@vibe-agent-toolkit/cli 0.1.33 → 0.1.34

package/dist/commands/corpus/runner.js

@@ -0,0 +1,246 @@
+/**
+ * Per-plugin orchestrator for `vat corpus scan`.
+ *
+ * Phase 1 scope: resolve source (local or URL), optionally overlay a
+ * synthetic `vibe-agent-toolkit.config.yaml` from the entry's `validation:`
+ * block, run `vat audit` in-process, optionally invoke `vat skill review`,
+ * write per-plugin sibling files into the run directory, and return a
+ * PluginRow. Per-plugin failures never abort the loop.
+ *
+ * URL handling clones via Layer 1's `withClonedRepo` helper. Validation
+ * overlay (Task 5) is added on top of this base.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { scan } from '@vibe-agent-toolkit/discovery';
+import { safePath } from '@vibe-agent-toolkit/utils';
+import * as yaml from 'js-yaml';
+import { isGitUrl, parseGitUrl } from '../../utils/git-url.js';
+import { createLogger } from '../../utils/logger.js';
+import { withClonedRepo } from '../audit/git-url-clone.js';
+import { getValidationResults } from '../audit.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/**
+ * Resolve the path to the built vat CLI entry. Works whether the runner is
+ * invoked from compiled dist (production) or from source under vitest. In
+ * either case we always invoke the *compiled* `dist/bin.js` — `node` cannot
+ * execute `.ts` directly, so the source-tree fallback walks across to
+ * `packages/cli/dist/bin.js`. A build is therefore required before tests that
+ * exercise the review path can pass.
+ */
+function resolveVatBinPath() {
+    // Compiled tree: packages/cli/dist/commands/corpus/runner.js → packages/cli/dist/bin.js
+    const compiled = safePath.resolve(__dirname, '../../bin.js');
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- internal path
+    if (existsSync(compiled))
+        return compiled;
+    // Source tree (vitest): packages/cli/src/commands/corpus/runner.ts → packages/cli/dist/bin.js
+    return safePath.resolve(__dirname, '../../../dist/bin.js');
+}
+const SKIPPED_REVIEW = { status: 'skipped', duration_ms: 0 };
+function statusFromCounts(errors, warnings) {
+    if (errors > 0)
+        return 'error';
+    if (warnings > 0)
+        return 'warning';
+    return 'success';
+}
+function summarizeResults(results) {
+    let errors = 0;
+    let warnings = 0;
+    let info = 0;
+    for (const r of results) {
+        for (const issue of r.issues ?? []) {
+            if (issue.severity === 'error')
+                errors += 1;
+            else if (issue.severity === 'warning')
+                warnings += 1;
+            else if (issue.severity === 'info')
+                info += 1;
+        }
+    }
+    return { errors, warnings, info, files_scanned: results.length };
+}
+/**
+ * Run audit + optional review against one plugin entry.
+ */
+export async function auditOnePlugin(entry, opts) {
+    if (isGitUrl(entry.source)) {
+        return runUrlEntry(entry, opts);
+    }
+    return runLocalEntry(entry, opts);
+}
+async function runLocalEntry(entry, opts) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied seed entry
+    if (!existsSync(entry.source)) {
+        return unloadableRow(entry, `Source path not found: ${entry.source}`, 0);
+    }
+    return auditAndRecord(entry, entry.source, opts);
+}
+async function runUrlEntry(entry, opts) {
+    try {
+        return await withClonedRepo(parseGitUrl(entry.source), { keepTempForDebug: opts.debug }, async ({ targetDir }) => auditAndRecord(entry, targetDir, opts));
+    }
+    catch (err) {
+        return unloadableRow(entry, err instanceof Error ? err.message : String(err), 0);
+    }
+}
+async function auditAndRecord(entry, scanPath, opts) {
+    const logger = createLogger(opts.debug ? { debug: true } : {});
+    const start = Date.now();
+    const validationApplied = applyValidationOverlay(entry, scanPath);
+    let audit;
+    try {
+        const results = await getValidationResults(scanPath, true, {}, logger);
+        const summary = summarizeResults(results);
+        const status = statusFromCounts(summary.errors, summary.warnings);
+        const auditYamlPath = safePath.join(opts.runDir, `${entry.name}-audit.yaml`);
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- composed under run dir
+        writeFileSync(auditYamlPath, yaml.dump({ results }, { lineWidth: -1 }), 'utf-8');
+        audit = {
+            status,
+            duration_ms: Date.now() - start,
+            summary,
+            findings_emitted: summary.errors + summary.warnings + summary.info,
+            output_path: `${entry.name}-audit.yaml`,
+        };
+    }
+    catch (err) {
+        audit = {
+            status: 'unloadable',
+            duration_ms: Date.now() - start,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    // Skip review when audit was unloadable — nothing meaningful to review.
+    const review = opts.withReview && audit.status !== 'unloadable'
+        ? await runSkillReview(entry, scanPath, opts.runDir)
+        : SKIPPED_REVIEW;
+    return {
+        source: entry.source,
+        name: entry.name,
+        validation_applied: validationApplied,
+        audit,
+        review,
+    };
+}
+/**
+ * Spawn `vat skill review <skillDir>` for one skill and return a markdown
+ * section describing the result. Subprocess failure is captured as an
+ * error section rather than thrown — one bad skill must not abort siblings.
+ */
+function reviewOneSkill(bin, skillDir, relativePath) {
+    // eslint-disable-next-line sonarjs/no-os-command-from-path -- node is required for invoking vat
+    const result = spawnSync('node', [bin, 'skill', 'review', skillDir], {
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    // `vat skill review` exit semantics:
+    //   0 — review clean
+    //   1 — review completed but found warnings/errors (still a successful review for corpus purposes)
+    //   2 (or other non-zero / null) — system error, the review did not run to completion
+    const SKILL_REVIEW_FINDINGS_EXIT = 1;
+    const reviewRan = result.status === 0 || result.status === SKILL_REVIEW_FINDINGS_EXIT;
+    if (!reviewRan) {
+        const stderr = (result.stderr ?? '').trim();
+        const message = stderr || `vat skill review exited with code ${result.status ?? 'unknown'}`;
+        const stdout = (result.stdout ?? '').trim();
+        const stdoutBlock = stdout ? `\n\n${stdout}` : '';
+        const body = `**[review failed]**\n\n${message}${stdoutBlock}`;
+        return { relativePath, ok: false, body };
+    }
+    const body = ((result.stdout ?? '') + (result.stderr ?? '')).trim();
+    return { relativePath, ok: true, body };
+}
+function renderAggregatedReview(entry, sections, okCount) {
+    const header = `# Skill review: ${entry.name}\n\nReviewed ${okCount} of ${sections.length} skills (${sections.length - okCount} errors).\n`;
+    const rendered = sections
+        .map((s) => `\n---\n\n## ${s.relativePath}\n\n${s.body}\n`)
+        .join('');
+    return `${header}${rendered}`;
+}
+/**
+ * Discover every SKILL.md under `scanPath` (recursive, gitignore-aware) and
+ * invoke `vat skill review` once per skill directory. Concatenate the
+ * outputs into `<name>-review.md` with a section per skill keyed by the
+ * skill's path relative to the plugin root.
+ *
+ * Per-skill subprocess failures become error sections; the aggregate is
+ * still written so users can see which skills passed and which failed.
+ * Returns `status: 'error'` only when no skills were discovered or every
+ * subprocess failed.
+ */
+async function runSkillReview(entry, scanPath, runDir) {
+    const start = Date.now();
+    const bin = resolveVatBinPath();
+    const reviewPath = safePath.join(runDir, `${entry.name}-review.md`);
+    const summary = await scan({ path: scanPath, recursive: true });
+    const skills = summary.results.filter((r) => r.format === 'agent-skill' && !r.isGitIgnored);
+    if (skills.length === 0) {
+        return {
+            status: 'error',
+            duration_ms: Date.now() - start,
+            error: `No SKILL.md files found under ${scanPath}`,
+        };
+    }
+    const sections = [];
+    for (const skill of skills) {
+        const skillDir = dirname(skill.path);
+        sections.push(reviewOneSkill(bin, skillDir, skill.relativePath));
+    }
+    const okCount = sections.filter((s) => s.ok).length;
+    const aggregated = renderAggregatedReview(entry, sections, okCount);
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- composed under run dir
+    writeFileSync(reviewPath, aggregated, 'utf-8');
+    if (okCount === 0) {
+        const errors = sections
+            .map((s) => `${s.relativePath}: ${s.body.replaceAll('\n', ' ').slice(0, 200)}`)
+            .join('; ');
+        return {
+            status: 'error',
+            duration_ms: Date.now() - start,
+            error: `All ${sections.length} skill reviews failed. ${errors}`,
+            output_path: `${entry.name}-review.md`,
+        };
+    }
+    return {
+        status: 'ok',
+        duration_ms: Date.now() - start,
+        output_path: `${entry.name}-review.md`,
+    };
+}
+/**
+ * Write a synthetic `vibe-agent-toolkit.config.yaml` at the audit target,
+ * placing the entry's `validation:` block under `skills.defaults.validation`.
+ * Returns true iff the overlay was written.
+ *
+ * Phase 1: clobbers any pre-existing config in the cloned tree. Merging
+ * with author-shipped configs is a follow-up.
+ */
+function applyValidationOverlay(entry, scanPath) {
+    if (!entry.validation)
+        return false;
+    const overlayPath = safePath.join(scanPath, 'vibe-agent-toolkit.config.yaml');
+    const overlay = {
+        skills: {
+            defaults: {
+                validation: entry.validation,
+            },
+        },
+    };
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- composed under audit target
+    writeFileSync(overlayPath, yaml.dump(overlay, { lineWidth: -1 }), 'utf-8');
+    return true;
+}
+function unloadableRow(entry, error, durationMs) {
+    return {
+        source: entry.source,
+        name: entry.name,
+        validation_applied: false,
+        audit: { status: 'unloadable', duration_ms: durationMs, error },
+        review: SKIPPED_REVIEW,
+    };
+}
+//# sourceMappingURL=runner.js.map

package/dist/commands/corpus/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/commands/corpus/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAEhC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAKnD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,wFAAwF;IACxF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,oFAAoF;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,8FAA8F;IAC9F,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAC7D,CAAC;AAQD,MAAM,cAAc,GAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAE5E,SAAS,gBAAgB,CAAC,MAAc,EAAE,QAAgB;IACxD,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA8D;IAE9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;gBAAE,MAAM,IAAI,CAAC,CAAC;iBACvC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,QAAQ,IAAI,CAAC,CAAC;iBAChD,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;gBAAE,IAAI,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkB,EAClB,IAAmB;IAEnB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAkB,EAAE,IAAmB;IAClE,iGAAiG;IACjG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,0BAA0B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAkB,EAAE,IAAmB;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CACzB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EACzB,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,EAAE,EAChC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAChE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAAkB,EAClB,QAAgB,EAChB,IAAmB;IAEnB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAElE,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC;QAC7E,6FAA6F;QAC7F,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QAEjF,KAAK,GAAG;YACN,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,OAAO;YACP,gBAAgB,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI;YAClE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,aAAa;SACxC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,GAAG;YACN,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,MAAM,MAAM,GACV,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;QAC9C,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;QACpD,CAAC,CAAC,cAAc,CAAC;IAErB,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,kBAAkB,EAAE,iBAAiB;QACrC,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgB,EAAE,YAAoB;IACzE,gGAAgG;IAChG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACnE,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,qCAAqC;IACrC,qBAAqB;IACrB,mGAAmG;IACnG,sFAAsF;IACtF,MAAM,0BAA0B,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,0BAA0B,CAAC;IAEtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,qCAAqC,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,0BAA0B,OAAO,GAAG,WAAW,EAAE,CAAC;QAC/D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAkB,EAClB,QAA8B,EAC9B,OAAe;IAEf,MAAM,MAAM,GAAG,mBAAmB,KAAK,CAAC,IAAI,gBAAgB,OAAO,OAAO,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,GAAG,OAAO,aAAa,CAAC;IAC5I,MAAM,QAAQ,GAAG,QAAQ;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,YAAY,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;SAC1D,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,cAAc,CAC3B,KAAkB,EAClB,QAAgB,EAChB,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,CAAC,CAAC,YAAY,CACrD,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,KAAK,EAAE,iCAAiC,QAAQ,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpE,6FAA6F;IAC7F,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,QAAQ;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;aAC9E,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO;YACL,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,KAAK,EAAE,OAAO,QAAQ,CAAC,MAAM,0BAA0B,MAAM,EAAE;YAC/D,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,YAAY;SACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC/B,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,YAAY;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,KAAkB,EAAE,QAAgB;IAClE,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG;QACd,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF;KACF,CAAC;IACF,kGAAkG;IAClG,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAkB,EAAE,KAAa,EAAE,UAAkB;IAC1E,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,kBAAkB,EAAE,KAAK;QACzB,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE;QAC/D,MAAM,EAAE,cAAc;KACvB,CAAC;AACJ,CAAC"}

package/dist/commands/corpus/scan.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `vat corpus scan [seed-file] --out <dir>` — Phase 1 orchestrator.
+ *
+ * Reads the seed, delegates each entry to the runner sequentially,
+ * writes summary.yaml and per-plugin sibling files into a date-sha
+ * subdirectory of `--out`. Sequential by design — concurrency is a
+ * follow-up once the seed grows past ~50.
+ */
+export interface CorpusScanOptions {
+    out?: string;
+    withReview?: boolean;
+    debug?: boolean;
+}
+export declare function corpusScanCommand(seedFileArg: string | undefined, options: CorpusScanOptions): Promise<void>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/commands/corpus/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAwBD,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/dist/commands/corpus/scan.js

@@ -0,0 +1,90 @@
+/**
+ * `vat corpus scan [seed-file] --out <dir>` — Phase 1 orchestrator.
+ *
+ * Reads the seed, delegates each entry to the runner sequentially,
+ * writes summary.yaml and per-plugin sibling files into a date-sha
+ * subdirectory of `--out`. Sequential by design — concurrency is a
+ * follow-up once the seed grows past ~50.
+ */
+import { mkdirSync, readFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { safeExecSync, safePath } from '@vibe-agent-toolkit/utils';
+import { handleCommandError } from '../../utils/command-error.js';
+import { createLogger } from '../../utils/logger.js';
+import { writeRunReport } from './report.js';
+import { auditOnePlugin } from './runner.js';
+import { loadSeedFile } from './seed.js';
+const DEFAULT_SEED_PATH = 'corpus/seed.yaml';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function readVatVersion() {
+    // packages/cli/dist/commands/corpus/scan.js → packages/cli/package.json
+    // packages/cli/src/commands/corpus/scan.ts → packages/cli/package.json
+    const pkgPath = safePath.resolve(__dirname, '../../../package.json');
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- internal package.json path
+    const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+    return pkg.version ?? 'unknown';
+}
+function readVatCommit() {
+    try {
+        const out = safeExecSync('git', ['rev-parse', '--short=8', 'HEAD'], { encoding: 'utf-8' });
+        return (typeof out === 'string' ? out : out.toString('utf-8')).trim();
+    }
+    catch {
+        return 'unknown';
+    }
+}
+export async function corpusScanCommand(seedFileArg, options) {
+    const logger = createLogger(options.debug ? { debug: true } : {});
+    const startTime = Date.now();
+    try {
+        if (!options.out) {
+            throw new Error('specify an output directory: --out <path>');
+        }
+        const seedPath = seedFileArg ?? DEFAULT_SEED_PATH;
+        const seed = loadSeedFile(seedPath);
+        // eslint-disable-next-line local/no-fs-mkdirSync, security/detect-non-literal-fs-filename -- caller-supplied output dir; recursive create is correct here
+        mkdirSync(options.out, { recursive: true });
+        // We need the run directory to write per-plugin files into during the
+        // loop. Build the report skeleton, derive the run dir name, create it,
+        // then run the loop.
+        const generatedAt = new Date().toISOString().replace(/\.\d+Z$/, 'Z');
+        const vatVersion = readVatVersion();
+        const vatCommit = readVatCommit();
+        const runDirName = `${generatedAt.slice(0, 10)}-${vatCommit}`;
+        const runDir = safePath.join(options.out, runDirName);
+        // eslint-disable-next-line local/no-fs-mkdirSync, security/detect-non-literal-fs-filename -- composed under user-supplied --out
+        mkdirSync(runDir, { recursive: true });
+        const rows = [];
+        for (const entry of seed.plugins) {
+            logger.info(`[${entry.name}] auditing ${entry.source}`);
+            const row = await auditOnePlugin(entry, {
+                runDir,
+                withReview: options.withReview === true,
+                debug: options.debug === true,
+            });
+            rows.push(row);
+            logger.info(`[${entry.name}] audit=${row.audit.status} review=${row.review.status}`);
+        }
+        const report = {
+            schema_version: 1,
+            generated_at: generatedAt,
+            vat_version: vatVersion,
+            vat_commit: vatCommit,
+            seed_file: seedPath,
+            flags: {
+                with_review: options.withReview === true,
+                debug: options.debug === true,
+            },
+            plugins: rows,
+        };
+        await writeRunReport(report, options.out);
+        logger.info(`Wrote run report to ${runDir}/summary.yaml`);
+        logger.info(`  ${rows.length} plugins; durations recorded in summary.yaml`);
+        logger.debug(`Total scan duration: ${Date.now() - startTime}ms`);
+    }
+    catch (err) {
+        handleCommandError(err, logger, startTime, 'CorpusScan');
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/corpus/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/commands/corpus/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAkC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAQzC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,SAAS,cAAc;IACrB,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACrE,iGAAiG;IACjG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;IAC/E,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;AAClC,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAA+B,EAC/B,OAA0B;IAE1B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,IAAI,iBAAiB,CAAC;QAClD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEpC,0JAA0J;QAC1J,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,sEAAsE;QACtE,uEAAuE;QACvE,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACtD,gIAAgI;QAChI,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,MAAM,IAAI,GAAgB,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE;gBACtC,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;gBACvC,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,GAAG,CAAC,KAAK,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,MAAM,GAAc;YACxB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,WAAW,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;gBACxC,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;aAC9B;YACD,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,eAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,8CAA8C,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/commands/corpus/seed.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Seed schema + parser for `corpus/seed.yaml`. The seed is the committed
+ * config of plugins tracked by `vat corpus scan`. Per-entry `validation:`
+ * mirrors the `skills.defaults.validation` block of the project config
+ * schema (severity overrides + allow entries).
+ */
+import { z } from 'zod';
+declare const ValidationAllowEntrySchema: z.ZodObject<{
+    code: z.ZodString;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    reason: string;
+}, {
+    code: string;
+    reason: string;
+}>;
+declare const ValidationBlockSchema: z.ZodObject<{
+    severity: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["error", "warning", "info", "ignore"]>>>;
+    allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+        reason: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        code: string;
+        reason: string;
+    }, {
+        code: string;
+        reason: string;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    allow?: {
+        code: string;
+        reason: string;
+    }[] | undefined;
+    severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+}, {
+    allow?: {
+        code: string;
+        reason: string;
+    }[] | undefined;
+    severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+}>;
+declare const PluginEntrySchema: z.ZodObject<{
+    source: z.ZodString;
+    name: z.ZodString;
+    validation: z.ZodOptional<z.ZodObject<{
+        severity: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["error", "warning", "info", "ignore"]>>>;
+        allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            code: z.ZodString;
+            reason: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            code: string;
+            reason: string;
+        }, {
+            code: string;
+            reason: string;
+        }>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        allow?: {
+            code: string;
+            reason: string;
+        }[] | undefined;
+        severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+    }, {
+        allow?: {
+            code: string;
+            reason: string;
+        }[] | undefined;
+        severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    source: string;
+    validation?: {
+        allow?: {
+            code: string;
+            reason: string;
+        }[] | undefined;
+        severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+    } | undefined;
+}, {
+    name: string;
+    source: string;
+    validation?: {
+        allow?: {
+            code: string;
+            reason: string;
+        }[] | undefined;
+        severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+    } | undefined;
+}>;
+declare const SeedSchema: z.ZodObject<{
+    plugins: z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        name: z.ZodString;
+        validation: z.ZodOptional<z.ZodObject<{
+            severity: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["error", "warning", "info", "ignore"]>>>;
+            allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                code: z.ZodString;
+                reason: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                code: string;
+                reason: string;
+            }, {
+                code: string;
+                reason: string;
+            }>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        }, {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        source: string;
+        validation?: {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        } | undefined;
+    }, {
+        name: string;
+        source: string;
+        validation?: {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        } | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    plugins: {
+        name: string;
+        source: string;
+        validation?: {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        } | undefined;
+    }[];
+}, {
+    plugins: {
+        name: string;
+        source: string;
+        validation?: {
+            allow?: {
+                code: string;
+                reason: string;
+            }[] | undefined;
+            severity?: Record<string, "error" | "warning" | "info" | "ignore"> | undefined;
+        } | undefined;
+    }[];
+}>;
+export type ValidationAllowEntry = z.infer<typeof ValidationAllowEntrySchema>;
+export type ValidationBlock = z.infer<typeof ValidationBlockSchema>;
+export type PluginEntry = z.infer<typeof PluginEntrySchema>;
+export type Seed = z.infer<typeof SeedSchema>;
+/**
+ * Load and validate `corpus/seed.yaml` (or another seed-shaped YAML file).
+ * Throws on missing file, malformed YAML, schema violations, duplicate
+ * `source` keys, or duplicate `name` labels.
+ */
+export declare function loadSeedFile(path: string): Seed;
+export {};
+//# sourceMappingURL=seed.d.ts.map

package/dist/commands/corpus/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/seed.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,0BAA0B;;;;;;;;;EAG9B,CAAC;AAEH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAKhB,CAAC;AAEZ,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASZ,CAAC;AAEZ,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIL,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAyB/C"}

package/dist/commands/corpus/seed.js

@@ -0,0 +1,63 @@
+/**
+ * Seed schema + parser for `corpus/seed.yaml`. The seed is the committed
+ * config of plugins tracked by `vat corpus scan`. Per-entry `validation:`
+ * mirrors the `skills.defaults.validation` block of the project config
+ * schema (severity overrides + allow entries).
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import * as yaml from 'js-yaml';
+import { z } from 'zod';
+const ValidationAllowEntrySchema = z.object({
+    code: z.string().min(1),
+    reason: z.string().min(1),
+});
+const ValidationBlockSchema = z
+    .object({
+    severity: z.record(z.string(), z.enum(['error', 'warning', 'info', 'ignore'])).optional(),
+    allow: z.array(ValidationAllowEntrySchema).optional(),
+})
+    .strict();
+const PluginEntrySchema = z
+    .object({
+    source: z.string().min(1),
+    name: z
+        .string()
+        .min(1)
+        .regex(/^[A-Za-z0-9_-]+$/, 'name must be [A-Za-z0-9_-]+ (presentation label)'),
+    validation: ValidationBlockSchema.optional(),
+})
+    .strict();
+const SeedSchema = z
+    .object({
+    plugins: z.array(PluginEntrySchema).min(1),
+})
+    .strict();
+/**
+ * Load and validate `corpus/seed.yaml` (or another seed-shaped YAML file).
+ * Throws on missing file, malformed YAML, schema violations, duplicate
+ * `source` keys, or duplicate `name` labels.
+ */
+export function loadSeedFile(path) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied seed file path
+    if (!existsSync(path)) {
+        throw new Error(`Seed file not found: ${path}`);
+    }
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied seed file path
+    const raw = readFileSync(path, 'utf-8');
+    const parsed = yaml.load(raw);
+    const seed = SeedSchema.parse(parsed);
+    const sources = new Set();
+    const names = new Set();
+    for (const entry of seed.plugins) {
+        if (sources.has(entry.source)) {
+            throw new Error(`Seed has duplicate source: ${entry.source}`);
+        }
+        if (names.has(entry.name)) {
+            throw new Error(`Seed has duplicate name: ${entry.name}`);
+        }
+        sources.add(entry.source);
+        names.add(entry.name);
+    }
+    return seed;
+}
+//# sourceMappingURL=seed.js.map

package/dist/commands/corpus/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../../src/commands/corpus/seed.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,kBAAkB,EAAE,kDAAkD,CAAC;IAChF,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,qGAAqG;IACrG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,qGAAqG;IACrG,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/commands/inventory.d.ts

@@ -0,0 +1,17 @@
+import { Command } from 'commander';
+export interface InventoryCommandOptions {
+    user?: boolean;
+    system?: boolean;
+    format?: 'yaml' | 'json';
+    shallow?: boolean;
+    debug?: boolean;
+}
+/**
+ * Create and configure the `vat inventory` command.
+ */
+export declare function createInventoryCommand(): Command;
+/**
+ * Action handler for `vat inventory [path]`.
+ */
+export declare function inventoryCommand(pathArg: string | undefined, options: InventoryCommandOptions): Promise<void>;
+//# sourceMappingURL=inventory.d.ts.map

package/dist/commands/inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../src/commands/inventory.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,MAAM,WAAW,uBAAuB;IACvC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAgChD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAcf"}