@lousy-agents/mcp 5.14.10 → 5.15.0

package/dist/116.js

@@ -2,9 +2,6 @@ export const __rspack_esm_id = 116;
 export const __rspack_esm_ids = [116];
 export const __webpack_modules__ = {
 8711(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
-__webpack_require__.d(__webpack_exports__, {
-  prompt: () => (prompt)
-});
 /* import */ var node_util__rspack_import_0 = __webpack_require__(7975);
 /* import */ var node_process__rspack_import_1 = __webpack_require__(1708);
 /* import */ var node_readline__rspack_import_2 = __webpack_require__(481);
@@ -290,6 +287,10 @@ async function prompt(message, opts = {}) {
 
 
 
+__webpack_require__.d(__webpack_exports__, {
+  prompt: () => (prompt)
+});
+
 
 },
 

package/dist/316.js

@@ -4,9 +4,6 @@ export const __webpack_modules__ = {
 5375(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 var zlib__rspack_import_11_namespace_cache;
 __webpack_require__.r(__webpack_exports__);
-__webpack_require__.d(__webpack_exports__, {
-  t: () => (ce)
-});
 /* import */ var _rolldown_runtime_mjs__rspack_import_14 = __webpack_require__(421);
 /* import */ var node_fs__rspack_import_0 = __webpack_require__(3024);
 /* import */ var node_fs_promises__rspack_import_1 = __webpack_require__(1455);
@@ -2954,6 +2951,10 @@ var Da = (e) => {
 };
 
 
+__webpack_require__.d(__webpack_exports__, {
+  t: () => (ce)
+});
+
 
 },
 

package/dist/475.js

@@ -1729,10 +1729,10 @@ class FSWatcher extends external_node_events_.EventEmitter {
         const options = { type: EVENTS.ALL, alwaysStat: true, lstat: true, ...opts, depth: 0 };
         let stream = readdirp(root, options);
         this._streams.add(stream);
-        stream.once(STR_CLOSE, () => {
+        stream.once((/* inlined export .STR_CLOSE */"close"), () => {
             stream = undefined;
         });
-        stream.once(STR_END, () => {
+        stream.once((/* inlined export .STR_END */"end"), () => {
             if (stream) {
                 this._streams.delete(stream);
                 stream = undefined;

package/dist/653.js

@@ -3,13 +3,6 @@ export const __rspack_esm_ids = [653];
 export const __webpack_modules__ = {
 292(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 __webpack_require__.r(__webpack_exports__);
-__webpack_require__.d(__webpack_exports__, {
-  a: () => (y),
-  i: () => (S),
-  n: () => (ne),
-  r: () => (C),
-  t: () => (oe)
-});
 /* import */ var _rolldown_runtime_mjs__rspack_import_8 = __webpack_require__(421);
 /* import */ var node_module__rspack_import_0 = __webpack_require__(8995);
 /* import */ var node_fs__rspack_import_1 = __webpack_require__(3024);
@@ -689,12 +682,18 @@ async function fe(e = {}) {
 }
 
 
+__webpack_require__.d(__webpack_exports__, {
+  t: () => (oe)
+}, {
+  a: y,
+  i: S,
+  n: ne,
+  r: C
+});
+
 
 },
 421(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
-__webpack_require__.d(__webpack_exports__, {
-  t: () => (__exportAll)
-});
 /* import */ var node_module__rspack_import_0 = __webpack_require__(8995);
 
 //#region \0rolldown/runtime.js
@@ -711,6 +710,10 @@ var __exportAll = (all, no_symbols) => {
 //#endregion
 
 
+__webpack_require__.d(__webpack_exports__, {
+  t: () => (__exportAll)
+});
+
 
 },
 8900(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

package/dist/mcp-server.js

@@ -6559,7 +6559,7 @@ function escapeJsonPtr(str) {
 
 
 },
-3523(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
+2229(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
 // NAMESPACE OBJECT: ../../node_modules/micromark/lib/constructs.js
 var constructs_namespaceObject = {};
 __webpack_require__.r(constructs_namespaceObject);
@@ -26997,6 +26997,191 @@ function guardedRmSync(params) {
     }), { verifyAfter: params.verifyAfter });
 }
 
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/deny-mutations.js
+
+
+
+
+async function pathExists(filePath) {
+    try {
+        await promises_.lstat(filePath);
+        return true;
+    }
+    catch (err) {
+        if (!path_isNotFoundPathError(err)) {
+            throw err;
+        }
+        return false;
+    }
+}
+async function resolvePathViaExistingAncestor(targetPath) {
+    const normalized = external_node_path_.resolve(targetPath);
+    let cursor = normalized;
+    const missingSuffix = [];
+    while (external_node_path_.dirname(cursor) !== cursor && !(await pathExists(cursor))) {
+        missingSuffix.unshift(external_node_path_.basename(cursor));
+        cursor = external_node_path_.dirname(cursor);
+    }
+    if (!(await pathExists(cursor))) {
+        return normalized;
+    }
+    try {
+        const resolvedAncestor = external_node_path_.resolve(await promises_.realpath(cursor));
+        return missingSuffix.length === 0
+            ? resolvedAncestor
+            : external_node_path_.resolve(resolvedAncestor, ...missingSuffix);
+    }
+    catch {
+        return normalized;
+    }
+}
+async function comparablePaths(rawPath) {
+    path_assertNoNulPathInput(rawPath, "path contains a NUL byte");
+    const resolved = external_node_path_.resolve(rawPath);
+    return new Set([resolved, await resolvePathViaExistingAncestor(resolved)]);
+}
+function isSamePath(left, right) {
+    return path_isPathInside(left, right) && path_isPathInside(right, left);
+}
+function hasPolicyEntries(policy) {
+    return Boolean(policy?.paths?.length || policy?.prefixes?.length);
+}
+function policyPathEntries(entries) {
+    const paths = [];
+    for (const entry of entries ?? []) {
+        if (entry.length === 0) {
+            throw new errors_FsSafeError("invalid-path", "deny mutation paths must be non-empty");
+        }
+        path_assertNoNulPathInput(entry, "deny mutation path contains a NUL byte");
+        if (!external_node_path_.isAbsolute(entry)) {
+            throw new errors_FsSafeError("invalid-path", "deny mutation paths must be absolute");
+        }
+        paths.push(entry);
+    }
+    return paths;
+}
+async function assertMutationNotDenied(filePath, policy, options = {}) {
+    if (!hasPolicyEntries(policy)) {
+        return;
+    }
+    const targetPaths = await comparablePaths(filePath);
+    for (const deniedPath of policyPathEntries(policy.paths)) {
+        const deniedPaths = await comparablePaths(deniedPath);
+        for (const target of targetPaths) {
+            for (const denied of deniedPaths) {
+                if (isSamePath(denied, target) ||
+                    (options.protectAncestors === true && path_isPathInside(target, denied))) {
+                    throw new errors_FsSafeError("denied-path", "path is denied by denyMutations policy");
+                }
+            }
+        }
+    }
+    for (const deniedPrefix of policyPathEntries(policy.prefixes)) {
+        const deniedPaths = await comparablePaths(deniedPrefix);
+        for (const target of targetPaths) {
+            for (const denied of deniedPaths) {
+                if (path_isPathInside(denied, target) ||
+                    (options.protectAncestors === true && path_isPathInside(target, denied))) {
+                    throw new errors_FsSafeError("denied-path", "path is denied by denyMutations policy");
+                }
+            }
+        }
+    }
+}
+function mergeDenyMutationPolicies(defaultPolicy, callPolicy) {
+    if (!defaultPolicy) {
+        return callPolicy;
+    }
+    if (!callPolicy) {
+        return defaultPolicy;
+    }
+    return {
+        paths: [...(defaultPolicy.paths ?? []), ...(callPolicy.paths ?? [])],
+        prefixes: [...(defaultPolicy.prefixes ?? []), ...(callPolicy.prefixes ?? [])],
+    };
+}
+
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/opened-realpath.js
+
+
+
+
+
+async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
+    const handleStat = await handle.stat();
+    const fdCandidates = process.platform === "linux"
+        ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`]
+        : process.platform === "win32"
+            ? []
+            : [`/dev/fd/${handle.fd}`];
+    for (const fdPath of fdCandidates) {
+        try {
+            const fdRealPath = await promises_.realpath(fdPath);
+            const fdRealStat = await promises_.stat(fdRealPath);
+            if (file_identity_sameFileIdentity(handleStat, fdRealStat)) {
+                return fdRealPath;
+            }
+        }
+        catch {
+            // try next fd path
+        }
+    }
+    try {
+        const ioRealPath = await promises_.realpath(ioPath);
+        const ioRealStat = await promises_.stat(ioRealPath);
+        if (file_identity_sameFileIdentity(handleStat, ioRealStat)) {
+            return ioRealPath;
+        }
+    }
+    catch (err) {
+        if (!path_isNotFoundPathError(err)) {
+            throw err;
+        }
+    }
+    const parentResolved = await resolveOpenedFileRealPathFromParent(handleStat, ioPath);
+    if (parentResolved) {
+        return parentResolved;
+    }
+    throw new errors_FsSafeError("path-mismatch", "unable to resolve opened file path");
+}
+async function resolveOpenedFileRealPathFromParent(handleStat, ioPath) {
+    let parentReal;
+    try {
+        parentReal = await promises_.realpath(external_node_path_.dirname(ioPath));
+    }
+    catch (err) {
+        if (path_isNotFoundPathError(err)) {
+            return null;
+        }
+        throw err;
+    }
+    let entries;
+    try {
+        entries = await promises_.readdir(parentReal);
+    }
+    catch (err) {
+        if (path_isNotFoundPathError(err)) {
+            return null;
+        }
+        throw err;
+    }
+    for (const entry of entries.toSorted()) {
+        const candidatePath = external_node_path_.join(parentReal, entry);
+        try {
+            const candidateStat = await promises_.lstat(candidatePath);
+            if (candidateStat.isFile() && file_identity_sameFileIdentity(handleStat, candidateStat)) {
+                return await promises_.realpath(candidatePath);
+            }
+        }
+        catch (err) {
+            if (!path_isNotFoundPathError(err)) {
+                throw err;
+            }
+        }
+    }
+    return null;
+}
+
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/pinned-python-config.js
 let overrideConfig = {};
 function parseMode(value) {
@@ -27843,7 +28028,7 @@ async function runPinnedWriteHelper(params) {
         relativeParentPath: params.relativeParentPath,
     });
     if (getFsSafePythonConfig().mode === "off") {
-        return await runPinnedWriteFallbackOrThrow(params);
+        return await runPinnedWriteFallback(params);
     }
     if (params.input.kind === "stream") {
         try {
@@ -27851,7 +28036,7 @@ async function runPinnedWriteHelper(params) {
         }
         catch (error) {
             if (canFallbackFromPythonError(error)) {
-                return await runPinnedWriteFallbackOrThrow(params, error);
+                return await runPinnedWriteFallback(params);
             }
             throw error;
         }
@@ -27875,7 +28060,7 @@ async function runPinnedWriteHelper(params) {
     }
     catch (error) {
         if (canFallbackFromPythonError(error)) {
-            return await runPinnedWriteFallbackOrThrow(params, error);
+            return await runPinnedWriteFallback(params);
         }
         throw error;
     }
@@ -27902,12 +28087,6 @@ async function runPinnedCopyHelper(params) {
         },
     });
 }
-async function runPinnedWriteFallbackOrThrow(params, cause) {
-    if (process.platform !== "win32") {
-        throw new errors_FsSafeError("helper-unavailable", "Python helper is required for pinned writes on this platform", { cause });
-    }
-    return await runPinnedWriteFallback(params);
-}
 async function runPinnedWriteFallback(params) {
     const parentPath = params.relativeParentPath
         ? external_node_path_.join(params.rootPath, ...params.relativeParentPath.split("/"))
@@ -28030,7 +28209,7 @@ async function resolveRootPath(params) {
     const absolutePath = external_node_path_.resolve(params.absolutePath);
     const rootCanonicalPath = params.rootCanonicalPath
         ? external_node_path_.resolve(params.rootCanonicalPath)
-        : await resolvePathViaExistingAncestor(rootPath);
+        : await root_path_resolvePathViaExistingAncestor(rootPath);
     const context = createBoundaryResolutionContext({
         resolveParams: params,
         rootPath,
@@ -28399,7 +28578,7 @@ async function resolveOutsideLexicalCanonicalPathAsync(params) {
     if (path_isPathInside(params.rootPath, params.absolutePath)) {
         return undefined;
     }
-    return await resolvePathViaExistingAncestor(params.absolutePath);
+    return await root_path_resolvePathViaExistingAncestor(params.absolutePath);
 }
 function resolveOutsideLexicalCanonicalPathSync(params) {
     if (isPathInside(params.rootPath, params.absolutePath)) {
@@ -28446,11 +28625,11 @@ function buildResolvedRootPath(params) {
         kind: params.kind.kind,
     };
 }
-async function resolvePathViaExistingAncestor(targetPath) {
+async function root_path_resolvePathViaExistingAncestor(targetPath) {
     const normalized = external_node_path_.resolve(targetPath);
     let cursor = normalized;
     const missingSuffix = [];
-    while (!isFilesystemRoot(cursor) && !(await pathExists(cursor))) {
+    while (!isFilesystemRoot(cursor) && !(await root_path_pathExists(cursor))) {
         missingSuffix.unshift(external_node_path_.basename(cursor));
         const parent = external_node_path_.dirname(cursor);
         if (parent === cursor) {
@@ -28458,7 +28637,7 @@ async function resolvePathViaExistingAncestor(targetPath) {
         }
         cursor = parent;
     }
-    if (!(await pathExists(cursor))) {
+    if (!(await root_path_pathExists(cursor))) {
         return normalized;
     }
     try {
@@ -28570,7 +28749,7 @@ function shortPath(value) {
 function isFilesystemRoot(candidate) {
     return external_node_path_.parse(candidate).root === candidate;
 }
-async function pathExists(targetPath) {
+async function root_path_pathExists(targetPath) {
     try {
         await promises_.lstat(targetPath);
         return true;
@@ -28592,7 +28771,7 @@ async function resolveSymlinkHopPath(symlinkPath) {
         }
         const linkTarget = await promises_.readlink(symlinkPath);
         const linkAbsolute = external_node_path_.resolve(external_node_path_.dirname(symlinkPath), linkTarget);
-        return resolvePathViaExistingAncestor(linkAbsolute);
+        return root_path_resolvePathViaExistingAncestor(linkAbsolute);
     }
 }
 function resolveSymlinkHopPathSync(symlinkPath) {
@@ -28661,6 +28840,23 @@ function path_policy_shortPath(value) {
     return value;
 }
 
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/read-opened-file.js
+
+async function read_opened_file_readOpenedFileSafely(params) {
+    if (params.maxBytes !== undefined && params.opened.stat.size > params.maxBytes) {
+        throw new errors_FsSafeError("too-large", `file exceeds limit of ${params.maxBytes} bytes (got ${params.opened.stat.size})`);
+    }
+    const buffer = await params.opened.handle.readFile();
+    if (params.maxBytes !== undefined && buffer.byteLength > params.maxBytes) {
+        throw new errors_FsSafeError("too-large", `file exceeds limit of ${params.maxBytes} bytes (got ${buffer.byteLength})`);
+    }
+    return {
+        buffer,
+        realPath: params.opened.realPath,
+        stat: params.opened.stat,
+    };
+}
+
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/path-stat.js
 function pathStatFromStats(stat) {
     return {
@@ -28988,6 +29184,10 @@ async function serializePathWrite(key, run) {
 
 
 
+
+
+
+
 
 
 
@@ -29186,6 +29386,7 @@ class RootHandle {
             mkdir: this.defaults.mkdir,
             mode: this.defaults.mode,
             ...options,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
             append: writeMode === "append",
             truncateExisting: writeMode === "replace",
         });
@@ -29197,18 +29398,29 @@ class RootHandle {
             mkdir: this.defaults.mkdir,
             mode: this.defaults.mode,
             ...options,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
         });
     }
-    async remove(relativePath) {
+    async remove(relativePath, options = {}) {
         assertValidRootRelativePath(relativePath);
-        await removePathInRoot(this.context, relativePath);
+        await removePathInRoot(this.context, {
+            relativePath,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
+        });
     }
-    async mkdir(relativePath) {
+    async mkdir(relativePath, options = {}) {
         assertValidRootRelativePath(relativePath);
-        await mkdirPathInRoot(this.context, { relativePath });
+        await mkdirPathInRoot(this.context, {
+            relativePath,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
+        });
     }
-    async ensureRoot() {
-        await mkdirPathInRoot(this.context, { relativePath: "", allowRoot: true });
+    async ensureRoot(options = {}) {
+        await mkdirPathInRoot(this.context, {
+            relativePath: "",
+            allowRoot: true,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
+        });
     }
     async write(relativePath, data, options = {}) {
         await writeFileInRoot(this.context, {
@@ -29217,6 +29429,7 @@ class RootHandle {
             mkdir: this.defaults.mkdir,
             mode: this.defaults.mode,
             ...options,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
         });
     }
     async create(relativePath, data, options = {}) {
@@ -29226,6 +29439,7 @@ class RootHandle {
             mkdir: this.defaults.mkdir,
             mode: this.defaults.mode,
             ...options,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
             overwrite: false,
         });
     }
@@ -29248,6 +29462,7 @@ class RootHandle {
             mkdir: this.defaults.mkdir,
             mode: this.defaults.mode,
             ...options,
+            denyMutations: mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations),
         });
     }
     async exists(relativePath) {
@@ -29291,6 +29506,12 @@ class RootHandle {
     async move(fromRelative, toRelative, options = {}) {
         assertValidRootRelativePath(fromRelative);
         assertValidRootRelativePath(toRelative);
+        const denyMutations = mergeDenyMutationPolicies(this.defaults.denyMutations, options.denyMutations);
+        await assertMoveMutationAllowed(this.context, {
+            fromRelative,
+            toRelative,
+            denyMutations,
+        });
         try {
             await runPinnedHelper("rename", this.rootReal, {
                 from: fromRelative,
@@ -29302,6 +29523,7 @@ class RootHandle {
             if (canFallbackFromPythonError(error)) {
                 await movePathFallback(this.context, {
                     fromRelative,
+                    denyMutations,
                     overwrite: options.overwrite ?? false,
                     toRelative,
                 });
@@ -29350,7 +29572,7 @@ async function openFileInRoot(root, params) {
 async function readFileInRoot(root, params) {
     const opened = await openFileInRoot(root, params);
     try {
-        return await readOpenedFileSafely({ opened, maxBytes: params.maxBytes });
+        return await read_opened_file_readOpenedFileSafely({ opened, maxBytes: params.maxBytes });
     }
     finally {
         await opened.handle.close().catch(() => { });
@@ -29383,20 +29605,6 @@ async function openLocalFileSafely(params) {
     assertNoNulPathInput(params.filePath, "file path contains a NUL byte");
     return await openVerifiedLocalFile(params.filePath);
 }
-async function readOpenedFileSafely(params) {
-    if (params.maxBytes !== undefined && params.opened.stat.size > params.maxBytes) {
-        throw new errors_FsSafeError("too-large", `file exceeds limit of ${params.maxBytes} bytes (got ${params.opened.stat.size})`);
-    }
-    const buffer = await params.opened.handle.readFile();
-    if (params.maxBytes !== undefined && buffer.byteLength > params.maxBytes) {
-        throw new errors_FsSafeError("too-large", `file exceeds limit of ${params.maxBytes} bytes (got ${buffer.byteLength})`);
-    }
-    return {
-        buffer,
-        realPath: params.opened.realPath,
-        stat: params.opened.stat,
-    };
-}
 function emitWriteBoundaryWarning(reason) {
     logWarn(`security: fs-safe write boundary warning (${reason})`);
 }
@@ -29437,82 +29645,9 @@ async function verifyAtomicWriteResult(params) {
         await opened.handle.close().catch(() => { });
     }
 }
-async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
-    const handleStat = await handle.stat();
-    const fdCandidates = process.platform === "linux"
-        ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`]
-        : process.platform === "win32"
-            ? []
-            : [`/dev/fd/${handle.fd}`];
-    for (const fdPath of fdCandidates) {
-        try {
-            const fdRealPath = await promises_.realpath(fdPath);
-            const fdRealStat = await promises_.stat(fdRealPath);
-            if (file_identity_sameFileIdentity(handleStat, fdRealStat)) {
-                return fdRealPath;
-            }
-        }
-        catch {
-            // try next fd path
-        }
-    }
-    try {
-        const ioRealPath = await promises_.realpath(ioPath);
-        const ioRealStat = await promises_.stat(ioRealPath);
-        if (file_identity_sameFileIdentity(handleStat, ioRealStat)) {
-            return ioRealPath;
-        }
-    }
-    catch (err) {
-        if (!path_isNotFoundPathError(err)) {
-            throw err;
-        }
-    }
-    const parentResolved = await resolveOpenedFileRealPathFromParent(handleStat, ioPath);
-    if (parentResolved) {
-        return parentResolved;
-    }
-    throw new errors_FsSafeError("path-mismatch", "unable to resolve opened file path");
-}
-async function resolveOpenedFileRealPathFromParent(handleStat, ioPath) {
-    let parentReal;
-    try {
-        parentReal = await promises_.realpath(external_node_path_.dirname(ioPath));
-    }
-    catch (err) {
-        if (path_isNotFoundPathError(err)) {
-            return null;
-        }
-        throw err;
-    }
-    let entries;
-    try {
-        entries = await promises_.readdir(parentReal);
-    }
-    catch (err) {
-        if (path_isNotFoundPathError(err)) {
-            return null;
-        }
-        throw err;
-    }
-    for (const entry of entries.toSorted()) {
-        const candidatePath = external_node_path_.join(parentReal, entry);
-        try {
-            const candidateStat = await promises_.lstat(candidatePath);
-            if (candidateStat.isFile() && file_identity_sameFileIdentity(handleStat, candidateStat)) {
-                return await promises_.realpath(candidatePath);
-            }
-        }
-        catch (err) {
-            if (!path_isNotFoundPathError(err)) {
-                throw err;
-            }
-        }
-    }
-    return null;
-}
 async function openWritableFileInRoot(root, params) {
     const { rootReal, rootWithSep, resolved } = await resolvePathInRoot(root, params.relativePath);
+    await assertMutationNotDenied(resolved, params.denyMutations);
     try {
         await assertNoPathAliasEscape({
             absolutePath: resolved,
@@ -29639,6 +29774,7 @@ async function appendFileInRoot(root, params) {
         relativePath: params.relativePath,
         mkdir: params.mkdir,
         mode: params.mode,
+        denyMutations: params.denyMutations,
         truncateExisting: false,
         append: true,
     });
@@ -29666,8 +29802,8 @@ async function appendFileInRoot(root, params) {
         await target.handle.close().catch(() => { });
     }
 }
-async function removePathInRoot(root, relativePath) {
-    const resolved = await resolvePinnedRemovePathInRoot(root, relativePath);
+async function removePathInRoot(root, params) {
+    const resolved = await resolvePinnedRemovePathInRoot(root, params.relativePath, params.denyMutations);
     if (process.platform === "win32") {
         await removePathFallback(resolved);
         return;
@@ -29715,7 +29851,7 @@ async function writeFileInRoot(root, params) {
         });
         return;
     }
-    const pinned = await resolvePinnedWriteTargetInRoot(root, params.relativePath, params.mode);
+    const pinned = await resolvePinnedWriteTargetInRoot(root, params.relativePath, params.mode, params.denyMutations);
     await serializePathWrite(pinned.targetPath, async () => {
         let identity;
         try {
@@ -29771,7 +29907,7 @@ async function copyFileInRoot(root, params) {
             });
             return;
         }
-        const pinned = await resolvePinnedWriteTargetInRoot(root, params.relativePath, params.mode);
+        const pinned = await resolvePinnedWriteTargetInRoot(root, params.relativePath, params.mode, params.denyMutations);
         await serializePathWrite(pinned.targetPath, async () => {
             let identity;
             try {
@@ -29815,8 +29951,9 @@ async function copyFileInRoot(root, params) {
         await source.handle.close().catch(() => { });
     }
 }
-async function resolvePinnedWriteTargetInRoot(root, relativePath, requestedMode) {
+async function resolvePinnedWriteTargetInRoot(root, relativePath, requestedMode, denyMutations) {
     const { rootReal, rootWithSep, resolved } = await resolvePathInRoot(root, relativePath);
+    await assertMutationNotDenied(resolved, denyMutations);
     try {
         await assertNoPathAliasEscape({
             absolutePath: resolved,
@@ -29873,12 +30010,16 @@ async function resolvePinnedWriteTargetInRoot(root, relativePath, requestedMode)
 async function resolvePinnedPathInRoot(root, params) {
     return await resolvePinnedOperationPathInRoot(root, {
         allowRoot: params.allowRoot,
+        denyMutations: params.denyMutations,
+        protectDenyMutationAncestors: false,
         relativePath: params.relativePath,
         policy: PATH_ALIAS_POLICIES.strict,
     });
 }
-async function resolvePinnedRemovePathInRoot(root, relativePath) {
+async function resolvePinnedRemovePathInRoot(root, relativePath, denyMutations) {
     return await resolvePinnedOperationPathInRoot(root, {
+        denyMutations,
+        protectDenyMutationAncestors: true,
         relativePath,
         policy: PATH_ALIAS_POLICIES.unlinkTarget,
     });
@@ -29890,6 +30031,7 @@ async function resolvePinnedOperationPathInRoot(root, params) {
     });
     const relativeResolved = external_node_path_.relative(resolved.rootReal, resolved.canonicalPath);
     if ((relativeResolved === "" || relativeResolved === ".") && params.allowRoot === true) {
+        await assertMutationNotDenied(resolved.canonicalPath, params.denyMutations);
         return { rootReal: resolved.rootReal, resolved: resolved.canonicalPath, relativePosix: "" };
     }
     const firstSegment = relativeResolved.split(external_node_path_.sep)[0];
@@ -29903,6 +30045,9 @@ async function resolvePinnedOperationPathInRoot(root, params) {
     if (!path_isPathInside(resolved.rootWithSep, resolved.canonicalPath)) {
         throw new errors_FsSafeError("outside-workspace", "file is outside workspace root");
     }
+    await assertMutationNotDenied(resolved.canonicalPath, params.denyMutations, {
+        protectAncestors: params.protectDenyMutationAncestors,
+    });
     return { rootReal: resolved.rootReal, resolved: resolved.canonicalPath, relativePosix };
 }
 async function resolvePinnedRootPathInRoot(root, params) {
@@ -29980,13 +30125,21 @@ async function listPathFallback(root, relativePath, withFileTypes) {
         throw error;
     }
 }
+async function assertMoveMutationAllowed(root, params) {
+    const source = await resolvePathInRoot(root, params.fromRelative);
+    await assertMutationNotDenied(source.resolved, params.denyMutations, { protectAncestors: true });
+    const target = await resolvePathInRoot(root, params.toRelative);
+    await assertMutationNotDenied(target.resolved, params.denyMutations, { protectAncestors: true });
+}
 async function movePathFallback(root, params) {
     const source = await resolvePathInRoot(root, params.fromRelative);
+    await assertMutationNotDenied(source.resolved, params.denyMutations, { protectAncestors: true });
     await resolvePinnedRootPathInRoot(root, {
         relativePath: params.fromRelative,
         policy: PATH_ALIAS_POLICIES.strict,
     });
     const target = await resolvePathInRoot(root, params.toRelative);
+    await assertMutationNotDenied(target.resolved, params.denyMutations, { protectAncestors: true });
     await resolvePinnedRootPathInRoot(root, {
         relativePath: params.toRelative,
         policy: PATH_ALIAS_POLICIES.unlinkTarget,
@@ -30070,6 +30223,7 @@ async function writeFileFallback(root, params) {
         relativePath: params.relativePath,
         mkdir: params.mkdir,
         mode: params.mode,
+        denyMutations: params.denyMutations,
         truncateExisting: false,
     });
     const destinationPath = target.realPath;
@@ -30115,6 +30269,7 @@ async function writeFileFallback(root, params) {
 }
 async function writeMissingFileFallback(root, params) {
     const { rootReal, resolved } = await resolvePathInRoot(root, params.relativePath);
+    await assertMutationNotDenied(resolved, params.denyMutations);
     try {
         await assertNoPathAliasEscape({
             absolutePath: resolved,
@@ -30188,6 +30343,7 @@ async function copyFileFallback(root, params, source) {
             relativePath: params.relativePath,
             mkdir: params.mkdir,
             mode: params.mode,
+            denyMutations: params.denyMutations,
             truncateExisting: false,
         });
         const destinationPath = target.realPath;
@@ -30347,7 +30503,7 @@ async function file_system_utils_pathExistsWithinRoot(targetDir, relativePath) {
  * (symlink, traversal, or size-limit violation). These errors carry a
  * FsSafeError as their `cause` and should be re-thrown rather than
  * silently swallowed by per-file error handlers.
- */ function isFsSafeViolation(error) {
+ */ function file_system_utils_isFsSafeViolation(error) {
     return error instanceof Error && error.cause instanceof errors_FsSafeError;
 }
 async function file_system_utils_statWithinRoot(targetDir, relativePath) {
@@ -36145,6 +36301,7 @@ const PackageJsonSchema = schemas_object({
  */ 
 
 
+
 /** Maximum skill file size: 1 MB */ const MAX_SKILL_FILE_BYTES = 1_048_576;
 /**
  * Skill directory locations to search for SKILL.md files.
@@ -36153,6 +36310,33 @@ const PackageJsonSchema = schemas_object({
     (0,external_node_path_.join)(".claude", "skills"),
     (0,external_node_path_.join)(".agents", "skills")
 ];
+/** Maximum lock file size: 256 KB */ const MAX_LOCK_FILE_BYTES = 262_144;
+/** Relative path to the skills lock file. */ const SKILLS_LOCK_PATH = "skills-lock.json";
+/** Zod schema for skills-lock.json structure */ const SkillsLockSchema = schemas_object({
+    skills: record(schemas_string(), unknown()).optional()
+});
+/**
+ * Reads the skills-lock.json file and returns the set of locked skill names.
+ * Returns an empty set if the file does not exist or cannot be parsed.
+ */ async function readLockedSkillNames(targetDir) {
+    try {
+        const exists = await pathExistsWithinRoot(targetDir, SKILLS_LOCK_PATH);
+        if (!exists) {
+            return new Set();
+        }
+        const content = await readTextWithinRoot(targetDir, SKILLS_LOCK_PATH, MAX_LOCK_FILE_BYTES);
+        const result = SkillsLockSchema.safeParse(JSON.parse(content));
+        if (result.success && Object.hasOwn(result.data, "skills") && result.data.skills != null) {
+            return new Set(Object.keys(result.data.skills));
+        }
+        return new Set();
+    } catch (error) {
+        if (isFsSafeViolation(error)) {
+            throw error;
+        }
+        return new Set();
+    }
+}
 /**
  * File system implementation of the skill lint gateway.
  */ class FileSystemSkillLintGateway {
@@ -36162,7 +36346,11 @@ const PackageJsonSchema = schemas_object({
             const discovered = await this.discoverSkillsInDir(targetDir, relativeDir);
             skills.push(...discovered);
         }
-        return skills;
+        const lockedNames = await readLockedSkillNames(targetDir);
+        if (lockedNames.size === 0) {
+            return skills;
+        }
+        return skills.filter((skill)=>!lockedNames.has(skill.skillName));
     }
     async discoverSkillsInDir(targetDir, skillsDir) {
         try {
@@ -36245,7 +36433,7 @@ const MAX_WORKFLOW_FILE_BYTES = 1_048_576;
                 const tools = this.extractToolsFromWorkflow(workflow, file.name);
                 allTools.push(...tools);
             } catch (error) {
-                if (isFsSafeViolation(error)) {
+                if (file_system_utils_isFsSafeViolation(error)) {
                     throw error;
                 }
             }
@@ -36602,7 +36790,7 @@ class FileSystemWorkflowGateway {
                 const candidates = extractSetupStepsFromWorkflow(workflow, config.setupActionPatterns);
                 allCandidates.push(...candidates);
             } catch (error) {
-                if (isFsSafeViolation(error)) {
+                if (file_system_utils_isFsSafeViolation(error)) {
                     throw error;
                 }
             // Skip workflow files with YAML parse errors or transient I/O failures
@@ -50956,7 +51144,7 @@ function formatHeadingAsSetext(node, state) {
       node.type === 'break'
     ) {
       literalWithBreak = true
-      return EXIT
+      return (/* inlined export .EXIT */false)
     }
   })
 
@@ -67974,10 +68162,11 @@ exports.visitAsync = visitAsync;
 
 },
 5492(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
+const t=Symbol.for(`__confbox_fmt__`),n=/^(\s+)/,r=/(\s+)$/;function i(e,t={}){return{sample:t.indent===void 0&&t.preserveIndentation!==!1&&e.slice(0,t?.sampleSize||1024),whiteSpace:t.preserveWhitespace===!1?void 0:{start:n.exec(e)?.[0]||``,end:r.exec(e)?.[0]||``}}}function a(e,n,r){!n||typeof n!=`object`||Object.defineProperty(n,t,{enumerable:!1,configurable:!0,writable:!0,value:i(e,r)})}function o(n,r){if(!n||typeof n!=`object`||!(t in n))return{indent:r?.indent??2,whitespace:{start:``,end:``}};let i=n[t];return{indent:r?.indent||e(i.sample||``).indent,whitespace:i.whiteSpace||{start:``,end:``}}}
 __webpack_require__.d(__webpack_exports__, {
   n: () => (a)
 });
-const t=Symbol.for(`__confbox_fmt__`),n=/^(\s+)/,r=/(\s+)$/;function i(e,t={}){return{sample:t.indent===void 0&&t.preserveIndentation!==!1&&e.slice(0,t?.sampleSize||1024),whiteSpace:t.preserveWhitespace===!1?void 0:{start:n.exec(e)?.[0]||``,end:r.exec(e)?.[0]||``}}}function a(e,n,r){!n||typeof n!=`object`||Object.defineProperty(n,t,{enumerable:!1,configurable:!0,writable:!0,value:i(e,r)})}function o(n,r){if(!n||typeof n!=`object`||!(t in n))return{indent:r?.indent??2,whitespace:{start:``,end:``}};let i=n[t];return{indent:r?.indent||e(i.sample||``).indent,whitespace:i.whiteSpace||{start:``,end:``}}}
+
 
 },
 5975(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
@@ -68004,11 +68193,11 @@ function jsonc_r(n,r){let i=jsonc_parser_m(n,r?.errors,r);return (0,_format.n)(n
 
 },
 3770(module) {
-module.exports = JSON.parse('{"$id":"https://raw.githubusercontent.com/ajv-validator/ajv/master/lib/refs/data.json#","description":"Meta-schema for $data reference (JSON AnySchema extension proposal)","type":"object","required":["$data"],"properties":{"$data":{"type":"string","anyOf":[{"format":"relative-json-pointer"},{"format":"json-pointer"}]}},"additionalProperties":false}')
+module.exports = /*#__PURE__*/JSON.parse('{"$id":"https://raw.githubusercontent.com/ajv-validator/ajv/master/lib/refs/data.json#","description":"Meta-schema for $data reference (JSON AnySchema extension proposal)","type":"object","required":["$data"],"properties":{"$data":{"type":"string","anyOf":[{"format":"relative-json-pointer"},{"format":"json-pointer"}]}},"additionalProperties":false}')
 
 },
 3928(module) {
-module.exports = JSON.parse('{"$schema":"http://json-schema.org/draft-07/schema#","$id":"http://json-schema.org/draft-07/schema#","title":"Core schema meta-schema","definitions":{"schemaArray":{"type":"array","minItems":1,"items":{"$ref":"#"}},"nonNegativeInteger":{"type":"integer","minimum":0},"nonNegativeIntegerDefault0":{"allOf":[{"$ref":"#/definitions/nonNegativeInteger"},{"default":0}]},"simpleTypes":{"enum":["array","boolean","integer","null","number","object","string"]},"stringArray":{"type":"array","items":{"type":"string"},"uniqueItems":true,"default":[]}},"type":["object","boolean"],"properties":{"$id":{"type":"string","format":"uri-reference"},"$schema":{"type":"string","format":"uri"},"$ref":{"type":"string","format":"uri-reference"},"$comment":{"type":"string"},"title":{"type":"string"},"description":{"type":"string"},"default":true,"readOnly":{"type":"boolean","default":false},"examples":{"type":"array","items":true},"multipleOf":{"type":"number","exclusiveMinimum":0},"maximum":{"type":"number"},"exclusiveMaximum":{"type":"number"},"minimum":{"type":"number"},"exclusiveMinimum":{"type":"number"},"maxLength":{"$ref":"#/definitions/nonNegativeInteger"},"minLength":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"pattern":{"type":"string","format":"regex"},"additionalItems":{"$ref":"#"},"items":{"anyOf":[{"$ref":"#"},{"$ref":"#/definitions/schemaArray"}],"default":true},"maxItems":{"$ref":"#/definitions/nonNegativeInteger"},"minItems":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"uniqueItems":{"type":"boolean","default":false},"contains":{"$ref":"#"},"maxProperties":{"$ref":"#/definitions/nonNegativeInteger"},"minProperties":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"required":{"$ref":"#/definitions/stringArray"},"additionalProperties":{"$ref":"#"},"definitions":{"type":"object","additionalProperties":{"$ref":"#"},"default":{}},"properties":{"type":"object","additionalProperties":{"$ref":"#"},"default":{}},"patternProperties":{"type":"object","additionalProperties":{"$ref":"#"},"propertyNames":{"format":"regex"},"default":{}},"dependencies":{"type":"object","additionalProperties":{"anyOf":[{"$ref":"#"},{"$ref":"#/definitions/stringArray"}]}},"propertyNames":{"$ref":"#"},"const":true,"enum":{"type":"array","items":true,"minItems":1,"uniqueItems":true},"type":{"anyOf":[{"$ref":"#/definitions/simpleTypes"},{"type":"array","items":{"$ref":"#/definitions/simpleTypes"},"minItems":1,"uniqueItems":true}]},"format":{"type":"string"},"contentMediaType":{"type":"string"},"contentEncoding":{"type":"string"},"if":{"$ref":"#"},"then":{"$ref":"#"},"else":{"$ref":"#"},"allOf":{"$ref":"#/definitions/schemaArray"},"anyOf":{"$ref":"#/definitions/schemaArray"},"oneOf":{"$ref":"#/definitions/schemaArray"},"not":{"$ref":"#"}},"default":true}')
+module.exports = /*#__PURE__*/JSON.parse('{"$schema":"http://json-schema.org/draft-07/schema#","$id":"http://json-schema.org/draft-07/schema#","title":"Core schema meta-schema","definitions":{"schemaArray":{"type":"array","minItems":1,"items":{"$ref":"#"}},"nonNegativeInteger":{"type":"integer","minimum":0},"nonNegativeIntegerDefault0":{"allOf":[{"$ref":"#/definitions/nonNegativeInteger"},{"default":0}]},"simpleTypes":{"enum":["array","boolean","integer","null","number","object","string"]},"stringArray":{"type":"array","items":{"type":"string"},"uniqueItems":true,"default":[]}},"type":["object","boolean"],"properties":{"$id":{"type":"string","format":"uri-reference"},"$schema":{"type":"string","format":"uri"},"$ref":{"type":"string","format":"uri-reference"},"$comment":{"type":"string"},"title":{"type":"string"},"description":{"type":"string"},"default":true,"readOnly":{"type":"boolean","default":false},"examples":{"type":"array","items":true},"multipleOf":{"type":"number","exclusiveMinimum":0},"maximum":{"type":"number"},"exclusiveMaximum":{"type":"number"},"minimum":{"type":"number"},"exclusiveMinimum":{"type":"number"},"maxLength":{"$ref":"#/definitions/nonNegativeInteger"},"minLength":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"pattern":{"type":"string","format":"regex"},"additionalItems":{"$ref":"#"},"items":{"anyOf":[{"$ref":"#"},{"$ref":"#/definitions/schemaArray"}],"default":true},"maxItems":{"$ref":"#/definitions/nonNegativeInteger"},"minItems":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"uniqueItems":{"type":"boolean","default":false},"contains":{"$ref":"#"},"maxProperties":{"$ref":"#/definitions/nonNegativeInteger"},"minProperties":{"$ref":"#/definitions/nonNegativeIntegerDefault0"},"required":{"$ref":"#/definitions/stringArray"},"additionalProperties":{"$ref":"#"},"definitions":{"type":"object","additionalProperties":{"$ref":"#"},"default":{}},"properties":{"type":"object","additionalProperties":{"$ref":"#"},"default":{}},"patternProperties":{"type":"object","additionalProperties":{"$ref":"#"},"propertyNames":{"format":"regex"},"default":{}},"dependencies":{"type":"object","additionalProperties":{"anyOf":[{"$ref":"#"},{"$ref":"#/definitions/stringArray"}]}},"propertyNames":{"$ref":"#"},"const":true,"enum":{"type":"array","items":true,"minItems":1,"uniqueItems":true},"type":{"anyOf":[{"$ref":"#/definitions/simpleTypes"},{"type":"array","items":{"$ref":"#/definitions/simpleTypes"},"minItems":1,"uniqueItems":true}]},"format":{"type":"string"},"contentMediaType":{"type":"string"},"contentEncoding":{"type":"string"},"if":{"$ref":"#"},"then":{"$ref":"#"},"else":{"$ref":"#"},"allOf":{"$ref":"#/definitions/schemaArray"},"anyOf":{"$ref":"#/definitions/schemaArray"},"oneOf":{"$ref":"#/definitions/schemaArray"},"not":{"$ref":"#"}},"default":true}')
 
 },
 
@@ -68070,12 +68259,16 @@ __webpack_require__.t = function(value, mode) {
 })();
 // webpack/runtime/define_property_getters
 (() => {
-__webpack_require__.d = (exports, definition) => {
-	for(var key in definition) {
-        if(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {
-            Object.defineProperty(exports, key, { enumerable: true, get: definition[key] });
-        }
-    }
+__webpack_require__.d = (exports, getters, values) => {
+	var define = (defs, kind) => {
+		for(var key in defs) {
+			if(__webpack_require__.o(defs, key) && !__webpack_require__.o(exports, key)) {
+				Object.defineProperty(exports, key, { enumerable: true, [kind]: defs[key] });
+			}
+		}
+	};
+	define(getters, "get");
+	define(values, "value");
 };
 })();
 // webpack/runtime/ensure_chunk
@@ -68177,4 +68370,4 @@ if (installedChunkData !== 0) { // 0 means "already installed".'
 // module factories are used so entry inlining is disabled
 // startup
 // Load entry module and return exports
-var __webpack_exports__ = __webpack_require__(3523);
+var __webpack_exports__ = __webpack_require__(2229);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@lousy-agents/mcp",
-    "version": "5.14.10",
+    "version": "5.15.0",
     "description": "MCP server for lousy-agents - provides AI coding assistant tools via the Model Context Protocol",
     "type": "module",
     "repository": {