@mulmoclaude/core 0.2.7 → 0.2.8

package/dist/{server-Db-x7OXz.cjs → server-D27UzXug.cjs}

@@ -1503,29 +1503,21 @@ function deleteTargets(collection, workspaceRoot) {
 	];
 }
 /** The records directory the delete recursively archives + removes
-*  (`collection.dataDir`) must live in this collection's OWN per-slug
-*  subtree. `dataDir` is normally derived from `schema.dataPath`, but
-*  `deleteCollection` accepts a `LoadedCollection` whose fields could be
-*  inconsistent — so we validate the RESOLVED target the destructive ops
-*  actually touch, not the schema string. A shared root like `data` or
-*  `data/skills` would otherwise turn the recursive removal into a
-*  workspace-wide wipe whose archive captures only this collection.
-*  `path.resolve` collapses any `..` before the prefix test (symlink
-*  escapes are caught separately by the realpath containment check in
-*  `deleteTargets`).
-*
-*  TWO acceptable per-slug subtrees:
-*    - `data/<slug>/...` — the convention authored collections default to.
-*    - `data/collections/<slug>/...` — what `normalizedDataPath` in the
-*      registry-import path stamps onto every imported schema (so imported
-*      collections never collide with `data/<slug>/`-shaped authored ones).
-*  Both are equally per-collection and equally safe; a delete that targets
-*  anything else (e.g. raw `data/`, `data/wiki/`, a sibling slug) is
-*  refused. */
+*  (`collection.dataDir`) must live in this collection's OWN
+*  `data/<slug>/` subtree. `dataDir` is normally derived from
+*  `schema.dataPath`, but `deleteCollection` accepts a `LoadedCollection`
+*  whose fields could be inconsistent — so we validate the RESOLVED
+*  target the destructive ops actually touch, not the schema string.
+*  `resolveDataDir` only proves containment in the workspace; a shared
+*  root like `data` or `data/skills` would otherwise turn the recursive
+*  removal into a workspace-wide wipe whose archive captures only this
+*  collection. `path.resolve` collapses any `..` before the prefix test
+*  (symlink escapes are caught separately by the realpath containment
+*  check in `deleteTargets`). */
 function isDataDirSafe(dataDir, slug, workspaceRoot) {
-	const acceptableRoots = [node_path.default.resolve(workspaceRoot, "data", slug), node_path.default.resolve(workspaceRoot, "data", "collections", slug)];
+	const expectedRoot = node_path.default.resolve(workspaceRoot, "data", slug);
 	const resolved = node_path.default.resolve(dataDir);
-	return acceptableRoots.some((root) => resolved === root || resolved.startsWith(root + node_path.default.sep));
+	return resolved === expectedRoot || resolved.startsWith(expectedRoot + node_path.default.sep);
 }
 function buildRestoreDoc(collection) {
 	const { slug, schema } = collection;
@@ -1990,4 +1982,4 @@ Object.defineProperty(exports, "writeItem", {
 	}
 });
 
-//# sourceMappingURL=server-Db-x7OXz.cjs.map
+//# sourceMappingURL=server-D27UzXug.cjs.map