@mulmoclaude/core 0.2.6 → 0.2.7

package/dist/collection/server/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_server = require("../../server-D27UzXug.cjs");
+const require_server = require("../../server-Db-x7OXz.cjs");
 const require_collection_paths = require("../paths.cjs");
 exports.COMPUTED_TYPES = require_server.COMPUTED_TYPES;
 exports.CollectionSchemaZ = require_server.CollectionSchemaZ;

package/dist/collection/server/index.js

@@ -1,3 +1,3 @@
-import { A as readSkillTemplate, B as safeSlugName, C as buildActionSeedPrompt, D as listItems, E as generateItemId, F as isContainedInWorkspace, G as setCollectionChangePublisher, H as getWorkspaceRoot, I as itemFilePath, L as resolveDataDir, M as writeItem, N as SCHEMA_FILE, O as readCustomViewHtml, P as isContainedInRoot, R as resolveTemplatePath, S as validateRecordObject, T as deleteItem, U as log, V as configureCollectionHost, W as publishCollectionChange, _ as loadCollection, a as computeSuccessor, b as COMPUTED_TYPES, c as isTriggerDue, d as resolveEvery, f as successorId, g as discoverCollections, h as acceptParsedSchema, i as advanceTriggerDate, j as resolveCreateItemId, k as readItem, l as maybeSpawnSuccessor, m as CollectionSchemaZ, n as deleteCollection, o as daysInMonth, p as enrichItems, r as deleteCollectionRefusalMessage, s as formatCivil, t as deleteCustomView, u as parseCivil, v as toDetail, w as buildCollectionActionSeedPrompt, x as validateCollectionRecords, y as toSummary, z as safeRecordId } from "../../server-B2YkcCwl.js";
+import { A as readSkillTemplate, B as safeSlugName, C as buildActionSeedPrompt, D as listItems, E as generateItemId, F as isContainedInWorkspace, G as setCollectionChangePublisher, H as getWorkspaceRoot, I as itemFilePath, L as resolveDataDir, M as writeItem, N as SCHEMA_FILE, O as readCustomViewHtml, P as isContainedInRoot, R as resolveTemplatePath, S as validateRecordObject, T as deleteItem, U as log, V as configureCollectionHost, W as publishCollectionChange, _ as loadCollection, a as computeSuccessor, b as COMPUTED_TYPES, c as isTriggerDue, d as resolveEvery, f as successorId, g as discoverCollections, h as acceptParsedSchema, i as advanceTriggerDate, j as resolveCreateItemId, k as readItem, l as maybeSpawnSuccessor, m as CollectionSchemaZ, n as deleteCollection, o as daysInMonth, p as enrichItems, r as deleteCollectionRefusalMessage, s as formatCivil, t as deleteCustomView, u as parseCivil, v as toDetail, w as buildCollectionActionSeedPrompt, x as validateCollectionRecords, y as toSummary, z as safeRecordId } from "../../server-q4WPXtbU.js";
 import { isSafeActionTemplatePath, isSafeCustomViewPath, isSafeTemplatePath } from "../paths.js";
 export { COMPUTED_TYPES, CollectionSchemaZ, SCHEMA_FILE, acceptParsedSchema, advanceTriggerDate, buildActionSeedPrompt, buildCollectionActionSeedPrompt, computeSuccessor, configureCollectionHost, daysInMonth, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, enrichItems, formatCivil, generateItemId, getWorkspaceRoot, isContainedInRoot, isContainedInWorkspace, isSafeActionTemplatePath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadCollection, log, maybeSpawnSuccessor, parseCivil, publishCollectionChange, readCustomViewHtml, readItem, readSkillTemplate, resolveCreateItemId, resolveDataDir, resolveEvery, resolveTemplatePath, safeRecordId, safeSlugName, setCollectionChangePublisher, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };

package/dist/collection-watchers/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_collection_index = require("../collection/index.cjs");
-const require_server = require("../server-D27UzXug.cjs");
+const require_server = require("../server-Db-x7OXz.cjs");
 const require_notifier = require("../notifier-bS8IEeLA.cjs");
 let node_fs = require("node:fs");
 let node_fs_promises = require("node:fs/promises");

package/dist/collection-watchers/index.js

@@ -1,5 +1,5 @@
 import { whenMatches } from "../collection/index.js";
-import { D as listItems, _ as loadCollection, c as isTriggerDue, g as discoverCollections, k as readItem, l as maybeSpawnSuccessor } from "../server-B2YkcCwl.js";
+import { D as listItems, _ as loadCollection, c as isTriggerDue, g as discoverCollections, k as readItem, l as maybeSpawnSuccessor } from "../server-q4WPXtbU.js";
 import { d as publish, m as updateForPlugin, n as clear, s as listAll } from "../notifier-ChpY0XrY.js";
 import { watch } from "node:fs";
 import { mkdir } from "node:fs/promises";

package/dist/feeds/server/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("../../rolldown-runtime-D6vf50IK.cjs");
 const require_deriveAll = require("../../deriveAll-VRWrs3SF.cjs");
-const require_server = require("../../server-D27UzXug.cjs");
+const require_server = require("../../server-Db-x7OXz.cjs");
 const require_ingestTypes = require("../../ingestTypes-DDOVhOYC.cjs");
 const require_feeds_paths = require("../paths.cjs");
 const require_notifier = require("../../notifier-bS8IEeLA.cjs");

package/dist/feeds/server/index.js

@@ -1,5 +1,5 @@
 import { a as FEED_SCHEDULES, o as INGEST_KINDS } from "../../deriveAll-vzIhhKBK.js";
-import { A as readSkillTemplate, B as safeSlugName, D as listItems, L as resolveDataDir, M as writeItem, T as deleteItem, g as discoverCollections, w as buildCollectionActionSeedPrompt } from "../../server-B2YkcCwl.js";
+import { A as readSkillTemplate, B as safeSlugName, D as listItems, L as resolveDataDir, M as writeItem, T as deleteItem, g as discoverCollections, w as buildCollectionActionSeedPrompt } from "../../server-q4WPXtbU.js";
 import { n as DEFAULT_FEED_MAX_ITEMS, r as isFeedSchedule, t as AGENT_INGEST_KIND } from "../../ingestTypes-B8DaQOTy.js";
 import { FEEDS_DIR, feedDir, feedStatePath, feedsRoot, ingestStateDir, ingestStatePath } from "../paths.js";
 import { d as publish, n as clear } from "../../notifier-ChpY0XrY.js";

package/dist/{server-D27UzXug.cjs → server-Db-x7OXz.cjs}

@@ -1503,21 +1503,29 @@ function deleteTargets(collection, workspaceRoot) {
 	];
 }
 /** The records directory the delete recursively archives + removes
-*  (`collection.dataDir`) must live in this collection's OWN
-*  `data/<slug>/` subtree. `dataDir` is normally derived from
-*  `schema.dataPath`, but `deleteCollection` accepts a `LoadedCollection`
-*  whose fields could be inconsistent — so we validate the RESOLVED
-*  target the destructive ops actually touch, not the schema string.
-*  `resolveDataDir` only proves containment in the workspace; a shared
-*  root like `data` or `data/skills` would otherwise turn the recursive
-*  removal into a workspace-wide wipe whose archive captures only this
-*  collection. `path.resolve` collapses any `..` before the prefix test
-*  (symlink escapes are caught separately by the realpath containment
-*  check in `deleteTargets`). */
+*  (`collection.dataDir`) must live in this collection's OWN per-slug
+*  subtree. `dataDir` is normally derived from `schema.dataPath`, but
+*  `deleteCollection` accepts a `LoadedCollection` whose fields could be
+*  inconsistent — so we validate the RESOLVED target the destructive ops
+*  actually touch, not the schema string. A shared root like `data` or
+*  `data/skills` would otherwise turn the recursive removal into a
+*  workspace-wide wipe whose archive captures only this collection.
+*  `path.resolve` collapses any `..` before the prefix test (symlink
+*  escapes are caught separately by the realpath containment check in
+*  `deleteTargets`).
+*
+*  TWO acceptable per-slug subtrees:
+*    - `data/<slug>/...` — the convention authored collections default to.
+*    - `data/collections/<slug>/...` — what `normalizedDataPath` in the
+*      registry-import path stamps onto every imported schema (so imported
+*      collections never collide with `data/<slug>/`-shaped authored ones).
+*  Both are equally per-collection and equally safe; a delete that targets
+*  anything else (e.g. raw `data/`, `data/wiki/`, a sibling slug) is
+*  refused. */
 function isDataDirSafe(dataDir, slug, workspaceRoot) {
-	const expectedRoot = node_path.default.resolve(workspaceRoot, "data", slug);
+	const acceptableRoots = [node_path.default.resolve(workspaceRoot, "data", slug), node_path.default.resolve(workspaceRoot, "data", "collections", slug)];
 	const resolved = node_path.default.resolve(dataDir);
-	return resolved === expectedRoot || resolved.startsWith(expectedRoot + node_path.default.sep);
+	return acceptableRoots.some((root) => resolved === root || resolved.startsWith(root + node_path.default.sep));
 }
 function buildRestoreDoc(collection) {
 	const { slug, schema } = collection;
@@ -1982,4 +1990,4 @@ Object.defineProperty(exports, "writeItem", {
 	}
 });
 
-//# sourceMappingURL=server-D27UzXug.cjs.map
+//# sourceMappingURL=server-Db-x7OXz.cjs.map