@uzysjung/agent-harness 26.148.0 → 26.148.1

package/dist/index.js

@@ -741,7 +741,7 @@ var cac = (name = "") => new CAC(name);
 // package.json
 var package_default = {
   name: "@uzysjung/agent-harness",
-  version: "26.148.0",
+  version: "26.148.1",
   description: "Curate vetted AI-coding skills & plugins by your tech stack \u2014 install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
   type: "module",
   publishConfig: {
@@ -776,6 +776,7 @@ var package_default = {
     "cost:report": "npm run build && node scripts/context-cost-report.mjs",
     "cost:baseline": "npm run build && node scripts/context-cost-baseline.mjs",
     "assets:history": "bash scripts/asset-history.sh",
+    "release:audit": "node scripts/release-audit.mjs",
     security: "npm audit --omit=dev --audit-level=high && npx --yes ecc-agentshield@1.4.0 scan --baseline security-baseline.json --gate",
     "security:baseline": "npx --yes ecc-agentshield@1.4.0 scan --save-baseline security-baseline.json"
   },
@@ -1890,6 +1891,45 @@ var SKILLS_CLI_VERSION = "1.5.11";
 function skillsCliSpec() {
   return `skills@${SKILLS_CLI_VERSION}`;
 }
+function refreshExternalSkills(projectDir, deps = {}) {
+  const none = { attempted: 0, refreshed: 0, failed: [], notInCatalog: [] };
+  const log = (deps.readLog ?? readInstallLog)(projectDir);
+  if (!log) {
+    return { ...none, unknown: true };
+  }
+  const installedIds = new Set(log.assets.filter((a) => a.method === "skill").map((a) => a.id));
+  const catalog = deps.assets ?? EXTERNAL_ASSETS;
+  const targets = catalog.filter((a) => a.method.kind === "skill" && installedIds.has(a.id));
+  const inCatalog = new Set(targets.map((a) => a.id));
+  const notInCatalog = [...installedIds].filter((id) => !inCatalog.has(id));
+  if (targets.length === 0) {
+    return { ...none, notInCatalog, unknown: false };
+  }
+  const report = (deps.run ?? runExternalInstall)(
+    {
+      tracks: log.spec.tracks,
+      // `forceInclude` 가 조건 판정을 앞지르므로 옵션 값은 결과에 영향을 주지 않는다.
+      options: DEFAULT_OPTIONS,
+      cli: log.spec.cli,
+      userOverride: { forceInclude: [...installedIds], forceExclude: [] },
+      scope: log.scope,
+      projectDir
+    },
+    {
+      assets: targets,
+      ...deps.spawn ? { spawn: deps.spawn } : {},
+      ...deps.log ? { log: deps.log } : {},
+      ...deps.warn ? { warn: deps.warn } : {}
+    }
+  );
+  return {
+    attempted: report.attempted.length,
+    refreshed: report.succeeded,
+    failed: report.attempted.filter((r) => !r.ok).map((r) => ({ id: r.asset.id, message: r.message ?? "failed" })),
+    notInCatalog,
+    unknown: false
+  };
+}
 function buildSkillArgs(method, cli2, scope) {
   const args = [skillsCliSpec(), "add", method.source];
   if (method.skill) {
@@ -1899,6 +1939,7 @@ function buildSkillArgs(method, cli2, scope) {
     for (const c3 of cli2) {
       args.push("--agent", SKILLS_CLI_AGENT_MAP[c3] ?? c3);
     }
+    args.push("--copy");
   }
   if (scope === "global") {
     args.push("-g");
@@ -2119,10 +2160,11 @@ function buildUpdateSpec(projectDir, tracks) {
     tracks: [...tracks],
     options: DEFAULT_OPTIONS,
     cli: ["claude"],
-    projectDir
+    projectDir,
+    scope: readInstallLog(projectDir)?.scope ?? "project"
   };
 }
-function runUpdateMode(projectDir, templatesDir, harnessRoot) {
+function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}) {
   const claudeDir = join11(projectDir, ".claude");
   const report = {
     updated: {},
@@ -2137,6 +2179,10 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot) {
     policyBackedUp: [],
     externalUpdated: 0,
     externalBackedUp: [],
+    externalSkillsRefreshed: 0,
+    externalSkillsFailed: [],
+    externalSkillsNotInCatalog: [],
+    externalSkillsUnknown: false,
     foreignOwned: [],
     installedNew: [],
     restored: [],
@@ -2192,6 +2238,11 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot) {
     if (!saidBySlotRow.has(f) && !merged.includes(f)) merged.push(f);
   }
   report.foreignOwned = merged;
+  const skillRefresh = (deps.refreshSkills ?? refreshExternalSkills)(projectDir);
+  report.externalSkillsRefreshed = skillRefresh.refreshed;
+  report.externalSkillsFailed = skillRefresh.failed;
+  report.externalSkillsNotInCatalog = skillRefresh.notInCatalog;
+  report.externalSkillsUnknown = skillRefresh.unknown;
   return report;
 }
 function installNewAssets(projectDir, templatesDir) {
@@ -3350,6 +3401,39 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false, claud
         )
       );
     }
+    if (baseline.updateMode.externalSkillsRefreshed > 0) {
+      log(
+        assetRow(
+          "success",
+          "external skills",
+          `${baseline.updateMode.externalSkillsRefreshed} refreshed from upstream`
+        )
+      );
+    }
+    if (baseline.updateMode.externalSkillsFailed.length > 0) {
+      const failed = baseline.updateMode.externalSkillsFailed;
+      const head = failed[0];
+      const meta = failed.length === 1 ? `${head.id}: ${head.message}` : `${failed.map((f) => f.id).join(", ")} (${failed.length}\uAC74) \xB7 \uC608: ${head.message}`;
+      log(assetRow("skip", "external skills", `${meta} \xB7 \uB2E4\uC74C update \uC5D0\uC11C \uB2E4\uC2DC \uC2DC\uB3C4\uD55C\uB2E4`));
+    }
+    if (baseline.updateMode.externalSkillsNotInCatalog.length > 0) {
+      log(
+        assetRow(
+          "skip",
+          "external skills",
+          `${baseline.updateMode.externalSkillsNotInCatalog.join(", ")} \xB7 \uCE74\uD0C8\uB85C\uADF8\uC5D0 \uC5C6\uC5B4 \uAC31\uC2E0 \uB300\uC0C1\uC774 \uC544\uB2C8\uB2E4`
+        )
+      );
+    }
+    if (baseline.updateMode.externalSkillsUnknown) {
+      log(
+        assetRow(
+          "skip",
+          "external skills",
+          "\uC124\uCE58 \uAE30\uB85D\uC774 \uC5C6\uC5B4 \uAC31\uC2E0 \uB300\uC0C1\uC744 \uD310\uC815\uD560 \uC218 \uC5C6\uB2E4 \xB7 `agent-harness install` \uB85C \uB2E4\uC2DC \uAE54\uBA74 \uAE30\uB85D\uB41C\uB2E4"
+        )
+      );
+    }
     return;
   }
   if (baseline.backups) {