@floomhq/skills 1.1.0 → 1.1.1

package/dist/index.js

@@ -4377,7 +4377,7 @@ async function getMachineIdentity() {
 }
 
 // src/version.ts
-var VERSION = "1.1.0";
+var VERSION = "1.1.1";
 
 // src/api-client.ts
 var DEFAULT_TIMEOUT_MS = 2e4;
@@ -7702,19 +7702,24 @@ async function renameDeviceCommand(newLabel) {
 
 // src/commands/install.ts
 init_src();
-import { mkdir as mkdir6, rm as rm3, writeFile as writeFile5, stat as stat7, readFile as readFile11 } from "node:fs/promises";
+import { mkdir as mkdir6, rm as rm3, writeFile as writeFile5, stat as stat7, lstat as lstat4, readFile as readFile11 } from "node:fs/promises";
 import { dirname as dirname2, join as join12, resolve as resolve8 } from "node:path";
+import { z as z7 } from "zod";
 init_runtime();
 init_prompt();
 var TOKEN_RE = /^fls_[A-Za-z0-9_-]{32,}$/;
 var SAFE_SLUG_RE2 = /^(?=.{1,80}$)[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var MAX_DECODED_FILE_BYTES2 = 2 * 1024 * 1024;
+var TRUSTED_CATALOG_HOSTS = /* @__PURE__ */ new Set(["skills.floom.dev", "cyborg.floom.dev"]);
+var CATALOG_LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost"]);
 function trustedCatalogOrigin(url) {
-  if (url.protocol === "https:") return true;
+  if (TRUSTED_CATALOG_HOSTS.has(url.hostname)) return url.protocol === "https:";
   const dev = process.env.FLOOM_DEV;
   const devMode = dev === "1" || dev === "true";
-  return devMode && url.protocol === "http:" && (url.hostname === "127.0.0.1" || url.hostname === "localhost");
+  if (!devMode || !CATALOG_LOOPBACK_HOSTS.has(url.hostname)) return false;
+  return url.protocol === "http:" || url.protocol === "https:";
 }
+var trustedCatalogHosts = () => [...TRUSTED_CATALOG_HOSTS];
 function parseInstallSource(input) {
   const trimmed = input.trim();
   if (TOKEN_RE.test(trimmed)) return { kind: "share", token: trimmed };
@@ -7734,6 +7739,34 @@ function parseInstallSource(input) {
   }
   return null;
 }
+function untrustedCatalogHost(input) {
+  let url;
+  try {
+    url = new URL(input.trim());
+  } catch {
+    return null;
+  }
+  const parts = url.pathname.split("/").filter(Boolean);
+  const last = parts[parts.length - 1];
+  const parent = parts.length >= 2 ? parts[parts.length - 2] : null;
+  if (parent !== "skills" || !last || !SAFE_SLUG_RE2.test(last)) return null;
+  return trustedCatalogOrigin(url) ? null : url.host;
+}
+var ShareFileSchema = z7.object({
+  path: z7.string().min(1).max(1024),
+  mode: z7.enum(["text", "non_text"]),
+  content_text: z7.string().nullable().optional().default(null),
+  binary: z7.object({ download_url: z7.string().nullable().optional().default(null) }).passthrough().nullable().optional().default(null)
+}).passthrough();
+var PublicShareResponseSchema = z7.object({
+  skill: z7.object({
+    title: z7.string().min(1).max(500),
+    description: z7.string().max(2e4).optional().default(""),
+    owner: z7.object({ name: z7.string().min(1).max(500) }).passthrough(),
+    version: z7.object({ version_seq: z7.number().int().nonnegative(), display: z7.string().min(1).max(100) }).passthrough()
+  }).passthrough(),
+  file_contents: z7.array(ShareFileSchema).max(5e3)
+}).passthrough();
 function safeSkillSlug2(slug) {
   if (!slug || !SAFE_SLUG_RE2.test(slug)) throw new Error(`Unsafe shared skill name: ${slug}`);
   return slug;
@@ -7789,21 +7822,43 @@ async function fetchInstallSource(source) {
   } catch {
     throw new Error("Unexpected response from Floom API. Try again in a moment.");
   }
-  const candidate = json;
-  if (!candidate?.skill || !Array.isArray(candidate.file_contents)) {
+  const parsed = PublicShareResponseSchema.safeParse(json);
+  if (!parsed.success) {
     throw new Error("Unexpected response shape from Floom API.");
   }
-  return candidate;
+  return parsed.data;
 }
 var nativePathOperations = { dirname: dirname2 };
 function installParentDirectory(destination, pathOperations = nativePathOperations) {
   return pathOperations.dirname(destination);
 }
+async function stagingRoot(skillsDir) {
+  let current = skillsDir;
+  for (const segment of [".floom", "tmp"]) {
+    current = join12(current, segment);
+    let entry;
+    try {
+      entry = await lstat4(current);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+      await mkdir6(current, { recursive: true });
+      continue;
+    }
+    if (entry.isSymbolicLink()) {
+      throw new Error(`Refusing to stage an install through a symlinked ${tildePath(current)}.`);
+    }
+    if (!entry.isDirectory()) {
+      throw new Error(`Refusing to stage an install: ${tildePath(current)} is not a directory.`);
+    }
+  }
+  return current;
+}
 async function installToDir(target, slug, files) {
   const finalDir = join12(target.skillsDir, slug);
-  const tempDir = join12(target.skillsDir, ".floom", "tmp", `${slug}-install-${Date.now()}`);
-  const replacedDir = join12(target.skillsDir, ".floom", "tmp", `${slug}-previous-${Date.now()}`);
-  await mkdir6(tempDir, { recursive: true });
+  const staging = await stagingRoot(target.skillsDir);
+  const tempDir = join12(staging, `${slug}-install-${Date.now()}`);
+  const replacedDir = join12(staging, `${slug}-previous-${Date.now()}`);
+  await mkdir6(tempDir);
   try {
     for (const file of files) {
       const safePath = safeRemotePath2(file.path);
@@ -7864,9 +7919,15 @@ async function installCommand(input, rawOpts = {}) {
   const json = flags.json;
   const source = parseInstallSource(input);
   if (!source) {
+    const untrustedHost = untrustedCatalogHost(input);
     if (!json) {
-      log.err("That doesn't look like a Floom share link. It must look like: https://skills.floom.dev/s/fls_xxx");
-      log.info("A public catalog Skill page also works: https://<catalog host>/skills/<slug>");
+      if (untrustedHost) {
+        log.err(`Refusing to install from ${untrustedHost}: it is not a Floom catalog host.`);
+        log.info(`Catalog installs are accepted only from: ${trustedCatalogHosts().join(", ")}`);
+      } else {
+        log.err("That doesn't look like a Floom share link. It must look like: https://skills.floom.dev/s/fls_xxx");
+        log.info(`A public catalog Skill page also works: https://${trustedCatalogHosts()[0]}/skills/<slug>`);
+      }
     }
     process.exitCode = 2;
     return;

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.1.0";
+export const VERSION = "1.1.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/skills",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Floom Skills CLI \u2014 publish, install, sync, and share AI agent skills.",
   "license": "MIT",
   "homepage": "https://skills.floom.dev",