@skillsmith/core 0.8.2 → 0.10.0

package/dist/src/sync/inventory-device.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Device-identity builder for the cross-harness inventory payload
+ * (SMI-5392, umbrella SMI-5382).
+ *
+ * Produces the {@link InventoryDevice} half of an {@link InventoryUploadPayload}.
+ * Field minimization follows ADR-124: the raw hostname is NEVER sent by default
+ * (`hostname_display` is `null` this wave); only a salt-free sha256 `hostname_hash`
+ * is included as a soft duplicate-device hint. The hash is not trivially
+ * reversible, but a low-entropy hostname is dictionary-recoverable — this is
+ * acceptable per ADR-124 because the hash is scoped to the user's own
+ * authenticated account, never exposed cross-tenant.
+ *
+ * @module @skillsmith/core/sync/inventory-device
+ */
+import { type InventoryDevice } from './inventory-types.js';
+/** Options accepted by {@link buildInventoryDevice}. */
+export interface BuildInventoryDeviceOptions {
+    /** Skillsmith CLI version that produced the snapshot (defaults to `null`). */
+    cliVersion?: string | null;
+}
+/**
+ * Build the {@link InventoryDevice} descriptor for this machine.
+ *
+ * - `device_id` is the stable client-generated UUID (created on first call).
+ * - `label` is the user's optional device label from `~/.skillsmith/config.json`
+ *   (`inventory.deviceLabel`); there is no dedicated getter in `device-identity`,
+ *   so it is read directly from config and capped to `LABEL_MAX`.
+ * - `hostname_display` is always `null` this wave (ADR-124 minimization).
+ * - `hostname_hash` is the sha256 hex of `os.hostname()` — a soft duplicate hint.
+ *
+ * @param opts - Optional CLI version to stamp on the snapshot.
+ * @returns A fully-minimized device descriptor.
+ * @see SMI-5392
+ */
+export declare function buildInventoryDevice(opts?: BuildInventoryDeviceOptions): InventoryDevice;
+//# sourceMappingURL=inventory-device.d.ts.map

package/dist/src/sync/inventory-device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-device.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-device.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,EAAoB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE7E,wDAAwD;AACxD,MAAM,WAAW,2BAA2B;IAC1C,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,2BAA2B,GAAG,eAAe,CAcxF"}

package/dist/src/sync/inventory-device.js

@@ -0,0 +1,58 @@
+/**
+ * Device-identity builder for the cross-harness inventory payload
+ * (SMI-5392, umbrella SMI-5382).
+ *
+ * Produces the {@link InventoryDevice} half of an {@link InventoryUploadPayload}.
+ * Field minimization follows ADR-124: the raw hostname is NEVER sent by default
+ * (`hostname_display` is `null` this wave); only a salt-free sha256 `hostname_hash`
+ * is included as a soft duplicate-device hint. The hash is not trivially
+ * reversible, but a low-entropy hostname is dictionary-recoverable — this is
+ * acceptable per ADR-124 because the hash is scoped to the user's own
+ * authenticated account, never exposed cross-tenant.
+ *
+ * @module @skillsmith/core/sync/inventory-device
+ */
+import { hostname } from 'node:os';
+import { createHash } from 'node:crypto';
+import { getOrCreateDeviceId } from '../config/device-identity.js';
+import { loadConfig } from '../config/index.js';
+import { INVENTORY_LIMITS } from './inventory-types.js';
+/**
+ * Truncate `value` to at most `max` characters, returning `null` for nullish
+ * input. Guards every length-capped column so a malformed local value can't
+ * trip a DB CHECK constraint mid-reconcile.
+ */
+function capped(value, max) {
+    if (value == null)
+        return null;
+    return value.length > max ? value.slice(0, max) : value;
+}
+/**
+ * Build the {@link InventoryDevice} descriptor for this machine.
+ *
+ * - `device_id` is the stable client-generated UUID (created on first call).
+ * - `label` is the user's optional device label from `~/.skillsmith/config.json`
+ *   (`inventory.deviceLabel`); there is no dedicated getter in `device-identity`,
+ *   so it is read directly from config and capped to `LABEL_MAX`.
+ * - `hostname_display` is always `null` this wave (ADR-124 minimization).
+ * - `hostname_hash` is the sha256 hex of `os.hostname()` — a soft duplicate hint.
+ *
+ * @param opts - Optional CLI version to stamp on the snapshot.
+ * @returns A fully-minimized device descriptor.
+ * @see SMI-5392
+ */
+export function buildInventoryDevice(opts) {
+    const deviceId = getOrCreateDeviceId();
+    const deviceLabel = loadConfig().inventory?.deviceLabel;
+    const hostnameHash = createHash('sha256').update(hostname(), 'utf8').digest('hex');
+    return {
+        device_id: deviceId,
+        label: capped(deviceLabel, INVENTORY_LIMITS.LABEL_MAX),
+        hostname_display: null,
+        hostname_hash: capped(hostnameHash, INVENTORY_LIMITS.HOSTNAME_HASH_MAX),
+        platform: capped(process.platform, INVENTORY_LIMITS.PLATFORM_MAX),
+        arch: capped(process.arch, INVENTORY_LIMITS.ARCH_MAX),
+        cli_version: capped(opts?.cliVersion, INVENTORY_LIMITS.CLI_VERSION_MAX),
+    };
+}
+//# sourceMappingURL=inventory-device.js.map

package/dist/src/sync/inventory-device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-device.js","sourceRoot":"","sources":["../../../src/sync/inventory-device.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAQ7E;;;;GAIG;AACH,SAAS,MAAM,CAAC,KAAgC,EAAE,GAAW;IAC3D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACzD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkC;IACrE,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAA;IACtC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC,SAAS,EAAE,WAAW,CAAA;IACvD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAElF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC;QACtD,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;QACvE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,YAAY,CAAC;QACjE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACrD,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,eAAe,CAAC;KACxE,CAAA;AACH,CAAC"}

package/dist/src/sync/inventory-push.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Inventory push orchestrator (SMI-5392, umbrella SMI-5382).
+ *
+ * The single entry point both the CLI command and the MCP tool call to push this
+ * device's inventory. Wires together the local opt-out gate, the payload builder,
+ * the upload client, and the auto-push throttle.
+ *
+ * @module @skillsmith/core/sync/inventory-push
+ */
+import type { BuildInventoryDeviceOptions } from './inventory-device.js';
+import type { InventoryUploadResult } from './inventory-types.js';
+/** Options accepted by {@link pushInventory}. */
+export type PushInventoryOptions = BuildInventoryDeviceOptions;
+/** Options accepted by {@link maybeAutoPush}. */
+export interface MaybeAutoPushOptions extends BuildInventoryDeviceOptions {
+    /** Injectable clock for deterministic throttle tests (defaults to `Date.now()`). */
+    now?: number;
+}
+/**
+ * Build and upload this device's inventory snapshot.
+ *
+ * When the local opt-out flag (`SKILLSMITH_INVENTORY_DISABLE`) is set, this is a
+ * pure no-op: NO network call, and NO device-id creation. On a server-applied
+ * upload, the last-push timestamp is persisted for the auto-push throttle. A
+ * consent-off `{ applied: false, reason: 'consent_disabled' }` result is returned
+ * as-is and does NOT advance the throttle (so consent re-enablement pushes promptly).
+ *
+ * @param opts - Optional CLI version to stamp on the snapshot.
+ * @returns The upload result (or the local-disable no-op).
+ * @see SMI-5392
+ */
+export declare function pushInventory(opts?: PushInventoryOptions): Promise<InventoryUploadResult>;
+/**
+ * Auto-push entry point for the session-start hook.
+ *
+ * Returns `null` (without pushing) when sync is locally disabled or the throttle
+ * window has not elapsed. Upload errors are SWALLOWED — an auto-push must never
+ * throw into a session hook — logged to `console.error` and reported as `null`.
+ *
+ * @param opts - Optional CLI version + injectable clock.
+ * @returns The upload result, or `null` when skipped / throttled / errored.
+ * @see SMI-5392
+ */
+export declare function maybeAutoPush(opts?: MaybeAutoPushOptions): Promise<InventoryUploadResult | null>;
+//# sourceMappingURL=inventory-push.d.ts.map

package/dist/src/sync/inventory-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-push.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAA;AACxE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,CAAA;AAE9D,iDAAiD;AACjD,MAAM,WAAW,oBAAqB,SAAQ,2BAA2B;IACvE,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAa/F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CACjC,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAYvC"}

package/dist/src/sync/inventory-push.js

@@ -0,0 +1,62 @@
+/**
+ * Inventory push orchestrator (SMI-5392, umbrella SMI-5382).
+ *
+ * The single entry point both the CLI command and the MCP tool call to push this
+ * device's inventory. Wires together the local opt-out gate, the payload builder,
+ * the upload client, and the auto-push throttle.
+ *
+ * @module @skillsmith/core/sync/inventory-push
+ */
+import { getLastInventoryPushAt, isInventorySyncDisabledLocally, recordInventoryPush, shouldAutoPush, } from '../config/device-identity.js';
+import { buildInventoryPayload } from './inventory-builder.js';
+import { uploadInventory } from './inventory-client.js';
+/**
+ * Build and upload this device's inventory snapshot.
+ *
+ * When the local opt-out flag (`SKILLSMITH_INVENTORY_DISABLE`) is set, this is a
+ * pure no-op: NO network call, and NO device-id creation. On a server-applied
+ * upload, the last-push timestamp is persisted for the auto-push throttle. A
+ * consent-off `{ applied: false, reason: 'consent_disabled' }` result is returned
+ * as-is and does NOT advance the throttle (so consent re-enablement pushes promptly).
+ *
+ * @param opts - Optional CLI version to stamp on the snapshot.
+ * @returns The upload result (or the local-disable no-op).
+ * @see SMI-5392
+ */
+export async function pushInventory(opts) {
+    if (isInventorySyncDisabledLocally()) {
+        return { ok: true, applied: false, reason: 'disabled_locally' };
+    }
+    const payload = await buildInventoryPayload(opts);
+    const result = await uploadInventory(payload);
+    if (result.applied) {
+        recordInventoryPush(new Date().toISOString());
+    }
+    return result;
+}
+/**
+ * Auto-push entry point for the session-start hook.
+ *
+ * Returns `null` (without pushing) when sync is locally disabled or the throttle
+ * window has not elapsed. Upload errors are SWALLOWED — an auto-push must never
+ * throw into a session hook — logged to `console.error` and reported as `null`.
+ *
+ * @param opts - Optional CLI version + injectable clock.
+ * @returns The upload result, or `null` when skipped / throttled / errored.
+ * @see SMI-5392
+ */
+export async function maybeAutoPush(opts) {
+    if (isInventorySyncDisabledLocally())
+        return null;
+    const now = opts?.now ?? Date.now();
+    if (!shouldAutoPush(now, getLastInventoryPushAt()))
+        return null;
+    try {
+        return await pushInventory(opts);
+    }
+    catch (error) {
+        console.error('[skillsmith] inventory auto-push failed:', error);
+        return null;
+    }
+}
+//# sourceMappingURL=inventory-push.js.map

package/dist/src/sync/inventory-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-push.js","sourceRoot":"","sources":["../../../src/sync/inventory-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,cAAc,GACf,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAavD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA2B;IAC7D,IAAI,8BAA8B,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;IAE7C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,mBAAmB,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA2B;IAE3B,IAAI,8BAA8B,EAAE;QAAE,OAAO,IAAI,CAAA;IAEjD,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,sBAAsB,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/D,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAChE,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/src/sync/inventory-push.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * inventory-push tests (SMI-5392).
+ *
+ * Mocks the payload builder and upload client; keeps the real (pure)
+ * `isInventorySyncDisabledLocally` + `shouldAutoPush` so the env-flag and
+ * throttle paths exercise production logic, while `recordInventoryPush` and
+ * `getLastInventoryPushAt` are stubbed for observation/control.
+ *
+ * IP-1: SKILLSMITH_INVENTORY_DISABLE set -> disabled_locally no-op, no upload.
+ * IP-2: applied result -> recordInventoryPush called.
+ * IP-3: consent-off result -> recordInventoryPush NOT called.
+ * IP-4: maybeAutoPush throttled (recent lastPushAt) -> null without pushing.
+ * IP-5: maybeAutoPush swallows an upload error and returns null.
+ */
+export {};
+//# sourceMappingURL=inventory-push.test.d.ts.map

package/dist/src/sync/inventory-push.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-push.test.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-push.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/src/sync/inventory-push.test.js

@@ -0,0 +1,104 @@
+/**
+ * inventory-push tests (SMI-5392).
+ *
+ * Mocks the payload builder and upload client; keeps the real (pure)
+ * `isInventorySyncDisabledLocally` + `shouldAutoPush` so the env-flag and
+ * throttle paths exercise production logic, while `recordInventoryPush` and
+ * `getLastInventoryPushAt` are stubbed for observation/control.
+ *
+ * IP-1: SKILLSMITH_INVENTORY_DISABLE set -> disabled_locally no-op, no upload.
+ * IP-2: applied result -> recordInventoryPush called.
+ * IP-3: consent-off result -> recordInventoryPush NOT called.
+ * IP-4: maybeAutoPush throttled (recent lastPushAt) -> null without pushing.
+ * IP-5: maybeAutoPush swallows an upload error and returns null.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+vi.mock('./inventory-builder.js', () => ({ buildInventoryPayload: vi.fn() }));
+vi.mock('./inventory-client.js', () => ({ uploadInventory: vi.fn() }));
+vi.mock('../config/device-identity.js', async (importActual) => {
+    const actual = await importActual();
+    return {
+        ...actual,
+        recordInventoryPush: vi.fn(),
+        getLastInventoryPushAt: vi.fn(() => undefined),
+    };
+});
+import { buildInventoryPayload } from './inventory-builder.js';
+import { uploadInventory } from './inventory-client.js';
+import { recordInventoryPush, getLastInventoryPushAt } from '../config/device-identity.js';
+import { pushInventory, maybeAutoPush } from './inventory-push.js';
+const samplePayload = { device: { device_id: 'd' }, skills: [] };
+describe('inventory-push', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        delete process.env.SKILLSMITH_INVENTORY_DISABLE;
+        vi.mocked(buildInventoryPayload).mockResolvedValue(samplePayload);
+        vi.mocked(getLastInventoryPushAt).mockReturnValue(undefined);
+    });
+    afterEach(() => {
+        delete process.env.SKILLSMITH_INVENTORY_DISABLE;
+        vi.restoreAllMocks();
+    });
+    it('IP-1: returns disabled_locally without uploading when the env flag is set', async () => {
+        process.env.SKILLSMITH_INVENTORY_DISABLE = '1';
+        const result = await pushInventory();
+        expect(result).toEqual({ ok: true, applied: false, reason: 'disabled_locally' });
+        expect(buildInventoryPayload).not.toHaveBeenCalled();
+        expect(uploadInventory).not.toHaveBeenCalled();
+        expect(recordInventoryPush).not.toHaveBeenCalled();
+    });
+    it('IP-2: records the push timestamp when the result is applied', async () => {
+        vi.mocked(uploadInventory).mockResolvedValue({ ok: true, applied: true, device_id: 'd' });
+        const result = await pushInventory();
+        expect(result.applied).toBe(true);
+        expect(recordInventoryPush).toHaveBeenCalledTimes(1);
+        expect(recordInventoryPush).toHaveBeenCalledWith(expect.any(String));
+    });
+    it('IP-3: does not record a push when consent is disabled server-side', async () => {
+        vi.mocked(uploadInventory).mockResolvedValue({
+            ok: true,
+            applied: false,
+            reason: 'consent_disabled',
+        });
+        const result = await pushInventory();
+        expect(result.applied).toBe(false);
+        expect(recordInventoryPush).not.toHaveBeenCalled();
+    });
+    it('IP-4: maybeAutoPush returns null without pushing when throttled', async () => {
+        vi.mocked(getLastInventoryPushAt).mockReturnValue(new Date(Date.now() - 1_000).toISOString());
+        const result = await maybeAutoPush({ now: Date.now() });
+        expect(result).toBeNull();
+        expect(buildInventoryPayload).not.toHaveBeenCalled();
+        expect(uploadInventory).not.toHaveBeenCalled();
+    });
+    it('IP-5: maybeAutoPush swallows an upload error and returns null', async () => {
+        const errorSpy = vi.spyOn(console, 'error').mockImplementation(() => undefined);
+        vi.mocked(uploadInventory).mockRejectedValue(new Error('boom'));
+        const result = await maybeAutoPush();
+        expect(result).toBeNull();
+        expect(errorSpy).toHaveBeenCalled();
+    });
+    it('IP-6: maybeAutoPush returns null without uploading when sync is locally disabled', async () => {
+        process.env.SKILLSMITH_INVENTORY_DISABLE = '1';
+        const result = await maybeAutoPush();
+        expect(result).toBeNull();
+        expect(buildInventoryPayload).not.toHaveBeenCalled();
+        expect(uploadInventory).not.toHaveBeenCalled();
+    });
+    it('IP-7: maybeAutoPush returns the applied result and records the push timestamp', async () => {
+        // getLastInventoryPushAt returns undefined (set in beforeEach) so shouldAutoPush is true.
+        const applied = {
+            ok: true,
+            applied: true,
+            device_id: 'd',
+            skills_present: 5,
+            skills_absent: 0,
+        };
+        vi.mocked(uploadInventory).mockResolvedValue(applied);
+        const result = await maybeAutoPush();
+        expect(result).toEqual(applied);
+        expect(recordInventoryPush).toHaveBeenCalledTimes(1);
+        expect(recordInventoryPush).toHaveBeenCalledWith(expect.any(String));
+    });
+});
+//# sourceMappingURL=inventory-push.test.js.map

package/dist/src/sync/inventory-push.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-push.test.js","sourceRoot":"","sources":["../../../src/sync/inventory-push.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAExE,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7E,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACtE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;IAC7D,MAAM,MAAM,GAAG,MAAM,YAAY,EAAiD,CAAA;IAClF,OAAO;QACL,GAAG,MAAM;QACT,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC5B,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;KACzE,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAC1F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAElE,MAAM,aAAa,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AAEhE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;QACjE,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,EAAE,CAAC,eAAe,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAE9C,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACpD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC9C,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;QAEzF,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,mBAAmB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC;YAC3C,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QAE7F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACpD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/E,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAE9C,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACpD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,0FAA0F;QAC1F,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,IAAa;YACjB,OAAO,EAAE,IAAa;YACtB,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,CAAC;SACjB,CAAA;QACD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAErD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,CAAC,mBAAmB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/sync/inventory-types.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Cross-harness inventory payload contract (SMI-5389, umbrella SMI-5382).
+ *
+ * This is the SINGLE canonical declaration of the wire shape that the local
+ * agent pushes to `POST /functions/v1/inventory-upload`. The CLI (Wave 3) and
+ * website (Wave 4) import these types directly. The Deno edge function cannot
+ * import a Node package, so `supabase/functions/inventory-upload/payload.ts`
+ * mirrors this shape structurally and validates it at runtime — keep the two in
+ * lock-step (the edge validator references this module by path in its header).
+ *
+ * ADR-125 (control plane + data model), ADR-124 (consent + field minimization).
+ */
+/**
+ * Per-machine identity + metadata. `device_id` is a client-generated UUID
+ * persisted in `~/.skillsmith/config.json` (ADR-125 Spike S2). Every other field
+ * is optional and minimized by default (ADR-124): a raw hostname is only sent on
+ * explicit opt-in; otherwise send a label and/or `hostname_hash`.
+ */
+export interface InventoryDevice {
+    /** Client-generated stable UUID. Required. */
+    device_id: string;
+    /** User-facing label (e.g. "work laptop"). */
+    label?: string | null;
+    /** Display hostname — truncated/redacted by default. */
+    hostname_display?: string | null;
+    /** Hash of the raw hostname for a soft duplicate-device hint (no auto-merge). */
+    hostname_hash?: string | null;
+    /** `process.platform` (e.g. "darwin", "linux", "win32"). */
+    platform?: string | null;
+    /** `process.arch` (e.g. "arm64", "x64"). */
+    arch?: string | null;
+    /** Skillsmith CLI version that produced the snapshot. */
+    cli_version?: string | null;
+}
+/** What the local agent does with a skill when the registry advances. */
+export type InventoryUpdatePolicy = 'auto' | 'manual' | 'never';
+/**
+ * One observed skill on one harness on this device. `skill_id` is the registry
+ * id (`author/name`); local/unmatched skills still report their best id and
+ * resolve to the `unknown` drift state server-side.
+ */
+export interface InventorySkillEntry {
+    /** Harness slug (e.g. "claude-code", "opencode"). Required. */
+    harness: string;
+    /** Skill id, conventionally `author/name`. Required. */
+    skill_id: string;
+    /** Installed version string, if known. */
+    version?: string | null;
+    /** Where it was installed from (registry, local path, git, …). */
+    source?: string | null;
+    /** Author claim from SKILL.md front-matter — self-asserted (unverified). */
+    author?: string | null;
+    /** License claim from SKILL.md front-matter — self-asserted (unverified). */
+    license?: string | null;
+    /** Repository URL claim from SKILL.md front-matter — self-asserted (unverified). */
+    repository?: string | null;
+    /** Content hash of the installed skill, for registry drift detection. */
+    content_hash?: string | null;
+    /** Pinned version, if the user pinned it (suppresses drift/stale flags). */
+    pinned_version?: string | null;
+    /** Update policy for this skill. */
+    update_policy?: InventoryUpdatePolicy | null;
+}
+/** Full request body for `POST /functions/v1/inventory-upload`. */
+export interface InventoryUploadPayload {
+    device: InventoryDevice;
+    skills: InventorySkillEntry[];
+}
+/**
+ * Response body from `inventory-upload` (mirrors the `reconcile_device_inventory`
+ * RPC return). `applied: false` with `reason: 'consent_disabled'` is the
+ * consent-off no-op — a success, not an error.
+ */
+export interface InventoryUploadResult {
+    ok: boolean;
+    applied: boolean;
+    reason?: string;
+    device_id?: string;
+    skills_present?: number;
+    skills_absent?: number;
+}
+/**
+ * Shared caps. Mirrors the column CHECK constraints in
+ * `20260626000001_user_inventory.sql` and the payload bound in
+ * `reconcile_device_inventory`. The edge validator and the local agent both
+ * enforce these so a malformed push fails fast with a 400 rather than tripping a
+ * DB constraint mid-reconcile.
+ */
+export declare const INVENTORY_LIMITS: {
+    readonly MAX_SKILLS: 5000;
+    readonly LABEL_MAX: 100;
+    readonly HOSTNAME_DISPLAY_MAX: 100;
+    readonly HOSTNAME_HASH_MAX: 64;
+    readonly PLATFORM_MAX: 32;
+    readonly ARCH_MAX: 32;
+    readonly CLI_VERSION_MAX: 32;
+    readonly HARNESS_MAX: 32;
+    readonly SKILL_ID_MAX: 255;
+    readonly VERSION_MAX: 64;
+    readonly SOURCE_MAX: 255;
+    readonly AUTHOR_MAX: 200;
+    readonly LICENSE_MAX: 64;
+    readonly REPOSITORY_MAX: 512;
+    readonly CONTENT_HASH_MAX: 128;
+    readonly PINNED_VERSION_MAX: 64;
+    readonly UPDATE_POLICY_MAX: 16;
+};
+/** Allowed `update_policy` values (mirrors the DB CHECK constraint). */
+export declare const INVENTORY_UPDATE_POLICIES: readonly InventoryUpdatePolicy[];
+//# sourceMappingURL=inventory-types.d.ts.map

package/dist/src/sync/inventory-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-types.d.ts","sourceRoot":"","sources":["../../../src/sync/inventory-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAA;IACjB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE/D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAA;IAChB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,oCAAoC;IACpC,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;CAC7C;AAED,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,eAAe,CAAA;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;CAkBnB,CAAA;AAEV,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EAI5D,CAAA"}

package/dist/src/sync/inventory-types.js

@@ -0,0 +1,45 @@
+/**
+ * Cross-harness inventory payload contract (SMI-5389, umbrella SMI-5382).
+ *
+ * This is the SINGLE canonical declaration of the wire shape that the local
+ * agent pushes to `POST /functions/v1/inventory-upload`. The CLI (Wave 3) and
+ * website (Wave 4) import these types directly. The Deno edge function cannot
+ * import a Node package, so `supabase/functions/inventory-upload/payload.ts`
+ * mirrors this shape structurally and validates it at runtime — keep the two in
+ * lock-step (the edge validator references this module by path in its header).
+ *
+ * ADR-125 (control plane + data model), ADR-124 (consent + field minimization).
+ */
+/**
+ * Shared caps. Mirrors the column CHECK constraints in
+ * `20260626000001_user_inventory.sql` and the payload bound in
+ * `reconcile_device_inventory`. The edge validator and the local agent both
+ * enforce these so a malformed push fails fast with a 400 rather than tripping a
+ * DB constraint mid-reconcile.
+ */
+export const INVENTORY_LIMITS = {
+    MAX_SKILLS: 5000,
+    LABEL_MAX: 100,
+    HOSTNAME_DISPLAY_MAX: 100,
+    HOSTNAME_HASH_MAX: 64,
+    PLATFORM_MAX: 32,
+    ARCH_MAX: 32,
+    CLI_VERSION_MAX: 32,
+    HARNESS_MAX: 32,
+    SKILL_ID_MAX: 255,
+    VERSION_MAX: 64,
+    SOURCE_MAX: 255,
+    AUTHOR_MAX: 200,
+    LICENSE_MAX: 64,
+    REPOSITORY_MAX: 512,
+    CONTENT_HASH_MAX: 128,
+    PINNED_VERSION_MAX: 64,
+    UPDATE_POLICY_MAX: 16,
+};
+/** Allowed `update_policy` values (mirrors the DB CHECK constraint). */
+export const INVENTORY_UPDATE_POLICIES = [
+    'auto',
+    'manual',
+    'never',
+];
+//# sourceMappingURL=inventory-types.js.map

package/dist/src/sync/inventory-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-types.js","sourceRoot":"","sources":["../../../src/sync/inventory-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA4EH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,GAAG;IACd,oBAAoB,EAAE,GAAG;IACzB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,EAAE;IACZ,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,GAAG;IACjB,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,GAAG;IACf,WAAW,EAAE,EAAE;IACf,cAAc,EAAE,GAAG;IACnB,gBAAgB,EAAE,GAAG;IACrB,kBAAkB,EAAE,EAAE;IACtB,iBAAiB,EAAE,EAAE;CACb,CAAA;AAEV,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAqC;IACzE,MAAM;IACN,QAAQ;IACR,OAAO;CACC,CAAA"}