@skillsmith/core 0.8.0 → 0.8.1

package/dist/tests/provenance/SourceRecoveryService.test.js

@@ -0,0 +1,132 @@
+/**
+ * @see SMI-5407 — tiered source recovery (short-circuit + review-only tiers)
+ */
+import { describe, it, expect, vi, afterEach } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { SourceRecoveryService } from '../../src/provenance/SourceRecoveryService.js';
+import { hashContent } from '../../src/services/skill-installation.helpers.js';
+const tracked = [];
+function tmpDir(prefix = 'prov-svc-') {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
+    tracked.push(dir);
+    return dir;
+}
+function writeGitConfig(dir, url) {
+    fs.mkdirSync(path.join(dir, '.git'), { recursive: true });
+    fs.writeFileSync(path.join(dir, '.git', 'config'), `[remote "origin"]\n\turl = ${url}\n`);
+}
+function writePlugin(dir, repository) {
+    fs.mkdirSync(path.join(dir, '.claude-plugin'), { recursive: true });
+    fs.writeFileSync(path.join(dir, '.claude-plugin', 'plugin.json'), JSON.stringify({ repository }));
+}
+function candidate(id, name, owner, repo) {
+    return { id, name, owner, repo, url: `https://github.com/${owner}/${repo}`, qualityScore: 0.5 };
+}
+afterEach(() => {
+    for (const dir of tracked.splice(0)) {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+describe('SourceRecoveryService.recoverOne', () => {
+    it('git remote short-circuits before any dependency call (exact)', async () => {
+        const dir = tmpDir();
+        writeGitConfig(dir, 'git@github.com:owner/repo.git');
+        const findCandidatesByName = vi.fn(async () => []);
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
+        const result = await svc.recoverOne(dir, 'repo', null);
+        expect(result.method).toBe('git-remote');
+        expect(result.confidence).toBe('exact');
+        expect(result.recoveredSource).toEqual({
+            owner: 'owner',
+            repo: 'repo',
+            url: 'https://github.com/owner/repo',
+        });
+        expect(result.status).toBe('recovered');
+        expect(findCandidatesByName).not.toHaveBeenCalled();
+    });
+    it('plugin manifest resolves at high confidence without a dependency call', async () => {
+        const dir = tmpDir();
+        writePlugin(dir, 'https://github.com/o/r');
+        const findCandidatesByName = vi.fn(async () => []);
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
+        const result = await svc.recoverOne(dir, 'r', null);
+        expect(result.method).toBe('plugin-json');
+        expect(result.confidence).toBe('high');
+        expect(result.status).toBe('recovered');
+        expect(findCandidatesByName).not.toHaveBeenCalled();
+    });
+    it('a single name match resolves at medium with a registry id', async () => {
+        const dir = tmpDir();
+        const findCandidatesByName = vi.fn(async () => [candidate('uuid-1', 'foo', 'acme', 'foo')]);
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
+        const result = await svc.recoverOne(dir, 'foo', null);
+        expect(result.method).toBe('registry-name');
+        expect(result.confidence).toBe('medium');
+        expect(result.registryId).toBe('uuid-1');
+        expect(result.recoveredSource?.url).toBe('https://github.com/acme/foo');
+        expect(result.status).toBe('recovered');
+        expect(findCandidatesByName).toHaveBeenCalledWith('foo');
+    });
+    it('multiple name matches yield low confidence + candidates (review-only)', async () => {
+        const dir = tmpDir();
+        const findCandidatesByName = vi.fn(async () => [
+            candidate('u1', 'foo', 'a', 'foo'),
+            candidate('u2', 'foo', 'b', 'foo'),
+        ]);
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
+        const result = await svc.recoverOne(dir, 'foo', null);
+        expect(result.confidence).toBe('low');
+        expect(result.candidates).toHaveLength(2);
+        expect(result.recoveredSource).toBeNull();
+        expect(result.registryId).toBeNull();
+        expect(result.status).toBe('unknown');
+    });
+    it('no match yields unknown', async () => {
+        const dir = tmpDir();
+        const svc = new SourceRecoveryService({
+            hashContent,
+            findCandidatesByName: async () => [],
+        });
+        const result = await svc.recoverOne(dir, 'foo', null);
+        expect(result.method).toBeNull();
+        expect(result.confidence).toBe('unknown');
+        expect(result.status).toBe('unknown');
+    });
+});
+describe('SourceRecoveryService.recoverSources', () => {
+    it('scans a root, skips backups, and computes a summary', async () => {
+        const root = tmpDir('prov-root-');
+        const gitSkill = path.join(root, 'gitskill');
+        fs.mkdirSync(gitSkill, { recursive: true });
+        fs.writeFileSync(path.join(gitSkill, 'SKILL.md'), '---\nname: gitskill\n---\n');
+        writeGitConfig(gitSkill, 'https://github.com/o/gitskill');
+        const backupDir = path.join(root, 'gitskill.backup-20260101-000000');
+        fs.mkdirSync(backupDir, { recursive: true });
+        fs.writeFileSync(path.join(backupDir, 'SKILL.md'), 'snapshot');
+        const unknownSkill = path.join(root, 'unk');
+        fs.mkdirSync(unknownSkill, { recursive: true });
+        fs.writeFileSync(path.join(unknownSkill, 'SKILL.md'), '---\nname: unk\n---\n');
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName: async () => [] });
+        const report = await svc.recoverSources({ skillsRoot: root });
+        expect(report.summary.total).toBe(3);
+        expect(report.summary.recovered).toBe(1);
+        expect(report.summary.skipped_backup).toBe(1);
+        expect(report.summary.unknown).toBe(1);
+        const backup = report.skills.find((s) => s.skillName.includes('backup'));
+        expect(backup?.status).toBe('skipped_backup');
+    });
+    it('honors the `only` filter', async () => {
+        const root = tmpDir('prov-root-');
+        for (const name of ['a', 'b']) {
+            const dir = path.join(root, name);
+            fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(path.join(dir, 'SKILL.md'), `---\nname: ${name}\n---\n`);
+        }
+        const svc = new SourceRecoveryService({ hashContent, findCandidatesByName: async () => [] });
+        const report = await svc.recoverSources({ skillsRoot: root, only: ['a'] });
+        expect(report.skills.map((s) => s.skillName)).toEqual(['a']);
+    });
+});
+//# sourceMappingURL=SourceRecoveryService.test.js.map

package/dist/tests/provenance/SourceRecoveryService.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SourceRecoveryService.test.js","sourceRoot":"","sources":["../../../tests/provenance/SourceRecoveryService.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AAE9E,MAAM,OAAO,GAAa,EAAE,CAAA;AAE5B,SAAS,MAAM,CAAC,MAAM,GAAG,WAAW;IAClC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW;IAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,8BAA8B,GAAG,IAAI,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,UAAkB;IAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAa,EAAE,IAAY;IACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAA;AACjG,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAyB,CAAC,CAAA;QACzE,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;QAC1C,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAyB,CAAC,CAAA;QACzE,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAEnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3F,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;YAClC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;SACnC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;SACrC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAC5C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAC/E,cAAc,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAA;QAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;QACpE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;QAE9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAA;QAE9E,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAE7D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;QACjC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,cAAc,IAAI,SAAS,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/provenance/backfill.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backfill.test.d.ts.map

package/dist/tests/provenance/backfill.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/backfill.test.ts"],"names":[],"mappings":""}

package/dist/tests/provenance/backfill.test.js

@@ -0,0 +1,278 @@
+/**
+ * @see SMI-5407 — manifest backfill (id/source rules, never-clobber, idempotency)
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { backfillManifest } from '../../src/provenance/backfill.js';
+import { hashContent } from '../../src/services/skill-installation.helpers.js';
+const NOW = '2026-06-25T00:00:00.000Z';
+const SKILL_CONTENT = '---\nname: x\n---\nbody';
+let root = '';
+let manifestPath = '';
+function mkSkillDir(name) {
+    const dir = path.join(root, name);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'SKILL.md'), SKILL_CONTENT);
+    return dir;
+}
+function report(...skills) {
+    const summary = {
+        total: skills.length,
+        recovered: skills.filter((s) => s.status === 'recovered').length,
+        already_tracked: 0,
+        unknown: skills.filter((s) => s.status === 'unknown').length,
+        skipped_backup: skills.filter((s) => s.status === 'skipped_backup').length,
+    };
+    return { skills, summary };
+}
+function gitResult(installPath, skillName) {
+    return {
+        skillName,
+        installPath,
+        recoveredSource: { owner: 'acme', repo: 'gitrepo', url: 'https://github.com/acme/gitrepo' },
+        registryId: null,
+        method: 'git-remote',
+        confidence: 'exact',
+        candidates: [],
+        status: 'recovered',
+    };
+}
+function registryResult(installPath, skillName, confidence) {
+    return {
+        skillName,
+        installPath,
+        recoveredSource: { owner: 'acme', repo: 'regrepo', url: 'https://github.com/acme/regrepo' },
+        registryId: 'uuid-xyz',
+        method: 'registry-name',
+        confidence,
+        candidates: [],
+        status: 'recovered',
+    };
+}
+function loadManifest() {
+    return JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+}
+beforeEach(() => {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-bf-'));
+    manifestPath = path.join(root, 'manifest.json');
+});
+afterEach(() => {
+    if (root)
+        fs.rmSync(root, { recursive: true, force: true });
+    root = '';
+});
+describe('backfillManifest', () => {
+    it('dry-run plans entries but writes nothing', async () => {
+        const dir = mkSkillDir('gitskill');
+        const outcome = await backfillManifest(report(gitResult(dir, 'gitskill')), {
+            manifestPath,
+            now: NOW,
+        });
+        expect(outcome.planned).toHaveLength(1);
+        expect(outcome.written).toEqual([]);
+        expect(fs.existsSync(manifestPath)).toBe(false);
+    });
+    it('apply writes a registry UUID id and a git owner/repo id with https sources', async () => {
+        const gitDir = mkSkillDir('gitskill');
+        const regDir = mkSkillDir('regskill');
+        const outcome = await backfillManifest(report(gitResult(gitDir, 'gitskill'), registryResult(regDir, 'regskill', 'high')), { manifestPath, apply: true, now: NOW });
+        expect(new Set(outcome.written)).toEqual(new Set(['gitskill', 'regskill']));
+        const manifest = loadManifest();
+        const git = manifest.installedSkills.gitskill;
+        expect(git.id).toBe('acme/gitskill');
+        expect(git.source).toBe('https://github.com/acme/gitrepo');
+        expect(git.name).toBe('gitskill');
+        expect(git.version).toBe('1.0.0');
+        expect(git.installPath).toBe(gitDir);
+        expect(git.lastUpdated).toBe(NOW);
+        expect(typeof git.installedAt).toBe('string');
+        expect(Number.isNaN(Date.parse(git.installedAt))).toBe(false);
+        expect(git.originalContentHash).toBe(hashContent(SKILL_CONTENT));
+        const reg = manifest.installedSkills.regskill;
+        expect(reg.id).toBe('uuid-xyz');
+        expect(reg.source).toBe('https://github.com/acme/regrepo');
+    });
+    it('default min-confidence (high) excludes a medium registry-name match', async () => {
+        const dir = mkSkillDir('namematch');
+        const outcome = await backfillManifest(report(registryResult(dir, 'namematch', 'medium')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+        });
+        expect(outcome.written).toEqual([]);
+        expect(outcome.skipped).toContain('namematch');
+        expect(fs.existsSync(manifestPath)).toBe(false);
+    });
+    it('min-confidence medium INCLUDES a single registry-name match and writes its UUID id', async () => {
+        const dir = mkSkillDir('namematch');
+        const outcome = await backfillManifest(report(registryResult(dir, 'namematch', 'medium')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+            minConfidence: 'medium',
+        });
+        expect(outcome.written).toEqual(['namematch']);
+        const entry = loadManifest().installedSkills.namematch;
+        // The registry UUID — NOT owner/skill-name — is the load-bearing id that
+        // skill_outdated keys on. Only a registry tier carries it.
+        expect(entry.id).toBe('uuid-xyz');
+        expect(entry.source).toBe('https://github.com/acme/regrepo');
+    });
+    it('never writes an ambiguous (low, no recoveredSource) match, even at min-confidence low', async () => {
+        const dir = mkSkillDir('ambig');
+        const ambiguous = {
+            skillName: 'ambig',
+            installPath: dir,
+            recoveredSource: null, // multi-candidate: planResult drops it regardless of floor
+            registryId: null,
+            method: 'registry-name',
+            confidence: 'low',
+            candidates: [
+                {
+                    id: 'a',
+                    name: 'ambig',
+                    owner: 'o1',
+                    repo: 'r1',
+                    url: 'https://github.com/o1/r1',
+                    qualityScore: 0.5,
+                },
+                {
+                    id: 'b',
+                    name: 'ambig',
+                    owner: 'o2',
+                    repo: 'r2',
+                    url: 'https://github.com/o2/r2',
+                    qualityScore: 0.5,
+                },
+            ],
+            status: 'unknown',
+        };
+        const outcome = await backfillManifest(report(ambiguous), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+            minConfidence: 'low',
+        });
+        expect(outcome.written).toEqual([]);
+        expect(outcome.skipped).toContain('ambig');
+        expect(fs.existsSync(manifestPath)).toBe(false);
+    });
+    it('--set overrides resolve at user-specified and write the https source', async () => {
+        const dir = mkSkillDir('manual');
+        const unresolved = {
+            skillName: 'manual',
+            installPath: dir,
+            recoveredSource: null,
+            registryId: null,
+            method: null,
+            confidence: 'unknown',
+            candidates: [],
+            status: 'unknown',
+        };
+        const outcome = await backfillManifest(report(unresolved), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+            setOverrides: { manual: 'me/myrepo' },
+        });
+        expect(outcome.written).toEqual(['manual']);
+        const entry = loadManifest().installedSkills.manual;
+        expect(entry.id).toBe('me/manual');
+        expect(entry.source).toBe('https://github.com/me/myrepo');
+    });
+    it('never clobbers a healthy existing entry, even when the recovered source differs', async () => {
+        const dir = mkSkillDir('existing');
+        const existing = {
+            version: '1.0.0',
+            installedSkills: {
+                existing: {
+                    id: 'old-id',
+                    name: 'existing',
+                    version: '2.5.0',
+                    source: 'https://github.com/old/old',
+                    installPath: dir,
+                    installedAt: '2020-01-01T00:00:00.000Z',
+                    lastUpdated: '2020-01-01T00:00:00.000Z',
+                },
+            },
+        };
+        fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
+        fs.writeFileSync(manifestPath, JSON.stringify(existing));
+        const outcome = await backfillManifest(report(gitResult(dir, 'existing')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+        });
+        expect(outcome.written).toEqual([]);
+        expect(outcome.skipped).toContain('existing');
+        const entry = loadManifest().installedSkills.existing;
+        expect(entry.id).toBe('old-id');
+        expect(entry.source).toBe('https://github.com/old/old');
+        expect(entry.version).toBe('2.5.0');
+    });
+    it('fills a missing source onto an unhealthy existing entry without clobbering other fields', async () => {
+        const dir = mkSkillDir('partial');
+        const existing = {
+            version: '1.0.0',
+            installedSkills: {
+                partial: {
+                    id: 'keep-id',
+                    name: 'partial',
+                    version: '3.0.0',
+                    source: '',
+                    installPath: dir,
+                    installedAt: '2021-02-02T00:00:00.000Z',
+                    lastUpdated: '2021-02-02T00:00:00.000Z',
+                },
+            },
+        };
+        fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
+        fs.writeFileSync(manifestPath, JSON.stringify(existing));
+        const outcome = await backfillManifest(report(gitResult(dir, 'partial')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+        });
+        expect(outcome.written).toEqual(['partial']);
+        const entry = loadManifest().installedSkills.partial;
+        expect(entry.source).toBe('https://github.com/acme/gitrepo');
+        expect(entry.id).toBe('keep-id'); // preserved
+        expect(entry.version).toBe('3.0.0'); // preserved
+        expect(entry.installedAt).toBe('2021-02-02T00:00:00.000Z'); // preserved
+    });
+    it('is idempotent: a second apply is a no-op', async () => {
+        const dir = mkSkillDir('gitskill');
+        const rpt = report(gitResult(dir, 'gitskill'));
+        const first = await backfillManifest(rpt, { manifestPath, apply: true, now: NOW });
+        expect(first.written).toEqual(['gitskill']);
+        const before = fs.readFileSync(manifestPath, 'utf-8');
+        const second = await backfillManifest(rpt, { manifestPath, apply: true, now: NOW });
+        expect(second.written).toEqual([]);
+        expect(fs.readFileSync(manifestPath, 'utf-8')).toBe(before);
+    });
+    it('writeFrontmatter adds repository: to a non-git skill, skipping git checkouts', async () => {
+        const dir = mkSkillDir('fm');
+        await backfillManifest(report(gitResult(dir, 'fm')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+            writeFrontmatter: true,
+        });
+        const content = fs.readFileSync(path.join(dir, 'SKILL.md'), 'utf-8');
+        expect(content).toContain('repository: https://github.com/acme/gitrepo');
+        // A real git checkout must never have its frontmatter rewritten.
+        const gitDir = mkSkillDir('realgit');
+        fs.mkdirSync(path.join(gitDir, '.git'), { recursive: true });
+        fs.writeFileSync(path.join(gitDir, '.git', 'config'), '[remote "origin"]\n\turl = x\n');
+        await backfillManifest(report(gitResult(gitDir, 'realgit')), {
+            manifestPath,
+            apply: true,
+            now: NOW,
+            writeFrontmatter: true,
+        });
+        expect(fs.readFileSync(path.join(gitDir, 'SKILL.md'), 'utf-8')).toBe(SKILL_CONTENT);
+    });
+});
+//# sourceMappingURL=backfill.test.js.map

package/dist/tests/provenance/backfill.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.test.js","sourceRoot":"","sources":["../../../tests/provenance/backfill.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AAY9E,MAAM,GAAG,GAAG,0BAA0B,CAAA;AACtC,MAAM,aAAa,GAAG,yBAAyB,CAAA;AAE/C,IAAI,IAAI,GAAG,EAAE,CAAA;AACb,IAAI,YAAY,GAAG,EAAE,CAAA;AAErB,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,CAAA;IAC3D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,GAAG,MAA6B;IAC9C,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;QAChE,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC5D,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,MAAM;KAC3E,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,SAAiB;IACvD,OAAO;QACL,SAAS;QACT,WAAW;QACX,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,iCAAiC,EAAE;QAC3F,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,YAAY;QACpB,UAAU,EAAE,OAAO;QACnB,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,WAAmB,EACnB,SAAiB,EACjB,UAA8B;IAE9B,OAAO;QACL,SAAS;QACT,WAAW;QACX,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,iCAAiC,EAAE;QAC3F,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,eAAe;QACvB,UAAU;QACV,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAkB,CAAA;AAC5E,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;IACzD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,IAAI;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,IAAI,GAAG,EAAE,CAAA;AACX,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE;YACzE,YAAY;YACZ,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EACjF,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CACxC,CAAA;QAED,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;QAE3E,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAA;QAE/B,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,QAA8B,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAA;QAEhE,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,QAA8B,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE;YACzF,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAC9C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE;YACzF,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,SAA+B,CAAA;QAC5E,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,SAAS,GAAwB;YACrC,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,GAAG;YAChB,eAAe,EAAE,IAAI,EAAE,2DAA2D;YAClF,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,eAAe;YACvB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE;gBACV;oBACE,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;oBACV,GAAG,EAAE,0BAA0B;oBAC/B,YAAY,EAAE,GAAG;iBAClB;gBACD;oBACE,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;oBACV,GAAG,EAAE,0BAA0B;oBAC/B,YAAY,EAAE,GAAG;iBAClB;aACF;YACD,MAAM,EAAE,SAAS;SAClB,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;YACxD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,aAAa,EAAE,KAAK;SACrB,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QAChC,MAAM,UAAU,GAAwB;YACtC,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,SAAS;SAClB,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YACzD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;SACtC,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,MAA4B,CAAA;QACzE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAkB;YAC9B,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,QAAQ,EAAE;oBACR,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,4BAA4B;oBACpC,WAAW,EAAE,GAAG;oBAChB,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE;YACzE,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAE7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,QAA8B,CAAA;QAC3E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAkB;YAC9B,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,OAAO,EAAE;oBACP,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,EAAE;oBACV,WAAW,EAAE,GAAG;oBAChB,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE;YACxE,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,OAA6B,CAAA;QAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,YAAY;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,CAAC,YAAY;QAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA,CAAC,YAAY;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;QAE9C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAClF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QACnF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAClC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE;YACnD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAA;QAExE,iEAAiE;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAA;QACvF,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE;YAC3D,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/provenance/git-config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=git-config.test.d.ts.map

package/dist/tests/provenance/git-config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-config.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/git-config.test.ts"],"names":[],"mappings":""}

package/dist/tests/provenance/git-config.test.js

@@ -0,0 +1,73 @@
+/**
+ * @see SMI-5407 — git-config source recovery
+ */
+import { describe, it, expect, afterEach } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { parseGitConfigRemote, normalizeGitHubRemote } from '../../src/provenance/git-config.js';
+const tracked = [];
+function makeGitDir(remoteUrl) {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-git-'));
+    tracked.push(dir);
+    fs.mkdirSync(path.join(dir, '.git'), { recursive: true });
+    fs.writeFileSync(path.join(dir, '.git', 'config'), `[core]\n\trepositoryformatversion = 0\n[remote "origin"]\n\turl = ${remoteUrl}\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n`);
+    return dir;
+}
+afterEach(() => {
+    for (const dir of tracked.splice(0)) {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+describe('parseGitConfigRemote', () => {
+    it('normalizes an ssh (scp-like) remote', () => {
+        const dir = makeGitDir('git@github.com:owner/repo.git');
+        expect(parseGitConfigRemote(dir)).toEqual({
+            owner: 'owner',
+            repo: 'repo',
+            url: 'https://github.com/owner/repo',
+        });
+    });
+    it('normalizes an https remote', () => {
+        const dir = makeGitDir('https://github.com/owner/repo');
+        expect(parseGitConfigRemote(dir)).toEqual({
+            owner: 'owner',
+            repo: 'repo',
+            url: 'https://github.com/owner/repo',
+        });
+    });
+    it('strips a trailing .git suffix on an https remote', () => {
+        const dir = makeGitDir('https://github.com/owner/repo.git');
+        expect(parseGitConfigRemote(dir)?.repo).toBe('repo');
+    });
+    it('returns null for a non-github host', () => {
+        const dir = makeGitDir('git@gitlab.com:owner/repo.git');
+        expect(parseGitConfigRemote(dir)).toBeNull();
+    });
+    it('returns null when .git/config is missing', () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-git-'));
+        tracked.push(dir);
+        expect(parseGitConfigRemote(dir)).toBeNull();
+    });
+});
+describe('normalizeGitHubRemote', () => {
+    it('handles an ssh:// scheme url', () => {
+        expect(normalizeGitHubRemote('ssh://git@github.com/owner/repo.git')).toEqual({
+            owner: 'owner',
+            repo: 'repo',
+            url: 'https://github.com/owner/repo',
+        });
+    });
+    it('returns null for an unparseable value', () => {
+        expect(normalizeGitHubRemote('not a url')).toBeNull();
+    });
+    it('returns null for a path-traversal owner segment (SMI-5407 governance)', () => {
+        // A crafted .git/config that would otherwise yield owner '..'.
+        expect(normalizeGitHubRemote('git@github.com:../evil-dir')).toBeNull();
+        expect(normalizeGitHubRemote('git@github.com:../../etc/passwd')).toBeNull();
+    });
+    it('returns null when an owner/repo segment has unsafe characters', () => {
+        expect(normalizeGitHubRemote('https://github.com/ow ner/repo')).toBeNull();
+    });
+});
+//# sourceMappingURL=git-config.test.js.map

package/dist/tests/provenance/git-config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-config.test.js","sourceRoot":"","sources":["../../../tests/provenance/git-config.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAEhG,MAAM,OAAO,GAAa,EAAE,CAAA;AAE5B,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAChC,qEAAqE,SAAS,mDAAmD,CAClI,CAAA;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,mCAAmC,CAAC,CAAA;QAC3D,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;QAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,+DAA+D;QAC/D,MAAM,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,qBAAqB,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/provenance/local-skill-scan.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=local-skill-scan.test.d.ts.map

package/dist/tests/provenance/local-skill-scan.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-skill-scan.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/local-skill-scan.test.ts"],"names":[],"mappings":""}

package/dist/tests/provenance/local-skill-scan.test.js

@@ -0,0 +1,51 @@
+/**
+ * @see SMI-5407 — local skill enumeration guard
+ */
+import { describe, it, expect, afterEach } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { scanLocalSkills } from '../../src/provenance/local-skill-scan.js';
+let root = '';
+function writeSkill(name, content = '---\nname: x\n---\nbody') {
+    const dir = path.join(root, name);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'SKILL.md'), content);
+}
+afterEach(() => {
+    if (root)
+        fs.rmSync(root, { recursive: true, force: true });
+    root = '';
+});
+describe('scanLocalSkills', () => {
+    it('lists real skills, flags backups, excludes dotdirs and SKILL.md-less dirs', async () => {
+        root = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-scan-'));
+        writeSkill('linear', '---\nname: linear\nauthor: smith-horn\n---\nbody');
+        // Backup dir: listed but not scanned.
+        const backupName = 'linear.backup-20260419-124019';
+        fs.mkdirSync(path.join(root, backupName), { recursive: true });
+        fs.writeFileSync(path.join(root, backupName, 'SKILL.md'), 'snapshot');
+        // Dotdir: excluded entirely.
+        fs.mkdirSync(path.join(root, '.backups'), { recursive: true });
+        // Dir without SKILL.md: excluded.
+        fs.mkdirSync(path.join(root, 'empty-dir'), { recursive: true });
+        const entries = await scanLocalSkills(root);
+        const byName = new Map(entries.map((e) => [e.skillName, e]));
+        expect(byName.has('.backups')).toBe(false);
+        expect(byName.has('empty-dir')).toBe(false);
+        const linear = byName.get('linear');
+        expect(linear).toBeDefined();
+        expect(linear.isBackup).toBe(false);
+        expect(linear.frontmatterName).toBe('linear');
+        expect(linear.frontmatterAuthor).toBe('smith-horn');
+        expect(linear.skillMd).toContain('body');
+        const backup = byName.get(backupName);
+        expect(backup).toBeDefined();
+        expect(backup.isBackup).toBe(true);
+        expect(backup.skillMd).toBeNull();
+    });
+    it('returns [] for an absent root', async () => {
+        expect(await scanLocalSkills(path.join(os.tmpdir(), 'prov-does-not-exist-xyz'))).toEqual([]);
+    });
+});
+//# sourceMappingURL=local-skill-scan.test.js.map

package/dist/tests/provenance/local-skill-scan.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-skill-scan.test.js","sourceRoot":"","sources":["../../../tests/provenance/local-skill-scan.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAA;AAE1E,IAAI,IAAI,GAAG,EAAE,CAAA;AAEb,SAAS,UAAU,CAAC,IAAY,EAAE,OAAO,GAAG,yBAAyB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,IAAI;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,IAAI,GAAG,EAAE,CAAA;AACX,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;QAC3D,UAAU,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAA;QAExE,sCAAsC;QACtC,MAAM,UAAU,GAAG,+BAA+B,CAAA;QAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;QAErE,6BAA6B;QAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE9D,kCAAkC;QAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE/D,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,MAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,MAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACpD,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAEzC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/provenance/plugin-manifest.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plugin-manifest.test.d.ts.map

package/dist/tests/provenance/plugin-manifest.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manifest.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/plugin-manifest.test.ts"],"names":[],"mappings":""}