@anhlp/alp-core 0.0.0-beta.2 → 0.0.1-beta.3

package/dist/library-edit.d.ts

@@ -1,3 +1,6 @@
+/** Strict payload contract for opt-in project-data writes. Instructions carry prompt authority;
+ * executable configuration and references to it have no place in this policy. */
+export function assertProjectDataContent(kind: any, content: any): void;
 /**
  * One entry: the version that applies (the project's, else the library's, else the
  * built-in), or one scope's version with `scope`. `revision` goes back with a save.
@@ -52,7 +55,7 @@ export function usersOf(kind: any, name: any, { root, library, templates }?: {})
  * that scope (null to create); a different current revision refuses the save.
  * @returns {Promise<{ revision: string | null }>}
  */
-export function saveEntry(kind: any, name: any, content: any, { scope, root, library, templates, revision }?: {}): Promise<{
+export function saveEntry(kind: any, name: any, content: any, { scope, root, library, templates, revision, policy }?: {}): Promise<{
     revision: string | null;
 }>;
 /**
@@ -60,16 +63,16 @@ export function saveEntry(kind: any, name: any, content: any, { scope, root, lib
  * entry others refer to stays, and the error lists them.
  * @returns {Promise<{ removed: boolean, now?: 'builtin' | 'library' }>}
  */
-export function deleteEntry(kind: any, name: any, { scope, root, library, templates, revision }?: {}): Promise<{
+export function deleteEntry(kind: any, name: any, { scope, root, library, templates, revision, policy }?: {}): Promise<{
     removed: boolean;
     now?: "builtin" | "library";
 }>;
 /** Copies the entry that applies under `from` to a new entry `to` in a scope; built-ins are copied this way. */
-export function duplicateEntry(kind: any, from: any, to: any, { scope, root, library, templates }?: {}): Promise<{
+export function duplicateEntry(kind: any, from: any, to: any, { scope, root, library, templates, policy }?: {}): Promise<{
     revision: string | null;
 }>;
 /** Renames an entry within a scope; refused while others refer to it by its old name. */
-export function renameEntry(kind: any, from: any, to: any, { scope, root, library, templates }?: {}): Promise<{
+export function renameEntry(kind: any, from: any, to: any, { scope, root, library, templates, policy }?: {}): Promise<{
     revision: string | null;
 }>;
 /**

package/dist/library-edit.js

@@ -1,5 +1,5 @@
 // packages/core/src/library-edit.js
-import { mkdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import { lstat, mkdir, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";
 import path from "node:path";
 import { moveFile } from "./atomic.js";
@@ -39,6 +39,42 @@ function base(scope, { root, library }, kind) {
   return fail("INVALID_SCOPE", `Scope must be library or project, not '${scope}'`);
 }
 var revisionOf = (content) => content === void 0 ? null : createHash("sha256").update(JSON.stringify(content)).digest("hex").slice(0, 16);
+function assertProjectDataContent(kind, content) {
+  const deny = () => fail("UNSAFE_LIBRARY_WRITE", "Project-data writes allow only instruction entries and non-executable agent configuration");
+  if (!object(content) || !["agents", "skills"].includes(kind)) deny();
+  const keys = kind === "skills" ? ["body"] : ["instructions", "config"];
+  if (Object.keys(content).some((key) => !keys.includes(key))) deny();
+  const text = kind === "skills" ? content.body : content.instructions;
+  if (typeof text !== "string" || !text.trim()) deny();
+  if (content.config !== void 0) {
+    const config = content.config;
+    if (!object(config)) deny();
+    const allowed = ["description", "model", "thinking", "context", "autocompact"];
+    if (Object.keys(config).some((key) => !allowed.includes(key))) deny();
+    for (const key of ["description", "thinking"]) if (config[key] !== void 0 && typeof config[key] !== "string") deny();
+    if (config.model !== void 0 && (typeof config.model !== "string" || !/^(codex|claude):[^\s/\\:]{1,240}$/.test(config.model))) deny();
+    for (const key of ["context", "autocompact"]) if (config[key] !== void 0 && !(typeof config[key] === "string" || typeof config[key] === "number" && Number.isFinite(config[key]))) deny();
+  }
+}
+async function projectDataEntry(kind, name, { scope, root, library, templates }) {
+  if (scope !== "project" || !root || !["agents", "skills"].includes(kind)) fail("UNSAFE_LIBRARY_WRITE", "Project-data writes require project scope and agents or skills");
+  nameOf(name);
+  const directory = base(scope, { root, library }, kind);
+  await safeEntryPaths(directory, kind, name);
+  const found = await layers(kind, name, { root, library, templates });
+  if (found.library !== void 0 || found.builtin !== void 0) fail("UNSAFE_LIBRARY_WRITE", "Project-data writes cannot shadow or reveal a library or built-in entry");
+  if (found.project !== void 0) assertProjectDataContent(kind, found.project);
+  const owned = path.join(directory, kind, name);
+  const files = await readdir(owned).catch((error) => {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  });
+  const allowed = new Set(FILES[kind](name).map(([file]) => path.basename(file)));
+  for (const file of files) {
+    const info = await lstat(path.join(owned, file));
+    if (!allowed.has(file) || !info.isFile() || info.isSymbolicLink() || info.nlink !== 1) fail("UNSAFE_LIBRARY_WRITE", "Project-data entries cannot contain sidecars, links or executable assets");
+  }
+}
 async function safeEntryPaths(directory, kind, name) {
   for (const [file] of FILES[kind](name)) {
     await assertNoSymlinks(directory, path.join(kind, file));
@@ -236,9 +272,13 @@ async function writeAtomic(file, text) {
   await moveFile(temporary, file);
 }
 var exists = (target) => stat(target).then(() => true, () => false);
-async function saveEntry(kind, name, content, { scope, root, library, templates, revision } = {}) {
+async function saveEntry(kind, name, content, { scope, root, library, templates, revision, policy } = {}) {
   kindOf(kind);
   nameOf(name);
+  if (policy === "project-data") {
+    assertProjectDataContent(kind, content);
+    await projectDataEntry(kind, name, { scope, root, library, templates });
+  }
   const directory = base(scope, { root, library }, kind);
   await safeEntryPaths(directory, kind, name);
   await check(kind, name, content, { scope, root, library, templates });
@@ -260,9 +300,10 @@ async function saveEntry(kind, name, content, { scope, root, library, templates,
   }
   return { revision: revisionOf(await readLayer(kind, name, directory)) };
 }
-async function deleteEntry(kind, name, { scope, root, library, templates, revision } = {}) {
+async function deleteEntry(kind, name, { scope, root, library, templates, revision, policy } = {}) {
   kindOf(kind);
   nameOf(name);
+  if (policy === "project-data") await projectDataEntry(kind, name, { scope, root, library, templates });
   const directory = base(scope, { root, library }, kind);
   const current = await readLayer(kind, name, directory);
   if (current === void 0) fail("NOT_FOUND", `No ${kind} entry '${name}' in the ${scope}`);
@@ -278,14 +319,25 @@ async function deleteEntry(kind, name, { scope, root, library, templates, revisi
   const now = scope === "project" && found.library !== void 0 ? "library" : "builtin";
   return { removed: true, ...fallback !== void 0 ? { now } : {} };
 }
-async function duplicateEntry(kind, from, to, { scope, root, library, templates } = {}) {
+async function duplicateEntry(kind, from, to, { scope, root, library, templates, policy } = {}) {
+  kindOf(kind);
+  nameOf(from);
+  nameOf(to);
+  if (policy === "project-data") {
+    await projectDataEntry(kind, from, { scope, root, library, templates });
+    await projectDataEntry(kind, to, { scope, root, library, templates });
+  }
   const { content } = await getEntry(kind, from, { root, library, templates });
-  return saveEntry(kind, to, structuredClone(content), { scope, root, library, templates, revision: null });
+  return saveEntry(kind, to, structuredClone(content), { scope, root, library, templates, revision: null, policy });
 }
-async function renameEntry(kind, from, to, { scope, root, library, templates } = {}) {
+async function renameEntry(kind, from, to, { scope, root, library, templates, policy } = {}) {
   kindOf(kind);
   nameOf(from);
   nameOf(to);
+  if (policy === "project-data") {
+    await projectDataEntry(kind, from, { scope, root, library, templates });
+    await projectDataEntry(kind, to, { scope, root, library, templates });
+  }
   const directory = base(scope, { root, library }, kind);
   const content = await readLayer(kind, from, directory);
   if (content === void 0) fail("NOT_FOUND", `No ${kind} entry '${from}' in the ${scope}`);
@@ -303,6 +355,7 @@ async function renameEntry(kind, from, to, { scope, root, library, templates } =
 }
 export {
   EDIT_KINDS,
+  assertProjectDataContent,
   deleteEntry,
   duplicateEntry,
   getEntry,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anhlp/alp-core",
-  "version": "0.0.0-beta.2",
+  "version": "0.0.1-beta.3",
   "type": "module",
   "description": "ALP core module",
   "files": [
@@ -284,7 +284,7 @@
     "node": ">=22.12"
   },
   "dependencies": {
-    "@anhlp/alp-protocol": "0.0.0-beta.2"
+    "@anhlp/alp-protocol": "0.0.1-beta.3"
   },
   "scripts": {
     "build": "node ../../scripts/build-workspace.mjs core",

package/src/library-edit.js

@@ -1,4 +1,4 @@
-import { mkdir, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { lstat, mkdir, readdir, rename, rm, stat, writeFile } from 'node:fs/promises';
 import { createHash, randomUUID } from 'node:crypto';
 import path from 'node:path';
 import { moveFile } from './atomic.js';
@@ -60,6 +60,46 @@ function base(scope, { root, library }, kind) {
 }
 const revisionOf = content => content === undefined ? null : createHash('sha256').update(JSON.stringify(content)).digest('hex').slice(0, 16);
 
+/** Strict payload contract for opt-in project-data writes. Instructions carry prompt authority;
+ * executable configuration and references to it have no place in this policy. */
+export function assertProjectDataContent(kind, content) {
+  const deny = () => fail('UNSAFE_LIBRARY_WRITE', 'Project-data writes allow only instruction entries and non-executable agent configuration');
+  if (!object(content) || !['agents', 'skills'].includes(kind)) deny();
+  const keys = kind === 'skills' ? ['body'] : ['instructions', 'config'];
+  if (Object.keys(content).some(key => !keys.includes(key))) deny();
+  const text = kind === 'skills' ? content.body : content.instructions;
+  if (typeof text !== 'string' || !text.trim()) deny();
+  if (content.config !== undefined) {
+    const config = content.config;
+    if (!object(config)) deny();
+    const allowed = ['description', 'model', 'thinking', 'context', 'autocompact'];
+    if (Object.keys(config).some(key => !allowed.includes(key))) deny();
+    for (const key of ['description', 'thinking']) if (config[key] !== undefined && typeof config[key] !== 'string') deny();
+    if (config.model !== undefined && (typeof config.model !== 'string' || !/^(codex|claude):[^\s/\\:]{1,240}$/.test(config.model))) deny();
+    for (const key of ['context', 'autocompact']) if (config[key] !== undefined && !(typeof config[key] === 'string' || typeof config[key] === 'number' && Number.isFinite(config[key]))) deny();
+  }
+}
+
+/** Authoritative mutation preflight. Reject sidecars and lower-layer collisions rather than
+ * moving executable assets or revealing a different host configuration. Like safeEntryPaths,
+ * this protects static repository input, not a concurrently malicious same-user process. */
+async function projectDataEntry(kind, name, { scope, root, library, templates }) {
+  if (scope !== 'project' || !root || !['agents', 'skills'].includes(kind)) fail('UNSAFE_LIBRARY_WRITE', 'Project-data writes require project scope and agents or skills');
+  nameOf(name);
+  const directory = base(scope, { root, library }, kind);
+  await safeEntryPaths(directory, kind, name);
+  const found = await layers(kind, name, { root, library, templates });
+  if (found.library !== undefined || found.builtin !== undefined) fail('UNSAFE_LIBRARY_WRITE', 'Project-data writes cannot shadow or reveal a library or built-in entry');
+  if (found.project !== undefined) assertProjectDataContent(kind, found.project);
+  const owned = path.join(directory, kind, name);
+  const files = await readdir(owned).catch(error => { if (error.code === 'ENOENT') return []; throw error; });
+  const allowed = new Set(FILES[kind](name).map(([file]) => path.basename(file)));
+  for (const file of files) {
+    const info = await lstat(path.join(owned, file));
+    if (!allowed.has(file) || !info.isFile() || info.isSymbolicLink() || info.nlink !== 1) fail('UNSAFE_LIBRARY_WRITE', 'Project-data entries cannot contain sidecars, links or executable assets');
+  }
+}
+
 /** Reject repository-controlled links before any entry read or mutation. This is
  * a preflight for static repository input, not a sandbox against same-user races. */
 async function safeEntryPaths(directory, kind, name) {
@@ -274,8 +314,12 @@ const exists = target => stat(target).then(() => true, () => false);
  * that scope (null to create); a different current revision refuses the save.
  * @returns {Promise<{ revision: string | null }>}
  */
-export async function saveEntry(kind, name, content, { scope, root, library, templates, revision } = {}) {
+export async function saveEntry(kind, name, content, { scope, root, library, templates, revision, policy } = {}) {
   kindOf(kind); nameOf(name);
+  if (policy === 'project-data') {
+    assertProjectDataContent(kind, content);
+    await projectDataEntry(kind, name, { scope, root, library, templates });
+  }
   const directory = base(scope, { root, library }, kind);
   await safeEntryPaths(directory, kind, name);
   await check(kind, name, content, { scope, root, library, templates });
@@ -300,8 +344,9 @@ export async function saveEntry(kind, name, content, { scope, root, library, tem
  * entry others refer to stays, and the error lists them.
  * @returns {Promise<{ removed: boolean, now?: 'builtin' | 'library' }>}
  */
-export async function deleteEntry(kind, name, { scope, root, library, templates, revision } = {}) {
+export async function deleteEntry(kind, name, { scope, root, library, templates, revision, policy } = {}) {
   kindOf(kind); nameOf(name);
+  if (policy === 'project-data') await projectDataEntry(kind, name, { scope, root, library, templates });
   const directory = base(scope, { root, library }, kind);
   const current = await readLayer(kind, name, directory);
   if (current === undefined) fail('NOT_FOUND', `No ${kind} entry '${name}' in the ${scope}`);
@@ -320,14 +365,23 @@ export async function deleteEntry(kind, name, { scope, root, library, templates,
 }
 
 /** Copies the entry that applies under `from` to a new entry `to` in a scope; built-ins are copied this way. */
-export async function duplicateEntry(kind, from, to, { scope, root, library, templates } = {}) {
+export async function duplicateEntry(kind, from, to, { scope, root, library, templates, policy } = {}) {
+  kindOf(kind); nameOf(from); nameOf(to);
+  if (policy === 'project-data') {
+    await projectDataEntry(kind, from, { scope, root, library, templates });
+    await projectDataEntry(kind, to, { scope, root, library, templates });
+  }
   const { content } = await getEntry(kind, from, { root, library, templates });
-  return saveEntry(kind, to, structuredClone(content), { scope, root, library, templates, revision: null });
+  return saveEntry(kind, to, structuredClone(content), { scope, root, library, templates, revision: null, policy });
 }
 
 /** Renames an entry within a scope; refused while others refer to it by its old name. */
-export async function renameEntry(kind, from, to, { scope, root, library, templates } = {}) {
+export async function renameEntry(kind, from, to, { scope, root, library, templates, policy } = {}) {
   kindOf(kind); nameOf(from); nameOf(to);
+  if (policy === 'project-data') {
+    await projectDataEntry(kind, from, { scope, root, library, templates });
+    await projectDataEntry(kind, to, { scope, root, library, templates });
+  }
   const directory = base(scope, { root, library }, kind);
   const content = await readLayer(kind, from, directory);
   if (content === undefined) fail('NOT_FOUND', `No ${kind} entry '${from}' in the ${scope}`);
@@ -343,4 +397,3 @@ export async function renameEntry(kind, from, to, { scope, root, library, templa
   }
   return { revision: revisionOf(await readLayer(kind, to, directory)) };
 }
-