@mc-and-his-agents/loom-installer 0.1.38 → 0.1.39

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.38",
+  "version": "0.1.39",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "83ff7a17b9fe7f92d88fb55f332e45b2c47e63ed",
+  "source_commit": "a0094e42a22f72429dccc3f437df2d86b084544d",
   "source_ref": "main",
-  "built_at": "2026-04-27T16:19:20+08:00",
+  "built_at": "2026-04-27T16:28:18+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,13 +628,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
@@ -1218,13 +1218,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
@@ -1838,13 +1838,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
@@ -2458,13 +2458,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
@@ -3083,13 +3083,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
@@ -3703,13 +3703,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
@@ -4323,13 +4323,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
@@ -4943,13 +4943,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
@@ -5563,13 +5563,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
@@ -6183,13 +6183,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56993,
-      "sha256": "c8be9d24fe9afad7ffce1d1e7eb7394ce28ae7f3eeb5243a9b7bc9a854e9871f"
+      "bytes": 57013,
+      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340505,
-      "sha256": "50a031d3cda589e4f020639d0305370281ce6d3e644e14aaa8c9ba090773d15f"
+      "bytes": 340603,
+      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-init/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-review/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"

package/payload/skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py

@@ -481,8 +481,8 @@ def locator_boundary_error(raw_locator: object, *, label: str) -> str:
     locator = raw_locator.strip()
     locator_path = Path(locator)
     if locator_path.is_absolute() or ".." in locator_path.parts:
-        return f"{label} must stay inside the repository and within the repository root: {locator}"
-    return f"{label} must stay inside the repository and within the repository root: {locator}"
+        return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
+    return f"{label} must stay within the repository root and must stay inside the repository: {locator}"
 
 
 def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path | None]:

package/payload/skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py

@@ -6453,7 +6453,11 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
                 "repo_locator": "../outside.json",
             },
         )
-        if not any("must stay inside the repository" in error for error in shadow_anchor_errors):
+        if not any(
+            "must stay inside the repository" in error
+            and "must stay within the repository root" in error
+            for error in shadow_anchor_errors
+        ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
         spec_contract_target = base / "spec-contract"