@vibe-agent-toolkit/cli 0.2.0-rc.5 → 0.2.0-rc.7

package/dist/commands/claude/plugin/tree-copy.js

@@ -9,16 +9,64 @@
  *   - anything the caller names in `exclude` (glob, or a bare/trailing-slash
  *     directory name; a pattern matching nothing is returned to the caller)
  *
+ * Symlinks are judged before anything is copied, identically on both crawl
+ * routes: a FILE symlink whose target this copy ships is copied by content and
+ * reported; one that leaves the source, does not resolve, names a directory,
+ * or names a file the copy leaves out stops the copy by name
+ * ({@link PluginSymlinkRefusedError}) before the first byte lands.
+ *
  * Respects .gitignore via crawlDirectory (respectGitignore: true, the default).
  * Returns counts keyed to the spec's YAML summary extension.
  */
 import { existsSync } from 'node:fs';
-import { copyFile, mkdir } from 'node:fs/promises';
+import { copyFile, lstat, mkdir, readdir, realpath, stat } from 'node:fs/promises';
 import { dirname } from 'node:path';
 import { AGENT_INSTRUCTION_FILE_PATTERNS, toAnyDepthGlobs } from '@vibe-agent-toolkit/agent-skills';
 import { isGlob, safePath, toForwardSlash } from '@vibe-agent-toolkit/utils';
-import { crawlDirectory } from '@vibe-agent-toolkit/utils/crawl';
+import { crawlDirectory, crawlPathFilter } from '@vibe-agent-toolkit/utils/crawl';
+import { gitFindRoot } from '@vibe-agent-toolkit/utils/git';
 import picomatch from 'picomatch';
+function describeRefusal(entry) {
+    switch (entry.reason) {
+        case 'escapes-source':
+            return 'points outside the plugin source, so the bundle would carry a file from elsewhere on the build host';
+        case 'unresolvable':
+            return 'does not resolve to anything (dangling, or a loop)';
+        case 'directory':
+            return 'is a directory symlink; a bundle is a plain tree and cannot carry a directory alias';
+        case 'target-excluded':
+            return `resolves to '${entry.target}', which this copy leaves out (excluded, gitignored, untracked, or`
+                + ' packaged by another phase), so the bundle would carry the excluded bytes under the link\'s name';
+    }
+}
+/**
+ * The copy stopped because the plugin source holds symlinks that cannot ship.
+ *
+ * The sibling of the listing refusal (`DirectoryListingRefusedError` from the
+ * crawl): thrown BEFORE the first byte is copied, with every offender named,
+ * so a failing build leaves no half-written bundle and the operator fixes the
+ * whole list in one pass. Measured before this existed: on the git route a
+ * directory or dangling symlink threw a raw `ENOTSUP` / `ENOENT` out of
+ * `copyFile` after earlier files had already landed, and a file symlink out of
+ * the source was copied by content with no diagnostic at all; on the walk route
+ * every symlink was silently dropped.
+ *
+ * The message speaks the bundle's coordinates (root-relative paths), never the
+ * build host's absolute paths, and names the remedy — the `exclude:` knob — in
+ * the same terms the listing refusal does.
+ */
+export class PluginSymlinkRefusedError extends Error {
+    refused;
+    constructor(refused) {
+        const lines = refused.map((entry) => `  - '${entry.path}' ${describeRefusal(entry)}`);
+        super(`Refusing to copy the plugin source: ${refused.length} symbolic link(s) cannot be shipped in a bundle,`
+            + ` so nothing was copied.\n${lines.join('\n')}\n`
+            + 'Replace each link with the file it points at, or name it in the plugin\'s `exclude:` list to leave'
+            + ' it out of the bundle deliberately.');
+        this.name = 'PluginSymlinkRefusedError';
+        this.refused = refused;
+    }
+}
 /**
  * Built-in exclusions for the verbatim plugin copy.
  *
@@ -104,6 +152,126 @@ function classifyRelative(rel) {
         return 'mcpCopied';
     return undefined;
 }
+/**
+ * Split the crawl's paths into regular files and symlinks by `lstat`, on BOTH
+ * routes — this is the one predicate the two crawl lanes share. The walker
+ * never yields a symlink (see {@link sweepSymlinks}), so there it finds none;
+ * `git ls-files` yields every tracked symlink as an ordinary path, so there it
+ * is what stops `copyFile` from being the first thing to notice.
+ */
+async function partitionByLstat(sourceDir, files) {
+    const regular = [];
+    const links = [];
+    for (const abs of files) {
+        const entry = { abs, rel: toForwardSlash(safePath.relative(sourceDir, abs)) };
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- path returned by the crawl of sourceDir
+        const info = await lstat(abs);
+        (info.isSymbolicLink() ? links : regular).push(entry);
+    }
+    return { regular, links };
+}
+/**
+ * Every symlink under `sourceDir` that the exclude list admits — the half of the
+ * population the walk route cannot see.
+ *
+ * `crawlDirectory`'s walker skips every symlink entry unless `followSymlinks`
+ * is set, and following would not do either: a directory link would be
+ * traversed (its contents yielded under the link's name) and a dangling one
+ * silently skipped as absence. Neither is "here is a symlink, decide". So on
+ * the walk route this pass lists them itself, with the SAME membership filter
+ * the crawl applied, and hands each one to the same judgement the git route's
+ * tracked symlinks get. A directory that will not list is not swallowed here:
+ * the crawl has already refused it by name before this runs.
+ *
+ * Only the walk route needs it. Inside a repository `git ls-files` already
+ * yields the tracked symlinks, and a sweep there would also find IGNORED ones
+ * (`node_modules/.bin/*` is nothing but symlinks) and refuse a bundle for links
+ * the crawl had correctly left out. The route is read the way the crawl reads
+ * it — is there a repository above `sourceDir` — with one gap: a repository
+ * whose `git ls-files` fails makes the crawl fall back to the walker, and that
+ * run gets no sweep. A repository with no working `git` already hard-fails the
+ * default scan elsewhere, so the gap is not widened here.
+ */
+async function sweepSymlinks(sourceDir, isMember) {
+    const found = [];
+    const walk = async (dir) => {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- walking beneath the validated sourceDir
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const abs = safePath.join(dir, entry.name);
+            const rel = toForwardSlash(safePath.relative(sourceDir, abs));
+            if (!isMember(rel))
+                continue;
+            if (entry.isSymbolicLink()) {
+                found.push({ abs, rel });
+            }
+            else if (entry.isDirectory()) {
+                await walk(abs);
+            }
+        }
+    };
+    await walk(sourceDir);
+    return found;
+}
+/** Is `real` the source root itself, or beneath it? Both sides canonical. */
+function isUnderSource(real, realSource) {
+    return real === realSource || real.startsWith(`${realSource}/`);
+}
+/**
+ * Judge one symlink: the one shape that ships (`'file'`, in-tree, copied by
+ * content) or the refusal that stops the copy.
+ *
+ * `shipped` is the set of root-relative REGULAR files this copy will land —
+ * after the crawl's membership (built-in exclusions, gitignore, tracking) and
+ * the caller's `exclude:`. A link ships only when its target is in that set:
+ * "in-tree" alone is not enough, because the tree is not the bundle. Every
+ * way a file can be left out — a caller pattern, `.claude-plugin/**`, a skill
+ * dir another phase produces, a gitignored or untracked path on the git route
+ * — is a way a one-line alias would put its bytes back, under a different
+ * name, with nothing to say so. Asking "would the target ship on its own?"
+ * closes all of them with the copy's own answer rather than re-deriving each
+ * exclusion here.
+ */
+async function classifySymlink(link, realSource, shipped) {
+    let real;
+    try {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- a symlink the crawl of sourceDir returned
+        real = toForwardSlash(await realpath(link.abs));
+    }
+    catch {
+        return { path: link.rel, reason: 'unresolvable' };
+    }
+    if (!isUnderSource(real, realSource))
+        return { path: link.rel, reason: 'escapes-source' };
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- canonical path proven to sit under sourceDir
+    if ((await stat(real)).isDirectory())
+        return { path: link.rel, reason: 'directory' };
+    const target = toForwardSlash(safePath.relative(realSource, real));
+    return shipped.has(target) ? 'file' : { path: link.rel, reason: 'target-excluded', target };
+}
+/**
+ * Judge every symlink and split them: the ones that ship, and the ones that
+ * stop the copy. Sorted by path so the refusal reads the same on every
+ * filesystem — `readdir` order is not stable across platforms.
+ */
+async function judgeSymlinks(sourceDir, links, shipped) {
+    const copyable = [];
+    const refused = [];
+    if (links.length === 0)
+        return { copyable, refused };
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- sourceDir resolved from config
+    const realSource = toForwardSlash(await realpath(sourceDir));
+    for (const link of [...links].toSorted((a, b) => a.rel.localeCompare(b.rel))) {
+        const verdict = await classifySymlink(link, realSource, shipped);
+        if (verdict === 'file') {
+            copyable.push(link);
+        }
+        else {
+            refused.push(verdict);
+        }
+    }
+    return { copyable, refused };
+}
 export async function treeCopyPlugin(options) {
     const { sourceDir, destDir, excludeSkillDirs = [], exclude: callerExclude = [], warn } = options;
     const result = {
@@ -113,6 +281,7 @@ export async function treeCopyPlugin(options) {
         mcpCopied: 0,
         filesCopied: 0,
         unusedExcludePatterns: [],
+        symlinksCopied: [],
     };
     // eslint-disable-next-line security/detect-non-literal-fs-filename -- sourceDir resolved from config
     if (!existsSync(sourceDir)) {
@@ -128,6 +297,14 @@ export async function treeCopyPlugin(options) {
         ...EXCLUDE_PATTERNS,
         ...excludeSkillDirs.flatMap((name) => expandExcludePattern(`skills/${name}`)),
     ];
+    // A directory the crawl cannot LIST stops the copy, by name. The alternative —
+    // enumerate around it and copy what was seen — ships a plugin missing every
+    // file beneath that directory while the build reports success, which is the
+    // silent-drop shape this whole function is built to refuse (see the
+    // zero-match report below). Refusing here also runs BEFORE the first copy,
+    // so a build that fails leaves no half-written bundle to be mistaken for one.
+    // Only the walk route lists directories; inside a repository `git ls-files`
+    // answers and a refusal surfaces on the file copy instead.
     const files = await crawlDirectory({
         baseDir: sourceDir,
         include: ['**/*'],
@@ -135,27 +312,55 @@ export async function treeCopyPlugin(options) {
         absolute: true,
         filesOnly: true,
         respectGitignore: true,
+        unreadable: {
+            refuse: {
+                root: sourceDir,
+                remedy: 'Fix the permissions on that directory, or name it in the plugin\'s `exclude:` list to leave it out of the bundle deliberately.',
+            },
+        },
     });
     // Caller `exclude:` patterns are applied HERE rather than handed to the crawl,
     // for two reasons: the two crawl lanes disagree about directory-shaped patterns
     // (see expandExcludePattern), and a pattern that matches nothing must be
     // reportable — a file the crawl never returns is a drop nothing can observe.
     const excludeMatchers = buildExcludeMatchers(callerExclude);
-    for (const absPath of files) {
-        const rel = toForwardSlash(safePath.relative(sourceDir, absPath));
-        if (isExcludedByCaller(rel, excludeMatchers)) {
-            continue;
-        }
-        const target = safePath.join(destDir, rel);
+    const notExcludedByCaller = (entry) => !isExcludedByCaller(entry.rel, excludeMatchers);
+    // Symlinks are decided BEFORE the first copy, on both routes, and by one
+    // judgement (see classifySymlink). The two lanes used to disagree twice over:
+    // the walker dropped every symlink silently, while `git ls-files` handed them
+    // to `copyFile`, which followed a link out of the source (shipping a file from
+    // elsewhere on the build host) and threw a raw errno on a directory or
+    // dangling one after earlier files had already landed. Collect first, judge,
+    // then copy — the same shape as the listing refusal above, so a build that
+    // fails on a symlink leaves no half-written bundle either.
+    const { regular, links: crawledLinks } = await partitionByLstat(sourceDir, files);
+    const links = gitFindRoot(sourceDir) === null
+        ? [...crawledLinks, ...(await sweepSymlinks(sourceDir, crawlPathFilter(['**/*'], exclude)))]
+        : crawledLinks;
+    // A link the caller excluded is left out like any other excluded path — and
+    // that is the remedy the refusal names, so it must count as a hit here.
+    // The regular files are filtered FIRST so the judgement can ask whether a
+    // link's target is one of them (see classifySymlink) — and so a caller
+    // pattern that matches only a link's target still records its hit.
+    const shippedRegular = regular.filter(notExcludedByCaller);
+    const { copyable, refused } = await judgeSymlinks(sourceDir, links.filter(notExcludedByCaller), new Set(shippedRegular.map((entry) => entry.rel)));
+    if (refused.length > 0) {
+        throw new PluginSymlinkRefusedError(refused);
+    }
+    for (const entry of [...shippedRegular, ...copyable]) {
+        const target = safePath.join(destDir, entry.rel);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- dest resolved from sourceDir+relative
         await mkdir(dirname(target), { recursive: true });
-        await copyFile(absPath, target);
+        // `copyFile` follows a symlink, which is the point for the in-tree file
+        // links that reach here: the bundle carries the target's bytes.
+        await copyFile(entry.abs, target);
         result.filesCopied += 1;
-        const bucket = classifyRelative(rel);
+        const bucket = classifyRelative(entry.rel);
         if (bucket) {
             result[bucket] += 1;
         }
     }
+    result.symlinksCopied = copyable.map((entry) => entry.rel);
     // A typo'd or wrong-shaped exclude pattern used to be perfectly silent: the
     // knob no-oped and the junk shipped anyway. Zero matches is the only evidence
     // the author can get, so it always leaves this function — as DATA, on the one

package/dist/commands/claude/plugin/tree-copy.js.map

@@ -1 +1 @@
-{"version":3,"file":"tree-copy.js","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/tree-copy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,SAAS,MAAM,WAAW,CAAC;AAgElC;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAG;IACvB,mBAAmB;IACnB,GAAG,eAAe,CAAC,+BAA+B,CAAC;CACpD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAUjD;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,QAA2B;IACvD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;QACP,OAAO,EAAE,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;QACpE,IAAI,EAAE,CAAC;KACR,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,QAA0B;IACjE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACzD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,cAAc,CAAC;IACrD,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAwB;IAC3D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACjG,MAAM,MAAM,GAAmB;QAC7B,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,qBAAqB,EAAE,EAAE;KAC1B,CAAC;IAEF,qGAAqG;IACrG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7F,sFAAsF;IACtF,IAAI,UAAU,CAAC,qBAAqB,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,IAAI,CACF,YAAY,cAAc,CAAC,qBAAqB,CAAC,sCAAsC;YACrF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAG,gBAAgB;QACnB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;KAC9E,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC;QACjC,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAE5D,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,IAAI,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,4GAA4G;QAC5G,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,CAAC,qBAAqB,GAAG,eAAe;SAC3C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"tree-copy.js","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/tree-copy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,SAAS,MAAM,WAAW,CAAC;AA2GlC,SAAS,eAAe,CAAC,KAAqB;IAC5C,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,gBAAgB;YACnB,OAAO,qGAAqG,CAAC;QAC/G,KAAK,cAAc;YACjB,OAAO,oDAAoD,CAAC;QAC9D,KAAK,WAAW;YACd,OAAO,qFAAqF,CAAC;QAC/F,KAAK,iBAAiB;YACpB,OAAO,gBAAgB,KAAK,CAAC,MAAM,oEAAoE;kBACnG,kGAAkG,CAAC;IAC3G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,OAAO,CAA4B;IAE5C,YAAY,OAAkC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtF,KAAK,CACH,uCAAuC,OAAO,CAAC,MAAM,kDAAkD;cACnG,4BAA4B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cAChD,oGAAoG;cACpG,qCAAqC,CAC1C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAG;IACvB,mBAAmB;IACnB,GAAG,eAAe,CAAC,+BAA+B,CAAC;CACpD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAUjD;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,QAA2B;IACvD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;QACP,OAAO,EAAE,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;QACpE,IAAI,EAAE,CAAC;KACR,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,QAA0B;IACjE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACzD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,cAAc,CAAC;IACrD,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,KAAwB;IAExB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9E,8GAA8G;QAC9G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,QAA2C;IAE3C,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QAChD,8GAA8G;QAC9G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,IAAY,EAAE,UAAkB;IACrD,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAiB,EACjB,UAAkB,EAClB,OAA4B;IAE5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,gHAAgH;QAChH,IAAI,GAAG,cAAc,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC1F,mHAAmH;IACnH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,KAA6B,EAC7B,OAA4B;IAE5B,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACrD,qGAAqG;IACrG,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAwB;IAC3D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACjG,MAAM,MAAM,GAAmB;QAC7B,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,qBAAqB,EAAE,EAAE;QACzB,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,qGAAqG;IACrG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7F,sFAAsF;IACtF,IAAI,UAAU,CAAC,qBAAqB,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,IAAI,CACF,YAAY,cAAc,CAAC,qBAAqB,CAAC,sCAAsC;YACrF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAG,gBAAgB;QACnB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;KAC9E,CAAC;IAEF,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC;QACjC,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;QACtB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EACJ,gIAAgI;aACnI;SACF;KACF,CAAC,CAAC;IAEH,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,mBAAmB,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAE7G,yEAAyE;IACzE,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,uEAAuE;IACvE,6EAA6E;IAC7E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,IAAI;QAC3C,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,YAAY,CAAC;IACjB,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAC/C,SAAS,EACT,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,EACjC,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAClD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,4GAA4G;QAC5G,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,CAAC,qBAAqB,GAAG,eAAe;SAC3C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/corpus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,mBAAmB,IAAI,OAAO,CA0D7C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,mBAAmB,IAAI,OAAO,CA6D7C"}

package/dist/commands/corpus/index.js

@@ -37,6 +37,9 @@ Output:
   <--out>/<UTC-date>-<vat-short-sha>/
     summary.yaml          # index: per-plugin status + totals
     <name>-audit.yaml     # full audit output per plugin
+                          #   results: one entry per audited file; issues: run-level
+                          #   findings. An audit over 0 files is audit.status: error
+                          #   with one RESOURCE_CHECK_BROKEN, never a clean row.
     <name>-review.md      # full skill-review output (only with --with-review)
 
 Exit codes:

package/dist/commands/corpus/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/corpus/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AAEtE,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM;SACH,WAAW,CAAC,uFAAuF,CAAC;SACpG,WAAW,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,qEAAqE,CAAC;SAClF,QAAQ,CAAC,aAAa,EAAE,+CAA+C,CAAC;SACxE,cAAc,CAAC,aAAa,EAAE,wEAAwE,CAAC;SACvG,MAAM,CAAC,eAAe,EAAE,uEAAuE,CAAC;SAChG,MAAM,CAAC,SAAS,EAAE,mDAAmD,CAAC;SACtE,MAAM,CAAC,KAAK,WAA0B,QAA4B;QACjE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAuB,CAAC,CAAC;IACjF,CAAC,CAAC;SACD,WAAW,CACV,OAAO,EACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCL,CACI,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/corpus/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AAEtE,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM;SACH,WAAW,CAAC,uFAAuF,CAAC;SACpG,WAAW,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,qEAAqE,CAAC;SAClF,QAAQ,CAAC,aAAa,EAAE,+CAA+C,CAAC;SACxE,cAAc,CAAC,aAAa,EAAE,wEAAwE,CAAC;SACvG,MAAM,CAAC,eAAe,EAAE,uEAAuE,CAAC;SAChG,MAAM,CAAC,SAAS,EAAE,mDAAmD,CAAC;SACtE,MAAM,CAAC,KAAK,WAA0B,QAA4B;QACjE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAuB,CAAC,CAAC;IACjF,CAAC,CAAC;SACD,WAAW,CACV,OAAO,EACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCL,CACI,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/corpus/report.d.ts

@@ -54,7 +54,6 @@ export interface PluginRow {
     review: ReviewOutcome;
 }
 export interface RunReport {
-    schema_version: 1;
     generated_at: string;
     vat_version: string;
     vat_commit: string;

package/dist/commands/corpus/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,CAAC,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QAAE,WAAW,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAmC1D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAG1D;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBvF"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QAAE,WAAW,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAmC1D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAG1D;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBvF"}

package/dist/commands/corpus/report.js

@@ -67,7 +67,6 @@ export async function writeRunReport(report, outDir) {
     mkdirSync(runDir, { recursive: true });
     const totals = computeTotals(report);
     const dump = {
-        schema_version: report.schema_version,
         generated_at: report.generated_at,
         vat_version: report.vat_version,
         vat_commit: report.vat_commit,

package/dist/commands/corpus/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/commands/corpus/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAyE7B;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,MAAM,MAAM,GAAc;QACxB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAC9B,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAAE,CAAC;IAE5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAClE,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAiB,EAAE,MAAc;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,8KAA8K;IAC9K,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM;KACP,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1D,6GAA6G;IAC7G,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAE1G,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/commands/corpus/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAwE7B;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,MAAM,MAAM,GAAc;QACxB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAC9B,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAAE,CAAC;IAE5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAClE,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAiB,EAAE,MAAc;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,8KAA8K;IAC9K,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM;KACP,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1D,6GAA6G;IAC7G,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAE1G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/corpus/runner.d.ts

@@ -10,13 +10,55 @@
  * URL handling clones via Layer 1's `withClonedRepo` helper. Validation
  * overlay (Task 5) is added on top of this base.
  */
-import type { PluginRow, ReviewOutcome } from './report.js';
+import type { ValidationResult } from '@vibe-agent-toolkit/agent-skills';
+import { type ValidationIssue } from '@vibe-agent-toolkit/schema';
+import type { DirectoryRefusal } from '@vibe-agent-toolkit/utils/crawl';
+import type { AuditOutcome, PluginRow, ReviewOutcome } from './report.js';
 import type { PluginEntry } from './seed.js';
 export interface RunnerOptions {
     runDir: string;
     withReview: boolean;
     debug: boolean;
 }
+/** The per-plugin audit document: one result per file, plus the run-level findings that belong to none. */
+export interface AuditDocument {
+    results: readonly ValidationResult[];
+    /** Present only when non-empty, so a clean run's document keeps its shape. */
+    issues?: readonly ValidationIssue[];
+}
+/**
+ * Derive one plugin's audit row and its document from the per-file results.
+ *
+ * 🚨 **An audit over zero files is an ERROR, not "an empty tree audits
+ * cleanly".** `summarizeRun` over zero results gives `files_scanned: 0` and
+ * zero findings, and zero findings is `success` — so a source that resolved to
+ * a tree with nothing to audit (a wrong subdirectory, a clone whose default
+ * branch holds no skill, an excluded tree) wrote the same `summary.yaml` row as
+ * a clean plugin. The review lane on the identical fixture already answered
+ * `error` ("No SKILL.md files found"); this is the same question one lane
+ * over, and it now gets the same answer, through the shared mechanism in
+ * `run-integrity.ts`: one non-overridable `RESOURCE_CHECK_BROKEN` at `error`,
+ * counted in the row's `errors` and `findings_emitted`, carried in the document
+ * under `issues` beside the (empty) per-file results.
+ *
+ * `unloadable` is deliberately NOT the status here. Unloadable means the audit
+ * could not run — a missing path, a failed clone. This audit ran, and found no
+ * file to run over; the difference is the difference between "no verdict
+ * possible" and "this verdict is vacuous", and `computeTotals` counts them
+ * apart.
+ *
+ * Pure, and exported for that reason: the runner's loop clones, writes and
+ * catches, and the refusal has to be pinned without any of that.
+ *
+ * @param results - One validation result per audited file
+ * @param durationMs - The row's measured duration
+ * @param outputPath - Where the document is written, relative to the run dir
+ * @returns The row's audit outcome and the document to write for it
+ */
+export declare function buildAuditOutcome(results: readonly ValidationResult[], durationMs: number, outputPath: string): {
+    audit: AuditOutcome;
+    document: AuditDocument;
+};
 /**
  * Run audit + optional review against one plugin entry.
  */
@@ -26,6 +68,21 @@ export interface SkillReviewSection {
     ok: boolean;
     body: string;
 }
+/**
+ * One failed section per directory the review scan could not list.
+ *
+ * The review lane's population is what `scan` enumerates; a directory it could
+ * not enter is a set of skills that were never reviewed, and a review.md that
+ * omits them reads as one that covered the plugin. Filing the gap on the
+ * existing per-skill channel — `ok: false`, keyed by the directory — is what
+ * makes `buildReviewOutcome` grade the run `error` and the aggregate name the
+ * subtree, without inventing a second channel the report would have to learn.
+ *
+ * @param unreadable - What `ScanSummary.unreadable` carried
+ * @param scanPath - The plugin root every section is keyed relative to
+ * @returns Sections in the order the refusals were met
+ */
+export declare function unlistedDirectorySections(unreadable: readonly DirectoryRefusal[], scanPath: string): SkillReviewSection[];
 /**
  * Derive one plugin's `ReviewOutcome` from its per-skill sections.
  *

package/dist/commands/corpus/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiBH,OAAO,KAAK,EAA8B,SAAS,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAC;AACvG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;CAChB;AAcD;;GAEG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,SAAS,CAAC,CAKpB;AAyED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAsDD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,aAAa,CAmBf"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/commands/corpus/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE9G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAUxE,OAAO,KAAK,EAAE,YAAY,EAAgB,SAAS,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAC;AACvG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;CAChB;AAcD,2GAA2G;AAC3G,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,CAqBlD;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,SAAS,CAAC,CAKpB;AAiED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAsDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,SAAS,gBAAgB,EAAE,EACvC,QAAQ,EAAE,MAAM,GACf,kBAAkB,EAAE,CAYtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,aAAa,CAmBf"}

package/dist/commands/corpus/runner.js

@@ -15,10 +15,11 @@ import { existsSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { scan } from '@vibe-agent-toolkit/discovery';
 import { calculateValidationStatus, countBySeverity } from '@vibe-agent-toolkit/schema';
-import { safePath } from '@vibe-agent-toolkit/utils';
+import { safePath, toForwardSlash, transientRefusalClause } from '@vibe-agent-toolkit/utils';
 import { isGitUrl, parseGitUrl } from '@vibe-agent-toolkit/utils/git';
 import * as yaml from 'yaml';
 import { createLogger } from '../../utils/logger.js';
+import { nothingCheckedFinding } from '../../utils/run-integrity.js';
 import { resolveVatBinPath } from '../../utils/vat-bin-path.js';
 import { withClonedRepo } from '../audit/git-url-clone.js';
 import { deriveScanRoot, getValidationResults } from '../audit.js';
@@ -32,6 +33,55 @@ const SKIPPED_REVIEW = { status: 'skipped', duration_ms: 0 };
 function summarizeRun(allIssues, filesScanned) {
     return { ...countBySeverity(allIssues), files_scanned: filesScanned };
 }
+/**
+ * Derive one plugin's audit row and its document from the per-file results.
+ *
+ * 🚨 **An audit over zero files is an ERROR, not "an empty tree audits
+ * cleanly".** `summarizeRun` over zero results gives `files_scanned: 0` and
+ * zero findings, and zero findings is `success` — so a source that resolved to
+ * a tree with nothing to audit (a wrong subdirectory, a clone whose default
+ * branch holds no skill, an excluded tree) wrote the same `summary.yaml` row as
+ * a clean plugin. The review lane on the identical fixture already answered
+ * `error` ("No SKILL.md files found"); this is the same question one lane
+ * over, and it now gets the same answer, through the shared mechanism in
+ * `run-integrity.ts`: one non-overridable `RESOURCE_CHECK_BROKEN` at `error`,
+ * counted in the row's `errors` and `findings_emitted`, carried in the document
+ * under `issues` beside the (empty) per-file results.
+ *
+ * `unloadable` is deliberately NOT the status here. Unloadable means the audit
+ * could not run — a missing path, a failed clone. This audit ran, and found no
+ * file to run over; the difference is the difference between "no verdict
+ * possible" and "this verdict is vacuous", and `computeTotals` counts them
+ * apart.
+ *
+ * Pure, and exported for that reason: the runner's loop clones, writes and
+ * catches, and the refusal has to be pinned without any of that.
+ *
+ * @param results - One validation result per audited file
+ * @param durationMs - The row's measured duration
+ * @param outputPath - Where the document is written, relative to the run dir
+ * @returns The row's audit outcome and the document to write for it
+ */
+export function buildAuditOutcome(results, durationMs, outputPath) {
+    const fileIssues = results.flatMap((r) => r.issues);
+    const runIssues = nothingCheckedFinding(results.length, fileIssues, () => 'The audit ran over 0 files, so this row is not a verdict: a plugin with nothing'
+        + ' to audit produces the same counts as a clean one. The source resolved to a tree'
+        + ' holding no auditable file — usually a wrong subdirectory, a clone whose default'
+        + ' branch carries no skill or plugin, or an excluded tree.'
+        + ' `vat audit <source>` over the same path shows what the scan enumerates.');
+    const allIssues = [...runIssues, ...fileIssues];
+    const summary = summarizeRun(allIssues, results.length);
+    return {
+        audit: {
+            status: calculateValidationStatus(allIssues),
+            duration_ms: durationMs,
+            summary,
+            findings_emitted: summary.errors + summary.warnings + summary.info,
+            output_path: outputPath,
+        },
+        document: { results, ...(runIssues.length === 0 ? {} : { issues: runIssues }) },
+    };
+}
 /**
  * Run audit + optional review against one plugin entry.
  */
@@ -64,19 +114,12 @@ async function auditAndRecord(entry, scanPath, opts) {
     try {
         // The corpus run root is the scanned plugin itself — one root per row.
         const results = await getValidationResults(scanPath, true, {}, logger, deriveScanRoot(scanPath));
-        const allIssues = results.flatMap(r => r.issues);
-        const summary = summarizeRun(allIssues, results.length);
-        const status = calculateValidationStatus(allIssues);
-        const auditYamlPath = safePath.join(opts.runDir, `${entry.name}-audit.yaml`);
+        const outputPath = `${entry.name}-audit.yaml`;
+        const outcome = buildAuditOutcome(results, Date.now() - start, outputPath);
+        const auditYamlPath = safePath.join(opts.runDir, outputPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- composed under run dir
-        writeFileSync(auditYamlPath, yaml.stringify({ results }, { lineWidth: 0, aliasDuplicateObjects: false }), 'utf-8');
-        audit = {
-            status,
-            duration_ms: Date.now() - start,
-            summary,
-            findings_emitted: summary.errors + summary.warnings + summary.info,
-            output_path: `${entry.name}-audit.yaml`,
-        };
+        writeFileSync(auditYamlPath, yaml.stringify(outcome.document, { lineWidth: 0, aliasDuplicateObjects: false }), 'utf-8');
+        audit = outcome.audit;
     }
     catch (err) {
         audit = {
@@ -139,6 +182,33 @@ function summarizeReview(sections) {
     const reviewed = sections.filter((s) => s.ok).length;
     return { reviewed, failed: sections.length - reviewed, skills_scanned: sections.length };
 }
+/**
+ * One failed section per directory the review scan could not list.
+ *
+ * The review lane's population is what `scan` enumerates; a directory it could
+ * not enter is a set of skills that were never reviewed, and a review.md that
+ * omits them reads as one that covered the plugin. Filing the gap on the
+ * existing per-skill channel — `ok: false`, keyed by the directory — is what
+ * makes `buildReviewOutcome` grade the run `error` and the aggregate name the
+ * subtree, without inventing a second channel the report would have to learn.
+ *
+ * @param unreadable - What `ScanSummary.unreadable` carried
+ * @param scanPath - The plugin root every section is keyed relative to
+ * @returns Sections in the order the refusals were met
+ */
+export function unlistedDirectorySections(unreadable, scanPath) {
+    return unreadable.map((refusal) => {
+        const relativePath = toForwardSlash(safePath.relative(scanPath, refusal.directory)) || '.';
+        const cause = refusal.transient
+            ? `${transientRefusalClause(refusal.code)} — re-run before investigating anything`
+            : `listing was refused with ${refusal.code}`;
+        return {
+            relativePath,
+            ok: false,
+            body: `Directory could not be listed (${cause}); every skill beneath it was not reviewed.`,
+        };
+    });
+}
 /**
  * Derive one plugin's `ReviewOutcome` from its per-skill sections.
  *
@@ -182,7 +252,12 @@ async function runSkillReview(entry, scanPath, runDir) {
     const reviewPath = safePath.join(runDir, `${entry.name}-review.md`);
     const summary = await scan({ path: scanPath, recursive: true });
     const skills = summary.results.filter((r) => r.format === 'agent-skill' && !r.isGitIgnored);
-    if (skills.length === 0) {
+    // Directories the scan could not list hold skills this review never saw. They
+    // enter the aggregate as failed sections — see `unlistedDirectorySections` —
+    // so the outcome is `error` and the review names the gap, while every skill
+    // that WAS found is still reviewed below.
+    const unlisted = unlistedDirectorySections(summary.unreadable, scanPath);
+    if (skills.length === 0 && unlisted.length === 0) {
         return {
             status: 'error',
             duration_ms: Date.now() - start,
@@ -190,7 +265,7 @@ async function runSkillReview(entry, scanPath, runDir) {
             error: `No SKILL.md files found under ${scanPath}`,
         };
     }
-    const sections = [];
+    const sections = [...unlisted];
     for (const skill of skills) {
         const skillDir = dirname(skill.path);
         sections.push(reviewOneSkill(bin, skillDir, skill.relativePath));