vskill 1.0.15 → 1.0.18

package/dist/lib/migration/keychain-migration.js

@@ -0,0 +1,189 @@
+// ---------------------------------------------------------------------------
+// 0836 US-006 — keychain migration: legacy slot → canonical slot.
+//
+// Pre-0836:  Node CLI used  `vskill-github::github_token`   (legacy)
+// Post-0836: Node CLI uses  `com.verifiedskill.desktop::github-oauth-token`
+//                            (canonical — also the Rust desktop's slot per
+//                             ADR-0836-03)
+//
+// This module runs ONCE on Node-side boot (via `keychain.ts::createKeychain`)
+// and migrates any token from the legacy slot to the canonical slot. The
+// move is idempotent + race-safe via a 5s-TTL file mutex at
+// `~/.vskill/locks/keychain-migration.lock`. A done-flag at
+// `~/.vskill/keychain-migration.done` short-circuits subsequent boots.
+//
+// Rust does NOT participate — `src-tauri/src/auth/token_store.rs` is already
+// on the canonical slot (locked by a constant test there).
+//
+// Removal target: drop this whole module + the legacy fallback in
+// keychain.ts AFTER vskill 1.1.x. Anton: remember to bump.
+import * as nodeFs from "node:fs";
+import * as nodePath from "node:path";
+import * as nodeOs from "node:os";
+const LEGACY_SERVICE = "vskill-github";
+const LEGACY_ACCOUNT = "github_token";
+const CANONICAL_SERVICE = "com.verifiedskill.desktop";
+const CANONICAL_ACCOUNT = "github-oauth-token";
+const LOCK_TTL_MS = 5_000;
+const defaultFs = {
+    existsSync: (p) => nodeFs.existsSync(p),
+    readFileSync: (p) => nodeFs.readFileSync(p, { encoding: "utf8" }),
+    writeFileSync: (p, c) => nodeFs.writeFileSync(p, c, { encoding: "utf8", mode: 0o600 }),
+    mkdirSync: (p) => {
+        nodeFs.mkdirSync(p, { recursive: true, mode: 0o700 });
+    },
+    unlinkSync: (p) => nodeFs.unlinkSync(p),
+    statSync: (p) => {
+        const s = nodeFs.statSync(p);
+        return { mtimeMs: s.mtimeMs };
+    },
+};
+function paths(homeDir) {
+    const root = nodePath.join(homeDir, ".vskill");
+    return {
+        doneFlag: nodePath.join(root, "keychain-migration.done"),
+        lockFile: nodePath.join(root, "locks", "keychain-migration.lock"),
+        lockDir: nodePath.join(root, "locks"),
+    };
+}
+/**
+ * Runs the legacy → canonical migration with mutex serialization.
+ *
+ * Returns:
+ *   - 'migrated' — token moved (or both slots cleaned up)
+ *   - 'noop'     — nothing to migrate; done flag written
+ *   - 'skipped'  — environment opt-out, missing keyring, done flag, or
+ *                  another runner holds a fresh lock
+ *
+ * Idempotent — running twice is safe (the second call sees the done flag
+ * and returns 'skipped').
+ */
+export function runKeychainMigration(deps) {
+    // Env opt-out — power users / CI can set VSKILL_KEYCHAIN_MIGRATE=0.
+    if (process.env.VSKILL_KEYCHAIN_MIGRATE === "0") {
+        return "skipped";
+    }
+    if (!deps.keyring)
+        return "skipped";
+    const fs = deps.fs ?? defaultFs;
+    const now = deps.now ?? Date.now;
+    const home = deps.homeDir ?? nodeOs.homedir();
+    const p = paths(home);
+    // Done-flag short-circuit — prior boot already migrated.
+    if (fs.existsSync(p.doneFlag))
+        return "skipped";
+    // Acquire lock.
+    if (!acquireLock(fs, p, now)) {
+        return "skipped";
+    }
+    try {
+        return migrateUnderLock(deps.keyring, fs, p, now);
+    }
+    finally {
+        releaseLock(fs, p);
+    }
+}
+function acquireLock(fs, p, now) {
+    // Ensure parent dir exists.
+    try {
+        fs.mkdirSync(p.lockDir);
+    }
+    catch {
+        // ignore — parent may already exist
+    }
+    if (fs.existsSync(p.lockFile)) {
+        // Check staleness.
+        let stale = false;
+        try {
+            const stat = fs.statSync(p.lockFile);
+            stale = now() - stat.mtimeMs > LOCK_TTL_MS;
+        }
+        catch {
+            stale = true; // can't stat → treat as stale and steal
+        }
+        if (!stale) {
+            // Another runner holds a fresh lock — back off.
+            return false;
+        }
+        // Steal.
+        try {
+            fs.unlinkSync(p.lockFile);
+        }
+        catch {
+            // ignore — race with the other runner releasing it
+        }
+    }
+    try {
+        fs.writeFileSync(p.lockFile, String(process.pid));
+    }
+    catch {
+        return false;
+    }
+    return true;
+}
+function releaseLock(fs, p) {
+    try {
+        fs.unlinkSync(p.lockFile);
+    }
+    catch {
+        // ignore
+    }
+}
+function migrateUnderLock(keyring, fs, p, _now) {
+    const old = safeGet(keyring, LEGACY_SERVICE, LEGACY_ACCOUNT);
+    const canonical = safeGet(keyring, CANONICAL_SERVICE, CANONICAL_ACCOUNT);
+    if (old == null && canonical == null) {
+        writeDoneFlag(fs, p);
+        return "noop";
+    }
+    if (old != null && canonical == null) {
+        // Promote old → canonical, then drop old.
+        safeSet(keyring, CANONICAL_SERVICE, CANONICAL_ACCOUNT, old);
+        safeDelete(keyring, LEGACY_SERVICE, LEGACY_ACCOUNT);
+        writeDoneFlag(fs, p);
+        return "migrated";
+    }
+    if (old != null && canonical != null) {
+        // Both populated — keep canonical (newer), delete old.
+        safeDelete(keyring, LEGACY_SERVICE, LEGACY_ACCOUNT);
+        writeDoneFlag(fs, p);
+        return "migrated";
+    }
+    // canonical-only: nothing to do; mark done so we don't re-check.
+    writeDoneFlag(fs, p);
+    return "noop";
+}
+function writeDoneFlag(fs, p) {
+    try {
+        fs.writeFileSync(p.doneFlag, "1");
+    }
+    catch {
+        // Best-effort — if the flag can't be written, the migration just
+        // re-runs next boot; harmless because each step is idempotent.
+    }
+}
+function safeGet(kr, service, account) {
+    try {
+        return kr.getPassword(service, account);
+    }
+    catch {
+        return null;
+    }
+}
+function safeSet(kr, service, account, value) {
+    try {
+        kr.setPassword(service, account, value);
+    }
+    catch {
+        // ignore — failure is logged elsewhere; migration continues
+    }
+}
+function safeDelete(kr, service, account) {
+    try {
+        kr.deletePassword(service, account);
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=keychain-migration.js.map

package/dist/lib/migration/keychain-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-migration.js","sourceRoot":"","sources":["../../../src/lib/migration/keychain-migration.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,4DAA4D;AAC5D,4DAA4D;AAC5D,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,2DAA2D;AAC3D,EAAE;AACF,kEAAkE;AAClE,2DAA2D;AAE3D,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,QAAQ,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAElC,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAE/C,MAAM,WAAW,GAAG,KAAK,CAAC;AA0B1B,MAAM,SAAS,GAAuB;IACpC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtB,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;CACF,CAAC;AAQF,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC;QACxD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,CAAC;QACjE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAmB;IACtD,oEAAoE;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtB,yDAAyD;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAEhD,gBAAgB;IAChB,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,EAAsB,EACtB,CAAiB,EACjB,GAAiB;IAEjB,4BAA4B;IAC5B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,mBAAmB;QACnB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACrC,KAAK,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,IAAI,CAAC,CAAC,wCAAwC;QACxD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,gDAAgD;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,SAAS;QACT,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,EAAsB,EAAE,CAAiB;IAC5D,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,EAAsB,EACtB,CAAiB,EACjB,IAAkB;IAElB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAEzE,IAAI,GAAG,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACrC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACrC,0CAA0C;QAC1C,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC5D,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QACpD,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,GAAG,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACrC,uDAAuD;QACvD,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QACpD,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iEAAiE;IACjE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,EAAsB,EAAE,CAAiB;IAC9D,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,EAAkB,EAClB,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,EAAkB,EAClB,OAAe,EACf,OAAe,EACf,KAAa;IAEb,IAAI,CAAC;QACH,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,EAAkB,EAClB,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}

package/dist/lib/tenant-resolver.d.ts

@@ -0,0 +1,38 @@
+import { type ActiveTenantOptions } from "./active-tenant.js";
+import { type TenantSummary } from "../api/client.js";
+export interface ResolveTenantOptions {
+    /** Highest priority — usually the CLI `--tenant` flag. */
+    flag?: string | null;
+    /** Override env reader (tests). Defaults to `process.env.VSKILL_TENANT`. */
+    envValue?: string | null;
+    /** Override config-dir resolution (tests). */
+    activeTenantOptions?: ActiveTenantOptions;
+    /** Override tenants fetcher (tests / offline mode). */
+    listTenants?: () => Promise<TenantSummary[]>;
+    /**
+     * When true, the resolver may make a network call to /account/tenants for
+     * the N=1 auto-pick fallback. Defaults to true. Setting false skips
+     * step (4) — useful for offline-first commands where the caller would
+     * rather error than block on the network.
+     */
+    enableAutoPick?: boolean;
+}
+export type ResolvedTenant = {
+    kind: "flag" | "env" | "config" | "auto-pick";
+    slug: string;
+} | {
+    kind: "none";
+    /** Why no tenant was resolved (for caller-side messaging). */
+    reason: "anonymous" | "no-tenants" | "multiple-tenants-no-default" | "fetch-failed";
+    /** Available tenants when reason === "multiple-tenants-no-default". */
+    tenants?: TenantSummary[];
+    /** Network error string when reason === "fetch-failed". */
+    error?: string;
+};
+export declare function resolveTenant(opts?: ResolveTenantOptions): Promise<ResolvedTenant>;
+/**
+ * Helper for callers that just want the slug (or null) without inspecting
+ * the resolution kind. The caller is responsible for handling the null
+ * case (typically by surfacing a clear error message).
+ */
+export declare function resolveTenantSlug(opts?: ResolveTenantOptions): Promise<string | null>;

package/dist/lib/tenant-resolver.js

@@ -0,0 +1,79 @@
+// ---------------------------------------------------------------------------
+// tenant-resolver.ts — 0839 ADR-002 priority-ordered resolution.
+//
+// Order:
+//   1. Explicit --tenant flag (highest)
+//   2. VSKILL_TENANT env var
+//   3. ~/.vskill/config.json `currentTenant`
+//   4. Auto-pick when the user has exactly N=1 tenant
+//   5. Error — caller decides whether to surface a multi-tenant prompt
+//
+// `resolveTenant` is intentionally async: step (4) requires a network
+// call to /api/v1/account/tenants. We short-circuit before that for the
+// common-case (flag/env/config). The fetcher is dependency-injected so
+// tests don't hit the network.
+//
+// The resolver does NOT mutate any state (no env writes, no config
+// writes). Callers pass the result to subsequent API calls via
+// `apiRequest({ tenantOverride })` or by calling the returned context.
+// ---------------------------------------------------------------------------
+import { getActiveTenant, } from "./active-tenant.js";
+import { listTenants as defaultListTenants, } from "../api/client.js";
+export async function resolveTenant(opts = {}) {
+    // 1. Explicit flag.
+    if (opts.flag && opts.flag.length > 0) {
+        return { kind: "flag", slug: opts.flag };
+    }
+    // 2. Env var.
+    const env = opts.envValue !== undefined ? opts.envValue : process.env.VSKILL_TENANT;
+    if (env && env.length > 0) {
+        return { kind: "env", slug: env };
+    }
+    // 3. Config file.
+    const fromConfig = getActiveTenant(opts.activeTenantOptions);
+    if (fromConfig) {
+        return { kind: "config", slug: fromConfig };
+    }
+    // 4. Auto-pick when N=1 — only if the caller opted in.
+    if (opts.enableAutoPick === false) {
+        return { kind: "none", reason: "multiple-tenants-no-default" };
+    }
+    let tenants;
+    try {
+        tenants = await (opts.listTenants ?? defaultListTenants)();
+    }
+    catch (err) {
+        const e = err;
+        // 401 → caller is anonymous — bubble that up so the CLI can hint
+        // `vskill auth login` instead of "no tenants".
+        if (e.status === 401) {
+            return { kind: "none", reason: "anonymous" };
+        }
+        return {
+            kind: "none",
+            reason: "fetch-failed",
+            error: e.message ?? String(err),
+        };
+    }
+    if (tenants.length === 0) {
+        return { kind: "none", reason: "no-tenants" };
+    }
+    if (tenants.length === 1) {
+        return { kind: "auto-pick", slug: tenants[0].slug };
+    }
+    return {
+        kind: "none",
+        reason: "multiple-tenants-no-default",
+        tenants,
+    };
+}
+/**
+ * Helper for callers that just want the slug (or null) without inspecting
+ * the resolution kind. The caller is responsible for handling the null
+ * case (typically by surfacing a clear error message).
+ */
+export async function resolveTenantSlug(opts = {}) {
+    const r = await resolveTenant(opts);
+    return r.kind === "none" ? null : r.slug;
+}
+//# sourceMappingURL=tenant-resolver.js.map

package/dist/lib/tenant-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-resolver.js","sourceRoot":"","sources":["../../src/lib/tenant-resolver.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,SAAS;AACT,wCAAwC;AACxC,6BAA6B;AAC7B,6CAA6C;AAC7C,sDAAsD;AACtD,uEAAuE;AACvE,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,+BAA+B;AAC/B,EAAE;AACF,mEAAmE;AACnE,+DAA+D;AAC/D,uEAAuE;AACvE,8EAA8E;AAE9E,OAAO,EACL,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,IAAI,kBAAkB,GAElC,MAAM,kBAAkB,CAAC;AAuC1B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B,EAAE;IAE/B,oBAAoB;IACpB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,cAAc;IACd,MAAM,GAAG,GACP,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1E,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAkC,CAAC;QAC7C,iEAAiE;QACjE,+CAA+C;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,6BAA6B;QACrC,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA6B,EAAE;IAE/B,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC"}

package/dist/lockfile/types.d.ts

@@ -20,6 +20,14 @@ export interface SkillLockEntry {
     sourceRepoUrl?: string;
     /** 0737 — relative path from the source repo root to the skill's SKILL.md (e.g. "skills/foo/SKILL.md"). */
     sourceSkillPath?: string;
+    /** Stable source kind for provenance-aware update checks. */
+    sourceType?: "github" | "registry" | "plugin" | "local";
+    /** Git ref/branch used when the skill was installed. */
+    sourceBranch?: string;
+    /** Upstream commit SHA at install time, when resolvable. */
+    sourceCommitSha?: string;
+    /** Plugin namespace that provided this skill, when installed from a plugin layout. */
+    sourcePluginName?: string;
 }
 export interface VskillLock {
     version: 1;

package/dist/sidecar/eval-ui-manifest.json

@@ -0,0 +1 @@
+{"assets/AdvancedTab-DXo-3mo1.js":true,"assets/CreateSkillPage-D89GhSHY.js":true,"assets/FindSkillsPalette-Bm7MksUs.js":true,"assets/GeneralTab-Bff7FUgv.js":true,"assets/PrivacyTab-DviYzzqn.js":true,"assets/SearchPaletteCore-B8N9ZvNl.js":true,"assets/SkillDetailPanel-teFaY2IE.js":true,"assets/UpdateDropdown-DXPAkH4W.js":true,"assets/UpdatesTab-a4WtFQMN.js":true,"assets/core-DZAvsxlC.js":true,"assets/event-CDYWU2X3.js":true,"assets/fonts-i7Lkz2zN.css":true,"assets/globals-COVn1kUO.js":true,"assets/globals-DeOUj6aI.css":true,"assets/index-D7M0Jdss.js":true,"assets/inter-tight-cyrillic-ext-wght-normal-okcGN4Nq.woff2":true,"assets/inter-tight-cyrillic-wght-normal-BS41q_Tv.woff2":true,"assets/inter-tight-greek-ext-wght-normal-DQgQPNk4.woff2":true,"assets/inter-tight-greek-wght-normal-sS1B39LI.woff2":true,"assets/inter-tight-latin-ext-wght-normal-B4u9PlvR.woff2":true,"assets/inter-tight-latin-wght-normal-DX-nOvPD.woff2":true,"assets/inter-tight-vietnamese-wght-normal-TKKdAiBA.woff2":true,"assets/jetbrains-mono-cyrillic-wght-normal-D73BlboJ.woff2":true,"assets/jetbrains-mono-greek-wght-normal-Bw9x6K1M.woff2":true,"assets/jetbrains-mono-latin-ext-wght-normal-DBQx-q_a.woff2":true,"assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2":true,"assets/jetbrains-mono-vietnamese-wght-normal-Bt-aOZkq.woff2":true,"assets/lifecycle-BVUQgcsg.js":true,"assets/lifecycle-d1Sm9Hts.css":true,"assets/main-XYtQfbsG.js":true,"assets/mergeEvalChanges-Dpbbs4d4.js":true,"assets/preferences-2w6EpkkQ.js":true,"assets/preferences-BHZXB5dL.css":true,"assets/skill-url-C4ekwoGs.js":true,"assets/source-serif-4-cyrillic-ext-wght-normal-cHuGMAiY.woff2":true,"assets/source-serif-4-cyrillic-wght-normal-DwHjdM4S.woff2":true,"assets/source-serif-4-greek-wght-normal-ece1310W.woff2":true,"assets/source-serif-4-latin-ext-wght-normal-CxNHBx-q.woff2":true,"assets/source-serif-4-latin-wght-normal-D9elroTD.woff2":true,"assets/source-serif-4-vietnamese-wght-normal-D-yuW59g.woff2":true,"assets/useDesktopBridge-B8C58yZY.js":true,"favicon.png":true,"index.html":true,"lifecycle.html":true,"preferences.html":true,"skill-studio-logo.png":true}

package/dist/sidecar/sea-config.json

@@ -0,0 +1,57 @@
+{
+  "main": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/sidecar/server.cjs",
+  "output": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/sidecar/sea-prep.blob",
+  "disableExperimentalSEAWarning": true,
+  "useSnapshot": false,
+  "useCodeCache": false,
+  "assets": {
+    "eval-ui-manifest.json": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/sidecar/eval-ui-manifest.json",
+    "vskill-version.txt": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/sidecar/vskill-version.txt",
+    "eval-ui/assets/AdvancedTab-DXo-3mo1.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/AdvancedTab-DXo-3mo1.js",
+    "eval-ui/assets/CreateSkillPage-D89GhSHY.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/CreateSkillPage-D89GhSHY.js",
+    "eval-ui/assets/FindSkillsPalette-Bm7MksUs.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/FindSkillsPalette-Bm7MksUs.js",
+    "eval-ui/assets/GeneralTab-Bff7FUgv.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/GeneralTab-Bff7FUgv.js",
+    "eval-ui/assets/PrivacyTab-DviYzzqn.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/PrivacyTab-DviYzzqn.js",
+    "eval-ui/assets/SearchPaletteCore-B8N9ZvNl.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/SearchPaletteCore-B8N9ZvNl.js",
+    "eval-ui/assets/SkillDetailPanel-teFaY2IE.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/SkillDetailPanel-teFaY2IE.js",
+    "eval-ui/assets/UpdateDropdown-DXPAkH4W.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/UpdateDropdown-DXPAkH4W.js",
+    "eval-ui/assets/UpdatesTab-a4WtFQMN.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/UpdatesTab-a4WtFQMN.js",
+    "eval-ui/assets/core-DZAvsxlC.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/core-DZAvsxlC.js",
+    "eval-ui/assets/event-CDYWU2X3.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/event-CDYWU2X3.js",
+    "eval-ui/assets/fonts-i7Lkz2zN.css": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/fonts-i7Lkz2zN.css",
+    "eval-ui/assets/globals-COVn1kUO.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/globals-COVn1kUO.js",
+    "eval-ui/assets/globals-DeOUj6aI.css": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/globals-DeOUj6aI.css",
+    "eval-ui/assets/index-D7M0Jdss.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/index-D7M0Jdss.js",
+    "eval-ui/assets/inter-tight-cyrillic-ext-wght-normal-okcGN4Nq.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-cyrillic-ext-wght-normal-okcGN4Nq.woff2",
+    "eval-ui/assets/inter-tight-cyrillic-wght-normal-BS41q_Tv.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-cyrillic-wght-normal-BS41q_Tv.woff2",
+    "eval-ui/assets/inter-tight-greek-ext-wght-normal-DQgQPNk4.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-greek-ext-wght-normal-DQgQPNk4.woff2",
+    "eval-ui/assets/inter-tight-greek-wght-normal-sS1B39LI.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-greek-wght-normal-sS1B39LI.woff2",
+    "eval-ui/assets/inter-tight-latin-ext-wght-normal-B4u9PlvR.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-latin-ext-wght-normal-B4u9PlvR.woff2",
+    "eval-ui/assets/inter-tight-latin-wght-normal-DX-nOvPD.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-latin-wght-normal-DX-nOvPD.woff2",
+    "eval-ui/assets/inter-tight-vietnamese-wght-normal-TKKdAiBA.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/inter-tight-vietnamese-wght-normal-TKKdAiBA.woff2",
+    "eval-ui/assets/jetbrains-mono-cyrillic-wght-normal-D73BlboJ.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/jetbrains-mono-cyrillic-wght-normal-D73BlboJ.woff2",
+    "eval-ui/assets/jetbrains-mono-greek-wght-normal-Bw9x6K1M.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/jetbrains-mono-greek-wght-normal-Bw9x6K1M.woff2",
+    "eval-ui/assets/jetbrains-mono-latin-ext-wght-normal-DBQx-q_a.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/jetbrains-mono-latin-ext-wght-normal-DBQx-q_a.woff2",
+    "eval-ui/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2",
+    "eval-ui/assets/jetbrains-mono-vietnamese-wght-normal-Bt-aOZkq.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/jetbrains-mono-vietnamese-wght-normal-Bt-aOZkq.woff2",
+    "eval-ui/assets/lifecycle-BVUQgcsg.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/lifecycle-BVUQgcsg.js",
+    "eval-ui/assets/lifecycle-d1Sm9Hts.css": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/lifecycle-d1Sm9Hts.css",
+    "eval-ui/assets/main-XYtQfbsG.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/main-XYtQfbsG.js",
+    "eval-ui/assets/mergeEvalChanges-Dpbbs4d4.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/mergeEvalChanges-Dpbbs4d4.js",
+    "eval-ui/assets/preferences-2w6EpkkQ.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/preferences-2w6EpkkQ.js",
+    "eval-ui/assets/preferences-BHZXB5dL.css": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/preferences-BHZXB5dL.css",
+    "eval-ui/assets/skill-url-C4ekwoGs.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/skill-url-C4ekwoGs.js",
+    "eval-ui/assets/source-serif-4-cyrillic-ext-wght-normal-cHuGMAiY.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-cyrillic-ext-wght-normal-cHuGMAiY.woff2",
+    "eval-ui/assets/source-serif-4-cyrillic-wght-normal-DwHjdM4S.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-cyrillic-wght-normal-DwHjdM4S.woff2",
+    "eval-ui/assets/source-serif-4-greek-wght-normal-ece1310W.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-greek-wght-normal-ece1310W.woff2",
+    "eval-ui/assets/source-serif-4-latin-ext-wght-normal-CxNHBx-q.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-latin-ext-wght-normal-CxNHBx-q.woff2",
+    "eval-ui/assets/source-serif-4-latin-wght-normal-D9elroTD.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-latin-wght-normal-D9elroTD.woff2",
+    "eval-ui/assets/source-serif-4-vietnamese-wght-normal-D-yuW59g.woff2": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/source-serif-4-vietnamese-wght-normal-D-yuW59g.woff2",
+    "eval-ui/assets/useDesktopBridge-B8C58yZY.js": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/assets/useDesktopBridge-B8C58yZY.js",
+    "eval-ui/favicon.png": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/favicon.png",
+    "eval-ui/index.html": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/index.html",
+    "eval-ui/lifecycle.html": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/lifecycle.html",
+    "eval-ui/preferences.html": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/preferences.html",
+    "eval-ui/skill-studio-logo.png": "/Users/antonabyzov/Projects/github/specweave-umb/repositories/anton-abyzov/vskill/dist/eval-ui/skill-studio-logo.png"
+  }
+}