@skillsmith/core 0.8.0 → 0.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (249) hide show
  1. package/CHANGELOG.md +14 -0
  2. package/dist/.tsbuildinfo +1 -1
  3. package/dist/src/analytics/ROIDashboardService.compute.d.ts +17 -0
  4. package/dist/src/analytics/ROIDashboardService.compute.d.ts.map +1 -0
  5. package/dist/src/analytics/ROIDashboardService.compute.js +134 -0
  6. package/dist/src/analytics/ROIDashboardService.compute.js.map +1 -0
  7. package/dist/src/analytics/ROIDashboardService.d.ts +0 -8
  8. package/dist/src/analytics/ROIDashboardService.d.ts.map +1 -1
  9. package/dist/src/analytics/ROIDashboardService.js +9 -138
  10. package/dist/src/analytics/ROIDashboardService.js.map +1 -1
  11. package/dist/src/api/client.types.d.ts +5 -0
  12. package/dist/src/api/client.types.d.ts.map +1 -1
  13. package/dist/src/api/index.d.ts +1 -0
  14. package/dist/src/api/index.d.ts.map +1 -1
  15. package/dist/src/api/index.js +4 -0
  16. package/dist/src/api/index.js.map +1 -1
  17. package/dist/src/api/schemas.compatibility.test.d.ts +11 -0
  18. package/dist/src/api/schemas.compatibility.test.d.ts.map +1 -0
  19. package/dist/src/api/schemas.compatibility.test.js +38 -0
  20. package/dist/src/api/schemas.compatibility.test.js.map +1 -0
  21. package/dist/src/api/schemas.d.ts +16 -9
  22. package/dist/src/api/schemas.d.ts.map +1 -1
  23. package/dist/src/api/schemas.js +13 -4
  24. package/dist/src/api/schemas.js.map +1 -1
  25. package/dist/src/api/schemas.license.test.d.ts +11 -0
  26. package/dist/src/api/schemas.license.test.d.ts.map +1 -0
  27. package/dist/src/api/schemas.license.test.js +51 -0
  28. package/dist/src/api/schemas.license.test.js.map +1 -0
  29. package/dist/src/api/types.d.ts +18 -3
  30. package/dist/src/api/types.d.ts.map +1 -1
  31. package/dist/src/api/types.js +29 -2
  32. package/dist/src/api/types.js.map +1 -1
  33. package/dist/src/audit/remote-audit.d.ts +41 -0
  34. package/dist/src/audit/remote-audit.d.ts.map +1 -1
  35. package/dist/src/audit/remote-audit.js +71 -28
  36. package/dist/src/audit/remote-audit.js.map +1 -1
  37. package/dist/src/audit/remote-audit.test.js +89 -1
  38. package/dist/src/audit/remote-audit.test.js.map +1 -1
  39. package/dist/src/compatibility/slugs.d.ts +34 -0
  40. package/dist/src/compatibility/slugs.d.ts.map +1 -0
  41. package/dist/src/compatibility/slugs.js +57 -0
  42. package/dist/src/compatibility/slugs.js.map +1 -0
  43. package/dist/src/db/schema-sql.d.ts +1 -1
  44. package/dist/src/db/schema-sql.d.ts.map +1 -1
  45. package/dist/src/db/schema-sql.js +1 -1
  46. package/dist/src/exports/types.d.ts +1 -0
  47. package/dist/src/exports/types.d.ts.map +1 -1
  48. package/dist/src/exports/types.js +4 -0
  49. package/dist/src/exports/types.js.map +1 -1
  50. package/dist/src/index.d.ts +6 -3
  51. package/dist/src/index.d.ts.map +1 -1
  52. package/dist/src/index.js +7 -3
  53. package/dist/src/index.js.map +1 -1
  54. package/dist/src/indexer/GitHubIndexer.d.ts.map +1 -1
  55. package/dist/src/indexer/GitHubIndexer.js +1 -1
  56. package/dist/src/indexer/GitHubIndexer.js.map +1 -1
  57. package/dist/src/provenance/SourceRecoveryService.d.ts +61 -0
  58. package/dist/src/provenance/SourceRecoveryService.d.ts.map +1 -0
  59. package/dist/src/provenance/SourceRecoveryService.js +209 -0
  60. package/dist/src/provenance/SourceRecoveryService.js.map +1 -0
  61. package/dist/src/provenance/backfill.d.ts +47 -0
  62. package/dist/src/provenance/backfill.d.ts.map +1 -0
  63. package/dist/src/provenance/backfill.js +206 -0
  64. package/dist/src/provenance/backfill.js.map +1 -0
  65. package/dist/src/provenance/git-config.d.ts +22 -0
  66. package/dist/src/provenance/git-config.d.ts.map +1 -0
  67. package/dist/src/provenance/git-config.js +117 -0
  68. package/dist/src/provenance/git-config.js.map +1 -0
  69. package/dist/src/provenance/index.d.ts +13 -0
  70. package/dist/src/provenance/index.d.ts.map +1 -0
  71. package/dist/src/provenance/index.js +13 -0
  72. package/dist/src/provenance/index.js.map +1 -0
  73. package/dist/src/provenance/local-skill-scan.d.ts +35 -0
  74. package/dist/src/provenance/local-skill-scan.d.ts.map +1 -0
  75. package/dist/src/provenance/local-skill-scan.js +79 -0
  76. package/dist/src/provenance/local-skill-scan.js.map +1 -0
  77. package/dist/src/provenance/name-variants.d.ts +32 -0
  78. package/dist/src/provenance/name-variants.d.ts.map +1 -0
  79. package/dist/src/provenance/name-variants.js +59 -0
  80. package/dist/src/provenance/name-variants.js.map +1 -0
  81. package/dist/src/provenance/plugin-manifest.d.ts +16 -0
  82. package/dist/src/provenance/plugin-manifest.d.ts.map +1 -0
  83. package/dist/src/provenance/plugin-manifest.js +52 -0
  84. package/dist/src/provenance/plugin-manifest.js.map +1 -0
  85. package/dist/src/provenance/types.d.ts +98 -0
  86. package/dist/src/provenance/types.d.ts.map +1 -0
  87. package/dist/src/provenance/types.js +21 -0
  88. package/dist/src/provenance/types.js.map +1 -0
  89. package/dist/src/repositories/SkillRepository.d.ts.map +1 -1
  90. package/dist/src/repositories/SkillRepository.js +3 -1
  91. package/dist/src/repositories/SkillRepository.js.map +1 -1
  92. package/dist/src/scripts/__tests__/scan-imported-skills.test.js +10 -0
  93. package/dist/src/scripts/__tests__/scan-imported-skills.test.js.map +1 -1
  94. package/dist/src/scripts/validation/normalizers.d.ts.map +1 -1
  95. package/dist/src/scripts/validation/normalizers.js +9 -7
  96. package/dist/src/scripts/validation/normalizers.js.map +1 -1
  97. package/dist/src/scripts/validation/types.d.ts +8 -2
  98. package/dist/src/scripts/validation/types.d.ts.map +1 -1
  99. package/dist/src/scripts/validation/types.js +10 -2
  100. package/dist/src/scripts/validation/types.js.map +1 -1
  101. package/dist/src/security/scanner/SecurityScanner.d.ts +0 -7
  102. package/dist/src/security/scanner/SecurityScanner.d.ts.map +1 -1
  103. package/dist/src/security/scanner/SecurityScanner.exec.d.ts +56 -0
  104. package/dist/src/security/scanner/SecurityScanner.exec.d.ts.map +1 -0
  105. package/dist/src/security/scanner/SecurityScanner.exec.js +255 -0
  106. package/dist/src/security/scanner/SecurityScanner.exec.js.map +1 -0
  107. package/dist/src/security/scanner/SecurityScanner.helpers.d.ts.map +1 -1
  108. package/dist/src/security/scanner/SecurityScanner.helpers.js +17 -1
  109. package/dist/src/security/scanner/SecurityScanner.helpers.js.map +1 -1
  110. package/dist/src/security/scanner/SecurityScanner.js +34 -199
  111. package/dist/src/security/scanner/SecurityScanner.js.map +1 -1
  112. package/dist/src/security/scanner/SecurityScanner.scanners.d.ts +22 -0
  113. package/dist/src/security/scanner/SecurityScanner.scanners.d.ts.map +1 -0
  114. package/dist/src/security/scanner/SecurityScanner.scanners.js +213 -0
  115. package/dist/src/security/scanner/SecurityScanner.scanners.js.map +1 -0
  116. package/dist/src/security/scanner/index.d.ts +1 -1
  117. package/dist/src/security/scanner/index.d.ts.map +1 -1
  118. package/dist/src/security/scanner/index.js +1 -1
  119. package/dist/src/security/scanner/index.js.map +1 -1
  120. package/dist/src/security/scanner/patterns.d.ts +21 -0
  121. package/dist/src/security/scanner/patterns.d.ts.map +1 -1
  122. package/dist/src/security/scanner/patterns.js +34 -0
  123. package/dist/src/security/scanner/patterns.js.map +1 -1
  124. package/dist/src/security/scanner/types.d.ts +3 -1
  125. package/dist/src/security/scanner/types.d.ts.map +1 -1
  126. package/dist/src/security/scanner/weights.d.ts.map +1 -1
  127. package/dist/src/security/scanner/weights.js +6 -0
  128. package/dist/src/security/scanner/weights.js.map +1 -1
  129. package/dist/src/services/SearchService.helpers.d.ts.map +1 -1
  130. package/dist/src/services/SearchService.helpers.js +2 -0
  131. package/dist/src/services/SearchService.helpers.js.map +1 -1
  132. package/dist/src/services/SearchService.types.d.ts +1 -0
  133. package/dist/src/services/SearchService.types.d.ts.map +1 -1
  134. package/dist/src/services/skill-installation.helpers.d.ts +2 -26
  135. package/dist/src/services/skill-installation.helpers.d.ts.map +1 -1
  136. package/dist/src/services/skill-installation.helpers.js +2 -120
  137. package/dist/src/services/skill-installation.helpers.js.map +1 -1
  138. package/dist/src/services/skill-installation.io.d.ts +43 -0
  139. package/dist/src/services/skill-installation.io.d.ts.map +1 -0
  140. package/dist/src/services/skill-installation.io.js +176 -0
  141. package/dist/src/services/skill-installation.io.js.map +1 -0
  142. package/dist/src/services/skill-installation.service.d.ts.map +1 -1
  143. package/dist/src/services/skill-installation.service.js +51 -113
  144. package/dist/src/services/skill-installation.service.js.map +1 -1
  145. package/dist/src/services/skill-installation.types.d.ts.map +1 -1
  146. package/dist/src/services/skill-installation.types.js +9 -0
  147. package/dist/src/services/skill-installation.types.js.map +1 -1
  148. package/dist/src/services/skill-installation.validate.d.ts +44 -0
  149. package/dist/src/services/skill-installation.validate.d.ts.map +1 -0
  150. package/dist/src/services/skill-installation.validate.js +134 -0
  151. package/dist/src/services/skill-installation.validate.js.map +1 -0
  152. package/dist/src/telemetry/wrap.d.ts +1 -1
  153. package/dist/src/telemetry/wrap.d.ts.map +1 -1
  154. package/dist/src/telemetry/wrap.js.map +1 -1
  155. package/dist/src/types/skill.d.ts +6 -1
  156. package/dist/src/types/skill.d.ts.map +1 -1
  157. package/dist/src/types/skill.js.map +1 -1
  158. package/dist/src/types.d.ts +25 -1
  159. package/dist/src/types.d.ts.map +1 -1
  160. package/dist/src/types.js +3 -1
  161. package/dist/src/types.js.map +1 -1
  162. package/dist/tests/GitHubIndexer.edge-cases.test.js +2 -2
  163. package/dist/tests/GitHubIndexer.repository.test.d.ts +10 -0
  164. package/dist/tests/GitHubIndexer.repository.test.d.ts.map +1 -0
  165. package/dist/tests/GitHubIndexer.repository.test.js +190 -0
  166. package/dist/tests/GitHubIndexer.repository.test.js.map +1 -0
  167. package/dist/tests/GitHubIndexer.test.d.ts +2 -1
  168. package/dist/tests/GitHubIndexer.test.d.ts.map +1 -1
  169. package/dist/tests/GitHubIndexer.test.js +5 -183
  170. package/dist/tests/GitHubIndexer.test.js.map +1 -1
  171. package/dist/tests/QuarantineRepository.review-state-machine.test.d.ts +14 -0
  172. package/dist/tests/QuarantineRepository.review-state-machine.test.d.ts.map +1 -0
  173. package/dist/tests/QuarantineRepository.review-state-machine.test.js +296 -0
  174. package/dist/tests/QuarantineRepository.review-state-machine.test.js.map +1 -0
  175. package/dist/tests/RawUrlSourceAdapter.security.test.js +3 -2
  176. package/dist/tests/RawUrlSourceAdapter.security.test.js.map +1 -1
  177. package/dist/tests/SecurityScanner.exec.test.d.ts +11 -0
  178. package/dist/tests/SecurityScanner.exec.test.d.ts.map +1 -0
  179. package/dist/tests/SecurityScanner.exec.test.js +190 -0
  180. package/dist/tests/SecurityScanner.exec.test.js.map +1 -0
  181. package/dist/tests/SwarmIndexer.test.js +2 -2
  182. package/dist/tests/api/client.validation.test.js +7 -4
  183. package/dist/tests/api/client.validation.test.js.map +1 -1
  184. package/dist/tests/fixtures/api-responses/index.js +1 -1
  185. package/dist/tests/fixtures/api-responses/index.js.map +1 -1
  186. package/dist/tests/integration/QuarantineService.concurrency.test.d.ts +34 -0
  187. package/dist/tests/integration/QuarantineService.concurrency.test.d.ts.map +1 -0
  188. package/dist/tests/integration/QuarantineService.concurrency.test.js +280 -0
  189. package/dist/tests/integration/QuarantineService.concurrency.test.js.map +1 -0
  190. package/dist/tests/integration/openapi-contract.test.d.ts +16 -0
  191. package/dist/tests/integration/openapi-contract.test.d.ts.map +1 -0
  192. package/dist/tests/integration/openapi-contract.test.js +231 -0
  193. package/dist/tests/integration/openapi-contract.test.js.map +1 -0
  194. package/dist/tests/provenance/SourceRecoveryService.test.d.ts +2 -0
  195. package/dist/tests/provenance/SourceRecoveryService.test.d.ts.map +1 -0
  196. package/dist/tests/provenance/SourceRecoveryService.test.js +205 -0
  197. package/dist/tests/provenance/SourceRecoveryService.test.js.map +1 -0
  198. package/dist/tests/provenance/backfill.test.d.ts +2 -0
  199. package/dist/tests/provenance/backfill.test.d.ts.map +1 -0
  200. package/dist/tests/provenance/backfill.test.js +296 -0
  201. package/dist/tests/provenance/backfill.test.js.map +1 -0
  202. package/dist/tests/provenance/git-config.test.d.ts +2 -0
  203. package/dist/tests/provenance/git-config.test.d.ts.map +1 -0
  204. package/dist/tests/provenance/git-config.test.js +73 -0
  205. package/dist/tests/provenance/git-config.test.js.map +1 -0
  206. package/dist/tests/provenance/local-skill-scan.test.d.ts +2 -0
  207. package/dist/tests/provenance/local-skill-scan.test.d.ts.map +1 -0
  208. package/dist/tests/provenance/local-skill-scan.test.js +51 -0
  209. package/dist/tests/provenance/local-skill-scan.test.js.map +1 -0
  210. package/dist/tests/provenance/name-variants.test.d.ts +2 -0
  211. package/dist/tests/provenance/name-variants.test.d.ts.map +1 -0
  212. package/dist/tests/provenance/name-variants.test.js +51 -0
  213. package/dist/tests/provenance/name-variants.test.js.map +1 -0
  214. package/dist/tests/provenance/plugin-manifest.test.d.ts +2 -0
  215. package/dist/tests/provenance/plugin-manifest.test.d.ts.map +1 -0
  216. package/dist/tests/provenance/plugin-manifest.test.js +49 -0
  217. package/dist/tests/provenance/plugin-manifest.test.js.map +1 -0
  218. package/dist/tests/scripts/import-to-database.test.js +7 -1
  219. package/dist/tests/scripts/import-to-database.test.js.map +1 -1
  220. package/dist/tests/security/scanner-regression-guard.test.js +5 -1
  221. package/dist/tests/security/scanner-regression-guard.test.js.map +1 -1
  222. package/dist/tests/security.test.js +45 -0
  223. package/dist/tests/security.test.js.map +1 -1
  224. package/dist/tests/services/aidefence-feedback.test.js +2 -0
  225. package/dist/tests/services/aidefence-feedback.test.js.map +1 -1
  226. package/dist/tests/services/dep-quarantine-check.test.js +1 -1
  227. package/dist/tests/services/dep-quarantine-check.test.js.map +1 -1
  228. package/dist/tests/skill-scanner/allowlist.test.js +8 -1
  229. package/dist/tests/skill-scanner/allowlist.test.js.map +1 -1
  230. package/dist/tests/unit/services/skill-installation.gap1.test.d.ts +12 -0
  231. package/dist/tests/unit/services/skill-installation.gap1.test.d.ts.map +1 -0
  232. package/dist/tests/unit/services/skill-installation.gap1.test.js +96 -0
  233. package/dist/tests/unit/services/skill-installation.gap1.test.js.map +1 -0
  234. package/dist/tests/unit/services/skill-installation.io.test.d.ts +11 -0
  235. package/dist/tests/unit/services/skill-installation.io.test.d.ts.map +1 -0
  236. package/dist/tests/unit/services/skill-installation.io.test.js +130 -0
  237. package/dist/tests/unit/services/skill-installation.io.test.js.map +1 -0
  238. package/dist/tests/validate-skills.dedup.test.d.ts +5 -0
  239. package/dist/tests/validate-skills.dedup.test.d.ts.map +1 -0
  240. package/dist/tests/validate-skills.dedup.test.js +241 -0
  241. package/dist/tests/validate-skills.dedup.test.js.map +1 -0
  242. package/dist/tests/validate-skills.normalizers.test.d.ts +5 -0
  243. package/dist/tests/validate-skills.normalizers.test.d.ts.map +1 -0
  244. package/dist/tests/validate-skills.normalizers.test.js +109 -0
  245. package/dist/tests/validate-skills.normalizers.test.js.map +1 -0
  246. package/dist/tests/validate-skills.test.d.ts +1 -1
  247. package/dist/tests/validate-skills.test.js +7 -345
  248. package/dist/tests/validate-skills.test.js.map +1 -1
  249. package/package.json +19 -8
@@ -0,0 +1,205 @@
1
+ /**
2
+ * @see SMI-5407 — tiered source recovery (short-circuit + review-only tiers)
3
+ */
4
+ import { describe, it, expect, vi, afterEach } from 'vitest';
5
+ import * as fs from 'fs';
6
+ import * as os from 'os';
7
+ import * as path from 'path';
8
+ import { SourceRecoveryService } from '../../src/provenance/SourceRecoveryService.js';
9
+ import { hashContent } from '../../src/services/skill-installation.helpers.js';
10
+ const tracked = [];
11
+ function tmpDir(prefix = 'prov-svc-') {
12
+ const dir = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
13
+ tracked.push(dir);
14
+ return dir;
15
+ }
16
+ function writeGitConfig(dir, url) {
17
+ fs.mkdirSync(path.join(dir, '.git'), { recursive: true });
18
+ fs.writeFileSync(path.join(dir, '.git', 'config'), `[remote "origin"]\n\turl = ${url}\n`);
19
+ }
20
+ function writePlugin(dir, repository) {
21
+ fs.mkdirSync(path.join(dir, '.claude-plugin'), { recursive: true });
22
+ fs.writeFileSync(path.join(dir, '.claude-plugin', 'plugin.json'), JSON.stringify({ repository }));
23
+ }
24
+ function candidate(id, name, owner, repo) {
25
+ return { id, name, owner, repo, url: `https://github.com/${owner}/${repo}`, qualityScore: 0.5 };
26
+ }
27
+ afterEach(() => {
28
+ for (const dir of tracked.splice(0)) {
29
+ fs.rmSync(dir, { recursive: true, force: true });
30
+ }
31
+ });
32
+ describe('SourceRecoveryService.recoverOne', () => {
33
+ it('git remote short-circuits before any dependency call (exact)', async () => {
34
+ const dir = tmpDir();
35
+ writeGitConfig(dir, 'git@github.com:owner/repo.git');
36
+ const findCandidatesByName = vi.fn(async () => []);
37
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
38
+ const result = await svc.recoverOne(dir, 'repo', null);
39
+ expect(result.method).toBe('git-remote');
40
+ expect(result.confidence).toBe('exact');
41
+ expect(result.recoveredSource).toEqual({
42
+ owner: 'owner',
43
+ repo: 'repo',
44
+ url: 'https://github.com/owner/repo',
45
+ });
46
+ expect(result.status).toBe('recovered');
47
+ expect(findCandidatesByName).not.toHaveBeenCalled();
48
+ });
49
+ it('plugin manifest resolves at high confidence without a dependency call', async () => {
50
+ const dir = tmpDir();
51
+ writePlugin(dir, 'https://github.com/o/r');
52
+ const findCandidatesByName = vi.fn(async () => []);
53
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
54
+ const result = await svc.recoverOne(dir, 'r', null);
55
+ expect(result.method).toBe('plugin-json');
56
+ expect(result.confidence).toBe('high');
57
+ expect(result.status).toBe('recovered');
58
+ expect(findCandidatesByName).not.toHaveBeenCalled();
59
+ });
60
+ // SMI-5411: a git/plugin source whose repo IS in the local catalog gets its
61
+ // manifest id enriched with the registry UUID, while the (exact/high) SOURCE
62
+ // resolution stays unchanged. Enrichment is best-effort and never throws.
63
+ it('git remote enriches registryId from findRegistryIdByRepoUrl (UUID; source unchanged)', async () => {
64
+ const dir = tmpDir();
65
+ writeGitConfig(dir, 'git@github.com:owner/repo.git');
66
+ const findRegistryIdByRepoUrl = vi.fn(async (url) => url === 'https://github.com/owner/repo' ? 'reg-uuid-1' : null);
67
+ const svc = new SourceRecoveryService({
68
+ hashContent,
69
+ findCandidatesByName: async () => [],
70
+ findRegistryIdByRepoUrl,
71
+ });
72
+ const result = await svc.recoverOne(dir, 'repo', null);
73
+ expect(result.method).toBe('git-remote');
74
+ expect(result.confidence).toBe('exact');
75
+ expect(result.registryId).toBe('reg-uuid-1');
76
+ expect(result.recoveredSource?.url).toBe('https://github.com/owner/repo');
77
+ expect(findRegistryIdByRepoUrl).toHaveBeenCalledWith('https://github.com/owner/repo');
78
+ });
79
+ it('plugin manifest enriches registryId from findRegistryIdByRepoUrl', async () => {
80
+ const dir = tmpDir();
81
+ writePlugin(dir, 'https://github.com/o/r');
82
+ const findRegistryIdByRepoUrl = vi.fn(async () => 'plugin-uuid');
83
+ const svc = new SourceRecoveryService({
84
+ hashContent,
85
+ findCandidatesByName: async () => [],
86
+ findRegistryIdByRepoUrl,
87
+ });
88
+ const result = await svc.recoverOne(dir, 'r', null);
89
+ expect(result.method).toBe('plugin-json');
90
+ expect(result.confidence).toBe('high');
91
+ expect(result.registryId).toBe('plugin-uuid');
92
+ expect(findRegistryIdByRepoUrl).toHaveBeenCalledWith('https://github.com/o/r');
93
+ });
94
+ it('git remote keeps registryId null when the repo is not catalog-known', async () => {
95
+ const dir = tmpDir();
96
+ writeGitConfig(dir, 'git@github.com:owner/repo.git');
97
+ const findRegistryIdByRepoUrl = vi.fn(async () => null);
98
+ const svc = new SourceRecoveryService({
99
+ hashContent,
100
+ findCandidatesByName: async () => [],
101
+ findRegistryIdByRepoUrl,
102
+ });
103
+ const result = await svc.recoverOne(dir, 'repo', null);
104
+ expect(result.method).toBe('git-remote');
105
+ expect(result.registryId).toBeNull();
106
+ });
107
+ it('git remote keeps registryId null when the enrichment dep is absent', async () => {
108
+ const dir = tmpDir();
109
+ writeGitConfig(dir, 'git@github.com:owner/repo.git');
110
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName: async () => [] });
111
+ const result = await svc.recoverOne(dir, 'repo', null);
112
+ expect(result.method).toBe('git-remote');
113
+ expect(result.registryId).toBeNull();
114
+ });
115
+ it('git remote degrades to null registryId when the enrichment dep throws', async () => {
116
+ const dir = tmpDir();
117
+ writeGitConfig(dir, 'git@github.com:owner/repo.git');
118
+ const findRegistryIdByRepoUrl = vi.fn(async () => {
119
+ throw new Error('catalog unavailable');
120
+ });
121
+ const svc = new SourceRecoveryService({
122
+ hashContent,
123
+ findCandidatesByName: async () => [],
124
+ findRegistryIdByRepoUrl,
125
+ });
126
+ const result = await svc.recoverOne(dir, 'repo', null);
127
+ // The throw must NOT fail recovery — the source still resolves exact.
128
+ expect(result.method).toBe('git-remote');
129
+ expect(result.confidence).toBe('exact');
130
+ expect(result.recoveredSource?.url).toBe('https://github.com/owner/repo');
131
+ expect(result.registryId).toBeNull();
132
+ });
133
+ it('a single name match resolves at medium with a registry id', async () => {
134
+ const dir = tmpDir();
135
+ const findCandidatesByName = vi.fn(async () => [candidate('uuid-1', 'foo', 'acme', 'foo')]);
136
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
137
+ const result = await svc.recoverOne(dir, 'foo', null);
138
+ expect(result.method).toBe('registry-name');
139
+ expect(result.confidence).toBe('medium');
140
+ expect(result.registryId).toBe('uuid-1');
141
+ expect(result.recoveredSource?.url).toBe('https://github.com/acme/foo');
142
+ expect(result.status).toBe('recovered');
143
+ expect(findCandidatesByName).toHaveBeenCalledWith('foo');
144
+ });
145
+ it('multiple name matches yield low confidence + candidates (review-only)', async () => {
146
+ const dir = tmpDir();
147
+ const findCandidatesByName = vi.fn(async () => [
148
+ candidate('u1', 'foo', 'a', 'foo'),
149
+ candidate('u2', 'foo', 'b', 'foo'),
150
+ ]);
151
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName });
152
+ const result = await svc.recoverOne(dir, 'foo', null);
153
+ expect(result.confidence).toBe('low');
154
+ expect(result.candidates).toHaveLength(2);
155
+ expect(result.recoveredSource).toBeNull();
156
+ expect(result.registryId).toBeNull();
157
+ expect(result.status).toBe('unknown');
158
+ });
159
+ it('no match yields unknown', async () => {
160
+ const dir = tmpDir();
161
+ const svc = new SourceRecoveryService({
162
+ hashContent,
163
+ findCandidatesByName: async () => [],
164
+ });
165
+ const result = await svc.recoverOne(dir, 'foo', null);
166
+ expect(result.method).toBeNull();
167
+ expect(result.confidence).toBe('unknown');
168
+ expect(result.status).toBe('unknown');
169
+ });
170
+ });
171
+ describe('SourceRecoveryService.recoverSources', () => {
172
+ it('scans a root, skips backups, and computes a summary', async () => {
173
+ const root = tmpDir('prov-root-');
174
+ const gitSkill = path.join(root, 'gitskill');
175
+ fs.mkdirSync(gitSkill, { recursive: true });
176
+ fs.writeFileSync(path.join(gitSkill, 'SKILL.md'), '---\nname: gitskill\n---\n');
177
+ writeGitConfig(gitSkill, 'https://github.com/o/gitskill');
178
+ const backupDir = path.join(root, 'gitskill.backup-20260101-000000');
179
+ fs.mkdirSync(backupDir, { recursive: true });
180
+ fs.writeFileSync(path.join(backupDir, 'SKILL.md'), 'snapshot');
181
+ const unknownSkill = path.join(root, 'unk');
182
+ fs.mkdirSync(unknownSkill, { recursive: true });
183
+ fs.writeFileSync(path.join(unknownSkill, 'SKILL.md'), '---\nname: unk\n---\n');
184
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName: async () => [] });
185
+ const report = await svc.recoverSources({ skillsRoot: root });
186
+ expect(report.summary.total).toBe(3);
187
+ expect(report.summary.recovered).toBe(1);
188
+ expect(report.summary.skipped_backup).toBe(1);
189
+ expect(report.summary.unknown).toBe(1);
190
+ const backup = report.skills.find((s) => s.skillName.includes('backup'));
191
+ expect(backup?.status).toBe('skipped_backup');
192
+ });
193
+ it('honors the `only` filter', async () => {
194
+ const root = tmpDir('prov-root-');
195
+ for (const name of ['a', 'b']) {
196
+ const dir = path.join(root, name);
197
+ fs.mkdirSync(dir, { recursive: true });
198
+ fs.writeFileSync(path.join(dir, 'SKILL.md'), `---\nname: ${name}\n---\n`);
199
+ }
200
+ const svc = new SourceRecoveryService({ hashContent, findCandidatesByName: async () => [] });
201
+ const report = await svc.recoverSources({ skillsRoot: root, only: ['a'] });
202
+ expect(report.skills.map((s) => s.skillName)).toEqual(['a']);
203
+ });
204
+ });
205
+ //# sourceMappingURL=SourceRecoveryService.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SourceRecoveryService.test.js","sourceRoot":"","sources":["../../../tests/provenance/SourceRecoveryService.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AAE9E,MAAM,OAAO,GAAa,EAAE,CAAA;AAE5B,SAAS,MAAM,CAAC,MAAM,GAAG,WAAW;IAClC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW;IAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,8BAA8B,GAAG,IAAI,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,UAAkB;IAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAa,EAAE,IAAY;IACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAA;AACjG,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAyB,CAAC,CAAA;QACzE,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;QAC1C,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAyB,CAAC,CAAA;QACzE,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAEnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC1D,GAAG,KAAK,+BAA+B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAA;QACD,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACpC,uBAAuB;SACxB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACzE,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;QAC1C,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,aAAa,CAAC,CAAA;QAChE,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACpC,uBAAuB;SACxB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAEnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC7C,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACpC,uBAAuB;SACxB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAE5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACpD,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC/C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACpC,uBAAuB;SACxB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAEtD,sEAAsE;QACtE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACzE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3F,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;YAClC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;SACnC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAE5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC;YACpC,WAAW;YACX,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;SACrC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAC5C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAC/E,cAAc,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAA;QAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;QACpE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;QAE9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAA;QAE9E,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAE7D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;QACjC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,cAAc,IAAI,SAAS,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=backfill.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"backfill.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/backfill.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,296 @@
1
+ /**
2
+ * @see SMI-5407 — manifest backfill (id/source rules, never-clobber, idempotency)
3
+ */
4
+ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
5
+ import * as fs from 'fs';
6
+ import * as os from 'os';
7
+ import * as path from 'path';
8
+ import { backfillManifest } from '../../src/provenance/backfill.js';
9
+ import { hashContent } from '../../src/services/skill-installation.helpers.js';
10
+ const NOW = '2026-06-25T00:00:00.000Z';
11
+ const SKILL_CONTENT = '---\nname: x\n---\nbody';
12
+ let root = '';
13
+ let manifestPath = '';
14
+ function mkSkillDir(name) {
15
+ const dir = path.join(root, name);
16
+ fs.mkdirSync(dir, { recursive: true });
17
+ fs.writeFileSync(path.join(dir, 'SKILL.md'), SKILL_CONTENT);
18
+ return dir;
19
+ }
20
+ function report(...skills) {
21
+ const summary = {
22
+ total: skills.length,
23
+ recovered: skills.filter((s) => s.status === 'recovered').length,
24
+ already_tracked: 0,
25
+ unknown: skills.filter((s) => s.status === 'unknown').length,
26
+ skipped_backup: skills.filter((s) => s.status === 'skipped_backup').length,
27
+ };
28
+ return { skills, summary };
29
+ }
30
+ function gitResult(installPath, skillName) {
31
+ return {
32
+ skillName,
33
+ installPath,
34
+ recoveredSource: { owner: 'acme', repo: 'gitrepo', url: 'https://github.com/acme/gitrepo' },
35
+ registryId: null,
36
+ method: 'git-remote',
37
+ confidence: 'exact',
38
+ candidates: [],
39
+ status: 'recovered',
40
+ };
41
+ }
42
+ function registryResult(installPath, skillName, confidence) {
43
+ return {
44
+ skillName,
45
+ installPath,
46
+ recoveredSource: { owner: 'acme', repo: 'regrepo', url: 'https://github.com/acme/regrepo' },
47
+ registryId: 'uuid-xyz',
48
+ method: 'registry-name',
49
+ confidence,
50
+ candidates: [],
51
+ status: 'recovered',
52
+ };
53
+ }
54
+ function loadManifest() {
55
+ return JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
56
+ }
57
+ beforeEach(() => {
58
+ root = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-bf-'));
59
+ manifestPath = path.join(root, 'manifest.json');
60
+ });
61
+ afterEach(() => {
62
+ if (root)
63
+ fs.rmSync(root, { recursive: true, force: true });
64
+ root = '';
65
+ });
66
+ describe('backfillManifest', () => {
67
+ it('dry-run plans entries but writes nothing', async () => {
68
+ const dir = mkSkillDir('gitskill');
69
+ const outcome = await backfillManifest(report(gitResult(dir, 'gitskill')), {
70
+ manifestPath,
71
+ now: NOW,
72
+ });
73
+ expect(outcome.planned).toHaveLength(1);
74
+ expect(outcome.written).toEqual([]);
75
+ expect(fs.existsSync(manifestPath)).toBe(false);
76
+ });
77
+ it('apply writes a registry UUID id and a git owner/repo id with https sources', async () => {
78
+ const gitDir = mkSkillDir('gitskill');
79
+ const regDir = mkSkillDir('regskill');
80
+ const outcome = await backfillManifest(report(gitResult(gitDir, 'gitskill'), registryResult(regDir, 'regskill', 'high')), { manifestPath, apply: true, now: NOW });
81
+ expect(new Set(outcome.written)).toEqual(new Set(['gitskill', 'regskill']));
82
+ const manifest = loadManifest();
83
+ const git = manifest.installedSkills.gitskill;
84
+ expect(git.id).toBe('acme/gitskill');
85
+ expect(git.source).toBe('https://github.com/acme/gitrepo');
86
+ expect(git.name).toBe('gitskill');
87
+ expect(git.version).toBe('1.0.0');
88
+ expect(git.installPath).toBe(gitDir);
89
+ expect(git.lastUpdated).toBe(NOW);
90
+ expect(typeof git.installedAt).toBe('string');
91
+ expect(Number.isNaN(Date.parse(git.installedAt))).toBe(false);
92
+ expect(git.originalContentHash).toBe(hashContent(SKILL_CONTENT));
93
+ const reg = manifest.installedSkills.regskill;
94
+ expect(reg.id).toBe('uuid-xyz');
95
+ expect(reg.source).toBe('https://github.com/acme/regrepo');
96
+ });
97
+ it('SMI-5411: a git result carrying a registryId writes the UUID id with the git source', async () => {
98
+ const dir = mkSkillDir('gitskill');
99
+ const enriched = {
100
+ ...gitResult(dir, 'gitskill'),
101
+ registryId: 'reg-uuid-5411', // git source IS catalog-known -> enriched id
102
+ };
103
+ const outcome = await backfillManifest(report(enriched), {
104
+ manifestPath,
105
+ apply: true,
106
+ now: NOW,
107
+ });
108
+ expect(outcome.written).toEqual(['gitskill']);
109
+ const entry = loadManifest().installedSkills.gitskill;
110
+ // The id is the registry UUID (skill_outdated keys on it), NOT owner/skill-
111
+ // name; the source stays the exact git remote (View-Changes unchanged).
112
+ expect(entry.id).toBe('reg-uuid-5411');
113
+ expect(entry.source).toBe('https://github.com/acme/gitrepo');
114
+ });
115
+ it('default min-confidence (high) excludes a medium registry-name match', async () => {
116
+ const dir = mkSkillDir('namematch');
117
+ const outcome = await backfillManifest(report(registryResult(dir, 'namematch', 'medium')), {
118
+ manifestPath,
119
+ apply: true,
120
+ now: NOW,
121
+ });
122
+ expect(outcome.written).toEqual([]);
123
+ expect(outcome.skipped).toContain('namematch');
124
+ expect(fs.existsSync(manifestPath)).toBe(false);
125
+ });
126
+ it('min-confidence medium INCLUDES a single registry-name match and writes its UUID id', async () => {
127
+ const dir = mkSkillDir('namematch');
128
+ const outcome = await backfillManifest(report(registryResult(dir, 'namematch', 'medium')), {
129
+ manifestPath,
130
+ apply: true,
131
+ now: NOW,
132
+ minConfidence: 'medium',
133
+ });
134
+ expect(outcome.written).toEqual(['namematch']);
135
+ const entry = loadManifest().installedSkills.namematch;
136
+ // The registry UUID — NOT owner/skill-name — is the load-bearing id that
137
+ // skill_outdated keys on. Only a registry tier carries it.
138
+ expect(entry.id).toBe('uuid-xyz');
139
+ expect(entry.source).toBe('https://github.com/acme/regrepo');
140
+ });
141
+ it('never writes an ambiguous (low, no recoveredSource) match, even at min-confidence low', async () => {
142
+ const dir = mkSkillDir('ambig');
143
+ const ambiguous = {
144
+ skillName: 'ambig',
145
+ installPath: dir,
146
+ recoveredSource: null, // multi-candidate: planResult drops it regardless of floor
147
+ registryId: null,
148
+ method: 'registry-name',
149
+ confidence: 'low',
150
+ candidates: [
151
+ {
152
+ id: 'a',
153
+ name: 'ambig',
154
+ owner: 'o1',
155
+ repo: 'r1',
156
+ url: 'https://github.com/o1/r1',
157
+ qualityScore: 0.5,
158
+ },
159
+ {
160
+ id: 'b',
161
+ name: 'ambig',
162
+ owner: 'o2',
163
+ repo: 'r2',
164
+ url: 'https://github.com/o2/r2',
165
+ qualityScore: 0.5,
166
+ },
167
+ ],
168
+ status: 'unknown',
169
+ };
170
+ const outcome = await backfillManifest(report(ambiguous), {
171
+ manifestPath,
172
+ apply: true,
173
+ now: NOW,
174
+ minConfidence: 'low',
175
+ });
176
+ expect(outcome.written).toEqual([]);
177
+ expect(outcome.skipped).toContain('ambig');
178
+ expect(fs.existsSync(manifestPath)).toBe(false);
179
+ });
180
+ it('--set overrides resolve at user-specified and write the https source', async () => {
181
+ const dir = mkSkillDir('manual');
182
+ const unresolved = {
183
+ skillName: 'manual',
184
+ installPath: dir,
185
+ recoveredSource: null,
186
+ registryId: null,
187
+ method: null,
188
+ confidence: 'unknown',
189
+ candidates: [],
190
+ status: 'unknown',
191
+ };
192
+ const outcome = await backfillManifest(report(unresolved), {
193
+ manifestPath,
194
+ apply: true,
195
+ now: NOW,
196
+ setOverrides: { manual: 'me/myrepo' },
197
+ });
198
+ expect(outcome.written).toEqual(['manual']);
199
+ const entry = loadManifest().installedSkills.manual;
200
+ expect(entry.id).toBe('me/manual');
201
+ expect(entry.source).toBe('https://github.com/me/myrepo');
202
+ });
203
+ it('never clobbers a healthy existing entry, even when the recovered source differs', async () => {
204
+ const dir = mkSkillDir('existing');
205
+ const existing = {
206
+ version: '1.0.0',
207
+ installedSkills: {
208
+ existing: {
209
+ id: 'old-id',
210
+ name: 'existing',
211
+ version: '2.5.0',
212
+ source: 'https://github.com/old/old',
213
+ installPath: dir,
214
+ installedAt: '2020-01-01T00:00:00.000Z',
215
+ lastUpdated: '2020-01-01T00:00:00.000Z',
216
+ },
217
+ },
218
+ };
219
+ fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
220
+ fs.writeFileSync(manifestPath, JSON.stringify(existing));
221
+ const outcome = await backfillManifest(report(gitResult(dir, 'existing')), {
222
+ manifestPath,
223
+ apply: true,
224
+ now: NOW,
225
+ });
226
+ expect(outcome.written).toEqual([]);
227
+ expect(outcome.skipped).toContain('existing');
228
+ const entry = loadManifest().installedSkills.existing;
229
+ expect(entry.id).toBe('old-id');
230
+ expect(entry.source).toBe('https://github.com/old/old');
231
+ expect(entry.version).toBe('2.5.0');
232
+ });
233
+ it('fills a missing source onto an unhealthy existing entry without clobbering other fields', async () => {
234
+ const dir = mkSkillDir('partial');
235
+ const existing = {
236
+ version: '1.0.0',
237
+ installedSkills: {
238
+ partial: {
239
+ id: 'keep-id',
240
+ name: 'partial',
241
+ version: '3.0.0',
242
+ source: '',
243
+ installPath: dir,
244
+ installedAt: '2021-02-02T00:00:00.000Z',
245
+ lastUpdated: '2021-02-02T00:00:00.000Z',
246
+ },
247
+ },
248
+ };
249
+ fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
250
+ fs.writeFileSync(manifestPath, JSON.stringify(existing));
251
+ const outcome = await backfillManifest(report(gitResult(dir, 'partial')), {
252
+ manifestPath,
253
+ apply: true,
254
+ now: NOW,
255
+ });
256
+ expect(outcome.written).toEqual(['partial']);
257
+ const entry = loadManifest().installedSkills.partial;
258
+ expect(entry.source).toBe('https://github.com/acme/gitrepo');
259
+ expect(entry.id).toBe('keep-id'); // preserved
260
+ expect(entry.version).toBe('3.0.0'); // preserved
261
+ expect(entry.installedAt).toBe('2021-02-02T00:00:00.000Z'); // preserved
262
+ });
263
+ it('is idempotent: a second apply is a no-op', async () => {
264
+ const dir = mkSkillDir('gitskill');
265
+ const rpt = report(gitResult(dir, 'gitskill'));
266
+ const first = await backfillManifest(rpt, { manifestPath, apply: true, now: NOW });
267
+ expect(first.written).toEqual(['gitskill']);
268
+ const before = fs.readFileSync(manifestPath, 'utf-8');
269
+ const second = await backfillManifest(rpt, { manifestPath, apply: true, now: NOW });
270
+ expect(second.written).toEqual([]);
271
+ expect(fs.readFileSync(manifestPath, 'utf-8')).toBe(before);
272
+ });
273
+ it('writeFrontmatter adds repository: to a non-git skill, skipping git checkouts', async () => {
274
+ const dir = mkSkillDir('fm');
275
+ await backfillManifest(report(gitResult(dir, 'fm')), {
276
+ manifestPath,
277
+ apply: true,
278
+ now: NOW,
279
+ writeFrontmatter: true,
280
+ });
281
+ const content = fs.readFileSync(path.join(dir, 'SKILL.md'), 'utf-8');
282
+ expect(content).toContain('repository: https://github.com/acme/gitrepo');
283
+ // A real git checkout must never have its frontmatter rewritten.
284
+ const gitDir = mkSkillDir('realgit');
285
+ fs.mkdirSync(path.join(gitDir, '.git'), { recursive: true });
286
+ fs.writeFileSync(path.join(gitDir, '.git', 'config'), '[remote "origin"]\n\turl = x\n');
287
+ await backfillManifest(report(gitResult(gitDir, 'realgit')), {
288
+ manifestPath,
289
+ apply: true,
290
+ now: NOW,
291
+ writeFrontmatter: true,
292
+ });
293
+ expect(fs.readFileSync(path.join(gitDir, 'SKILL.md'), 'utf-8')).toBe(SKILL_CONTENT);
294
+ });
295
+ });
296
+ //# sourceMappingURL=backfill.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"backfill.test.js","sourceRoot":"","sources":["../../../tests/provenance/backfill.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AAY9E,MAAM,GAAG,GAAG,0BAA0B,CAAA;AACtC,MAAM,aAAa,GAAG,yBAAyB,CAAA;AAE/C,IAAI,IAAI,GAAG,EAAE,CAAA;AACb,IAAI,YAAY,GAAG,EAAE,CAAA;AAErB,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,CAAA;IAC3D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,GAAG,MAA6B;IAC9C,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;QAChE,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC5D,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,MAAM;KAC3E,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,SAAiB;IACvD,OAAO;QACL,SAAS;QACT,WAAW;QACX,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,iCAAiC,EAAE;QAC3F,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,YAAY;QACpB,UAAU,EAAE,OAAO;QACnB,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,WAAmB,EACnB,SAAiB,EACjB,UAA8B;IAE9B,OAAO;QACL,SAAS;QACT,WAAW;QACX,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,iCAAiC,EAAE;QAC3F,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,eAAe;QACvB,UAAU;QACV,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAkB,CAAA;AAC5E,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;IACzD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,IAAI;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,IAAI,GAAG,EAAE,CAAA;AACX,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE;YACzE,YAAY;YACZ,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EACjF,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CACxC,CAAA;QAED,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;QAE3E,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAA;QAE/B,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,QAA8B,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAA;QAEhE,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,QAA8B,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAwB;YACpC,GAAG,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC;YAC7B,UAAU,EAAE,eAAe,EAAE,6CAA6C;SAC3E,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACvD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,QAA8B,CAAA;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE;YACzF,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAC9C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE;YACzF,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,SAA+B,CAAA;QAC5E,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,SAAS,GAAwB;YACrC,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,GAAG;YAChB,eAAe,EAAE,IAAI,EAAE,2DAA2D;YAClF,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,eAAe;YACvB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE;gBACV;oBACE,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;oBACV,GAAG,EAAE,0BAA0B;oBAC/B,YAAY,EAAE,GAAG;iBAClB;gBACD;oBACE,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;oBACV,GAAG,EAAE,0BAA0B;oBAC/B,YAAY,EAAE,GAAG;iBAClB;aACF;YACD,MAAM,EAAE,SAAS;SAClB,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;YACxD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,aAAa,EAAE,KAAK;SACrB,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QAChC,MAAM,UAAU,GAAwB;YACtC,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,SAAS;SAClB,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YACzD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;SACtC,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,MAA4B,CAAA;QACzE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAkB;YAC9B,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,QAAQ,EAAE;oBACR,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,4BAA4B;oBACpC,WAAW,EAAE,GAAG;oBAChB,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE;YACzE,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAE7C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,QAA8B,CAAA;QAC3E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAkB;YAC9B,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,OAAO,EAAE;oBACP,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,EAAE;oBACV,WAAW,EAAE,GAAG;oBAChB,WAAW,EAAE,0BAA0B;oBACvC,WAAW,EAAE,0BAA0B;iBACxC;aACF;SACF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE;YACxE,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;SACT,CAAC,CAAA;QAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,OAA6B,CAAA;QAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,YAAY;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,CAAC,YAAY;QAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA,CAAC,YAAY;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;QAE9C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAClF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QACnF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAClC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE;YACnD,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAA;QAExE,iEAAiE;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAA;QACvF,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE;YAC3D,YAAY;YACZ,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,GAAG;YACR,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=git-config.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"git-config.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/git-config.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,73 @@
1
+ /**
2
+ * @see SMI-5407 — git-config source recovery
3
+ */
4
+ import { describe, it, expect, afterEach } from 'vitest';
5
+ import * as fs from 'fs';
6
+ import * as os from 'os';
7
+ import * as path from 'path';
8
+ import { parseGitConfigRemote, normalizeGitHubRemote } from '../../src/provenance/git-config.js';
9
+ const tracked = [];
10
+ function makeGitDir(remoteUrl) {
11
+ const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-git-'));
12
+ tracked.push(dir);
13
+ fs.mkdirSync(path.join(dir, '.git'), { recursive: true });
14
+ fs.writeFileSync(path.join(dir, '.git', 'config'), `[core]\n\trepositoryformatversion = 0\n[remote "origin"]\n\turl = ${remoteUrl}\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n`);
15
+ return dir;
16
+ }
17
+ afterEach(() => {
18
+ for (const dir of tracked.splice(0)) {
19
+ fs.rmSync(dir, { recursive: true, force: true });
20
+ }
21
+ });
22
+ describe('parseGitConfigRemote', () => {
23
+ it('normalizes an ssh (scp-like) remote', () => {
24
+ const dir = makeGitDir('git@github.com:owner/repo.git');
25
+ expect(parseGitConfigRemote(dir)).toEqual({
26
+ owner: 'owner',
27
+ repo: 'repo',
28
+ url: 'https://github.com/owner/repo',
29
+ });
30
+ });
31
+ it('normalizes an https remote', () => {
32
+ const dir = makeGitDir('https://github.com/owner/repo');
33
+ expect(parseGitConfigRemote(dir)).toEqual({
34
+ owner: 'owner',
35
+ repo: 'repo',
36
+ url: 'https://github.com/owner/repo',
37
+ });
38
+ });
39
+ it('strips a trailing .git suffix on an https remote', () => {
40
+ const dir = makeGitDir('https://github.com/owner/repo.git');
41
+ expect(parseGitConfigRemote(dir)?.repo).toBe('repo');
42
+ });
43
+ it('returns null for a non-github host', () => {
44
+ const dir = makeGitDir('git@gitlab.com:owner/repo.git');
45
+ expect(parseGitConfigRemote(dir)).toBeNull();
46
+ });
47
+ it('returns null when .git/config is missing', () => {
48
+ const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'prov-git-'));
49
+ tracked.push(dir);
50
+ expect(parseGitConfigRemote(dir)).toBeNull();
51
+ });
52
+ });
53
+ describe('normalizeGitHubRemote', () => {
54
+ it('handles an ssh:// scheme url', () => {
55
+ expect(normalizeGitHubRemote('ssh://git@github.com/owner/repo.git')).toEqual({
56
+ owner: 'owner',
57
+ repo: 'repo',
58
+ url: 'https://github.com/owner/repo',
59
+ });
60
+ });
61
+ it('returns null for an unparseable value', () => {
62
+ expect(normalizeGitHubRemote('not a url')).toBeNull();
63
+ });
64
+ it('returns null for a path-traversal owner segment (SMI-5407 governance)', () => {
65
+ // A crafted .git/config that would otherwise yield owner '..'.
66
+ expect(normalizeGitHubRemote('git@github.com:../evil-dir')).toBeNull();
67
+ expect(normalizeGitHubRemote('git@github.com:../../etc/passwd')).toBeNull();
68
+ });
69
+ it('returns null when an owner/repo segment has unsafe characters', () => {
70
+ expect(normalizeGitHubRemote('https://github.com/ow ner/repo')).toBeNull();
71
+ });
72
+ });
73
+ //# sourceMappingURL=git-config.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"git-config.test.js","sourceRoot":"","sources":["../../../tests/provenance/git-config.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAEhG,MAAM,OAAO,GAAa,EAAE,CAAA;AAE5B,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAChC,qEAAqE,SAAS,mDAAmD,CAClI,CAAA;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,mCAAmC,CAAC,CAAA;QAC3D,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,+BAA+B,CAAC,CAAA;QACvD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;QAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,+DAA+D;QAC/D,MAAM,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,qBAAqB,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=local-skill-scan.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"local-skill-scan.test.d.ts","sourceRoot":"","sources":["../../../tests/provenance/local-skill-scan.test.ts"],"names":[],"mappings":""}