemas.d.ts","sourceRoot":"","sources":["../../../src/webhooks/webhook-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;GAEG;AACH,eAAO,MAAM,aAAa;;;;iBAMV,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;iBAQlB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;iBAUpB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;iBAQb,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQZ,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;iBAMhB,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMlB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;iBAMpB,CAAA;AAEhB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBASd,CAAA;AAEhB;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQZ,CAAA"}

package/dist/tests/ActivationManager.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * ActivationManager tests (SMI-4290 / closes #598)
+ *
+ * Covers the public API of `@skillsmith/core/activation/ActivationManager`:
+ *   - activateSkill (validation, idempotency, force reinstall, filesystem state)
+ *   - undo (rollback of fresh install, rollback of force reinstall via backup)
+ *   - getUndoHistory / clearUndoHistory
+ *   - Cross-instance persistence via shared `skillsDir`
+ *
+ * Uses real-tmpdir fixtures (no memfs, no msw — per Wave 3 plan).
+ */
+export {};
+//# sourceMappingURL=ActivationManager.test.d.ts.map

package/dist/tests/ActivationManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivationManager.test.d.ts","sourceRoot":"","sources":["../../tests/ActivationManager.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/tests/ActivationManager.test.js

@@ -0,0 +1,218 @@
+/**
+ * ActivationManager tests (SMI-4290 / closes #598)
+ *
+ * Covers the public API of `@skillsmith/core/activation/ActivationManager`:
+ *   - activateSkill (validation, idempotency, force reinstall, filesystem state)
+ *   - undo (rollback of fresh install, rollback of force reinstall via backup)
+ *   - getUndoHistory / clearUndoHistory
+ *   - Cross-instance persistence via shared `skillsDir`
+ *
+ * Uses real-tmpdir fixtures (no memfs, no msw — per Wave 3 plan).
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { tmpdir } from 'os';
+import { ActivationManager } from '../src/activation/ActivationManager.js';
+function makeTmpSkillsDir() {
+    return path.join(tmpdir(), `skillsmith-activation-${Date.now()}-${Math.floor(Math.random() * 1e9)}`);
+}
+async function exists(p) {
+    try {
+        await fs.access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+describe('ActivationManager', () => {
+    let skillsDir;
+    let manager;
+    beforeEach(() => {
+        skillsDir = makeTmpSkillsDir();
+        manager = new ActivationManager(skillsDir);
+    });
+    afterEach(async () => {
+        await fs.rm(skillsDir, { recursive: true, force: true }).catch(() => { });
+    });
+    describe('activateSkill — happy path', () => {
+        it('activates a valid skill, creates the install directory, and returns an undo token', async () => {
+            const result = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(result.success).toBe(true);
+            expect(result.skill_id).toBe('anthropic/commit');
+            expect(result.undo_token).toBeTruthy();
+            expect(result.install_path).toBe(path.join(skillsDir, 'anthropic-commit'));
+            expect(result.activation_time_ms).toBeGreaterThanOrEqual(0);
+            // Filesystem side effects.
+            expect(await exists(result.install_path)).toBe(true);
+            const skillMd = await fs.readFile(path.join(result.install_path, 'SKILL.md'), 'utf-8');
+            expect(skillMd).toContain('anthropic/commit');
+        });
+        it('returns requires_restart: false when hot_reload succeeds', async () => {
+            const result = await manager.activateSkill({
+                skill_id: 'anthropic/commit',
+                hot_reload: true,
+            });
+            expect(result.success).toBe(true);
+            expect(result.requires_restart).toBe(false);
+        });
+    });
+    describe('activateSkill — already installed', () => {
+        it('is idempotent when the skill is already installed and force is false', async () => {
+            const first = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(first.success).toBe(true);
+            const second = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(second.success).toBe(true);
+            expect(second.requires_restart).toBe(false);
+            expect(second.install_path).toBe(first.install_path);
+            // Idempotent path returns no new undo token.
+            expect(second.undo_token).toBeUndefined();
+        });
+        it('creates a timestamped backup on force-reinstall; undo restores the original install from the backup', async () => {
+            const first = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(first.success).toBe(true);
+            // Mark the original install with a sentinel so we can confirm a backup was made.
+            const sentinel = path.join(first.install_path, 'sentinel.txt');
+            await fs.writeFile(sentinel, 'original-install', 'utf-8');
+            const second = await manager.activateSkill({
+                skill_id: 'anthropic/commit',
+                force: true,
+            });
+            expect(second.success).toBe(true);
+            expect(second.undo_token).toBeTruthy();
+            // The fresh install has overwritten the sentinel.
+            expect(await exists(sentinel)).toBe(false);
+            // Sanity: a backup directory exists alongside the install, preserving the
+            // sentinel. This is the pre-undo state created by `createBackup`.
+            const entries = await fs.readdir(skillsDir);
+            const backupDir = entries.find((e) => e.startsWith('anthropic-commit.backup-'));
+            expect(backupDir).toBeTruthy();
+            expect(await exists(path.join(skillsDir, backupDir, 'sentinel.txt'))).toBe(true);
+            // Undo of a force-reinstall RESTORES the original install from the backup
+            // (SMI-4297). The snapshot now carries `backup_path`, so `undo()` renames
+            // the backup back over the install path instead of just deleting it.
+            const undone = await manager.undo(second.undo_token);
+            expect(undone).toBe(true);
+            // The original install path exists with the original sentinel content.
+            expect(await exists(second.install_path)).toBe(true);
+            expect(await exists(sentinel)).toBe(true);
+            const sentinelContent = await fs.readFile(sentinel, 'utf-8');
+            expect(sentinelContent).toBe('original-install');
+            // The backup dir has been consumed (renamed back into place).
+            const afterEntries = await fs.readdir(skillsDir);
+            expect(afterEntries.some((e) => e.startsWith('anthropic-commit.backup-'))).toBe(false);
+        });
+        it('undo of force-reinstall restores the original install from its backup', async () => {
+            const first = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(first.success).toBe(true);
+            // Write an identifying marker in the original install.
+            const marker = path.join(first.install_path, 'marker.txt');
+            await fs.writeFile(marker, 'v1-original', 'utf-8');
+            const second = await manager.activateSkill({
+                skill_id: 'anthropic/commit',
+                force: true,
+            });
+            expect(second.success).toBe(true);
+            expect(second.undo_token).toBeTruthy();
+            // Fresh install has overwritten the marker.
+            expect(await exists(marker)).toBe(false);
+            // Undo restores the v1 marker by moving the backup back.
+            const ok = await manager.undo(second.undo_token);
+            expect(ok).toBe(true);
+            expect(await exists(marker)).toBe(true);
+            expect(await fs.readFile(marker, 'utf-8')).toBe('v1-original');
+        });
+    });
+    describe('activateSkill — validation failures', () => {
+        it('rejects an empty skill_id with a typed validation error', async () => {
+            const result = await manager.activateSkill({ skill_id: '' });
+            expect(result.success).toBe(false);
+            expect(result.error).toMatch(/Validation failed/i);
+            expect(result.requires_restart).toBe(false);
+            expect(result.undo_token).toBeUndefined();
+        });
+        it('rejects a skill_id missing the author/name separator', async () => {
+            const result = await manager.activateSkill({ skill_id: 'just-a-name' });
+            expect(result.success).toBe(false);
+            expect(result.error).toMatch(/format "author\/name"/i);
+        });
+        it('rejects a skill_id containing invalid characters', async () => {
+            const result = await manager.activateSkill({
+                skill_id: 'bad author/bad name',
+            });
+            expect(result.success).toBe(false);
+            expect(result.error).toMatch(/invalid characters/i);
+        });
+        it('skips validation when validate_first is false', async () => {
+            const result = await manager.activateSkill({
+                skill_id: 'anthropic/commit',
+                validate_first: false,
+            });
+            expect(result.success).toBe(true);
+            expect(result.install_path).toBeTruthy();
+        });
+    });
+    describe('undo — fresh install', () => {
+        it('removes the install directory and forgets the token', async () => {
+            const result = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(result.success).toBe(true);
+            expect(await exists(result.install_path)).toBe(true);
+            const undone = await manager.undo(result.undo_token);
+            expect(undone).toBe(true);
+            expect(await exists(result.install_path)).toBe(false);
+            // Undoing a second time with the same token is a no-op (snapshot is gone).
+            const second = await manager.undo(result.undo_token);
+            expect(second).toBe(false);
+        });
+        it('returns false for an unknown undo token', async () => {
+            const undone = await manager.undo('does-not-exist');
+            expect(undone).toBe(false);
+        });
+    });
+    describe('undo history', () => {
+        it('tracks snapshots across activations and can be cleared', async () => {
+            const a = await manager.activateSkill({ skill_id: 'anthropic/commit' });
+            const b = await manager.activateSkill({ skill_id: 'anthropic/review' });
+            expect(a.success).toBe(true);
+            expect(b.success).toBe(true);
+            const history = manager.getUndoHistory();
+            expect(history.length).toBe(2);
+            const tokens = history.map((h) => h.token).sort();
+            expect(tokens).toContain(a.undo_token);
+            expect(tokens).toContain(b.undo_token);
+            manager.clearUndoHistory();
+            expect(manager.getUndoHistory()).toEqual([]);
+            // After clearing history, previously issued tokens are no longer redeemable.
+            const stale = await manager.undo(a.undo_token);
+            expect(stale).toBe(false);
+        });
+    });
+    describe('cross-instance persistence', () => {
+        it('sees activations performed by a separate manager sharing the same skillsDir', async () => {
+            const managerA = new ActivationManager(skillsDir);
+            const activate = await managerA.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(activate.success).toBe(true);
+            // A brand-new manager on the same skillsDir must treat the skill as installed
+            // (idempotent path → success, no undo token).
+            const managerB = new ActivationManager(skillsDir);
+            const second = await managerB.activateSkill({ skill_id: 'anthropic/commit' });
+            expect(second.success).toBe(true);
+            expect(second.undo_token).toBeUndefined();
+            expect(await exists(path.join(skillsDir, 'anthropic-commit'))).toBe(true);
+        });
+    });
+    describe('concurrency', () => {
+        it('activates multiple distinct skills concurrently', async () => {
+            const ids = ['anthropic/commit', 'anthropic/review', 'team/lint'];
+            const results = await Promise.all(ids.map((id) => manager.activateSkill({ skill_id: id })));
+            expect(results.every((r) => r.success)).toBe(true);
+            for (const id of ids) {
+                const dir = path.join(skillsDir, id.replace('/', '-'));
+                expect(await exists(dir)).toBe(true);
+            }
+            expect(manager.getUndoHistory().length).toBe(3);
+        });
+    });
+});
+//# sourceMappingURL=ActivationManager.test.js.map

package/dist/tests/ActivationManager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivationManager.test.js","sourceRoot":"","sources":["../../tests/ActivationManager.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAE1E,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EAAE,EACR,yBAAyB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CACzE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAClB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,SAAiB,CAAA;IACrB,IAAI,OAA0B,CAAA;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,GAAG,gBAAgB,EAAE,CAAA;QAC9B,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;YACjG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAE5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAChD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;YAC1E,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;YAE3D,2BAA2B;YAC3B,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAa,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;YACvF,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBACzC,QAAQ,EAAE,kBAAkB;gBAC5B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEhC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAE5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YACpD,6CAA6C;YAC7C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;YACnH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEhC,iFAAiF;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,EAAE,cAAc,CAAC,CAAA;YAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAA;YAEzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBACzC,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAA;YAEtC,kDAAkD;YAClD,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAE1C,0EAA0E;YAC1E,kEAAkE;YAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAA;YAC/E,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAA;YAC9B,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEjF,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,CAAA;YACrD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEzB,uEAAuE;YACvE,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrD,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzC,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC5D,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAEhD,8DAA8D;YAC9D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAChD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEhC,uDAAuD;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,EAAE,YAAY,CAAC,CAAA;YAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;YAElD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBACzC,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAA;YAEtC,4CAA4C;YAC5C,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAExC,yDAAyD;YACzD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,CAAA;YACjD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrB,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;YAE5D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YAClD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAA;YAEvE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBACzC,QAAQ,EAAE,qBAAqB;aAChC,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBACzC,QAAQ,EAAE,kBAAkB;gBAC5B,cAAc,EAAE,KAAK;aACtB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAErD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,CAAA;YAErD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAEtD,2EAA2E;YAC3E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,CAAA;YACrD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACvE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACvE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAE5B,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAA;YACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;YACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAEtC,OAAO,CAAC,gBAAgB,EAAE,CAAA;YAC1B,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAE5C,6EAA6E;YAC7E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAW,CAAC,CAAA;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;YAC3F,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACjD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC/E,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEnC,8EAA8E;YAC9E,8CAA8C;YAC9C,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAE7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;YACzC,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,GAAG,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAA;YAEjE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAE3F,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;gBACtD,MAAM,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtC,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/LocalFilesystemAdapter.coverage.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * LocalFilesystemAdapter coverage sidecar (SMI-4287)
+ *
+ * Split out of `LocalFilesystemAdapter.test.ts` so that file stays under the
+ * 500-line pre-commit ceiling (see memory feedback:
+ * "File-length enforcement asymmetry" — pre-commit does NOT exempt
+ * `.test.ts` even though `audit:standards` does). Covers symlink
+ * containment, permission handling, loop detection, case-insensitive
+ * normalisation, and frontmatter-tolerance cases introduced by SMI-4287
+ * (GitHub #600, #596).
+ */
+export {};
+//# sourceMappingURL=LocalFilesystemAdapter.coverage.test.d.ts.map

package/dist/tests/LocalFilesystemAdapter.coverage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalFilesystemAdapter.coverage.test.d.ts","sourceRoot":"","sources":["../../tests/LocalFilesystemAdapter.coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/tests/LocalFilesystemAdapter.coverage.test.js

@@ -0,0 +1,314 @@
+/**
+ * LocalFilesystemAdapter coverage sidecar (SMI-4287)
+ *
+ * Split out of `LocalFilesystemAdapter.test.ts` so that file stays under the
+ * 500-line pre-commit ceiling (see memory feedback:
+ * "File-length enforcement asymmetry" — pre-commit does NOT exempt
+ * `.test.ts` even though `audit:standards` does). Covers symlink
+ * containment, permission handling, loop detection, case-insensitive
+ * normalisation, and frontmatter-tolerance cases introduced by SMI-4287
+ * (GitHub #600, #596).
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { LocalFilesystemAdapter } from '../src/sources/LocalFilesystemAdapter.js';
+import { promises as fs, constants as fsConstants } from 'fs';
+import { join } from 'path';
+import { tmpdir, platform } from 'os';
+describe('LocalFilesystemAdapter SMI-4287 coverage', () => {
+    let adapter;
+    let testDir;
+    beforeEach(async () => {
+        testDir = join(tmpdir(), `skillsmith-4287-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+        await fs.mkdir(testDir, { recursive: true });
+        await fs.mkdir(join(testDir, 'skill-one'), { recursive: true });
+        await fs.writeFile(join(testDir, 'skill-one', 'SKILL.md'), '---\nname: Skill One\ndescription: First skill\n---\n# Skill One');
+        await fs.mkdir(join(testDir, 'skill-two'), { recursive: true });
+        await fs.writeFile(join(testDir, 'skill-two', 'SKILL.md'), '---\nname: Skill Two\n---\n# Skill Two');
+        adapter = new LocalFilesystemAdapter({
+            id: 'test-local',
+            name: 'Test Local',
+            type: 'local',
+            baseUrl: 'file://',
+            enabled: true,
+            rootDir: testDir,
+            rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+        });
+        await adapter.initialize();
+    });
+    afterEach(async () => {
+        // Restore any chmod'd directories so rm can clean up.
+        for (const name of ['locked-dir', 'locked-skill']) {
+            const p = join(testDir, name);
+            try {
+                await fs.chmod(p, 0o755);
+            }
+            catch {
+                // ignore
+            }
+        }
+        try {
+            await fs.rm(testDir, { recursive: true, force: true });
+        }
+        catch {
+            // Ignore cleanup errors
+        }
+    });
+    describe('Symlink containment', () => {
+        it('should follow symlinks that stay inside rootDir when enabled', async () => {
+            // Target is a directory _inside_ rootDir, so containment passes without
+            // `allowSymlinksOutsideRoot`. SMI-4319 updates the semantics: a symlink
+            // whose target realpath is already visited is treated as a loop (the
+            // alias does NOT double-surface the same SKILL.md). The scan still
+            // succeeds and the original skills are reported.
+            const target = join(testDir, 'skill-two');
+            const link = join(testDir, 'alias-of-skill-two');
+            try {
+                await fs.symlink(target, link);
+            }
+            catch {
+                return;
+            }
+            const followAdapter = new LocalFilesystemAdapter({
+                id: 'test-follow-internal',
+                name: 'Test Follow Internal',
+                type: 'local',
+                baseUrl: 'file://',
+                enabled: true,
+                rootDir: testDir,
+                followSymlinks: true,
+                rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+            });
+            await followAdapter.initialize();
+            // Post-SMI-4319: aliased directory is de-duplicated via the
+            // visited-realpath set. Only the two canonical skill dirs surface.
+            expect(followAdapter.skillCount).toBe(2);
+            const result = await followAdapter.search({});
+            // The alias traversal emits a `loop` warning (already-visited realpath).
+            // Non-loop warning categories must still be empty.
+            const nonLoop = (result.warnings ?? []).filter((w) => w.code !== 'loop');
+            expect(nonLoop).toEqual([]);
+        });
+        it('should reject symlinks escaping rootDir with a symlink-escape warning', async () => {
+            const externalDir = join(tmpdir(), `external-escape-${Date.now()}`);
+            await fs.mkdir(externalDir, { recursive: true });
+            await fs.writeFile(join(externalDir, 'SKILL.md'), '# Should not index');
+            try {
+                await fs.symlink(externalDir, join(testDir, 'escape-link'));
+            }
+            catch {
+                return;
+            }
+            const escapeAdapter = new LocalFilesystemAdapter({
+                id: 'test-escape',
+                name: 'Test Escape',
+                type: 'local',
+                baseUrl: 'file://',
+                enabled: true,
+                rootDir: testDir,
+                followSymlinks: true,
+                rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+            });
+            await escapeAdapter.initialize();
+            // Escaping symlink must NOT be followed.
+            expect(escapeAdapter.skillCount).toBe(2);
+            const result = await escapeAdapter.search({});
+            const escapeWarnings = (result.warnings ?? []).filter((w) => w.code === 'symlink-escape');
+            expect(escapeWarnings.length).toBeGreaterThan(0);
+            expect(escapeWarnings[0].path).toContain('escape-link');
+            await fs.rm(externalDir, { recursive: true, force: true });
+        });
+        it('should permit escaping symlinks when allowSymlinksOutsideRoot is true', async () => {
+            const externalDir = join(tmpdir(), `external-allow-${Date.now()}`);
+            await fs.mkdir(externalDir, { recursive: true });
+            await fs.writeFile(join(externalDir, 'SKILL.md'), '# Permitted external');
+            try {
+                await fs.symlink(externalDir, join(testDir, 'allowed-link'));
+            }
+            catch {
+                return;
+            }
+            const allowAdapter = new LocalFilesystemAdapter({
+                id: 'test-allow',
+                name: 'Test Allow',
+                type: 'local',
+                baseUrl: 'file://',
+                enabled: true,
+                rootDir: testDir,
+                followSymlinks: true,
+                allowSymlinksOutsideRoot: true,
+                rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+            });
+            await allowAdapter.initialize();
+            expect(allowAdapter.skillCount).toBe(3);
+            await fs.rm(externalDir, { recursive: true, force: true });
+        });
+    });
+    describe('Circular symlinks', () => {
+        it('should emit loop warning for circular symlinks', async () => {
+            const a = join(testDir, 'loop-a');
+            const b = join(testDir, 'loop-b');
+            try {
+                await fs.symlink(b, a);
+                await fs.symlink(a, b);
+            }
+            catch {
+                return;
+            }
+            const loopAdapter = new LocalFilesystemAdapter({
+                id: 'test-loop',
+                name: 'Test Loop',
+                type: 'local',
+                baseUrl: 'file://',
+                enabled: true,
+                rootDir: testDir,
+                followSymlinks: true,
+                rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+            });
+            await loopAdapter.initialize();
+            const result = await loopAdapter.search({});
+            const loopWarnings = (result.warnings ?? []).filter((w) => w.code === 'loop');
+            expect(loopWarnings.length).toBeGreaterThan(0);
+            // Scan must still report the non-symlinked skills.
+            expect(loopAdapter.skillCount).toBe(2);
+        });
+    });
+    describe('Permission handling', () => {
+        it('should surface EACCES as a permission warning and continue scanning', async () => {
+            if (platform() === 'win32')
+                return;
+            const locked = join(testDir, 'locked-dir');
+            await fs.mkdir(locked, { recursive: true });
+            await fs.writeFile(join(locked, 'SKILL.md'), '# Locked skill');
+            await fs.chmod(locked, 0o000);
+            // Skip if root (chmod bypassed).
+            let canRead = false;
+            try {
+                await fs.readdir(locked);
+                canRead = true;
+            }
+            catch {
+                canRead = false;
+            }
+            try {
+                const permAdapter = new LocalFilesystemAdapter({
+                    id: 'test-perm',
+                    name: 'Test Perm',
+                    type: 'local',
+                    baseUrl: 'file://',
+                    enabled: true,
+                    rootDir: testDir,
+                    rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+                });
+                await permAdapter.initialize();
+                const result = await permAdapter.search({});
+                if (canRead) {
+                    // Running as root or elevated — skip assertion path.
+                    return;
+                }
+                expect(permAdapter.skillCount).toBe(2);
+                const permWarnings = (result.warnings ?? []).filter((w) => w.code === 'permission');
+                expect(permWarnings.length).toBeGreaterThan(0);
+                expect(permWarnings[0].path).toContain('locked-dir');
+            }
+            finally {
+                await fs.chmod(locked, 0o755).catch(() => undefined);
+            }
+        });
+        it('should surface typed message for chmod 000 root in checkHealth', async () => {
+            if (platform() === 'win32')
+                return;
+            const lockedRoot = join(testDir, 'locked-root');
+            await fs.mkdir(lockedRoot, { recursive: true });
+            await fs.chmod(lockedRoot, 0o000);
+            try {
+                const lockedAdapter = new LocalFilesystemAdapter({
+                    id: 'locked',
+                    name: 'Locked',
+                    type: 'local',
+                    baseUrl: 'file://',
+                    enabled: true,
+                    rootDir: join(lockedRoot, 'inner'),
+                    rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+                });
+                const health = await lockedAdapter.checkHealth();
+                expect(health.healthy).toBe(false);
+                expect(health.error).toBeTruthy();
+            }
+            finally {
+                await fs.chmod(lockedRoot, 0o755).catch(() => undefined);
+            }
+        });
+        it('should surface typed error for chmod 000 SKILL.md via fetchSkillContent', async () => {
+            if (platform() === 'win32')
+                return;
+            const lockedDir = join(testDir, 'locked-skill');
+            await fs.mkdir(lockedDir, { recursive: true });
+            const skillPath = join(lockedDir, 'SKILL.md');
+            await fs.writeFile(skillPath, '# Locked');
+            await fs.chmod(skillPath, 0o000);
+            try {
+                // Skip if running as root — chmod 000 is bypassed by root.
+                let canRead = false;
+                try {
+                    await fs.access(skillPath, fsConstants.R_OK);
+                    canRead = true;
+                }
+                catch {
+                    canRead = false;
+                }
+                if (canRead)
+                    return;
+                await expect(adapter.fetchSkillContent({ path: skillPath })).rejects.toThrow(/Failed to read skill file|Cannot read/);
+            }
+            finally {
+                await fs.chmod(skillPath, 0o644).catch(() => undefined);
+            }
+        });
+        it('should surface typed error for nonexistent path via getRepository', async () => {
+            if (platform() === 'win32')
+                return;
+            const nonexistent = join(testDir, 'never-created');
+            await expect(adapter.getRepository({ path: nonexistent })).rejects.toThrow(/Skill not found|Not found/);
+        });
+    });
+    describe('Frontmatter regressions', () => {
+        it('should not fail on malformed frontmatter', async () => {
+            await fs.mkdir(join(testDir, 'bad-yaml'), { recursive: true });
+            await fs.writeFile(join(testDir, 'bad-yaml', 'SKILL.md'), '---\nname: oops\n  broken: [\n---\n# Broken');
+            const count = await adapter.rescan();
+            expect(count).toBe(3);
+        });
+    });
+    describe('Case-insensitive filesystem normalisation', () => {
+        it('should accept symlink targets that differ only in case on macOS/Windows', async () => {
+            // Only exercise on case-insensitive filesystems; Linux ext4 would
+            // genuinely treat these as distinct paths.
+            if (platform() !== 'darwin' && platform() !== 'win32')
+                return;
+            const target = join(testDir, 'skill-one');
+            const link = join(testDir, 'case-alias');
+            try {
+                // Build a target string with different casing than the actual dir.
+                // macOS APFS reports realpath with the original casing, so the
+                // containment check must normalise.
+                await fs.symlink(target.toUpperCase(), link);
+            }
+            catch {
+                return;
+            }
+            const caseAdapter = new LocalFilesystemAdapter({
+                id: 'test-case',
+                name: 'Test Case',
+                type: 'local',
+                baseUrl: 'file://',
+                enabled: true,
+                rootDir: testDir,
+                followSymlinks: true,
+                rateLimit: { maxRequests: 100, windowMs: 60000, minDelayMs: 0 },
+            });
+            // Should not error; target is inside rootDir regardless of casing.
+            await expect(caseAdapter.initialize()).resolves.not.toThrow();
+        });
+    });
+});
+//# sourceMappingURL=LocalFilesystemAdapter.coverage.test.js.map

package/dist/tests/LocalFilesystemAdapter.coverage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalFilesystemAdapter.coverage.test.js","sourceRoot":"","sources":["../../tests/LocalFilesystemAdapter.coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAA;AACjF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,IAAI,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAA;AAErC,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,IAAI,OAA+B,CAAA;IACnC,IAAI,OAAe,CAAA;IAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAChG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EACtC,kEAAkE,CACnE,CAAA;QAED,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EACtC,wCAAwC,CACzC,CAAA;QAED,OAAO,GAAG,IAAI,sBAAsB,CAAC;YACnC,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;SAChE,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,UAAU,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,sDAAsD;QACtD,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,iDAAiD;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;YAChD,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC;gBAC/C,EAAE,EAAE,sBAAsB;gBAC1B,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO;gBAChB,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;aAChE,CAAC,CAAA;YAEF,MAAM,aAAa,CAAC,UAAU,EAAE,CAAA;YAChC,4DAA4D;YAC5D,mEAAmE;YACnE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7C,yEAAyE;YACzE,mDAAmD;YACnD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YACxE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACnE,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAChD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAA;YAEvE,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAA;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC;gBAC/C,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO;gBAChB,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;aAChE,CAAC,CAAA;YAEF,MAAM,aAAa,CAAC,UAAU,EAAE,CAAA;YAChC,yCAAyC;YACzC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7C,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAA;YACzF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAEvD,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAClE,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAChD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,sBAAsB,CAAC,CAAA;YAEzE,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC;gBAC9C,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO;gBAChB,cAAc,EAAE,IAAI;gBACpB,wBAAwB,EAAE,IAAI;gBAC9B,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;aAChE,CAAC,CAAA;YAEF,MAAM,YAAY,CAAC,UAAU,EAAE,CAAA;YAC/B,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAEvC,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACtB,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,sBAAsB,CAAC;gBAC7C,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO;gBAChB,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;aAChE,CAAC,CAAA;YAEF,MAAM,WAAW,CAAC,UAAU,EAAE,CAAA;YAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC3C,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YAC7E,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAC9C,mDAAmD;YACnD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,OAAM;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAA;YAC9D,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YAE7B,iCAAiC;YACjC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAA;YACjB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,sBAAsB,CAAC;oBAC7C,EAAE,EAAE,WAAW;oBACf,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,SAAS;oBAClB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;iBAChE,CAAC,CAAA;gBAEF,MAAM,WAAW,CAAC,UAAU,EAAE,CAAA;gBAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAE3C,IAAI,OAAO,EAAE,CAAC;oBACZ,qDAAqD;oBACrD,OAAM;gBACR,CAAC;gBAED,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACtC,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;gBACnF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;gBAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;YACtD,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACtD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,OAAM;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC;oBAC/C,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,SAAS;oBAClB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;oBAClC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;iBAChE,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,CAAA;gBAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;YACnC,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,OAAM;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YACzC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC;gBACH,2DAA2D;gBAC3D,IAAI,OAAO,GAAG,KAAK,CAAA;gBACnB,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;oBAC5C,OAAO,GAAG,IAAI,CAAA;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,KAAK,CAAA;gBACjB,CAAC;gBACD,IAAI,OAAO;oBAAE,OAAM;gBAEnB,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1E,uCAAuC,CACxC,CAAA;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,OAAM;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;YAClD,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxE,2BAA2B,CAC5B,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9D,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EACrC,6CAA6C,CAC9C,CAAA;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACzD,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,kEAAkE;YAClE,2CAA2C;YAC3C,IAAI,QAAQ,EAAE,KAAK,QAAQ,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,OAAM;YAE7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACxC,IAAI,CAAC;gBACH,mEAAmE;gBACnE,+DAA+D;gBAC/D,oCAAoC;gBACpC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAA;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,sBAAsB,CAAC;gBAC7C,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO;gBAChB,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;aAChE,CAAC,CAAA;YAEF,mEAAmE;YACnE,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QAC/D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/LocalFilesystemAdapter.security.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * LocalFilesystemAdapter security sidecar (SMI-4319, SMI-4320)
+ *
+ * Covers:
+ * - SMI-4319 symlink loop detection via per-scan visited-realpath set
+ *   (A↔B, self-loops, `allowSymlinksOutsideRoot` does NOT suppress the
+ *   loop warning, per-scan isolation, happy deep tree).
+ * - SMI-4320 realpath-based containment for direct-access methods
+ *   (`fetchSkillContent` / `getRepository` / `skillExists`), byte-wise
+ *   `startsWith(root + sep)` correctness including the trailing-separator
+ *   guard, and the `allowSymlinksOutsideRoot` regression guard.
+ *
+ * Kept in its own file because the pre-commit `check-file-length.mjs`
+ * enforces < 500 lines on `.test.ts` even though `audit:standards` exempts
+ * tests (see memory feedback: "File-length enforcement asymmetry").
+ */
+export {};
+//# sourceMappingURL=LocalFilesystemAdapter.security.test.d.ts.map

package/dist/tests/LocalFilesystemAdapter.security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalFilesystemAdapter.security.test.d.ts","sourceRoot":"","sources":["../../tests/LocalFilesystemAdapter.security.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}