openmeld 0.3.205 → 0.3.206

package/dist/{installer-CZyyvNZr.js → installation-inventory-P49sTjhe.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { ht as skillsDir, lt as resolveOpenMeldEnvPreset, mt as runtimeLogsDir, tt as openMeldRootDir } from "./lock-CvBnBcFK.js";
-import { An as resolveSkillsAgentRegistry, Ko as compareSemver, On as canManageRegistryAgentSkillTargets, _o as OPENMELD_VERSION, kn as detectInstalledSkillsAgents } from "./openmeld-tools-update-coordinator-DJ65uI3O.js";
-import { b as isBinaryDistribution } from "./auth-session-wmefguut.js";
-import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-jWXPssF_.js";
+import { An as resolveSkillsAgentRegistry, Ko as compareSemver, On as canManageRegistryAgentSkillTargets, _o as OPENMELD_VERSION, kn as detectInstalledSkillsAgents } from "./openmeld-tools-update-coordinator-BBZhGo1A.js";
+import { S as isBinaryDistribution } from "./auth-session-BjSqMLTz.js";
+import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-9A557X2K.js";
 import { createHash, randomUUID, verify } from "node:crypto";
 import path, { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { cp, lstat, mkdir, readFile, readdir, readlink, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
@@ -42,160 +42,6 @@ const officialCliSkillChannelSchema = z$1.object({
 	releases: z$1.array(officialCliSkillReleaseSchema).min(1).max(16)
 }).strict();
 //#endregion
-//#region src/skills/bundled.ts
-const CLI_PACKAGE_JSON = "package.json";
-/**
-* Locate the on-disk bundled skills directory for the npm distribution by
-* walking up from this module to the CLI package root (a directory that has
-* both package.json and skills/). Returns null under the binary distribution,
-* where import.meta.url is a virtual path and the skills are embedded instead —
-* callers in that mode go through bundled-assets.ts, not this function.
-*/
-function resolveBundledSkillsLocation() {
-	const cliRootDir = resolveCliRootDir(path.dirname(fileURLToPath(import.meta.url)));
-	if (!cliRootDir) return null;
-	return {
-		cliRootDir,
-		skillsRootDir: path.join(cliRootDir, "skills")
-	};
-}
-function resolveCliRootDir(fromDir) {
-	let current = fromDir;
-	for (;;) {
-		const hasPackageJson = existsSync(path.join(current, CLI_PACKAGE_JSON));
-		const hasSkillsDir = existsSync(path.join(current, "skills"));
-		if (hasPackageJson && hasSkillsDir) return current;
-		const parent = path.dirname(current);
-		if (parent === current) return null;
-		current = parent;
-	}
-}
-//#endregion
-//#region src/skills/bundled-assets-fs.ts
-/**
-* npm-distribution source: read the bundled skills from the on-disk `skills/`
-* directory next to the CLI package. Assets are sorted by relative path so the
-* order (and therefore any content hash computed from them) is stable and
-* matches the embedded distribution.
-*/
-async function loadFsBundledSkillAssets() {
-	const location = resolveBundledSkillsLocation();
-	if (!location) throw new Error("unable to resolve bundled OpenMeld skills directory");
-	return sortBundledSkillAssets(await collectSkillAssets(location.skillsRootDir, location.skillsRootDir));
-}
-function sortBundledSkillAssets(assets) {
-	return [...assets].sort((left, right) => left.relativePath.localeCompare(right.relativePath));
-}
-async function collectSkillAssets(dir, rootDir) {
-	const entries = await readdir(dir, { withFileTypes: true });
-	const assets = [];
-	for (const entry of entries) {
-		const absolutePath = join(dir, entry.name);
-		if (entry.isDirectory()) {
-			assets.push(...await collectSkillAssets(absolutePath, rootDir));
-			continue;
-		}
-		if (!entry.isFile()) continue;
-		assets.push({
-			relativePath: toPosixRelativePath(relative(rootDir, absolutePath)),
-			content: await readFile(absolutePath)
-		});
-	}
-	return assets;
-}
-function toPosixRelativePath(value) {
-	return value.split("\\").join("/");
-}
-//#endregion
-//#region src/skills/bundled-assets.ts
-/**
-* Load the OpenMeld-managed skill files that ship with this CLI build.
-*
-* - npm distribution: read from the on-disk `skills/` directory.
-* - binary distribution: read from files embedded into the single binary at
-*   compile time. The embedded module is a Bun-only island resolved only by
-*   `bun build --compile`; the npm build never reaches this branch and marks
-*   the module external, so its `with { type: "file" }` imports are never
-*   parsed by tsdown.
-*/
-async function loadBundledSkillAssets() {
-	if (isBinaryDistribution()) return (await import("./skills/bundled-assets-embedded")).loadEmbeddedBundledSkillAssets();
-	return loadFsBundledSkillAssets();
-}
-/**
-* Content hash over an ordered list of skill assets. Byte-for-byte compatible
-* with `computeDirectoryContentHash` (same `file:<relativePath>\n<content>\n`
-* framing) so the embedded and on-disk sources produce identical hashes as long
-* as `assets` is sorted by relative path (as `loadBundledSkillAssets` returns
-* it). This is the single skills-hash algorithm for both distribution forms.
-*/
-function hashBundledSkillAssets(assets) {
-	const hash = createHash("sha256");
-	for (const asset of assets) {
-		hash.update(`file:${asset.relativePath}\n`);
-		hash.update(asset.content);
-		hash.update("\n");
-	}
-	return hash.digest("hex");
-}
-//#endregion
-//#region src/skills/content-hash.ts
-async function computeDirectoryContentHash(input) {
-	const ignoredNames = new Set(input.ignoredNames ?? []);
-	const files = await collectFiles({
-		dir: input.rootDir,
-		rootDir: input.rootDir,
-		ignoredNames
-	});
-	const hash = createHash("sha256");
-	for (const file of files) {
-		hash.update(`file:${file.relativePath}\n`);
-		hash.update(file.content);
-		hash.update("\n");
-	}
-	return hash.digest("hex");
-}
-async function collectFiles(input) {
-	const entries = await readdir(input.dir, { withFileTypes: true }).catch((error) => {
-		if (getErrorCode$1(error) === "ENOENT") return [];
-		warnDirectoryReadError(input.dir, error);
-		throw error;
-	});
-	entries.sort((a, b) => a.name.localeCompare(b.name));
-	const files = [];
-	for (const entry of entries) {
-		if (input.ignoredNames.has(entry.name)) continue;
-		const absolutePath = join(input.dir, entry.name);
-		if (entry.isDirectory()) {
-			files.push(...await collectFiles({
-				dir: absolutePath,
-				rootDir: input.rootDir,
-				ignoredNames: input.ignoredNames
-			}));
-			continue;
-		}
-		if (!entry.isFile()) continue;
-		const content = await readFile(absolutePath);
-		files.push({
-			relativePath: normalizeRelativePath(relative(input.rootDir, absolutePath)),
-			content
-		});
-	}
-	return files;
-}
-function normalizeRelativePath(value) {
-	return value.split("\\").join("/");
-}
-function getErrorCode$1(error) {
-	if (!error || typeof error !== "object") return;
-	const code = error.code;
-	return typeof code === "string" ? code : void 0;
-}
-function warnDirectoryReadError(dir, error) {
-	const reason = error instanceof Error ? error.message : String(error);
-	process.stderr.write(`[openmeld] failed to read directory while hashing skills content (${dir}): ${reason}\n`);
-}
-//#endregion
 //#region src/skills/install-lock.ts
 const heldLock = new AsyncLocalStorage();
 const pendingLocks = /* @__PURE__ */ new Map();
@@ -227,7 +73,7 @@ async function acquireSkillsInstallLock(run) {
 		acquired = true;
 		break;
 	} catch (error) {
-		if (getErrorCode(error) !== "EEXIST") throw error;
+		if (getErrorCode$1(error) !== "EEXIST") throw error;
 		if (!await recoverStaleSkillsInstallLock(lockPath)) throw new Error("another skills installation is already running; retry after it finishes");
 		try {
 			await writeFile(lockPath, lockContents, {
@@ -237,7 +83,7 @@ async function acquireSkillsInstallLock(run) {
 			acquired = true;
 			break;
 		} catch (retryError) {
-			if (getErrorCode(retryError) !== "EEXIST") throw retryError;
+			if (getErrorCode$1(retryError) !== "EEXIST") throw retryError;
 		}
 	}
 	if (!acquired) throw new Error("another skills installation is already running; retry after it finishes");
@@ -249,7 +95,7 @@ async function acquireSkillsInstallLock(run) {
 }
 async function recoverStaleSkillsInstallLock(lockPath) {
 	const lockRaw = await readFile(lockPath, "utf8").catch((error) => {
-		if (getErrorCode(error) === "ENOENT") return "";
+		if (getErrorCode$1(error) === "ENOENT") return "";
 		throw error;
 	});
 	if (!lockRaw) return true;
@@ -260,7 +106,7 @@ async function recoverStaleSkillsInstallLock(lockPath) {
 	}
 	if (pid && isPidAlive(pid)) return false;
 	const latestLockRaw = await readFile(lockPath, "utf8").catch((error) => {
-		if (getErrorCode(error) === "ENOENT") return "";
+		if (getErrorCode$1(error) === "ENOENT") return "";
 		throw error;
 	});
 	if (!latestLockRaw) return true;
@@ -271,7 +117,7 @@ async function recoverStaleSkillsInstallLock(lockPath) {
 		afterPid: resolveLockPid(parseLockMeta(latestLockRaw))
 	})) return false;
 	await rm(lockPath, { force: true }).catch((error) => {
-		if (getErrorCode(error) === "ENOENT") return;
+		if (getErrorCode$1(error) === "ENOENT") return;
 		throw error;
 	});
 	return true;
@@ -293,10 +139,10 @@ function isPidAlive(pid) {
 		process.kill(pid, 0);
 		return true;
 	} catch (error) {
-		return getErrorCode(error) !== "ESRCH";
+		return getErrorCode$1(error) !== "ESRCH";
 	}
 }
-function getErrorCode(error) {
+function getErrorCode$1(error) {
 	if (!error || typeof error !== "object") return;
 	const code = error.code;
 	return typeof code === "string" ? code : void 0;
@@ -306,6 +152,219 @@ function isSameLockSnapshot(input) {
 	return input.beforePid === input.afterPid;
 }
 //#endregion
+//#region src/skills/replace-directory.ts
+async function recoverSkillReplacement(target) {
+	const previous = join(dirname(target), `.${basename(target)}.openmeld-previous`);
+	if (!await exists(previous)) return;
+	if (!await isManagedReplacement(previous, basename(target))) throw new Error("OpenMeld Skill backup conflicts with an unmanaged path");
+	if (await exists(target)) {
+		if (!await isManagedReplacement(target, basename(target))) throw new Error("OpenMeld Skill recovery would affect an unmanaged path");
+		await rm(previous, {
+			recursive: true,
+			force: true
+		});
+	} else await rename(previous, target);
+}
+async function replaceSkillDirectory(target, prepare) {
+	await recoverSkillReplacement(target);
+	const staged = join(dirname(target), `.${basename(target)}.openmeld-staged-${randomUUID()}`);
+	const previous = join(dirname(target), `.${basename(target)}.openmeld-previous`);
+	try {
+		await prepare(staged);
+		const hadPrevious = await exists(target);
+		if (hadPrevious) await rename(target, previous);
+		try {
+			await rename(staged, target);
+		} catch (error) {
+			if (hadPrevious) await rename(previous, target);
+			throw error;
+		}
+		await rm(previous, {
+			recursive: true,
+			force: true
+		}).catch(() => void 0);
+	} finally {
+		await rm(staged, {
+			recursive: true,
+			force: true
+		}).catch(() => void 0);
+	}
+}
+async function isManagedReplacement(path, skillId) {
+	const raw = await readFile(join(path, ".openmeld-skill.json"), "utf8").catch(() => null);
+	if (raw) try {
+		const marker = JSON.parse(raw);
+		return marker.managedBy === "openmeld" && marker.skillId === skillId;
+	} catch {
+		return false;
+	}
+	if ((await lstat(path)).isSymbolicLink()) {
+		const destination = resolve(dirname(path), await readlink(path));
+		return basename(destination) === skillId && !await exists(destination);
+	}
+	return false;
+}
+function exists(path) {
+	return lstat(path).then(() => true, (error) => {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	});
+}
+//#endregion
+//#region src/skills/content-hash.ts
+async function computeDirectoryContentHash(input) {
+	const ignoredNames = new Set(input.ignoredNames ?? []);
+	const files = await collectFiles({
+		dir: input.rootDir,
+		rootDir: input.rootDir,
+		ignoredNames
+	});
+	const hash = createHash("sha256");
+	for (const file of files) {
+		hash.update(`file:${file.relativePath}\n`);
+		hash.update(file.content);
+		hash.update("\n");
+	}
+	return hash.digest("hex");
+}
+async function collectFiles(input) {
+	const entries = await readdir(input.dir, { withFileTypes: true }).catch((error) => {
+		if (getErrorCode(error) === "ENOENT") return [];
+		warnDirectoryReadError(input.dir, error);
+		throw error;
+	});
+	entries.sort((a, b) => a.name.localeCompare(b.name));
+	const files = [];
+	for (const entry of entries) {
+		if (input.ignoredNames.has(entry.name)) continue;
+		const absolutePath = join(input.dir, entry.name);
+		if (entry.isDirectory()) {
+			files.push(...await collectFiles({
+				dir: absolutePath,
+				rootDir: input.rootDir,
+				ignoredNames: input.ignoredNames
+			}));
+			continue;
+		}
+		if (!entry.isFile()) continue;
+		const content = await readFile(absolutePath);
+		files.push({
+			relativePath: normalizeRelativePath(relative(input.rootDir, absolutePath)),
+			content
+		});
+	}
+	return files;
+}
+function normalizeRelativePath(value) {
+	return value.split("\\").join("/");
+}
+function getErrorCode(error) {
+	if (!error || typeof error !== "object") return;
+	const code = error.code;
+	return typeof code === "string" ? code : void 0;
+}
+function warnDirectoryReadError(dir, error) {
+	const reason = error instanceof Error ? error.message : String(error);
+	process.stderr.write(`[openmeld] failed to read directory while hashing skills content (${dir}): ${reason}\n`);
+}
+//#endregion
+//#region src/skills/bundled.ts
+const CLI_PACKAGE_JSON = "package.json";
+/**
+* Locate the on-disk bundled skills directory for the npm distribution by
+* walking up from this module to the CLI package root (a directory that has
+* both package.json and skills/). Returns null under the binary distribution,
+* where import.meta.url is a virtual path and the skills are embedded instead —
+* callers in that mode go through bundled-assets.ts, not this function.
+*/
+function resolveBundledSkillsLocation() {
+	const cliRootDir = resolveCliRootDir(path.dirname(fileURLToPath(import.meta.url)));
+	if (!cliRootDir) return null;
+	return {
+		cliRootDir,
+		skillsRootDir: path.join(cliRootDir, "skills")
+	};
+}
+function resolveCliRootDir(fromDir) {
+	let current = fromDir;
+	for (;;) {
+		const hasPackageJson = existsSync(path.join(current, CLI_PACKAGE_JSON));
+		const hasSkillsDir = existsSync(path.join(current, "skills"));
+		if (hasPackageJson && hasSkillsDir) return current;
+		const parent = path.dirname(current);
+		if (parent === current) return null;
+		current = parent;
+	}
+}
+//#endregion
+//#region src/skills/bundled-assets-fs.ts
+/**
+* npm-distribution source: read the bundled skills from the on-disk `skills/`
+* directory next to the CLI package. Assets are sorted by relative path so the
+* order (and therefore any content hash computed from them) is stable and
+* matches the embedded distribution.
+*/
+async function loadFsBundledSkillAssets() {
+	const location = resolveBundledSkillsLocation();
+	if (!location) throw new Error("unable to resolve bundled OpenMeld skills directory");
+	return sortBundledSkillAssets(await collectSkillAssets(location.skillsRootDir, location.skillsRootDir));
+}
+function sortBundledSkillAssets(assets) {
+	return [...assets].sort((left, right) => left.relativePath.localeCompare(right.relativePath));
+}
+async function collectSkillAssets(dir, rootDir) {
+	const entries = await readdir(dir, { withFileTypes: true });
+	const assets = [];
+	for (const entry of entries) {
+		const absolutePath = join(dir, entry.name);
+		if (entry.isDirectory()) {
+			assets.push(...await collectSkillAssets(absolutePath, rootDir));
+			continue;
+		}
+		if (!entry.isFile()) continue;
+		assets.push({
+			relativePath: toPosixRelativePath(relative(rootDir, absolutePath)),
+			content: await readFile(absolutePath)
+		});
+	}
+	return assets;
+}
+function toPosixRelativePath(value) {
+	return value.split("\\").join("/");
+}
+//#endregion
+//#region src/skills/bundled-assets.ts
+/**
+* Load the OpenMeld-managed skill files that ship with this CLI build.
+*
+* - npm distribution: read from the on-disk `skills/` directory.
+* - binary distribution: read from files embedded into the single binary at
+*   compile time. The embedded module is a Bun-only island resolved only by
+*   `bun build --compile`; the npm build never reaches this branch and marks
+*   the module external, so its `with { type: "file" }` imports are never
+*   parsed by tsdown.
+*/
+async function loadBundledSkillAssets() {
+	if (isBinaryDistribution()) return (await import("./skills/bundled-assets-embedded")).loadEmbeddedBundledSkillAssets();
+	return loadFsBundledSkillAssets();
+}
+/**
+* Content hash over an ordered list of skill assets. Byte-for-byte compatible
+* with `computeDirectoryContentHash` (same `file:<relativePath>\n<content>\n`
+* framing) so the embedded and on-disk sources produce identical hashes as long
+* as `assets` is sorted by relative path (as `loadBundledSkillAssets` returns
+* it). This is the single skills-hash algorithm for both distribution forms.
+*/
+function hashBundledSkillAssets(assets) {
+	const hash = createHash("sha256");
+	for (const asset of assets) {
+		hash.update(`file:${asset.relativePath}\n`);
+		hash.update(asset.content);
+		hash.update("\n");
+	}
+	return hash.digest("hex");
+}
+//#endregion
 //#region src/skills/official-release.ts
 const CACHE_FILE = "official-cli-skill.json";
 function verifyOfficialSkillRelease(value) {
@@ -390,83 +449,24 @@ async function downloadOfficialSkillUpdate() {
 		if (size > 1048576) throw new Error("OpenMeld Skill download exceeds the size limit");
 		chunks.push(chunk);
 	}
-	const selected = selectOfficialSkillRelease(JSON.parse(Buffer.concat(chunks).toString("utf8")));
-	if (!selected) return "incompatible";
-	return withSkillsInstallLock(async () => {
-		const cached = await readCachedRelease();
-		if (cached && cached.payload.revision >= selected.payload.revision) return "current";
-		await mkdir(openMeldRootDir(), { recursive: true });
-		const cache = join(openMeldRootDir(), CACHE_FILE);
-		const staged = `${cache}.${randomUUID()}.tmp`;
-		try {
-			await writeFile(staged, JSON.stringify(selected.release), {
-				flag: "wx",
-				mode: 384
-			});
-			await rename(staged, cache);
-		} finally {
-			await rm(staged, { force: true });
-		}
-		return "updated";
-	});
-}
-//#endregion
-//#region src/skills/replace-directory.ts
-async function recoverSkillReplacement(target) {
-	const previous = join(dirname(target), `.${basename(target)}.openmeld-previous`);
-	if (!await exists(previous)) return;
-	if (!await isManagedReplacement(previous, basename(target))) throw new Error("OpenMeld Skill backup conflicts with an unmanaged path");
-	if (await exists(target)) {
-		if (!await isManagedReplacement(target, basename(target))) throw new Error("OpenMeld Skill recovery would affect an unmanaged path");
-		await rm(previous, {
-			recursive: true,
-			force: true
-		});
-	} else await rename(previous, target);
-}
-async function replaceSkillDirectory(target, prepare) {
-	await recoverSkillReplacement(target);
-	const staged = join(dirname(target), `.${basename(target)}.openmeld-staged-${randomUUID()}`);
-	const previous = join(dirname(target), `.${basename(target)}.openmeld-previous`);
-	try {
-		await prepare(staged);
-		const hadPrevious = await exists(target);
-		if (hadPrevious) await rename(target, previous);
-		try {
-			await rename(staged, target);
-		} catch (error) {
-			if (hadPrevious) await rename(previous, target);
-			throw error;
-		}
-		await rm(previous, {
-			recursive: true,
-			force: true
-		}).catch(() => void 0);
-	} finally {
-		await rm(staged, {
-			recursive: true,
-			force: true
-		}).catch(() => void 0);
-	}
-}
-async function isManagedReplacement(path, skillId) {
-	const raw = await readFile(join(path, ".openmeld-skill.json"), "utf8").catch(() => null);
-	if (raw) try {
-		const marker = JSON.parse(raw);
-		return marker.managedBy === "openmeld" && marker.skillId === skillId;
-	} catch {
-		return false;
-	}
-	if ((await lstat(path)).isSymbolicLink()) {
-		const destination = resolve(dirname(path), await readlink(path));
-		return basename(destination) === skillId && !await exists(destination);
-	}
-	return false;
-}
-function exists(path) {
-	return lstat(path).then(() => true, (error) => {
-		if (error.code === "ENOENT") return false;
-		throw error;
+	const selected = selectOfficialSkillRelease(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+	if (!selected) return "incompatible";
+	return withSkillsInstallLock(async () => {
+		const cached = await readCachedRelease();
+		if (cached && cached.payload.revision >= selected.payload.revision) return "current";
+		await mkdir(openMeldRootDir(), { recursive: true });
+		const cache = join(openMeldRootDir(), CACHE_FILE);
+		const staged = `${cache}.${randomUUID()}.tmp`;
+		try {
+			await writeFile(staged, JSON.stringify(selected.release), {
+				flag: "wx",
+				mode: 384
+			});
+			await rename(staged, cache);
+		} finally {
+			await rm(staged, { force: true });
+		}
+		return "updated";
 	});
 }
 //#endregion
@@ -746,6 +746,122 @@ function pathsEqual(left, right) {
 	return resolve(left) === resolve(right);
 }
 //#endregion
+//#region src/skills/installer.ts
+function installSkillsToTargets(input) {
+	return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));
+}
+async function installSkillsToTargetsLocked(input) {
+	const results = [];
+	for (const target of input.targets) for (const skill of input.skills) {
+		const result = await installOneSkillToTarget({
+			skill,
+			target
+		});
+		results.push(result);
+	}
+	return results;
+}
+async function installOneSkillToTarget(input) {
+	const targetDir = input.target.dir;
+	const failInstall = (reason) => ({
+		targetId: input.target.id,
+		targetDir,
+		targetType: input.target.type,
+		skillId: input.skill.id,
+		status: "failed",
+		mode: "unknown",
+		degraded: false,
+		reason
+	});
+	if (!isAbsolute(targetDir)) return failInstall("target dir must be an absolute path");
+	const skillId = input.skill.id;
+	if (skillId.trim().length === 0 || isAbsolute(skillId) || skillId === "." || skillId === ".." || skillId.includes("/") || skillId.includes("\\")) return failInstall("skill id would escape target dir");
+	const resolvedTargetDir = resolve(targetDir);
+	const resolvedSkillDir = resolve(resolvedTargetDir, skillId);
+	const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);
+	if (skillRelativePath === ".." || skillRelativePath.startsWith("../") || skillRelativePath.startsWith("..\\")) return failInstall("skill id would escape target dir");
+	const skillTargetDir = resolvedSkillDir;
+	await mkdir(targetDir, { recursive: true });
+	await recoverSkillReplacement(skillTargetDir);
+	const state = await resolveSkillInstallStateForTarget({
+		skill: input.skill,
+		target: input.target
+	});
+	if (state.state === "external_conflict") return {
+		targetId: input.target.id,
+		targetDir,
+		targetType: input.target.type,
+		skillId: input.skill.id,
+		status: "skipped",
+		mode: resolveSkippedInstallMode(state),
+		degraded: false,
+		reason: state.reason
+	};
+	if (state.state === "up_to_date") return {
+		targetId: input.target.id,
+		targetDir,
+		targetType: input.target.type,
+		skillId: input.skill.id,
+		status: "skipped",
+		mode: resolveSkippedInstallMode(state),
+		degraded: false,
+		reason: state.reason
+	};
+	const installation = { mode: "symlink" };
+	try {
+		await readFile(join(input.skill.absolutePath, "SKILL.md"), "utf8");
+		await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {
+			if (await tryCreateSymlink({
+				sourceDir: input.skill.absolutePath,
+				targetDir: stagedDir
+			})) return;
+			installation.mode = "copy";
+			await cp(input.skill.absolutePath, stagedDir, {
+				recursive: true,
+				errorOnExist: true,
+				force: false
+			});
+			await writeOpenMeldSkillMarker({
+				skillDir: stagedDir,
+				skillId: input.skill.id,
+				mode: "copy",
+				...input.skill.contentHash ? { contentHash: input.skill.contentHash } : {},
+				...input.skill.version ? { version: input.skill.version } : {}
+			});
+		});
+		return {
+			targetId: input.target.id,
+			targetDir,
+			targetType: input.target.type,
+			skillId: input.skill.id,
+			status: "installed",
+			mode: installation.mode,
+			degraded: installation.mode === "copy",
+			...installation.mode === "copy" ? { reason: "symlink failed; fell back to copy" } : {}
+		};
+	} catch (error) {
+		return failInstall(error instanceof Error ? error.message : "failed to install skill to target");
+	}
+}
+function resolveSkippedInstallMode(state) {
+	if (state.targetMode === "copy") return "copy";
+	if (state.targetMode === "symlink") return "symlink";
+	return "unknown";
+}
+async function tryCreateSymlink(input) {
+	try {
+		await mkdir(dirname(input.targetDir), { recursive: true });
+		const targetParentDir = dirname(input.targetDir);
+		const resolvedTargetParentDir = await realpath(targetParentDir).catch(() => targetParentDir);
+		const resolvedSourceDir = await realpath(input.sourceDir).catch(() => input.sourceDir);
+		const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);
+		await symlink(process$1.platform === "win32" ? resolvedSourceDir : relativeTarget, input.targetDir, process$1.platform === "win32" ? "junction" : void 0);
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/skills/installation-inventory.ts
 async function collectSkillsReadinessSnapshot() {
 	const skillsConfig = await getConfiguredSkillsConfig();
@@ -979,122 +1095,6 @@ function normalizeInstallRecordForCompare(input) {
 	};
 }
 //#endregion
-//#region src/skills/installer.ts
-function installSkillsToTargets(input) {
-	return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));
-}
-async function installSkillsToTargetsLocked(input) {
-	const results = [];
-	for (const target of input.targets) for (const skill of input.skills) {
-		const result = await installOneSkillToTarget({
-			skill,
-			target
-		});
-		results.push(result);
-	}
-	return results;
-}
-async function installOneSkillToTarget(input) {
-	const targetDir = input.target.dir;
-	const failInstall = (reason) => ({
-		targetId: input.target.id,
-		targetDir,
-		targetType: input.target.type,
-		skillId: input.skill.id,
-		status: "failed",
-		mode: "unknown",
-		degraded: false,
-		reason
-	});
-	if (!isAbsolute(targetDir)) return failInstall("target dir must be an absolute path");
-	const skillId = input.skill.id;
-	if (skillId.trim().length === 0 || isAbsolute(skillId) || skillId === "." || skillId === ".." || skillId.includes("/") || skillId.includes("\\")) return failInstall("skill id would escape target dir");
-	const resolvedTargetDir = resolve(targetDir);
-	const resolvedSkillDir = resolve(resolvedTargetDir, skillId);
-	const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);
-	if (skillRelativePath === ".." || skillRelativePath.startsWith("../") || skillRelativePath.startsWith("..\\")) return failInstall("skill id would escape target dir");
-	const skillTargetDir = resolvedSkillDir;
-	await mkdir(targetDir, { recursive: true });
-	await recoverSkillReplacement(skillTargetDir);
-	const state = await resolveSkillInstallStateForTarget({
-		skill: input.skill,
-		target: input.target
-	});
-	if (state.state === "external_conflict") return {
-		targetId: input.target.id,
-		targetDir,
-		targetType: input.target.type,
-		skillId: input.skill.id,
-		status: "skipped",
-		mode: resolveSkippedInstallMode(state),
-		degraded: false,
-		reason: state.reason
-	};
-	if (state.state === "up_to_date") return {
-		targetId: input.target.id,
-		targetDir,
-		targetType: input.target.type,
-		skillId: input.skill.id,
-		status: "skipped",
-		mode: resolveSkippedInstallMode(state),
-		degraded: false,
-		reason: state.reason
-	};
-	const installation = { mode: "symlink" };
-	try {
-		await readFile(join(input.skill.absolutePath, "SKILL.md"), "utf8");
-		await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {
-			if (await tryCreateSymlink({
-				sourceDir: input.skill.absolutePath,
-				targetDir: stagedDir
-			})) return;
-			installation.mode = "copy";
-			await cp(input.skill.absolutePath, stagedDir, {
-				recursive: true,
-				errorOnExist: true,
-				force: false
-			});
-			await writeOpenMeldSkillMarker({
-				skillDir: stagedDir,
-				skillId: input.skill.id,
-				mode: "copy",
-				...input.skill.contentHash ? { contentHash: input.skill.contentHash } : {},
-				...input.skill.version ? { version: input.skill.version } : {}
-			});
-		});
-		return {
-			targetId: input.target.id,
-			targetDir,
-			targetType: input.target.type,
-			skillId: input.skill.id,
-			status: "installed",
-			mode: installation.mode,
-			degraded: installation.mode === "copy",
-			...installation.mode === "copy" ? { reason: "symlink failed; fell back to copy" } : {}
-		};
-	} catch (error) {
-		return failInstall(error instanceof Error ? error.message : "failed to install skill to target");
-	}
-}
-function resolveSkippedInstallMode(state) {
-	if (state.targetMode === "copy") return "copy";
-	if (state.targetMode === "symlink") return "symlink";
-	return "unknown";
-}
-async function tryCreateSymlink(input) {
-	try {
-		await mkdir(dirname(input.targetDir), { recursive: true });
-		const targetParentDir = dirname(input.targetDir);
-		const resolvedTargetParentDir = await realpath(targetParentDir).catch(() => targetParentDir);
-		const resolvedSourceDir = await realpath(input.sourceDir).catch(() => input.sourceDir);
-		const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);
-		await symlink(process$1.platform === "win32" ? resolvedSourceDir : relativeTarget, input.targetDir, process$1.platform === "win32" ? "junction" : void 0);
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { readSelectedSkillDocument as _, filterTargetsWithInstalledOpenMeldSkills as a, hashBundledSkillAssets as b, resolveTrackedInstallTargets as c, resolveSkillsInstallStates as d, ensureLocalSkills as f, loadSelectedSkillAssets as g, downloadOfficialSkillUpdate as h, compareInstallRecords as i, summarizeSkillState as l, readOpenMeldSkillMarker as m, buildAgentTargets as n, mergeTargetsByDir as o, isOpenMeldManagedSkillDir as p, collectSkillsReadinessSnapshot as r, persistDetectedInstallStateFromCheck as s, installSkillsToTargets as t, resolveSkillInstallStateForTarget as u, withSkillsInstallLock as v, OFFICIAL_CLI_SKILL_URL as x, computeDirectoryContentHash as y };
+export { readSelectedSkillDocument as _, mergeTargetsByDir as a, withSkillsInstallLock as b, summarizeSkillState as c, resolveSkillsInstallStates as d, ensureLocalSkills as f, loadSelectedSkillAssets as g, downloadOfficialSkillUpdate as h, filterTargetsWithInstalledOpenMeldSkills as i, installSkillsToTargets as l, readOpenMeldSkillMarker as m, collectSkillsReadinessSnapshot as n, persistDetectedInstallStateFromCheck as o, isOpenMeldManagedSkillDir as p, compareInstallRecords as r, resolveTrackedInstallTargets as s, buildAgentTargets as t, resolveSkillInstallStateForTarget as u, hashBundledSkillAssets as v, OFFICIAL_CLI_SKILL_URL as x, computeDirectoryContentHash as y };
 
-//# sourceMappingURL=installer-CZyyvNZr.js.map
+//# sourceMappingURL=installation-inventory-P49sTjhe.js.map