wicked-crew 0.7.25 → 0.7.26

package/dist/skills/plugin-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-source.js","sourceRoot":"","sources":["../../src/skills/plugin-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAUzE,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,OAAe,OAAO,EAAE;IAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5C,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAEtC;IACA;IACA;IAHX,YACW,IAAY,EACZ,KAAa,EACb,MAAc;QAEvB,KAAK,CACH,iBAAiB,IAAI,KAAK,KAAK,qBAAqB,MAAM,oEAAoE;YAC5H,8GAA8G;YAC9G,0GAA0G,CAC7G,CAAC;QARO,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QACb,WAAM,GAAN,MAAM,CAAQ;QAOvB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAK,GAA6B,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvH,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAA+B,EAAE,iBAAyB,IAAI;IACxG,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAW,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,wBAAwB,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sDAAsD;IACvI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC1D,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sHAAsH;AACtH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACrE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AACrG,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAmD,EAAE;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,kBAAkB,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;SAC/D,IAAI,CAAC,eAAe,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;AACjG,CAAC;AASD,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,MAAoB;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YACrD,GAAG,EAAE,MAAM,CAAC,IAAI;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,cAAc;YACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;YAC5D,GAAG,EAAE,MAAM,CAAC,IAAI;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,cAAc;YACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/skills/refs.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Reference extraction over skill text (design v3 §4/§5): the two link shapes garden skills use
+ * to reach files outside their own directory, plus the cwd-relative script invocation that makes a
+ * skill Claude-only.
+ *
+ *   - `${CLAUDE_PLUGIN_ROOT}/<p>` — the plugin-root form (461 literals across 102 files in the
+ *     live 12.32.0 plugin): resolved against the SNAPSHOT root at publish, so a reference into a
+ *     disabled skill or a file the bundle does not carry is a blocking finding naming file:line.
+ *   - `../<p>` — sibling links (`repo-learn/SKILL.md` → `../search/refs/hotspots.md`): resolved
+ *     from the referencing file's directory, must land inside the snapshot.
+ *   - `python3 scripts/…` / `python3 -u scripts/x/run.py` / `bash scripts/x` / `./scripts/x` — a
+ *     script invoked relative to the WORKTREE cwd (`domain-extractor/SKILL.md:42`): not a reference
+ *     to resolve, but a portability marker. ANY interpreter followed by a cwd-relative path (after
+ *     optional flags) counts, not only one literally followed by `scripts/` (codex round 2).
+ *
+ * `portable` (v3 §5) is `false` when a skill's files carry any of the three: non-Claude CLIs have
+ * no plugin root, no snapshot cwd, and only a flat `<name>/SKILL.md` layout — a skill that needs
+ * any of them is Claude-only: excluded from every non-Claude delivery view the snapshot carries
+ * (`views/copilot/`, design v3.2 §4) and from the per-launch `--skill` lists core builds.
+ *
+ * Path tokens keep every ORDINARY filename character (`+`, `@`, `~`, `%`, `=`, `,`, `:` …): a
+ * reference truncated at the first unusual character would validate a PREFIX of the file it names
+ * (`scripts/a+b.py` → `scripts/a`), so the token runs until whitespace, a quote/backtick, a
+ * bracket/paren/brace, a shell separator (`|;&<>`) or a glob metacharacter (`*`, `?` — `foo*` is a
+ * pattern, not a file the snapshot can carry; `PATH_CHARS` is the one stop set) — trailing sentence
+ * punctuation is then trimmed.
+ */
+/** The literal every plugin-root reference starts with. */
+export declare const PLUGIN_ROOT_MARKER = "${CLAUDE_PLUGIN_ROOT}";
+/** One reference found in a text: the 1-based `line` it sits on and the path it names. */
+export interface TextRef {
+    line: number;
+    /** For `plugin-root`: plugin-relative (`scripts/_python.sh`; `''` for the bare root). For
+     *  `relative`: as written (`../search/refs/hotspots.md`). */
+    path: string;
+    kind: 'plugin-root' | 'relative';
+}
+/**
+ * Resolve a `${CLAUDE_PLUGIN_ROOT}/<p>` reference to a normalized plugin-relative path: a trailing
+ * `/` (a directory reference) is dropped, `.` segments folded, and any path that climbs OUT of the
+ * plugin root (`..`, `scripts/../../x`) answers `null` — never the root, never a sibling of it.
+ * `''` is the bare root.
+ */
+export declare function resolvePluginRootRef(p: string): string | null;
+/** Every `${CLAUDE_PLUGIN_ROOT}/<p>` reference in `text`, in order. */
+export declare function extractPluginRootRefs(text: string): TextRef[];
+/** Every `../<p>` reference in `text`, in order (as written; the caller resolves it). */
+export declare function extractRelativeRefs(text: string): TextRef[];
+/**
+ * Resolve a `../<p>` reference written in the file at plugin-relative `fileRel` to a
+ * plugin-relative path, or `null` when it climbs out of the plugin root.
+ */
+export declare function resolveRelativeRef(fileRel: string, ref: string): string | null;
+export type PortabilityIssue = 'plugin-root' | 'relative-link' | 'cwd-script';
+/** The first reason `text` is not portable to a non-Claude CLI, or `null` when it is. */
+export declare function portabilityIssueOf(text: string): PortabilityIssue | null;
+export declare function looksBinary(buf: Buffer): boolean;
+//# sourceMappingURL=refs.d.ts.map

package/dist/skills/refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.d.ts","sourceRoot":"","sources":["../../src/skills/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb;iEAC6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;CAClC;AA4CD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7D;AAED,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAW7D;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAU3D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9E;AAED,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;AAE9E,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAKxE;AAID,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEhD"}

package/dist/skills/refs.js

@@ -0,0 +1,133 @@
+/**
+ * Reference extraction over skill text (design v3 §4/§5): the two link shapes garden skills use
+ * to reach files outside their own directory, plus the cwd-relative script invocation that makes a
+ * skill Claude-only.
+ *
+ *   - `${CLAUDE_PLUGIN_ROOT}/<p>` — the plugin-root form (461 literals across 102 files in the
+ *     live 12.32.0 plugin): resolved against the SNAPSHOT root at publish, so a reference into a
+ *     disabled skill or a file the bundle does not carry is a blocking finding naming file:line.
+ *   - `../<p>` — sibling links (`repo-learn/SKILL.md` → `../search/refs/hotspots.md`): resolved
+ *     from the referencing file's directory, must land inside the snapshot.
+ *   - `python3 scripts/…` / `python3 -u scripts/x/run.py` / `bash scripts/x` / `./scripts/x` — a
+ *     script invoked relative to the WORKTREE cwd (`domain-extractor/SKILL.md:42`): not a reference
+ *     to resolve, but a portability marker. ANY interpreter followed by a cwd-relative path (after
+ *     optional flags) counts, not only one literally followed by `scripts/` (codex round 2).
+ *
+ * `portable` (v3 §5) is `false` when a skill's files carry any of the three: non-Claude CLIs have
+ * no plugin root, no snapshot cwd, and only a flat `<name>/SKILL.md` layout — a skill that needs
+ * any of them is Claude-only: excluded from every non-Claude delivery view the snapshot carries
+ * (`views/copilot/`, design v3.2 §4) and from the per-launch `--skill` lists core builds.
+ *
+ * Path tokens keep every ORDINARY filename character (`+`, `@`, `~`, `%`, `=`, `,`, `:` …): a
+ * reference truncated at the first unusual character would validate a PREFIX of the file it names
+ * (`scripts/a+b.py` → `scripts/a`), so the token runs until whitespace, a quote/backtick, a
+ * bracket/paren/brace, a shell separator (`|;&<>`) or a glob metacharacter (`*`, `?` — `foo*` is a
+ * pattern, not a file the snapshot can carry; `PATH_CHARS` is the one stop set) — trailing sentence
+ * punctuation is then trimmed.
+ */
+import { posix } from 'node:path';
+/** The literal every plugin-root reference starts with. */
+export const PLUGIN_ROOT_MARKER = '${CLAUDE_PLUGIN_ROOT}';
+/** A path token: everything up to whitespace, a quote/backtick, a bracket/paren/brace, a shell separator, or a glob metacharacter (`*`, `?`). */
+const PATH_CHARS = '[^\\s"\'`()\\[\\]{}<>|;&*?]';
+const PLUGIN_ROOT_RE = new RegExp(`\\$\\{CLAUDE_PLUGIN_ROOT\\}(\\/${PATH_CHARS}*)?`, 'g');
+// A `../`-prefixed path token not glued to a preceding path character (so `a/../b` inside a
+// longer path is not re-read as a reference of its own).
+const RELATIVE_RE = new RegExp(`(?<![A-Za-z0-9_./-])((?:\\.\\.\\/)+${PATH_CHARS}*)`, 'g');
+// A shell invocation of a plugin script by a cwd-relative path: an interpreter, optional options,
+// then a path token that is relative — not absolute, not `$`-expanded, not `~` — and looks like a
+// script (carries a `/`, or a script extension). Options come in two shapes (codex round 5): a
+// bare flag (`-u`, `--frozen`, `--require=x`), and an option whose VALUE is the NEXT token —
+// python `-W ignore` / `-X dev` / `-m mod` / `-c code`, node `--require x` / `-r x` / `--loader x`
+// / `--import x` / `-e code`, uv `--python x` / `--with x` / `--directory x`, bash `-c cmd` … —
+// which is consumed WITH its value so the script path after it is still seen (`python3 -W ignore
+// scripts/foo.py`, `node --require foo scripts/x.js` used to read as portable). A value-taking
+// option with no path after it (`python3 -m pytest`, `python3 -c "print(1)"`) is not an invocation.
+const INTERPRETER = '(?:python3?|uv\\s+run|bash|sh|zsh|node|npx|tsx|deno\\s+run)';
+const VALUED_OPTION = '(?:-[WXmcQrepCo]|--(?:require|loader|experimental-loader|import|eval|print|env-file|conditions|input-type|python|with|directory|project|config|import-map))';
+// The bare-flag alternative must NOT be able to match a value-taking option that has a value (the
+// negative lookahead): otherwise backtracking would read `-W` as a bare flag and its value
+// `scripts/foo.py` as the script (`python3 -W scripts/foo.py` is NOT an invocation of that file).
+const FLAG = `(?:\\s+(?:${VALUED_OPTION}\\s+\\S+|(?!${VALUED_OPTION}\\s)-{1,2}[A-Za-z0-9_-]+(?:=\\S+)?))*`;
+const SEG = '[A-Za-z0-9_.+@%=,:~-]+';
+const RELATIVE_SCRIPT = `(?:\\.{1,2}\\/)?(?:${SEG}\\/)*${SEG}(?:\\/|\\.(?:py|sh|bash|zsh|mjs|cjs|js|ts))`;
+const CWD_SCRIPT_RE = new RegExp(`(?<![A-Za-z0-9_./-])${INTERPRETER}${FLAG}\\s+(?![/$~])(?:${RELATIVE_SCRIPT}|(?:${SEG}\\/)+${SEG})(?![A-Za-z0-9_])` +
+    `|(?<![A-Za-z0-9_./$-])\\.\\/${SEG}(?:\\/${SEG})*`);
+/**
+ * Trailing sentence punctuation a prose reference picks up (`…/foo.` at the end of a sentence,
+ * `…/foo,` before a clause). A dot-DOT segment is never punctuation: `${CLAUDE_PLUGIN_ROOT}/..`
+ * must survive as `..` so the resolver refuses it — stripping it would turn a plugin-root ESCAPE
+ * into the plugin root itself (codex review of #480). A lone trailing `.` after a slash (`dir/.`)
+ * is the sentence's full stop. Only TRAILING punctuation is trimmed — `a,b.py` keeps its comma.
+ */
+function trimPunctuation(p) {
+    const noSeparators = p.replace(/[,:]+$/, '');
+    if (/(^|\/)\.\.$/.test(noSeparators))
+        return noSeparators;
+    return noSeparators.replace(/\.+$/, '');
+}
+/**
+ * Resolve a `${CLAUDE_PLUGIN_ROOT}/<p>` reference to a normalized plugin-relative path: a trailing
+ * `/` (a directory reference) is dropped, `.` segments folded, and any path that climbs OUT of the
+ * plugin root (`..`, `scripts/../../x`) answers `null` — never the root, never a sibling of it.
+ * `''` is the bare root.
+ */
+export function resolvePluginRootRef(p) {
+    if (p === '' || p === '.')
+        return '';
+    const normalized = posix.normalize(p).replace(/\/+$/, '');
+    if (normalized === '..' || normalized.startsWith('../'))
+        return null;
+    return normalized === '.' ? '' : normalized;
+}
+/** Every `${CLAUDE_PLUGIN_ROOT}/<p>` reference in `text`, in order. */
+export function extractPluginRootRefs(text) {
+    const out = [];
+    const lines = text.split('\n');
+    for (let i = 0; i < lines.length; i += 1) {
+        const line = lines[i] ?? '';
+        for (const m of line.matchAll(PLUGIN_ROOT_RE)) {
+            const tail = m[1] ?? '';
+            out.push({ line: i + 1, path: trimPunctuation(tail.replace(/^\//, '')), kind: 'plugin-root' });
+        }
+    }
+    return out;
+}
+/** Every `../<p>` reference in `text`, in order (as written; the caller resolves it). */
+export function extractRelativeRefs(text) {
+    const out = [];
+    const lines = text.split('\n');
+    for (let i = 0; i < lines.length; i += 1) {
+        const line = lines[i] ?? '';
+        for (const m of line.matchAll(RELATIVE_RE)) {
+            out.push({ line: i + 1, path: trimPunctuation(m[1] ?? ''), kind: 'relative' });
+        }
+    }
+    return out;
+}
+/**
+ * Resolve a `../<p>` reference written in the file at plugin-relative `fileRel` to a
+ * plugin-relative path, or `null` when it climbs out of the plugin root.
+ */
+export function resolveRelativeRef(fileRel, ref) {
+    const resolved = posix.normalize(posix.join(posix.dirname(fileRel), ref));
+    if (resolved === '..' || resolved.startsWith('../'))
+        return null;
+    return resolved === '.' ? '' : resolved.replace(/\/$/, '');
+}
+/** The first reason `text` is not portable to a non-Claude CLI, or `null` when it is. */
+export function portabilityIssueOf(text) {
+    if (text.includes(PLUGIN_ROOT_MARKER))
+        return 'plugin-root';
+    if (CWD_SCRIPT_RE.test(text))
+        return 'cwd-script';
+    if (extractRelativeRefs(text).length > 0)
+        return 'relative-link';
+    return null;
+}
+/** Binary sniff for reference scanning: a NUL in the first 8 KB means "not text, do not scan". */
+const SNIFF_BYTES = 8 * 1024;
+export function looksBinary(buf) {
+    return buf.subarray(0, Math.min(buf.length, SNIFF_BYTES)).includes(0);
+}
+//# sourceMappingURL=refs.js.map

package/dist/skills/refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.js","sourceRoot":"","sources":["../../src/skills/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAW1D,iJAAiJ;AACjJ,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,kCAAkC,UAAU,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1F,4FAA4F;AAC5F,yDAAyD;AACzD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,sCAAsC,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;AAC1F,kGAAkG;AAClG,kGAAkG;AAClG,+FAA+F;AAC/F,6FAA6F;AAC7F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,+FAA+F;AAC/F,oGAAoG;AACpG,MAAM,WAAW,GAAG,6DAA6D,CAAC;AAClF,MAAM,aAAa,GACjB,6JAA6J,CAAC;AAChK,kGAAkG;AAClG,2FAA2F;AAC3F,kGAAkG;AAClG,MAAM,IAAI,GAAG,aAAa,aAAa,eAAe,aAAa,uCAAuC,CAAC;AAC3G,MAAM,GAAG,GAAG,wBAAwB,CAAC;AACrC,MAAM,eAAe,GAAG,sBAAsB,GAAG,QAAQ,GAAG,6CAA6C,CAAC;AAC1G,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,uBAAuB,WAAW,GAAG,IAAI,mBAAmB,eAAe,OAAO,GAAG,QAAQ,GAAG,mBAAmB;IACjH,+BAA+B,GAAG,SAAS,GAAG,IAAI,CACrD,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IAC1D,OAAO,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AAC9C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,GAAW;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAID,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,aAAa,CAAC;IAC5D,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC;AAC7B,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/skills/root-fence.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The skills root is `<state home>/skills` — full stop. Not a setting, not an env override.
+ *
+ * Design v3.1 §1 (ONE storage root: every crew store hangs off `crewStateHome()`) and v3.2 §1 (wicked
+ * never writes into the user's own CLI directories) leave no room for a configurable root: codex
+ * round 5 on #480 showed that a `skills_root` setting (or `WICKED_CREW_SKILLS_ROOT`) accepting any
+ * absolute path let `PUT /settings {skills_root: "~/.codex/skills"}` make the SEED write into the
+ * user's codex skills before the runtime got around to reporting the location as incompatible. Both
+ * are retired (coordinator decision). What remains is this BOOT ASSERTION, evaluated by
+ * `createServer` before the store is constructed: the root's CANONICAL path must lie inside the
+ * daemon state home and outside every known user-level CLI directory, and the root entry itself
+ * must not be a symlink. A violation is `SkillsRootUnfencedError` — a daemon start error, never a
+ * warning after the first write.
+ *
+ * This is the one skills module beside plugin-source.ts that reads `homedir()` — to REFUSE roots,
+ * never to write: it imports nothing that writes (tests/skills-no-user-cli-writes.test.ts pins
+ * both facts).
+ */
+/** The skills root would lie outside the state home or inside a user CLI directory — the daemon does not start. */
+export declare class SkillsRootUnfencedError extends Error {
+    readonly root: string;
+    constructor(root: string, detail: string);
+}
+/**
+ * The user-level CLI configuration directories wicked must never write (design v3.2 §1), for `home`:
+ * codex, pi, copilot, opencode, Claude Code — the literal `~/.claude` AND the daemon's own
+ * `CLAUDE_CONFIG_DIR` when it points elsewhere (that is the config dir the user's Claude reads).
+ */
+export declare function userCliDirs(home?: string, env?: NodeJS.ProcessEnv): string[];
+/**
+ * The canonical spelling of `p`: the realpath of its deepest EXISTING ancestor with the missing tail
+ * re-joined — so a root that does not exist yet is judged by where it WOULD land, links in its
+ * ancestry resolved. Errors other than "does not exist" propagate (an unreadable ancestor is not
+ * judged lexically).
+ */
+export declare function canonicalPath(p: string): string;
+export interface RootFenceOptions {
+    /** The daemon state home (`crewStateHome()`) the root must lie inside. */
+    stateHome: string;
+    /** The user's home (tests inject a fake one). */
+    home?: string;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Refuse a skills root that (1) is a symlink itself, (2) canonically lies outside the state home, or
+ * (3) canonically lies inside a user CLI directory. Answers the canonical root. Throws
+ * `SkillsRootUnfencedError`. A root that does not exist yet is judged by its would-be canonical path.
+ */
+export declare function assertSkillsRootFenced(root: string, opts: RootFenceOptions): {
+    root: string;
+    canonical: string;
+};
+//# sourceMappingURL=root-fence.d.ts.map

package/dist/skills/root-fence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-fence.d.ts","sourceRoot":"","sources":["../../src/skills/root-fence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,mHAAmH;AACnH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM;CAQjB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAkB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAUpG;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB/C;AAOD,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAsBhH"}

package/dist/skills/root-fence.js

@@ -0,0 +1,109 @@
+/**
+ * The skills root is `<state home>/skills` — full stop. Not a setting, not an env override.
+ *
+ * Design v3.1 §1 (ONE storage root: every crew store hangs off `crewStateHome()`) and v3.2 §1 (wicked
+ * never writes into the user's own CLI directories) leave no room for a configurable root: codex
+ * round 5 on #480 showed that a `skills_root` setting (or `WICKED_CREW_SKILLS_ROOT`) accepting any
+ * absolute path let `PUT /settings {skills_root: "~/.codex/skills"}` make the SEED write into the
+ * user's codex skills before the runtime got around to reporting the location as incompatible. Both
+ * are retired (coordinator decision). What remains is this BOOT ASSERTION, evaluated by
+ * `createServer` before the store is constructed: the root's CANONICAL path must lie inside the
+ * daemon state home and outside every known user-level CLI directory, and the root entry itself
+ * must not be a symlink. A violation is `SkillsRootUnfencedError` — a daemon start error, never a
+ * warning after the first write.
+ *
+ * This is the one skills module beside plugin-source.ts that reads `homedir()` — to REFUSE roots,
+ * never to write: it imports nothing that writes (tests/skills-no-user-cli-writes.test.ts pins
+ * both facts).
+ */
+import { lstatSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, join, resolve, sep } from 'node:path';
+import { claudeConfigDir } from './plugin-source.js';
+/** The skills root would lie outside the state home or inside a user CLI directory — the daemon does not start. */
+export class SkillsRootUnfencedError extends Error {
+    root;
+    constructor(root, detail) {
+        super(`skills root ${root} refused: ${detail} — the skills root is <state home>/skills (not a setting) and must never lie inside a user CLI directory; ` +
+            'move the daemon state home (--db) out of the user CLI directory and restart');
+        this.root = root;
+        this.name = 'SkillsRootUnfencedError';
+    }
+}
+/**
+ * The user-level CLI configuration directories wicked must never write (design v3.2 §1), for `home`:
+ * codex, pi, copilot, opencode, Claude Code — the literal `~/.claude` AND the daemon's own
+ * `CLAUDE_CONFIG_DIR` when it points elsewhere (that is the config dir the user's Claude reads).
+ */
+export function userCliDirs(home = homedir(), env = process.env) {
+    const dirs = [
+        join(home, '.codex'),
+        join(home, '.pi'),
+        join(home, '.copilot'),
+        join(home, '.config', 'opencode'),
+        join(home, '.claude'),
+        claudeConfigDir(env, home),
+    ];
+    return [...new Set(dirs.map((d) => resolve(d)))];
+}
+/**
+ * The canonical spelling of `p`: the realpath of its deepest EXISTING ancestor with the missing tail
+ * re-joined — so a root that does not exist yet is judged by where it WOULD land, links in its
+ * ancestry resolved. Errors other than "does not exist" propagate (an unreadable ancestor is not
+ * judged lexically).
+ */
+export function canonicalPath(p) {
+    const abs = resolve(p);
+    const tail = [];
+    let cur = abs;
+    for (;;) {
+        try {
+            return join(realpathSync(cur), ...tail.reverse());
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== 'ENOENT' && code !== 'ENOTDIR')
+                throw err;
+        }
+        const parent = dirname(cur);
+        if (parent === cur)
+            return abs;
+        tail.push(basename(cur));
+        cur = parent;
+    }
+}
+/** Whether `path` is `dir` or lies beneath it (both already canonical). */
+function isInside(path, dir) {
+    return path === dir || path.startsWith(dir.endsWith(sep) ? dir : `${dir}${sep}`);
+}
+/**
+ * Refuse a skills root that (1) is a symlink itself, (2) canonically lies outside the state home, or
+ * (3) canonically lies inside a user CLI directory. Answers the canonical root. Throws
+ * `SkillsRootUnfencedError`. A root that does not exist yet is judged by its would-be canonical path.
+ */
+export function assertSkillsRootFenced(root, opts) {
+    let st;
+    try {
+        st = lstatSync(root);
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT' && err.code !== 'ENOTDIR')
+            throw err;
+    }
+    if (st?.isSymbolicLink() === true) {
+        throw new SkillsRootUnfencedError(root, 'a symlink stands in for the skills root (the store never follows links, the root included)');
+    }
+    const canonical = canonicalPath(root);
+    const stateHome = canonicalPath(opts.stateHome);
+    if (!isInside(canonical, stateHome) || canonical === stateHome) {
+        throw new SkillsRootUnfencedError(root, `its canonical path ${canonical} is not inside the daemon state home ${stateHome}`);
+    }
+    for (const dir of userCliDirs(opts.home, opts.env)) {
+        const canonicalDir = canonicalPath(dir);
+        if (isInside(canonical, canonicalDir)) {
+            throw new SkillsRootUnfencedError(root, `its canonical path ${canonical} lies inside the user CLI directory ${canonicalDir}`);
+        }
+    }
+    return { root, canonical };
+}
+//# sourceMappingURL=root-fence.js.map

package/dist/skills/root-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-fence.js","sourceRoot":"","sources":["../../src/skills/root-fence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,mHAAmH;AACnH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAErC;IADX,YACW,IAAY,EACrB,MAAc;QAEd,KAAK,CACH,eAAe,IAAI,aAAa,MAAM,4GAA4G;YAChJ,6EAA6E,CAChF,CAAC;QANO,SAAI,GAAJ,IAAI,CAAQ;QAOrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,OAAO,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IACxF,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACpB,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC;AACnF,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,IAAsB;IACzE,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAK,GAA6B,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC;IACvH,CAAC;IACD,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,4FAA4F,CAAC,CAAC;IACxI,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,SAAS,wCAAwC,SAAS,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,SAAS,uCAAuC,YAAY,EAAE,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC"}

package/dist/skills/root-names.d.ts

@@ -0,0 +1,42 @@
+/**
+ * EVERY name the daemon can ever create directly under `<state home>/skills/` and under its
+ * `snapshots/` slot — settled AND transient — in one table (design v3.5 §2; codex round 8 on #480).
+ *
+ * The worker Read fence (wicked-core) classifies the children of `skills/` and of `snapshots/` from
+ * the shared fixture `tests/fixtures/state-home-subtrees.json` (byte-identical in core and crew) and
+ * REFUSES a launch naming a child it does not know — so a transient name the store creates during a
+ * mutation (a `.staging-*` park-and-place directory, the `manifest.json.tmp-*` of a commit, a
+ * generation being written under `snapshots/.staging-*`, the `snapshots/.tmp-current-*` link before
+ * its rename) that is missing from the fixture is a live race between a mutation and a worker launch.
+ *
+ * This table is the store's side of that contract: the store binds its own constants to it
+ * (`store.ts`, `tree.ts`), `tests/skills-fence-names.test.ts` asserts the fixture's `skills` entry
+ * lists EXACTLY these patterns with these kinds (a static audit over the store's source backs it —
+ * every `join(this.rootDir, …)` / `join(this.snapshotsDir(), …)` the store writes must resolve to a
+ * row here), and a paused-operation test observes the transient names at the moment they exist.
+ * Adding a name the store writes means adding it HERE first; the tests then demand the fixture (and,
+ * through the coordinator, core) follow.
+ *
+ * Not listed: `baseline/.staging-*` (a capture being written) — `baseline/` is denied WHOLE, so its
+ * children are never classified individually.
+ */
+export type SkillsRootNameKind = 'dir' | 'file' | 'link';
+export interface SkillsRootName {
+    /** Exact name, or a `prefix-*` glob; `snapshots/…` for a child of the slot. */
+    pattern: string;
+    kind: SkillsRootNameKind;
+    /** Exists only for the width of one mutation (created, then renamed away or removed). */
+    transient: boolean;
+    /** Where the store creates it — prose for the reader and the audit. */
+    created_by: string;
+}
+/** The park-and-place staging prefix (`.staging-<op>-<hex>` under the root; `.staging-<hex>` under `baseline/` and `snapshots/`). */
+export declare const STAGING_PREFIX = ".staging-";
+/** The transient `current` link's prefix inside `snapshots/` (created there, renamed over `skills/current`). */
+export declare const CURRENT_TMP_PREFIX = ".tmp-current-";
+/** `writeFileAtomic`'s temp-file infix: `<file>.tmp-<hex>`, renamed over `<file>` — `manifest.json.tmp-*` at the root. */
+export declare const ATOMIC_TMP_INFIX = ".tmp-";
+/** The refusal sentinel directory name (`<root>/refused/skills.{blocked,config}`) — NAMED, never created. */
+export declare const REFUSED_DIRNAME = "refused";
+export declare const SKILLS_ROOT_NAMES: ReadonlyArray<SkillsRootName>;
+//# sourceMappingURL=root-names.d.ts.map

package/dist/skills/root-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-names.d.ts","sourceRoot":"","sources":["../../src/skills/root-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,kBAAkB,CAAC;IACzB,yFAAyF;IACzF,SAAS,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qIAAqI;AACrI,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,gHAAgH;AAChH,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,6GAA6G;AAC7G,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAY3D,CAAC"}

package/dist/skills/root-names.js

@@ -0,0 +1,44 @@
+/**
+ * EVERY name the daemon can ever create directly under `<state home>/skills/` and under its
+ * `snapshots/` slot — settled AND transient — in one table (design v3.5 §2; codex round 8 on #480).
+ *
+ * The worker Read fence (wicked-core) classifies the children of `skills/` and of `snapshots/` from
+ * the shared fixture `tests/fixtures/state-home-subtrees.json` (byte-identical in core and crew) and
+ * REFUSES a launch naming a child it does not know — so a transient name the store creates during a
+ * mutation (a `.staging-*` park-and-place directory, the `manifest.json.tmp-*` of a commit, a
+ * generation being written under `snapshots/.staging-*`, the `snapshots/.tmp-current-*` link before
+ * its rename) that is missing from the fixture is a live race between a mutation and a worker launch.
+ *
+ * This table is the store's side of that contract: the store binds its own constants to it
+ * (`store.ts`, `tree.ts`), `tests/skills-fence-names.test.ts` asserts the fixture's `skills` entry
+ * lists EXACTLY these patterns with these kinds (a static audit over the store's source backs it —
+ * every `join(this.rootDir, …)` / `join(this.snapshotsDir(), …)` the store writes must resolve to a
+ * row here), and a paused-operation test observes the transient names at the moment they exist.
+ * Adding a name the store writes means adding it HERE first; the tests then demand the fixture (and,
+ * through the coordinator, core) follow.
+ *
+ * Not listed: `baseline/.staging-*` (a capture being written) — `baseline/` is denied WHOLE, so its
+ * children are never classified individually.
+ */
+/** The park-and-place staging prefix (`.staging-<op>-<hex>` under the root; `.staging-<hex>` under `baseline/` and `snapshots/`). */
+export const STAGING_PREFIX = '.staging-';
+/** The transient `current` link's prefix inside `snapshots/` (created there, renamed over `skills/current`). */
+export const CURRENT_TMP_PREFIX = '.tmp-current-';
+/** `writeFileAtomic`'s temp-file infix: `<file>.tmp-<hex>`, renamed over `<file>` — `manifest.json.tmp-*` at the root. */
+export const ATOMIC_TMP_INFIX = '.tmp-';
+/** The refusal sentinel directory name (`<root>/refused/skills.{blocked,config}`) — NAMED, never created. */
+export const REFUSED_DIRNAME = 'refused';
+export const SKILLS_ROOT_NAMES = [
+    { pattern: 'baseline', kind: 'dir', transient: false, created_by: 'store.ts captureBaseline — baseline/<hash>/ per captured bundle' },
+    { pattern: 'effective', kind: 'dir', transient: false, created_by: 'store.ts seed — the operator-edited plugin root' },
+    { pattern: 'manifest.json', kind: 'file', transient: false, created_by: 'store.ts writeManifest' },
+    { pattern: `manifest.json${ATOMIC_TMP_INFIX}*`, kind: 'file', transient: true, created_by: 'tree.ts writeFileAtomic — the manifest commit writes manifest.json.tmp-<hex> and renames it over manifest.json' },
+    { pattern: 'snapshots', kind: 'dir', transient: false, created_by: 'store.ts publishSerialized — the read slot; <gen>/ children are what a worker reads' },
+    { pattern: 'current', kind: 'link', transient: false, created_by: 'store.ts flipCurrent — current -> snapshots/<gen>' },
+    { pattern: '.uv-cache', kind: 'dir', transient: false, created_by: "venv.ts UV_CACHE_DIRNAME — the daemon's own uv cache (UV_CACHE_DIR)" },
+    { pattern: `${STAGING_PREFIX}*`, kind: 'dir', transient: true, created_by: 'store.ts swapOwnFiles / stageSingleFile / reset / refreshBaseline — the park-and-place staging (new/ + old/) of one mutation' },
+    { pattern: REFUSED_DIRNAME, kind: 'dir', transient: false, created_by: 'runtime.ts refusalPath — NAMED as the non-existent engine input <root>/refused/skills.{blocked,config}; never created' },
+    { pattern: `snapshots/${STAGING_PREFIX}*`, kind: 'dir', transient: true, created_by: 'store.ts publishSerialized — a generation being written, renamed to snapshots/<gen>' },
+    { pattern: `snapshots/${CURRENT_TMP_PREFIX}*`, kind: 'link', transient: true, created_by: 'store.ts flipCurrent — the transient current link, renamed over skills/current' },
+];
+//# sourceMappingURL=root-names.js.map

package/dist/skills/root-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-names.js","sourceRoot":"","sources":["../../src/skills/root-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAcH,qIAAqI;AACrI,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,gHAAgH;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD,0HAA0H;AAC1H,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,6GAA6G;AAC7G,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAkC;IAC9D,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,iEAAiE,EAAE;IACrI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,iDAAiD,EAAE;IACtH,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,wBAAwB,EAAE;IAClG,EAAE,OAAO,EAAE,gBAAgB,gBAAgB,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,gHAAgH,EAAE;IAC7M,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,qFAAqF,EAAE;IAC1J,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,mDAAmD,EAAE;IACvH,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,qEAAqE,EAAE;IAC1I,EAAE,OAAO,EAAE,GAAG,cAAc,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,8HAA8H,EAAE;IAC3M,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,uHAAuH,EAAE;IAChM,EAAE,OAAO,EAAE,aAAa,cAAc,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,qFAAqF,EAAE;IAC5K,EAAE,OAAO,EAAE,aAAa,kBAAkB,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,gFAAgF,EAAE;CAC7K,CAAC"}