wicked-crew 0.7.25 → 0.7.26

package/dist/skills/runtime.d.ts

@@ -0,0 +1,130 @@
+/**
+ * The skills seam as the daemon holds it: ONE store over `<state home>/skills` + the one thing the
+ * daemon derives from it — the engine env (`WICKED_SKILLS_SNAPSHOT`).
+ *
+ * `apply()` is called at boot (`createServer`), after the root passed the fence (root-fence.ts):
+ * seed from the live plugin when the root is empty, publish a first snapshot when none exists,
+ * export the resolved snapshot path. There is NO skills setting to re-apply on `PUT /settings` —
+ * the root is `<state home>/skills`, full stop (design v3.1 §1 one storage root; v3.2 §1 never a
+ * user CLI directory; codex round 5 on #480 retired `skills_root` and `WICKED_CREW_SKILLS_ROOT`:
+ * a configurable root let seeding write into `~/.codex/skills`). `apply` never throws — but it does
+ * NOT fail open either. The degradation ladder (design v3 §3; codex review of #480) distinguishes
+ * three outcomes:
+ *
+ *   published      `current` verified → `WICKED_SKILLS_SNAPSHOT=<resolved snapshot>`.
+ *   fallback       ABSENT configuration — no wicked-garden installed, nothing to seed from. The ONE
+ *                  case the engine input is restored to the value this process booted with (an
+ *                  operator export or the test harness's arming survives; unset when there was
+ *                  none): the engine's own ladder falls back to the live installed cache and logs
+ *                  `skills.fallback`. Finding `skills.fallback` (warning). The log line says which
+ *                  of the two happened — "restored to <value>" or "left unset" — never one for the
+ *                  other (Copilot on #480).
+ *   blocked        the FIRST publish is blocked (a defective catalog: a reference that ESCAPES the
+ *                  plugin root, a missing required skill, a missing plugin catalog, a file outside
+ *                  the bundle closure, a baseline env that could not be provisioned — a reference
+ *                  whose target is merely MISSING is a warning and publishes, design v3.4 §1).
+ *                  There is no snapshot to offer and the live cache is NOT a
+ *                  substitute — the engine input is pointed at a path that does not exist
+ *                  (`<root>/refused/skills.blocked`), which the engine treats as an invalid explicit
+ *                  path: every launch fails loudly naming it until the operator fixes the catalog
+ *                  and publishes. Finding `skills.blocked` (error).
+ *   config-error   an INVALID configuration — a corrupt manifest, a `current` link that fails
+ *                  verification, a root that is not the directory the store bound. Same refusal path
+ *                  (`<root>/refused/skills.config`), same loud launch failure: recorded disablement
+ *                  is never bypassed by "restoring" the live cache. Finding `skills.config` (error).
+ *
+ * What the engine is handed is EXACTLY ONE variable, `WICKED_SKILLS_SNAPSHOT` = the absolute REAL
+ * path of `snapshots/<gen>` (v3.1 §2, v3.4 §2); `WICKED_SKILLS_CURRENT` is withdrawn and never set,
+ * and `WICKED_CREW_STATE_HOME` is RETIRED as an engine input (v3.4 §2): core derives the state home
+ * it fences from the snapshot path's fixed layout (`<state home>/skills/snapshots/<gen>` — parent
+ * `snapshots`, grandparent `skills`, else a config error naming the path). Because the root IS
+ * `<state home>/skills` (asserted at boot, identity-checked on every operation), that layout holds
+ * by construction. The canonical state home is still REPORTED (`health().stateHome`) for humans.
+ *
+ * NOTHING here writes into the user's own CLI directories (design v3.2 §1): the v3 additive
+ * mirror into the user's codex/pi/copilot/opencode skill dirs is withdrawn, and with it the
+ * `skills_mirror` setting. Skills reach non-Claude workers only through the per-launch delivery
+ * core performs from the snapshot (the generated `views/copilot/` for copilot, `--skill` lists for
+ * pi); a CLI without a lever runs without wicked skills — never through a side channel into the
+ * user's home.
+ *
+ * `health()` is the last outcome, surfaced read-only on `GET /diagnostics` (`skills`).
+ */
+import type { LaunchNotice } from '../core/adapter.js';
+import type { CoreEvent } from '../core/types.js';
+import { REFUSED_DIRNAME } from './root-names.js';
+import { type SkillsStore } from './store.js';
+/** The refusal sentinel directory name — from the ONE table of root names (design v3.5 §2); re-exported for the tests. */
+export { REFUSED_DIRNAME };
+export type SkillsHealthState = 'published' | 'fallback' | 'blocked' | 'config-error' | 'disabled';
+export type SkillsHealthFindingKind = 'skills.fallback' | 'skills.blocked' | 'skills.config';
+export interface SkillsHealthFinding {
+    kind: SkillsHealthFindingKind;
+    severity: 'warning' | 'error';
+    message: string;
+}
+/** The seam's last outcome — what `GET /diagnostics` reports as `skills`. */
+export interface SkillsHealth {
+    state: SkillsHealthState;
+    /** The skills root (`<state home>/skills`), or `null` when the daemon booted without the seam. */
+    root: string | null;
+    /** The verified published snapshot, or `null`. */
+    current: {
+        gen: number;
+        path: string;
+    } | null;
+    /** What `WICKED_SKILLS_SNAPSHOT` is exported as right now (`null` = unset / boot value). */
+    engineInput: string | null;
+    /** The canonical daemon state home — reported for HUMANS (`GET /diagnostics`); NOT an engine input
+     *  (v3.4 §2: core reads only `WICKED_SKILLS_SNAPSHOT` and derives the state home from its layout).
+     *  `null` when `disabled`. */
+    stateHome: string | null;
+    findings: SkillsHealthFinding[];
+}
+/** The `skills` block a daemon booted WITHOUT the seam reports. */
+export declare function disabledSkillsHealth(): SkillsHealth;
+/**
+ * The path the engine input is pointed at when the daemon has NO valid snapshot to offer and must
+ * not fall back: it does not exist, so the engine's "explicit path invalid → launch fails loudly"
+ * rung fires, and the path itself names why (`…/refused/skills.blocked`).
+ */
+export declare function refusalPath(root: string, kind: 'skills.blocked' | 'skills.config'): string;
+export interface SkillsRuntimeOptions {
+    store: SkillsStore;
+    log: (message: string) => void;
+    /** The `WICKED_SKILLS_SNAPSHOT` this process BOOTED with (default: the real one, `BOOT_SKILLS_SNAPSHOT`); tests inject `''` / `undefined`. */
+    bootSnapshot?: string | undefined;
+}
+export declare class SkillsRuntime {
+    readonly store: SkillsStore;
+    private readonly log;
+    private readonly bootSnapshot;
+    private lastHealth;
+    constructor(opts: SkillsRuntimeOptions);
+    /** The seam's last outcome (diagnostics). */
+    health(): SkillsHealth;
+    /** Boot entry point. Never throws; never fails open (module header). Idempotent: a seeded, published root is only re-verified. */
+    apply(): Promise<SkillsHealth>;
+    /**
+     * One CoreEvent from the daemon's event listener: pins the generation the engine reports it
+     * handed the live run the event belongs to, releases (and reaps) at the run's terminal frame —
+     * live-generations.ts.
+     */
+    observe(event: CoreEvent): void;
+    /**
+     * One launch notice from the adapter (`CoreAdapter.onLaunch`): the daemon is handing a run or
+     * campaign to the engine — open its launch pin at the generation the env exports right now,
+     * BEFORE the engine call, so no spawn can read the env ahead of the pin — or the engine refused
+     * it (release the pin; nothing will spawn). The pin is otherwise released only by the engine's
+     * `skillsSnapshotHanded` report or the terminal frame — never by publish count (codex round 4).
+     */
+    launched(notice: LaunchNotice): void;
+    /**
+     * Export the VERIFIED current snapshot for the engine — the ONE engine input (v3.4 §2). With
+     * nothing published (or an unverifiable `current`) the engine input is NOT touched here — `apply`
+     * decided it. Answers the health it recorded, or `null` when there was nothing to export.
+     */
+    afterPublish(): SkillsHealth | null;
+    private record;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/skills/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/skills/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAkB5E,0HAA0H;AAC1H,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;AAEnG,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE7F,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,iBAAiB,CAAC;IACzB,kGAAkG;IAClG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAClD,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,4FAA4F;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;kCAE8B;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,eAAe,GAAG,MAAM,CAE1F;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8IAA8I;IAC9I,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,UAAU,CAAwC;gBAE9C,IAAI,EAAE,oBAAoB;IAMtC,6CAA6C;IAC7C,MAAM,IAAI,YAAY;IAItB,kIAAkI;IAC5H,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC;IAoFpC;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAI/B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAKpC;;;;OAIG;IACH,YAAY,IAAI,YAAY,GAAG,IAAI;IA+BnC,OAAO,CAAC,MAAM;CAIf"}

package/dist/skills/runtime.js

@@ -0,0 +1,246 @@
+/**
+ * The skills seam as the daemon holds it: ONE store over `<state home>/skills` + the one thing the
+ * daemon derives from it — the engine env (`WICKED_SKILLS_SNAPSHOT`).
+ *
+ * `apply()` is called at boot (`createServer`), after the root passed the fence (root-fence.ts):
+ * seed from the live plugin when the root is empty, publish a first snapshot when none exists,
+ * export the resolved snapshot path. There is NO skills setting to re-apply on `PUT /settings` —
+ * the root is `<state home>/skills`, full stop (design v3.1 §1 one storage root; v3.2 §1 never a
+ * user CLI directory; codex round 5 on #480 retired `skills_root` and `WICKED_CREW_SKILLS_ROOT`:
+ * a configurable root let seeding write into `~/.codex/skills`). `apply` never throws — but it does
+ * NOT fail open either. The degradation ladder (design v3 §3; codex review of #480) distinguishes
+ * three outcomes:
+ *
+ *   published      `current` verified → `WICKED_SKILLS_SNAPSHOT=<resolved snapshot>`.
+ *   fallback       ABSENT configuration — no wicked-garden installed, nothing to seed from. The ONE
+ *                  case the engine input is restored to the value this process booted with (an
+ *                  operator export or the test harness's arming survives; unset when there was
+ *                  none): the engine's own ladder falls back to the live installed cache and logs
+ *                  `skills.fallback`. Finding `skills.fallback` (warning). The log line says which
+ *                  of the two happened — "restored to <value>" or "left unset" — never one for the
+ *                  other (Copilot on #480).
+ *   blocked        the FIRST publish is blocked (a defective catalog: a reference that ESCAPES the
+ *                  plugin root, a missing required skill, a missing plugin catalog, a file outside
+ *                  the bundle closure, a baseline env that could not be provisioned — a reference
+ *                  whose target is merely MISSING is a warning and publishes, design v3.4 §1).
+ *                  There is no snapshot to offer and the live cache is NOT a
+ *                  substitute — the engine input is pointed at a path that does not exist
+ *                  (`<root>/refused/skills.blocked`), which the engine treats as an invalid explicit
+ *                  path: every launch fails loudly naming it until the operator fixes the catalog
+ *                  and publishes. Finding `skills.blocked` (error).
+ *   config-error   an INVALID configuration — a corrupt manifest, a `current` link that fails
+ *                  verification, a root that is not the directory the store bound. Same refusal path
+ *                  (`<root>/refused/skills.config`), same loud launch failure: recorded disablement
+ *                  is never bypassed by "restoring" the live cache. Finding `skills.config` (error).
+ *
+ * What the engine is handed is EXACTLY ONE variable, `WICKED_SKILLS_SNAPSHOT` = the absolute REAL
+ * path of `snapshots/<gen>` (v3.1 §2, v3.4 §2); `WICKED_SKILLS_CURRENT` is withdrawn and never set,
+ * and `WICKED_CREW_STATE_HOME` is RETIRED as an engine input (v3.4 §2): core derives the state home
+ * it fences from the snapshot path's fixed layout (`<state home>/skills/snapshots/<gen>` — parent
+ * `snapshots`, grandparent `skills`, else a config error naming the path). Because the root IS
+ * `<state home>/skills` (asserted at boot, identity-checked on every operation), that layout holds
+ * by construction. The canonical state home is still REPORTED (`health().stateHome`) for humans.
+ *
+ * NOTHING here writes into the user's own CLI directories (design v3.2 §1): the v3 additive
+ * mirror into the user's codex/pi/copilot/opencode skill dirs is withdrawn, and with it the
+ * `skills_mirror` setting. Skills reach non-Claude workers only through the per-launch delivery
+ * core performs from the snapshot (the generated `views/copilot/` for copilot, `--skill` lists for
+ * pi); a CLI without a lever runs without wicked skills — never through a side channel into the
+ * user's home.
+ *
+ * `health()` is the last outcome, surfaced read-only on `GET /diagnostics` (`skills`).
+ */
+import { join } from 'node:path';
+import { applySkillsSnapshotEnv, BOOT_SKILLS_SNAPSHOT, canonicalCrewStateHome, SKILLS_SNAPSHOT_ENGINE_ENV } from './engine-env.js';
+import { SKILLS_SOURCE_ENV } from './plugin-source.js';
+import { REFUSED_DIRNAME } from './root-names.js';
+import { SkillsSourceUnavailableError } from './store.js';
+/**
+ * The seed source named for the boot log by what it IS (Copilot on #480: the line used to hard-code
+ * "the installed wicked-garden plugin" although an explicit `WICKED_CREW_SKILLS_SOURCE` checkout or
+ * directory seeds just as well): its kind, its path and the plugin version it declares — so an
+ * operator debugging which bytes were seeded reads the actual root, never an assumption.
+ */
+function describeSeedSource(source) {
+    const what = source.kind === 'claude-plugin-cache'
+        ? 'the installed wicked-garden plugin (Claude plugin cache)'
+        : source.kind === 'checkout'
+            ? `a wicked-garden git checkout (an explicit plugin root — ${SKILLS_SOURCE_ENV} or the configured source)`
+            : `a plugin directory (an explicit plugin root — ${SKILLS_SOURCE_ENV} or the configured source)`;
+    return `${what} at ${source.path}, plugin version ${source.plugin_version}, source kind ${source.kind}`;
+}
+/** The refusal sentinel directory name — from the ONE table of root names (design v3.5 §2); re-exported for the tests. */
+export { REFUSED_DIRNAME };
+/** The `skills` block a daemon booted WITHOUT the seam reports. */
+export function disabledSkillsHealth() {
+    return { state: 'disabled', root: null, current: null, engineInput: null, stateHome: null, findings: [] };
+}
+/**
+ * The path the engine input is pointed at when the daemon has NO valid snapshot to offer and must
+ * not fall back: it does not exist, so the engine's "explicit path invalid → launch fails loudly"
+ * rung fires, and the path itself names why (`…/refused/skills.blocked`).
+ */
+export function refusalPath(root, kind) {
+    return join(root, REFUSED_DIRNAME, kind);
+}
+export class SkillsRuntime {
+    store;
+    log;
+    bootSnapshot;
+    lastHealth = disabledSkillsHealth();
+    constructor(opts) {
+        this.store = opts.store;
+        this.log = opts.log;
+        this.bootSnapshot = 'bootSnapshot' in opts ? opts.bootSnapshot : BOOT_SKILLS_SNAPSHOT;
+    }
+    /** The seam's last outcome (diagnostics). */
+    health() {
+        return this.lastHealth;
+    }
+    /** Boot entry point. Never throws; never fails open (module header). Idempotent: a seeded, published root is only re-verified. */
+    async apply() {
+        const root = this.store.root;
+        let ready;
+        try {
+            ready = await this.store.ensureReady();
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            this.store.live.exported(null); // no published generation is handed to launches from here on
+            if (err instanceof SkillsSourceUnavailableError) {
+                applySkillsSnapshotEnv(null, this.bootSnapshot);
+                // Say what actually happened to the variable: the boot value is restored EXACTLY — a path,
+                // an explicitly EMPTY value, or nothing (deleted). Set-but-empty is a configuration error
+                // core refuses (design v3.5 §4): it is preserved, reported as `skills.config`, and never
+                // widened into the live-cache fallback rung — only an ABSENT variable reaches that rung.
+                const restored = process.env[SKILLS_SNAPSHOT_ENGINE_ENV];
+                if (restored === '') {
+                    const detail = `${SKILLS_SNAPSHOT_ENGINE_ENV} is set but EMPTY — a configuration error core refuses at every launch (export a snapshot path, or unset it to reach the live-plugin fallback); and there is no plugin to publish from: ${message}`;
+                    this.log(`[skills] skills.config: ${detail}`);
+                    return this.record({
+                        state: 'config-error',
+                        root,
+                        current: null,
+                        engineInput: '',
+                        stateHome: canonicalCrewStateHome(),
+                        findings: [{ kind: 'skills.config', severity: 'error', message: detail }],
+                    });
+                }
+                this.log(restored === undefined
+                    ? `[skills] skills.fallback: ${message}; ${SKILLS_SNAPSHOT_ENGINE_ENV} left unset (this process booted without one) — the engine resolves the live installed plugin itself`
+                    : `[skills] skills.fallback: ${message}; ${SKILLS_SNAPSHOT_ENGINE_ENV} restored to the boot value ${restored} (an operator export / harness arming survives the fallback) — the engine reads that path`);
+                return this.record({
+                    state: 'fallback',
+                    root,
+                    current: null,
+                    engineInput: restored ?? null,
+                    stateHome: canonicalCrewStateHome(),
+                    findings: [{ kind: 'skills.fallback', severity: 'warning', message }],
+                });
+            }
+            const refusal = refusalPath(root, 'skills.config');
+            applySkillsSnapshotEnv(refusal);
+            this.log(`[skills] skills.config: skills root ${root} is unusable — ${message}; ${SKILLS_SNAPSHOT_ENGINE_ENV}=${refusal} so every launch fails loudly until it is fixed`);
+            return this.record({
+                state: 'config-error',
+                root,
+                current: null,
+                engineInput: refusal,
+                stateHome: canonicalCrewStateHome(),
+                findings: [{ kind: 'skills.config', severity: 'error', message }],
+            });
+        }
+        if (ready.seeded)
+            this.log(`[skills] seeded ${root} from ${ready.source === null ? 'a source the seed did not record' : describeSeedSource(ready.source)}`);
+        if (ready.published !== null && ready.published.verdict === 'blocked') {
+            const named = ready.published.findings
+                .filter((f) => f.severity === 'blocking')
+                .map((f) => `${f.kind}: ${f.evidence}`)
+                .join('; ');
+            const refusal = refusalPath(root, 'skills.blocked');
+            applySkillsSnapshotEnv(refusal);
+            this.store.live.exported(null);
+            const message = `first publish BLOCKED — no snapshot: ${named}`;
+            this.log(`[skills] skills.blocked: ${message}; ${SKILLS_SNAPSHOT_ENGINE_ENV}=${refusal} so every launch fails loudly until the catalog is fixed and published`);
+            return this.record({
+                state: 'blocked',
+                root,
+                current: null,
+                engineInput: refusal,
+                stateHome: canonicalCrewStateHome(),
+                findings: [{ kind: 'skills.blocked', severity: 'error', message }],
+            });
+        }
+        if (ready.published !== null && ready.published.verdict === 'warnings') {
+            // A first publish WITH warnings landed (design v3.4 §1): the snapshot is written and handed
+            // over; the warnings are upstream content bugs the operator fixes locally or upstream — say
+            // them once, by kind and file:line, so the day-one log is honest about what shipped.
+            const named = ready.published.findings.map((f) => `${f.kind}${f.file === null ? '' : ` ${f.file}${f.line === null ? '' : `:${f.line}`}`}`).join('; ');
+            this.log(`[skills] first publish landed with ${ready.published.findings.length} warning(s) (published as found; fix in the editor or upstream): ${named}`);
+        }
+        this.afterPublish();
+        return this.lastHealth;
+    }
+    /**
+     * One CoreEvent from the daemon's event listener: pins the generation the engine reports it
+     * handed the live run the event belongs to, releases (and reaps) at the run's terminal frame —
+     * live-generations.ts.
+     */
+    observe(event) {
+        this.store.observeEvent(event);
+    }
+    /**
+     * One launch notice from the adapter (`CoreAdapter.onLaunch`): the daemon is handing a run or
+     * campaign to the engine — open its launch pin at the generation the env exports right now,
+     * BEFORE the engine call, so no spawn can read the env ahead of the pin — or the engine refused
+     * it (release the pin; nothing will spawn). The pin is otherwise released only by the engine's
+     * `skillsSnapshotHanded` report or the terminal frame — never by publish count (codex round 4).
+     */
+    launched(notice) {
+        if (notice.status === 'handed')
+            this.store.live.launched(notice.kind, notice.id);
+        else
+            this.store.live.launchRejected(notice.kind, notice.id);
+    }
+    /**
+     * Export the VERIFIED current snapshot for the engine — the ONE engine input (v3.4 §2). With
+     * nothing published (or an unverifiable `current`) the engine input is NOT touched here — `apply`
+     * decided it. Answers the health it recorded, or `null` when there was nothing to export.
+     */
+    afterPublish() {
+        let current;
+        try {
+            current = this.store.currentSnapshot();
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            const refusal = refusalPath(this.store.root, 'skills.config');
+            applySkillsSnapshotEnv(refusal);
+            this.store.live.exported(null);
+            this.log(`[skills] skills.config: ${message}; ${SKILLS_SNAPSHOT_ENGINE_ENV}=${refusal}`);
+            return this.record({
+                state: 'config-error',
+                root: this.store.root,
+                current: null,
+                engineInput: refusal,
+                stateHome: canonicalCrewStateHome(),
+                findings: [{ kind: 'skills.config', severity: 'error', message }],
+            });
+        }
+        if (current === null) {
+            this.store.live.exported(null);
+            return null;
+        }
+        applySkillsSnapshotEnv(current.path);
+        // Record the generation the env now hands to launches: every launch the adapter announces from
+        // here on opens its pin at this generation (and accumulates later publishes) until the engine's
+        // `skillsSnapshotHanded` says which one it used or the run ends (live-generations.ts).
+        this.store.live.exported(current.gen);
+        return this.record({ state: 'published', root: this.store.root, current, engineInput: current.path, stateHome: canonicalCrewStateHome(), findings: [] });
+    }
+    record(health) {
+        this.lastHealth = health;
+        return health;
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/skills/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/skills/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACnI,OAAO,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,4BAA4B,EAAoB,MAAM,YAAY,CAAC;AAE5E;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,qBAAqB;QACnC,CAAC,CAAC,0DAA0D;QAC5D,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;YAC1B,CAAC,CAAC,2DAA2D,iBAAiB,4BAA4B;YAC1G,CAAC,CAAC,iDAAiD,iBAAiB,4BAA4B,CAAC;IACvG,OAAO,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,cAAc,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,0HAA0H;AAC1H,OAAO,EAAE,eAAe,EAAE,CAAC;AA4B3B,mEAAmE;AACnE,MAAM,UAAU,oBAAoB;IAClC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC5G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAwC;IAChF,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AASD,MAAM,OAAO,aAAa;IACf,KAAK,CAAc;IACX,GAAG,CAA4B;IAC/B,YAAY,CAAqB;IAC1C,UAAU,GAAiB,oBAAoB,EAAE,CAAC;IAE1D,YAAY,IAA0B;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,YAAY,GAAG,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxF,CAAC;IAED,6CAA6C;IAC7C,MAAM;QACJ,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,kIAAkI;IAClI,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,IAAI,KAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,6DAA6D;YAC7F,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;gBAChD,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChD,2FAA2F;gBAC3F,0FAA0F;gBAC1F,yFAAyF;gBACzF,yFAAyF;gBACzF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;gBACzD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,GAAG,0BAA0B,2LAA2L,OAAO,EAAE,CAAC;oBACjP,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;oBAC9C,OAAO,IAAI,CAAC,MAAM,CAAC;wBACjB,KAAK,EAAE,cAAc;wBACrB,IAAI;wBACJ,OAAO,EAAE,IAAI;wBACb,WAAW,EAAE,EAAE;wBACf,SAAS,EAAE,sBAAsB,EAAE;wBACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,GAAG,CACN,QAAQ,KAAK,SAAS;oBACpB,CAAC,CAAC,6BAA6B,OAAO,KAAK,0BAA0B,sGAAsG;oBAC3K,CAAC,CAAC,6BAA6B,OAAO,KAAK,0BAA0B,+BAA+B,QAAQ,2FAA2F,CAC1M,CAAC;gBACF,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,KAAK,EAAE,UAAU;oBACjB,IAAI;oBACJ,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,QAAQ,IAAI,IAAI;oBAC7B,SAAS,EAAE,sBAAsB,EAAE;oBACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;iBACtE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACnD,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,uCAAuC,IAAI,kBAAkB,OAAO,KAAK,0BAA0B,IAAI,OAAO,iDAAiD,CAAC,CAAC;YAC1K,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,cAAc;gBACrB,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO;gBACpB,SAAS,EAAE,sBAAsB,EAAE;gBACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5J,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ;iBACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;iBACtC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACpD,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,wCAAwC,KAAK,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,KAAK,0BAA0B,IAAI,OAAO,wEAAwE,CAAC,CAAC;YAChK,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO;gBACpB,SAAS,EAAE,sBAAsB,EAAE;gBACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACvE,4FAA4F;YAC5F,4FAA4F;YAC5F,qFAAqF;YACrF,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtJ,IAAI,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,oEAAoE,KAAK,EAAE,CAAC,CAAC;QAC7J,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAgB;QACtB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,MAAoB;QAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;;YAC5E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,YAAY;QACV,IAAI,OAA6C,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC9D,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,2BAA2B,OAAO,KAAK,0BAA0B,IAAI,OAAO,EAAE,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;gBACrB,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO;gBACpB,SAAS,EAAE,sBAAsB,EAAE;gBACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,+FAA+F;QAC/F,gGAAgG;QAChG,uFAAuF;QACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3J,CAAC;IAEO,MAAM,CAAC,MAAoB;QACjC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}