@vibe-agent-toolkit/agent-skills 0.1.42 → 0.2.0-rc.10

package/dist/skill-test/vendor-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"vendor-manifest.js","sourceRoot":"","sources":["../../src/skill-test/vendor-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAEzF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;KACnD,MAAM,EAAE,CAAC;AAIZ,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;QACrC,2GAA2G;QAC3G,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzC,2GAA2G;YAC3G,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oDAAoD;AACpD,SAAS,QAAQ,CAAC,OAAe;IAC/B,qHAAqH;IACrH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,4DAA4D;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAExE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,KAAK,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,qHAAqH;IACrH,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,qHAAqH;IACrH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,qHAAqH;QACrH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/C,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,mIAAmI;QACnI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,KAAK,iBAAiB;YAAE,SAAS;QACxC,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"vendor-manifest.js","sourceRoot":"","sources":["../../src/skill-test/vendor-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAEzF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;KACnD,MAAM,EAAE,CAAC;AAIZ,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;QACrC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oDAAoD;AACpD,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,4DAA4D;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAExE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,KAAK,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/C,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8EAA8E;QAC9E,yEAAyE;QACzE,+EAA+E;QAC/E,gEAAgE;QAChE,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9E,MAAM,KAAK,CAAC;IACd,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,KAAK,iBAAiB;YAAE,SAAS;QACxC,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/test-input.d.ts

@@ -25,9 +25,51 @@
  * This module is the ONE definition of where a skill's test input lives, shared by
  * every packaging lane, so no lane can answer the question differently.
  */
-import { type ValidationIssue } from '@vibe-agent-toolkit/agent-schema';
 import type { SkillPackagingConfig } from '@vibe-agent-toolkit/resources';
+import { type ValidationIssue } from '@vibe-agent-toolkit/schema';
 import { type SkillFileEntry } from './files-config.js';
+/**
+ * Answers "does this skill root carry the conventional suite at
+ * `<skill-root>/evals/evals.json`?" — see {@link conventionalSuiteProbe} for the
+ * one that memoizes, and for why its lifetime is the RUN and not longer.
+ */
+export type ConventionalSuiteProbe = (skillDir: string) => boolean;
+/**
+ * A probe for "does this skill carry the conventional suite at
+ * `<skill-root>/evals/evals.json`?", answering each directory from the filesystem
+ * at most once.
+ *
+ * The one filesystem touch in this module, and the reason the default convention can
+ * be honored without guessing from a directory name. Everything else here is pure
+ * path math over a config.
+ *
+ * Deduplicated because {@link resolveTestInputDirs} asks the question once for the
+ * subject and once per entry in `projectSkills` — and a package that keeps its
+ * skills in ONE directory (VAT's own `vat-development-agents` keeps thirteen there)
+ * makes every one of those the same question about the same path.
+ *
+ * SCOPE: one RUN, not one call. Every lane here loops over the project's skills and
+ * hands each of them the same project-wide `projectSkills`, so a probe scoped to the
+ * CALL re-asks S questions per skill and S² per run about the same S paths — and the
+ * memo hides that inside one call while doing nothing across the loop. Measured with
+ * the lab on a 103-skill adopter, `vat resources validate`: 10,815 probes over 103
+ * distinct paths, ~105 repeats each, and exactly 50% of that command's 21,648 user
+ * filesystem calls. Run-scoped it is ~103, and the command's total ~10,900.
+ *
+ * It survived because VAT's own tree cannot show it: measured on `vat audit .`, 14
+ * probes over 2 DISTINCT paths — 2² = 4 is invisible next to the constant factor, and
+ * "14 probes" reads like a rounding error rather than a complexity class. Only a tree
+ * with a large S separates O(S) from O(S²) here.
+ *
+ * The memo is created per run and dies with it. It deliberately is NOT module-level,
+ * and widening it to the run does not weaken that: this module's answer is a snapshot
+ * of the filesystem, and a run is the longest window over which the lanes already
+ * assume one snapshot — they take `projectSkills` (the project's whole skill set and
+ * its configs) once per run and answer every skill from it. A cache outliving the run
+ * would keep answering for a tree that has since changed — in a long-lived process,
+ * and across every later test in the same worker.
+ */
+export declare function conventionalSuiteProbe(): ConventionalSuiteProbe;
 /** One skill's eval-suite declaration, as the PROJECT config states it. */
 export interface DeclaredEvalSuite {
     /** Absolute path to that skill's root directory (the dir holding its SKILL.md). */
@@ -46,7 +88,7 @@ export interface DeclaredEvalSuite {
  * the walker bundled it — with no exclusion and no `PACKAGED_TEST_INPUT` receipt,
  * because nothing under the subject's config named that path.
  *
- * Observed ACTIVE on a 90-skill adopter (2026-07-30, `vat skills build`): a built
+ * Observed ACTIVE on a 90-skill adopter (`vat skills build`): a built
  * bundle contained a file byte-identical to a DIFFERENT skill's real eval suite,
  * carried under that bundle's own subtree. The answer key shipped. A basename
  * collision between two such suites does not save anyone — a FILENAME_COLLISION is
@@ -69,12 +111,18 @@ export interface DeclaredEvalSuite {
  * SCOPE OF THE CROSS-SKILL HALF — another skill's suite dir travels to this build only
  * when it lies INSIDE that skill's own directory. A `test.evals` pointing at a SHARED
  * directory already strips that whole directory from the declaring skill's bundle
- * (issue #166); honouring it project-wide would turn one skill's over-broad
+ * (by design); honouring it project-wide would turn one skill's over-broad
  * declaration into a project-wide strip of a directory no single skill owns. The
  * declaring skill's own build is unchanged — the `config`/`skillDir` pair above is
  * still taken at face value — so this narrows nothing that worked before.
+ *
+ * `hasConventionalSuite` is the RUN's probe (see {@link conventionalSuiteProbe}),
+ * and it is REQUIRED for the same reason `projectSkills` is: a defaulted `probe?`
+ * would let every existing caller keep the per-call scope silently, which is the
+ * exact no-op this file already shipped once. A lane with no run to scope to calls
+ * `conventionalSuiteProbe()` at its own call site, where the narrowing is visible.
  */
-export declare function resolveTestInputDirs(config: Pick<SkillPackagingConfig, 'test'>, skillDir: string, projectSkills: readonly DeclaredEvalSuite[]): string[];
+export declare function resolveTestInputDirs(config: Pick<SkillPackagingConfig, 'test'>, skillDir: string, projectSkills: readonly DeclaredEvalSuite[], hasConventionalSuite: ConventionalSuiteProbe): string[];
 /**
  * Exclude rules that drop any link into declared test input from the bundle.
  *
@@ -116,11 +164,14 @@ export declare function partitionTestInputFileEntries(filesConfig: readonly Skil
  * agree. The packager is the authority on what ships; this is how the read-only
  * lanes borrow its answer instead of guessing.
  *
- * `projectSkills` is forwarded to {@link resolveTestInputDirs}, so a `files:` entry
- * pointing at ANOTHER skill's declared suite is dropped here too. Required for the
- * same reason it is required there — see that function's note on the no-op default.
+ * `projectSkills` and `hasConventionalSuite` are forwarded to
+ * {@link resolveTestInputDirs}, so a `files:` entry pointing at ANOTHER skill's
+ * declared suite is dropped here too. Both are required for the same reason they are
+ * required there — see that function's note on the no-op default. This is the seam
+ * the measured quadratic ran through: `vat resources validate` calls this once per
+ * discovered skill, so the run's probe has to arrive from the caller's loop.
  */
-export declare function packagedFileEntries(config: Pick<SkillPackagingConfig, 'files' | 'test'>, skillDir: string, projectRoot: string, projectSkills: readonly DeclaredEvalSuite[]): SkillFileEntry[];
+export declare function packagedFileEntries(config: Pick<SkillPackagingConfig, 'files' | 'test'>, skillDir: string, projectRoot: string, projectSkills: readonly DeclaredEvalSuite[], hasConventionalSuite: ConventionalSuiteProbe): SkillFileEntry[];
 /** A `PACKAGED_TEST_INPUT` receipt per dropped `files:` entry — a warning, not a failure. */
 export declare function testInputFileEntryIssues(dropped: readonly SkillFileEntry[]): ValidationIssue[];
 /** The shape of a walker exclusion this module needs: where it pointed, and from what link. */

package/dist/test-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-input.d.ts","sourceRoot":"","sources":["../src/test-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA0DxD,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAC1C,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,SAAS,iBAAiB,EAAE,GAC1C,MAAM,EAAE,CAQV;AA2BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,WAAW,EAAE,MAAM,GAClB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAO/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,SAAS,cAAc,EAAE,EACtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B;IAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAE,CAWvD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,MAAM,CAAC,EACpD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,SAAS,iBAAiB,EAAE,GAC1C,cAAc,EAAE,CAMlB;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,eAAe,EAAE,CAU9F;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,eAAe,EAAE,EACpC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,MAAoB,GACjC,eAAe,EAAE,CAsBnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,2EAA2E;IAC3E,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,eAAe,EAAE,CAW5F"}
+{"version":3,"file":"test-input.d.ts","sourceRoot":"","sources":["../src/test-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGlE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAIxD;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,sBAAsB,IAAI,sBAAsB,CAU/D;AA6CD,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAC1C,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,oBAAoB,EAAE,sBAAsB,GAC3C,MAAM,EAAE,CAQV;AA2BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,WAAW,EAAE,MAAM,GAClB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAO/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,SAAS,cAAc,EAAE,EACtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B;IAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAE,CAWvD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,MAAM,CAAC,EACpD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,oBAAoB,EAAE,sBAAsB,GAC3C,cAAc,EAAE,CAMlB;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,eAAe,EAAE,CAU9F;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,eAAe,EAAE,EACpC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,MAAoB,GACjC,eAAe,EAAE,CAsBnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,2EAA2E;IAC3E,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,eAAe,EAAE,CAW5F"}

package/dist/test-input.js

@@ -27,19 +27,55 @@
  */
 import { existsSync } from 'node:fs';
 import { dirname } from 'node:path';
-import { isGlob, issueLocation, safePath, staticGlobBase, toForwardSlash } from '@vibe-agent-toolkit/utils';
+import { isGlob, issueLocation, relativeEscapesRoot, safePath, staticGlobBase, toForwardSlash, toForwardSlashAnyPlatform } from '@vibe-agent-toolkit/utils';
 import { DEFAULT_EVALS_SUBPATH } from './skill-test/eval-suite-isolation.js';
 import { materializeIssue } from './validators/rule-engine/index.js';
 /**
- * Does this skill carry the conventional suite at `<skill-root>/evals/evals.json`?
+ * A probe for "does this skill carry the conventional suite at
+ * `<skill-root>/evals/evals.json`?", answering each directory from the filesystem
+ * at most once.
  *
  * The one filesystem touch in this module, and the reason the default convention can
  * be honored without guessing from a directory name. Everything else here is pure
  * path math over a config.
+ *
+ * Deduplicated because {@link resolveTestInputDirs} asks the question once for the
+ * subject and once per entry in `projectSkills` — and a package that keeps its
+ * skills in ONE directory (VAT's own `vat-development-agents` keeps thirteen there)
+ * makes every one of those the same question about the same path.
+ *
+ * SCOPE: one RUN, not one call. Every lane here loops over the project's skills and
+ * hands each of them the same project-wide `projectSkills`, so a probe scoped to the
+ * CALL re-asks S questions per skill and S² per run about the same S paths — and the
+ * memo hides that inside one call while doing nothing across the loop. Measured with
+ * the lab on a 103-skill adopter, `vat resources validate`: 10,815 probes over 103
+ * distinct paths, ~105 repeats each, and exactly 50% of that command's 21,648 user
+ * filesystem calls. Run-scoped it is ~103, and the command's total ~10,900.
+ *
+ * It survived because VAT's own tree cannot show it: measured on `vat audit .`, 14
+ * probes over 2 DISTINCT paths — 2² = 4 is invisible next to the constant factor, and
+ * "14 probes" reads like a rounding error rather than a complexity class. Only a tree
+ * with a large S separates O(S) from O(S²) here.
+ *
+ * The memo is created per run and dies with it. It deliberately is NOT module-level,
+ * and widening it to the run does not weaken that: this module's answer is a snapshot
+ * of the filesystem, and a run is the longest window over which the lanes already
+ * assume one snapshot — they take `projectSkills` (the project's whole skill set and
+ * its configs) once per run and answer every skill from it. A cache outliving the run
+ * would keep answering for a tree that has since changed — in a long-lived process,
+ * and across every later test in the same worker.
  */
-function hasConventionalSuite(skillDir) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- skillDir is VAT's own resolved skill directory
-    return existsSync(safePath.resolve(skillDir, DEFAULT_EVALS_SUBPATH));
+export function conventionalSuiteProbe() {
+    const answers = new Map();
+    return (skillDir) => {
+        const suitePath = safePath.resolve(skillDir, DEFAULT_EVALS_SUBPATH);
+        const cached = answers.get(suitePath);
+        if (cached !== undefined)
+            return cached;
+        const found = existsSync(suitePath);
+        answers.set(suitePath, found);
+        return found;
+    };
 }
 /** True when `candidate` is inside (or equal to) `dir`. Both are absolute. */
 function isInside(candidate, dir) {
@@ -69,7 +105,7 @@ function isInside(candidate, dir) {
  * root `evals/` holding no `evals.json`. Guessing from the name alone would silently
  * drop an author's unrelated directory out of their own bundle.
  */
-function declaredTestInputDirs(config, skillDir) {
+function declaredTestInputDirs(config, skillDir, hasConventionalSuite) {
     if (config.test === undefined && !hasConventionalSuite(skillDir))
         return [];
     const subpath = config.test?.evals ?? DEFAULT_EVALS_SUBPATH;
@@ -91,7 +127,7 @@ function declaredTestInputDirs(config, skillDir) {
  * the walker bundled it — with no exclusion and no `PACKAGED_TEST_INPUT` receipt,
  * because nothing under the subject's config named that path.
  *
- * Observed ACTIVE on a 90-skill adopter (2026-07-30, `vat skills build`): a built
+ * Observed ACTIVE on a 90-skill adopter (`vat skills build`): a built
  * bundle contained a file byte-identical to a DIFFERENT skill's real eval suite,
  * carried under that bundle's own subtree. The answer key shipped. A basename
  * collision between two such suites does not save anyone — a FILENAME_COLLISION is
@@ -114,15 +150,21 @@ function declaredTestInputDirs(config, skillDir) {
  * SCOPE OF THE CROSS-SKILL HALF — another skill's suite dir travels to this build only
  * when it lies INSIDE that skill's own directory. A `test.evals` pointing at a SHARED
  * directory already strips that whole directory from the declaring skill's bundle
- * (issue #166); honouring it project-wide would turn one skill's over-broad
+ * (by design); honouring it project-wide would turn one skill's over-broad
  * declaration into a project-wide strip of a directory no single skill owns. The
  * declaring skill's own build is unchanged — the `config`/`skillDir` pair above is
  * still taken at face value — so this narrows nothing that worked before.
+ *
+ * `hasConventionalSuite` is the RUN's probe (see {@link conventionalSuiteProbe}),
+ * and it is REQUIRED for the same reason `projectSkills` is: a defaulted `probe?`
+ * would let every existing caller keep the per-call scope silently, which is the
+ * exact no-op this file already shipped once. A lane with no run to scope to calls
+ * `conventionalSuiteProbe()` at its own call site, where the narrowing is visible.
  */
-export function resolveTestInputDirs(config, skillDir, projectSkills) {
-    const dirs = new Set(declaredTestInputDirs(config, skillDir));
+export function resolveTestInputDirs(config, skillDir, projectSkills, hasConventionalSuite) {
+    const dirs = new Set(declaredTestInputDirs(config, skillDir, hasConventionalSuite));
     for (const skill of projectSkills) {
-        for (const dir of declaredTestInputDirs(skill.config, skill.skillDir)) {
+        for (const dir of declaredTestInputDirs(skill.config, skill.skillDir, hasConventionalSuite)) {
             if (isInside(dir, skill.skillDir))
                 dirs.add(dir);
         }
@@ -145,7 +187,7 @@ function projectRelativeTestInputDirs(testInputDirs, projectRoot) {
     const inside = [];
     for (const dir of testInputDirs) {
         const rel = toForwardSlash(safePath.relative(projectRoot, dir));
-        if (rel === '' || rel.startsWith('../'))
+        if (rel === '' || relativeEscapesRoot(rel))
             continue;
         inside.push(dir);
     }
@@ -208,18 +250,21 @@ export function partitionTestInputFileEntries(filesConfig, projectRoot, testInpu
  * agree. The packager is the authority on what ships; this is how the read-only
  * lanes borrow its answer instead of guessing.
  *
- * `projectSkills` is forwarded to {@link resolveTestInputDirs}, so a `files:` entry
- * pointing at ANOTHER skill's declared suite is dropped here too. Required for the
- * same reason it is required there — see that function's note on the no-op default.
+ * `projectSkills` and `hasConventionalSuite` are forwarded to
+ * {@link resolveTestInputDirs}, so a `files:` entry pointing at ANOTHER skill's
+ * declared suite is dropped here too. Both are required for the same reason they are
+ * required there — see that function's note on the no-op default. This is the seam
+ * the measured quadratic ran through: `vat resources validate` calls this once per
+ * discovered skill, so the run's probe has to arrive from the caller's loop.
  */
-export function packagedFileEntries(config, skillDir, projectRoot, projectSkills) {
-    return partitionTestInputFileEntries(config.files ?? [], projectRoot, resolveTestInputDirs(config, skillDir, projectSkills)).kept;
+export function packagedFileEntries(config, skillDir, projectRoot, projectSkills, hasConventionalSuite) {
+    return partitionTestInputFileEntries(config.files ?? [], projectRoot, resolveTestInputDirs(config, skillDir, projectSkills, hasConventionalSuite)).kept;
 }
 /** A `PACKAGED_TEST_INPUT` receipt per dropped `files:` entry — a warning, not a failure. */
 export function testInputFileEntryIssues(dropped) {
     return dropped.map((entry) => materializeIssue('PACKAGED_TEST_INPUT', {
-        location: toForwardSlash(entry.dest),
-        message: `files: entry "${toForwardSlash(entry.source)} -> ${toForwardSlash(entry.dest)}" points into ` +
+        location: toForwardSlashAnyPlatform(entry.dest),
+        message: `files: entry "${toForwardSlashAnyPlatform(entry.source)} -> ${toForwardSlashAnyPlatform(entry.dest)}" points into ` +
             `declared test input (some skill's test.evals) and was NOT packaged — test input, ` +
             `including the expected_output answer key, never ships to consumers.`,
     }));

package/dist/test-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-input.js","sourceRoot":"","sources":["../src/test-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAG5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,qHAAqH;IACrH,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,qBAAqB,CAC5B,MAA0C,EAC1C,QAAgB;IAEhB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,qBAAqB,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,kFAAkF;IAClF,8EAA8E;IAC9E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0C,EAC1C,QAAgB,EAChB,aAA2C;IAE3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,4BAA4B,CACnC,aAAgC,EAChC,WAAmB;IAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAgC,EAChC,WAAmB;IAEnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,4BAA4B,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAC3C,WAAsC,EACtC,WAAmB,EACnB,aAAgC;IAEhC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACrF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1E,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC1E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoD,EACpD,QAAgB,EAChB,WAAmB,EACnB,aAA2C;IAE3C,OAAO,6BAA6B,CAClC,MAAM,CAAC,KAAK,IAAI,EAAE,EAClB,WAAW,EACX,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CACtD,CAAC,IAAI,CAAC;AACT,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,gBAAgB,CAAC,qBAAqB,EAAE;QACtC,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,OAAO,EACL,iBAAiB,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB;YAC9F,mFAAmF;YACnF,qEAAqE;KACxE,CAAC,CACH,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAoC,EACpC,aAAgC,EAChC,WAAmB,EACnB,eAAuB,WAAW;IAElC,MAAM,YAAY,GAAG,4BAA4B,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,qBAAqB,EAAE;YACtC,QAAQ;YACR,OAAO,EACL,SAAS,GAAG,CAAC,QAAQ,IAAI,QAAQ,kDAAkD;gBACnF,qFAAqF;gBACrF,sFAAsF;gBACtF,mCAAmC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrC,gBAAgB,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CACxE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"test-input.js","sourceRoot":"","sources":["../src/test-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAG5J,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AASrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,OAAO,CAAC,QAAgB,EAAW,EAAE;QACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,qBAAqB,CAC5B,MAA0C,EAC1C,QAAgB,EAChB,oBAA4C;IAE5C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,qBAAqB,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,kFAAkF;IAClF,8EAA8E;IAC9E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0C,EAC1C,QAAgB,EAChB,aAA2C,EAC3C,oBAA4C;IAE5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC5F,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,4BAA4B,CACnC,aAAgC,EAChC,WAAmB;IAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,KAAK,EAAE,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,SAAS;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAgC,EAChC,WAAmB;IAEnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,4BAA4B,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAC3C,WAAsC,EACtC,WAAmB,EACnB,aAAgC;IAEhC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACrF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1E,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC1E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoD,EACpD,QAAgB,EAChB,WAAmB,EACnB,aAA2C,EAC3C,oBAA4C;IAE5C,OAAO,6BAA6B,CAClC,MAAM,CAAC,KAAK,IAAI,EAAE,EAClB,WAAW,EACX,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAC5E,CAAC,IAAI,CAAC;AACT,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,gBAAgB,CAAC,qBAAqB,EAAE;QACtC,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/C,OAAO,EACL,iBAAiB,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB;YACpH,mFAAmF;YACnF,qEAAqE;KACxE,CAAC,CACH,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAoC,EACpC,aAAgC,EAChC,WAAmB,EACnB,eAAuB,WAAW;IAElC,MAAM,YAAY,GAAG,4BAA4B,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,qBAAqB,EAAE;YACtC,QAAQ;YACR,OAAO,EACL,SAAS,GAAG,CAAC,QAAQ,IAAI,QAAQ,kDAAkD;gBACnF,qFAAqF;gBACrF,sFAAsF;gBACtF,mCAAmC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrC,gBAAgB,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CACxE,CAAC;AACJ,CAAC"}

package/dist/validators/agent-instruction-presence.d.ts

@@ -14,7 +14,7 @@
  * tree-copies are three routes into a bundle, and only the first is visible to
  * the walker.
  */
-import { type ValidationIssue } from '@vibe-agent-toolkit/agent-schema';
+import { type ValidationIssue } from '@vibe-agent-toolkit/schema';
 /**
  * Report every repo-internal agent-instruction file present in a distributed
  * tree.

package/dist/validators/agent-instruction-presence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-instruction-presence.d.ts","sourceRoot":"","sources":["../../src/validators/agent-instruction-presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAcxE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,eAAe,EAAE,CA8BnB"}
+{"version":3,"file":"agent-instruction-presence.d.ts","sourceRoot":"","sources":["../../src/validators/agent-instruction-presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAelE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,eAAe,EAAE,CA0CnB"}

package/dist/validators/agent-instruction-presence.js

@@ -15,7 +15,8 @@
  * the walker.
  */
 import { existsSync } from 'node:fs';
-import { crawlDirectorySync, issueLocation, safePath } from '@vibe-agent-toolkit/utils';
+import { issueLocation, safePath, transientRefusalClause } from '@vibe-agent-toolkit/utils';
+import { crawlDirectorySync } from '@vibe-agent-toolkit/utils/crawl';
 import { normalizeRelPath } from '../files-config.js';
 import { materializeIssue } from './rule-engine/index.js';
 import { AGENT_INSTRUCTION_FILE_PATTERNS, toAnyDepthGlobs } from './validation-rules.js';
@@ -47,7 +48,6 @@ const INCLUDE_GLOBS = toAnyDepthGlobs(AGENT_INSTRUCTION_FILE_PATTERNS);
  *   dest must not launder its whole subtree (see {@link explicitFilesConfigDests}).
  */
 export function detectPackagedAgentInstructionFiles(rootDir, locationRoot, declaredDests) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- rootDir is a validated build-output path
     if (!existsSync(rootDir))
         return [];
     const declared = new Set(declaredDests.map((d) => normalizeRelPath(d)));
@@ -55,6 +55,15 @@ export function detectPackagedAgentInstructionFiles(rootDir, locationRoot, decla
     // subject is BUILT output, which normally lives under a gitignored `dist/`
     // that the crawler's defaults would skip entirely — the scan would pass by
     // scanning nothing.
+    //
+    // `unreadable` DEGRADES rather than stops: this detector is a backstop
+    // appended to a larger report (audit, verify, build), and one directory it
+    // cannot list must not destroy every finding beside it. The gap is not
+    // dropped either — each refusal becomes a `SCAN_PATH_UNREADABLE` finding
+    // below, anchored like the others, so a reader sees exactly which subtree
+    // this pass never saw. The crawler used to hand back the shorter list here
+    // with nothing said; that was the defect, not the throw.
+    const refusals = [];
     const files = crawlDirectorySync({
         baseDir: rootDir,
         include: INCLUDE_GLOBS,
@@ -62,6 +71,7 @@ export function detectPackagedAgentInstructionFiles(rootDir, locationRoot, decla
         absolute: true,
         filesOnly: true,
         respectGitignore: false,
+        unreadable: { degrade: (refusal) => refusals.push(refusal) },
     });
     const issues = [];
     for (const file of files) {
@@ -74,6 +84,39 @@ export function detectPackagedAgentInstructionFiles(rootDir, locationRoot, decla
         const location = issueLocation(file, locationRoot);
         issues.push(materializeIssue('PACKAGED_AGENT_INSTRUCTION_FILE', { location, detail: location }));
     }
+    for (const refusal of refusals) {
+        issues.push(unlistableDirectoryIssue(refusal, locationRoot));
+    }
     return issues;
 }
+/**
+ * The finding for one directory this pass could not list.
+ *
+ * `SCAN_PATH_UNREADABLE` is the registry's existing code for exactly this shape
+ * ("was not scanned; findings from every readable sibling are still reported"),
+ * kept at its default `warning` — a second code for the same gap on a second
+ * lane would only split the count a reader greps for. The detail names the
+ * errno, which is what distinguishes a permissions problem from a descriptor
+ * shortage, and the location is anchored against `locationRoot` like every
+ * other finding here — `.` rather than `''` when the scanned tree itself
+ * refused, for the same reason `unreadablePathResult` in the audit command
+ * gives: an empty location reached the report as `location: ""` and rendered
+ * the detail as a bare `": EACCES …"`.
+ *
+ * ⚠️ Callers that ALSO walk this tree themselves (the audit command's
+ * directory scan) will meet the same refusal twice. That overlap is theirs to
+ * collapse, keyed on what this issue carries — code and location — because
+ * only the caller knows which of its lanes reached the directory; see
+ * `dedupeUnreadablePathResults` in the audit command.
+ */
+function unlistableDirectoryIssue(refusal, locationRoot) {
+    const location = issueLocation(refusal.directory, locationRoot) || '.';
+    const clause = refusal.transient
+        ? `${transientRefusalClause(refusal.code)} — re-run before investigating anything`
+        : `listing was refused with ${refusal.code}`;
+    return materializeIssue('SCAN_PATH_UNREADABLE', {
+        location,
+        detail: `${location}: ${clause}; every agent-instruction file beneath it is unreported`,
+    });
+}
 //# sourceMappingURL=agent-instruction-presence.js.map

package/dist/validators/agent-instruction-presence.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-instruction-presence.js","sourceRoot":"","sources":["../../src/validators/agent-instruction-presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEzF;;;GAGG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC,+BAA+B,CAAC,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAAe,EACf,YAAoB,EACpB,aAAgC;IAEhC,+GAA+G;IAC/G,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,KAAK,GAAG,kBAAkB,CAAC;QAC/B,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gFAAgF;QAChF,qEAAqE;QACrE,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"agent-instruction-presence.js","sourceRoot":"","sources":["../../src/validators/agent-instruction-presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAyB,MAAM,iCAAiC,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEzF;;;GAGG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC,+BAA+B,CAAC,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAAe,EACf,YAAoB,EACpB,aAAgC;IAEhC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,oBAAoB;IACpB,EAAE;IACF,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC;QAC/B,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;KAC7D,CAAC,CAAC;IAEH,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gFAAgF;QAChF,qEAAqE;QACrE,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,wBAAwB,CAAC,OAAyB,EAAE,YAAoB;IAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,GAAG,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,yCAAyC;QAClF,CAAC,CAAC,4BAA4B,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,gBAAgB,CAAC,sBAAsB,EAAE;QAC9C,QAAQ;QACR,MAAM,EAAE,GAAG,QAAQ,KAAK,MAAM,yDAAyD;KACxF,CAAC,CAAC;AACL,CAAC"}

package/dist/validators/bundled-resource-link-detection.d.ts

@@ -27,12 +27,14 @@
  * or when link traversal reached it. Fenced code blocks are deliberately NOT
  * parsed out: that approach was tried and rejected as too fragile.
  */
-import { type ValidationIssue } from '@vibe-agent-toolkit/agent-schema';
+import { type ValidationIssue } from '@vibe-agent-toolkit/schema';
 /**
- * @param skillPath Absolute path to SKILL.md
- * @param skillDir Absolute path to the skill directory (typically dirname(skillPath))
+ * @param body The SKILL.md text the caller already holds — the validator read it
+ *   once at its entry, and a second best-effort read here used to turn a refused
+ *   read into an empty body, i.e. into "nothing mentions these files"
+ * @param skillDir Absolute path to the skill directory
  * @param linkedFiles Absolute paths of files reached during BFS link traversal
  * @param locationRoot Root the emitted `location` is expressed relative to
  */
-export declare function detectBundledResourceWithoutLinks(skillPath: string, skillDir: string, linkedFiles: readonly string[], locationRoot: string): ValidationIssue[];
+export declare function detectBundledResourceWithoutLinks(body: string, skillDir: string, linkedFiles: readonly string[], locationRoot: string): ValidationIssue[];
 //# sourceMappingURL=bundled-resource-link-detection.d.ts.map

package/dist/validators/bundled-resource-link-detection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundled-resource-link-detection.d.ts","sourceRoot":"","sources":["../../src/validators/bundled-resource-link-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAOH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AA4EvF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,YAAY,EAAE,MAAM,GACnB,eAAe,EAAE,CAgCnB"}
+{"version":3,"file":"bundled-resource-link-detection.d.ts","sourceRoot":"","sources":["../../src/validators/bundled-resource-link-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AA6EjF;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,YAAY,EAAE,MAAM,GACnB,eAAe,EAAE,CA8BnB"}

package/dist/validators/bundled-resource-link-detection.js

@@ -27,11 +27,9 @@
  * or when link traversal reached it. Fenced code blocks are deliberately NOT
  * parsed out: that approach was tried and rejected as too fragile.
  */
-/* eslint-disable security/detect-non-literal-fs-filename -- skill paths validated upstream */
-import { existsSync, readFileSync, readdirSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { CODE_REGISTRY } from '@vibe-agent-toolkit/agent-schema';
-import { issueLocation, safePath } from '@vibe-agent-toolkit/utils';
+import { readdirSync } from 'node:fs';
+import { CODE_REGISTRY } from '@vibe-agent-toolkit/schema';
+import { direntKindFollowingSync, FollowedWalk, isPathAbsentError, issueLocation, safePath } from '@vibe-agent-toolkit/utils';
 import { CLAUDE_WEB_REFERENCES_SUBDIR, TARGET_SUBDIR_CATEGORIES } from '../content-type-routing.js';
 /**
  * Subdirectories a packaged skill may bundle resources into.
@@ -46,37 +44,39 @@ const BUNDLED_SUBDIRS = [
 ];
 /** How many dead file names the message spells out before summarising. */
 const MAX_LISTED_FILES = 5;
-/** Read SKILL.md content (best-effort) — empty string if unreadable. */
-function readSkillContent(skillPath) {
-    try {
-        return readFileSync(skillPath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 /**
  * Every file under `dir`, recursively, as paths relative to `baseDir`
- * (forward-slash normalised by safePath). Empty when `dir` is absent,
- * unreadable, or contains no files.
+ * (forward-slash normalised by safePath). Empty when `dir` is absent or
+ * contains no files. A directory that is there and REFUSED throws: `[]` is
+ * this check's "nothing bundled, nothing to say", and a listing the OS would
+ * not hand over has not established that.
  */
-function listFilesRelative(dir, baseDir) {
-    if (!existsSync(dir))
-        return [];
-    const found = [];
+function listFilesRelative(dir, baseDir, walk) {
+    let entries;
     try {
-        for (const entry of readdirSync(dir, { withFileTypes: true })) {
-            const child = safePath.join(dir, entry.name);
-            if (entry.isFile()) {
-                found.push(safePath.relative(baseDir, child));
-            }
-            else if (entry.isDirectory()) {
-                found.push(...listFilesRelative(child, baseDir));
-            }
-        }
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch (error) {
+        if (isPathAbsentError(error))
+            return [];
+        throw error;
     }
-    catch {
-        return [];
+    const guard = walk ?? new FollowedWalk();
+    if (walk === undefined)
+        guard.enter(dir);
+    const found = [];
+    for (const entry of entries) {
+        const child = safePath.join(dir, entry.name);
+        // Followed: a linked resource is a bundled resource for link purposes. A
+        // link back into the tree is refused by the walk guard, not recursed.
+        const kind = direntKindFollowingSync(dir, entry);
+        if (kind === 'file') {
+            found.push(safePath.relative(baseDir, child));
+        }
+        else if (kind === 'directory') {
+            guard.enter(child);
+            found.push(...listFilesRelative(child, baseDir, guard));
+        }
     }
     return found;
 }
@@ -102,22 +102,22 @@ function summariseFiles(relPaths) {
     return hidden > 0 ? `${shown} (and ${hidden} more)` : shown;
 }
 /**
- * @param skillPath Absolute path to SKILL.md
- * @param skillDir Absolute path to the skill directory (typically dirname(skillPath))
+ * @param body The SKILL.md text the caller already holds — the validator read it
+ *   once at its entry, and a second best-effort read here used to turn a refused
+ *   read into an empty body, i.e. into "nothing mentions these files"
+ * @param skillDir Absolute path to the skill directory
  * @param linkedFiles Absolute paths of files reached during BFS link traversal
  * @param locationRoot Root the emitted `location` is expressed relative to
  */
-export function detectBundledResourceWithoutLinks(skillPath, skillDir, linkedFiles, locationRoot) {
+export function detectBundledResourceWithoutLinks(body, skillDir, linkedFiles, locationRoot) {
     const issues = [];
-    const body = readSkillContent(skillPath);
-    const baseDir = skillDir.length > 0 ? skillDir : dirname(skillPath);
     const linked = new Set(linkedFiles.map((f) => safePath.resolve(f)));
     for (const sub of BUNDLED_SUBDIRS) {
-        const subPath = safePath.join(baseDir, sub);
-        const bundled = listFilesRelative(subPath, baseDir);
+        const subPath = safePath.join(skillDir, sub);
+        const bundled = listFilesRelative(subPath, skillDir);
         if (bundled.length === 0)
             continue;
-        const unreferenced = bundled.filter((rel) => !bodyMentionsFile(body, rel) && !linkedFilesCoverFile(linked, safePath.join(baseDir, rel)));
+        const unreferenced = bundled.filter((rel) => !bodyMentionsFile(body, rel) && !linkedFilesCoverFile(linked, safePath.join(skillDir, rel)));
         if (unreferenced.length === 0)
             continue;
         const entry = CODE_REGISTRY.SKILL_REFERENCES_BUT_NO_LINKS;

package/dist/validators/bundled-resource-link-detection.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundled-resource-link-detection.js","sourceRoot":"","sources":["../../src/validators/bundled-resource-link-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,8FAA8F;AAE9F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAwB,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,eAAe,GAAsB;IACzC,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,wBAAwB,EAAE,4BAA4B,CAAC,CAAC;CAChF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAe;IACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,8CAA8C;AAC9C,SAAS,oBAAoB,CAAC,WAAgC,EAAE,OAAe;IAC7E,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,QAA2B;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC;IAClD,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAiB,EACjB,QAAgB,EAChB,WAA8B,EAC9B,YAAoB;IAEpB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAC7F,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAExC,MAAM,KAAK,GAAG,aAAa,CAAC,6BAA6B,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,KAAK,CAAC,eAAe;YAC/B,IAAI,EAAE,+BAA+B;YACrC,OAAO,EACL,6BAA6B,GAAG,WAAW,YAAY,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,GAAG;gBACtF,kEAAkE;gBAClE,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG;YACpC,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC;YAC9C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"bundled-resource-link-detection.js","sourceRoot":"","sources":["../../src/validators/bundled-resource-link-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAwB,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE9H,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,eAAe,GAAsB;IACzC,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,wBAAwB,EAAE,4BAA4B,CAAC,CAAC;CAChF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAe,EAAE,IAAmB;IAC1E,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,8CAA8C;AAC9C,SAAS,oBAAoB,CAAC,WAAgC,EAAE,OAAe;IAC7E,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,QAA2B;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC;IAClD,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAAY,EACZ,QAAgB,EAChB,WAA8B,EAC9B,YAAoB;IAEpB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAC9F,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAExC,MAAM,KAAK,GAAG,aAAa,CAAC,6BAA6B,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,KAAK,CAAC,eAAe;YAC/B,IAAI,EAAE,+BAA+B;YACrC,OAAO,EACL,6BAA6B,GAAG,WAAW,YAAY,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,GAAG;gBACtF,kEAAkE;gBAClE,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG;YACpC,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC;YAC9C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/validators/compat-detectors.d.ts

@@ -9,12 +9,29 @@
  * Pattern IDs MUST be registered in PATTERN_REGISTRY (assertPatternRegistered
  * is called against every emitted record).
  */
-import { type ValidationIssue } from '@vibe-agent-toolkit/agent-schema';
+import { type ValidationIssue } from '@vibe-agent-toolkit/schema';
 import type { EvidenceRecord, Observation } from '../evidence/index.js';
 export interface DetectorOutput {
     evidence: EvidenceRecord[];
     observations: Observation[];
 }
+/**
+ * The `allowed-tools:` declarations a SKILL.md carries and the 1-based line of
+ * the key; `{ tools: [], line: 0 }` when the key is absent or the frontmatter
+ * does not parse (the skill validator names that file
+ * `SKILL_MISSING_FRONTMATTER` on the same run — nothing is read out of it here).
+ *
+ * 🚩 This used to be a hand parser that saw ONLY the `[…]` flow form and split
+ * it on commas. Claude Code's documented spelling is space-separated, and a
+ * block sequence is valid YAML, so `allowed-tools: Read Bash` and a `- Bash`
+ * list both read as NO declaration and the local-shell capability reported
+ * clean over them. The value now goes through the same `parseFrontmatter` the
+ * validator uses and the same `allowedToolsOf` the settings-compat checker uses.
+ */
+export declare function allowedToolsDeclarations(content: string): {
+    tools: string[];
+    line: number;
+};
 export declare function collectLocalShellEvidence(content: string, filePath: string, locationRoot: string): EvidenceRecord[];
 export declare function collectExternalCLIEvidence(content: string, filePath: string, locationRoot: string): EvidenceRecord[];
 export declare function collectBrowserAuthEvidence(content: string, filePath: string, locationRoot: string): EvidenceRecord[];

package/dist/validators/compat-detectors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compat-detectors.d.ts","sourceRoot":"","sources":["../../src/validators/compat-detectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAiC,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEvG,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AA2BxE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AA6CD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CAkDlB;AASD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CA6BlB;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CAgBlB;AAQD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,EAAE,CAKrF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAWtF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,CAQhB"}
+{"version":3,"file":"compat-detectors.d.ts","sourceRoot":"","sources":["../../src/validators/compat-detectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAiC,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEjG,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AA8BxE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AA6BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAgB3F;AAYD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CAkDlB;AASD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CA6BlB;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,EAAE,CAgBlB;AAQD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,EAAE,CAKrF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAWtF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,cAAc,CAQhB"}