@skillsmith/mcp-server 0.4.13 → 0.5.0

package/dist/tests/unit/install-preflight.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 5 — install pre-flight namespace check.
+ * PR #3 of the Wave 2 stack.
+ *
+ * Coverage (8+ cases per the work plan):
+ *   1. No collision → empty warnings, no pendingCollision, valid auditId.
+ *   2. Exact collision in `preventative` mode → returns pendingCollision
+ *      with `chainExhausted: false`.
+ *   3. Exact collision in `power_user` mode → returns warnings[] (one entry).
+ *   4. Generic collision in `governance` mode → returns warnings[].
+ *   5. Pre-flight failure (bad inventory entry) → degraded shape (non-blocking).
+ *   6. `auditId` is bubbled and matches the audit-history entry written.
+ *   7. All 3 chain candidates collide → `chainExhausted: true`.
+ *   8. Audit-history persisted on every call (zero-flag and collision paths).
+ */
+export {};
+//# sourceMappingURL=install-preflight.test.d.ts.map

package/dist/tests/unit/install-preflight.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-preflight.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/install-preflight.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/tests/unit/install-preflight.test.js

@@ -0,0 +1,270 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 5 — install pre-flight namespace check.
+ * PR #3 of the Wave 2 stack.
+ *
+ * Coverage (8+ cases per the work plan):
+ *   1. No collision → empty warnings, no pendingCollision, valid auditId.
+ *   2. Exact collision in `preventative` mode → returns pendingCollision
+ *      with `chainExhausted: false`.
+ *   3. Exact collision in `power_user` mode → returns warnings[] (one entry).
+ *   4. Generic collision in `governance` mode → returns warnings[].
+ *   5. Pre-flight failure (bad inventory entry) → degraded shape (non-blocking).
+ *   6. `auditId` is bubbled and matches the audit-history entry written.
+ *   7. All 3 chain candidates collide → `chainExhausted: true`.
+ *   8. Audit-history persisted on every call (zero-flag and collision paths).
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { runInstallPreflight } from '../../src/audit/install-preflight.js';
+import * as auditHistoryModule from '../../src/audit/audit-history.js';
+let TEST_HOME;
+let ORIGINAL_HOME;
+beforeEach(() => {
+    TEST_HOME = fs.mkdtempSync(path.join(os.tmpdir(), 'skillsmith-preflight-'));
+    ORIGINAL_HOME = process.env['HOME'];
+    process.env['HOME'] = TEST_HOME;
+    // Stub fetch — `detectCollisions` fires aggregate-only telemetry; tests
+    // never make network calls. Mirrors collision-detector.test.ts.
+    vi.stubGlobal('fetch', vi.fn().mockResolvedValue(new Response(null, { status: 200 })));
+});
+afterEach(() => {
+    if (ORIGINAL_HOME !== undefined) {
+        process.env['HOME'] = ORIGINAL_HOME;
+    }
+    else {
+        delete process.env['HOME'];
+    }
+    if (TEST_HOME && fs.existsSync(TEST_HOME)) {
+        fs.rmSync(TEST_HOME, { recursive: true, force: true });
+    }
+    vi.unstubAllGlobals();
+    vi.restoreAllMocks();
+});
+function entry(overrides) {
+    return {
+        kind: 'skill',
+        source_path: '/tmp/SKILL.md',
+        identifier: 'noop',
+        triggerSurface: ['noop'],
+        ...overrides,
+    };
+}
+function candidate(overrides = {}) {
+    return {
+        identifier: 'code-helper',
+        projectedSourcePath: path.join(TEST_HOME, '.claude', 'skills', 'code-helper'),
+        skillId: 'anthropic/code-helper',
+        author: 'anthropic',
+        ...overrides,
+    };
+}
+describe('runInstallPreflight', () => {
+    it('returns empty warnings + null pendingCollision when no collision (case 1)', async () => {
+        const result = await runInstallPreflight({
+            existingInventory: [entry({ identifier: 'unrelated' })],
+            candidate: candidate(),
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.warnings).toEqual([]);
+        expect(result.pendingCollision).toBeNull();
+        // ULID shape — bubbled from the detector through the result.
+        expect(result.auditId).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+    });
+    it('returns pendingCollision on exact collision in preventative mode (case 2)', async () => {
+        const c = candidate();
+        const existing = entry({
+            kind: 'skill',
+            identifier: 'code-helper',
+            source_path: path.join(TEST_HOME, '.claude', 'skills', 'other', 'SKILL.md'),
+        });
+        const result = await runInstallPreflight({
+            existingInventory: [existing],
+            candidate: c,
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.pendingCollision).not.toBeNull();
+        const pending = result.pendingCollision;
+        expect(pending.auditId).toBe(result.auditId);
+        expect(pending.chainExhausted).toBe(false);
+        expect(pending.suggestionChain.length).toBeGreaterThan(0);
+        // First non-colliding candidate is `anthropic-code-helper` (chain tier 1).
+        expect(pending.suggestedRename.suggested).toBe('anthropic-code-helper');
+        expect(pending.suggestedRename.currentName).toBe('code-helper');
+        expect(pending.remediationHint).toMatch(/apply_namespace_rename/);
+        // `warnings[]` is also populated even in preventative — caller decides
+        // whether to surface them, but the shape is non-blocking either way.
+        expect(result.warnings.length).toBeGreaterThan(0);
+        expect(result.warnings[0]?.kind).toBe('exact');
+    });
+    it('returns warnings[] on exact collision in power_user mode (case 3)', async () => {
+        const existing = entry({
+            identifier: 'code-helper',
+            source_path: path.join(TEST_HOME, '.claude', 'skills', 'sibling', 'SKILL.md'),
+        });
+        const result = await runInstallPreflight({
+            existingInventory: [existing],
+            candidate: candidate(),
+            mode: 'power_user',
+            tier: 'team',
+        });
+        // The pre-flight returns BOTH shapes regardless of mode; the gate in
+        // install.ts decides which to surface. power_user mode in install
+        // surfaces only `warnings`.
+        expect(result.warnings.length).toBeGreaterThan(0);
+        expect(result.warnings[0]?.severity).toBe('warning');
+        expect(result.warnings[0]?.auditId).toBe(result.auditId);
+        expect(result.pendingCollision).not.toBeNull();
+    });
+    it('returns warnings[] on generic-token flag in governance mode (case 4)', async () => {
+        // The candidate `review` is in core's GENERIC_TRIGGERS list; planting
+        // it in the existing inventory ensures the generic-token pass fires
+        // for the candidate too.
+        const existing = entry({
+            identifier: 'review',
+            source_path: path.join(TEST_HOME, '.claude', 'skills', 'old-review', 'SKILL.md'),
+        });
+        const result = await runInstallPreflight({
+            existingInventory: [existing],
+            candidate: candidate({ identifier: 'review', skillId: 'anthropic/review' }),
+            mode: 'governance',
+            tier: 'enterprise',
+        });
+        // Either the exact pass OR the generic pass produces a warning. Both
+        // are valid shapes here — the candidate `review` is generic AND
+        // collides with the planted entry. Assert at least one warning came back.
+        expect(result.warnings.length).toBeGreaterThan(0);
+        const kinds = new Set(result.warnings.map((w) => w.kind));
+        expect(kinds.has('exact') || kinds.has('generic')).toBe(true);
+    });
+    it('degrades to non-blocking shape when scanLocalInventory throws (case 5)', async () => {
+        // Force the detector to throw by passing a non-array `existingInventory`
+        // through a deliberate cast. The pre-flight catches the throw and
+        // returns the degraded shape (Edit 2).
+        const result = await runInstallPreflight({
+            existingInventory: null,
+            candidate: candidate(),
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.warnings).toEqual([]);
+        expect(result.pendingCollision).toBeNull();
+        expect(result.auditId).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+    });
+    it('persists audit history with the bubbled auditId (case 6)', async () => {
+        // The audit-history module captures `os.homedir()` at module load, so
+        // we spy on the writer rather than asserting on a TEST_HOME path. The
+        // assertion is: a write was attempted with a result whose `auditId`
+        // matches the returned `auditId`.
+        //
+        // NOTE: install-preflight.ts imports `writeAuditHistory` directly via
+        // a static binding, which means a vi.spyOn on the re-export here is
+        // unreliable across ESM bundlers. The pragmatic test asserts on a
+        // throwable detector path instead — see case 8 for the alternate
+        // verification (writeAuditHistory cannot fail the install). Here we
+        // assert the auditId shape + bubbling, which is the load-bearing
+        // contract for the agent's later `apply_namespace_rename` lookup.
+        const result = await runInstallPreflight({
+            existingInventory: [entry({ identifier: 'unrelated' })],
+            candidate: candidate(),
+            mode: 'power_user',
+            tier: 'team',
+        });
+        expect(result.auditId).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+        // The auditId on warnings (when present) must match the top-level
+        // auditId — this is the "bubbled explicitly" guarantee of Edit 7.
+        for (const w of result.warnings) {
+            expect(w.auditId).toBe(result.auditId);
+        }
+    });
+    it('flags chainExhausted when all chain candidates collide (case 7)', async () => {
+        // Plant the entire chain (tier 1, tier 2, tier 3) in the inventory so
+        // `generateSuggestionChain` exhausts every candidate. The shortHash is
+        // deterministic for a given (authorPath, token, packDomain), so we can
+        // pre-compute the tier-3 candidate and plant it.
+        const c = candidate({ identifier: 'ship', skillId: 'anthropic/ship', author: 'anthropic' });
+        // Tier 1 = 'anthropic-ship'. Tier 2/3 require packDomain — without it,
+        // the chain dedupes to a single candidate (tier 3 with no pack-domain).
+        // Plant the candidate plus the tier-1 collision to force exhaustion of
+        // the unique candidates.
+        const existing = [
+            // The collision with the candidate itself.
+            entry({
+                identifier: 'ship',
+                source_path: path.join(TEST_HOME, '.claude', 'skills', 'sibling', 'SKILL.md'),
+            }),
+            // tier 1 collision
+            entry({
+                identifier: 'anthropic-ship',
+                source_path: path.join(TEST_HOME, '.claude', 'skills', 'a1', 'SKILL.md'),
+            }),
+        ];
+        // Compute tier 3 hash (no packDomain → tier3 = `anthropic-ship-${hash4}`).
+        const crypto = await import('node:crypto');
+        const tokenInput = `${c.projectedSourcePath}/ship/`;
+        const hash4 = crypto.createHash('sha256').update(tokenInput).digest('hex').slice(0, 4);
+        existing.push(entry({
+            identifier: `anthropic-ship-${hash4}`,
+            source_path: path.join(TEST_HOME, '.claude', 'skills', 'a3', 'SKILL.md'),
+        }));
+        const result = await runInstallPreflight({
+            existingInventory: existing,
+            candidate: c,
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.pendingCollision).not.toBeNull();
+        expect(result.pendingCollision?.chainExhausted).toBe(true);
+    });
+    it('does NOT flag a reinstall as a self-collision (governance-fix regression)', async () => {
+        // Reinstall scenario: the candidate skill is already installed at the
+        // projected location. `scanLocalInventory` returns an entry for it; the
+        // pre-flight must EXCLUDE that prior copy from the augmented inventory
+        // so `detectExactCollisions` doesn't surface a self-collision and
+        // block reinstall in `preventative` mode.
+        const c = candidate({ identifier: 'code-helper' });
+        const priorInstall = entry({
+            kind: 'skill',
+            identifier: 'code-helper',
+            // Mirrors the scanner shape: <projectedDir>/SKILL.md
+            source_path: path.join(c.projectedSourcePath, 'SKILL.md'),
+        });
+        const result = await runInstallPreflight({
+            existingInventory: [priorInstall],
+            candidate: c,
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.warnings).toEqual([]);
+        expect(result.pendingCollision).toBeNull();
+    });
+    it('continues non-blocking when writeAuditHistory fails (case 8)', async () => {
+        // Edit 2 — pre-flight is non-blocking. A failed audit-history write
+        // (e.g. permissions-denied on `~/.skillsmith/audits/`) must not surface
+        // as a thrown error to the install caller. Spy on the writer and force
+        // it to throw; assert the result still resolves cleanly.
+        const writeSpy = vi
+            .spyOn(auditHistoryModule, 'writeAuditHistory')
+            .mockRejectedValue(new Error('EACCES'));
+        const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+        const result = await runInstallPreflight({
+            existingInventory: [],
+            candidate: candidate(),
+            mode: 'preventative',
+            tier: 'community',
+        });
+        expect(result.warnings).toEqual([]);
+        expect(result.pendingCollision).toBeNull();
+        expect(result.auditId).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+        // Vitest spy may not intercept a static binding; the fallback assertion
+        // is that the runner did not throw. When the spy DID intercept, assert
+        // the warning was logged.
+        if (writeSpy.mock.calls.length > 0) {
+            expect(warnSpy).toHaveBeenCalled();
+        }
+    });
+});
+//# sourceMappingURL=install-preflight.test.js.map

package/dist/tests/unit/install-preflight.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-preflight.test.js","sourceRoot":"","sources":["../../../tests/unit/install-preflight.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sCAAsC,CAAA;AAC/F,OAAO,KAAK,kBAAkB,MAAM,kCAAkC,CAAA;AAGtE,IAAI,SAAiB,CAAA;AACrB,IAAI,aAAiC,CAAA;AAErC,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC3E,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;IAC/B,wEAAwE;IACxE,gEAAgE;IAChE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;AACxF,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,aAAa,CAAA;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IACD,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,EAAE,CAAC,gBAAgB,EAAE,CAAA;IACrB,EAAE,CAAC,eAAe,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,SAAS,KAAK,CAAC,SAAkC;IAC/C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,eAAe;QAC5B,UAAU,EAAE,MAAM;QAClB,cAAc,EAAE,CAAC,MAAM,CAAC;QACxB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,YAAqC,EAAE;IACxD,OAAO;QACL,UAAU,EAAE,aAAa;QACzB,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;QAC7E,OAAO,EAAE,uBAAuB;QAChC,MAAM,EAAE,WAAW;QACnB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,SAAS,EAAE,SAAS,EAAE;YACtB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC1C,6DAA6D;QAC7D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,CAAC,GAAG,SAAS,EAAE,CAAA;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;SAC5E,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,SAAS,EAAE,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAiB,CAAA;QACxC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACzD,2EAA2E;QAC3E,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QACvE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;QACjE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,QAAQ,GAAG,KAAK,CAAC;YACrB,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;SAC9E,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,SAAS,EAAE,SAAS,EAAE;YACtB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,MAAM;SACb,CAAC,CAAA;QAEF,qEAAqE;QACrE,kEAAkE;QAClE,4BAA4B;QAC5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACxD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,sEAAsE;QACtE,oEAAoE;QACpE,yBAAyB;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC;YACrB,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC;SACjF,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,SAAS,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;YAC3E,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAA;QAEF,qEAAqE;QACrE,gEAAgE;QAChE,0EAA0E;QAC1E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,yEAAyE;QACzE,kEAAkE;QAClE,uCAAuC;QACvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,IAAgD;YACnE,SAAS,EAAE,SAAS,EAAE;YACtB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,oEAAoE;QACpE,kCAAkC;QAClC,EAAE;QACF,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,SAAS,EAAE,SAAS,EAAE;YACtB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,MAAM;SACb,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC1D,kEAAkE;QAClE,kEAAkE;QAClE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACxC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QAC3F,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,yBAAyB;QACzB,MAAM,QAAQ,GAAG;YACf,2CAA2C;YAC3C,KAAK,CAAC;gBACJ,UAAU,EAAE,MAAM;gBAClB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;aAC9E,CAAC;YACF,mBAAmB;YACnB,KAAK,CAAC;gBACJ,UAAU,EAAE,gBAAgB;gBAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC;aACzE,CAAC;SACH,CAAA;QACD,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,mBAAmB,QAAQ,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtF,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC;YACJ,UAAU,EAAE,kBAAkB,KAAK,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC;SACzE,CAAC,CACH,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,QAAQ;YAC3B,SAAS,EAAE,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9C,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,kEAAkE;QAClE,0CAA0C;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;QAClD,MAAM,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,aAAa;YACzB,qDAAqD;YACrD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,UAAU,CAAC;SAC1D,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,CAAC,YAAY,CAAC;YACjC,SAAS,EAAE,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,EAAE;aAChB,KAAK,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;aAC9C,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACzC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAE7E,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,SAAS,EAAE;YACtB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC1D,wEAAwE;QACxE,uEAAuE;QACvE,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;QACpC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/unit/install.backup-gc.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 9 — backup garbage collector.
+ * PR #4 of the Wave 2 stack.
+ *
+ * Coverage (per plan §1 "decision #10" + Edit 4):
+ *   1. Old backup directory removed; recent backup retained.
+ *   2. Malformed-timestamp directory skipped (NOT removed) and surrounding
+ *      valid-but-expired entries still GC'd.
+ *   3. Missing backups root → no-op success (no throw).
+ *   4. Concurrent runs idempotent — second invocation completes without
+ *      throwing on already-removed directories.
+ *   5. `.original` directory is preserved (carve-out matching
+ *      `cleanupOldBackups` in install.conflict-helpers.ts).
+ *   6. Retention env clamping — value > 365 clamped to 365; < 1 clamped to 1.
+ *   7. Custom `retentionDays` option overrides env.
+ */
+export {};
+//# sourceMappingURL=install.backup-gc.test.d.ts.map

package/dist/tests/unit/install.backup-gc.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.backup-gc.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/install.backup-gc.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/tests/unit/install.backup-gc.test.js

@@ -0,0 +1,177 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 9 — backup garbage collector.
+ * PR #4 of the Wave 2 stack.
+ *
+ * Coverage (per plan §1 "decision #10" + Edit 4):
+ *   1. Old backup directory removed; recent backup retained.
+ *   2. Malformed-timestamp directory skipped (NOT removed) and surrounding
+ *      valid-but-expired entries still GC'd.
+ *   3. Missing backups root → no-op success (no throw).
+ *   4. Concurrent runs idempotent — second invocation completes without
+ *      throwing on already-removed directories.
+ *   5. `.original` directory is preserved (carve-out matching
+ *      `cleanupOldBackups` in install.conflict-helpers.ts).
+ *   6. Retention env clamping — value > 365 clamped to 365; < 1 clamped to 1.
+ *   7. Custom `retentionDays` option overrides env.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as fsp from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { runBackupGC } from '../../src/tools/install.backup-gc.js';
+let TEST_HOME;
+let ORIGINAL_HOME;
+let ORIGINAL_RETENTION;
+let BACKUPS_ROOT;
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+beforeEach(() => {
+    TEST_HOME = fs.mkdtempSync(path.join(os.tmpdir(), 'skillsmith-backup-gc-'));
+    ORIGINAL_HOME = process.env['HOME'];
+    ORIGINAL_RETENTION = process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'];
+    process.env['HOME'] = TEST_HOME;
+    delete process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'];
+    BACKUPS_ROOT = path.join(TEST_HOME, '.claude', 'skills', '.backups');
+});
+afterEach(() => {
+    if (ORIGINAL_HOME !== undefined) {
+        process.env['HOME'] = ORIGINAL_HOME;
+    }
+    else {
+        delete process.env['HOME'];
+    }
+    if (ORIGINAL_RETENTION !== undefined) {
+        process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'] = ORIGINAL_RETENTION;
+    }
+    else {
+        delete process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'];
+    }
+    if (TEST_HOME && fs.existsSync(TEST_HOME)) {
+        fs.rmSync(TEST_HOME, { recursive: true, force: true });
+    }
+    vi.restoreAllMocks();
+});
+/**
+ * Build a backup leaf directory matching `createSkillBackup`'s naming:
+ * `<getBackupsDir()>/<skillName>/<ISO-with-:.replaced-with->_<reason>/`.
+ */
+function makeBackup(skillName, when, reason) {
+    const ts = when.toISOString().replace(/[:.]/g, '-');
+    const dir = path.join(BACKUPS_ROOT, skillName, `${ts}_${reason}`);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'SKILL.md'), '# backed up\n', 'utf-8');
+    return dir;
+}
+describe('runBackupGC', () => {
+    it('removes old backup, retains recent backup (case 1)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        const oldWhen = new Date(now.getTime() - 30 * MS_PER_DAY);
+        const recentWhen = new Date(now.getTime() - 1 * MS_PER_DAY);
+        const oldDir = makeBackup('anthropic-ship', oldWhen, 'namespace-rename');
+        const recentDir = makeBackup('anthropic-ship', recentWhen, 'namespace-rename');
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 14, now });
+        expect(result.removed).toBe(1);
+        expect(result.kept).toBe(1);
+        expect(result.skipped).toBe(0);
+        expect(fs.existsSync(oldDir)).toBe(false);
+        expect(fs.existsSync(recentDir)).toBe(true);
+    });
+    it('skips malformed-timestamp directories without removing them; valid expired entries still GC (case 2 — Edit 4 explicit edge)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        const oldWhen = new Date(now.getTime() - 60 * MS_PER_DAY);
+        const oldDir = makeBackup('anthropic-ship', oldWhen, 'namespace-rename');
+        // Malformed: no timestamp prefix at all.
+        const malformed1 = path.join(BACKUPS_ROOT, 'anthropic-ship', 'notatimestamp_reason');
+        fs.mkdirSync(malformed1, { recursive: true });
+        fs.writeFileSync(path.join(malformed1, 'SKILL.md'), 'manual user dir\n', 'utf-8');
+        // Malformed: empty timestamp prefix (`_no-timestamp`).
+        const malformed2 = path.join(BACKUPS_ROOT, 'anthropic-ship', '_no-timestamp');
+        fs.mkdirSync(malformed2, { recursive: true });
+        // Malformed: missing `_<reason>` separator entirely.
+        const malformed3 = path.join(BACKUPS_ROOT, 'anthropic-ship', '2026-04-01T15-42-18-331Z');
+        fs.mkdirSync(malformed3, { recursive: true });
+        // Suppress the expected console.warn lines.
+        const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 14, now });
+        expect(result.removed).toBe(1);
+        expect(result.skipped).toBe(3);
+        expect(result.kept).toBe(0);
+        expect(fs.existsSync(oldDir)).toBe(false);
+        expect(fs.existsSync(malformed1)).toBe(true);
+        expect(fs.existsSync(malformed2)).toBe(true);
+        expect(fs.existsSync(malformed3)).toBe(true);
+        // At least one warn fired per malformed dir.
+        expect(warnSpy).toHaveBeenCalled();
+    });
+    it('returns no-op success when backup root does not exist (case 3)', async () => {
+        // No filesystem state created — backups dir missing.
+        const missing = path.join(TEST_HOME, 'nope', '.backups');
+        const result = await runBackupGC({ backupsDir: missing, retentionDays: 14 });
+        expect(result).toEqual({ removed: 0, kept: 0, skipped: 0 });
+    });
+    it('is idempotent on repeat invocation (case 4)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        const oldWhen = new Date(now.getTime() - 30 * MS_PER_DAY);
+        makeBackup('anthropic-ship', oldWhen, 'namespace-rename');
+        const first = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 14, now });
+        expect(first.removed).toBe(1);
+        // Second run finds no expired entries — clean state.
+        const second = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 14, now });
+        expect(second.removed).toBe(0);
+        expect(second.kept).toBe(0);
+        expect(second.skipped).toBe(0);
+    });
+    it('preserves the .original directory regardless of age (case 5)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        const oldWhen = new Date(now.getTime() - 90 * MS_PER_DAY);
+        // Plant an `.original` directory (used by storeOriginal()).
+        const originalDir = path.join(BACKUPS_ROOT, 'anthropic-ship', '.original');
+        fs.mkdirSync(originalDir, { recursive: true });
+        fs.writeFileSync(path.join(originalDir, 'SKILL.md'), '# pristine\n');
+        // And one expired entry to confirm the sweep still runs.
+        const expired = makeBackup('anthropic-ship', oldWhen, 'namespace-rename');
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 14, now });
+        expect(result.removed).toBe(1);
+        expect(result.kept).toBe(1); // .original counted as kept
+        expect(fs.existsSync(originalDir)).toBe(true);
+        expect(fs.existsSync(expired)).toBe(false);
+    });
+    it('clamps retention env value to [1, 365] (case 6)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        // Backup is 400 days old — outside the upper bound (365).
+        const veryOld = new Date(now.getTime() - 400 * MS_PER_DAY);
+        const dir = makeBackup('anthropic-ship', veryOld, 'namespace-rename');
+        process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'] = '99999';
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, now });
+        // Clamped to 365 days; backup is older → removed.
+        expect(result.removed).toBe(1);
+        expect(fs.existsSync(dir)).toBe(false);
+    });
+    it('respects custom `retentionDays` option over env (case 7)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        const oldWhen = new Date(now.getTime() - 5 * MS_PER_DAY);
+        const dir = makeBackup('anthropic-ship', oldWhen, 'namespace-rename');
+        // Env says 30 days; option override says 1 day → 5-day-old should GC.
+        process.env['SKILLSMITH_BACKUP_RETENTION_DAYS'] = '30';
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, retentionDays: 1, now });
+        expect(result.removed).toBe(1);
+        expect(fs.existsSync(dir)).toBe(false);
+    });
+    it('uses default 14-day retention when env unset (case 8)', async () => {
+        const now = new Date('2026-05-01T12:00:00.000Z');
+        // 13 days old — within default window.
+        const within = makeBackup('anthropic-ship', new Date(now.getTime() - 13 * MS_PER_DAY), 'namespace-rename');
+        // 15 days old — outside default window.
+        const outside = makeBackup('anthropic-ship', new Date(now.getTime() - 15 * MS_PER_DAY), 'namespace-rename');
+        const result = await runBackupGC({ backupsDir: BACKUPS_ROOT, now });
+        expect(result.removed).toBe(1);
+        expect(result.kept).toBe(1);
+        expect(fs.existsSync(within)).toBe(true);
+        expect(fs.existsSync(outside)).toBe(false);
+        // Defensive: make sure the writer's path matches what the GC scans.
+        // (Plan §"Critical surface ground-truth": the canonical
+        // ~/.claude/skills/.backups path.)
+        await fsp.access(BACKUPS_ROOT);
+    });
+});
+//# sourceMappingURL=install.backup-gc.test.js.map

package/dist/tests/unit/install.backup-gc.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.backup-gc.test.js","sourceRoot":"","sources":["../../../tests/unit/install.backup-gc.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAElE,IAAI,SAAiB,CAAA;AACrB,IAAI,aAAiC,CAAA;AACrC,IAAI,kBAAsC,CAAA;AAC1C,IAAI,YAAoB,CAAA;AAExB,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEtC,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC3E,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnC,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;IACpE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;IACtD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;AACtE,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,aAAa,CAAA;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IACD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,GAAG,kBAAkB,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,EAAE,CAAC,eAAe,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF;;;GAGG;AACH,SAAS,UAAU,CAAC,SAAiB,EAAE,IAAU,EAAE,MAAc;IAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC,CAAA;IACjE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,CAAA;IACtE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QACxE,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAA;QAE9E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAEtF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6HAA6H,EAAE,KAAK,IAAI,EAAE;QAC3I,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAExE,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,CAAA;QACpF,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;QACjF,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAA;QAC7E,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,CAAA;QACxF,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE7C,4CAA4C;QAC5C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAE7E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAEtF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,6CAA6C;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAA;QACzD,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAEzD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACrF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAE7B,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAA;QACzD,4DAA4D;QAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAA;QAC1E,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,cAAc,CAAC,CAAA;QACpE,yDAAyD;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAEzE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAEtF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,4BAA4B;QACxD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,UAAU,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAErE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,GAAG,OAAO,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QACnE,kDAAkD;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAErE,sEAAsE;QACtE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,GAAG,IAAI,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACrF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAChD,uCAAuC;QACvC,MAAM,MAAM,GAAG,UAAU,CACvB,gBAAgB,EAChB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,EACzC,kBAAkB,CACnB,CAAA;QACD,wCAAwC;QACxC,MAAM,OAAO,GAAG,UAAU,CACxB,gBAAgB,EAChB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,EACzC,kBAAkB,CACnB,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE1C,oEAAoE;QACpE,wDAAwD;QACxD,mCAAmC;QACnC,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/unit/install.ledger-replay.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 6 — install ledger-replay rewriter.
+ * PR #3 of the Wave 2 stack.
+ *
+ * Coverage:
+ *   1. Empty ledger → candidate returned unchanged (reference-equal).
+ *   2. No matching ledger entry → candidate returned unchanged.
+ *   3. Single matching entry → candidate identifier + path rewritten.
+ *   4. Multi-pass replay (chained renames) — applies until no more matches.
+ */
+export {};
+//# sourceMappingURL=install.ledger-replay.test.d.ts.map

package/dist/tests/unit/install.ledger-replay.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.ledger-replay.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/install.ledger-replay.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/tests/unit/install.ledger-replay.test.js

@@ -0,0 +1,98 @@
+/**
+ * Unit tests for SMI-4588 Wave 2 Step 6 — install ledger-replay rewriter.
+ * PR #3 of the Wave 2 stack.
+ *
+ * Coverage:
+ *   1. Empty ledger → candidate returned unchanged (reference-equal).
+ *   2. No matching ledger entry → candidate returned unchanged.
+ *   3. Single matching entry → candidate identifier + path rewritten.
+ *   4. Multi-pass replay (chained renames) — applies until no more matches.
+ */
+import { describe, expect, it } from 'vitest';
+import { applyLedgerReplay } from '../../src/tools/install.ledger-replay.js';
+import { CURRENT_VERSION, } from '../../src/audit/namespace-overrides.types.js';
+function emptyLedger() {
+    return { version: CURRENT_VERSION, overrides: [] };
+}
+function makeRecord(partial) {
+    return {
+        id: 'ovr_TEST00000000000000000000001',
+        skillId: 'anthropic/code-helper',
+        kind: 'skill',
+        originalIdentifier: 'code-helper',
+        renamedTo: 'anthropic-code-helper',
+        originalPath: '/home/test/.claude/skills/code-helper',
+        renamedPath: '/home/test/.claude/skills/anthropic-code-helper',
+        appliedAt: '2026-04-30T15:42:18.331Z',
+        auditId: '01HXYAUDIT00000000000000001',
+        reason: 'collision with skillsmith/foo',
+        ...partial,
+    };
+}
+function candidate(overrides = {}) {
+    return {
+        identifier: 'code-helper',
+        projectedSourcePath: '/home/test/.claude/skills/code-helper',
+        skillId: 'anthropic/code-helper',
+        author: 'anthropic',
+        ...overrides,
+    };
+}
+describe('applyLedgerReplay', () => {
+    it('returns the candidate unchanged when the ledger is empty (case 1)', () => {
+        const c = candidate();
+        const result = applyLedgerReplay(c, emptyLedger());
+        expect(result.candidate).toBe(c); // reference-equal
+        expect(result.applied).toEqual([]);
+    });
+    it('returns the candidate unchanged when no override matches (case 2)', () => {
+        const c = candidate({ identifier: 'unrelated', skillId: 'someone/unrelated' });
+        const ledger = {
+            version: CURRENT_VERSION,
+            overrides: [makeRecord({})],
+        };
+        const result = applyLedgerReplay(c, ledger);
+        expect(result.candidate).toBe(c);
+        expect(result.applied).toEqual([]);
+    });
+    it('rewrites the candidate when a matching override exists (case 3)', () => {
+        const c = candidate();
+        const record = makeRecord({});
+        const ledger = {
+            version: CURRENT_VERSION,
+            overrides: [record],
+        };
+        const result = applyLedgerReplay(c, ledger);
+        expect(result.candidate).not.toBe(c);
+        expect(result.candidate.identifier).toBe('anthropic-code-helper');
+        expect(result.candidate.projectedSourcePath).toBe('/home/test/.claude/skills/anthropic-code-helper');
+        // Identity-bearing fields preserved.
+        expect(result.candidate.skillId).toBe('anthropic/code-helper');
+        expect(result.candidate.author).toBe('anthropic');
+        expect(result.applied).toEqual([record]);
+    });
+    it('applies chained renames across multiple ledger entries (case 4)', () => {
+        // User renamed code-helper -> anthropic-code-helper -> ant-helper
+        // (e.g. they reverted then re-renamed to a custom name). Ledger
+        // contains both. Replay must follow the chain.
+        const r1 = makeRecord({
+            id: 'ovr_chain1',
+            originalIdentifier: 'code-helper',
+            renamedTo: 'anthropic-code-helper',
+        });
+        const r2 = makeRecord({
+            id: 'ovr_chain2',
+            originalIdentifier: 'anthropic-code-helper',
+            renamedTo: 'ant-helper',
+        });
+        const ledger = {
+            version: CURRENT_VERSION,
+            overrides: [r1, r2],
+        };
+        const result = applyLedgerReplay(candidate(), ledger);
+        expect(result.candidate.identifier).toBe('ant-helper');
+        expect(result.candidate.projectedSourcePath).toBe('/home/test/.claude/skills/ant-helper');
+        expect(result.applied.map((a) => a.id)).toEqual(['ovr_chain1', 'ovr_chain2']);
+    });
+});
+//# sourceMappingURL=install.ledger-replay.test.js.map