@skillsmith/core 0.5.4 → 0.5.5

package/dist/tests/github-import/blocklist.test.js

@@ -0,0 +1,182 @@
+/**
+ * SMI-4408: Indexer blocklist tests.
+ *
+ * Covers:
+ *  - Exact-match blocking (owner/name, case-sensitive)
+ *  - Non-blocklisted repos pass through
+ *  - Empty/missing blocklist file returns EMPTY_BLOCKLIST (no-op)
+ *  - Schema validation: version=1, required fields, valid repo format, valid dates
+ *  - Duplicate entries rejected at load
+ *  - Malformed JSON rejected at load
+ *  - Ship-it sanity check: data/indexer-blocklist.json parses and contains
+ *    the 2 known-bad entries from SMI-4396 Wave 2 residuals.
+ */
+import { describe, it, expect } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { buildBlocklist, EMPTY_BLOCKLIST, loadBlocklist, parseBlocklistFile, } from '../../src/scripts/github-import/blocklist.js';
+const VALID_ENTRY = {
+    repo: 'vinayaksavle/UploadDownloadPDF',
+    reason: 'ASP.NET MVC tutorial, not a Claude skill',
+    addedBy: 'ryansmith108',
+    addedAt: '2026-04-21',
+};
+// ------------------------ matcher behavior ------------------------
+describe('BlocklistMatcher (SMI-4408)', () => {
+    it('blocks exact-match owner/name (case-sensitive)', () => {
+        const matcher = buildBlocklist([VALID_ENTRY]);
+        expect(matcher.isBlocked('vinayaksavle/UploadDownloadPDF')).toBe(true);
+    });
+    it('does not block case-mismatched repo (exact match)', () => {
+        const matcher = buildBlocklist([VALID_ENTRY]);
+        expect(matcher.isBlocked('vinayaksavle/uploaddownloadpdf')).toBe(false);
+        expect(matcher.isBlocked('Vinayaksavle/UploadDownloadPDF')).toBe(false);
+    });
+    it('does not block non-blocklisted repos', () => {
+        const matcher = buildBlocklist([VALID_ENTRY]);
+        expect(matcher.isBlocked('anthropics/skills')).toBe(false);
+        expect(matcher.isBlocked('smith-horn/skill-image-pipeline')).toBe(false);
+    });
+    it('does not match partial strings (substring not allowed)', () => {
+        const matcher = buildBlocklist([VALID_ENTRY]);
+        expect(matcher.isBlocked('vinayaksavle/UploadDownloadPDF-extra')).toBe(false);
+        expect(matcher.isBlocked('other/vinayaksavle/UploadDownloadPDF')).toBe(false);
+    });
+    it('exposes entries() for audit-log output', () => {
+        const matcher = buildBlocklist([VALID_ENTRY]);
+        const entries = matcher.entries();
+        expect(entries).toHaveLength(1);
+        expect(entries[0]).toEqual(VALID_ENTRY);
+    });
+    it('EMPTY_BLOCKLIST blocks nothing', () => {
+        expect(EMPTY_BLOCKLIST.isBlocked('anything/at-all')).toBe(false);
+        expect(EMPTY_BLOCKLIST.entries()).toEqual([]);
+    });
+});
+// ------------------------ schema validation ------------------------
+describe('parseBlocklistFile (SMI-4408)', () => {
+    const validFile = {
+        version: 1,
+        updatedAt: '2026-04-21',
+        blocked: [VALID_ENTRY],
+    };
+    it('parses a valid file', () => {
+        const result = parseBlocklistFile(validFile);
+        expect(result.version).toBe(1);
+        expect(result.updatedAt).toBe('2026-04-21');
+        expect(result.blocked).toHaveLength(1);
+        expect(result.blocked[0]).toEqual(VALID_ENTRY);
+    });
+    it('rejects non-object root', () => {
+        expect(() => parseBlocklistFile(null)).toThrow(/must be an object/i);
+        expect(() => parseBlocklistFile('string')).toThrow(/must be an object/i);
+        // Arrays pass typeof === 'object' but fail on missing `version` field.
+        expect(() => parseBlocklistFile([])).toThrow(/unsupported blocklist file version/i);
+    });
+    it('rejects unsupported version', () => {
+        expect(() => parseBlocklistFile({ ...validFile, version: 2 })).toThrow(/unsupported blocklist file version/i);
+        expect(() => parseBlocklistFile({ ...validFile, version: 0 })).toThrow(/unsupported blocklist file version/i);
+    });
+    it('rejects invalid updatedAt', () => {
+        expect(() => parseBlocklistFile({ ...validFile, updatedAt: '04/21/2026' })).toThrow(/updatedAt must be YYYY-MM-DD/i);
+        expect(() => parseBlocklistFile({ ...validFile, updatedAt: 42 })).toThrow(/updatedAt must be YYYY-MM-DD/i);
+    });
+    it('rejects blocked field when not an array', () => {
+        expect(() => parseBlocklistFile({ ...validFile, blocked: {} })).toThrow(/blocked must be an array/i);
+    });
+    it('rejects entry with missing required field', () => {
+        for (const field of ['repo', 'reason', 'addedBy', 'addedAt']) {
+            const badEntry = { ...VALID_ENTRY };
+            delete badEntry[field];
+            expect(() => parseBlocklistFile({ ...validFile, blocked: [badEntry] })).toThrow(new RegExp(`missing or empty required field: ${field}`, 'i'));
+        }
+    });
+    it('rejects entry with empty required field', () => {
+        expect(() => parseBlocklistFile({ ...validFile, blocked: [{ ...VALID_ENTRY, reason: '' }] })).toThrow(/missing or empty required field: reason/i);
+    });
+    it('rejects malformed repo string', () => {
+        const bad = ['no-slash', '/leading', 'trailing/', 'too/many/slashes', 'has spaces/ok'];
+        for (const repo of bad) {
+            expect(() => parseBlocklistFile({ ...validFile, blocked: [{ ...VALID_ENTRY, repo }] })).toThrow(/repo must be 'owner\/name'/i);
+        }
+    });
+    it('accepts GitHub-valid repo names with common punctuation', () => {
+        const good = ['foo/bar', 'foo-bar/baz.qux', 'Foo123/Bar_v2', 'org.name/repo-name'];
+        for (const repo of good) {
+            expect(() => parseBlocklistFile({ ...validFile, blocked: [{ ...VALID_ENTRY, repo }] })).not.toThrow();
+        }
+    });
+    it('rejects invalid addedAt format', () => {
+        expect(() => parseBlocklistFile({ ...validFile, blocked: [{ ...VALID_ENTRY, addedAt: 'yesterday' }] })).toThrow(/addedAt must be YYYY-MM-DD/i);
+    });
+    it('rejects duplicate repo entries', () => {
+        expect(() => parseBlocklistFile({
+            ...validFile,
+            blocked: [VALID_ENTRY, { ...VALID_ENTRY, addedAt: '2026-04-22' }],
+        })).toThrow(/duplicate entry: vinayaksavle\/UploadDownloadPDF/i);
+    });
+    it('non-object entry rejected with index', () => {
+        expect(() => parseBlocklistFile({ ...validFile, blocked: [VALID_ENTRY, 'string-entry'] })).toThrow(/entry #1 is not an object/i);
+    });
+});
+// ------------------------ loadBlocklist ------------------------
+describe('loadBlocklist (SMI-4408)', () => {
+    it('returns EMPTY_BLOCKLIST when file is absent', () => {
+        const tmp = path.join(os.tmpdir(), `blocklist-absent-${Date.now()}.json`);
+        const matcher = loadBlocklist(tmp);
+        expect(matcher).toBe(EMPTY_BLOCKLIST);
+        expect(matcher.isBlocked('anything/at-all')).toBe(false);
+    });
+    it('throws on malformed JSON', () => {
+        const tmp = path.join(os.tmpdir(), `blocklist-malformed-${Date.now()}.json`);
+        fs.writeFileSync(tmp, '{ not valid json');
+        try {
+            expect(() => loadBlocklist(tmp)).toThrow(/is not valid JSON/i);
+        }
+        finally {
+            fs.unlinkSync(tmp);
+        }
+    });
+    it('throws on invalid schema', () => {
+        const tmp = path.join(os.tmpdir(), `blocklist-invalid-${Date.now()}.json`);
+        fs.writeFileSync(tmp, JSON.stringify({ version: 2, updatedAt: '2026-04-21', blocked: [] }));
+        try {
+            expect(() => loadBlocklist(tmp)).toThrow(/unsupported blocklist file version/i);
+        }
+        finally {
+            fs.unlinkSync(tmp);
+        }
+    });
+    it('loads a valid file', () => {
+        const tmp = path.join(os.tmpdir(), `blocklist-valid-${Date.now()}.json`);
+        fs.writeFileSync(tmp, JSON.stringify({
+            version: 1,
+            updatedAt: '2026-04-21',
+            blocked: [VALID_ENTRY],
+        }));
+        try {
+            const matcher = loadBlocklist(tmp);
+            expect(matcher.isBlocked('vinayaksavle/UploadDownloadPDF')).toBe(true);
+            expect(matcher.isBlocked('anthropics/skills')).toBe(false);
+        }
+        finally {
+            fs.unlinkSync(tmp);
+        }
+    });
+});
+// ------------------------ ship-it sanity ------------------------
+describe('data/indexer-blocklist.json (ship-it sanity)', () => {
+    it('is parseable and contains the 2 SMI-4396 Wave 2 residuals', () => {
+        const filePath = path.resolve(__dirname, '../../../../data/indexer-blocklist.json');
+        const raw = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+        const parsed = parseBlocklistFile(raw);
+        expect(parsed.blocked.length).toBe(2);
+        const repos = parsed.blocked.map((e) => e.repo).sort();
+        expect(repos).toEqual(['Sfedfcv/redesigned-pancake', 'vinayaksavle/UploadDownloadPDF'].sort());
+        // Each entry must carry a reason for audit trail.
+        expect(parsed.blocked.every((e) => e.reason.length > 0)).toBe(true);
+        expect(parsed.blocked.every((e) => e.addedBy.length > 0)).toBe(true);
+    });
+});
+//# sourceMappingURL=blocklist.test.js.map

package/dist/tests/github-import/blocklist.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocklist.test.js","sourceRoot":"","sources":["../../../tests/github-import/blocklist.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EACL,cAAc,EACd,eAAe,EACf,aAAa,EACb,kBAAkB,GACnB,MAAM,8CAA8C,CAAA;AAGrD,MAAM,WAAW,GAAmB;IAClC,IAAI,EAAE,gCAAgC;IACtC,MAAM,EAAE,0CAA0C;IAClD,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,YAAY;CACtB,CAAA;AAED,qEAAqE;AAErE,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1D,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChE,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,sEAAsE;AAEtE,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,YAAY;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;KACvB,CAAA;IAED,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACxE,uEAAuE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CACpE,qCAAqC,CACtC,CAAA;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CACpE,qCAAqC,CACtC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CACjF,+BAA+B,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACvE,+BAA+B,CAChC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACrE,2BAA2B,CAC5B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,EAAE,GAAG,WAAW,EAA6B,CAAA;YAC9D,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;YACtB,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAC7E,IAAI,MAAM,CAAC,oCAAoC,KAAK,EAAE,EAAE,GAAG,CAAC,CAC7D,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAA;QACtF,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC1E,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAA;QAClF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC1E,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAC1F,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC;YACjB,GAAG,SAAS;YACZ,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SAClE,CAAC,CACH,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC,CAC7E,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,kEAAkE;AAElE,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC5E,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QACzC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAChE,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC1E,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC3F,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAA;QACjF,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACxE,EAAE,CAAC,aAAa,CACd,GAAG,EACH,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,YAAY;YACvB,OAAO,EAAE,CAAC,WAAW,CAAC;SACvB,CAAC,CACH,CAAA;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;YAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5D,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,mEAAmE;AAEnE,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,EAAE,gCAAgC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAC9F,kDAAkD;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/github-import/signal-of-intent.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * SMI-4415: Unit tests for the signal-of-intent gate.
+ *
+ * Fixture-driven verification of the Wave 0 admit/reject gate criteria:
+ *   - ≥ 98% known-good admission (known-good.json, 10 entries → 100% expected)
+ *   - ≥ 95% non-skill rejection (non-skills.json, 20 entries → 100% expected)
+ *
+ * Plus explicit regression guards:
+ *   - Plan-review H4 floor: metadata-only skills must reject even at high score
+ *   - Score-boundary: score === SIGNAL_THRESHOLD with structural signal admits,
+ *     score === SIGNAL_THRESHOLD - 1 rejects
+ *   - mcp-server-only: structural but below threshold → reject
+ */
+export {};
+//# sourceMappingURL=signal-of-intent.test.d.ts.map

package/dist/tests/github-import/signal-of-intent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal-of-intent.test.d.ts","sourceRoot":"","sources":["../../../tests/github-import/signal-of-intent.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/tests/github-import/signal-of-intent.test.js

@@ -0,0 +1,171 @@
+/**
+ * SMI-4415: Unit tests for the signal-of-intent gate.
+ *
+ * Fixture-driven verification of the Wave 0 admit/reject gate criteria:
+ *   - ≥ 98% known-good admission (known-good.json, 10 entries → 100% expected)
+ *   - ≥ 95% non-skill rejection (non-skills.json, 20 entries → 100% expected)
+ *
+ * Plus explicit regression guards:
+ *   - Plan-review H4 floor: metadata-only skills must reject even at high score
+ *   - Score-boundary: score === SIGNAL_THRESHOLD with structural signal admits,
+ *     score === SIGNAL_THRESHOLD - 1 rejects
+ *   - mcp-server-only: structural but below threshold → reject
+ */
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { computeSignalScore, HIGH_TRUST_OWNERS, shouldIngest, SIGNAL_THRESHOLD, } from '../../src/scripts/github-import/signal-of-intent.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const FIXTURES_DIR = join(__dirname, 'fixtures');
+function loadFixture(name) {
+    return JSON.parse(readFileSync(join(FIXTURES_DIR, name), 'utf-8'));
+}
+/**
+ * Minimal ImportedSkill shape for synthetic regression tests. Fields not
+ * relevant to scoring get benign defaults.
+ */
+function makeSkill(partial) {
+    return {
+        id: partial.id ?? 'github/test/synthetic',
+        name: partial.name ?? 'synthetic',
+        description: partial.description ?? '',
+        author: partial.author ?? 'test',
+        repo_url: partial.repo_url ?? 'https://github.com/test/synthetic',
+        clone_url: partial.clone_url ?? 'https://github.com/test/synthetic.git',
+        stars: partial.stars ?? 0,
+        forks: partial.forks ?? 0,
+        topics: partial.topics ?? [],
+        language: partial.language ?? null,
+        license: partial.license ?? null,
+        created_at: partial.created_at ?? '2024-01-01T00:00:00Z',
+        updated_at: partial.updated_at ?? '2026-04-21T00:00:00Z',
+        source: partial.source ?? 'github',
+        query_type: partial.query_type ?? 'test',
+        imported_at: partial.imported_at ?? '2026-04-21T00:00:00Z',
+    };
+}
+describe('signal-of-intent gate', () => {
+    describe('known-good fixtures', () => {
+        const knownGood = loadFixture('known-good.json');
+        it('loads exactly 10 entries (Wave 0 sample size)', () => {
+            expect(knownGood).toHaveLength(10);
+        });
+        it.each(knownGood.map((s) => [s.id, s]))('admits %s', (_id, skill) => {
+            expect(shouldIngest(skill)).toBe(true);
+        });
+        it('hits 100% admit rate on Wave 0 fixture corpus', () => {
+            const admitted = knownGood.filter((s) => shouldIngest(s));
+            expect(admitted).toHaveLength(knownGood.length);
+        });
+    });
+    describe('non-skill fixtures', () => {
+        const nonSkills = loadFixture('non-skills.json');
+        it('loads exactly 20 entries (Wave 0 sample size)', () => {
+            expect(nonSkills).toHaveLength(20);
+        });
+        it.each(nonSkills.map((s) => [s.id, s]))('rejects %s', (_id, skill) => {
+            expect(shouldIngest(skill)).toBe(false);
+        });
+        it('hits 100% reject rate on Wave 0 fixture corpus', () => {
+            const admitted = nonSkills.filter((s) => shouldIngest(s));
+            expect(admitted).toHaveLength(0);
+        });
+    });
+    describe('structural-signal floor (plan-review H4)', () => {
+        it('rejects metadata-only skills even when total score exceeds threshold', () => {
+            // Every metadata signal fires: description(+2) + name(+2) + language(+1)
+            // + license(+1) + stars(+1) = 7, well above SIGNAL_THRESHOLD (4).
+            // But topics=[] and author not in HIGH_TRUST_OWNERS → no structural
+            // signal → shouldIngest MUST reject. This is the H4 regression guard.
+            const metadataOnly = makeSkill({
+                id: 'github/nobody/claude-skill',
+                name: 'claude-skill', // matches NAME_REGEX
+                description: 'A skill for anthropic claude-code users', // matches DESCRIPTION_REGEX
+                author: 'nobody', // NOT in HIGH_TRUST_OWNERS
+                topics: [], // no structural topic
+                language: 'TypeScript',
+                license: 'MIT',
+                stars: 500, // >= STARS_THRESHOLD
+            });
+            const { score, signals, hasStructuralSignal } = computeSignalScore(metadataOnly);
+            expect(score).toBeGreaterThan(SIGNAL_THRESHOLD);
+            expect(hasStructuralSignal).toBe(false);
+            expect(signals).toEqual(expect.arrayContaining([
+                'description-match',
+                'name-match',
+                'language-match',
+                'license-present',
+                'stars-threshold',
+            ]));
+            expect(shouldIngest(metadataOnly)).toBe(false);
+        });
+    });
+    describe('boundary conditions', () => {
+        it('admits a structural skill whose score equals SIGNAL_THRESHOLD', () => {
+            // Structural topic alone = +4 (exactly SIGNAL_THRESHOLD).
+            const exactlyAtThreshold = makeSkill({
+                topics: ['claude-skill'], // +4, structural
+                // no other signals
+            });
+            const { score, hasStructuralSignal } = computeSignalScore(exactlyAtThreshold);
+            expect(score).toBe(SIGNAL_THRESHOLD);
+            expect(hasStructuralSignal).toBe(true);
+            expect(shouldIngest(exactlyAtThreshold)).toBe(true);
+        });
+        it('rejects a structural skill whose score is one below SIGNAL_THRESHOLD', () => {
+            // mcp-server (+1, structural) + license (+1) + stars (+1) = 3.
+            const justBelowThreshold = makeSkill({
+                topics: ['mcp-server'], // +1, structural
+                license: 'MIT', // +1
+                stars: 50, // +1
+            });
+            const { score, hasStructuralSignal } = computeSignalScore(justBelowThreshold);
+            expect(score).toBe(SIGNAL_THRESHOLD - 1);
+            expect(hasStructuralSignal).toBe(true);
+            expect(shouldIngest(justBelowThreshold)).toBe(false);
+        });
+        it('rejects mcp-server-only skills (structural but below threshold)', () => {
+            // Just the mcp-server topic, no other signals. score=1 < threshold.
+            const mcpOnly = makeSkill({ topics: ['mcp-server'] });
+            const { score, hasStructuralSignal } = computeSignalScore(mcpOnly);
+            expect(score).toBe(1);
+            expect(hasStructuralSignal).toBe(true);
+            expect(shouldIngest(mcpOnly)).toBe(false);
+        });
+        it('respects a caller-supplied threshold override', () => {
+            // Same mcp-server-only skill, but threshold lowered to 1 → admits.
+            const mcpOnly = makeSkill({ topics: ['mcp-server'] });
+            expect(shouldIngest(mcpOnly, 1)).toBe(true);
+            expect(shouldIngest(mcpOnly, 2)).toBe(false);
+        });
+    });
+    describe('HIGH_TRUST_OWNERS', () => {
+        it('admits trusted-owner skills with no topics (community marketplace case)', () => {
+            // `daymade/claude-code-skills` in Wave 0 R2: HIGH_TRUST_OWNERS entry,
+            // empty topics, would otherwise fail the structural floor. score = 5
+            // (owner alone) + metadata >= threshold.
+            const owner = Array.from(HIGH_TRUST_OWNERS)[0];
+            expect(owner).toBeDefined();
+            const trustedNoTopics = makeSkill({
+                author: owner,
+                topics: [],
+                description: 'claude skill',
+                name: 'claude-skill',
+            });
+            const { hasStructuralSignal, signals } = computeSignalScore(trustedNoTopics);
+            expect(hasStructuralSignal).toBe(true);
+            expect(signals).toContain('high-trust-owner');
+            expect(shouldIngest(trustedNoTopics)).toBe(true);
+        });
+        it('matches HIGH_TRUST_OWNERS case-insensitively', () => {
+            const skill = makeSkill({
+                author: 'ANTHROPICS', // uppercase
+                topics: [],
+            });
+            const { hasStructuralSignal } = computeSignalScore(skill);
+            expect(hasStructuralSignal).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=signal-of-intent.test.js.map

package/dist/tests/github-import/signal-of-intent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal-of-intent.test.js","sourceRoot":"","sources":["../../../tests/github-import/signal-of-intent.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GACjB,MAAM,qDAAqD,CAAA;AAG5D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;AAEhD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAA;AACvF,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAA+B;IAChD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,uBAAuB;QACzC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;QACjC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,mCAAmC;QACjE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,uCAAuC;QACvE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;QACxD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;QACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM;QACxC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,sBAAsB;KAC3D,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAA;QAEhD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5E,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;YACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAA;QAEhD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC7E,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;YACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,yEAAyE;YACzE,kEAAkE;YAClE,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,YAAY,GAAG,SAAS,CAAC;gBAC7B,EAAE,EAAE,4BAA4B;gBAChC,IAAI,EAAE,cAAc,EAAE,qBAAqB;gBAC3C,WAAW,EAAE,yCAAyC,EAAE,4BAA4B;gBACpF,MAAM,EAAE,QAAQ,EAAE,2BAA2B;gBAC7C,MAAM,EAAE,EAAE,EAAE,sBAAsB;gBAClC,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,EAAE,qBAAqB;aAClC,CAAC,CAAA;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAChF,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAA;YAC/C,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CACrB,MAAM,CAAC,eAAe,CAAC;gBACrB,mBAAmB;gBACnB,YAAY;gBACZ,gBAAgB;gBAChB,iBAAiB;gBACjB,iBAAiB;aAClB,CAAC,CACH,CAAA;YACD,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,0DAA0D;YAC1D,MAAM,kBAAkB,GAAG,SAAS,CAAC;gBACnC,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,iBAAiB;gBAC3C,mBAAmB;aACpB,CAAC,CAAA;YAEF,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;YAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACpC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,+DAA+D;YAC/D,MAAM,kBAAkB,GAAG,SAAS,CAAC;gBACnC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,iBAAiB;gBACzC,OAAO,EAAE,KAAK,EAAE,KAAK;gBACrB,KAAK,EAAE,EAAE,EAAE,KAAK;aACjB,CAAC,CAAA;YAEF,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;YAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,oEAAoE;YACpE,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;YACrD,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAClE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACrB,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,mEAAmE;YACnE,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;YACrD,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,sEAAsE;YACtE,qEAAqE;YACrE,yCAAyC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;YAC3B,MAAM,eAAe,GAAG,SAAS,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,cAAc;gBAC3B,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;YACF,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAA;YAC5E,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;YAC7C,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,SAAS,CAAC;gBACtB,MAAM,EAAE,YAAY,EAAE,YAAY;gBAClC,MAAM,EAAE,EAAE;aACX,CAAC,CAAA;YACF,MAAM,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;YACzD,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/security/scanner-regression-guard.test.d.ts

@@ -6,7 +6,19 @@
  * pattern removal during refactoring.
  *
  * Baseline validated: 2026-04-03
+ * SMI-4396 Wave 2 (2026-04-21): adjusted baselines for FP-rate tuning.
+ * - SENSITIVE_PATH_PATTERNS: 12 → 14 (tightened bare-keyword patterns
+ *   to require assignment/path/file-ext context, expanding some into
+ *   multiple variants).
+ * - DATA_EXFILTRATION_PATTERNS: 20 → 21 (word-boundary `\bcloud\b` fix
+ *   plus new key/secret upload detector to preserve attack-shape coverage).
+ * - PRIVILEGE_ESCALATION_PATTERNS: 23 → 25 (removed bare `/escalat(e|ion)/i`
+ *   documentation-keyword trigger; added 3 contextual variants).
+ * - Additionally: 12 → 15 ends up at 15 after adding explicit /etc/passwd
+ *   system-file coverage (offsets the bare-keyword tightening).
+ *
  * Reference: docs/internal/security/two-scanner-runbook.md
+ *            docs/internal/implementation/smi-4396-imported-skills-security-triage.md
  */
 export {};
 //# sourceMappingURL=scanner-regression-guard.test.d.ts.map

package/dist/tests/security/scanner-regression-guard.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-regression-guard.test.d.ts","sourceRoot":"","sources":["../../../tests/security/scanner-regression-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}
+{"version":3,"file":"scanner-regression-guard.test.d.ts","sourceRoot":"","sources":["../../../tests/security/scanner-regression-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/tests/security/scanner-regression-guard.test.js

@@ -6,7 +6,19 @@
  * pattern removal during refactoring.
  *
  * Baseline validated: 2026-04-03
+ * SMI-4396 Wave 2 (2026-04-21): adjusted baselines for FP-rate tuning.
+ * - SENSITIVE_PATH_PATTERNS: 12 → 14 (tightened bare-keyword patterns
+ *   to require assignment/path/file-ext context, expanding some into
+ *   multiple variants).
+ * - DATA_EXFILTRATION_PATTERNS: 20 → 21 (word-boundary `\bcloud\b` fix
+ *   plus new key/secret upload detector to preserve attack-shape coverage).
+ * - PRIVILEGE_ESCALATION_PATTERNS: 23 → 25 (removed bare `/escalat(e|ion)/i`
+ *   documentation-keyword trigger; added 3 contextual variants).
+ * - Additionally: 12 → 15 ends up at 15 after adding explicit /etc/passwd
+ *   system-file coverage (offsets the bare-keyword tightening).
+ *
  * Reference: docs/internal/security/two-scanner-runbook.md
+ *            docs/internal/implementation/smi-4396-imported-skills-security-triage.md
  */
 import { describe, it, expect } from 'vitest';
 import { SecurityScanner, SENSITIVE_PATH_PATTERNS, JAILBREAK_PATTERNS, SUSPICIOUS_PATTERNS, SOCIAL_ENGINEERING_PATTERNS, PROMPT_LEAKING_PATTERNS, DATA_EXFILTRATION_PATTERNS, PRIVILEGE_ESCALATION_PATTERNS, SSRF_INSTRUCTION_PATTERNS, AI_DEFENCE_PATTERNS, PII_PATTERNS, } from '../../src/security/scanner/index.js';
@@ -16,13 +28,13 @@ import { SecurityScanner, SENSITIVE_PATH_PATTERNS, JAILBREAK_PATTERNS, SUSPICIOU
  * removing patterns requires updating this file with justification.
  */
 const BASELINE_PATTERN_COUNTS = {
-    SENSITIVE_PATH_PATTERNS: 12,
+    SENSITIVE_PATH_PATTERNS: 15, // SMI-4396 Wave 2: 12 → 15 (bare-keyword tightened + /etc/passwd explicit)
     JAILBREAK_PATTERNS: 15,
     SUSPICIOUS_PATTERNS: 11,
     SOCIAL_ENGINEERING_PATTERNS: 12,
     PROMPT_LEAKING_PATTERNS: 14,
-    DATA_EXFILTRATION_PATTERNS: 20,
-    PRIVILEGE_ESCALATION_PATTERNS: 23,
+    DATA_EXFILTRATION_PATTERNS: 22, // SMI-4396 Wave 2: 20 → 22 (word-boundary + key-upload + verb-object prose)
+    PRIVILEGE_ESCALATION_PATTERNS: 25, // SMI-4396 Wave 2: 23 → 25 (-1 bare +3 contextual)
     SSRF_INSTRUCTION_PATTERNS: 13,
     AI_DEFENCE_PATTERNS: 16,
     PII_PATTERNS: 11,

package/dist/tests/security/scanner-regression-guard.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-regression-guard.test.js","sourceRoot":"","sources":["../../../tests/security/scanner-regression-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,mBAAmB,EACnB,YAAY,GACb,MAAM,qCAAqC,CAAA;AAE5C;;;;GAIG;AACH,MAAM,uBAAuB,GAAG;IAC9B,uBAAuB,EAAE,EAAE;IAC3B,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,EAAE;IACvB,2BAA2B,EAAE,EAAE;IAC/B,uBAAuB,EAAE,EAAE;IAC3B,0BAA0B,EAAE,EAAE;IAC9B,6BAA6B,EAAE,EAAE;IACjC,yBAAyB,EAAE,EAAE;IAC7B,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE;CACR,CAAA;AAEV,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC3D,uBAAuB,CAAC,uBAAuB,CAChD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACtD,uBAAuB,CAAC,kBAAkB,CAC3C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACvD,uBAAuB,CAAC,mBAAmB,CAC5C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC/D,uBAAuB,CAAC,2BAA2B,CACpD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC3D,uBAAuB,CAAC,uBAAuB,CAChD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC9D,uBAAuB,CAAC,0BAA0B,CACnD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACjE,uBAAuB,CAAC,6BAA6B,CACtD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC7D,uBAAuB,CAAC,yBAAyB,CAClD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACvD,uBAAuB,CAAC,mBAAmB,CAC5C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAA;YAEzE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YACtD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;YAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,WAAW,EACX,4DAA4D,CAC7D,CAAA;YAED,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YACrE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,gBAAgB,EAChB,wDAAwD,CACzD,CAAA;YAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;YAC/E,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;YAC3F,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,gEAAgE;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAA;YAE1F,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;YAChF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAA;YAErF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;YACnE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,gBAAgB,EAChB,8DAA8D,CAC/D,CAAA;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CACzD,CAAA;YACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"scanner-regression-guard.test.js","sourceRoot":"","sources":["../../../tests/security/scanner-regression-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,mBAAmB,EACnB,YAAY,GACb,MAAM,qCAAqC,CAAA;AAE5C;;;;GAIG;AACH,MAAM,uBAAuB,GAAG;IAC9B,uBAAuB,EAAE,EAAE,EAAE,2EAA2E;IACxG,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,EAAE;IACvB,2BAA2B,EAAE,EAAE;IAC/B,uBAAuB,EAAE,EAAE;IAC3B,0BAA0B,EAAE,EAAE,EAAE,4EAA4E;IAC5G,6BAA6B,EAAE,EAAE,EAAE,mDAAmD;IACtF,yBAAyB,EAAE,EAAE;IAC7B,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE;CACR,CAAA;AAEV,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC3D,uBAAuB,CAAC,uBAAuB,CAChD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACtD,uBAAuB,CAAC,kBAAkB,CAC3C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACvD,uBAAuB,CAAC,mBAAmB,CAC5C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC/D,uBAAuB,CAAC,2BAA2B,CACpD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC3D,uBAAuB,CAAC,uBAAuB,CAChD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC9D,uBAAuB,CAAC,0BAA0B,CACnD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACjE,uBAAuB,CAAC,6BAA6B,CACtD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAC7D,uBAAuB,CAAC,yBAAyB,CAClD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,sBAAsB,CACvD,uBAAuB,CAAC,mBAAmB,CAC5C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAA;YAEzE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YACtD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;YAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,WAAW,EACX,4DAA4D,CAC7D,CAAA;YAED,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YACrE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,gBAAgB,EAChB,wDAAwD,CACzD,CAAA;YAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;YAC/E,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;YAC3F,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,gEAAgE;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAA;YAE1F,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;YAChF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAA;YAErF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;YACnE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,gBAAgB,EAChB,8DAA8D,CAC/D,CAAA;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CACzD,CAAA;YACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/security/scanner-wave2-fixtures.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * SMI-4396 Wave 2 regression fixtures.
+ *
+ * Five FP-shape fixtures drawn from the 2026-04-21 baseline spot-check:
+ * each asserts the NEW scanner does NOT quarantine the skill on the shape
+ * that previously caused a CRITICAL/HIGH finding. One attack-shape
+ * fixture asserts the scanner DOES still trigger on the genuine
+ * "upload private keys to our cdn bucket" exfiltration pattern — keeps
+ * Wave 2's bcloud word-boundary from weakening real detection.
+ */
+export {};
+//# sourceMappingURL=scanner-wave2-fixtures.test.d.ts.map

package/dist/tests/security/scanner-wave2-fixtures.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner-wave2-fixtures.test.d.ts","sourceRoot":"","sources":["../../../tests/security/scanner-wave2-fixtures.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}