@skillsmith/core 0.8.2 → 0.10.0

package/dist/src/sync/inventory-client.test.js

@@ -0,0 +1,212 @@
+/**
+ * inventory-client tests (SMI-5392).
+ *
+ * Mocks the token-credentials module and global fetch.
+ *
+ * UC-1: no credentials -> InventoryAuthError, no fetch.
+ * UC-2: expired credentials -> refresh path runs, new creds stored, new token used.
+ * UC-3: expired credentials + failed refresh -> InventoryAuthError.
+ * UC-4: 200 body returned verbatim (incl. the consent-off no-op).
+ * UC-5: 401 / 409 / 400 / 500 -> the matching typed error.
+ * UC-6: network throw -> InventoryUploadError.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+vi.mock('../config/token-credentials.js', () => ({
+    loadCredentials: vi.fn(),
+    refreshAccessToken: vi.fn(),
+    storeCredentials: vi.fn(),
+}));
+import { loadCredentials, refreshAccessToken, storeCredentials, } from '../config/token-credentials.js';
+import { uploadInventory, purgeInventory, InventoryAuthError, InventoryConflictError, InventoryValidationError, InventoryUploadError, } from './inventory-client.js';
+const fetchMock = vi.fn();
+const payload = {
+    device: { device_id: '11111111-1111-4111-8111-111111111111' },
+    skills: [],
+};
+function jsonResponse(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+const futureCreds = {
+    accessToken: 'at_valid',
+    refreshToken: 'rt_valid',
+    expiresAt: Date.now() + 3_600_000,
+    version: 2,
+};
+describe('inventory-client', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.stubGlobal('fetch', fetchMock);
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
+    });
+    it('UC-1: throws InventoryAuthError when no credentials are stored', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(null);
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryAuthError);
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('UC-2: refreshes + stores when the access token is near expiry, then uses the new token', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue({
+            accessToken: 'at_expired',
+            refreshToken: 'rt_old',
+            expiresAt: Date.now() - 1_000,
+            version: 2,
+        });
+        vi.mocked(refreshAccessToken).mockResolvedValue({
+            accessToken: 'at_new',
+            refreshToken: 'rt_new',
+            expiresAt: Date.now() + 3_600_000,
+            version: 2,
+        });
+        fetchMock.mockResolvedValue(jsonResponse({ ok: true, applied: true, device_id: 'd' }, 200));
+        const result = await uploadInventory(payload);
+        expect(refreshAccessToken).toHaveBeenCalledWith('rt_old');
+        expect(storeCredentials).toHaveBeenCalledWith(expect.objectContaining({ accessToken: 'at_new', version: 2 }));
+        expect(fetchMock).toHaveBeenCalledWith(expect.stringContaining('/inventory-upload'), expect.objectContaining({
+            method: 'POST',
+            headers: expect.objectContaining({ Authorization: 'Bearer at_new' }),
+        }));
+        expect(result.applied).toBe(true);
+    });
+    it('UC-3: throws InventoryAuthError when the refresh fails', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue({
+            accessToken: 'at_expired',
+            refreshToken: 'rt_old',
+            expiresAt: Date.now() - 1_000,
+            version: 2,
+        });
+        vi.mocked(refreshAccessToken).mockResolvedValue(null);
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryAuthError);
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('UC-4: returns the 200 body verbatim, including the consent-off no-op', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        const consentOff = { ok: true, applied: false, reason: 'consent_disabled' };
+        fetchMock.mockResolvedValue(jsonResponse(consentOff, 200));
+        const result = await uploadInventory(payload);
+        expect(result).toEqual(consentOff);
+        expect(refreshAccessToken).not.toHaveBeenCalled();
+    });
+    it('UC-5a: maps 401 to InventoryAuthError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'authentication_required' }, 401));
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryAuthError);
+    });
+    it('UC-5b: maps 409 to InventoryConflictError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'device_conflict' }, 409));
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryConflictError);
+    });
+    it('UC-5c: maps 400 to InventoryValidationError carrying the server message', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'too_many_skills' }, 400));
+        // Single call: the mocked Response body can only be read once.
+        const error = await uploadInventory(payload).catch((e) => e);
+        expect(error).toBeInstanceOf(InventoryValidationError);
+        expect(error.message).toBe('too_many_skills');
+    });
+    it('UC-5d: maps 500 to InventoryUploadError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'server_error' }, 500));
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryUploadError);
+    });
+    it('UC-6: wraps a network throw in InventoryUploadError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockRejectedValue(new Error('ECONNREFUSED'));
+        await expect(uploadInventory(payload)).rejects.toBeInstanceOf(InventoryUploadError);
+    });
+    // Security invariant: tokens must never appear in error message strings.
+    // Covers both the non-200 response path and the network-throw path.
+    it('UC-7: error messages do not leak access tokens or refresh tokens (security invariant)', async () => {
+        const sentinelCreds = {
+            accessToken: 'at_SECRET_5392',
+            refreshToken: 'rt_SECRET_5392',
+            expiresAt: Date.now() + 3_600_000,
+            version: 2,
+        };
+        // Non-200 path: 500 → InventoryUploadError whose message must not contain tokens.
+        vi.mocked(loadCredentials).mockResolvedValue(sentinelCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'server_error' }, 500));
+        const err500 = await uploadInventory(payload).catch((e) => e);
+        expect(err500).toBeInstanceOf(InventoryUploadError);
+        expect(err500.message).not.toContain('at_SECRET_5392');
+        expect(err500.message).not.toContain('rt_SECRET_5392');
+        // Network-throw path: fetch rejects → InventoryUploadError whose message must not contain tokens.
+        vi.mocked(loadCredentials).mockResolvedValue(sentinelCreds);
+        fetchMock.mockRejectedValue(new Error('ECONNREFUSED'));
+        const errNet = await uploadInventory(payload).catch((e) => e);
+        expect(errNet).toBeInstanceOf(InventoryUploadError);
+        expect(errNet.message).not.toContain('at_SECRET_5392');
+        expect(errNet.message).not.toContain('rt_SECRET_5392');
+    });
+});
+// ---------------------------------------------------------------------------
+// purgeInventory (SMI-5510) — reuses the same auth + error-typing as upload.
+//
+// PC-1: 200 { ok, deleted_device_count } -> returns the count.
+// PC-2: no credentials -> InventoryAuthError, no fetch.
+// PC-3: expired credentials + failed refresh -> InventoryAuthError.
+// PC-4: 401 -> InventoryAuthError.
+// PC-5: 500 -> InventoryUploadError.
+// PC-6: network throw -> InventoryUploadError.
+// PC-7: unexpected 200 body shape -> InventoryUploadError.
+// ---------------------------------------------------------------------------
+describe('purgeInventory', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.stubGlobal('fetch', fetchMock);
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
+    });
+    it('PC-1: returns the deleted device count and POSTs to /purge-inventory with the bearer token', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ ok: true, deleted_device_count: 3 }, 200));
+        const deleted = await purgeInventory();
+        expect(deleted).toBe(3);
+        expect(fetchMock).toHaveBeenCalledWith(expect.stringContaining('/purge-inventory'), expect.objectContaining({
+            method: 'POST',
+            headers: expect.objectContaining({ Authorization: 'Bearer at_valid' }),
+        }));
+    });
+    it('PC-2: throws InventoryAuthError when no credentials are stored', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(null);
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryAuthError);
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('PC-3: throws InventoryAuthError when the refresh fails', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue({
+            accessToken: 'at_expired',
+            refreshToken: 'rt_old',
+            expiresAt: Date.now() - 1_000,
+            version: 2,
+        });
+        vi.mocked(refreshAccessToken).mockResolvedValue(null);
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryAuthError);
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('PC-4: maps 401 to InventoryAuthError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'authentication_required' }, 401));
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryAuthError);
+    });
+    it('PC-5: maps 500 to InventoryUploadError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ error: 'server_error' }, 500));
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryUploadError);
+    });
+    it('PC-6: wraps a network throw in InventoryUploadError', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockRejectedValue(new Error('ECONNREFUSED'));
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryUploadError);
+    });
+    it('PC-7: throws InventoryUploadError on an unexpected 200 body shape', async () => {
+        vi.mocked(loadCredentials).mockResolvedValue(futureCreds);
+        fetchMock.mockResolvedValue(jsonResponse({ ok: true }, 200));
+        await expect(purgeInventory()).rejects.toBeInstanceOf(InventoryUploadError);
+    });
+});
+//# sourceMappingURL=inventory-client.test.js.map

package/dist/src/sync/inventory-client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-client.test.js","sourceRoot":"","sources":["../../../src/sync/inventory-client.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAExE,EAAE,CAAC,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC3B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC1B,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAG9B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAA;AAEvC,MAAM,OAAO,GAA2B;IACtC,MAAM,EAAE,EAAE,SAAS,EAAE,sCAAsC,EAAE;IAC7D,MAAM,EAAE,EAAE;CACX,CAAA;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,UAAU;IACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;IACjC,OAAO,EAAE,CAAU;CACpB,CAAA;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAElD,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACjF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC;YAC3C,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,OAAO,EAAE,CAAC;SACX,CAAC,CAAA;QACF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAAC;YAC9C,WAAW,EAAE,QAAQ;YACrB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,OAAO,EAAE,CAAC;SACX,CAAC,CAAA;QACF,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAE3F,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;QAE7C,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAC3C,MAAM,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAC/D,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAC5C,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;SACrE,CAAC,CACH,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC;YAC3C,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,OAAO,EAAE,CAAC;SACX,CAAC,CAAA;QACF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAErD,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACjF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;QAC3E,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAA;QAE1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;QAE7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAEpF,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAE5E,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAE5E,+DAA+D;QAC/D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAA;QACtD,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAEzE,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QAEtD,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,oEAAoE;IACpE,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,aAAa,GAAG;YACpB,WAAW,EAAE,gBAAgB;YAC7B,YAAY,EAAE,gBAAgB;YAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,OAAO,EAAE,CAAU;SACpB,CAAA;QAED,kFAAkF;QAClF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;QAC3D,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAEzE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;QACnD,MAAM,CAAE,MAAgB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACjE,MAAM,CAAE,MAAgB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAEjE,kGAAkG;QAClG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;QAC3D,SAAS,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QAEtD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;QACnD,MAAM,CAAE,MAAgB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACjE,MAAM,CAAE,MAAgB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,wDAAwD;AACxD,oEAAoE;AACpE,mCAAmC;AACnC,qCAAqC;AACrC,+CAA+C;AAC/C,2DAA2D;AAC3D,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAErF,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAC3C,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC;SACvE,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAElD,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC;YAC3C,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,OAAO,EAAE,CAAC;SACX,CAAC,CAAA;QACF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAErD,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAEpF,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAEzE,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QAEtD,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QACzD,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAE5D,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/sync/inventory-collector.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Cross-harness skill collector (SMI-5392, umbrella SMI-5382).
+ *
+ * Walks every known harness skill directory (`CLIENT_NATIVE_PATHS`) and emits
+ * one {@link InventorySkillEntry} per (harness, skill) observed on disk. This is
+ * the shared scanner that both the CLI `inventory push` command (Wave 3) and the
+ * MCP inventory tool call before handing the snapshot to {@link uploadInventory}.
+ *
+ * Design parity with the CLI scanner at
+ * `packages/cli/src/utils/skills-directory.ts`:
+ * - Uses the SAME {@link SkillParser} to resolve `skill_id` / `version`.
+ * - Realpath-deduplicates ACROSS harnesses (collapses symlink aliases), but does
+ *   NOT name-deduplicate — the same skill independently installed under two
+ *   harnesses is two distinct rows (the `device_skills` PK is `(harness, skill_id)`).
+ *
+ * @module @skillsmith/core/sync/inventory-collector
+ */
+import type { InventorySkillEntry } from './inventory-types.js';
+/**
+ * Collect every harness-installed skill on this device as inventory entries.
+ *
+ * Scans each harness in {@link CLIENT_IDS} order. Repo-local `./.claude/skills`
+ * is intentionally excluded — inventory tracks harness-installed skills only, and
+ * `harness` is always a {@link ClientId}, never `'local'`.
+ *
+ * The result is NOT truncated to `INVENTORY_LIMITS.MAX_SKILLS`. Exceeding
+ * the cap is a real condition the caller / edge function must enforce (returning
+ * a `too_many_skills` 400) — silently dropping skills here would corrupt the
+ * server-side reconcile by making present skills look absent.
+ *
+ * @returns One entry per (harness, skill), realpath-deduplicated across harnesses.
+ * @see SMI-5392
+ */
+export declare function collectDeviceSkills(): Promise<InventorySkillEntry[]>;
+//# sourceMappingURL=inventory-collector.d.ts.map

package/dist/src/sync/inventory-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-collector.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAyJ/D;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAO1E"}

package/dist/src/sync/inventory-collector.js

@@ -0,0 +1,176 @@
+/**
+ * Cross-harness skill collector (SMI-5392, umbrella SMI-5382).
+ *
+ * Walks every known harness skill directory (`CLIENT_NATIVE_PATHS`) and emits
+ * one {@link InventorySkillEntry} per (harness, skill) observed on disk. This is
+ * the shared scanner that both the CLI `inventory push` command (Wave 3) and the
+ * MCP inventory tool call before handing the snapshot to {@link uploadInventory}.
+ *
+ * Design parity with the CLI scanner at
+ * `packages/cli/src/utils/skills-directory.ts`:
+ * - Uses the SAME {@link SkillParser} to resolve `skill_id` / `version`.
+ * - Realpath-deduplicates ACROSS harnesses (collapses symlink aliases), but does
+ *   NOT name-deduplicate — the same skill independently installed under two
+ *   harnesses is two distinct rows (the `device_skills` PK is `(harness, skill_id)`).
+ *
+ * @module @skillsmith/core/sync/inventory-collector
+ */
+import { readdir, readFile, realpath, stat } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { SkillParser } from '../indexer/SkillParser.js';
+import { CLIENT_IDS, CLIENT_NATIVE_PATHS } from '../install/paths.js';
+/**
+ * Resolve a path through `realpath` defensively. Returns the resolved path on
+ * success, or the input path unchanged when the link is broken / unreadable —
+ * dedup keying still works either way (we just can't collapse a broken alias).
+ */
+async function safeRealpath(path) {
+    try {
+        return await realpath(path);
+    }
+    catch {
+        return path;
+    }
+}
+/**
+ * Return `true` when a directory entry resolves to a directory, following
+ * symlinks. `withFileTypes` reports a symlinked directory as a symlink (not a
+ * directory), so symlinked aliases must be `stat`-resolved to be collected —
+ * which is exactly what makes the cross-harness realpath dedup observable.
+ */
+async function resolvesToDirectory(entryPath, isDirectory, isSymbolicLink) {
+    if (isDirectory)
+        return true;
+    if (!isSymbolicLink)
+        return false;
+    try {
+        return (await stat(entryPath)).isDirectory();
+    }
+    catch {
+        return false; // broken symlink
+    }
+}
+/**
+ * Read `<skillDir>/SKILL.md` and derive the inventory fields.
+ *
+ * - `content_hash` is the sha256 hex digest of the raw SKILL.md content. Wave 5
+ *   validates that this hashing stays drift-aligned with the indexer's hashing.
+ * - `skill_id` is the parsed `id` front-matter field, falling back to the parsed
+ *   `name`, then the directory name (same precedence as the CLI scanner).
+ * - A directory with no readable SKILL.md still counts as a skill: `skill_id` is
+ *   the directory name, with `version`, `content_hash`, and provenance fields `null`.
+ * - `author`, `license`, `repository` are self-asserted values from the SKILL.md
+ *   front-matter (SMI-5442 Wave 3). They are `null` when absent or unparseable.
+ */
+async function readSkillFields(skillDir, dirName) {
+    try {
+        const content = await readFile(join(skillDir, 'SKILL.md'), 'utf-8');
+        const contentHash = createHash('sha256').update(content, 'utf8').digest('hex');
+        const parsed = new SkillParser().parse(content);
+        if (!parsed) {
+            // SKILL.md is readable but has no valid frontmatter — hash still applies.
+            return {
+                skillId: dirName,
+                version: null,
+                contentHash,
+                author: null,
+                license: null,
+                repository: null,
+            };
+        }
+        // Match the CLI scanner: read `id` off the parsed metadata, then `name`.
+        const parsedId = parsed['id'];
+        return {
+            skillId: parsedId ?? parsed.name ?? dirName,
+            version: parsed.version ?? null,
+            contentHash,
+            author: parsed.author ?? null,
+            license: parsed.license ?? null,
+            repository: parsed.repository ?? null,
+        };
+    }
+    catch {
+        // No readable SKILL.md — still a skill, but version/hash/provenance are unknown.
+        return {
+            skillId: dirName,
+            version: null,
+            contentHash: null,
+            author: null,
+            license: null,
+            repository: null,
+        };
+    }
+}
+/**
+ * Scan a single harness directory and append its skills to `entries`,
+ * deduplicating by realpath via the shared `seenRealpaths` set.
+ */
+async function collectHarness(harness, entries, seenRealpaths) {
+    const harnessDir = CLIENT_NATIVE_PATHS[harness];
+    let dirents;
+    try {
+        dirents = await readdir(harnessDir, { withFileTypes: true });
+    }
+    catch (error) {
+        const code = error.code;
+        // Absent harness dir is the common case (harness not installed) — skip it.
+        if (code === 'ENOENT' || code === 'ENOTDIR')
+            return;
+        throw error;
+    }
+    for (const dirent of dirents) {
+        // Skip dot-prefixed directories: they are harness internals, not skills.
+        // Covers .backups (created by apply_recommended_edit — SMI-5440) and any
+        // other dot-dir that must not surface as inventory rows. (SMI-5442)
+        if (dirent.name.startsWith('.'))
+            continue;
+        const entryPath = join(harnessDir, dirent.name);
+        if (!(await resolvesToDirectory(entryPath, dirent.isDirectory(), dirent.isSymbolicLink()))) {
+            continue;
+        }
+        // Realpath dedup ACROSS harnesses: the first harness in CLIENT_IDS order
+        // wins, so a symlinked alias under a later harness is collapsed away.
+        const realDir = await safeRealpath(entryPath);
+        if (seenRealpaths.has(realDir))
+            continue;
+        seenRealpaths.add(realDir);
+        const { skillId, version, contentHash, author, license, repository } = await readSkillFields(entryPath, dirent.name);
+        entries.push({
+            harness,
+            skill_id: skillId,
+            version,
+            content_hash: contentHash,
+            source: null,
+            author,
+            license,
+            repository,
+            pinned_version: null,
+            update_policy: null,
+        });
+    }
+}
+/**
+ * Collect every harness-installed skill on this device as inventory entries.
+ *
+ * Scans each harness in {@link CLIENT_IDS} order. Repo-local `./.claude/skills`
+ * is intentionally excluded — inventory tracks harness-installed skills only, and
+ * `harness` is always a {@link ClientId}, never `'local'`.
+ *
+ * The result is NOT truncated to `INVENTORY_LIMITS.MAX_SKILLS`. Exceeding
+ * the cap is a real condition the caller / edge function must enforce (returning
+ * a `too_many_skills` 400) — silently dropping skills here would corrupt the
+ * server-side reconcile by making present skills look absent.
+ *
+ * @returns One entry per (harness, skill), realpath-deduplicated across harnesses.
+ * @see SMI-5392
+ */
+export async function collectDeviceSkills() {
+    const entries = [];
+    const seenRealpaths = new Set();
+    for (const harness of CLIENT_IDS) {
+        await collectHarness(harness, entries, seenRealpaths);
+    }
+    return entries;
+}
+//# sourceMappingURL=inventory-collector.js.map

package/dist/src/sync/inventory-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-collector.js","sourceRoot":"","sources":["../../../src/sync/inventory-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAiB,MAAM,qBAAqB,CAAA;AAGpF;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,WAAoB,EACpB,cAAuB;IAEvB,IAAI,WAAW;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAA;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA,CAAC,iBAAiB;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,OAAe;IASf,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QACnE,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,0EAA0E;YAC1E,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,IAAI;gBACb,WAAW;gBACX,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,IAAI;aACjB,CAAA;QACH,CAAC;QACD,yEAAyE;QACzE,MAAM,QAAQ,GAAI,MAA6C,CAAC,IAAI,CAAuB,CAAA;QAC3F,OAAO;YACL,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;SACtC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;QACjF,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;SACjB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAiB,EACjB,OAA8B,EAC9B,aAA0B;IAE1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAE/C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAA;QAClD,2EAA2E;QAC3E,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAM;QACnD,MAAM,KAAK,CAAA;IACb,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3F,SAAQ;QACV,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAQ;QACxC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE1B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAC1F,SAAS,EACT,MAAM,CAAC,IAAI,CACZ,CAAA;QACD,OAAO,CAAC,IAAI,CAAC;YACX,OAAO;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO;YACP,YAAY,EAAE,WAAW;YACzB,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,OAAO;YACP,UAAU;YACV,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,OAAO,GAA0B,EAAE,CAAA;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/src/sync/inventory-collector.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * inventory-collector tests (SMI-5392).
+ *
+ * Controls the harness directory table by mocking `../install/paths.js` so each
+ * `ClientId` points at a real tmp fixture. CLIENT_NATIVE_PATHS is a mutable
+ * object the collector reads at call time, so per-test fixtures are visible
+ * without re-importing the module.
+ *
+ * IC-1: same skill under two harnesses (distinct realpaths) -> two entries.
+ * IC-2: a symlinked alias across harnesses -> one entry (first ClientId wins).
+ * IC-3: readable SKILL.md -> content_hash + version; missing SKILL.md -> nulls.
+ */
+export {};
+//# sourceMappingURL=inventory-collector.test.d.ts.map

package/dist/src/sync/inventory-collector.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-collector.test.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-collector.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/src/sync/inventory-collector.test.js

@@ -0,0 +1,156 @@
+/**
+ * inventory-collector tests (SMI-5392).
+ *
+ * Controls the harness directory table by mocking `../install/paths.js` so each
+ * `ClientId` points at a real tmp fixture. CLIENT_NATIVE_PATHS is a mutable
+ * object the collector reads at call time, so per-test fixtures are visible
+ * without re-importing the module.
+ *
+ * IC-1: same skill under two harnesses (distinct realpaths) -> two entries.
+ * IC-2: a symlinked alias across harnesses -> one entry (first ClientId wins).
+ * IC-3: readable SKILL.md -> content_hash + version; missing SKILL.md -> nulls.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { mkdtemp, mkdir, writeFile, symlink, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const mockPaths = vi.hoisted(() => ({
+    CLIENT_IDS: ['claude-code', 'cursor', 'copilot', 'windsurf', 'agents'],
+    CLIENT_NATIVE_PATHS: {},
+}));
+vi.mock('../install/paths.js', () => ({
+    CLIENT_IDS: mockPaths.CLIENT_IDS,
+    CLIENT_NATIVE_PATHS: mockPaths.CLIENT_NATIVE_PATHS,
+}));
+import { collectDeviceSkills } from './inventory-collector.js';
+import { INVENTORY_LIMITS } from './inventory-types.js';
+function skillMd(name, version) {
+    const versionLine = version ? `\nversion: ${version}` : '';
+    return `---\nname: ${name}${versionLine}\n---\n\n# ${name}\n`;
+}
+function skillMdWithProvenance(name, provenance, version) {
+    const versionLine = version ? `\nversion: ${version}` : '';
+    const authorLine = provenance.author ? `\nauthor: ${provenance.author}` : '';
+    const licenseLine = provenance.license ? `\nlicense: ${provenance.license}` : '';
+    const repoLine = provenance.repository ? `\nrepository: ${provenance.repository}` : '';
+    return `---\nname: ${name}${versionLine}${authorLine}${licenseLine}${repoLine}\n---\n\n# ${name}\n`;
+}
+async function createSkill(harness, name, opts = {}) {
+    const dir = join(mockPaths.CLIENT_NATIVE_PATHS[harness], name);
+    await mkdir(dir, { recursive: true });
+    if (opts.withSkillMd !== false) {
+        const content = opts.content ?? skillMd(name, opts.version);
+        await writeFile(join(dir, 'SKILL.md'), content);
+    }
+    return dir;
+}
+let root;
+describe('inventory-collector', () => {
+    beforeEach(async () => {
+        root = await mkdtemp(join(tmpdir(), 'inv-collector-'));
+        // Point every harness at its own (initially absent) subdir under root.
+        for (const id of mockPaths.CLIENT_IDS) {
+            mockPaths.CLIENT_NATIVE_PATHS[id] = join(root, id);
+        }
+    });
+    afterEach(async () => {
+        await rm(root, { recursive: true, force: true });
+        vi.restoreAllMocks();
+    });
+    it('IC-1: emits two entries for the same skill installed under two harnesses', async () => {
+        await createSkill('claude-code', 'foo', { version: '1.0.0' });
+        await createSkill('cursor', 'foo', { version: '2.0.0' });
+        const entries = await collectDeviceSkills();
+        const foo = entries.filter((e) => e.skill_id === 'foo');
+        expect(foo).toHaveLength(2);
+        expect(foo.map((e) => e.harness).sort()).toEqual(['claude-code', 'cursor']);
+        // Distinct realpaths -> distinct rows, each carrying its own version + hash.
+        expect(foo.every((e) => typeof e.content_hash === 'string')).toBe(true);
+        // Static fields are always null at the local-agent layer.
+        expect(foo.every((e) => e.source === null && e.pinned_version === null)).toBe(true);
+        expect(foo.every((e) => e.update_policy === null)).toBe(true);
+    });
+    it('IC-2: collapses a symlinked alias across harnesses to one entry (first ClientId wins)', async () => {
+        const real = await createSkill('claude-code', 'bar', { version: '1.0.0' });
+        await mkdir(mockPaths.CLIENT_NATIVE_PATHS['agents'], { recursive: true });
+        await symlink(real, join(mockPaths.CLIENT_NATIVE_PATHS['agents'], 'bar'), 'dir');
+        const entries = await collectDeviceSkills();
+        const bar = entries.filter((e) => e.skill_id === 'bar');
+        expect(bar).toHaveLength(1);
+        // claude-code precedes agents in CLIENT_IDS, so it wins the dedup.
+        expect(bar[0]?.harness).toBe('claude-code');
+    });
+    // IC-4: No truncation at MAX_SKILLS boundary.
+    //
+    // The collector is intentionally uncapped — it returns EVERY on-disk entry.
+    // The >5000 ceiling is enforced server-side via the `too_many_skills` 400 error
+    // (see inventory-client tests) and will be covered end-to-end in Wave 5. This
+    // test verifies the guarantee cheaply using a small K so the suite stays fast.
+    it('IC-4: returned entry count equals the number of on-disk skills with no local cap applied', async () => {
+        const K = 4;
+        for (let i = 0; i < K; i++) {
+            await createSkill('claude-code', `skill-ic4-${i}`, { version: `1.0.${i}` });
+        }
+        const entries = await collectDeviceSkills();
+        const ic4 = entries.filter((e) => e.skill_id.startsWith('skill-ic4-'));
+        // The collector must not truncate: returned count must equal the on-disk count.
+        expect(ic4).toHaveLength(K);
+        // K is well below the server-enforced limit — no false ceiling here.
+        expect(K).toBeLessThan(INVENTORY_LIMITS.MAX_SKILLS);
+    });
+    it('IC-3: populates content_hash + version for readable SKILL.md, nulls for missing', async () => {
+        await createSkill('claude-code', 'withmd', { version: '3.1.4' });
+        await createSkill('cursor', 'nomd', { withSkillMd: false });
+        const entries = await collectDeviceSkills();
+        const withMd = entries.find((e) => e.skill_id === 'withmd');
+        const noMd = entries.find((e) => e.skill_id === 'nomd');
+        expect(withMd?.version).toBe('3.1.4');
+        expect(withMd?.content_hash).toMatch(/^[0-9a-f]{64}$/);
+        // A subdir with no readable SKILL.md still counts, keyed by its dir name.
+        expect(noMd).toBeDefined();
+        expect(noMd?.version).toBeNull();
+        expect(noMd?.content_hash).toBeNull();
+    });
+    // IC-5: provenance fields from SKILL.md front-matter propagate to the entry.
+    it('IC-5: captures author/license/repository from SKILL.md front-matter (SMI-5442)', async () => {
+        await createSkill('claude-code', 'provenance-skill', {
+            version: '1.0.0',
+            content: skillMdWithProvenance('provenance-skill', {
+                author: 'acme/tools',
+                license: 'MIT',
+                repository: 'https://github.com/acme/tools',
+            }, '1.0.0'),
+        });
+        const entries = await collectDeviceSkills();
+        const entry = entries.find((e) => e.skill_id === 'provenance-skill');
+        expect(entry).toBeDefined();
+        expect(entry?.author).toBe('acme/tools');
+        expect(entry?.license).toBe('MIT');
+        expect(entry?.repository).toBe('https://github.com/acme/tools');
+    });
+    // IC-6: provenance fields are null/absent when not in SKILL.md front-matter.
+    it('IC-6: provenance fields are null when absent from SKILL.md front-matter (SMI-5442)', async () => {
+        // skillMd() produces a minimal front-matter with no provenance fields.
+        await createSkill('claude-code', 'no-provenance', { version: '0.1.0' });
+        const entries = await collectDeviceSkills();
+        const entry = entries.find((e) => e.skill_id === 'no-provenance');
+        expect(entry).toBeDefined();
+        expect(entry?.author).toBeNull();
+        expect(entry?.license).toBeNull();
+        expect(entry?.repository).toBeNull();
+    });
+    // IC-7: dot-prefixed directories (.backups and friends) are NOT enumerated.
+    it('IC-7: dot-prefixed directories are skipped and never emitted as skill entries (SMI-5440/5442)', async () => {
+        await createSkill('claude-code', 'real-skill', { version: '1.0.0' });
+        // .backups is the canonical dot-dir created by apply_recommended_edit.
+        // It contains a SKILL.md subdirectory (an EISDIR if you try to read it as a
+        // file), which previously caused it to appear as an unknown skill entry.
+        const backupsDir = join(mockPaths.CLIENT_NATIVE_PATHS['claude-code'], '.backups');
+        await mkdir(join(backupsDir, 'SKILL.md'), { recursive: true });
+        const entries = await collectDeviceSkills();
+        expect(entries.find((e) => e.skill_id === 'real-skill')).toBeDefined();
+        expect(entries.find((e) => e.skill_id === '.backups')).toBeUndefined();
+        expect(entries.some((e) => e.skill_id.startsWith('.'))).toBe(false);
+    });
+});
+//# sourceMappingURL=inventory-collector.test.js.map

package/dist/src/sync/inventory-collector.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-collector.test.js","sourceRoot":"","sources":["../../../src/sync/inventory-collector.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAU;IAC/E,mBAAmB,EAAE,EAA4B;CAClD,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,UAAU,EAAE,SAAS,CAAC,UAAU;IAChC,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;CACnD,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,SAAS,OAAO,CAAC,IAAY,EAAE,OAAgB;IAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,OAAO,cAAc,IAAI,GAAG,WAAW,cAAc,IAAI,IAAI,CAAA;AAC/D,CAAC;AAQD,SAAS,qBAAqB,CAC5B,IAAY,EACZ,UAA4B,EAC5B,OAAgB;IAEhB,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACtF,OAAO,cAAc,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,cAAc,IAAI,IAAI,CAAA;AACrG,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,IAAY,EACZ,OAAsE,EAAE;IAExE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAW,EAAE,IAAI,CAAC,CAAA;IACxE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,IAAI,IAAY,CAAA;AAEhB,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACtD,uEAAuE;QACvE,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACtC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,EAAE,CAAC,eAAe,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAA;QAEvD,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC3E,6EAA6E;QAC7E,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,0DAA0D;QAC1D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1E,MAAM,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnF,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAW,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QAE1F,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAA;QAEvD,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,mEAAmE;QACnE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,8CAA8C;IAC9C,EAAE;IACF,4EAA4E;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,MAAM,CAAC,GAAG,CAAC,CAAA;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;QAEtE,gFAAgF;QAChF,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,qEAAqE;QACrE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,WAAW,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAChE,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;QAE3D,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAA;QAEvD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAEtD,0EAA0E;QAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,WAAW,CAAC,aAAa,EAAE,kBAAkB,EAAE;YACnD,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,qBAAqB,CAC5B,kBAAkB,EAClB;gBACE,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,+BAA+B;aAC5C,EACD,OAAO,CACR;SACF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAA;QAEpE,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,uEAAuE;QACvE,MAAM,WAAW,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAEvE,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAA;QAEjE,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QACjC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,WAAW,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAEpE,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,aAAa,CAAW,EAAE,UAAU,CAAC,CAAA;QAC3F,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE9D,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAE3C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}