mewkit 1.13.0 → 1.14.1

package/dist/migrate/state-changing-script-detector.js

@@ -0,0 +1,144 @@
+// Conservative detector for state-changing commands inside a migrated executable
+// script. Used by the fail-closed script policy: a script that both (a) contains a
+// state-changing command AND (b) carries a Claude-runtime coupling match stays
+// FAIL-CLOSED — a rewrite path never downgrades it.
+//
+// SECURITY: this detector is deliberately over-inclusive within each language. A
+// false positive keeps a harmless script fail-closed (safe, escalated with
+// evidence); a false negative would let a destructive script downgrade to a
+// warning (unsafe). It is scoped by language so a numeric comparison (`x > 100`) in
+// a Python/JS file is not mistaken for a shell redirect — that scoping removes a
+// large false-positive class WITHOUT weakening detection of real writes, which in
+// those languages use explicit APIs (open('w'), writeFileSync, os.remove, ...).
+// Content is DATA — pattern-matched here, never executed and never used to build
+// any output.
+import { extname } from "node:path";
+/** Cross-language state-changing commands (invoked via a shell in any script). */
+const COMMON_PATTERNS = [
+    // Destructive filesystem removal (word-boundary rm, with a flag or path arg).
+    { pattern: /(^|[;&|(]|\bsudo\s+|&&\s*|\|\|\s*)\brm\s+-|\brm\s+["'$]/m, reason: "runs rm (filesystem delete)" },
+    { pattern: /\brmdir\b/, reason: "runs rmdir" },
+    // Remote-mutating git.
+    { pattern: /\bgit\s+push\b/, reason: "runs git push" },
+    // Mutating HTTP verbs.
+    { pattern: /\bcurl\b[^\n]*\s-X\s*(POST|PUT|DELETE|PATCH)\b/i, reason: "issues a mutating HTTP request (curl -X)" },
+    { pattern: /\bcurl\b[^\n]*--request\s*(POST|PUT|DELETE|PATCH)\b/i, reason: "issues a mutating HTTP request (curl --request)" },
+    { pattern: /\bwget\b[^\n]*--method=(POST|PUT|DELETE|PATCH)\b/i, reason: "issues a mutating HTTP request (wget --method)" },
+    // Security-sensitive env mutation: export/unset of a credential/secret var.
+    {
+        pattern: /\b(export|unset)\s+[A-Z0-9_]*(TOKEN|SECRET|KEY|PASSWORD|CREDENTIAL|API)[A-Z0-9_]*/,
+        reason: "exports/unsets a security-sensitive environment variable",
+    },
+];
+// Shell file-write via redirection. This is line-based instead of a single regex
+// so it can (a) skip comment lines and (b) ignore `>` that lives inside a quoted
+// string (e.g. an embedded awk body `'if (x > 0)'`). A real redirect is `>`/`>>`
+// followed by a filename target, excluding fd redirects (`2>&1`, `>&2`) and the
+// comparison/arrow operators (`>=`, `->`, `=>`). Reduces the large false-positive
+// class of usage-comment arrows and quoted comparisons WITHOUT missing real writes.
+function shellWritesViaRedirection(content) {
+    for (const rawLine of content.split("\n")) {
+        // Strip a leading-comment line entirely.
+        const trimmed = rawLine.replace(/^\s+/, "");
+        if (trimmed.startsWith("#"))
+            continue;
+        // Collapse quoted regions to a single placeholder token `Q` so a `>` INSIDE a
+        // string (awk body `'if (x > 0)'`) disappears, but a quoted redirect TARGET
+        // (`> "$file"` → `> Q`) is still recognized as a write target.
+        const unquoted = rawLine.replace(/'[^']*'/g, "Q").replace(/"[^"]*"/g, "Q");
+        // Drop an inline comment tail (best-effort — after quote collapse).
+        const code = unquoted.replace(/#.*$/, "");
+        // Remove `<placeholder>` angle-bracket tokens (usage text like `<rubric.md>`),
+        // which are never real redirects; then discard non-file redirect targets
+        // (`>/dev/null`, `>&2`, `> /dev/stderr`).
+        const withoutDiscards = code
+            .replace(/<[^<>\s][^<>]*>/g, "")
+            .replace(/>>?\s*&?\s*\/?dev\/\w+/g, "")
+            .replace(/>>?\s*&\s*\d/g, "");
+        // A real file-writing redirect: `>`/`>>` not part of an fd/compare/arrow
+        // operator, followed by a filename target (quote, $var, path, or word) — but
+        // NOT a bare number (`> 0` is an awk/test comparison, not a redirect).
+        if (/(^|[^0-9&<>=!$-])>>?(?![>=&])\s*(?![0-9]+\b)[$A-Za-z0-9_./~-]/.test(withoutDiscards))
+            return true;
+    }
+    return false;
+}
+const PYTHON_PATTERNS = [
+    { pattern: /\bopen\s*\([^)]*,\s*["'][wax]\+?b?["']/, reason: "opens a file for writing (Python)" },
+    { pattern: /\.write_text\s*\(|\.write_bytes\s*\(/, reason: "writes a file (Python pathlib)" },
+    { pattern: /\bos\.remove\b|\bos\.unlink\b|\bshutil\.rmtree\b|\bos\.rmdir\b/, reason: "removes files (Python)" },
+    { pattern: /\bos\.makedirs\b|\bos\.mkdir\b|\.mkdir\s*\(/, reason: "creates directories (Python)" },
+];
+const NODE_PATTERNS = [
+    {
+        pattern: /\b(writeFile|writeFileSync|appendFile|appendFileSync|rmSync|unlink|unlinkSync|mkdirSync)\s*\(/,
+        reason: "writes/removes files (Node fs)",
+    },
+    { pattern: /\bfs\.rm\s*\(/, reason: "removes files (Node fs)" },
+];
+export function languageFor(filePath) {
+    switch (extname(filePath).toLowerCase()) {
+        case ".sh":
+            return "shell";
+        case ".py":
+            return "python";
+        case ".js":
+        case ".cjs":
+        case ".mjs":
+        case ".ts":
+        case ".tsx":
+            return "node";
+        default:
+            return "unknown";
+    }
+}
+/** Strip comment lines + inline comments so a mention in a comment is not a match. */
+function stripComments(content, language) {
+    const lineComment = language === "node" ? "//" : "#";
+    return content
+        .split("\n")
+        .map((raw) => {
+        const trimmed = raw.replace(/^\s+/, "");
+        if (trimmed.startsWith(lineComment))
+            return "";
+        // Best-effort inline-comment strip after removing quoted regions so a `#`/`//`
+        // inside a string is not treated as a comment start.
+        const unquoted = raw.replace(/'[^']*'/g, "''").replace(/"[^"]*"/g, '""');
+        const idx = unquoted.indexOf(lineComment);
+        return idx >= 0 ? raw.slice(0, idx) : raw;
+    })
+        .join("\n");
+}
+/**
+ * Report whether `content` contains a state-changing command. `language` scopes the
+ * language-specific rules; omit it (or pass "unknown") to apply ALL rules — the
+ * most conservative choice. Comment lines and (for shell command patterns) quoted
+ * strings are excluded so a mention in a comment/string is not a false positive.
+ * `content` is DATA: matched, never executed.
+ */
+export function detectStateChanging(content, language = "unknown") {
+    const code = stripComments(content, language);
+    // Shell command patterns (rm/git/curl/export) — also strip quoted strings so a
+    // command name mentioned inside a string literal is not a match.
+    const shellCode = code.replace(/'[^']*'/g, "''").replace(/"[^"]*"/g, '""');
+    for (const { pattern, reason } of COMMON_PATTERNS) {
+        if (pattern.test(shellCode))
+            return { stateChanging: true, reason };
+    }
+    // Language file-write APIs — need argument quotes preserved (e.g. open(..,'w')).
+    if (language === "python" || language === "unknown") {
+        for (const { pattern, reason } of PYTHON_PATTERNS)
+            if (pattern.test(code))
+                return { stateChanging: true, reason };
+    }
+    if (language === "node" || language === "unknown") {
+        for (const { pattern, reason } of NODE_PATTERNS)
+            if (pattern.test(code))
+                return { stateChanging: true, reason };
+    }
+    if ((language === "shell" || language === "unknown") && shellWritesViaRedirection(code)) {
+        return { stateChanging: true, reason: "writes files via redirection" };
+    }
+    return { stateChanging: false };
+}
+//# sourceMappingURL=state-changing-script-detector.js.map

package/dist/migrate/state-changing-script-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-changing-script-detector.js","sourceRoot":"","sources":["../../src/migrate/state-changing-script-detector.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,4EAA4E;AAC5E,oFAAoF;AACpF,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,iFAAiF;AACjF,cAAc;AAEd,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,kFAAkF;AAClF,MAAM,eAAe,GAAuD;IAC3E,8EAA8E;IAC9E,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,6BAA6B,EAAE;IAC9G,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE;IAC9C,uBAAuB;IACvB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE;IACtD,uBAAuB;IACvB,EAAE,OAAO,EAAE,iDAAiD,EAAE,MAAM,EAAE,0CAA0C,EAAE;IAClH,EAAE,OAAO,EAAE,sDAAsD,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAC9H,EAAE,OAAO,EAAE,mDAAmD,EAAE,MAAM,EAAE,gDAAgD,EAAE;IAC1H,4EAA4E;IAC5E;QACC,OAAO,EAAE,mFAAmF;QAC5F,MAAM,EAAE,0DAA0D;KAClE;CACD,CAAC;AAEF,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,oFAAoF;AACpF,SAAS,yBAAyB,CAAC,OAAe;IACjD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,yCAAyC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,8EAA8E;QAC9E,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3E,oEAAoE;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,+EAA+E;QAC/E,yEAAyE;QACzE,0CAA0C;QAC1C,MAAM,eAAe,GAAG,IAAI;aAC1B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;aAC/B,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;aACtC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC/B,yEAAyE;QACzE,6EAA6E;QAC7E,uEAAuE;QACvE,IAAI,+DAA+D,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;IACxG,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAuD;IAC3E,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,mCAAmC,EAAE;IAClG,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,gCAAgC,EAAE;IAC7F,EAAE,OAAO,EAAE,gEAAgE,EAAE,MAAM,EAAE,wBAAwB,EAAE;IAC/G,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,8BAA8B,EAAE;CAClG,CAAC;AAEF,MAAM,aAAa,GAAuD;IACzE;QACC,OAAO,EAAE,+FAA+F;QACxG,MAAM,EAAE,gCAAgC;KACxC;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,yBAAyB,EAAE;CAC/D,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC3C,QAAQ,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACzC,KAAK,KAAK;YACT,OAAO,OAAO,CAAC;QAChB,KAAK,KAAK;YACT,OAAO,QAAQ,CAAC;QACjB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACV,OAAO,MAAM,CAAC;QACf;YACC,OAAO,SAAS,CAAC;IACnB,CAAC;AACF,CAAC;AAQD,sFAAsF;AACtF,SAAS,aAAa,CAAC,OAAe,EAAE,QAAwB;IAC/D,MAAM,WAAW,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,OAAO;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/C,+EAA+E;QAC/E,qDAAqD;QACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,WAA2B,SAAS;IACxF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9C,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC3E,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrE,CAAC;IAED,iFAAiF;IACjF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACrD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,eAAe;YAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnH,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,aAAa;YAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjH,CAAC;IAED,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC"}

package/dist/migrate/types.d.ts

@@ -54,6 +54,8 @@ export interface ConversionResult {
     filename: string;
     warnings: string[];
     error?: string;
+    /** Classified source-reference decisions made while converting (report layer input) */
+    occurrences?: import("./references/reference-types.js").ReferenceOccurrence[];
 }
 /** Result of installing a portable item to a provider */
 export interface PortableInstallResult {
@@ -111,44 +113,52 @@ export declare const MigrateOptionsSchema: z.ZodObject<{
     respectDeletions: z.ZodOptional<z.ZodBoolean>;
     sourceVersion: z.ZodOptional<z.ZodString>;
     providers: z.ZodOptional<z.ZodBoolean>;
+    /** Merge ALL rules into the provider instruction file, bypassing the portability filter */
+    allRules: z.ZodOptional<z.ZodBoolean>;
+    /** Opt-in: convert .mcp.json server definitions into the provider MCP config */
+    includeMcp: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    force?: boolean | undefined;
+    providers?: boolean | undefined;
+    source?: string | undefined;
     tool?: string | undefined;
-    install?: boolean | undefined;
+    global?: boolean | undefined;
     tools?: string[] | undefined;
     all?: boolean | undefined;
-    global?: boolean | undefined;
     yes?: boolean | undefined;
     dryRun?: boolean | undefined;
-    source?: string | undefined;
+    force?: boolean | undefined;
     only?: string | undefined;
     skipConfig?: boolean | undefined;
     skipRules?: boolean | undefined;
     skipHooks?: boolean | undefined;
+    install?: boolean | undefined;
     reconcile?: boolean | undefined;
     reinstallEmptyDirs?: boolean | undefined;
     respectDeletions?: boolean | undefined;
     sourceVersion?: string | undefined;
-    providers?: boolean | undefined;
+    allRules?: boolean | undefined;
+    includeMcp?: boolean | undefined;
 }, {
-    force?: boolean | undefined;
+    providers?: boolean | undefined;
+    source?: string | undefined;
     tool?: string | undefined;
-    install?: boolean | undefined;
+    global?: boolean | undefined;
     tools?: string[] | undefined;
     all?: boolean | undefined;
-    global?: boolean | undefined;
     yes?: boolean | undefined;
     dryRun?: boolean | undefined;
-    source?: string | undefined;
+    force?: boolean | undefined;
     only?: string | undefined;
     skipConfig?: boolean | undefined;
     skipRules?: boolean | undefined;
     skipHooks?: boolean | undefined;
+    install?: boolean | undefined;
     reconcile?: boolean | undefined;
     reinstallEmptyDirs?: boolean | undefined;
     respectDeletions?: boolean | undefined;
     sourceVersion?: string | undefined;
-    providers?: boolean | undefined;
+    allRules?: boolean | undefined;
+    includeMcp?: boolean | undefined;
 }>;
 export type MigrateOptions = z.infer<typeof MigrateOptionsSchema>;
 //# sourceMappingURL=types.d.ts.map

package/dist/migrate/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/migrate/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4BAA4B;AAC5B,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAExF,kDAAkD;AAClD,eAAO,MAAM,YAAY,4LAiBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAChF,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,sBAAsB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IACF,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B;AAKD,YAAY,EACX,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,cAAc,GACd,MAAM,sCAAsC,CAAC;AAE9C,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,oCAAoC;AACpC,MAAM,WAAW,sBAAsB;IACtC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,YAAY,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC;CACpC;AAED,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACzB,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,yCAAyC;AACzC,eAAO,MAAM,oBAAoB;;IAEhC,+FAA+F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkB9F,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/migrate/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4BAA4B;AAC5B,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAExF,kDAAkD;AAClD,eAAO,MAAM,YAAY,4LAiBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAChF,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,sBAAsB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IACF,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B;AAKD,YAAY,EACX,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,cAAc,GACd,MAAM,sCAAsC,CAAC;AAE9C,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,oCAAoC;AACpC,MAAM,WAAW,sBAAsB;IACtC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,WAAW,CAAC,EAAE,OAAO,iCAAiC,EAAE,mBAAmB,EAAE,CAAC;CAC9E;AAED,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,YAAY,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC;CACpC;AAED,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACzB,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,yCAAyC;AACzC,eAAO,MAAM,oBAAoB;;IAEhC,+FAA+F;;;;;;;;;;;;;;;;;;IAkB/F,2FAA2F;;IAE3F,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE/E,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/migrate/types.js

@@ -41,5 +41,9 @@ export const MigrateOptionsSchema = z.object({
     respectDeletions: z.boolean().optional(),
     sourceVersion: z.string().optional(),
     providers: z.boolean().optional(),
+    /** Merge ALL rules into the provider instruction file, bypassing the portability filter */
+    allRules: z.boolean().optional(),
+    /** Opt-in: convert .mcp.json server definitions into the provider MCP config */
+    includeMcp: z.boolean().optional(),
 });
 //# sourceMappingURL=types.js.map

package/dist/migrate/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/migrate/types.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oFAAoF;AACpF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,OAAO;IACP,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,UAAU;IACV,OAAO;IACP,WAAW;CACX,CAAC,CAAC;AA4GH,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+FAA+F;IAC/F,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/migrate/types.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oFAAoF;AACpF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,OAAO;IACP,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,UAAU;IACV,OAAO;IACP,WAAW;CACX,CAAC,CAAC;AA8GH,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+FAA+F;IAC/F,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,2FAA2F;IAC3F,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,gFAAgF;IAChF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC"}

package/dist/migrate/validation/migrate-conversion-report.d.ts

@@ -0,0 +1,48 @@
+import { type ReferenceIntegrityIndex } from "../references/fence-aware-reference-rewriter.js";
+import type { ReferenceOccurrence } from "../references/reference-types.js";
+import type { ReconcileAction } from "../reconcile/reconcile-types.js";
+import type { PortableItem, PortableType, ProviderType, SkillInfo } from "../types.js";
+import type { MigrationDecisionRecord } from "./migration-record-types.js";
+/**
+ * Run-ledger: an append-only accumulator of per-artifact decision records emitted
+ * across the migration run (Phase 1 reference occurrences, Phase 2 hook decisions,
+ * Phase 3 skill audit/waiver decisions, plus the orchestrator's install outcomes).
+ * The Phase 6 report writer serializes this ledger into `migration-report.{json,md}`.
+ *
+ * This is purely additive to the existing preflight `ConversionReport` — the
+ * preflight builder is unchanged; the ledger is the new run-time collection point.
+ */
+export declare class MigrationLedger {
+    private readonly records;
+    /** Append one decision record (no-op for null/undefined). */
+    add(record: MigrationDecisionRecord | null | undefined): void;
+    /** Append many decision records; null/undefined entries are ignored. */
+    addAll(records: readonly (MigrationDecisionRecord | null | undefined)[] | undefined): void;
+    /** Snapshot of every decision recorded so far (defensive copy). */
+    all(): MigrationDecisionRecord[];
+    get size(): number;
+}
+export interface ConversionReport {
+    /** Preserved-with-warning references: "file:line — ref (reason)" */
+    warnedReferences: string[];
+    /** Unique converter warnings (unsupported concepts, manual adaptations, ...) */
+    conversionWarnings: string[];
+    /** Projected merged-instruction-file budget status lines */
+    budgetLines: string[];
+    /** Internal invariant violations from the unresolved-reference scanner */
+    validationErrors: string[];
+    /**
+     * Raw preserved-with-warning occurrences (file/line/original/reason), for the
+     * run-report ledger. Additive: the preflight printer reads `warnedReferences`;
+     * this field lets the ledger attach concrete file:line:pattern detail per
+     * artifact. The `.env` reason is reclassified downstream via classifyEnvReference.
+     */
+    preservedOccurrences: ReferenceOccurrence[];
+}
+export declare function buildConversionReport(input: {
+    actions: ReconcileAction[];
+    itemsByType: Record<PortableType, PortableItem[]>;
+    skillsByProvider: Map<ProviderType, SkillInfo[]>;
+    migratedRefs: ReferenceIntegrityIndex;
+}): ConversionReport;
+//# sourceMappingURL=migrate-conversion-report.d.ts.map

package/dist/migrate/validation/migrate-conversion-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-conversion-report.d.ts","sourceRoot":"","sources":["../../../src/migrate/validation/migrate-conversion-report.ts"],"names":[],"mappings":"AAUA,OAAO,EAIN,KAAK,uBAAuB,EAC5B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAG3E;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,6DAA6D;IAC7D,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAI7D,wEAAwE;IACxE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GAAG,IAAI;IAK1F,mEAAmE;IACnE,GAAG,IAAI,uBAAuB,EAAE;IAIhC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACD;AAED,MAAM,WAAW,gBAAgB;IAChC,oEAAoE;IACpE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gFAAgF;IAChF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,4DAA4D;IAC5D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;CAC5C;AAqBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IAClD,gBAAgB,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,YAAY,EAAE,uBAAuB,CAAC;CACtC,GAAG,gBAAgB,CAqFnB"}

package/dist/migrate/validation/migrate-conversion-report.js

@@ -0,0 +1,146 @@
+// Builds the pre-install conversion report: converts every planned item
+// in-memory (plus portable skill markdown), aggregates classifier decisions,
+// and runs the unresolved-reference scanner. Console/in-memory only — nothing
+// here writes into the target project.
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join, relative } from "node:path";
+import { convertItem } from "../converters/index.js";
+import { providers } from "../provider-registry.js";
+import { codexBudgetRaiseGuidance } from "../portable-installer.js";
+import { combineIntegrityIndexes, createReferenceIntegrityIndex, rewriteSourceReferences, } from "../references/fence-aware-reference-rewriter.js";
+import { scanUnresolvedReferences } from "./unresolved-reference-scanner.js";
+/**
+ * Run-ledger: an append-only accumulator of per-artifact decision records emitted
+ * across the migration run (Phase 1 reference occurrences, Phase 2 hook decisions,
+ * Phase 3 skill audit/waiver decisions, plus the orchestrator's install outcomes).
+ * The Phase 6 report writer serializes this ledger into `migration-report.{json,md}`.
+ *
+ * This is purely additive to the existing preflight `ConversionReport` — the
+ * preflight builder is unchanged; the ledger is the new run-time collection point.
+ */
+export class MigrationLedger {
+    records = [];
+    /** Append one decision record (no-op for null/undefined). */
+    add(record) {
+        if (record)
+            this.records.push(record);
+    }
+    /** Append many decision records; null/undefined entries are ignored. */
+    addAll(records) {
+        if (!records)
+            return;
+        for (const record of records)
+            this.add(record);
+    }
+    /** Snapshot of every decision recorded so far (defensive copy). */
+    all() {
+        return [...this.records];
+    }
+    get size() {
+        return this.records.length;
+    }
+}
+const TYPE_KEY = {
+    agent: "agents",
+    command: "commands",
+    skill: "skills",
+    config: "config",
+    rules: "rules",
+    hooks: "hooks",
+};
+function collectMarkdownFiles(dir) {
+    const files = [];
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory())
+            files.push(...collectMarkdownFiles(full));
+        else if (entry.toLowerCase().endsWith(".md"))
+            files.push(full);
+    }
+    return files;
+}
+export function buildConversionReport(input) {
+    const outputs = [];
+    const occurrences = [];
+    const conversionWarnings = new Set();
+    const budgetByTarget = new Map();
+    for (const action of input.actions) {
+        if (action.action !== "install" && action.action !== "update" && action.action !== "conflict")
+            continue;
+        const provider = action.provider;
+        const pathConfig = providers[provider]?.[TYPE_KEY[action.type]];
+        if (!pathConfig)
+            continue;
+        const item = input.itemsByType[action.type]?.find((i) => i.name === action.item);
+        if (!item)
+            continue;
+        const conversion = convertItem(item, pathConfig.format, provider, { migratedRefs: input.migratedRefs });
+        if (conversion.error)
+            continue;
+        const file = `${provider}/${action.type}/${action.item}`;
+        outputs.push({ file, content: conversion.content, occurrences: conversion.occurrences ?? [] });
+        occurrences.push(...(conversion.occurrences ?? []).map((o) => ({ ...o, file: o.file || file })));
+        for (const warning of conversion.warnings)
+            conversionWarnings.add(warning);
+        if (pathConfig.writeStrategy === "merge-single" && pathConfig.totalCharLimit) {
+            const key = `${provider}:${pathConfig.projectPath ?? pathConfig.globalPath ?? ""}`;
+            const entry = budgetByTarget.get(key) ?? { bytes: 0, budget: pathConfig.totalCharLimit, provider };
+            entry.bytes += Buffer.byteLength(conversion.content, "utf-8");
+            budgetByTarget.set(key, entry);
+        }
+    }
+    for (const [provider, skills] of input.skillsByProvider) {
+        if (!providers[provider]?.skills)
+            continue;
+        for (const skill of skills) {
+            const selfIndex = createReferenceIntegrityIndex([`.claude/skills/${skill.dirName}/`]);
+            const index = combineIntegrityIndexes(selfIndex, input.migratedRefs);
+            let files;
+            try {
+                files = collectMarkdownFiles(skill.sourcePath);
+            }
+            catch {
+                continue;
+            }
+            for (const filePath of files) {
+                const relName = relative(skill.sourcePath, filePath);
+                const file = `${provider}/skill/${skill.name}/${relName}`;
+                let content;
+                try {
+                    content = readFileSync(filePath, "utf-8");
+                }
+                catch {
+                    continue;
+                }
+                const rewritten = rewriteSourceReferences(content, { provider, file, migratedRefs: index });
+                outputs.push({ file, content: rewritten.content, occurrences: rewritten.occurrences });
+                occurrences.push(...rewritten.occurrences);
+            }
+        }
+    }
+    const preservedOccurrences = occurrences.filter((o) => o.decision === "preserve-warn");
+    const warnedReferences = preservedOccurrences.map((o) => `${o.file}:${o.line} — ${o.original}${o.reason ? ` (${o.reason})` : ""}`);
+    // Projection reflects the real single-file layout plus, for Codex over-budget targets, the
+    // doc-grounded config-raise recommendation (project_doc_max_bytes) — NOT a phantom nested
+    // split. Codex applies the cap to the combined instruction chain, so splitting does not raise
+    // the effective budget (https://developers.openai.com/codex/guides/agents-md).
+    const budgetLines = Array.from(budgetByTarget.entries()).flatMap(([key, { bytes, budget, provider }]) => {
+        const over = bytes > budget;
+        const status = over ? "OVER budget — the runtime truncates at the cap" : "within budget";
+        const line = `${key}: projected ~${bytes} B of ${budget} B, single file (${status})`;
+        if (!over)
+            return [line];
+        const guidance = codexBudgetRaiseGuidance(provider, bytes, budget);
+        return guidance ? [line, `${key}: ${guidance}`] : [line];
+    });
+    const findings = scanUnresolvedReferences(outputs);
+    const validationErrors = findings.map((f) => `${f.file}:${f.line} — ${f.message}`);
+    return {
+        warnedReferences,
+        conversionWarnings: Array.from(conversionWarnings),
+        budgetLines,
+        validationErrors,
+        preservedOccurrences,
+    };
+}
+//# sourceMappingURL=migrate-conversion-report.js.map

package/dist/migrate/validation/migrate-conversion-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-conversion-report.js","sourceRoot":"","sources":["../../../src/migrate/validation/migrate-conversion-report.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,uCAAuC;AAEvC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACN,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,GAEvB,MAAM,iDAAiD,CAAC;AAKzD,OAAO,EAAE,wBAAwB,EAA8C,MAAM,mCAAmC,CAAC;AAEzH;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IACV,OAAO,GAA8B,EAAE,CAAC;IAEzD,6DAA6D;IAC7D,GAAG,CAAC,MAAkD;QACrD,IAAI,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,OAA4E;QAClF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,mEAAmE;IACnE,GAAG;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5B,CAAC;CACD;AAoBD,MAAM,QAAQ,GAA0F;IACvG,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;CACd,CAAC;AAEF,SAAS,oBAAoB,CAAC,GAAW;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;aACvE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACA,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqE,CAAC;IAEpG,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAwB,CAAC;QACjD,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACxG,IAAI,UAAU,CAAC,KAAK;YAAE,SAAS;QAE/B,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/F,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ;YAAE,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,aAAa,KAAK,cAAc,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;YACnG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9D,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM;YAAE,SAAS;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,6BAA6B,CAAC,CAAC,kBAAkB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,GAAG,QAAQ,UAAU,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC1D,IAAI,OAAe,CAAC;gBACpB,IAAI,CAAC;oBACJ,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;gBACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvF,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;IACvF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/E,CAAC;IAEF,2FAA2F;IAC3F,0FAA0F;IAC1F,8FAA8F;IAC9F,+EAA+E;IAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;QACvG,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,eAAe,CAAC;QACzF,MAAM,IAAI,GAAG,GAAG,GAAG,gBAAgB,KAAK,SAAS,MAAM,oBAAoB,MAAM,GAAG,CAAC;QACrF,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAwB,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAEnF,OAAO;QACN,gBAAgB;QAChB,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAClD,WAAW;QACX,gBAAgB;QAChB,oBAAoB;KACpB,CAAC;AACH,CAAC"}

package/dist/migrate/validation/migration-ledger-inputs.d.ts

@@ -0,0 +1,56 @@
+import type { ReferenceOccurrence } from "../references/reference-types.js";
+import type { DiscoveredItems } from "../migrate-discover.js";
+import type { PortableType, ProviderType } from "../types.js";
+import type { MigrationDecisionRecord } from "./migration-record-types.js";
+/** One discovered source artifact, normalized for record building. */
+interface DiscoveredArtifact {
+    source: string;
+    type: PortableType;
+}
+/**
+ * Enumerate every discovered source artifact as `{source, type}`. This is the
+ * identity-check denominator: every entry here becomes exactly one primary record.
+ * Shell hooks filtered out at discovery are included as skipped artifacts so the
+ * dropped-safety-hook loss (gate-enforcement, privacy-block, …) is never silent.
+ */
+export declare function enumerateDiscoveredArtifacts(discovered: DiscoveredItems): DiscoveredArtifact[];
+/**
+ * Index install results by the artifact they installed. Bulk shims (codex agents /
+ * hooks) carry aggregate item labels, so per-artifact outcomes come from the
+ * explicit `installedArtifacts` map the orchestrator threads alongside, not from
+ * the shim label.
+ */
+export interface RunOutcome {
+    outcome: "migrated" | "failed";
+    target?: string;
+    /** Present when outcome === "failed" — the raw installer error message. */
+    error?: string;
+    /** True when the failure came from an internal (non-audit) installer exception. */
+    internalError?: boolean;
+}
+export interface BuildRunRecordsInput {
+    discovered: DiscoveredItems;
+    provider: ProviderType;
+    /** Per-artifact outcome keyed by `${type}:${source}` (from the orchestrator). */
+    outcomes: Map<string, RunOutcome>;
+    /** Structured records emitted by Phase 1-3 producers (skills, hooks, references). */
+    phaseRecords: readonly MigrationDecisionRecord[];
+    /** Preserved-with-warning reference occurrences (from the conversion report). */
+    preservedOccurrences: readonly ReferenceOccurrence[];
+}
+/**
+ * Reclassify a preserved occurrence's report reason: a `.claude/.env` reference now
+ * points at the emitted [shell_environment_policy] scaffold instead of the stale
+ * "no provider equivalent" phrase. Item D — routed ONLY here (report-reason layer),
+ * never in the rewriter's decision rules.
+ */
+export declare function reportReasonForOccurrence(occurrence: ReferenceOccurrence): string;
+/**
+ * Build the complete per-discovered-artifact record list. Exactly one primary
+ * record per discovered artifact (identity invariant). Phase records that carry a
+ * more severe outcome for the same artifact escalate the primary record's status;
+ * preserved occurrences attach as enrichment on the owning primary record.
+ */
+export declare function buildRunRecords(input: BuildRunRecordsInput): MigrationDecisionRecord[];
+export {};
+//# sourceMappingURL=migration-ledger-inputs.d.ts.map

package/dist/migrate/validation/migration-ledger-inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-ledger-inputs.d.ts","sourceRoot":"","sources":["../../../src/migrate/validation/migration-ledger-inputs.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAoB,MAAM,6BAA6B,CAAC;AAE7F,sEAAsE;AACtE,UAAU,kBAAkB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,eAAe,GAAG,kBAAkB,EAAE,CAU9F;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,YAAY,CAAC;IACvB,iFAAiF;IACjF,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,qFAAqF;IACrF,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACjD,iFAAiF;IACjF,oBAAoB,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACrD;AAaD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAIjF;AAiBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,uBAAuB,EAAE,CA6DtF"}