skill-family-engineering-kit 0.1.0 → 0.1.1

package/CONTRIBUTING.md

@@ -7,8 +7,18 @@ Git 写操作的授权边界见仓库内文档站的生命周期指南（`docs/g
 拓扑说明：本工作区仓永久 private，是唯一开发真源；三个 public 仓
 （`skill-family-contracts`、`skill-family-harness-node`、
 `skill-family-engineering-kit`）是版本化发布镜像，不承载完整开发历史与
-测试，也不接受直接 PR 或 issue。本指南描述的是私有工作区内经授权的开发
-流程；消费坐标与发布状态唯一见 `docs/status/current.md`。
+测试。本指南描述的是私有工作区内经授权的开发流程；消费坐标与发布状态
+唯一见 `docs/status/current.md`。
+
+## Bug 报告与 Issue
+
+普通 bug 报告欢迎通过各 public 发布镜像仓的 GitHub Issues 提交（例如
+`https://github.com/ifoohoo/skill-family-engineering-kit/issues`）。提交
+bug 报告时请尽量提供：受影响包与版本、最小复现步骤、预期与实际行为。
+
+**未经事先讨论的 Pull Request 不予接受。** 如果你希望贡献代码，请先
+通过 Issue 讨论变更的动机与范围，获得维护者确认后再提交 PR。这是为了
+避免重复劳动、确保变更与本项目的架构裁决和发布合同一致。
 
 ## 本地安装
 

package/LICENSE

@@ -186,7 +186,8 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright [yyyy] [name of copyright owner]
+   Copyright (c) 2026 skill-family-foundation-workspace contributors
+   Copyright (c) 2026 广州市风荷科技有限公司
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README.md

@@ -15,11 +15,18 @@
 ## 使用
 
 ```sh
-node packages/skill-family-engineering-kit/src/cli.mjs --help
-node packages/skill-family-engineering-kit/src/cli.mjs scaffold --root <empty-dir> --project-id my-project
-node packages/skill-family-engineering-kit/src/cli.mjs adopt-plan --root <repo>
-node packages/skill-family-engineering-kit/src/cli.mjs projection --root <repo>
-node packages/skill-family-engineering-kit/src/cli.mjs check --root <repo>
+npx skill-family-kit --help
+npx skill-family-kit scaffold --root <empty-dir> --project-id my-project
+npx skill-family-kit adopt-plan --root <repo>
+npx skill-family-kit projection --root <repo>
+npx skill-family-kit check --root <repo>
+```
+
+或全局安装后直接使用：
+
+```sh
+npm install -g skill-family-engineering-kit
+skill-family-kit --help
 ```
 
 ## 边界机制

package/SECURITY.md

@@ -12,11 +12,15 @@
 ## 报告漏洞
 
 请勿通过公开 issue 直接披露未修复的安全漏洞。private workspace 仓永久
-private，不是公开报告渠道；请通过任一 public 发布镜像仓（例如
-`https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
-**Private vulnerability reporting**（仓库 Security 页签的
-"Report a vulnerability"）私下报告；如该通道不可用，再通过仓库维护者
-提供的私下联系方式报告。
+private，不是公开报告渠道；请通过以下渠道私下报告：
+
+1. **首选**：通过任一 public 发布镜像仓（例如
+   `https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
+   **Private vulnerability reporting**（仓库 Security 页签的
+   "Report a vulnerability"）；
+2. **备选**：如上述通道不可用，请通过邮件联系仓库维护者
+   （`ifoohoo` GitHub 组织的 `security` 团队，或仓库 `README.md` 中列出的
+   维护者邮箱）。
 
 报告时请尽量提供：
 

package/THIRD_PARTY_NOTICES

@@ -0,0 +1,129 @@
+THIRD-PARTY SOFTWARE NOTICES AND ATTRIBUTION
+=============================================
+
+The public documentation site for skill-family-engineering-kit bundles the
+following third-party assets in docs/assets/ (delivered as docs/ in the
+published Pages site). This file provides the required attribution for
+those assets.
+
+The project's own source code is licensed under Apache-2.0; see LICENSE.
+The notices below cover only the frontend assets distributed with the
+public documentation site.
+
+
+1. MkDocs Material (CSS, JavaScript, favicon)
+----------------------------------------------
+
+Version: 9.7.7
+License: MIT
+Copyright: Copyright (c) 2016-2025 Martin Donath (squidfunk)
+Files:
+  - docs/assets/stylesheets/main.*.min.css
+  - docs/assets/stylesheets/palette.*.min.css
+  - docs/assets/javascripts/bundle.*.min.js
+  - docs/assets/javascripts/workers/search.*.min.js
+  - docs/assets/images/favicon.png
+
+MIT License
+
+Copyright (c) 2016-2025 Martin Donath
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+
+
+2. lunr (search library)
+-------------------------
+
+Version: 2.3.9
+License: MIT
+Copyright: Copyright (C) 2013 by Oliver Nightingale
+Files:
+  - docs/assets/javascripts/lunr/min/lunr.stemmer.support.min.js
+  - docs/assets/javascripts/lunr/min/lunr.multi.min.js
+
+MIT License
+
+Copyright (C) 2013 by Oliver Nightingale
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+
+
+3. lunr-languages (language stemmers and word cutters)
+-------------------------------------------------------
+
+License: MPL-1.1
+Copyright: Mihai Valentin (and individual language stemmer authors)
+Files:
+  - docs/assets/javascripts/lunr/min/lunr.ar.min.js
+  - docs/assets/javascripts/lunr/min/lunr.da.min.js
+  - docs/assets/javascripts/lunr/min/lunr.de.min.js
+  - docs/assets/javascripts/lunr/min/lunr.du.min.js
+  - docs/assets/javascripts/lunr/min/lunr.el.min.js
+  - docs/assets/javascripts/lunr/min/lunr.es.min.js
+  - docs/assets/javascripts/lunr/min/lunr.fi.min.js
+  - docs/assets/javascripts/lunr/min/lunr.fr.min.js
+  - docs/assets/javascripts/lunr/min/lunr.he.min.js
+  - docs/assets/javascripts/lunr/min/lunr.hi.min.js
+  - docs/assets/javascripts/lunr/min/lunr.hu.min.js
+  - docs/assets/javascripts/lunr/min/lunr.hy.min.js
+  - docs/assets/javascripts/lunr/min/lunr.it.min.js
+  - docs/assets/javascripts/lunr/min/lunr.ja.min.js
+  - docs/assets/javascripts/lunr/min/lunr.jp.min.js
+  - docs/assets/javascripts/lunr/min/lunr.kn.min.js
+  - docs/assets/javascripts/lunr/min/lunr.ko.min.js
+  - docs/assets/javascripts/lunr/min/lunr.nl.min.js
+  - docs/assets/javascripts/lunr/min/lunr.no.min.js
+  - docs/assets/javascripts/lunr/min/lunr.pt.min.js
+  - docs/assets/javascripts/lunr/min/lunr.ro.min.js
+  - docs/assets/javascripts/lunr/min/lunr.ru.min.js
+  - docs/assets/javascripts/lunr/min/lunr.sa.min.js
+  - docs/assets/javascripts/lunr/min/lunr.sv.min.js
+  - docs/assets/javascripts/lunr/min/lunr.ta.min.js
+  - docs/assets/javascripts/lunr/min/lunr.te.min.js
+  - docs/assets/javascripts/lunr/min/lunr.th.min.js
+  - docs/assets/javascripts/lunr/min/lunr.tr.min.js
+  - docs/assets/javascripts/lunr/min/lunr.vi.min.js
+  - docs/assets/javascripts/lunr/min/lunr.zh.min.js
+  - docs/assets/javascripts/lunr/tinyseg.js
+  - docs/assets/javascripts/lunr/wordcut.js
+
+These files are licensed under the Mozilla Public License Version 1.1
+(MPL-1.1). The full text of MPL-1.1 is available from the Mozilla project
+at mozilla.org (path: /en-US/MPL/1.1/).
+
+MPL-1.1 requires that recipients of a larger work containing MPL-covered
+files be informed of the location of the MPL source. The source for these
+files is the lunr-languages project on GitHub (user: MihaiValentin,
+repo: lunr-languages).

package/package.json

@@ -1,42 +1,43 @@
 {
-  "name": "skill-family-engineering-kit",
-  "version": "0.1.0",
-  "private": false,
-  "description": "Build-time scaffold, adoption planning, projection, and checks.",
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\".",
   "author": "广州市风荷科技有限公司",
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/ifoohoo/skill-family-engineering-kit.git"
+  "bin": {
+    "skill-family-kit": "./src/cli.mjs"
   },
-  "homepage": "https://github.com/ifoohoo/skill-family-engineering-kit",
   "bugs": {
     "url": "https://github.com/ifoohoo/skill-family-engineering-kit/issues"
   },
-  "type": "module",
+  "dependencies": {
+    "skill-family-contracts": "0.1.1",
+    "skill-family-harness-node": "0.1.1"
+  },
+  "description": "Build-time scaffold, adoption planning, projection, and checks.",
   "engines": {
     "node": ">=22.22.2 <23"
   },
   "exports": "./src/index.mjs",
-  "dependencies": {
-    "skill-family-contracts": "0.1.0",
-    "skill-family-harness-node": "0.1.0"
-  },
-  "bin": {
-    "skill-family-kit": "./src/cli.mjs"
-  },
   "files": [
     "src",
     "data",
     "LICENSE",
+    "THIRD_PARTY_NOTICES",
     "SECURITY.md",
     "CONTRIBUTING.md",
     "CODE_OF_CONDUCT.md",
     "docs"
   ],
-  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\".",
+  "homepage": "https://github.com/ifoohoo/skill-family-engineering-kit",
+  "license": "Apache-2.0",
+  "name": "skill-family-engineering-kit",
+  "private": false,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ifoohoo/skill-family-engineering-kit.git"
+  },
+  "type": "module",
+  "version": "0.1.1",
   "scripts": {
-    "check": "node --test",
-    "test": "node --test"
+    "check": "node --input-type=module -e \"import('./src/index.mjs').then(() => console.log('smoke ok')).catch(e => { console.error(e); process.exit(1) })\"",
+    "test": "node --input-type=module -e \"import('./src/index.mjs').then(() => console.log('smoke ok')).catch(e => { console.error(e); process.exit(1) })\""
   }
 }

package/src/check.mjs

@@ -127,10 +127,19 @@ async function readManagedCandidate(rootAbs, rel, findings) {
   }
 }
 
-async function checkDrift(rootAbs, findings) {
+/**
+ * Loads and parses the managed-file-lock JSON independently of any check class.
+ * Returns the parsed lock object, or null when the lock is absent or unreadable.
+ */
+async function loadManagedFileLock(rootAbs) {
   const loaded = await readOptionalJson(rootAbs, MANAGED_LOCK_PATH);
-  if (!loaded.ok) return null; // no lock => nothing to drift against
-  const lock = loaded.value;
+  if (!loaded.ok) return null;
+  return loaded.value;
+}
+
+async function checkDrift(rootAbs, findings) {
+  const lock = await loadManagedFileLock(rootAbs);
+  if (!lock) return null; // no lock => nothing to drift against
   const entries = Array.isArray(lock?.entries) ? lock.entries : [];
   for (const entry of entries) {
     const rel = typeof entry?.path === "string" ? normalizeRelPath(entry.path) : null;
@@ -210,8 +219,13 @@ async function checkClosure(rootAbs, lock, findings) {
   }
 }
 
-async function checkVersion(docs, findings) {
-  const manifest = docs[PROJECT_MANIFEST_PATH];
+async function checkVersion(rootAbs, docs, findings) {
+  let manifest = docs[PROJECT_MANIFEST_PATH];
+  if (!manifest) {
+    // Load independently when the contracts check didn't run first
+    const loaded = await readOptionalJson(rootAbs, PROJECT_MANIFEST_PATH);
+    if (loaded.ok) manifest = loaded.value;
+  }
   const declared = manifest?.contracts?.version;
   if (typeof declared !== "string") return { contractsVersion: null };
   if (declared !== CONTRACTS_VERSION) {
@@ -360,11 +374,18 @@ export async function runChecks({ root, allowGitSpawn = true, only, profilesRoot
   let identityRecord = null;
 
   if (classes.includes("contracts")) await checkContracts(rootAbs, docs, findings);
+
+  let driftLock = null;
   if (classes.includes("drift")) {
-    const lock = await checkDrift(rootAbs, findings);
-    if (classes.includes("closure")) closureInfo = await checkClosure(rootAbs, lock, findings);
+    driftLock = await checkDrift(rootAbs, findings);
   }
-  if (classes.includes("version")) versionInfo = await checkVersion(docs, findings);
+
+  if (classes.includes("closure")) {
+    const lock = driftLock ?? (classes.includes("drift") ? null : await loadManagedFileLock(rootAbs));
+    closureInfo = await checkClosure(rootAbs, lock, findings);
+  }
+
+  if (classes.includes("version")) versionInfo = await checkVersion(rootAbs, docs, findings);
   if (classes.includes("docs")) await checkDocs(rootAbs, docs, findings);
   if (classes.includes("git")) git = await checkGit(rootAbs, findings, allowGitSpawn);
   if (classes.includes("identity")) identityRecord = await checkIdentity(rootAbs, docs, findings, profilesRoot);

package/src/cli.mjs

@@ -24,7 +24,7 @@ import {
 
 const HELP_TEXT = `skill-family-engineering-kit —— 构建期工程工具包（恰好四个顶层命令）
 
-用法: node src/cli.mjs <command> [options]
+用法: skill-family-kit <command> [options]
 
 命令（四且仅四）:
   scaffold     在空目录生成 Skill Family 项目骨架。

package/src/skeleton.mjs

@@ -1,3 +1,6 @@
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
 import { CONTRACTS_VERSION } from "skill-family-contracts";
 import { digestBytes } from "skill-family-harness-node";
 import { invalidParamsError, kitError, KIT_ERROR_KINDS } from "./errors.mjs";
@@ -31,7 +34,10 @@ import { MIGRATION_MANIFEST_PATH } from "./migration.mjs";
  */
 
 export const KIT_TOOL_NAME = "skill-family-engineering-kit";
-export const KIT_VERSION = "0.0.0";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const _kitPkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf8"));
+export const KIT_VERSION = _kitPkg.version;
 
 /** Kit-owned document paths inside a target workspace. */
 export const PROJECT_MANIFEST_PATH = "skill-family.project-manifest.json";
@@ -143,6 +149,10 @@ function renderRootPackageJson({ projectId, projectName, licensingProfile }) {
     devDependencies: {
       projen: SKELETON_PROJEN_VERSION,
     },
+    dependencies: {
+      "skill-family-contracts": "^0.1.0",
+      "skill-family-harness-node": "^0.1.0",
+    },
     "//": PROJEN_MARKER,
   });
 }
@@ -371,21 +381,100 @@ function renderCheckCoreScript() {
   return [
     "#!/usr/bin/env node",
     "// core check: verifies the managed lock binds the real bytes and the",
-    "// file registry stays a closed world. Dependency-free by design.",
-    'import { createHash } from "node:crypto";',
-    'import { readFileSync, existsSync } from "node:fs";',
-    "",
-    "const lock = JSON.parse(readFileSync(\"skill-family.managed-file-lock.json\", \"utf8\"));",
+    "// file registry stays a closed world. Uses Foundation packages for",
+    "// path containment, digest computation, and closure verification.",
+    'import { lstat } from "node:fs/promises";',
+    'import { readFileSync } from "node:fs";',
+    'import path from "node:path";',
+    'import { findSchemaByObject } from "skill-family-contracts";',
+    'import {',
+    '  classifyPathInput,',
+    '  computeResourceClosure,',
+    '  digestBytes,',
+    '  readFileContained,',
+    '  validateContractDocument,',
+    '} from "skill-family-harness-node";',
+    "",
+    "const root = process.cwd();",
     "const failures = [];",
+    "",
+    "// Load and validate the managed file lock",
+    'let lockText;',
+    'try {',
+    '  lockText = await readFileContained(root, "skill-family.managed-file-lock.json", { encoding: "utf8" });',
+    '} catch (cause) {',
+    '  console.error(`[check-core] cannot read managed-file-lock: ${cause.message}`);',
+    '  process.exit(2);',
+    '}',
+    "const lock = JSON.parse(lockText);",
+    "",
+    "// Validate lock schema",
+    "const lockSchema = findSchemaByObject(\"managed-file-lock\");",
+    "const lockValidation = validateContractDocument(lock, { schemaId: lockSchema.$id });",
+    "if (!lockValidation.valid) {",
+    '  console.error(`[check-core] managed-file-lock schema invalid: ${JSON.stringify(lockValidation.errors)}`);',
+    "  process.exit(2);",
+    "}",
+    "",
+    "// Verify each lock entry: lstat for type check, readFileContained for safe read, digestBytes for hash",
     "for (const entry of lock.entries) {",
-    "  if (!existsSync(entry.path)) {",
-    "    failures.push(`managed file missing: ${entry.path}`);",
+    "  const relPath = entry.path;",
+    "",
+    "  // Classify the path input first",
+    "  const classification = classifyPathInput(relPath);",
+    "  if (!classification.ok) {",
+    "    failures.push(`lock entry has invalid path: ${relPath} (kind: ${classification.kind})`);",
+    "    continue;",
+    "  }",
+    "",
+    "  // lstat to detect symlinks and special files",
+    "  let stat;",
+    "  try {",
+    "    stat = await lstat(path.resolve(root, relPath));",
+    "  } catch {",
+    "    failures.push(`managed file missing: ${relPath}`);",
+    "    continue;",
+    "  }",
+    "",
+    "  // Reject symlinks",
+    "  if (stat.isSymbolicLink()) {",
+    "    failures.push(`managed file is a symlink: ${relPath}`);",
     "    continue;",
     "  }",
-    "  const actual = createHash(\"sha256\").update(readFileSync(entry.path)).digest(\"hex\");",
-    "  if (actual !== entry.hash.value) failures.push(`managed file drifted: ${entry.path}`);",
+    "",
+    "  // Reject special files (FIFO, socket, device, etc.)",
+    "  if (!stat.isFile()) {",
+    "    failures.push(`managed file is not a regular file: ${relPath}`);",
+    "    continue;",
+    "  }",
+    "",
+    "  // Read through Foundation's contained read",
+    "  let content;",
+    "  try {",
+    "    content = await readFileContained(root, relPath);",
+    "  } catch (cause) {",
+    "    failures.push(`cannot read managed file: ${relPath} (${cause.message})`);",
+    "    continue;",
+    "  }",
+    "",
+    "  // Compare digest",
+    "  const actual = digestBytes(content);",
+    "  if (actual !== entry.hash.value) {",
+    "    failures.push(`managed file drifted: ${relPath}`);",
+    "  }",
     "}",
-    "const registry = JSON.parse(readFileSync(\".foundation/file-registry.json\", \"utf8\"));",
+    "",
+    "// Load and validate the file registry",
+    'let registryText;',
+    'try {',
+    '  registryText = await readFileContained(root, ".foundation/file-registry.json", { encoding: "utf8" });',
+    '} catch (cause) {',
+    '  console.error(`[check-core] cannot read file-registry: ${cause.message}`);',
+    '  process.exit(2);',
+    '}',
+    "const registry = JSON.parse(registryText);",
+    "",
+    "// Check for duplicate classifications",
     "const seen = new Map();",
     "for (const [className, files] of [",
     '  ["projenManaged", registry.classes.projenManaged.files],',
@@ -393,10 +482,33 @@ function renderCheckCoreScript() {
     '  ["handwritten", registry.classes.handwritten.entries],',
     "]) {",
     "  for (const file of files) {",
-    '    if (seen.has(file)) failures.push(`file classified twice: ${file} (${seen.get(file)} and ${className})`);',
+    "    if (seen.has(file)) {",
+    "      failures.push(`file classified twice: ${file} (${seen.get(file)} and ${className})`);",
+    "    }",
     "    seen.set(file, className);",
     "  }",
     "}",
+    "",
+    "// Use Foundation's closure computation to verify closed-world",
+    "// Skip if there are already failures (to avoid hanging on special files like FIFOs)",
+    "if (failures.length === 0) {",
+    "  const resources = [",
+    '    { path: "skill-family.managed-file-lock.json", role: "input" },',
+    "    ...lock.entries.map((entry) => ({ path: entry.path, role: \"output\" })),",
+    "  ];",
+    "  try {",
+    "    const closure = await computeResourceClosure({ root, resources });",
+    "    const missingOutputs = closure.resources.filter(",
+    "      (r) => r.role === \"output\" && !r.exists,",
+    "    );",
+    "    for (const missing of missingOutputs) {",
+    "      failures.push(`closure output missing: ${missing.path}`);",
+    "    }",
+    "  } catch (cause) {",
+    "    failures.push(`closure computation failed: ${cause.message}`);",
+    "  }",
+    "}",
+    "",
     "if (failures.length > 0) {",
     '  for (const failure of failures) console.error(`[check-core] ${failure}`);',
     "  process.exit(2);",
@@ -434,31 +546,51 @@ function renderSecurityNegativeScript() {
   return [
     "#!/usr/bin/env node",
     "// security negative cases: every hostile path MUST be rejected by the",
-    "// containment classifier below; if any passes, this script exits 2.",
-    "",
-    "function classify(relPath) {",
-    '  if (typeof relPath !== "string" || relPath.length === 0) return "reject";',
-    '  if (relPath.includes("\\\\") || relPath.includes("..")) return "reject";',
-    '  if (relPath.startsWith("/") || /^[A-Za-z]:/.test(relPath)) return "reject";',
-    '  if (relPath.startsWith("file:") || relPath.startsWith("http")) return "reject";',
-    '  return "accept";',
-    "}",
+    "// Foundation path containment mechanisms; if any passes, this script exits 2.",
+    "// Tests both lexical classification (classifyPathInput) and resolution-time",
+    "// containment (resolveContained).",
+    'import { classifyPathInput, resolveContained } from "skill-family-harness-node";',
+    "",
+    "// Paths that should be rejected at the lexical classification level",
+    "const lexicalNegatives = [",
+    '  "/etc/passwd",           // absolute path',
+    '  "C:\\\\Windows\\\\system32",  // Windows drive path',
+    '  "\\\\\\\\server\\\\share",     // UNC path',
+    '  "",                      // empty path',
+    "];",
     "",
-    "const negatives = [",
-    '  "../outside.txt",',
-    '  "/etc/passwd",',
-    '  "C:\\\\Windows\\\\system32",',
-    '  "\\\\\\\\server\\\\share",',
-    '  "a/../../b",',
-    '  "file:///etc/passwd",',
-    '  "",',
+    "// Paths that should be rejected at the resolution level (path traversal)",
+    "const resolutionNegatives = [",
+    '  "../outside.txt",        // parent traversal',
+    '  "a/../../b",             // nested traversal',
     "];",
-    "const failures = negatives.filter((candidate) => classify(candidate) !== \"reject\");",
+    "",
+    "const failures = [];",
+    "",
+    "// Test lexical classification",
+    "for (const candidate of lexicalNegatives) {",
+    "  const result = classifyPathInput(candidate);",
+    "  if (result.ok) {",
+    "    failures.push(`lexical: ${candidate}`);",
+    "  }",
+    "}",
+    "",
+    "// Test resolution-time containment",
+    'const fakeRoot = "/nonexistent-root-for-testing";',
+    "for (const candidate of resolutionNegatives) {",
+    "  try {",
+    "    await resolveContained(fakeRoot, candidate);",
+    "    failures.push(`resolution: ${candidate}`);",
+    "  } catch {",
+    "    // Expected: resolution should fail",
+    "  }",
+    "}",
+    "",
     "if (failures.length > 0) {",
     "  console.error(`[security-negative] hostile path accepted: ${failures.join(\", \")}`);",
     "  process.exit(2);",
     "}",
-    'console.log(`[security-negative] OK (${negatives.length} hostile paths rejected)`);',
+    'console.log(`[security-negative] OK (${lexicalNegatives.length + resolutionNegatives.length} hostile paths rejected)`);',
     "",
   ].join("\n");
 }