@skillsmith/core 0.8.2 → 0.10.0

package/dist/src/install/agent-pack-uninstaller.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-pack-uninstaller.test.d.ts.map

package/dist/src/install/agent-pack-uninstaller.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-uninstaller.test.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-uninstaller.test.ts"],"names":[],"mappings":""}

package/dist/src/install/agent-pack-uninstaller.test.js

@@ -0,0 +1,212 @@
+/**
+ * @fileoverview Tests for `uninstallAgentPack` (SMI-5456 Wave 1 Step 5) —
+ *               split from `agent-pack-installer.test.ts` when the combined
+ *               file crossed the 500-line gate. Same temp-HOME + manifest-dir
+ *               isolation setup; covers the P-5 exact-reversal invariant plus
+ *               the governance manifest-path-guard security tests.
+ * @module @skillsmith/core/install/agent-pack-uninstaller.test
+ */
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { installAgentPack } from './agent-pack-installer.js';
+import { uninstallAgentPack } from './agent-pack-uninstaller.js';
+import { AGENT_INSTALL_DIR_ENV_VAR, getAgentManifestPath } from './agent-manifest.js';
+import { CLIENT_NATIVE_PATHS } from './paths.js';
+import { relocateUnderHome } from './agent-home-relocate.js';
+let homeDir;
+let manifestDir;
+let prevInstallDirEnv;
+function skillPath(client) {
+    return join(relocateUnderHome(CLIENT_NATIVE_PATHS[client], homeDir), 'skillsmith-agent', 'SKILL.md');
+}
+beforeEach(() => {
+    homeDir = mkdtempSync(join(tmpdir(), 'skillsmith-agent-uninstall-home-'));
+    manifestDir = mkdtempSync(join(tmpdir(), 'skillsmith-agent-uninstall-manifest-'));
+    prevInstallDirEnv = process.env[AGENT_INSTALL_DIR_ENV_VAR];
+    process.env[AGENT_INSTALL_DIR_ENV_VAR] = manifestDir;
+});
+afterEach(() => {
+    rmSync(homeDir, { recursive: true, force: true });
+    rmSync(manifestDir, { recursive: true, force: true });
+    if (prevInstallDirEnv !== undefined)
+        process.env[AGENT_INSTALL_DIR_ENV_VAR] = prevInstallDirEnv;
+    else
+        delete process.env[AGENT_INSTALL_DIR_ENV_VAR];
+});
+describe('uninstallAgentPack — exact reversal', () => {
+    it('removes everything install wrote and restores foreign entries it modified (not conflicted)', () => {
+        mkdirSync(join(homeDir, '.claude'), { recursive: true });
+        const settingsPath = join(homeDir, '.claude', 'settings.json');
+        writeFileSync(settingsPath, JSON.stringify({ someOtherKey: true }, null, 2));
+        installAgentPack({ homeDir });
+        expect(existsSync(skillPath('claude-code'))).toBe(true);
+        expect(existsSync(skillPath('agents'))).toBe(true);
+        expect(existsSync(join(homeDir, '.claude', 'agents', 'skillsmith-agent.md'))).toBe(true);
+        const result = uninstallAgentPack();
+        expect(existsSync(skillPath('claude-code'))).toBe(false);
+        expect(existsSync(skillPath('agents'))).toBe(false);
+        expect(existsSync(join(homeDir, '.claude', 'agents', 'skillsmith-agent.md'))).toBe(false);
+        // settings.json is restored to its pre-install content (someOtherKey
+        // survives, skillsmith/hooks keys are gone) rather than deleted, since
+        // it pre-existed with unrelated content. Asserting the FULL document
+        // (not just `mcpServers`) is the regression test for the "duplicate
+        // backups when hooks+MCP share a config file" bug the commit message
+        // claims fixed: a stray SECOND backup captured mid-install (after hooks
+        // were merged in but before MCP was) would restore a `hooks` key that
+        // never existed pre-install while still passing a narrower
+        // `mcpServers`-only assertion.
+        const doc = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+        expect(doc).toEqual({ someOtherKey: true });
+        expect(doc.mcpServers).toBeUndefined();
+        expect(doc.hooks).toBeUndefined();
+        expect(result.restored).toContain(settingsPath);
+        expect(result.removed.length).toBeGreaterThan(0);
+    });
+    // Governance regression test (2026-07-01): a hand-tampered or corrupted
+    // manifest must never become an arbitrary-file-delete primitive. See
+    // `agent-manifest-path-guard.ts`.
+    it('refuses to delete or overwrite a manifest entry pointing outside any known installer target', () => {
+        installAgentPack({ homeDir });
+        // Simulate a tampered manifest: a "sensitive" file the installer never
+        // wrote, with a fabricated entry pointing `uninstallAgentPack` at it.
+        const sensitivePath = join(homeDir, 'not-an-installer-path.txt');
+        writeFileSync(sensitivePath, 'do not touch me');
+        const manifestPath = getAgentManifestPath();
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+        manifest.entries.push({
+            path: sensitivePath,
+            kind: 'skill',
+            harness: null,
+            backupPath: null,
+            executable: false,
+        });
+        writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+        const result = uninstallAgentPack();
+        // The sensitive file survives untouched...
+        expect(existsSync(sensitivePath)).toBe(true);
+        expect(readFileSync(sensitivePath, 'utf-8')).toBe('do not touch me');
+        // ...and is reported as rejected, not silently dropped or counted as removed.
+        expect(result.rejected).toContain(sensitivePath);
+        expect(result.removed).not.toContain(sensitivePath);
+    });
+    it('refuses to restore from a backupPath outside the manifest backups directory', () => {
+        mkdirSync(join(homeDir, '.claude'), { recursive: true });
+        const settingsPath = join(homeDir, '.claude', 'settings.json');
+        writeFileSync(settingsPath, JSON.stringify({ realCurrentContent: true }));
+        // A forged "backup" living OUTSIDE the trusted backups directory, whose
+        // content an attacker fully controls.
+        const forgedBackupPath = join(homeDir, 'forged-backup.json');
+        writeFileSync(forgedBackupPath, JSON.stringify({ attackerControlled: true }));
+        const manifestPath = getAgentManifestPath();
+        writeFileSync(manifestPath, JSON.stringify({
+            schemaVersion: 1,
+            installedAt: new Date().toISOString(),
+            packSchemaVersion: 1,
+            entries: [
+                {
+                    path: settingsPath,
+                    kind: 'mcp-config',
+                    harness: 'claude-code',
+                    backupPath: forgedBackupPath,
+                    executable: false,
+                },
+            ],
+        }, null, 2));
+        const result = uninstallAgentPack();
+        // settingsPath must NOT be overwritten with the forged backup's content.
+        const doc = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+        expect(doc).toEqual({ realCurrentContent: true });
+        expect(result.rejected).toContain(settingsPath);
+        expect(result.restored).not.toContain(settingsPath);
+    });
+    it('restores a pre-existing codex config.toml to its exact pre-install content (hook wiring included)', () => {
+        mkdirSync(join(homeDir, '.codex'), { recursive: true });
+        const configPath = join(homeDir, '.codex', 'config.toml');
+        const preInstall = '# my codex config\nmodel = "gpt-x"\n';
+        writeFileSync(configPath, preInstall);
+        installAgentPack({ homeDir });
+        // Sanity: install actually added all three of our blocks.
+        const installed = readFileSync(configPath, 'utf-8');
+        expect(installed).toContain('# >>> skillsmith:hooks.SessionStart >>>');
+        expect(installed).toContain('# >>> skillsmith:mcp_servers.skillsmith >>>');
+        const result = uninstallAgentPack();
+        // Exact pre-install content back — no residual marker blocks.
+        expect(readFileSync(configPath, 'utf-8')).toBe(preInstall);
+        expect(result.restored).toContain(configPath);
+        // Hook scripts (including the inert session-end.sh) are gone.
+        expect(existsSync(join(homeDir, '.codex', 'hooks', 'session-start.sh'))).toBe(false);
+        expect(existsSync(join(homeDir, '.codex', 'hooks', 'session-end.sh'))).toBe(false);
+    });
+    it('deletes a config file entirely when install created it fresh (no backup)', () => {
+        installAgentPack({ homeDir });
+        const settingsPath = join(homeDir, '.claude', 'settings.json');
+        expect(existsSync(settingsPath)).toBe(true);
+        uninstallAgentPack();
+        // settings.json was created fresh by install (no pre-existing content) —
+        // it is a "removed" (deleted) entry, not "restored".
+        expect(existsSync(settingsPath)).toBe(false);
+    });
+    it('is a no-op (not an error) for a manifest entry the user already deleted manually', () => {
+        installAgentPack({ homeDir });
+        rmSync(skillPath('claude-code'));
+        const result = uninstallAgentPack();
+        expect(result.alreadyGone).toContain(skillPath('claude-code'));
+    });
+    it('leaves foreign entries in OTHER, never-touched files untouched', () => {
+        mkdirSync(join(homeDir, '.gitconfig-like-dir'), { recursive: true });
+        const untouchedPath = join(homeDir, '.gitconfig-like-dir', 'config');
+        writeFileSync(untouchedPath, 'unrelated content\n');
+        installAgentPack({ homeDir });
+        uninstallAgentPack();
+        expect(readFileSync(untouchedPath, 'utf-8')).toBe('unrelated content\n');
+    });
+});
+// SMI-5456 adversarial-review regression: a RE-install (no intervening
+// uninstall) takes no fresh backup for already-installed paths, so the fresh
+// manifest recorded `backupPath: null` for the shared config files — silently
+// dropping install #1's genuine pre-install backup reference. uninstall then
+// treated the modified pre-existing file as "created fresh" and DELETED it.
+// `carryForwardPriorBackups` in `agent-pack-installer.ts` fixes this; these
+// tests lock it in. See that helper's doc comment.
+describe('uninstallAgentPack — double-install reversal (pre-install backup not stranded)', () => {
+    it('restores a pre-existing claude-code settings.json after install → install → uninstall', () => {
+        mkdirSync(join(homeDir, '.claude'), { recursive: true });
+        const settingsPath = join(homeDir, '.claude', 'settings.json');
+        writeFileSync(settingsPath, JSON.stringify({ someOtherKey: true }, null, 2));
+        installAgentPack({ homeDir });
+        installAgentPack({ homeDir }); // re-install (byte-identical pack, no fresh backup taken)
+        const result = uninstallAgentPack();
+        // The user's pre-install settings.json must survive — restored to its
+        // exact pre-install content, NOT deleted.
+        expect(existsSync(settingsPath)).toBe(true);
+        const doc = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+        expect(doc).toEqual({ someOtherKey: true });
+        expect(result.restored).toContain(settingsPath);
+        expect(result.removed).not.toContain(settingsPath);
+    });
+    it('restores a pre-existing codex config.toml after install → install → uninstall', () => {
+        mkdirSync(join(homeDir, '.codex'), { recursive: true });
+        const configPath = join(homeDir, '.codex', 'config.toml');
+        const preInstall = '# my codex config\nmodel = "gpt-x"\n';
+        writeFileSync(configPath, preInstall);
+        installAgentPack({ homeDir });
+        installAgentPack({ homeDir });
+        const result = uninstallAgentPack();
+        expect(existsSync(configPath)).toBe(true);
+        expect(readFileSync(configPath, 'utf-8')).toBe(preInstall);
+        expect(result.restored).toContain(configPath);
+    });
+    it('still DELETES a config file the installer created fresh, even after a re-install', () => {
+        // No pre-existing settings.json: install created it. A re-install must not
+        // spuriously invent a backup — uninstall still deletes it.
+        installAgentPack({ homeDir });
+        installAgentPack({ homeDir });
+        const settingsPath = join(homeDir, '.claude', 'settings.json');
+        expect(existsSync(settingsPath)).toBe(true);
+        uninstallAgentPack();
+        expect(existsSync(settingsPath)).toBe(false);
+    });
+});
+//# sourceMappingURL=agent-pack-uninstaller.test.js.map

package/dist/src/install/agent-pack-uninstaller.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-uninstaller.test.js","sourceRoot":"","sources":["../../../src/install/agent-pack-uninstaller.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,IAAI,OAAe,CAAA;AACnB,IAAI,WAAmB,CAAA;AACvB,IAAI,iBAAqC,CAAA;AAEzC,SAAS,SAAS,CAAC,MAAwC;IACzD,OAAO,IAAI,CACT,iBAAiB,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EACvD,kBAAkB,EAClB,UAAU,CACX,CAAA;AACH,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAA;IACzE,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAC,CAAA;IACjF,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IAC1D,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,WAAW,CAAA;AACtD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,iBAAiB,CAAA;;QAC1F,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;AACpD,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;QAC9D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAE5E,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExF,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEzF,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,2DAA2D;QAC3D,+BAA+B;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA4B,CAAA;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAA;QAEjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,qEAAqE;IACrE,kCAAkC;IAClC,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAE7B,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAA;QAChE,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;QAE/C,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAQ9D,CAAA;QACD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAA;QACF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAE9D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,2CAA2C;QAC3C,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpE,8EAA8E;QAC9E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;QAC9D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAEzE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;QAC5D,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAE7E,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;QAC3C,aAAa,CACX,YAAY,EACZ,IAAI,CAAC,SAAS,CACZ;YACE,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,iBAAiB,EAAE,CAAC;YACpB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,gBAAgB;oBAC5B,UAAU,EAAE,KAAK;iBAClB;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAA;QAED,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,yEAAyE;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA4B,CAAA;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,sCAAsC,CAAA;QACzD,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAErC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,0DAA0D;QAC1D,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAA;QACtE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAA;QAE1E,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,8DAA8D;QAC9D,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC7C,8DAA8D;QAC9D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;QAC9D,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE3C,kBAAkB,EAAE,CAAA;QACpB,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAA;QACpE,aAAa,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAA;QAEnD,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,kBAAkB,EAAE,CAAA;QAEpB,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,uEAAuE;AACvE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AACnD,QAAQ,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC9F,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;QAC9D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAE5E,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA,CAAC,0DAA0D;QAExF,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA4B,CAAA;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,sCAAsC,CAAA;QACzD,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAErC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAE7B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QAEnC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,2EAA2E;QAC3E,2DAA2D;QAC3D,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;QAC9D,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE3C,kBAAkB,EAAE,CAAA;QACpB,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/install/index.d.ts

@@ -9,8 +9,15 @@
  *
  * @module @skillsmith/core/install
  */
-export { CANONICAL_CLIENT, CLIENT_IDS, CLIENT_NATIVE_PATHS, assertClientId, getCanonicalInstallPath, getInstallPath, resolveClientId, resolveClientPath, } from './paths.js';
+export { CANONICAL_CLIENT, CLIENT_IDS, CLIENT_NATIVE_PATHS, assertClientId, enumerateHarnessPresence, getCanonicalInstallPath, getInstallPath, resolveClientId, resolveClientPath, } from './paths.js';
 export type { ClientId } from './paths.js';
 export { addLink, getDefaultFromClient, getLinkManifestPath, listLinks, loadManifest, removeLinks, saveManifest, } from './fan-out.js';
 export type { AddLinkOptions, AddLinkResult, LinkKind, LinkManifest, LinkRecord, } from './fan-out.js';
+export { installAgentPack, loadAgentManifest } from './agent-pack-installer.js';
+export { uninstallAgentPack } from './agent-pack-uninstaller.js';
+export { getAgentInstallBackupsDir, getAgentManifestPath, saveAgentManifest, AGENT_INSTALL_DIR_ENV_VAR, AGENT_MANIFEST_SCHEMA_VERSION, type AgentInstallManifest, type AgentManifestEntry, type AgentManifestEntryKind, } from './agent-manifest.js';
+export { HARNESS_SUPPORT_TIER, type AgentInstallOptions, type AgentInstallResult, type AgentUninstallOptions, type AgentUninstallResult, type HarnessInstallReport, type SupportTier, } from './agent-pack-installer.types.js';
+export { AGENT_MCP_TARGETS, AGENT_SHIM_TARGETS, AGENT_HOOK_TARGETS, CODEX_CONFIG_TOML_PATH, type McpHarnessId, type ConfigFormat, type McpConfigTarget, type ShimTarget, type HookInstallTarget, } from './agent-harness-targets.js';
+export { type MergeResult, type MergeStatus } from './agent-config-merge.types.js';
+export { isAllowedManifestEntryPath, isAllowedManifestBackupPath, } from './agent-manifest-path-guard.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/install/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/install/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,cAAc,EACd,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,UAAU,GACX,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/install/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,cAAc,EACd,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,UAAU,GACX,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,WAAW,GACjB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAClF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAA"}

package/dist/src/install/index.js

@@ -9,6 +9,13 @@
  *
  * @module @skillsmith/core/install
  */
-export { CANONICAL_CLIENT, CLIENT_IDS, CLIENT_NATIVE_PATHS, assertClientId, getCanonicalInstallPath, getInstallPath, resolveClientId, resolveClientPath, } from './paths.js';
+export { CANONICAL_CLIENT, CLIENT_IDS, CLIENT_NATIVE_PATHS, assertClientId, enumerateHarnessPresence, getCanonicalInstallPath, getInstallPath, resolveClientId, resolveClientPath, } from './paths.js';
 export { addLink, getDefaultFromClient, getLinkManifestPath, listLinks, loadManifest, removeLinks, saveManifest, } from './fan-out.js';
+// SMI-5456 Wave 1 Step 5: `sklx agent install` / `uninstall` core.
+export { installAgentPack, loadAgentManifest } from './agent-pack-installer.js';
+export { uninstallAgentPack } from './agent-pack-uninstaller.js';
+export { getAgentInstallBackupsDir, getAgentManifestPath, saveAgentManifest, AGENT_INSTALL_DIR_ENV_VAR, AGENT_MANIFEST_SCHEMA_VERSION, } from './agent-manifest.js';
+export { HARNESS_SUPPORT_TIER, } from './agent-pack-installer.types.js';
+export { AGENT_MCP_TARGETS, AGENT_SHIM_TARGETS, AGENT_HOOK_TARGETS, CODEX_CONFIG_TOML_PATH, } from './agent-harness-targets.js';
+export { isAllowedManifestEntryPath, isAllowedManifestBackupPath, } from './agent-manifest-path-guard.js';
 //# sourceMappingURL=index.js.map

package/dist/src/install/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/install/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/install/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAA;AASrB,mEAAmE;AACnE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,GAI9B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,GAOrB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,GAMvB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAA"}

package/dist/src/install/paths.d.ts

@@ -1,4 +1,4 @@
-export type ClientId = 'claude-code' | 'cursor' | 'copilot' | 'windsurf' | 'agents';
+export type ClientId = 'claude-code' | 'cursor' | 'copilot' | 'windsurf' | 'agents' | 'opencode' | 'hermes';
 export declare const CLIENT_NATIVE_PATHS: Record<ClientId, string>;
 export declare const CANONICAL_CLIENT: ClientId;
 export declare const CLIENT_IDS: ReadonlyArray<ClientId>;
@@ -13,4 +13,20 @@ export declare function resolveClientId(raw: string | undefined): ClientId;
  * value — used by the MCP server to pick `~/.cursor/skills/` etc.
  */
 export declare function resolveClientPath(override?: string | undefined): string;
+/**
+ * Returns the filesystem presence status of every known harness.
+ *
+ * A harness is considered "present" when its skill directory exists on disk.
+ * This lets the cross-harness inventory (SMI-5390) report a harness as
+ * "installed but zero skills" rather than omitting it entirely.
+ *
+ * Synchronous and O(CLIENT_IDS.length) — safe to call on the startup path.
+ *
+ * @see SMI-5390
+ */
+export declare function enumerateHarnessPresence(): Array<{
+    harness: ClientId;
+    present: boolean;
+    path: string;
+}>;
 //# sourceMappingURL=paths.d.ts.map

package/dist/src/install/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/install/paths.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEnF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMxD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAwB,CAAA;AAEvD,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,QAAQ,CAM7C,CAAA;AAEF,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,cAAc,CAAC,MAAM,GAAE,QAA2B,GAAG,MAAM,CAE1E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAOxE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAIjE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGvE"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/install/paths.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,QAAQ,GACR,SAAS,GACT,UAAU,GACV,QAAQ,GACR,UAAU,GACV,QAAQ,CAAA;AAEZ,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAQxD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAwB,CAAA;AAEvD,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,QAAQ,CAQ7C,CAAA;AAEF,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,cAAc,CAAC,MAAM,GAAE,QAA2B,GAAG,MAAM,CAE1E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAOxE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAIjE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,IAAI,KAAK,CAAC;IAChD,OAAO,EAAE,QAAQ,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb,CAAC,CASD"}

package/dist/src/install/paths.js

@@ -8,6 +8,7 @@
  *
  * @module @skillsmith/core/install/paths
  */
+import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 export const CLIENT_NATIVE_PATHS = {
@@ -16,6 +17,8 @@ export const CLIENT_NATIVE_PATHS = {
     copilot: join(homedir(), '.copilot', 'skills'),
     windsurf: join(homedir(), '.codeium', 'windsurf', 'skills'),
     agents: join(homedir(), '.agents', 'skills'),
+    opencode: join(homedir(), '.config', 'opencode', 'skills'),
+    hermes: join(homedir(), '.hermes', 'skills'),
 };
 export const CANONICAL_CLIENT = 'claude-code';
 export const CLIENT_IDS = Object.freeze([
@@ -24,6 +27,8 @@ export const CLIENT_IDS = Object.freeze([
     'copilot',
     'windsurf',
     'agents',
+    'opencode',
+    'hermes',
 ]);
 export function getCanonicalInstallPath() {
     return CLIENT_NATIVE_PATHS[CANONICAL_CLIENT];
@@ -53,4 +58,25 @@ export function resolveClientPath(override) {
     const raw = override !== undefined ? override : process.env['SKILLSMITH_CLIENT'];
     return getInstallPath(resolveClientId(raw));
 }
+/**
+ * Returns the filesystem presence status of every known harness.
+ *
+ * A harness is considered "present" when its skill directory exists on disk.
+ * This lets the cross-harness inventory (SMI-5390) report a harness as
+ * "installed but zero skills" rather than omitting it entirely.
+ *
+ * Synchronous and O(CLIENT_IDS.length) — safe to call on the startup path.
+ *
+ * @see SMI-5390
+ */
+export function enumerateHarnessPresence() {
+    return CLIENT_IDS.map((harness) => {
+        const harnessPath = CLIENT_NATIVE_PATHS[harness];
+        return {
+            harness,
+            present: existsSync(harnessPath),
+            path: harnessPath,
+        };
+    });
+}
 //# sourceMappingURL=paths.js.map

package/dist/src/install/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/install/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAUhC,MAAM,CAAC,MAAM,mBAAmB,GAA6B;IAC3D,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IACnD,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IAC5C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC9C,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC3D,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC7C,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAa,aAAa,CAAA;AAEvD,MAAM,CAAC,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC/D,aAAa;IACb,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;CACT,CAAC,CAAA;AAEF,MAAM,UAAU,uBAAuB;IACrC,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAmB,gBAAgB;IAChE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpE,oGAAoG,CACvG,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAA;IAC5D,cAAc,CAAC,GAAG,CAAC,CAAA;IACnB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAChF,OAAO,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AAC7C,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/install/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA+BhC,MAAM,CAAC,MAAM,mBAAmB,GAA6B;IAC3D,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IACnD,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IAC5C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC9C,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC3D,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;IAC5C,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC1D,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC7C,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAa,aAAa,CAAA;AAEvD,MAAM,CAAC,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC/D,aAAa;IACb,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;IACR,UAAU;IACV,QAAQ;CACT,CAAC,CAAA;AAEF,MAAM,UAAU,uBAAuB;IACrC,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAmB,gBAAgB;IAChE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpE,oGAAoG,CACvG,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAA;IAC5D,cAAc,CAAC,GAAG,CAAC,CAAA;IACnB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAChF,OAAO,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB;IAKtC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAChD,OAAO;YACL,OAAO;YACP,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC;YAChC,IAAI,EAAE,WAAW;SAClB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/install/paths.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=paths.test.d.ts.map

package/dist/src/install/paths.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.test.d.ts","sourceRoot":"","sources":["../../../src/install/paths.test.ts"],"names":[],"mappings":""}

package/dist/src/install/paths.test.js

@@ -0,0 +1,76 @@
+/**
+ * SMI-5390: Tests for `enumerateHarnessPresence`.
+ *
+ * `existsSync` is mocked via vi.mock('node:fs') so the tests never touch
+ * the real filesystem. The hoisted spy is shared between the mock factory
+ * and the test bodies via the vi.hoisted closure — same pattern as
+ * pythonIncremental.hardening.test.ts (SMI-4315/4316).
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+// vi.hoisted runs before vi.mock factories so we can share the spy instance.
+const { existsSyncSpy } = vi.hoisted(() => ({
+    existsSyncSpy: vi.fn(() => false),
+}));
+vi.mock('node:fs', async () => {
+    const actual = await vi.importActual('node:fs');
+    return { ...actual, existsSync: (p) => existsSyncSpy(p) };
+});
+import { CLIENT_IDS, CLIENT_NATIVE_PATHS, enumerateHarnessPresence } from './paths.js';
+describe('enumerateHarnessPresence (SMI-5390)', () => {
+    beforeEach(() => {
+        existsSyncSpy.mockReset();
+        existsSyncSpy.mockReturnValue(false);
+    });
+    it('returns one entry for every ClientId in CLIENT_IDS', () => {
+        const result = enumerateHarnessPresence();
+        expect(result).toHaveLength(CLIENT_IDS.length);
+        const returnedHarnesses = result.map((r) => r.harness);
+        expect(returnedHarnesses).toEqual(expect.arrayContaining([...CLIENT_IDS]));
+    });
+    it('reports present: true for harnesses whose directory exists', () => {
+        // Make only claude-code and cursor appear on disk.
+        existsSyncSpy.mockImplementation((p) => p === CLIENT_NATIVE_PATHS['claude-code'] || p === CLIENT_NATIVE_PATHS['cursor']);
+        const result = enumerateHarnessPresence();
+        expect(result.find((r) => r.harness === 'claude-code')?.present).toBe(true);
+        expect(result.find((r) => r.harness === 'cursor')?.present).toBe(true);
+        expect(result.find((r) => r.harness === 'copilot')?.present).toBe(false);
+        expect(result.find((r) => r.harness === 'windsurf')?.present).toBe(false);
+        expect(result.find((r) => r.harness === 'agents')?.present).toBe(false);
+        expect(result.find((r) => r.harness === 'opencode')?.present).toBe(false);
+        expect(result.find((r) => r.harness === 'hermes')?.present).toBe(false);
+    });
+    it('reports all harnesses absent when existsSync returns false for every path', () => {
+        existsSyncSpy.mockReturnValue(false);
+        const result = enumerateHarnessPresence();
+        expect(result.every((r) => r.present === false)).toBe(true);
+    });
+    it('reports all harnesses present when existsSync returns true for every path', () => {
+        existsSyncSpy.mockReturnValue(true);
+        const result = enumerateHarnessPresence();
+        expect(result.every((r) => r.present === true)).toBe(true);
+    });
+    it('returns the canonical CLIENT_NATIVE_PATHS path for each harness', () => {
+        const result = enumerateHarnessPresence();
+        for (const entry of result) {
+            expect(entry.path).toBe(CLIENT_NATIVE_PATHS[entry.harness]);
+        }
+    });
+    it('calls existsSync exactly once per harness', () => {
+        enumerateHarnessPresence();
+        expect(existsSyncSpy).toHaveBeenCalledTimes(CLIENT_IDS.length);
+    });
+});
+describe('opencode + hermes ClientIds (SMI-5456 Wave 1 Step 5)', () => {
+    it('CLIENT_IDS includes opencode and hermes', () => {
+        expect(CLIENT_IDS).toContain('opencode');
+        expect(CLIENT_IDS).toContain('hermes');
+        expect(CLIENT_IDS).toHaveLength(7);
+    });
+    it('opencode resolves to ~/.config/opencode/skills', () => {
+        expect(CLIENT_NATIVE_PATHS.opencode.endsWith('/.config/opencode/skills')).toBe(true);
+    });
+    it('hermes resolves to ~/.hermes/skills', () => {
+        expect(CLIENT_NATIVE_PATHS.hermes.endsWith('/.hermes/skills')).toBe(true);
+    });
+});
+//# sourceMappingURL=paths.test.js.map

package/dist/src/install/paths.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.test.js","sourceRoot":"","sources":["../../../src/install/paths.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7D,6EAA6E;AAC7E,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,aAAa,EAAE,EAAE,CAAC,EAAE,CAAyB,GAAG,EAAE,CAAC,KAAK,CAAC;CAC1D,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAA;IACzE,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAEtF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,CAAC,SAAS,EAAE,CAAA;QACzB,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,mDAAmD;QACnD,aAAa,CAAC,kBAAkB,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,mBAAmB,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,mBAAmB,CAAC,QAAQ,CAAC,CACvF,CAAA;QAED,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAA;QAEzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAA;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,wBAAwB,EAAE,CAAA;QAC1B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/journal/hash.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview sha256 helpers shared by the journal writer + reader.
+ * @module @skillsmith/core/journal/hash
+ */
+/** SHA-256 hex digest of arbitrary string/Buffer content. */
+export declare function sha256Hex(content: string | Buffer): string;
+/**
+ * Genesis constant the first journal record's `prev_hash` chains from.
+ * Computed (not a literal hex string) so the source documents its own
+ * derivation rather than presenting an opaque magic value.
+ */
+export declare const JOURNAL_GENESIS_HASH: string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/src/journal/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/journal/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE1D;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAA6C,CAAA"}

package/dist/src/journal/hash.js

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview sha256 helpers shared by the journal writer + reader.
+ * @module @skillsmith/core/journal/hash
+ */
+import { createHash } from 'node:crypto';
+/** SHA-256 hex digest of arbitrary string/Buffer content. */
+export function sha256Hex(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+/**
+ * Genesis constant the first journal record's `prev_hash` chains from.
+ * Computed (not a literal hex string) so the source documents its own
+ * derivation rather than presenting an opaque magic value.
+ */
+export const JOURNAL_GENESIS_HASH = sha256Hex('skillsmith-journal-genesis-v1');
+//# sourceMappingURL=hash.js.map

package/dist/src/journal/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/journal/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,OAAwB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC,+BAA+B,CAAC,CAAA"}

package/dist/src/journal/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview Public barrel for the change-journal module
+ *               (SMI-5456 Wave 1 Step 3 / SMI-5470).
+ * @module @skillsmith/core/journal
+ *
+ * Consumed by `@skillsmith/mcp-server`'s apply-family tools
+ * (`apply_namespace_rename`, `apply_recommended_edit`, `undo_apply`) via the
+ * `@skillsmith/core/journal` subpath export.
+ */
+export { JOURNAL_SCHEMA_VERSION, type JournalAction, type JournalRecord, type JournalRecordFields, type JournalRecordInput, } from './types.js';
+export { sha256Hex, JOURNAL_GENESIS_HASH } from './hash.js';
+export { JOURNAL_DIR_ENV_VAR, getJournalFilePath, getJournalSessionId, resetJournalSessionIdForTests, } from './path.js';
+export { appendJournalRecord, computeRecordHash, isCorruptTailError, type JournalCorruptTailError, } from './writer.js';
+export { verifyJournalChain, readJournalRecords, type ChainVerificationResult } from './reader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/journal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/journal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAE3D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,uBAAuB,GAC7B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAA"}

package/dist/src/journal/index.js

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview Public barrel for the change-journal module
+ *               (SMI-5456 Wave 1 Step 3 / SMI-5470).
+ * @module @skillsmith/core/journal
+ *
+ * Consumed by `@skillsmith/mcp-server`'s apply-family tools
+ * (`apply_namespace_rename`, `apply_recommended_edit`, `undo_apply`) via the
+ * `@skillsmith/core/journal` subpath export.
+ */
+export { JOURNAL_SCHEMA_VERSION, } from './types.js';
+export { sha256Hex, JOURNAL_GENESIS_HASH } from './hash.js';
+export { JOURNAL_DIR_ENV_VAR, getJournalFilePath, getJournalSessionId, resetJournalSessionIdForTests, } from './path.js';
+export { appendJournalRecord, computeRecordHash, isCorruptTailError, } from './writer.js';
+export { verifyJournalChain, readJournalRecords } from './reader.js';
+//# sourceMappingURL=index.js.map

package/dist/src/journal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/journal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,sBAAsB,GAKvB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAE3D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAgC,MAAM,aAAa,CAAA"}

package/dist/src/journal/journal.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview Unit tests for the change-journal writer + reader
+ *               (SMI-5456 Wave 1 Step 3 / SMI-5470).
+ * @module @skillsmith/core/journal/journal.test
+ *
+ * Covers two of the three P-5 invariants named in
+ * docs/internal/implementation/smi-5456-skillsmith-agent-wave1.md's
+ * "Shared-State / Coordination Audit" table for `~/.skillsmith/journal`:
+ *   - "journal module: concurrent-apply serialization test" (below)
+ *   - "journal module: chain-verification test" (below)
+ * The third (undo round-trip / refusal / scope fence) lives in
+ * `@skillsmith/mcp-server`'s `tests/unit/undo-apply.test.ts`, since it
+ * needs the mcp-server apply-family tools to produce a realistic changeset.
+ */
+export {};
+//# sourceMappingURL=journal.test.d.ts.map

package/dist/src/journal/journal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.test.d.ts","sourceRoot":"","sources":["../../../src/journal/journal.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}