@mc-and-his-agents/loom-installer 0.1.29 → 0.1.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.29",
+  "version": "0.1.31",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "b67209a41ceebaa29825a45453945523ec85a320",
+  "source_commit": "db9b37726bda7d232589b79bad5c20596dd0571f",
   "source_ref": "main",
-  "built_at": "2026-04-27T01:23:49+08:00",
+  "built_at": "2026-04-27T14:09:35+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -623,28 +623,28 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_status.py",
@@ -1213,28 +1213,28 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_status.py",
@@ -1833,28 +1833,28 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_status.py",
@@ -2453,28 +2453,28 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_status.py",
@@ -3078,28 +3078,28 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_status.py",
@@ -3698,28 +3698,28 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_status.py",
@@ -4318,28 +4318,28 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_status.py",
@@ -4938,28 +4938,28 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_status.py",
@@ -5558,28 +5558,28 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_status.py",
@@ -6178,28 +6178,28 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 322929,
+      "sha256": "9a8b31917b244172681a542256994d97de9a7b54869e7e9e7bf5747e8759ae69"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 311901,
+      "sha256": "9376481f98f539c0b6aaf72df42e647f320a0e6050e14cd2e1cf0c37240b79cd"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_status.py",

package/payload/plugin/loom/skills/shared/scripts/fact_chain_support.py

@@ -183,7 +183,25 @@ def parse_list_section(sections: dict[str, list[str]], section_name: str, relati
 
 
 def _relative(path: Path, root: Path) -> str:
-    return str(path.relative_to(root))
+    return str(path.resolve().relative_to(root.resolve()))
+
+
+def resolve_repo_relative_path(target_root: Path, relative: str, *, label: str) -> tuple[Path | None, list[str]]:
+    """Resolve a repository locator while rejecting absolute paths and path escapes."""
+    if not isinstance(relative, str) or not relative.strip():
+        return None, [f"{label} must be a non-empty repo-relative path"]
+    locator = relative.strip()
+    candidate_raw = Path(locator)
+    if candidate_raw.is_absolute():
+        return None, [f"{label} must be repo-relative, got absolute path: {locator}"]
+    if ".." in candidate_raw.parts:
+        return None, [f"{label} must stay inside the target repository: {locator}"]
+    candidate = (target_root / candidate_raw).resolve()
+    try:
+        candidate.relative_to(target_root.resolve())
+    except ValueError:
+        return None, [f"{label} must stay inside the target repository: {locator}"]
+    return candidate, []
 
 
 def parse_work_item(path: Path, root: Path) -> tuple[dict[str, object], list[str]]:
@@ -301,7 +319,10 @@ def inspect_fact_chain(
     output_relative: str = ".loom/bootstrap/init-result.json",
 ) -> tuple[dict[str, object], list[str]]:
     errors: list[str] = []
-    output_path = target_root / output_relative
+    output_path, output_errors = resolve_repo_relative_path(target_root, output_relative, label="init-result locator")
+    if output_errors:
+        return {}, output_errors
+    assert output_path is not None
     if not output_path.exists():
         return {}, [f"missing init-result: {output_relative}"]
 
@@ -346,9 +367,29 @@ def inspect_fact_chain(
     if errors:
         return {}, errors
 
-    work_item_path = target_root / str(work_item_ref)
-    recovery_path = target_root / str(recovery_ref)
-    status_path = target_root / str(status_ref)
+    work_item_path, work_item_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(work_item_ref),
+        label="init-result.fact_chain.entry_points.work_item",
+    )
+    recovery_path, recovery_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(recovery_ref),
+        label="init-result.fact_chain.entry_points.recovery_entry",
+    )
+    status_path, status_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(status_ref),
+        label="init-result.fact_chain.entry_points.status_surface",
+    )
+    errors.extend(work_item_path_errors)
+    errors.extend(recovery_path_errors)
+    errors.extend(status_path_errors)
+    if errors:
+        return {}, errors
+    assert work_item_path is not None
+    assert recovery_path is not None
+    assert status_path is not None
     for label, path in (
         ("work_item", work_item_path),
         ("recovery_entry", recovery_path),

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -468,10 +468,9 @@ def relative_locator_from_value(root: Path, raw_locator: object) -> str | None:
         return None
     locator_path = Path(locator)
     if locator_path.is_absolute():
-        try:
-            return str(locator_path.relative_to(root))
-        except ValueError:
-            return str(locator_path)
+        return None
+    if ".." in locator_path.parts:
+        return None
     return str(locator_path)
 
 
@@ -479,7 +478,12 @@ def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path |
     locator = relative_locator_from_value(root, raw_locator)
     if locator is None:
         return None, None
-    return locator, (root / locator).resolve()
+    target = (root / locator).resolve()
+    try:
+        target.relative_to(root.resolve())
+    except ValueError:
+        return None, None
+    return locator, target
 
 
 def locator_status_entry(

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -272,6 +272,7 @@ def check_required_paths(root: Path, category: str, paths: tuple[str, ...]) -> l
 def iter_markdown_files(root: Path) -> list[Path]:
     skipped_parts = {
         ".git",
+        ".worktrees",
         "node_modules",
         "dist",
         "payload",
@@ -2533,6 +2534,11 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             ],
             {"pass"},
         ),
+        (
+            "adopt-verify",
+            ["python3", "tools/loom_flow.py", "adopt", "verify", "--target", "examples/new-project", "--item", "INIT-0001"],
+            {"pass"},
+        ),
         (
             "governance-profile-status",
             ["python3", "tools/loom_flow.py", "governance-profile", "status", "--target", "examples/new-project"],
@@ -2797,6 +2803,21 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context="`runtime-parity validate`",
                 payload=payload,
             )
+        if label == "adopt-verify":
+            if payload.get("command") != "adopt" or payload.get("operation") != "verify":
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must report command/operation"))
+            if payload.get("schema_version") != "loom-adoption-verify/v1":
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must report schema v1"))
+            roundtrip = payload.get("producer_consumer_roundtrip")
+            if not isinstance(roundtrip, dict):
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must include producer_consumer_roundtrip"))
+            else:
+                consumer = roundtrip.get("consumer")
+                bypass = roundtrip.get("bypass_check")
+                if not isinstance(consumer, dict) or consumer.get("result") != "pass":
+                    failures.append(Failure("daily-execution-cli", "`adopt verify` generated body must pass consumer validation"))
+                if not isinstance(bypass, dict) or bypass.get("result") != "pass":
+                    failures.append(Failure("daily-execution-cli", "`adopt verify` must prove required section deletion blocks"))
         if label in {"governance-profile-status", "governance-profile-upgrade-plan"}:
             if payload.get("command") != "governance-profile":
                 failures.append(Failure("daily-execution-cli", f"`{label}` must report `command: governance-profile`"))
@@ -6337,6 +6358,66 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
             elif payload.get("result") != expected:
                 failures.append(Failure("adversarial-adoption", f"`{label}` baseline must return `{expected}`"))
 
+        path_escape_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "fact-chain", "--target", str(baseline), "--output", "../outside-init-result.json"],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape fact-chain sample failed: {error}"))
+        elif path_escape_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "fact-chain must block init-result locators that escape the target root"))
+
+        escape_work_item_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "create",
+                "--target",
+                str(baseline),
+                "--item",
+                "ESCAPE-0001",
+                "--goal",
+                "Reject path escape",
+                "--scope",
+                "Exercise repo-relative locator hardening",
+                "--execution-path",
+                "execution/support",
+                "--workspace-entry",
+                ".",
+                "--validation-entry",
+                "python3 .loom/bin/loom_init.py verify --target .",
+                "--closing-condition",
+                "Unsafe locators are blocked.",
+                "--recovery-entry",
+                "../escape.md",
+                "--init-recovery",
+            ],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape work-item sample failed: {error}"))
+        elif escape_work_item_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "work-item create must block recovery locators that escape the target root"))
+
+        shadow_escape_target = base / "shadow-locator-escape"
+        shutil.copytree(baseline, shadow_escape_target)
+        interop_path = shadow_escape_target / ".loom/companion/interop.json"
+        interop_payload = load_json_file(interop_path)
+        shadow_surfaces = interop_payload.get("shadow_surfaces") if isinstance(interop_payload, dict) else None
+        review_surface = shadow_surfaces.get("review") if isinstance(shadow_surfaces, dict) else None
+        if isinstance(review_surface, dict):
+            review_surface["loom_locator"] = "/tmp/outside-shadow-evidence.json"
+            write_json(interop_path, interop_payload)
+        shadow_escape_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(shadow_escape_target), "--surface", "review", "--blocking"],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape shadow-parity sample failed: {error}"))
+        elif shadow_escape_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "shadow-parity blocking mode must reject absolute shadow locators"))
+
         poisoned_payload, error = load_command_json(
             root,
             ["python3", str(baseline / ".loom/bin/loom_init.py"), "runtime-state", "--target", str(baseline)],
@@ -6482,15 +6563,20 @@ def check_node_installer(root: Path) -> list[Failure]:
         ["npm", "test"],
         ["npm", "pack", "--dry-run"],
     )
-    for args in commands:
-        try:
-            result = run_command(root, args, cwd=package_root, timeout_seconds=300)
-        except subprocess.TimeoutExpired:
-            failures.append(Failure(category, f"`{' '.join(args)}` timed out"))
-            continue
-        if result.returncode != 0:
-            detail = result.stderr.strip() or result.stdout.strip() or "command failed without output"
-            failures.append(Failure(category, f"`{' '.join(args)}` failed: {detail}"))
+    with tempfile.TemporaryDirectory(prefix="loom-check-npm-cache-") as cache_dir:
+        npm_env = {
+            "npm_config_cache": cache_dir,
+            "NPM_CONFIG_CACHE": cache_dir,
+        }
+        for args in commands:
+            try:
+                result = run_command(root, args, cwd=package_root, env=npm_env, timeout_seconds=300)
+            except subprocess.TimeoutExpired:
+                failures.append(Failure(category, f"`{' '.join(args)}` timed out"))
+                continue
+            if result.returncode != 0:
+                detail = result.stderr.strip() or result.stdout.strip() or "command failed without output"
+                failures.append(Failure(category, f"`{' '.join(args)}` failed: {detail}"))
     return failures