@vibe-agent-toolkit/agent-skills 0.1.39-rc.1 → 0.1.39-rc.11

package/dist/files-config.d.ts

@@ -5,6 +5,7 @@
  * - Merging defaults + per-skill entries (additive, per-skill wins on dest collision)
  * - Matching auto-discovered links to files entries
  * - Computing deferred paths for validation
+ * - Copying declared build artifacts into a skill output dir (every build path)
  */
 import type { SkillFileEntry } from '@vibe-agent-toolkit/resources';
 export type { SkillFileEntry } from '@vibe-agent-toolkit/resources';
@@ -30,19 +31,148 @@ export declare function mergeFilesConfig(defaults: SkillFileEntry[] | undefined,
  * Returns the matching entry and whether it matched on source or dest.
  * Source matches take priority over dest matches.
  *
+ * For GLOB entries (`isGlob(entry.source)`), matching is by directory prefix:
+ * - source match: link is equal to or under the glob's static base
+ * - dest match: link is equal to or under entry.dest
+ *
+ * Single-file entries still match EXACTLY (unchanged).
+ *
  * @param linkTarget - Resolved link target path (relative to project root)
  * @param files - Merged files config entries
  * @returns Match result or null if no match
  */
 export declare function matchLinkToFiles(linkTarget: string, files: SkillFileEntry[]): FilesMatchResult | null;
 /**
- * Compute the set of paths that should be treated as "deferred" during
- * source-time validation. These are paths from files config entries where
- * the file may not exist yet (build artifacts).
+ * Structured deferred path sets returned by {@link computeDeferredPaths}.
+ *
+ * - `destPaths` — files: dest paths that are always deferred (the target
+ *   location won't exist until build time).
+ * - `sourcePaths` — files: source paths that are deferred ONLY when the
+ *   target does not yet exist on disk (i.e. genuine build artifacts). A
+ *   source that already exists on disk and is gitignored is a leak and must
+ *   NOT be deferred — let it fall through to the gitignore branch.
+ */
+export interface DeferredPaths {
+    /** files: dest paths — always deferred (won't exist until build). */
+    destPaths: Set<string>;
+    /** files: source paths — deferred ONLY when the target does not yet exist (build artifact). */
+    sourcePaths: Set<string>;
+}
+/**
+ * Options for {@link computeDeferredPaths}.
+ *
+ * - `skillDir`    — absolute path to the directory containing SKILL.md.
+ *                   `files:` dest values are authored relative to this dir.
+ * - `projectRoot` — absolute path to the project root (git / config root).
+ *                   `files:` source values are authored relative to this dir.
+ */
+export interface ComputeDeferredPathsOpts {
+    skillDir: string;
+    projectRoot: string;
+}
+/**
+ * Compute the structured sets of paths that should be treated as "deferred"
+ * during source-time validation. These are paths from files config entries
+ * where the file may not exist yet (build artifacts).
+ *
+ * Both sets contain **project-root-relative, forward-slash** paths so they
+ * match the `rel` value computed in `checkDeferred()` inside walk-link-graph:
+ *
+ * ```ts
+ * const rel = toForwardSlash(safePath.relative(projectRoot, targetPath));
+ * ```
+ *
+ * - `dest` is authored relative to `skillDir` (mirroring `skill-packager.ts`
+ *   `resolve(skillDir, entry.dest)`). We resolve it to an absolute path and
+ *   then make it relative to `projectRoot`.
+ * - `source` is authored relative to `projectRoot`. We resolve it with the
+ *   exact expression `skill-packager.ts` uses —
+ *   `resolve(join(projectRoot, entry.source))` — so an absolute-looking source
+ *   is rooted UNDER `projectRoot` identically to what the packager copies.
+ *   (A bare `resolve(projectRoot, source)` would let a leading slash escape the
+ *   root, yielding a `../`-prefixed path that never matches the walker's `rel`.)
+ *   Resolving then re-relativising is a no-op for clean relative paths but
+ *   correctly strips any leading `./`.
+ *
+ * - dest paths are always deferred (target won't exist until build)
+ * - source paths are deferred only when the target does not yet exist on disk
+ */
+export declare function computeDeferredPaths(files: SkillFileEntry[], opts: ComputeDeferredPathsOpts): DeferredPaths;
+/** Options for {@link applyFilesConfig}. */
+export interface ApplyFilesConfigOptions {
+    /** Merged `files:` entries to copy. */
+    filesConfig: SkillFileEntry[];
+    /** Absolute project root; each `source` resolves relative to it. */
+    projectRoot: string;
+    /** Absolute skill output dir; each `dest` resolves relative to it. */
+    skillOutputDir: string;
+    /**
+     * Absolute source paths already materialized by link traversal — skipped so
+     * a linked-and-copied asset isn't copied twice. Defaults to none (copy all).
+     */
+    bundledFiles?: string[];
+}
+/**
+ * Verify that each (absSource, absDest) pair has byte-identical content.
+ *
+ * Throws with a message naming the offending dest path on any mismatch or
+ * missing dest. Intended to be called after a copy operation to assert the
+ * copy was faithful. Exported so it can be tested directly without running a
+ * full applyFilesConfig round-trip.
+ */
+export declare function verifyFilesIntegrity(pairs: {
+    absSource: string;
+    absDest: string;
+}[]): void;
+/**
+ * Verify that the on-disk contents of a glob entry's dest subtree EXACTLY match
+ * the set of rel paths the copy step intended to write — no missing, no extra.
+ *
+ * Why a SET comparison and not just `verifyFilesIntegrity`'s byte check:
+ * `verifyFilesIntegrity` hashes the (absSource, absDest) pairs that the SAME copy
+ * code computed. If the rebase/glob-mapping logic maps a match to the WRONG dest,
+ * that wrong dest rides along in the pair, so `hash(absSource) === hash(absDest)`
+ * still passes and the bug slips through. Enumerating the dest subtree and
+ * diffing against the expected rel set is what catches a misrouted rebase, a
+ * stale leftover, or a dropped file.
+ *
+ * SAFETY ASSUMPTION (why this can't false-positive): a glob entry OWNS its dest
+ * directory (`skillOutputDir/<entry.dest>`) and the build wipes the skill output
+ * dir before copying (skill-packager.ts removes `resolvedOutput` recursively
+ * before any copy). Nothing else writes into this subtree, so any EXTRA file is a
+ * genuine bug, not a co-tenant. This scoping is what makes the set check safe
+ * here even though a project-wide "no extra files" check would not be.
+ *
+ * @param destDir      Absolute path to the glob entry's dest subtree.
+ * @param expectedRel  Forward-slash rel paths (relative to `destDir`) the copy
+ *                     step wrote for THIS entry.
+ * @param source       The entry's `source` (for error messages only).
+ * @throws if the actual subtree omits an expected file or contains an extra one.
+ */
+export declare function verifyDestSet(destDir: string, expectedRel: string[], source: string): Promise<void>;
+/**
+ * Copy each `files:` entry's `source` → `dest` into the skill output directory.
+ *
+ * This is the single copy primitive shared by every build path so that
+ * build-provided artifacts (a bundled engine, generated data, a catalog) are
+ * VAT-managed end-to-end: the shared-pool `vat skills build` packager and the
+ * Claude plugin marketplace build both call it, instead of the latter relying on
+ * an external inject script VAT can't see. `source` is resolved the same way the
+ * packager does (`resolve(join(projectRoot, source))`, so an absolute-looking
+ * source roots UNDER the project). Returns the dest paths actually copied.
+ *
+ * Glob entries (`source` containing `*`, `?`, or `[`) expand late-bound at
+ * copy time: all matched files are rebased under `dest` preserving their
+ * path relative to the glob's static base. Zero matches → error.
+ *
+ * When `integrity: true` is set on an entry, `verifyFilesIntegrity` is called
+ * after copying to assert byte-identical content. For GLOB entries it ALSO runs
+ * `verifyDestSet` to assert the dest subtree contains exactly the copied rels
+ * (no missing, no extra) — catching a misrouted rebase the byte check misses.
+ * Single-file entries get only the byte check (dest is a file, not a subtree).
  *
- * Both source and dest paths are included because:
- * - source may be a build artifact that doesn't exist at validation time
- * - dest is the target location that won't exist until build time
+ * @throws if a declared `source` does not exist — a declared build artifact must
+ * be present at copy time (callers that defer existence validate it upstream).
  */
-export declare function computeDeferredPaths(files: SkillFileEntry[]): Set<string>;
+export declare function applyFilesConfig(opts: ApplyFilesConfigOptions): Promise<string[]>;
 //# sourceMappingURL=files-config.d.ts.map

package/dist/files-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files-config.d.ts","sourceRoot":"","sources":["../src/files-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,YAAY,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC;IACzB,+BAA+B;IAC/B,KAAK,EAAE,cAAc,CAAC;CACvB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,cAAc,EAAE,GAAG,SAAS,EACtC,QAAQ,EAAE,cAAc,EAAE,GAAG,SAAS,GACrC,cAAc,EAAE,CA6ClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,cAAc,EAAE,GACtB,gBAAgB,GAAG,IAAI,CAkBzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAOzE"}
+{"version":3,"file":"files-config.d.ts","sourceRoot":"","sources":["../src/files-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAWpE,YAAY,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC;IACzB,+BAA+B;IAC/B,KAAK,EAAE,cAAc,CAAC;CACvB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,cAAc,EAAE,GAAG,SAAS,EACtC,QAAQ,EAAE,cAAc,EAAE,GAAG,SAAS,GACrC,cAAc,EAAE,CA6ClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,cAAc,EAAE,GACtB,gBAAgB,GAAG,IAAI,CAiCzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,+FAA+F;IAC/F,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EAAE,EACvB,IAAI,EAAE,wBAAwB,GAC7B,aAAa,CAqBf;AAED,4CAA4C;AAC5C,MAAM,WAAW,uBAAuB;IACtC,uCAAuC;IACvC,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,GAC9C,IAAI,CAgBN;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAuBf;AAiFD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyCvF"}

package/dist/files-config.js

@@ -5,8 +5,13 @@
  * - Merging defaults + per-skill entries (additive, per-skill wins on dest collision)
  * - Matching auto-discovered links to files entries
  * - Computing deferred paths for validation
+ * - Copying declared build artifacts into a skill output dir (every build path)
  */
-import { toForwardSlash } from '@vibe-agent-toolkit/utils';
+import { existsSync, statSync } from 'node:fs';
+import { copyFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { fileContentHash, globMagicRemainder, isGlob, safePath, staticGlobBase, toForwardSlash, } from '@vibe-agent-toolkit/utils';
+import { glob } from 'glob';
 /**
  * Normalize a path for comparison: strip leading ./ and normalize slashes.
  */
@@ -70,41 +75,262 @@ export function mergeFilesConfig(defaults, perSkill) {
  * Returns the matching entry and whether it matched on source or dest.
  * Source matches take priority over dest matches.
  *
+ * For GLOB entries (`isGlob(entry.source)`), matching is by directory prefix:
+ * - source match: link is equal to or under the glob's static base
+ * - dest match: link is equal to or under entry.dest
+ *
+ * Single-file entries still match EXACTLY (unchanged).
+ *
  * @param linkTarget - Resolved link target path (relative to project root)
  * @param files - Merged files config entries
  * @returns Match result or null if no match
  */
 export function matchLinkToFiles(linkTarget, files) {
     const normalized = normalizePath(linkTarget);
-    // Source match has priority
+    /** True when `candidate` equals `normalized` or is a path-prefix of it. */
+    function isPrefixMatch(candidate) {
+        return normalized === candidate || normalized.startsWith(candidate + '/');
+    }
+    // Source match has priority (checked before dest across all entries)
     for (const entry of files) {
-        if (normalizePath(entry.source) === normalized) {
+        if (isGlob(entry.source)) {
+            const base = normalizePath(staticGlobBase(entry.source));
+            if (isPrefixMatch(base)) {
+                return { match: 'source', entry };
+            }
+        }
+        else if (normalizePath(entry.source) === normalized) {
             return { match: 'source', entry };
         }
     }
     // Then check dest match
     for (const entry of files) {
-        if (normalizePath(entry.dest) === normalized) {
+        if (isGlob(entry.source)) {
+            const destBase = normalizePath(entry.dest);
+            if (isPrefixMatch(destBase)) {
+                return { match: 'dest', entry };
+            }
+        }
+        else if (normalizePath(entry.dest) === normalized) {
             return { match: 'dest', entry };
         }
     }
     return null;
 }
 /**
- * Compute the set of paths that should be treated as "deferred" during
- * source-time validation. These are paths from files config entries where
- * the file may not exist yet (build artifacts).
+ * Compute the structured sets of paths that should be treated as "deferred"
+ * during source-time validation. These are paths from files config entries
+ * where the file may not exist yet (build artifacts).
  *
- * Both source and dest paths are included because:
- * - source may be a build artifact that doesn't exist at validation time
- * - dest is the target location that won't exist until build time
+ * Both sets contain **project-root-relative, forward-slash** paths so they
+ * match the `rel` value computed in `checkDeferred()` inside walk-link-graph:
+ *
+ * ```ts
+ * const rel = toForwardSlash(safePath.relative(projectRoot, targetPath));
+ * ```
+ *
+ * - `dest` is authored relative to `skillDir` (mirroring `skill-packager.ts`
+ *   `resolve(skillDir, entry.dest)`). We resolve it to an absolute path and
+ *   then make it relative to `projectRoot`.
+ * - `source` is authored relative to `projectRoot`. We resolve it with the
+ *   exact expression `skill-packager.ts` uses —
+ *   `resolve(join(projectRoot, entry.source))` — so an absolute-looking source
+ *   is rooted UNDER `projectRoot` identically to what the packager copies.
+ *   (A bare `resolve(projectRoot, source)` would let a leading slash escape the
+ *   root, yielding a `../`-prefixed path that never matches the walker's `rel`.)
+ *   Resolving then re-relativising is a no-op for clean relative paths but
+ *   correctly strips any leading `./`.
+ *
+ * - dest paths are always deferred (target won't exist until build)
+ * - source paths are deferred only when the target does not yet exist on disk
  */
-export function computeDeferredPaths(files) {
-    const paths = new Set();
+export function computeDeferredPaths(files, opts) {
+    const destPaths = new Set();
+    const sourcePaths = new Set();
     for (const entry of files) {
-        paths.add(normalizePath(entry.source));
-        paths.add(normalizePath(entry.dest));
+        // dest is authored relative to skillDir (skill-packager: resolve(skillDir, dest))
+        destPaths.add(toForwardSlash(safePath.relative(opts.projectRoot, safePath.resolve(opts.skillDir, entry.dest))));
+        // source is authored relative to projectRoot. For GLOB entries, register the
+        // static base (e.g. 'dist/packs' for 'dist/packs/**/*') so that prefix
+        // matching in checkDeferred() can defer links under the glob's expansion tree
+        // without executing the glob at validate time (late-bound, pattern-derived).
+        // For single-file entries, mirror skill-packager exactly:
+        // resolve(join(projectRoot, source)) so absolute-looking sources root under
+        // projectRoot rather than escaping it.
+        const effectiveSource = isGlob(entry.source) ? staticGlobBase(entry.source) : entry.source;
+        sourcePaths.add(toForwardSlash(safePath.relative(opts.projectRoot, safePath.resolve(safePath.join(opts.projectRoot, effectiveSource)))));
+    }
+    return { destPaths, sourcePaths };
+}
+/**
+ * Verify that each (absSource, absDest) pair has byte-identical content.
+ *
+ * Throws with a message naming the offending dest path on any mismatch or
+ * missing dest. Intended to be called after a copy operation to assert the
+ * copy was faithful. Exported so it can be tested directly without running a
+ * full applyFilesConfig round-trip.
+ */
+export function verifyFilesIntegrity(pairs) {
+    for (const { absSource, absDest } of pairs) {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- paths from validated config
+        if (!existsSync(absDest)) {
+            throw new Error(`files: integrity check failed — dest file missing: ${toForwardSlash(absDest)}`);
+        }
+        const srcHash = fileContentHash(absSource);
+        const dstHash = fileContentHash(absDest);
+        if (srcHash !== dstHash) {
+            throw new Error(`files: integrity check failed — content mismatch at dest: ${toForwardSlash(absDest)}`);
+        }
+    }
+}
+/**
+ * Verify that the on-disk contents of a glob entry's dest subtree EXACTLY match
+ * the set of rel paths the copy step intended to write — no missing, no extra.
+ *
+ * Why a SET comparison and not just `verifyFilesIntegrity`'s byte check:
+ * `verifyFilesIntegrity` hashes the (absSource, absDest) pairs that the SAME copy
+ * code computed. If the rebase/glob-mapping logic maps a match to the WRONG dest,
+ * that wrong dest rides along in the pair, so `hash(absSource) === hash(absDest)`
+ * still passes and the bug slips through. Enumerating the dest subtree and
+ * diffing against the expected rel set is what catches a misrouted rebase, a
+ * stale leftover, or a dropped file.
+ *
+ * SAFETY ASSUMPTION (why this can't false-positive): a glob entry OWNS its dest
+ * directory (`skillOutputDir/<entry.dest>`) and the build wipes the skill output
+ * dir before copying (skill-packager.ts removes `resolvedOutput` recursively
+ * before any copy). Nothing else writes into this subtree, so any EXTRA file is a
+ * genuine bug, not a co-tenant. This scoping is what makes the set check safe
+ * here even though a project-wide "no extra files" check would not be.
+ *
+ * @param destDir      Absolute path to the glob entry's dest subtree.
+ * @param expectedRel  Forward-slash rel paths (relative to `destDir`) the copy
+ *                     step wrote for THIS entry.
+ * @param source       The entry's `source` (for error messages only).
+ * @throws if the actual subtree omits an expected file or contains an extra one.
+ */
+export async function verifyDestSet(destDir, expectedRel, source) {
+    const actual = (await glob('**/*', { cwd: destDir, nodir: true }))
+        .map((m) => toForwardSlash(m))
+        .sort((a, b) => a.localeCompare(b));
+    const expected = [...expectedRel].sort((a, b) => a.localeCompare(b));
+    const expectedSet = new Set(expected);
+    const actualSet = new Set(actual);
+    for (const rel of actual) {
+        if (!expectedSet.has(rel)) {
+            throw new Error(`files: integrity check for '${source}' found unexpected file '${rel}' under dest '${toForwardSlash(destDir)}'`);
+        }
+    }
+    for (const rel of expected) {
+        if (!actualSet.has(rel)) {
+            throw new Error(`files: integrity check for '${source}' missing expected file '${rel}' under dest '${toForwardSlash(destDir)}'`);
+        }
+    }
+}
+/**
+ * Copy a single (non-glob) files entry into the skill output dir.
+ *
+ * Returns `[destPath]` (the single entry.dest string) on success.
+ * Throws on missing source or if source is a directory.
+ */
+async function copyNonGlobEntry(entry, absoluteSource, skillOutputDir) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- source path from validated config
+    if (!existsSync(absoluteSource)) {
+        throw new Error(`files: source '${entry.source}' does not exist (resolved to ${absoluteSource}).`);
+    }
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- source path from validated config
+    if (statSync(absoluteSource).isDirectory()) {
+        throw new Error(`files: source '${entry.source}' is a directory; use a glob like '${entry.source}/**/*' to copy its contents.`);
+    }
+    const absoluteDest = safePath.join(skillOutputDir, entry.dest);
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- dest path from validated config
+    await mkdir(dirname(absoluteDest), { recursive: true });
+    await copyFile(absoluteSource, absoluteDest);
+    return { relDest: entry.dest, absSource: absoluteSource, absDest: absoluteDest };
+}
+/**
+ * Expand a glob entry, copy all matched files, and return copied rel-dest paths
+ * plus source/dest pairs for optional integrity verification.
+ */
+async function copyGlobEntry(entry, projectRoot, skillOutputDir, bundledFileSet) {
+    const base = staticGlobBase(entry.source);
+    const remainder = globMagicRemainder(entry.source);
+    const absoluteBase = safePath.resolve(safePath.join(projectRoot, base));
+    const rawMatches = await glob(remainder, { cwd: absoluteBase, nodir: true });
+    const matches = rawMatches.map((m) => toForwardSlash(m)).sort((a, b) => a.localeCompare(b));
+    if (matches.length === 0) {
+        throw new Error(`files: source '${entry.source}' (glob) matched no files under ${absoluteBase} — has your build run?`);
+    }
+    const copied = [];
+    const pairs = [];
+    // rels are dest-subtree-relative (relative to skillOutputDir/<entry.dest>),
+    // which equals the matched `rel` for files actually copied — the expected set
+    // verifyDestSet diffs the on-disk subtree against.
+    const rels = [];
+    for (const rel of matches) {
+        const absSource = safePath.join(absoluteBase, rel);
+        if (bundledFileSet.has(toForwardSlash(absSource)))
+            continue;
+        const relDest = toForwardSlash(safePath.join(entry.dest, rel));
+        const absDest = safePath.join(skillOutputDir, entry.dest, rel);
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- dest path from validated config
+        await mkdir(dirname(absDest), { recursive: true });
+        await copyFile(absSource, absDest);
+        copied.push(relDest);
+        pairs.push({ absSource, absDest });
+        rels.push(toForwardSlash(rel));
+    }
+    return { copied, pairs, rels };
+}
+/**
+ * Copy each `files:` entry's `source` → `dest` into the skill output directory.
+ *
+ * This is the single copy primitive shared by every build path so that
+ * build-provided artifacts (a bundled engine, generated data, a catalog) are
+ * VAT-managed end-to-end: the shared-pool `vat skills build` packager and the
+ * Claude plugin marketplace build both call it, instead of the latter relying on
+ * an external inject script VAT can't see. `source` is resolved the same way the
+ * packager does (`resolve(join(projectRoot, source))`, so an absolute-looking
+ * source roots UNDER the project). Returns the dest paths actually copied.
+ *
+ * Glob entries (`source` containing `*`, `?`, or `[`) expand late-bound at
+ * copy time: all matched files are rebased under `dest` preserving their
+ * path relative to the glob's static base. Zero matches → error.
+ *
+ * When `integrity: true` is set on an entry, `verifyFilesIntegrity` is called
+ * after copying to assert byte-identical content. For GLOB entries it ALSO runs
+ * `verifyDestSet` to assert the dest subtree contains exactly the copied rels
+ * (no missing, no extra) — catching a misrouted rebase the byte check misses.
+ * Single-file entries get only the byte check (dest is a file, not a subtree).
+ *
+ * @throws if a declared `source` does not exist — a declared build artifact must
+ * be present at copy time (callers that defer existence validate it upstream).
+ */
+export async function applyFilesConfig(opts) {
+    const bundledFileSet = new Set((opts.bundledFiles ?? []).map((f) => toForwardSlash(f)));
+    const copied = [];
+    for (const fileEntry of opts.filesConfig) {
+        if (isGlob(fileEntry.source)) {
+            const { copied: entryCopied, pairs, rels } = await copyGlobEntry(fileEntry, opts.projectRoot, opts.skillOutputDir, bundledFileSet);
+            if (fileEntry.integrity === true) {
+                verifyFilesIntegrity(pairs);
+                // Scoped set check: the glob entry owns its dest subtree and the build
+                // wiped the output dir first, so the on-disk subtree must equal exactly
+                // the rels we copied — catches a misrouted rebase the pair-hash misses.
+                await verifyDestSet(safePath.join(opts.skillOutputDir, fileEntry.dest), rels, fileEntry.source);
+            }
+            copied.push(...entryCopied);
+        }
+        else {
+            const absoluteSource = safePath.resolve(safePath.join(opts.projectRoot, fileEntry.source));
+            if (bundledFileSet.has(toForwardSlash(absoluteSource)))
+                continue;
+            const { relDest, absSource, absDest } = await copyNonGlobEntry(fileEntry, absoluteSource, opts.skillOutputDir);
+            if (fileEntry.integrity === true) {
+                verifyFilesIntegrity([{ absSource, absDest }]);
+            }
+            copied.push(relDest);
+        }
     }
-    return paths;
+    return copied;
 }
 //# sourceMappingURL=files-config.js.map

package/dist/files-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"files-config.js","sourceRoot":"","sources":["../src/files-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAY3D;;GAEG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAsC,EACtC,QAAsC;IAEtC,wCAAwC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,IAAI,KAAK;oBAC7D,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,yDAAyD;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,6CAA6C;IAC7C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAuB;IAEvB,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAE7C,4BAA4B;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"files-config.js","sourceRoot":"","sources":["../src/files-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,MAAM,EACN,QAAQ,EACR,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAY5B;;GAEG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAsC,EACtC,QAAsC;IAEtC,wCAAwC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,IAAI,KAAK;oBAC7D,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,yDAAyD;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,6CAA6C;IAC7C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAuB;IAEvB,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,SAAS,aAAa,CAAC,SAAiB;QACtC,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACpD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAuB,EACvB,IAA8B;IAE9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,kFAAkF;QAClF,SAAS,CAAC,GAAG,CACX,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CACjG,CAAC;QACF,6EAA6E;QAC7E,uEAAuE;QACvE,8EAA8E;QAC9E,6EAA6E;QAC7E,0DAA0D;QAC1D,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3F,WAAW,CAAC,GAAG,CACb,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CACxH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAiBD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+C;IAE/C,KAAK,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;QAC3C,kGAAkG;QAClG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,sDAAsD,cAAc,CAAC,OAAO,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,6DAA6D,cAAc,CAAC,OAAO,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,WAAqB,EACrB,MAAc;IAEd,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;SAC7B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,4BAA4B,GAAG,iBAAiB,cAAc,CAAC,OAAO,CAAC,GAAG,CAChH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,4BAA4B,GAAG,iBAAiB,cAAc,CAAC,OAAO,CAAC,GAAG,CAChH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAAqB,EACrB,cAAsB,EACtB,cAAsB;IAEtB,wGAAwG;IACxG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,MAAM,iCAAiC,cAAc,IAAI,CAClF,CAAC;IACJ,CAAC;IACD,wGAAwG;IACxG,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,MAAM,sCAAsC,KAAK,CAAC,MAAM,8BAA8B,CAC/G,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,sGAAsG;IACtG,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAqB,EACrB,WAAmB,EACnB,cAAsB,EACtB,cAA2B;IAE3B,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAExE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,MAAM,mCAAmC,YAAY,wBAAwB,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAA6C,EAAE,CAAC;IAC3D,4EAA4E;IAC5E,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YAAE,SAAS;QAE5D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAE/D,sGAAsG;QACtG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAC9D,SAAS,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;YACF,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBACjC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC5B,uEAAuE;gBACvE,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,aAAa,CACjB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,EAClD,IAAI,EACJ,SAAS,CAAC,MAAM,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3F,IAAI,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBAAE,SAAS;YAEjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAC5D,SAAS,EACT,cAAc,EACd,IAAI,CAAC,cAAc,CACpB,CAAC;YACF,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBACjC,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -6,7 +6,7 @@ export { buildAgentSkill, type BuildOptions, type BuildResult } from './builder.
 export { extractH1Title, packageSkill, packageSkills, ZipSizeLimitError, type PackageSkillOptions, type PackageSkillResult, type PackagingTarget, type SkillBuildSpec, type SkillMetadata, } from './skill-packager.js';
 export { walkLinkGraph, type ExcludeRule, type LinkGraphResult, type LinkResolution, type WalkableRegistry, type WalkLinkGraphOptions, } from './walk-link-graph.js';
 export { getTargetSubdir, CONTENT_TYPE_ROUTING_MAP, type TargetSubdirCategory, } from './content-type-routing.js';
-export { mergeFilesConfig, matchLinkToFiles, computeDeferredPaths, type FilesMatchResult, } from './files-config.js';
+export { applyFilesConfig, mergeFilesConfig, matchLinkToFiles, computeDeferredPaths, type ApplyFilesConfigOptions, type ComputeDeferredPathsOpts, type DeferredPaths, type FilesMatchResult, } from './files-config.js';
 export { AgentSkillFrontmatterJsonSchema, AgentSkillFrontmatterSchema, VATAgentSkillFrontmatterSchema, type AgentSkillFrontmatter, type VATAgentSkillFrontmatter, } from './schemas/agent-skill-frontmatter.js';
 export { MarketplaceManifestJsonSchema, MarketplaceManifestSchema, type MarketplaceManifest } from './schemas/marketplace-manifest.js';
 export { PluginJsonSchema, type PluginJson } from './schemas/plugin-json.js';
@@ -23,9 +23,13 @@ export { crawlAndResolveRegistry, validateSkillForPackaging, type ExcludedRefere
 export { createIssue, NAVIGATION_FILE_PATTERNS, VALIDATION_RULES, VALIDATION_THRESHOLDS, type RuleCategory, type ValidationRule, type ValidationRuleCode, } from './validators/validation-rules.js';
 export type { ValidationResult, ValidateOptions, ResourceFormat, Surface, } from './validators/types.js';
 export { importSkillToAgent, type ImportOptions, type ImportResult, } from './import.js';
+export { cloneGitSource, type GitCloneResult } from './skill-source/git-clone.js';
+export { resolveSkillSource, type ResolveSkillSourceOptions } from './skill-source/resolve-skill-source.js';
+export type { SkillSource, ResolvedSkillSource, ResolveSkillSourceContext, } from './skill-source/types.js';
 export type { EvidenceRecord, EvidenceSource, EvidenceConfidence, EvidenceLocation, PatternDefinition, Observation, } from './evidence/index.js';
 export { PATTERN_REGISTRY, getPatternDefinition, assertPatternRegistered, deriveObservationsFromEvidence, } from './evidence/index.js';
 export type { DeriveObservationsOptions, DerivationSubject } from './evidence/index.js';
 export type { AnyInventory, BaseInventory, ComponentRef, DeclaredList, HookRef, InstallInventory, LspRef, MarketplaceInventory, McpRef, ParseError as InventoryParseError, PluginInventory, PluginRef, ResolvedReference, SkillInventory, } from './inventory/index.js';
 export { isInstallInventory, isMarketplaceInventory, isPluginInventory, isSkillInventory, serializeInventory, serializeInventoryShallow, INVENTORY_SCHEMA_VERSION, detectDeclaredButMissing, detectMarketplacePluginSourceMissing, detectPresentButUndeclared, detectReferenceTargetMissing, } from './inventory/index.js';
+export * from './skill-test/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAEvI,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,cAAc,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,GAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,OAAO,GACR,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxF,YAAY,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,UAAU,IAAI,mBAAmB,EACjC,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAEvI,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,cAAc,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,GAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,OAAO,GACR,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlF,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxF,YAAY,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,UAAU,IAAI,mBAAmB,EACjC,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -6,7 +6,7 @@ export { buildAgentSkill } from './builder.js';
 export { extractH1Title, packageSkill, packageSkills, ZipSizeLimitError, } from './skill-packager.js';
 export { walkLinkGraph, } from './walk-link-graph.js';
 export { getTargetSubdir, CONTENT_TYPE_ROUTING_MAP, } from './content-type-routing.js';
-export { mergeFilesConfig, matchLinkToFiles, computeDeferredPaths, } from './files-config.js';
+export { applyFilesConfig, mergeFilesConfig, matchLinkToFiles, computeDeferredPaths, } from './files-config.js';
 export { AgentSkillFrontmatterJsonSchema, AgentSkillFrontmatterSchema, VATAgentSkillFrontmatterSchema, } from './schemas/agent-skill-frontmatter.js';
 export { MarketplaceManifestJsonSchema, MarketplaceManifestSchema } from './schemas/marketplace-manifest.js';
 export { PluginJsonSchema } from './schemas/plugin-json.js';
@@ -22,6 +22,11 @@ export { detectResourceFormat, enumerateSurfaces } from './validators/format-det
 export { crawlAndResolveRegistry, validateSkillForPackaging, } from './validators/packaging-validator.js';
 export { createIssue, NAVIGATION_FILE_PATTERNS, VALIDATION_RULES, VALIDATION_THRESHOLDS, } from './validators/validation-rules.js';
 export { importSkillToAgent, } from './import.js';
+// Skill source primitives
+export { cloneGitSource } from './skill-source/git-clone.js';
+// Unified skill-source resolution (spec §11c)
+export { resolveSkillSource } from './skill-source/resolve-skill-source.js';
 export { PATTERN_REGISTRY, getPatternDefinition, assertPatternRegistered, deriveObservationsFromEvidence, } from './evidence/index.js';
 export { isInstallInventory, isMarketplaceInventory, isPluginInventory, isSkillInventory, serializeInventory, serializeInventoryShallow, INVENTORY_SCHEMA_VERSION, detectDeclaredButMissing, detectMarketplacePluginSourceMissing, detectPresentButUndeclared, detectReferenceTargetMissing, } from './inventory/index.js';
+export * from './skill-test/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAuC,MAAM,cAAc,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,iBAAiB,GAMlB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,aAAa,GAMd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,eAAe,EACf,wBAAwB,GAEzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAG/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAA4B,MAAM,mCAAmC,CAAC;AAEvI,OAAO,EAAE,gBAAgB,EAAmB,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EACL,gBAAgB,GAEjB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAyB,MAAM,sCAAsC,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,QAAQ,EAA+B,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAK1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,GAItB,MAAM,kCAAkC,CAAC;AAQ1C,OAAO,EACL,kBAAkB,GAGnB,MAAM,aAAa,CAAC;AAWrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAoB7B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAuC,MAAM,cAAc,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,iBAAiB,GAMlB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,aAAa,GAMd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,eAAe,EACf,wBAAwB,GAEzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,GAKrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAG/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAA4B,MAAM,mCAAmC,CAAC;AAEvI,OAAO,EAAE,gBAAgB,EAAmB,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EACL,gBAAgB,GAEjB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAyB,MAAM,sCAAsC,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,QAAQ,EAA+B,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAK1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,GAItB,MAAM,kCAAkC,CAAC;AAQ1C,OAAO,EACL,kBAAkB,GAGnB,MAAM,aAAa,CAAC;AAErB,0BAA0B;AAC1B,OAAO,EAAE,cAAc,EAAuB,MAAM,6BAA6B,CAAC;AAElF,8CAA8C;AAC9C,OAAO,EAAE,kBAAkB,EAAkC,MAAM,wCAAwC,CAAC;AAgB5G,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAoB7B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,cAAc,uBAAuB,CAAC"}

package/dist/post-build-checks.d.ts

@@ -6,18 +6,18 @@
  */
 import { type ValidationIssue } from '@vibe-agent-toolkit/agent-schema';
 /**
- * Check that every file in the packaged output is referenced from some markdown file.
+ * Check that every file in the packaged output is referenced from some markdown or HTML file.
  *
  * Two-pass detection:
- * 1. Walk `[text](href)` link graph from SKILL.md (strict, transitive).
+ * 1. Walk formal link graph from SKILL.md (strict, transitive, covers .md and .html/.htm).
  * 2. For files not covered by pass 1, check whether their output-relative path
- *    is mentioned anywhere in packaged markdown (code blocks, prose, etc.).
+ *    is mentioned anywhere in packaged content files (markdown or HTML).
  *    Authors often document CLI scripts via invocation examples rather than
- *    markdown links, and that counts as documented.
+ *    formal links, and that counts as documented.
  */
 export declare function checkUnreferencedFiles(outputDir: string): Promise<ValidationIssue[]>;
 /**
- * Check that every local file link in packaged markdown files resolves to a file
+ * Check that every local file link in packaged markdown and HTML files resolves to a file
  * that exists in the packaged output.
  */
 export declare function checkBrokenPackagedLinks(outputDir: string): Promise<ValidationIssue[]>;

package/dist/post-build-checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"post-build-checks.d.ts","sourceRoot":"","sources":["../src/post-build-checks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AA4JvF;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA4B1F;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA6B5F"}
+{"version":3,"file":"post-build-checks.d.ts","sourceRoot":"","sources":["../src/post-build-checks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AA0OxE;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAmC1F;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAe5F"}