@hasna/skills 0.5.6 → 0.5.7

package/bin/index.js

@@ -36860,7 +36860,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.5.6",
+    version: "0.5.7",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/mcp.js

@@ -5586,7 +5586,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.5.6",
+    version: "0.5.7",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join6 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.6",
+  version: "0.5.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -23100,7 +23100,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.6",
+  version: "0.5.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -23103,7 +23103,7 @@ import { randomUUID as randomUUID4 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.6",
+  version: "0.5.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -13336,7 +13336,7 @@ import { dirname as dirname7, relative as relative4 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.6",
+  version: "0.5.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/sdk/index.js

@@ -25496,7 +25496,7 @@ class MissingSkillsFleetError extends Error {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.6",
+  version: "0.5.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -48699,7 +48699,7 @@ var DEFAULT_IMAGE_PROFILES = {
 function createImageProfileRegistry(config = DEFAULT_IMAGE_PROFILES) {
   const runtimes = new Map;
   for (const pinned of config.runtimes) {
-    runtimes.set(pinned.runtime, pinned);
+    runtimes.set(pinned.runtime, { ...pinned });
   }
   const allowlist = new Map(Object.entries(config.dependencyLayers));
   return {
@@ -48714,11 +48714,14 @@ function createImageProfileRegistry(config = DEFAULT_IMAGE_PROFILES) {
       if (systemDeps.length > 0 && dependencyLayerTag === null) {
         throw new ImageProfileResolutionError({ reason: "UNALLOWED_SYSTEM_DEPS", systemDeps });
       }
-      return { runtime: pinned, runtimeImageDigest: pinned.imageDigest, dependencyLayerTag };
+      return { runtime: { ...pinned }, runtimeImageDigest: pinned.imageDigest, dependencyLayerTag };
     }
   };
 }
 function canonicalSystemDepsKey(systemDeps) {
+  if (systemDeps.some((dep) => typeof dep !== "string" || dep.length === 0 || dep.includes(","))) {
+    throw new ImageProfileResolutionError({ reason: "UNALLOWED_SYSTEM_DEPS", systemDeps: [...systemDeps] });
+  }
   return Array.from(new Set(systemDeps)).sort().join(",");
 }
 function dependencyLayerRule(layerTag, systemDeps) {
@@ -48763,10 +48766,17 @@ function createSubmitRunService(options) {
     async submit(input) {
       if (!input.idempotencyKey.trim())
         throw new Error("admission: idempotencyKey is required");
+      const policy = { ...DEFAULT_RUN_POLICY, ...input.policy };
+      input = {
+        ...input,
+        systemDeps: [...input.systemDeps ?? []],
+        policy: { ...policy, egressAllowlist: [...policy.egressAllowlist] },
+        limits: { ...DEFAULT_RUN_LIMITS, ...input.limits }
+      };
+      const inputDigest = digestInput(input.input);
       const byKey = await store.getRunByKey(input.tenantId, input.idempotencyKey);
       if (byKey)
-        return { run: byKey.admission, created: false };
-      const inputDigest = digestInput(input.input);
+        return { run: ownedAdmission(byKey.admission), created: false };
       const byDigests = await store.getRunByDigests({
         tenantId: input.tenantId,
         skillId: input.skillId,
@@ -48775,7 +48785,7 @@ function createSubmitRunService(options) {
         inputDigest
       });
       if (byDigests)
-        return { run: byDigests.admission, created: false };
+        return { run: ownedAdmission(byDigests.admission), created: false };
       const image = resolveImageProfile(imageProfiles, {
         runtime: input.runtime,
         systemDeps: input.systemDeps ?? []
@@ -48797,10 +48807,17 @@ function createSubmitRunService(options) {
         createdAt: now().toISOString()
       };
       const row = await store.admit(admission);
-      return { run: row.admission, created: true };
+      return { run: ownedAdmission(row.admission), created: true };
     }
   };
 }
+function ownedAdmission(admission) {
+  return {
+    ...admission,
+    policy: { ...admission.policy, egressAllowlist: [...admission.policy.egressAllowlist] },
+    limits: { ...admission.limits }
+  };
+}
 function digestInput(input) {
   return createHash10("sha256").update(canonicalJson(input)).digest("hex");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {