harveyz-skill 0.32.0 → 0.34.0

package/CHANGELOG.md

@@ -7,6 +7,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.34.0] - 2026-09-16
+
+### Added
+- `hskill` 双来源安装与粘性更新：`hskill update --local <路径>` 从本地仓库 `npm pack` 出 tarball 再全局安装（真实拷贝，走 `prepack` 与 `files[]` 白名单，等于在发 npm 前预演一次真实发布），`hskill update --npm` 切回 registry，裸 `hskill update` 沿用当前来源不跨轨道。此前 `update` 是一行硬编码的 `npm install -g harveyz-skill@latest`，手工装的本地版会被它静默替换掉且事后无从察觉。来源痕迹（`.hskill-source.json` + 版本号后缀 `+local`）只写在全局安装目录内，因而任何一次 `npm install -g`——包括绕过 hskill 的手工安装——都会自动抹掉它，"记录的来源"与"实际的来源"不可能分叉。`hskill version` 展示来源与 branch/commit，`version --check` 在本地来源下比对 commit 而非版本号（开发分支上版本号常常不动）。设计见 `docs/superpowers/specs/2026-09-15-hskill-install-source-design.md`
+- `agent-canvas` bundle：新增 `agent-canvas-control`、`capture-requirement`、`close-node`、`describe-node`、`relate-node`、`relation-review` 六个 skill，在 Agent Canvas 画布节点里操控节点实体、摆放画布、梳理节点间语义关系
+
+### Fixed
+- `hskill <任意子命令> --json` 在输出走管道时被截断：Node 写管道是异步的，而每个子命令块以 `process.exit()` 结尾，不等缓冲区排空。`status --json` 的输出刚随 agent-canvas 六个 skill 涨到 66,739 字节、越过 64KiB 管道缓冲区，于是 `hskill status --json | jq` 拿到退出码 0 和一段从字符串中间断掉的 JSON——**静默失败**，退出码还宣称成功。16 处 `--json` 出口统一改走等待写入落地的 `emitJson()`；回归测试逐字节比对管道输出与直接重定向输出，且在负载跌回缓冲区以下时显式 skip 而非假绿
+- `hskill version` / `hskill --version` 在 npm 不在 PATH 上时抛原始堆栈崩溃（cron、受限 PATH、精简镜像）：来源追踪让 `readSource()` 每次都经 `globalRoot()` 打一次 `npm root -g`，而它只兜住了 JSON 解析失败。现在 `globalRoot()` 的失败并入同一个 `null`，即回落到缺省的 npm 来源
+- `compareVersions()` 遇到 semver build metadata（`0.33.0+local`）会解析出 `NaN` 导致比较结果无意义，现按规范在比较前截断 `+` 及其后内容
+
+## [0.33.0] - 2026-09-15
+
+### Added
+- `store_config.py`（`learn-video`/`clip-url`/`sync-xtimeline`/`sync-ytchannel`/`sync-website` 共用）：新增 `check-downstream`，核对统一存储根的产物与 vdl / scholia 两个下游读取方是否同步，五份 SKILL.md 的前置检查步骤接入该核对
+
+### Changed
+- `handoff`（1.8.0 → 1.11.0）：新增 Phase 2.5 接手方自测闸门 + 打回复修回路（此前「接手方完工 → 待验收」这个状态转移毫无前置条件）；建工作区改为显式给基线分支并 `EnterWorktree(path:)` 进去，三方指令统一，修复了两次因裸 git 命令落到主工作树而夹带他人未合并提交的翻车；关闭 `using-git-worktrees` 前置调用（它会另起一个 `.worktrees/` 下的第二工作区，与 handoff 自己的工作区约定冲突）；平台专属指令（`EnterWorktree` 等 Claude Code harness 特性）拆进独立「平台适配」章节，避免 pi/hermes/Codex 上的接手方读到卡住
+- `publish-skill` 审计：`init-skill`（1.2.0→1.2.1）、`learn-skill`（2.0.0→2.0.1）、`research/survey-skillrepo`（2.0.1→2.0.2）——内容已变但 version 未 bump，属于 F8 硬性检查项，现已按 patch 补齐；另有 6 个 skill（`handoff`/`sync-website`/`sync-xtimeline`/`sync-ytchannel`/`clip-url`/`learn-video`）此前 version 已 bump 但 `skills-index.json` 里的 `contentHash` 记录没跟上，已同步
+
+### Fixed
+- `learn-video` / `clip-url` / `sync-xtimeline` / `sync-ytchannel` / `sync-website` 共用的 `knowledgeRoot` 默认建议路径从 `~/Documents/knowledge` 改为 `~/knowledge`：前者在无 Full Disk Access 的 agent 执行环境下写入会静默失败，且此前没有护栏阻止 agent 擅自把配置改到别的路径绕过，导致产物在用户不知情的情况下分裂到两个根目录；五份 SKILL.md 加"写入失败必须如实报告并停下问用户"的护栏指令
+- `tests/install.bats` / `tests/interactive.bats`：`survey-skillrepo` 测试夹具的硬编码版本号随上面的 F8 审计一并更新为 `2.0.2`，此前的 bump 一度导致 3 个断言失败
+
 ## [0.32.0] - 2026-09-07
 
 ### Added

package/bin/cli.js

@@ -2,7 +2,7 @@
 import { select, input, confirm } from '@inquirer/prompts'
 import chalk from 'chalk'
 import { execSync, spawnSync } from 'child_process'
-import { existsSync, writeFileSync, unlinkSync } from 'fs'
+import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdtempSync } from 'fs'
 import { createRequire } from 'module'
 import os from 'os'
 import path from 'path'
@@ -24,6 +24,16 @@ const args = process.argv.slice(2)
 const subcommand = args[0]
 const jsonFlag = args.includes('--json')
 
+// Writing to a pipe is asynchronous in Node, and process.exit() throws away
+// whatever is still buffered. Anything past the 64KiB pipe buffer was being cut
+// mid-string, so `hskill status --json | jq` got exit code 0 and unparseable
+// JSON. Every --json emitter goes through here, which resolves only once the
+// write has actually landed.
+async function emitJson(value) {
+  const text = JSON.stringify(value, null, 2) + '\n'
+  await new Promise(resolve => process.stdout.write(text, resolve))
+}
+
 // ── Help ─────────────────────────────────────────────────────────────────────
 function printHelp() {
   console.log(`
@@ -50,10 +60,12 @@ function printHelp() {
     hskill uninstall <tool>            uninstall a shell tool and clean up all files
     hskill uninstall <tool> --yes      skip all confirmations (incl. config files)
     hskill uninstall <skill> --scope <s> --target <t>  uninstall a skill
-    hskill update                  update hskill to the latest version
+    hskill update                  update hskill (sticky: refreshes from whichever source is installed)
+    hskill update --local <path>   switch to / refresh a local repo (npm pack + install)
+    hskill update --npm            switch back to npm registry
     hskill mcp                     start an MCP server (stdio) exposing hskill's tools to MCP-capable agent hosts
-    hskill version                 show version
-    hskill version --check         compare local version against npm registry (no install)
+    hskill version                 show version (adds source/branch/commit lines when installed from a local repo)
+    hskill version --check         compare against npm registry, or against the local source repo's HEAD
     hskill --help                  show this help
 
   ${chalk.cyan('Examples:')}
@@ -74,7 +86,7 @@ function printHelp() {
 
 if (args[0] === '--help' || args[0] === '-h') {
   if (jsonFlag || args.includes('--json')) {
-    console.log(JSON.stringify({
+    await emitJson({
       name: 'hskill',
       version,
       description: 'Skill manager for Claude Code, Cursor, Codex, OpenClaw, Hermes, OpenCode, and Pi',
@@ -138,7 +150,11 @@ if (args[0] === '--help' || args[0] === '-h') {
         },
         {
           name: 'update',
-          description: 'Update hskill to the latest version via npm',
+          description: 'Update hskill; sticky to whichever source (npm or local repo) is currently installed',
+          flags: [
+            { name: '--local', arg: '<path>', description: 'Switch to / refresh a local repo source (npm pack + install -g)' },
+            { name: '--npm',   description: 'Switch back to the npm registry source' },
+          ],
         },
         {
           name: 'mcp',
@@ -149,7 +165,7 @@ if (args[0] === '--help' || args[0] === '-h') {
           description: 'Print version and exit',
         },
       ],
-    }, null, 2))
+    })
     process.exit(0)
   }
   printHelp()
@@ -157,12 +173,37 @@ if (args[0] === '--help' || args[0] === '-h') {
 }
 
 if (args[0] === '--version' || args[0] === '-v' || subcommand === 'version') {
+  const { readSource, gitInfo } = await import('../lib/install-source.js')
+  const source = readSource()
+
   if (subcommand === 'version' && args.includes('--check')) {
+    if (source) {
+      let current
+      try {
+        current = gitInfo(source.repo)
+      } catch (err) {
+        console.error(chalk.red(`  ✗ Could not read local source repo: ${err.message}`))
+        process.exit(1)
+      }
+      const upToDate = current.commit === source.commit && !current.dirty
+      if (jsonFlag) {
+        await emitJson({ source: 'local', repo: source.repo, installedCommit: source.commit, currentCommit: current.commit, dirty: current.dirty, upToDate })
+      } else if (upToDate) {
+        console.log(chalk.green(`  ✔ hskill is up to date with local source (${source.repo}@${current.commit})`))
+      } else if (current.commit !== source.commit) {
+        console.log(chalk.yellow(`  ⚠ local source has new commits: ${source.commit} → ${current.commit}`))
+        console.log(chalk.dim('  Run: hskill update'))
+      } else {
+        console.log(chalk.yellow('  ⚠ local source has uncommitted changes not yet packed'))
+        console.log(chalk.dim('  Run: hskill update'))
+      }
+      process.exit(0)
+    }
     try {
       const { checkNpmVersion } = await import('../lib/version-check.js')
       const { current, latest, upToDate } = await checkNpmVersion('harveyz-skill', version)
       if (jsonFlag) {
-        console.log(JSON.stringify({ current, latest, upToDate }, null, 2))
+        await emitJson({ current, latest, upToDate })
       } else if (upToDate) {
         console.log(chalk.green(`  ✔ hskill v${current} is up to date`))
       } else {
@@ -176,6 +217,11 @@ if (args[0] === '--version' || args[0] === '-v' || subcommand === 'version') {
     process.exit(0)
   }
   console.log(version)
+  if (source) {
+    console.log('')
+    console.log(`source: local  ${source.repo}`)
+    console.log(`branch: ${source.branch}  commit: ${source.commit}${source.dirty ? ' (dirty)' : ''}`)
+  }
   process.exit(0)
 }
 
@@ -223,15 +269,112 @@ async function checkArchivedInstalls() {
 }
 
 // ── Update ───────────────────────────────────────────────────────────────────
-if (subcommand === 'update') {
+// Sticky: whichever source is currently installed (recorded in .hskill-source.json
+// inside the global install dir) is what a bare `update` refreshes from. `--local`
+// and `--npm` explicitly switch the source. See docs/superpowers/specs/2026-09-15-hskill-install-source-design.md
+async function updateToNpm(priorSource) {
   console.log(chalk.dim('  · Updating hskill…'))
   try {
     execSync('npm install -g harveyz-skill@latest', { stdio: 'inherit' })
-    console.log(chalk.green('  ✔ hskill updated'))
   } catch {
     console.error(chalk.red('  ✗ Update failed. Try: npm install -g harveyz-skill@latest'))
     process.exit(1)
   }
+  if (priorSource) {
+    const { globalRoot } = await import('../lib/install-source.js')
+    const newVersion = JSON.parse(readFileSync(path.join(globalRoot(), 'harveyz-skill', 'package.json'), 'utf8')).version
+    console.log(`  ${priorSource.version}+local (${priorSource.branch}@${priorSource.commit}) → ${newVersion} (npm)`)
+  }
+  console.log(chalk.green('  ✔ hskill updated'))
+}
+
+async function updateToLocal(repoPath, priorSource) {
+  if (!existsSync(repoPath)) {
+    console.error(chalk.red(`  ✗ 本地来源仓库不存在：${repoPath}`))
+    console.error(chalk.dim('    改用 npm：   hskill update --npm'))
+    console.error(chalk.dim(`    指向新路径： hskill update --local <新路径>`))
+    process.exit(1)
+  }
+
+  const { gitInfo, writeSource, globalRoot } = await import('../lib/install-source.js')
+  // git info must be collected before `npm pack` — its `prepack` hook rewrites
+  // the tracked .npmignore, which would otherwise poison the dirty check.
+  const info = gitInfo(repoPath)
+  const origVersion = JSON.parse(readFileSync(path.join(repoPath, 'package.json'), 'utf8')).version
+
+  console.log(chalk.dim('  · Packing local repo…'))
+  const tmpDir = mkdtempSync(path.join(os.tmpdir(), 'hskill-pack-'))
+  const packResult = spawnSync('npm', ['pack', '--pack-destination', tmpDir], { cwd: repoPath, encoding: 'utf8' })
+  if (packResult.status !== 0) {
+    console.error(chalk.red('  ✗ npm pack failed'))
+    process.exit(1)
+  }
+  const tarballName = packResult.stdout.trim().split('\n').pop()
+
+  console.log(chalk.dim('  · Installing packed tarball…'))
+  const installResult = spawnSync('npm', ['install', '-g', path.join(tmpDir, tarballName)], { stdio: 'inherit' })
+  if (installResult.status !== 0) {
+    console.error(chalk.red('  ✗ Install failed'))
+    process.exit(1)
+  }
+
+  const installedPkgPath = path.join(globalRoot(), 'harveyz-skill', 'package.json')
+  const installedPkg = JSON.parse(readFileSync(installedPkgPath, 'utf8'))
+  installedPkg.version = `${origVersion}+local`
+  writeFileSync(installedPkgPath, JSON.stringify(installedPkg, null, 2) + '\n')
+
+  writeSource({
+    repo: repoPath,
+    branch: info.branch,
+    commit: info.commit,
+    dirty: info.dirty,
+    version: origVersion,
+    installedAt: new Date().toISOString(),
+  })
+
+  if (priorSource === null) {
+    console.log(`  ${version} (npm) → ${origVersion}+local (${info.branch}@${info.commit})`)
+  } else if (priorSource.repo !== repoPath) {
+    console.log(`  ${priorSource.version}+local (${priorSource.branch}@${priorSource.commit}) → ${origVersion}+local (${info.branch}@${info.commit})`)
+  }
+
+  const npmignoreStatus = execSync('git status --porcelain -- .npmignore', { cwd: repoPath, encoding: 'utf8' }).trim()
+  if (npmignoreStatus) {
+    console.log(chalk.dim('  · .npmignore changed by prepack — left as-is, review with `git diff .npmignore`'))
+  }
+
+  console.log(chalk.green('  ✔ hskill updated'))
+}
+
+if (subcommand === 'update') {
+  const updateArgs = args.slice(1)
+  const localIdx   = updateArgs.indexOf('--local')
+  const npmFlag    = updateArgs.includes('--npm')
+  const localGiven = localIdx !== -1
+  const localPath  = localGiven ? updateArgs[localIdx + 1] : undefined
+
+  if (localGiven && npmFlag) {
+    console.error(chalk.red('  ✗ --local and --npm are mutually exclusive'))
+    process.exit(1)
+  }
+  if (localGiven && (!localPath || localPath.startsWith('--'))) {
+    console.error(chalk.red('  ✗ --local requires a path: hskill update --local <path>'))
+    process.exit(1)
+  }
+
+  const { readSource } = await import('../lib/install-source.js')
+  const priorSource = readSource()
+
+  if (npmFlag) {
+    await updateToNpm(priorSource)
+  } else if (localGiven) {
+    await updateToLocal(localPath, priorSource)
+  } else if (priorSource) {
+    await updateToLocal(priorSource.repo, priorSource)
+  } else {
+    await updateToNpm(priorSource)
+  }
+
   // Run skill rename migrations
   const { renames = [], skills: skillDefs = [] } = require('../skills-index.json')
   if (renames.length > 0) {
@@ -276,10 +419,10 @@ if (subcommand === 'list') {
   const { skills, tools = [] } = require('../skills-index.json')
   const sorted = [...skills].sort((a, b) => a.bundle.localeCompare(b.bundle) || a.path.split('/').pop().localeCompare(b.path.split('/').pop()))
   if (jsonFlag) {
-    console.log(JSON.stringify({
+    await emitJson({
       skills: sorted.map(s => ({ name: s.path.split('/').pop(), path: s.path, bundle: s.bundle, global: s.global ?? false })),
       tools: tools.map(t => t.name),
-    }, null, 2))
+    })
     process.exit(0)
   }
   const nw = Math.max(...sorted.map(s => s.path.split('/').pop().length), 4)
@@ -380,12 +523,12 @@ if (subcommand === 'status' || subcommand === 'outdated') {
       return { name: h.name, description: h.description, user: inst.user, project: inst.project }
     })
     if (outdatedOnly) {
-      console.log(JSON.stringify({
+      await emitJson({
         skills: jsonSkills.filter(s => Object.values(s.user).some(v => v.status === 'update') || Object.values(s.project).some(v => v.status === 'update')),
         tools:  jsonTools.filter(t => t.status === 'update'),
-      }, null, 2))
+      })
     } else {
-      console.log(JSON.stringify({ skills: jsonSkills, tools: jsonTools, hooks: jsonHooks }, null, 2))
+      await emitJson({ skills: jsonSkills, tools: jsonTools, hooks: jsonHooks })
     }
     process.exit(0)
   }
@@ -513,17 +656,17 @@ if (subcommand === 'info') {
   if (jsonFlag) {
     if (skill) {
       const inst = checkInstalled(skill.skillName, skill.version ?? '—')
-      console.log(JSON.stringify({
+      await emitJson({
         name: skill.skillName, type: 'skill', version: skill.version ?? '—',
         user:    Object.fromEntries(targets.map(t => [t, inst.user[t]])),
         project: Object.fromEntries(targets.map(t => [t, inst.project[t]])),
-      }, null, 2))
+      })
     } else {
       const inst = checkToolInstalled(tool.toolName, tool.srcPath)
-      console.log(JSON.stringify({
+      await emitJson({
         name: tool.toolName, type: 'tool', version: tool.version ?? '—',
         installed: inst,
-      }, null, 2))
+      })
     }
     process.exit(0)
   }
@@ -590,7 +733,7 @@ if (subcommand === 'uninstall') {
     const { removed, failed } = await uninstallTool(nameToRemove, { yes: yesFlag })
     if (jsonFlag) {
       console.error = originalError
-      console.log(JSON.stringify({ removed: removed.length > 0, failed: failed.length > 0 }, null, 2))
+      await emitJson({ removed: removed.length > 0, failed: failed.length > 0 })
     } else if (removed.length > 0) {
       console.error(chalk.green.bold(`✔ ${nameToRemove} uninstalled`))
     }
@@ -617,7 +760,7 @@ if (subcommand === 'uninstall') {
   }
   if (jsonFlag) {
     console.error = originalError2
-    console.log(JSON.stringify({ removed: anyRemoved, failed: anyFailed }, null, 2))
+    await emitJson({ removed: anyRemoved, failed: anyFailed })
   } else if (anyRemoved) {
     console.error(chalk.green.bold(`✔ ${nameToRemove} uninstalled`))
   }
@@ -663,7 +806,7 @@ if (subcommand === 'hooks') {
           codex: inst.codex,
         }
       })
-      console.log(JSON.stringify({ hooks: out }, null, 2))
+      await emitJson({ hooks: out })
       process.exit(0)
     }
     function hookIcon(s) {
@@ -724,7 +867,7 @@ if (subcommand === 'hooks') {
     const { installed, skipped, failed } = await installHooksForTarget(toInstall, hookTargetArg, hookScopeArg, hookProjectArg, hookForce)
 
     if (hookJsonFlag) {
-      console.log(JSON.stringify({ installed, skipped, failed }, null, 2))
+      await emitJson({ installed, skipped, failed })
       process.exit(failed.length ? 1 : 0)
     } else {
       if (installed.length) console.error(chalk.green.bold(`✔ Hooks installed (${hookScopeArg}):`), installed.join(', '))
@@ -746,7 +889,7 @@ if (subcommand === 'hooks') {
     }
     const { removed } = await uninstallHook(nameToRemove, hookScopeArg, hookProjectArg)
     if (hookJsonFlag) {
-      console.log(JSON.stringify({ removed }, null, 2))
+      await emitJson({ removed })
     } else if (!removed) {
       console.log(chalk.dim(`  · ${nameToRemove} was not installed in ${hookScopeArg} scope`))
     }
@@ -798,9 +941,9 @@ if (subcommand === 'upgrade') {
   const nothingUpgraded = Object.keys(summary).length === 0
   if (jsonFlag) {
     if (nothingUpgraded) {
-      console.log(JSON.stringify({ skills: {}, upToDate: true }, null, 2))
+      await emitJson({ skills: {}, upToDate: true })
     } else {
-      console.log(JSON.stringify({ skills: summary }, null, 2))
+      await emitJson({ skills: summary })
     }
   } else {
     if (nothingUpgraded) {
@@ -1512,7 +1655,7 @@ try {
     const out = {}
     if (skillSummary !== null) out.skills = skillSummary
     if (toolSummary  !== null) out.tools  = toolSummary
-    console.log(JSON.stringify(out, null, 2))
+    await emitJson(out)
   } else {
     printSummary(skillSummary, toolSummary)
   }

package/lib/install-source.js

@@ -0,0 +1,46 @@
+import { execSync } from 'child_process'
+import { existsSync, readFileSync, writeFileSync } from 'fs'
+import path from 'path'
+
+let cachedGlobalRoot = null
+
+export function globalRoot() {
+  if (process.env.HSKILL_GLOBAL_ROOT) return process.env.HSKILL_GLOBAL_ROOT
+  // stdio 'pipe' keeps npm's own stderr off ours: callers that tolerate failure
+  // (readSource) would otherwise leak "npm: command not found" into clean output.
+  if (!cachedGlobalRoot) cachedGlobalRoot = execSync('npm root -g', { encoding: 'utf8', stdio: 'pipe' }).trim()
+  return cachedGlobalRoot
+}
+
+function sourceFilePath() {
+  return path.join(globalRoot(), 'harveyz-skill', '.hskill-source.json')
+}
+
+// null means "npm source" — the default. An unreadable trace file and an
+// unreachable npm both collapse into it: `version` must keep working where npm
+// is off PATH, and a source we cannot read is not a source we can update from.
+export function readSource() {
+  let file
+  try {
+    file = sourceFilePath()
+  } catch {
+    return null
+  }
+  if (!existsSync(file)) return null
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'))
+  } catch {
+    return null
+  }
+}
+
+export function writeSource(info) {
+  writeFileSync(sourceFilePath(), JSON.stringify(info, null, 2) + '\n')
+}
+
+export function gitInfo(repo) {
+  const branch = execSync('git rev-parse --abbrev-ref HEAD', { cwd: repo, encoding: 'utf8' }).trim()
+  const commit = execSync('git rev-parse --short HEAD', { cwd: repo, encoding: 'utf8' }).trim()
+  const dirty = execSync('git status --porcelain', { cwd: repo, encoding: 'utf8' }).trim().length > 0
+  return { branch, commit, dirty }
+}

package/lib/version-check.js

@@ -2,8 +2,8 @@ const DEFAULT_REGISTRY = 'https://registry.npmjs.org'
 const REGISTRY_TIMEOUT_MS = 5000
 
 export function compareVersions(a, b) {
-  const pa = a.split('.').map(Number)
-  const pb = b.split('.').map(Number)
+  const pa = a.split('+')[0].split('.').map(Number)
+  const pb = b.split('+')[0].split('.').map(Number)
   for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
     const diff = (pa[i] || 0) - (pb[i] || 0)
     if (diff !== 0) return diff

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harveyz-skill",
-  "version": "0.32.0",
+  "version": "0.34.0",
   "description": "Skill manager for Claude Code, Cursor, Codex, OpenClaw, Hermes, OpenCode, and Pi",
   "type": "module",
   "bin": {
@@ -62,6 +62,12 @@
     "skills/coding/handoff/",
     "skills/feed/manage-creators/",
     "skills/feed/capture-opinion/",
+    "skills/agent-canvas/agent-canvas-control/",
+    "skills/agent-canvas/describe-node/",
+    "skills/agent-canvas/relate-node/",
+    "skills/agent-canvas/capture-requirement/",
+    "skills/agent-canvas/relation-review/",
+    "skills/agent-canvas/close-node/",
     "tools/hub/",
     "tools/sync-agent/",
     "tools/browser-fetch/",