@mulmoclaude/core 0.2.5 → 0.2.7

package/dist/{server-B2YkcCwl.js → server-q4WPXtbU.js}

@@ -1501,21 +1501,29 @@ function deleteTargets(collection, workspaceRoot) {
 	];
 }
 /** The records directory the delete recursively archives + removes
-*  (`collection.dataDir`) must live in this collection's OWN
-*  `data/<slug>/` subtree. `dataDir` is normally derived from
-*  `schema.dataPath`, but `deleteCollection` accepts a `LoadedCollection`
-*  whose fields could be inconsistent — so we validate the RESOLVED
-*  target the destructive ops actually touch, not the schema string.
-*  `resolveDataDir` only proves containment in the workspace; a shared
-*  root like `data` or `data/skills` would otherwise turn the recursive
-*  removal into a workspace-wide wipe whose archive captures only this
-*  collection. `path.resolve` collapses any `..` before the prefix test
-*  (symlink escapes are caught separately by the realpath containment
-*  check in `deleteTargets`). */
+*  (`collection.dataDir`) must live in this collection's OWN per-slug
+*  subtree. `dataDir` is normally derived from `schema.dataPath`, but
+*  `deleteCollection` accepts a `LoadedCollection` whose fields could be
+*  inconsistent — so we validate the RESOLVED target the destructive ops
+*  actually touch, not the schema string. A shared root like `data` or
+*  `data/skills` would otherwise turn the recursive removal into a
+*  workspace-wide wipe whose archive captures only this collection.
+*  `path.resolve` collapses any `..` before the prefix test (symlink
+*  escapes are caught separately by the realpath containment check in
+*  `deleteTargets`).
+*
+*  TWO acceptable per-slug subtrees:
+*    - `data/<slug>/...` — the convention authored collections default to.
+*    - `data/collections/<slug>/...` — what `normalizedDataPath` in the
+*      registry-import path stamps onto every imported schema (so imported
+*      collections never collide with `data/<slug>/`-shaped authored ones).
+*  Both are equally per-collection and equally safe; a delete that targets
+*  anything else (e.g. raw `data/`, `data/wiki/`, a sibling slug) is
+*  refused. */
 function isDataDirSafe(dataDir, slug, workspaceRoot) {
-	const expectedRoot = path.resolve(workspaceRoot, "data", slug);
+	const acceptableRoots = [path.resolve(workspaceRoot, "data", slug), path.resolve(workspaceRoot, "data", "collections", slug)];
 	const resolved = path.resolve(dataDir);
-	return resolved === expectedRoot || resolved.startsWith(expectedRoot + path.sep);
+	return acceptableRoots.some((root) => resolved === root || resolved.startsWith(root + path.sep));
 }
 function buildRestoreDoc(collection) {
 	const { slug, schema } = collection;
@@ -1711,4 +1719,4 @@ async function deleteCustomView(collection, viewId, opts = {}) {
 //#endregion
 export { readSkillTemplate as A, safeSlugName as B, buildActionSeedPrompt as C, listItems as D, generateItemId as E, isContainedInWorkspace as F, setCollectionChangePublisher as G, getWorkspaceRoot as H, itemFilePath as I, resolveDataDir as L, writeItem as M, SCHEMA_FILE as N, readCustomViewHtml as O, isContainedInRoot as P, resolveTemplatePath as R, validateRecordObject as S, deleteItem as T, log as U, configureCollectionHost as V, publishCollectionChange as W, loadCollection as _, computeSuccessor as a, COMPUTED_TYPES as b, isTriggerDue as c, resolveEvery as d, successorId as f, discoverCollections as g, acceptParsedSchema as h, advanceTriggerDate as i, resolveCreateItemId as j, readItem as k, maybeSpawnSuccessor as l, CollectionSchemaZ as m, deleteCollection as n, daysInMonth as o, enrichItems as p, deleteCollectionRefusalMessage as r, formatCivil as s, deleteCustomView as t, parseCivil as u, toDetail as v, buildCollectionActionSeedPrompt as w, validateCollectionRecords as x, toSummary as y, safeRecordId as z };
 
-//# sourceMappingURL=server-B2YkcCwl.js.map
+//# sourceMappingURL=server-q4WPXtbU.js.map