ts-reviewer 1.0.0

package/README.md

@@ -0,0 +1,202 @@
+# Pure TypeScript Reviewer
+
+An AI skill for deep code review and auto-fix of pure TypeScript codebases. Finds bugs, type safety holes, security vulnerabilities, async anti-patterns, outdated practices, and code smells — then fixes them with regression tests and verification.
+
+Built for **TypeScript 5.9+** without any framework-specific checks (no React, Vue, Angular, etc.).
+
+## What It Does
+
+Three modes, one skill:
+
+| Mode | What happens |
+|---|---|
+| **scan** | Analyzes the codebase and writes a prioritized report to `code-smells.md` |
+| **fix** | Reads the report and applies fixes file-by-file with tsc/lint/test verification |
+| **auto** | Runs scan, asks you to confirm, fixes everything, deletes the report if clean |
+
+The review covers six domains, each with its own detailed checklist:
+
+| Domain | Examples |
+|---|---|
+| **Type Safety** | `any` abuse, unsafe casts, non-null assertions, missing exhaustive checks |
+| **Security** | Injection, prototype pollution, ReDoS, path traversal, hardcoded secrets |
+| **Async Patterns** | Floating promises, race conditions, missing error propagation, `forEach(async...)` |
+| **Modernization** | `enum` → `as const`, missing `satisfies`, `using` keyword, `import type` |
+| **Code Quality** | Dead code, complexity, duplication, hacky patterns, error handling |
+| **Config** | tsconfig.json strict flags, module resolution, deprecated options |
+
+## Installation
+
+### Install with npx
+
+From the root of the project where you want to install the skill:
+
+```bash
+npx ts-reviewer
+```
+
+The installer prints a short summary before installation:
+
+```text
+TypeScript Code Reviewer
+Checks: type safety, async patterns, security, tsconfig, modernization, code quality
+Target TypeScript: 5.9+
+```
+
+Then it asks which AI agents to install for. Use Up/Down arrows to move, Space to toggle, and Enter to confirm.
+
+Supported targets:
+
+| AI agent | Install path |
+|---|---|
+| Claude Code | `.claude/skills/ts-reviewer/` |
+| Codex | `.codex/skills/ts-reviewer/` |
+| Antigravity | `.agent/skills/ts-reviewer/` |
+
+In non-interactive terminals, the installer selects all supported targets.
+
+### Manual Install
+
+You can still copy the `ts-reviewer/` folder directly into the skill directory for your AI agent.
+
+## Usage
+
+### Scan — find issues
+
+Just ask Claude to review your code:
+
+```
+Review my TypeScript code
+```
+```
+Find issues in this project
+```
+```
+Audit the codebase for security and type safety problems
+```
+
+Claude will analyze the project and write a report to `code-smells.md` in the project root (or `.claude/code-smells.md` if that directory exists).
+
+### Fix — apply fixes from the report
+
+After reviewing the scan report, ask Claude to fix the issues:
+
+```
+Fix the issues from the report
+```
+```
+Apply fixes from code-smells.md
+```
+
+The fix workflow:
+1. Parses the report as a work plan
+2. Runs existing tests to capture a baseline (knows what was already failing)
+3. Fixes issues file-by-file, writes regression tests, runs `tsc` after each file
+4. Runs linter, fixes lint errors
+5. Runs full test suite, compares with baseline, fixes any regressions it caused
+6. Repeats verification up to 5 iterations
+7. Updates the report: if all fixed → deletes `code-smells.md`; if some remain → keeps it as an audit trail with BEFORE/AFTER diffs for every fix
+
+**Important:** fix never commits or stages anything. You review the changes and decide what to keep.
+
+### Auto — scan + fix in one pass
+
+```
+Review and fix my TypeScript code
+```
+```
+Auto-fix code smells
+```
+
+Runs scan, shows you the summary, asks if you want to proceed with fixes, then runs the full fix cycle. If everything is clean afterward, the report is deleted.
+
+## Scope Modes
+
+By default the entire codebase is reviewed. You can narrow the scope:
+
+| What you say | What gets reviewed |
+|---|---|
+| *"review my code"* | Full codebase |
+| *"review my changes"*, *"check uncommitted"* | Staged + unstaged + untracked `.ts` files |
+| *"review my PR"*, *"diff against main"* | All changes on current branch vs base |
+| *"review last commit"*, *"check last 3 commits"* | Last N commits |
+
+### Diff-aware severity boost
+
+In scoped modes, issues on **new/modified lines** get their severity boosted by one level (Low→Medium, Medium→High, etc.). A Medium code smell in a three-year-old file is tech debt; the same smell in code you wrote today should be fixed before merging.
+
+Issues on unchanged lines are listed separately as pre-existing tech debt — informational, not blocking.
+
+## Severity Scale
+
+| Level | Meaning |
+|---|---|
+| **Highest** | Active bugs, security vulnerabilities, data loss risks |
+| **High** | Bugs waiting to happen, will break under edge cases |
+| **Medium** | Tech debt — clean up when you're already editing that file |
+| **Low** | Style and conventions — improve when convenient |
+
+## Project Structure
+
+```
+src/                                  # npm/npx installer source
+├── cli.ts                            # CLI entrypoint and provider prompt
+├── prompt.ts                         # raw-mode keyboard multi-select
+└── paths.ts                          # target directories and skill asset loading
+
+ts-reviewer/
+├── SKILL.md                          # Main skill file — mode routing, workflow orchestration
+└── references/
+    ├── type-safety.md                # Checklist: any, casts, !, exhaustiveness, generics
+    ├── security.md                   # Checklist: injection, pollution, ReDoS, traversal
+    ├── async-patterns.md             # Checklist: floating promises, races, cancellation
+    ├── modernization.md              # Checklist: TS 5.9+ idioms, satisfies, using, as const
+    ├── code-quality.md               # Checklist: complexity, dead code, naming, duplication
+    ├── tsconfig.md                   # Checklist: strict flags, module resolution, deprecated
+    └── fix-workflow.md               # Complete fix protocol: tests, verification, rollback
+```
+
+**SKILL.md** (349 lines) is the orchestrator — it routes between scan/fix/auto modes, defines scope detection, severity scale, and report format. It stays under the 500-line recommended limit for Claude skills.
+
+**Reference files** contain the detailed checklists and protocols. Each analysis agent reads only the reference file relevant to its domain, keeping context focused. The fix workflow is in its own reference file because it's a complex multi-step protocol.
+
+## How It Works Under the Hood
+
+### Scan mode
+
+1. **Discovery** — maps the project, reads tsconfig.json, detects linter and test runner
+2. **Diagnostics** — runs `tsc --noEmit`, linter, and LSP diagnostics (if available)
+3. **Analysis** — six specialized passes (sub-agents in Claude Code, sequential in Claude.ai), each with its own checklist
+4. **Report** — deduplicates, applies severity boost (scoped modes), consolidates recurring patterns, writes `code-smells.md`
+
+### Fix mode
+
+1. Parses `code-smells.md` as the work plan
+2. Captures test baseline (runs tests before changes)
+3. Applies fixes bottom-to-top within each file (so line numbers don't shift)
+4. Writes regression tests for each testable fix
+5. Runs `tsc --noEmit` after each file
+6. Full verification loop: tsc + linter + test suite (max 5 iterations)
+7. Compares test results with baseline — only fixes regressions it caused
+8. Updates or deletes the report
+
+## Tips
+
+- **Add `code-smells.md` to `.gitignore`** — it's a review artifact, not part of your source code.
+
+- **Commit before running fix** — so you can `git diff` to review changes and `git checkout -- .` to revert if needed.
+
+- **Edit the report before fix** — since fix uses `code-smells.md` as its work plan, you can delete issues you don't want fixed, change severities, or add notes before running fix.
+
+- **Scoped review for PRs** — `"review my branch against main"` is the most practical mode for day-to-day use. Full codebase audits are better suited for periodic health checks.
+
+## Requirements
+
+- TypeScript 5.9+ project
+- Git repository (for scoped modes and safe revert during fix)
+- Node.js with `npx` available (for tsc, linter)
+- Claude Code (recommended) or any Claude interface with skill support
+
+## License
+
+MIT

package/dist/cli.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("./index");
+const prompt_1 = require("./prompt");
+const paths_1 = require("./paths");
+const SKILL_NAME = "ts-reviewer";
+const TYPESCRIPT_VERSION = "5.9+";
+function printHelp() {
+    process.stdout.write([
+        "ts-reviewer: install TypeScript review skill\n",
+        "\n",
+        "Usage:\n",
+        "  npx ts-reviewer\n",
+        "\n",
+        "Options:\n",
+        "  -h, --help      show help\n",
+    ].join(""));
+}
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.includes("-h") || args.includes("--help")) {
+        printHelp();
+        return;
+    }
+    const cwd = process.cwd();
+    const skillName = SKILL_NAME;
+    process.stdout.write([
+        "TypeScript Code Reviewer\n",
+        `Checks: type safety, async patterns, security, tsconfig, modernization, code quality\n`,
+        `Target TypeScript: ${TYPESCRIPT_VERSION}\n`,
+        "\n",
+    ].join(""));
+    const selected = await (0, prompt_1.multiSelect)("Install for which AI agents? (Space = toggle, Enter = confirm)", paths_1.AI_PROVIDERS);
+    if (selected.length === 0) {
+        process.stdout.write("No agents selected. Exiting.\n");
+        return;
+    }
+    for (const provider of selected) {
+        const targetDir = (0, paths_1.skillTargetDir)(cwd, provider, skillName);
+        const providerLabel = paths_1.AI_PROVIDERS.find((p) => p.value === provider).label;
+        process.stdout.write(`\n[${providerLabel}]\n`);
+        const result = await (0, index_1.scaffoldTsReviewerSkill)({ cwd, skillName, targetDir });
+        for (const e of result.entries) {
+            const suffix = e.detail ? ` (${e.detail})` : "";
+            process.stdout.write(`${e.action}\t${e.relativePath}${suffix}\n`);
+        }
+        if (result.hadConflicts)
+            process.exitCode = 2;
+    }
+}
+main().catch((err) => {
+    process.stderr.write(err?.stack ? String(err.stack) : String(err));
+    process.stderr.write("\n");
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AAEA,mCAAkD;AAClD,qCAAuC;AACvC,mCAAwE;AAExE,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,SAAS;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,gDAAgD;QAChD,IAAI;QACJ,UAAU;QACV,qBAAqB;QACrB,IAAI;QACJ,YAAY;QACZ,+BAA+B;KAChC,CAAC,IAAI,CAAC,EAAE,CAAC,CACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,UAAU,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,4BAA4B;QAC5B,wFAAwF;QACxF,sBAAsB,kBAAkB,IAAI;QAC5C,IAAI;KACL,CAAC,IAAI,CAAC,EAAE,CAAC,CACX,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAW,EAChC,gEAAgE,EAChE,oBAAY,CACb,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,QAAwB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAA,sBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,oBAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAE,CAAC,KAAK,CAAC;QAE5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAuB,EAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,MAAM,CAAC,YAAY;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAE,GAAa,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,GAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/hash.js

@@ -0,0 +1,11 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Hex = sha256Hex;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+function sha256Hex(input) {
+    return node_crypto_1.default.createHash("sha256").update(input, "utf8").digest("hex");
+}
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":";;;;;AAEA,8BAEC;AAJD,8DAAiC;AAEjC,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC"}

package/dist/incoming.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findAvailableIncomingPath = findAvailableIncomingPath;
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+async function exists(p) {
+    try {
+        await promises_1.default.stat(p);
+        return true;
+    }
+    catch (e) {
+        if (e && e.code === "ENOENT")
+            return false;
+        throw e;
+    }
+}
+async function findAvailableIncomingPath(dstPath) {
+    const dir = node_path_1.default.dirname(dstPath);
+    const base = node_path_1.default.basename(dstPath);
+    const first = node_path_1.default.join(dir, `${base}.incoming`);
+    if (!(await exists(first)))
+        return first;
+    for (let i = 2; i < 1000; i++) {
+        const p = node_path_1.default.join(dir, `${base}.incoming${i}`);
+        if (!(await exists(p)))
+            return p;
+    }
+    // should never happen
+    return node_path_1.default.join(dir, `${base}.incoming-${Date.now()}`);
+}
+//# sourceMappingURL=incoming.js.map

package/dist/incoming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incoming.js","sourceRoot":"","sources":["../src/incoming.ts"],"names":[],"mappings":";;;;;AAaA,8DAcC;AA3BD,gEAAkC;AAClC,0DAA6B;AAE7B,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,OAAe;IAC7D,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,mBAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,sBAAsB;IACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/index.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scaffoldTsReviewerSkill = scaffoldTsReviewerSkill;
+const node_path_1 = __importDefault(require("node:path"));
+const paths_1 = require("./paths");
+const meta_1 = require("./meta");
+const hash_1 = require("./hash");
+const io_1 = require("./io");
+const updatePolicy_1 = require("./updatePolicy");
+const incoming_1 = require("./incoming");
+async function scaffoldTsReviewerSkill(opts) {
+    const skillName = opts.skillName;
+    const targetDir = opts.targetDir;
+    await (0, io_1.ensureDir)(targetDir);
+    const metaPath = node_path_1.default.join(targetDir, ".scaffold-meta.json");
+    const meta = (await (0, meta_1.readMeta)(metaPath)) ?? { version: 1, files: {} };
+    const entries = [];
+    let hadConflicts = false;
+    for (const t of (0, paths_1.listSkillAssetTemplates)(skillName)) {
+        const relativePath = node_path_1.default.relative(opts.cwd, node_path_1.default.join(targetDir, t.fileName)).replace(/\\/g, "/");
+        const dstPath = node_path_1.default.join(targetDir, t.fileName);
+        const desired = t.content;
+        const desiredHash = (0, hash_1.sha256Hex)(desired);
+        const existing = await (0, io_1.readFileIfExists)(dstPath);
+        const existingHash = existing === null ? null : (0, hash_1.sha256Hex)(existing);
+        const lastWrittenHash = meta.files[t.fileName]?.lastWrittenHash ?? null;
+        const decision = (0, updatePolicy_1.decideUpdate)({ existingHash, lastWrittenHash });
+        if (decision.kind === "write") {
+            await (0, io_1.atomicWriteFile)(dstPath, desired);
+            meta.files[t.fileName] = { lastWrittenHash: desiredHash };
+            entries.push({ action: "WROTE", relativePath });
+            continue;
+        }
+        if (decision.kind === "overwrite") {
+            await (0, io_1.atomicWriteFile)(dstPath, desired);
+            meta.files[t.fileName] = { lastWrittenHash: desiredHash };
+            entries.push({ action: "UPDATED", relativePath });
+            continue;
+        }
+        if (decision.kind === "skip") {
+            entries.push({ action: "SKIPPED", relativePath });
+            continue;
+        }
+        // conflict
+        hadConflicts = true;
+        const incomingPath = await (0, incoming_1.findAvailableIncomingPath)(dstPath);
+        await (0, io_1.atomicWriteFile)(incomingPath, desired);
+        entries.push({
+            action: "CONFLICT",
+            relativePath,
+            detail: node_path_1.default.basename(incomingPath),
+        });
+    }
+    await (0, meta_1.writeMeta)(metaPath, meta);
+    return { entries, hadConflicts };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;AAsBA,0DAyDC;AA/ED,0DAA6B;AAE7B,mCAAkD;AAClD,iCAAgE;AAChE,iCAAmC;AACnC,6BAAoE;AACpE,iDAA8C;AAC9C,yCAAuD;AAehD,KAAK,UAAU,uBAAuB,CAAC,IAA2D;IACvG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,IAAA,cAAS,EAAC,SAAS,CAAC,CAAC;IAE3B,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAiB,CAAC,MAAM,IAAA,eAAQ,EAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEnF,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,CAAC,IAAI,IAAA,+BAAuB,EAAC,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAA,gBAAS,EAAC,OAAO,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAgB,EAAC,OAAO,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gBAAS,EAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,IAAI,IAAI,CAAC;QAExE,MAAM,QAAQ,GAAG,IAAA,2BAAY,EAAC,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;QAEjE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAA,oBAAe,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAA,oBAAe,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QAED,WAAW;QACX,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,YAAY,GAAG,MAAM,IAAA,oCAAyB,EAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,IAAA,oBAAe,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,UAAU;YAClB,YAAY;YACZ,MAAM,EAAE,mBAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAA,gBAAS,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEhC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC"}

package/dist/io.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureDir = ensureDir;
+exports.readFileIfExists = readFileIfExists;
+exports.atomicWriteFile = atomicWriteFile;
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+async function ensureDir(dirPath) {
+    await promises_1.default.mkdir(dirPath, { recursive: true });
+}
+async function readFileIfExists(filePath) {
+    try {
+        return await promises_1.default.readFile(filePath, "utf8");
+    }
+    catch (e) {
+        if (e && (e.code === "ENOENT" || e.code === "ENOTDIR"))
+            return null;
+        throw e;
+    }
+}
+async function atomicWriteFile(filePath, content) {
+    const dir = node_path_1.default.dirname(filePath);
+    await ensureDir(dir);
+    const tmp = node_path_1.default.join(dir, `.${node_path_1.default.basename(filePath)}.tmp-${process.pid}-${Date.now()}`);
+    await promises_1.default.writeFile(tmp, content, "utf8");
+    try {
+        // Windows cannot atomically replace existing; remove first.
+        await promises_1.default.unlink(filePath);
+    }
+    catch (e) {
+        if (!(e && e.code === "ENOENT"))
+            throw e;
+    }
+    await promises_1.default.rename(tmp, filePath);
+}
+//# sourceMappingURL=io.js.map

package/dist/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":";;;;;AAGA,8BAEC;AAED,4CAOC;AAED,0CAeC;AA/BD,gEAAkC;AAClC,0DAA6B;AAEtB,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,MAAM,kBAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe;IACrE,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAErB,MAAM,GAAG,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,mBAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,kBAAE,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,kBAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/meta.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readMeta = readMeta;
+exports.writeMeta = writeMeta;
+const promises_1 = __importDefault(require("node:fs/promises"));
+async function readMeta(metaPath) {
+    try {
+        const raw = await promises_1.default.readFile(metaPath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (!parsed || parsed.version !== 1 || typeof parsed.files !== "object")
+            return null;
+        return parsed;
+    }
+    catch (e) {
+        if (e && e.code === "ENOENT")
+            return null;
+        throw e;
+    }
+}
+async function writeMeta(metaPath, meta) {
+    const body = JSON.stringify(meta, null, 2) + "\n";
+    await promises_1.default.writeFile(metaPath, body, "utf8");
+}
+//# sourceMappingURL=meta.js.map

package/dist/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":";;;;;AAOA,4BAUC;AAED,8BAGC;AAtBD,gEAAkC;AAO3B,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrF,OAAO,MAAsB,CAAC;IAChC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAkB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAClD,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC"}

package/dist/paths.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AI_PROVIDERS = void 0;
+exports.skillTargetDir = skillTargetDir;
+exports.skillAssetsDir = skillAssetsDir;
+exports.listSkillAssetTemplates = listSkillAssetTemplates;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+exports.AI_PROVIDERS = [
+    { label: "Claude Code", value: "claude-code" },
+    { label: "Codex", value: "codex" },
+    { label: "Antigravity", value: "antigravity" },
+];
+const PROVIDER_BASE = {
+    "claude-code": ".claude",
+    "codex": ".codex",
+    "antigravity": ".agent",
+};
+function skillTargetDir(projectRoot, provider, skillName) {
+    return node_path_1.default.join(projectRoot, PROVIDER_BASE[provider], "skills", skillName);
+}
+function packageRootDir() {
+    // dist/* at runtime; src/* in dev. In both cases, package root is one level up.
+    return node_path_1.default.resolve(__dirname, "..");
+}
+function skillAssetsDir(skillName) {
+    return node_path_1.default.join(packageRootDir(), skillName);
+}
+function readAsset(skillName, fileName) {
+    const p = node_path_1.default.join(skillAssetsDir(skillName), fileName);
+    return node_fs_1.default.readFileSync(p, "utf8");
+}
+function walkAssetFiles(rootDir, currentDir = rootDir) {
+    const entries = node_fs_1.default.readdirSync(currentDir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const absolutePath = node_path_1.default.join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+            files.push(...walkAssetFiles(rootDir, absolutePath));
+            continue;
+        }
+        if (entry.isFile()) {
+            files.push(node_path_1.default.relative(rootDir, absolutePath).replace(/\\/g, "/"));
+        }
+    }
+    return files.sort();
+}
+function listSkillAssetTemplates(skillName) {
+    return walkAssetFiles(skillAssetsDir(skillName)).map((fileName) => ({
+        fileName,
+        content: readAsset(skillName, fileName),
+    }));
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":";;;;;;AAiBA,wCAEC;AASD,wCAEC;AA0BD,0DAKC;AA7DD,sDAAyB;AACzB,0DAA6B;AAIhB,QAAA,YAAY,GAA2C;IAClE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;IAC9C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;IAClC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;CAC/C,CAAC;AAEF,MAAM,aAAa,GAA+B;IAChD,aAAa,EAAE,SAAS;IACxB,OAAO,EAAE,QAAQ;IACjB,aAAa,EAAE,QAAQ;CACxB,CAAC;AAEF,SAAgB,cAAc,CAAC,WAAmB,EAAE,QAAoB,EAAE,SAAiB;IACzF,OAAO,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC9E,CAAC;AAID,SAAS,cAAc;IACrB,gFAAgF;IAChF,OAAO,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,cAAc,CAAC,SAAiB;IAC9C,OAAO,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,QAAgB;IACpD,MAAM,CAAC,GAAG,mBAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,iBAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,UAAU,GAAG,OAAO;IAC3D,MAAM,OAAO,GAAG,iBAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,mBAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAAiB;IACvD,OAAO,cAAc,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,QAAQ;QACR,OAAO,EAAE,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC;KACxC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/prompt.js

@@ -0,0 +1,64 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.multiSelect = multiSelect;
+const node_readline_1 = __importDefault(require("node:readline"));
+const node_process_1 = __importDefault(require("node:process"));
+function render(message, choices, cursor, selected, isFirst) {
+    if (!isFirst) {
+        node_process_1.default.stdout.write(`\x1b[${choices.length + 1}A`);
+    }
+    node_process_1.default.stdout.write(`\x1b[2K${message}\n`);
+    for (let i = 0; i < choices.length; i++) {
+        const mark = selected.has(i) ? "[x]" : "[ ]";
+        const arrow = i === cursor ? ">" : " ";
+        node_process_1.default.stdout.write(`\x1b[2K${arrow} ${mark} ${choices[i].label}\n`);
+    }
+}
+async function multiSelect(message, choices) {
+    if (!node_process_1.default.stdin.isTTY) {
+        return choices.map((c) => c.value);
+    }
+    const selected = new Set();
+    let cursor = 0;
+    node_readline_1.default.emitKeypressEvents(node_process_1.default.stdin);
+    node_process_1.default.stdin.setRawMode(true);
+    render(message, choices, cursor, selected, true);
+    return new Promise((resolve) => {
+        const onKey = (_str, key) => {
+            if (!key)
+                return;
+            if (key.name === "up") {
+                cursor = (cursor - 1 + choices.length) % choices.length;
+                render(message, choices, cursor, selected, false);
+            }
+            else if (key.name === "down") {
+                cursor = (cursor + 1) % choices.length;
+                render(message, choices, cursor, selected, false);
+            }
+            else if (key.name === "space") {
+                if (selected.has(cursor))
+                    selected.delete(cursor);
+                else
+                    selected.add(cursor);
+                render(message, choices, cursor, selected, false);
+            }
+            else if (key.name === "return") {
+                node_process_1.default.stdin.removeListener("keypress", onKey);
+                node_process_1.default.stdin.setRawMode(false);
+                node_process_1.default.stdin.pause();
+                resolve(choices.filter((_, i) => selected.has(i)).map((c) => c.value));
+            }
+            else if (key.ctrl && key.name === "c") {
+                node_process_1.default.stdin.removeListener("keypress", onKey);
+                node_process_1.default.stdin.setRawMode(false);
+                node_process_1.default.stdin.pause();
+                node_process_1.default.exit(0);
+            }
+        };
+        node_process_1.default.stdin.on("keypress", onKey);
+    });
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":";;;;;AAiBA,kCA0CC;AA3DD,kEAAqC;AACrC,gEAAmC;AAInC,SAAS,MAAM,CAAC,OAAe,EAAE,OAAiB,EAAE,MAAc,EAAE,QAAqB,EAAE,OAAgB;IACzG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,sBAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,sBAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7C,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACvC,sBAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,OAAiB;IAClE,IAAI,CAAC,sBAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,uBAAQ,CAAC,kBAAkB,CAAC,sBAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,sBAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAE/B,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,GAAoC,EAAE,EAAE;YACnE,IAAI,CAAC,GAAG;gBAAE,OAAO;YAEjB,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;gBACxD,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;gBACvC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAChC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;oBAC7C,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,sBAAO,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAChD,sBAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAChC,sBAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,sBAAO,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAChD,sBAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAChC,sBAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACtB,sBAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,sBAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/updatePolicy.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decideUpdate = decideUpdate;
+// Inputs are hashes (sha256 hex) or null if missing.
+function decideUpdate(opts) {
+    const { existingHash, lastWrittenHash } = opts;
+    // missing file
+    if (existingHash === null)
+        return { kind: "write" };
+    // file exists but we don't know provenance => never overwrite
+    if (lastWrittenHash === null)
+        return { kind: "conflict" };
+    // safe overwrite only if user hasn't modified since last scaffold
+    if (existingHash === lastWrittenHash)
+        return { kind: "overwrite" };
+    return { kind: "conflict" };
+}
+//# sourceMappingURL=updatePolicy.js.map

package/dist/updatePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updatePolicy.js","sourceRoot":"","sources":["../src/updatePolicy.ts"],"names":[],"mappings":";;AAOA,oCAgBC;AAjBD,qDAAqD;AACrD,SAAgB,YAAY,CAAC,IAG5B;IACC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAE/C,eAAe;IACf,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEpD,8DAA8D;IAC9D,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAE1D,kEAAkE;IAClE,IAAI,YAAY,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAEnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC"}