clud-bug 0.6.34 → 0.7.0-rc.1

package/dist/cli/skills.d.ts

@@ -0,0 +1,56 @@
+import { SkillsClient, type RankableSkill, type SkillDescriptor } from '../core/skills.js';
+export declare const MANIFEST_FILE = ".clud-bug.json";
+export declare const MANIFEST_VERSION = 1;
+export declare function sanitizeSlug(name: string): string;
+export declare function entryKey(entry: ManifestEntry): string;
+export interface BaselineSkill {
+    source: string;
+    name: string;
+    description: string;
+    installs: number;
+    kind: string;
+    content: string;
+    _source?: 'agent-skills' | 'bundled';
+}
+export interface LoadBaselineOptions {
+    fetch?: typeof globalThis.fetch | undefined;
+    cacheDir?: string | null | undefined;
+}
+export declare function loadBaseline(baselineDir: string, opts?: LoadBaselineOptions): Promise<BaselineSkill[]>;
+export type WritableSkill = RankableSkill;
+export interface ManifestEntry {
+    slug: string;
+    name: string;
+    source: string;
+    kind: string;
+    description: string;
+}
+export interface Manifest {
+    version: number;
+    installed: ManifestEntry[];
+    [key: string]: unknown;
+}
+export declare function writeSkills(targetDir: string, skills: WritableSkill[], client: SkillsClient): Promise<ManifestEntry[]>;
+export declare function writeSkill(targetDir: string, skill: WritableSkill, client: SkillsClient): Promise<ManifestEntry>;
+export declare function readManifest(targetDir: string): Promise<Manifest>;
+export declare function writeManifest(targetDir: string, manifest: Manifest): Promise<void>;
+export declare function mergeManifest(existing: Manifest, newEntries: ManifestEntry[]): Manifest;
+export declare function removeSkill(targetDir: string, slug: string): Promise<ManifestEntry>;
+export interface InstalledGroups {
+    baseline: ManifestEntry[];
+    remote: ManifestEntry[];
+    custom: Array<{
+        slug: string;
+        kind: 'custom';
+        description: string;
+    }>;
+}
+export declare function listInstalled(targetDir: string): Promise<InstalledGroups>;
+export interface ManifestDiff {
+    add: RankableSkill[];
+    remove: ManifestEntry[];
+    unchanged: RankableSkill[];
+}
+export declare function diffManifest(manifest: Manifest, recommended: RankableSkill[]): ManifestDiff;
+export type { SkillDescriptor };
+//# sourceMappingURL=skills.d.ts.map

package/dist/cli/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/cli/skills.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE3F,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAgBlC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAKrD;AAMD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;IAI5C,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC;AAWD,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,aAAa,EAAE,CAAC,CAkB1B;AAkGD,MAAM,MAAM,aAAa,GAAG,aAAa,CAAC;AAG1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,EAAE,CAAC;IAG3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EAAE,EACvB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,aAAa,EAAE,CAAC,CAS1B;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAYvE;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxF;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,QAAQ,CAYvF;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAYzF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAiC/E;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,aAAa,EAAE,CAAC;IACrB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AAID,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,YAAY,CA2B3F;AAKD,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/cli/skills.js

@@ -0,0 +1,292 @@
+// CLI skill helpers — install/update commands that touch the filesystem.
+//
+// Split from lib/skills.js during the v0.7.0 TS migration. Pure helpers
+// (SkillsClient, rankAndCap, partition/extract/select functions) live in
+// src/core/skills.ts so the App can consume them without dragging
+// node:fs into a serverless bundle.
+//
+// `_internal` debug-export removed: `sanitizeSlug`, `entryKey`,
+// `MANIFEST_FILE` (the CLI-side pieces previously hidden under
+// `_internal.X`) are now first-class named exports of this module.
+import { mkdir, writeFile, readdir, readFile, rm, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { createHash } from 'node:crypto';
+export const MANIFEST_FILE = '.clud-bug.json';
+export const MANIFEST_VERSION = 1;
+// Canonical home for clud-bug's baseline skills.
+// PINNED TO A COMMIT SHA, NOT `main`. This re-couples the trust boundary
+// to clud-bug releases: a compromised commit on agent-skills@main cannot
+// silently land in users' Claude review skills mid-cycle. To roll new
+// skill content, bump BASELINE_SKILLS_REF below in the same clud-bug PR
+// that ships the corresponding bundled fallback update.
+// See thrillmade/agent-skills — skills.sh `skills/<name>/SKILL.md` layout.
+const BASELINE_SKILLS_REF = '436963ed37cbd9c6a9b7a07e907d5a0a432fab59';
+const AGENT_SKILLS_BASE = process.env['CLUD_BUG_AGENT_SKILLS_BASE'] ??
+    `https://raw.githubusercontent.com/thrillmade/agent-skills/${BASELINE_SKILLS_REF}/skills`;
+const SKILL_FETCH_TIMEOUT_MS = 5000;
+const SKILL_CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24h
+export function sanitizeSlug(name) {
+    return name.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '');
+}
+export function entryKey(entry) {
+    // Baseline skills have no source; key by slug. Remote skills key by source/name.
+    return entry.kind === 'baseline'
+        ? `baseline:${entry.slug}`
+        : `${entry.source}/${entry.name || entry.slug}`;
+}
+// Loads the baseline skills, preferring the pinned thrillmade/agent-skills
+// commit and falling back to the bundled npm-package copy on any fetch failure.
+// Returns the same shape as before, plus a `_source` of either 'agent-skills'
+// or 'bundled' so the CLI can report which path was used.
+//
+// Options:
+//   - fetch     — injectable for tests (defaults to globalThis.fetch)
+//   - cacheDir  — where to cache fetched SKILL.md files (defaults to
+//                 ~/.cache/clud-bug/skills/, skipped if null)
+export async function loadBaseline(baselineDir, opts = {}) {
+    const fetchImpl = opts.fetch ?? globalThis.fetch;
+    const cacheDir = opts.cacheDir === null ? null : (opts.cacheDir ?? join(homedir(), '.cache', 'clud-bug', 'skills'));
+    // First, enumerate the bundled baseline skills (source of truth for which
+    // names exist). Then fetch each in parallel — sequential awaits would
+    // stack timeouts (3 baselines × 5s = 15s before fallback when offline).
+    const bundled = await readBundled(baselineDir);
+    const remotes = await Promise.all(bundled.map((s) => tryFetchSkill(s.name, fetchImpl, cacheDir)));
+    return bundled.map((skill, i) => {
+        const remote = remotes[i];
+        return remote
+            ? { ...skill, content: remote, _source: 'agent-skills' }
+            : { ...skill, _source: 'bundled' };
+    });
+}
+// Reads the bundled baseline from the npm-package directory.
+async function readBundled(baselineDir) {
+    const skills = [];
+    let entries;
+    try {
+        entries = await readdir(baselineDir, { withFileTypes: true });
+    }
+    catch {
+        return skills;
+    }
+    for (const entry of entries) {
+        if (!entry.isFile() || !entry.name.endsWith('.md'))
+            continue;
+        const content = await readFile(join(baselineDir, entry.name), 'utf8');
+        skills.push({
+            source: 'clud-bug-baseline',
+            name: entry.name.replace(/\.md$/, ''),
+            description: '(baseline)',
+            installs: 0,
+            kind: 'baseline',
+            content,
+        });
+    }
+    return skills;
+}
+// Try to read from cache, then fall back to network. Returns the SKILL.md
+// content string on success, null on any failure (caller falls back to bundled).
+async function tryFetchSkill(name, fetchImpl, cacheDir) {
+    // Cache lookup first.
+    if (cacheDir) {
+        const cached = await readFromCache(cacheDir, name);
+        if (cached !== null)
+            return cached;
+    }
+    // Network fetch with timeout covering BOTH the connection AND the body
+    // read (clearTimeout in finally guarantees the timer doesn't keep the
+    // event loop alive for up to 5s past a failed CLI run).
+    const url = `${AGENT_SKILLS_BASE}/${encodeURIComponent(name)}/SKILL.md`;
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), SKILL_FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetchImpl(url, { signal: ctrl.signal });
+        if (!res.ok)
+            return null;
+        const content = await res.text();
+        if (!content || !content.trim())
+            return null;
+        if (cacheDir)
+            await writeToCache(cacheDir, name, content);
+        return content;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function readFromCache(cacheDir, name) {
+    const path = cachePath(cacheDir, name);
+    try {
+        const st = await stat(path);
+        if (Date.now() - st.mtimeMs > SKILL_CACHE_TTL_MS)
+            return null;
+        return await readFile(path, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+async function writeToCache(cacheDir, name, content) {
+    try {
+        await mkdir(cacheDir, { recursive: true });
+        await writeFile(cachePath(cacheDir, name), content);
+    }
+    catch {
+        // Cache write failures are non-fatal — we already have the content.
+    }
+}
+function cachePath(cacheDir, name) {
+    // Include AGENT_SKILLS_BASE in the hash so different upstream URLs (e.g.
+    // a fork via CLUD_BUG_AGENT_SKILLS_BASE, or a different pinned SHA after
+    // a clud-bug release) get different cache entries. Otherwise switching
+    // bases would silently return the previously-cached content from a
+    // different upstream — cross-base cache poisoning.
+    const hash = createHash('sha256')
+        .update(`${AGENT_SKILLS_BASE}\n${name}`)
+        .digest('hex')
+        .slice(0, 16);
+    return join(cacheDir, `${hash}.md`);
+}
+export async function writeSkills(targetDir, skills, client) {
+    await mkdir(targetDir, { recursive: true });
+    const written = [];
+    for (const skill of skills) {
+        const entry = await writeSkill(targetDir, skill, client);
+        written.push(entry);
+    }
+    await writeManifest(targetDir, mergeManifest(await readManifest(targetDir), written));
+    return written;
+}
+export async function writeSkill(targetDir, skill, client) {
+    await mkdir(targetDir, { recursive: true });
+    const slug = sanitizeSlug(skill.name);
+    const skillDir = join(targetDir, slug);
+    await mkdir(skillDir, { recursive: true });
+    const content = skill.content ?? (await client.getContent(skill.source, skill.name));
+    await writeFile(join(skillDir, 'SKILL.md'), content);
+    return {
+        slug,
+        name: skill.name,
+        source: skill.source,
+        kind: skill.kind || 'remote',
+        description: skill.description || '',
+    };
+}
+export async function readManifest(targetDir) {
+    try {
+        const text = await readFile(join(targetDir, MANIFEST_FILE), 'utf8');
+        const data = JSON.parse(text);
+        return {
+            ...data,
+            version: data.version || MANIFEST_VERSION,
+            installed: Array.isArray(data.installed) ? data.installed : [],
+        };
+    }
+    catch {
+        return { version: MANIFEST_VERSION, installed: [] };
+    }
+}
+export async function writeManifest(targetDir, manifest) {
+    await mkdir(targetDir, { recursive: true });
+    // Preserve any additional fields callers want to stamp (e.g. lastUpdate,
+    // lastUpdateVersion, pinVersion). Only `version` and `installed` are normalized.
+    const out = {
+        ...manifest,
+        version: manifest.version || MANIFEST_VERSION,
+        installed: manifest.installed || [],
+    };
+    await writeFile(join(targetDir, MANIFEST_FILE), JSON.stringify(out, null, 2) + '\n');
+}
+export function mergeManifest(existing, newEntries) {
+    const byKey = new Map();
+    for (const entry of existing.installed || []) {
+        byKey.set(entryKey(entry), entry);
+    }
+    for (const entry of newEntries) {
+        byKey.set(entryKey(entry), entry);
+    }
+    // Spread `existing` so caller-set fields (pinVersion, lastUpdate,
+    // lastUpdateVersion, etc.) survive merges performed by writeSkills /
+    // refresh / add. Only `installed` is rebuilt; everything else carries.
+    return { ...existing, version: MANIFEST_VERSION, installed: [...byKey.values()] };
+}
+export async function removeSkill(targetDir, slug) {
+    const manifest = await readManifest(targetDir);
+    const entry = manifest.installed.find((e) => e.slug === slug);
+    if (!entry) {
+        throw new Error(`'${slug}' is not in the clud-bug manifest. If it's a custom skill, delete it manually with: rm -rf .claude/skills/${slug}`);
+    }
+    await rm(join(targetDir, slug), { recursive: true, force: true });
+    manifest.installed = manifest.installed.filter((e) => e.slug !== slug);
+    await writeManifest(targetDir, manifest);
+    return entry;
+}
+export async function listInstalled(targetDir) {
+    const manifest = await readManifest(targetDir);
+    const managedSlugs = new Set(manifest.installed.map((e) => e.slug));
+    const groups = { baseline: [], remote: [], custom: [] };
+    for (const entry of manifest.installed) {
+        if (entry.kind === 'baseline') {
+            groups.baseline.push(entry);
+        }
+        else {
+            groups.remote.push(entry);
+        }
+    }
+    let entries;
+    try {
+        entries = await readdir(targetDir, { withFileTypes: true });
+    }
+    catch {
+        return groups;
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        if (managedSlugs.has(entry.name))
+            continue;
+        const skillFile = join(targetDir, entry.name, 'SKILL.md');
+        let description = '';
+        try {
+            const text = await readFile(skillFile, 'utf8');
+            const m = text.match(/^description:\s*(.+)$/m);
+            description = m?.[1]?.trim() || '';
+        }
+        catch {
+            continue; // not a skill dir
+        }
+        groups.custom.push({ slug: entry.name, kind: 'custom', description });
+    }
+    return groups;
+}
+// Diff a current manifest against a freshly-recommended skill set.
+// Returns { add: [], remove: [], unchanged: [] }. Custom skills are never affected.
+export function diffManifest(manifest, recommended) {
+    const recByKey = new Map(recommended.map((s) => [
+        s.kind === 'baseline' ? `baseline:${sanitizeSlug(s.name)}` : `${s.source}/${s.name}`,
+        s,
+    ]));
+    const installedByKey = new Map(manifest.installed.map((e) => [entryKey(e), e]));
+    const add = [];
+    const remove = [];
+    const unchanged = [];
+    for (const [key, skill] of recByKey) {
+        if (installedByKey.has(key)) {
+            unchanged.push(skill);
+        }
+        else {
+            add.push(skill);
+        }
+    }
+    for (const [key, entry] of installedByKey) {
+        if (entry.kind === 'baseline')
+            continue; // baseline always stays
+        if (!recByKey.has(key))
+            remove.push(entry);
+    }
+    return { add, remove, unchanged };
+}
+//# sourceMappingURL=skills.js.map

package/dist/cli/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/cli/skills.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,kEAAkE;AAClE,oCAAoC;AACpC,EAAE;AACF,gEAAgE;AAChE,+DAA+D;AAC/D,mEAAmE;AAEnE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,iDAAiD;AACjD,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AACxE,wDAAwD;AACxD,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AACvE,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IACzC,6DAA6D,mBAAmB,SAAS,CAAC;AAC5F,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAEtD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,iFAAiF;IACjF,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;QAC9B,CAAC,CAAC,YAAY,KAAK,CAAC,IAAI,EAAE;QAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAwBD,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,WAAW;AACX,sEAAsE;AACtE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,OAA4B,EAAE;IAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErG,0EAA0E;IAC1E,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAC/D,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,MAAM;YACX,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAuB,EAAE;YACjE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,WAAW,CAAC,WAAmB;IAC5C,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,UAAU;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,iFAAiF;AACjF,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,SAAkC,EAClC,QAAuB;IAEvB,sBAAsB;IACtB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;IACrC,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,QAAQ;YAAE,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAY;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAY,EAAE,OAAe;IACzE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,mEAAmE;IACnE,mDAAmD;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,GAAG,iBAAiB,KAAK,IAAI,EAAE,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;AACtC,CAAC;AA2BD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,MAAuB,EACvB,MAAoB;IAEpB,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,KAAoB,EACpB,MAAoB;IAEpB,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgD,CAAC;QAC7E,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB;YACzC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAkB;IACvE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,GAAG,GAAa;QACpB,GAAG,QAAQ;QACX,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,gBAAgB;QAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE;KACpC,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,UAA2B;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,kEAAkE;IAClE,qEAAqE;IACrE,uEAAuE;IACvE,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,IAAY;IAC/D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,IAAI,IAAI,6GAA6G,IAAI,EAAE,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvE,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC/C,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,kBAAkB;QAC9B,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,mEAAmE;AACnE,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,WAA4B;IAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE;QACpF,CAAC;KACF,CAAC,CACH,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,wBAAwB;QACjE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC"}

package/dist/cli/update.d.ts

@@ -0,0 +1,29 @@
+import { type LoadBaselineOptions } from './skills.js';
+export interface RunUpdateOptions {
+    cwd: string;
+    templatesDir: string;
+    baselineDir: string;
+    ourVersion: string;
+    refreshRemote?: boolean | undefined;
+    loadBaselineOpts?: LoadBaselineOptions | undefined;
+}
+export interface UpdateChangeRecord {
+    path: string;
+    label: string;
+    from?: string | undefined;
+    to?: string | undefined;
+}
+export interface UpdateSkippedRecord {
+    path: string;
+    label: string;
+    reason: string;
+}
+export interface RunUpdateResult {
+    changed: UpdateChangeRecord[];
+    unchanged: UpdateChangeRecord[];
+    skipped?: UpdateSkippedRecord[];
+    ourVersion?: string;
+    missing?: 'init';
+}
+export declare function runUpdate(opts: RunUpdateOptions): Promise<RunUpdateResult>;
+//# sourceMappingURL=update.d.ts.map

package/dist/cli/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/cli/update.ts"],"names":[],"mappings":"AAKA,OAAO,EAA6C,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAiBlG,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAEpC,gBAAgB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiGhF"}

package/dist/cli/update.js

@@ -0,0 +1,186 @@
+import { readFile, writeFile, mkdir, stat, rm } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { renderFile, pickTemplate, templateLanguage } from '../core/render.js';
+import { reviewPrompt } from '../core/prompts.js';
+import { detect, buildDescriptionLine } from '../core/detect.js';
+import { loadBaseline, readManifest, writeManifest } from './skills.js';
+import { applyToRepo as applyAgentDocs } from './agents-md.js';
+// Returns { changed, unchanged, skipped, ourVersion }.
+export async function runUpdate(opts) {
+    const { cwd, templatesDir, baselineDir, ourVersion, refreshRemote = false, loadBaselineOpts } = opts;
+    if (!cwd || !templatesDir || !baselineDir || !ourVersion) {
+        throw new Error('runUpdate requires cwd, templatesDir, baselineDir, ourVersion');
+    }
+    const skillsDir = join(cwd, '.claude', 'skills');
+    const manifest = await readManifest(skillsDir);
+    if (manifest.installed.length === 0 && !(await pathExists(join(cwd, '.github/workflows/clud-bug-review.yml')))) {
+        return { changed: [], unchanged: [], missing: 'init' };
+    }
+    const changed = [];
+    const unchanged = [];
+    const skipped = [];
+    // 1. Re-render review workflow with the latest template.
+    const signals = await detect(cwd);
+    const tmplName = pickTemplate(signals.languages);
+    // REVIEW_SCHEMA + CCA_VERSION + CLUD_BUG_VERSION come from render.js DEFAULTS.
+    const newReview = await renderFile(join(templatesDir, tmplName), {
+        REVIEW_PROMPT: reviewPrompt({
+            projectDescription: buildDescriptionLine(signals),
+            language: templateLanguage(tmplName),
+        }),
+    });
+    await maybeRefreshVersioned(join(cwd, '.github/workflows/clud-bug-review.yml'), newReview, changed, unchanged, skipped, 'review workflow');
+    // 2. Re-render audit workflow if it's installed (init from v0.3+ ships it).
+    // Routed through renderFile (was raw readFile pre-v0.5.11) so
+    // {{CCA_VERSION}} substitution lands in audit alongside review.
+    const auditPath = join(cwd, '.github/workflows/clud-bug-audit.yml');
+    if (await pathExists(auditPath)) {
+        const newAudit = await renderFile(join(templatesDir, 'audit.yml.tmpl'), {});
+        await maybeRefreshVersioned(auditPath, newAudit, changed, unchanged, skipped, 'audit workflow');
+    }
+    // 2b. Re-render self-update workflow if installed (init from v0.4+ ships it).
+    // Routed through renderFile for parity — no CCA ref in self-update today
+    // but future tokens should propagate uniformly without another refactor.
+    const selfUpdatePath = join(cwd, '.github/workflows/clud-bug-self-update.yml');
+    if (await pathExists(selfUpdatePath)) {
+        const newSelfUpdate = await renderFile(join(templatesDir, 'self-update.yml.tmpl'), {});
+        await maybeRefreshVersioned(selfUpdatePath, newSelfUpdate, changed, unchanged, skipped, 'self-update workflow');
+    }
+    // 3. Refresh baseline skills (always controlled by clud-bug).
+    //    Slugs listed in manifest.excludedBaselines are skipped AND their
+    //    existing .claude/skills/<slug>/ dir is removed if present, so a repo
+    //    that opts out of a baseline doesn't end up regenerating it on every
+    //    update (the original symptom this field exists to fix).
+    const excludedRaw = manifest['excludedBaselines'];
+    const excluded = new Set(Array.isArray(excludedRaw) ? excludedRaw : []);
+    const baseline = await loadBaseline(baselineDir, loadBaselineOpts);
+    for (const skill of baseline) {
+        const slug = sanitize(skill.name);
+        if (excluded.has(skill.name) || excluded.has(slug)) {
+            const skillDir = join(skillsDir, slug);
+            if (await pathExists(skillDir)) {
+                await rm(skillDir, { recursive: true, force: true });
+                changed.push({ path: skillDir, label: `excluded baseline ${skill.name}: removed` });
+            }
+            continue;
+        }
+        const skillPath = join(skillsDir, slug, 'SKILL.md');
+        await maybeWrite(skillPath, skill.content, changed, unchanged, `baseline ${skill.name}`);
+    }
+    // 4. Optionally refresh remote skills (off by default).
+    // Custom skills are never touched.
+    // (Remote refresh is intentionally minimal here — `clud-bug refresh`
+    // already covers add/remove diffs against skills.sh.)
+    if (refreshRemote) {
+        // Placeholder for parity with the flag; full logic remains in
+        // `clud-bug refresh`. We just emit an advisory.
+    }
+    // 5. Refresh the AGENTS.md / CLAUDE.md clud-bug block. The block embeds
+    //    the version + strict-mode state, so an update with a new version
+    //    rewrites it. Files that don't already exist (other than AGENTS.md)
+    //    are left alone, so this never silently creates instruction stubs.
+    // `=== true` mirrors the workflow's gate predicate at
+    // templates/workflow*.yml.tmpl. A v0.3 advisory manifest (strictMode
+    // undefined, lastUpdate set) renders "off" — matching the gate, not the
+    // default-on behavior of fresh v0.4+ installs.
+    const agentDocs = await applyAgentDocs(cwd, {
+        version: ourVersion,
+        strictMode: manifest['strictMode'] === true,
+    });
+    for (const p of agentDocs.created)
+        changed.push({ path: join(cwd, p), label: `agent docs: created ${p}` });
+    for (const p of agentDocs.touched)
+        changed.push({ path: join(cwd, p), label: `agent docs: ${p}` });
+    // 6. Stamp the manifest with the version that ran the update.
+    manifest['lastUpdate'] = new Date().toISOString();
+    manifest['lastUpdateVersion'] = ourVersion;
+    await writeManifest(skillsDir, manifest);
+    return { changed, unchanged, skipped, ourVersion };
+}
+async function maybeWrite(path, contents, changed, unchanged, label) {
+    const prior = await readSafe(path);
+    if (prior === contents) {
+        unchanged.push({ path, label });
+        return;
+    }
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, contents);
+    changed.push({ path, label });
+}
+// Refresh a versioned template (one that carries `# clud-bug-template-version:`
+// on line 1). If the installed file lacks that marker, treat it as
+// user-customized and leave it alone — recovery path is delete + `clud-bug init`.
+// Mirrors logmind v0.2.1's refresh-mode contract.
+async function maybeRefreshVersioned(path, contents, changed, unchanged, skipped, label) {
+    const tmplVersion = extractTemplateVersion(contents);
+    if (!tmplVersion) {
+        // Defensive: every versioned template is supposed to carry a marker.
+        // Falling back to byte-compare write here would silently mass-overwrite
+        // every installed file (including marker-bearing ones) the moment a
+        // future template regressed — the inverse of the protection contract
+        // this function exists to enforce. Throw so the regression surfaces
+        // in CI instead.
+        throw new Error(`Template for ${label} has no # clud-bug-template-version marker — refusing to refresh (templates must declare a marker so refresh-mode can reason about ownership).`);
+    }
+    const prior = await readSafe(path);
+    if (prior === null) {
+        // First time writing here; nothing to preserve.
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, contents);
+        changed.push({ path, label });
+        return;
+    }
+    const priorVersion = extractTemplateVersion(prior);
+    if (priorVersion === null) {
+        // Markerless installed file = customized. Preserve and warn.
+        skipped.push({
+            path,
+            label,
+            reason: 'markerless (user-customized); delete the file + run `clud-bug init` to refresh',
+        });
+        return;
+    }
+    if (prior === contents) {
+        unchanged.push({ path, label });
+        return;
+    }
+    // Marker present (current or stale) AND content drifted: refresh.
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, contents);
+    changed.push({ path, label, from: priorVersion, to: tmplVersion });
+}
+// Extract the template-version marker. Templates put it on line 1, but
+// scan the first 5 lines so a leading blank or stray header doesn't hide it.
+// Anchoring near the top means a stray `# clud-bug-template-version:` lower
+// in the file (in a comment inside a heredoc, say) can't be mistaken for the
+// authoritative marker. Returns null if not present.
+function extractTemplateVersion(text) {
+    if (!text)
+        return null;
+    const head = text.split('\n', 5).join('\n');
+    const m = head.match(/^# clud-bug-template-version:\s*(\S+)/m);
+    // m[1] is `string | undefined` under noUncheckedIndexedAccess; coalesce
+    // to null to keep the return type tight.
+    return m ? (m[1] ?? null) : null;
+}
+async function readSafe(path) {
+    try {
+        return await readFile(path, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+async function pathExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function sanitize(name) {
+    return name.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '');
+}
+//# sourceMappingURL=update.js.map

package/dist/cli/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/cli/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAA4B,MAAM,aAAa,CAAC;AAClG,OAAO,EAAE,WAAW,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA+C/D,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,GAAG,KAAK,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACrG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,yDAAyD;IACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,+EAA+E;IAC/E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE;QAC/D,aAAa,EAAE,YAAY,CAAC;YAC1B,kBAAkB,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACjD,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACrC,CAAC;KACH,CAAC,CAAC;IACH,MAAM,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,uCAAuC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE3I,4EAA4E;IAC5E,8DAA8D;IAC9D,gEAAgE;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACpE,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAClG,CAAC;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IAC/E,IAAI,MAAM,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,qBAAqB,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClH,CAAC;IAED,8DAA8D;IAC9D,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,WAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,wDAAwD;IACxD,mCAAmC;IACnC,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,aAAa,EAAE,CAAC;QAClB,8DAA8D;QAC9D,gDAAgD;IAClD,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,sDAAsD;IACtD,qEAAqE;IACrE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QAC1C,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI;KAC5C,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC;IAEnG,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,mBAAmB,CAAC,GAAG,UAAU,CAAC;IAC3C,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,QAAgB,EAChB,OAA6B,EAC7B,SAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,mEAAmE;AACnE,kFAAkF;AAClF,kDAAkD;AAClD,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,QAAgB,EAChB,OAA6B,EAC7B,SAA+B,EAC/B,OAA8B,EAC9B,KAAa;IAEb,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,oEAAoE;QACpE,iBAAiB;QACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,gJAAgJ,CAAC,CAAC;IACzL,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,gDAAgD;QAChD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,6DAA6D;QAC7D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,gFAAgF;SACzF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,kEAAkE;IAClE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,qDAAqD;AACrD,SAAS,sBAAsB,CAAC,IAA+B;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/D,wEAAwE;IACxE,yCAAyC;IACzC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC"}