@mulmoclaude/core 0.24.0 → 0.25.0

package/dist/collection/paths.cjs

@@ -1,56 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/collection/core/templatePath.ts
-/** `templates/` — the subdir an action template must live under. */
-var TEMPLATES_PREFIX = "templates/";
-/**
-* A safe skill-relative path: non-empty, no backslash, not absolute,
-* and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token
-* that isn't `.` / `..` (no traversal). Multi-segment (nested) paths
-* are allowed. The reader's realpath containment is the hard
-* guarantee; this fails a bad path fast.
-*/
-function isSafeTemplatePath(value) {
-	if (value.length === 0 || value.includes("\\") || value.startsWith("/")) return false;
-	return value.split("/").every((seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg));
-}
-/**
-* An action `template` value: a safe path that lives under the skill's
-* `templates/` subdir. This is the canonical contract — the schema
-* validator rejects anything else up front, and the bridge mirrors
-* exactly these. Nested paths (`templates/mail/welcome.md`) and any
-* extension are allowed as long as the path is otherwise safe.
-*/
-function isSafeActionTemplatePath(value) {
-	return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);
-}
-/** `views/` — the subdir a custom-view HTML file must live under. */
-var VIEWS_PREFIX = "views/";
-/**
-* A custom-view `file` value: a safe path under the skill's `views/`
-* subdir that ends in `.html`. Custom views are LLM-authored HTML the
-* host renders in a sandboxed iframe; constraining them to `views/*.html`
-* keeps the data folder and the schema/template files off-limits to the
-* view-file reader. Same per-segment safety as templates; the reader's
-* realpath containment is the hard guarantee.
-*/
-function isSafeCustomViewPath(value) {
-	return value.startsWith(VIEWS_PREFIX) && /\.html$/.test(value) && isSafeTemplatePath(value);
-}
-/**
-* A custom-view `i18n` value: the JSON dictionary file authors ship next to
-* their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the
-* field can only point at a translation file co-located with the view it
-* translates — the same `views/` containment the HTML reader uses. The
-* `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able
-* for both authors and tooling.
-*/
-function isSafeCustomViewI18nPath(value) {
-	return value.startsWith(VIEWS_PREFIX) && /\.i18n\.json$/.test(value) && isSafeTemplatePath(value);
-}
-//#endregion
-exports.isSafeActionTemplatePath = isSafeActionTemplatePath;
-exports.isSafeCustomViewI18nPath = isSafeCustomViewI18nPath;
-exports.isSafeCustomViewPath = isSafeCustomViewPath;
-exports.isSafeTemplatePath = isSafeTemplatePath;
-
-//# sourceMappingURL=paths.cjs.map
+const require_templatePath = require("../templatePath-27vUZowm.cjs");
+exports.isSafeActionTemplatePath = require_templatePath.isSafeActionTemplatePath;
+exports.isSafeCustomViewI18nPath = require_templatePath.isSafeCustomViewI18nPath;
+exports.isSafeCustomViewPath = require_templatePath.isSafeCustomViewPath;
+exports.isSafeTemplatePath = require_templatePath.isSafeTemplatePath;

package/dist/collection/paths.js

@@ -1,52 +1,2 @@
-//#region src/collection/core/templatePath.ts
-/** `templates/` — the subdir an action template must live under. */
-var TEMPLATES_PREFIX = "templates/";
-/**
-* A safe skill-relative path: non-empty, no backslash, not absolute,
-* and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token
-* that isn't `.` / `..` (no traversal). Multi-segment (nested) paths
-* are allowed. The reader's realpath containment is the hard
-* guarantee; this fails a bad path fast.
-*/
-function isSafeTemplatePath(value) {
-	if (value.length === 0 || value.includes("\\") || value.startsWith("/")) return false;
-	return value.split("/").every((seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg));
-}
-/**
-* An action `template` value: a safe path that lives under the skill's
-* `templates/` subdir. This is the canonical contract — the schema
-* validator rejects anything else up front, and the bridge mirrors
-* exactly these. Nested paths (`templates/mail/welcome.md`) and any
-* extension are allowed as long as the path is otherwise safe.
-*/
-function isSafeActionTemplatePath(value) {
-	return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);
-}
-/** `views/` — the subdir a custom-view HTML file must live under. */
-var VIEWS_PREFIX = "views/";
-/**
-* A custom-view `file` value: a safe path under the skill's `views/`
-* subdir that ends in `.html`. Custom views are LLM-authored HTML the
-* host renders in a sandboxed iframe; constraining them to `views/*.html`
-* keeps the data folder and the schema/template files off-limits to the
-* view-file reader. Same per-segment safety as templates; the reader's
-* realpath containment is the hard guarantee.
-*/
-function isSafeCustomViewPath(value) {
-	return value.startsWith(VIEWS_PREFIX) && /\.html$/.test(value) && isSafeTemplatePath(value);
-}
-/**
-* A custom-view `i18n` value: the JSON dictionary file authors ship next to
-* their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the
-* field can only point at a translation file co-located with the view it
-* translates — the same `views/` containment the HTML reader uses. The
-* `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able
-* for both authors and tooling.
-*/
-function isSafeCustomViewI18nPath(value) {
-	return value.startsWith(VIEWS_PREFIX) && /\.i18n\.json$/.test(value) && isSafeTemplatePath(value);
-}
-//#endregion
+import { i as isSafeTemplatePath, n as isSafeCustomViewI18nPath, r as isSafeCustomViewPath, t as isSafeActionTemplatePath } from "../templatePath-k_WNbL_Q.js";
 export { isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath };
-
-//# sourceMappingURL=paths.js.map

package/dist/collection/registry/server/index.cjs

@@ -1,7 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("../../../rolldown-runtime-D6vf50IK.cjs");
-const require_server = require("../../../server-CkysfLh4.cjs");
-const require_collection_paths = require("../../paths.cjs");
+const require_discovery = require("../../../discovery-BZ2ms1tE.cjs");
+const require_templatePath = require("../../../templatePath-27vUZowm.cjs");
+const require_server = require("../../../server-DLRz-U7F.cjs");
 const require_skill_bridge_index = require("../../../skill-bridge/index.cjs");
 const require_types = require("../../../types-CNqkLT4M.cjs");
 let node_path = require("node:path");
@@ -74,7 +75,7 @@ function parseEntry(value, index) {
 *  workspace file and delegates here. */
 function parseRegistriesConfig(raw) {
 	if (!Array.isArray(raw)) {
-		require_server.log.warn("collections-registry", "registries config is not an array — ignoring");
+		require_discovery.log.warn("collections-registry", "registries config is not an array — ignoring");
 		return [];
 	}
 	const seen = /* @__PURE__ */ new Set();
@@ -82,11 +83,11 @@ function parseRegistriesConfig(raw) {
 	for (let i = 0; i < raw.length; i++) {
 		const parsed = parseEntry(raw[i], i);
 		if (typeof parsed === "string") {
-			require_server.log.warn("collections-registry", "registry config entry rejected", { reason: parsed });
+			require_discovery.log.warn("collections-registry", "registry config entry rejected", { reason: parsed });
 			continue;
 		}
 		if (seen.has(parsed.name)) {
-			require_server.log.warn("collections-registry", "registry config duplicate name dropped", { name: parsed.name });
+			require_discovery.log.warn("collections-registry", "registry config duplicate name dropped", { name: parsed.name });
 			continue;
 		}
 		seen.add(parsed.name);
@@ -106,13 +107,13 @@ function readConfigTextOrNull(filePath) {
 *  Missing file ⇒ empty list. Malformed JSON or rejected entries log but never
 *  throw. */
 function loadRegistriesConfig() {
-	const text = readConfigTextOrNull(require_server.collectionsRegistriesConfigPath());
+	const text = readConfigTextOrNull(require_discovery.collectionsRegistriesConfigPath());
 	if (text === null) return [];
 	let parsed;
 	try {
 		parsed = JSON.parse(text);
 	} catch (err) {
-		require_server.log.warn("collections-registry", "registries config is not valid JSON — ignoring", { error: err instanceof Error ? err.message : String(err) });
+		require_discovery.log.warn("collections-registry", "registries config is not valid JSON — ignoring", { error: err instanceof Error ? err.message : String(err) });
 		return [];
 	}
 	return parseRegistriesConfig(parsed);
@@ -154,7 +155,7 @@ async function loadFromNetwork(descriptor) {
 			headers: { accept: "application/json" }
 		});
 	} catch (err) {
-		require_server.log.warn("collections-registry", "index fetch failed", {
+		require_discovery.log.warn("collections-registry", "index fetch failed", {
 			registry: descriptor.name,
 			url: descriptor.indexUrl,
 			error: require_server.errorMessage(err)
@@ -172,7 +173,7 @@ async function loadFromNetwork(descriptor) {
 	};
 	const parsed = require_types.parseRegistryIndex(await res.json().catch(() => null), descriptor.name);
 	if (!parsed.ok) {
-		require_server.log.warn("collections-registry", "index invalid", {
+		require_discovery.log.warn("collections-registry", "index invalid", {
 			registry: descriptor.name,
 			url: descriptor.indexUrl,
 			error: parsed.error
@@ -582,14 +583,14 @@ function validateAndNormalize(bundle, localSlug, workspaceRoot) {
 	} catch {
 		return { error: "schema.json is not valid JSON" };
 	}
-	const parsed = require_server.CollectionSchemaZ.safeParse(parsedJson);
+	const parsed = require_discovery.CollectionSchemaZ.safeParse(parsedJson);
 	if (!parsed.success) return { error: `schema.json failed validation: ${parsed.error.issues[0]?.message ?? "invalid"}` };
 	if (parsed.data.dataSource !== void 0) return { error: "schema.json declares `dataSource` — external-data collections are machine-local and cannot be imported from a registry" };
 	const schema = {
 		...parsed.data,
 		dataPath: normalizedDataPath(localSlug)
 	};
-	const acceptance = require_server.acceptParsedSchema(schema, {
+	const acceptance = require_discovery.acceptParsedSchema(schema, {
 		source: "project",
 		workspaceRoot,
 		slug: localSlug
@@ -620,8 +621,8 @@ async function materializeSeed(dataDir, bundle) {
 	let written = 0;
 	for (const [rel, content] of seedEntries) {
 		const fileName = rel.slice(11);
-		if (fileName.includes("/") || require_server.safeRecordId(fileName.replace(/\.json$/, "")) === null) {
-			require_server.log.warn("collections-registry", "skipped unsafe seed record", { rel });
+		if (fileName.includes("/") || require_discovery.safeRecordId(fileName.replace(/\.json$/, "")) === null) {
+			require_discovery.log.warn("collections-registry", "skipped unsafe seed record", { rel });
 			continue;
 		}
 		await (0, node_fs_promises.writeFile)(node_path.default.join(dataDir, fileName), content, "utf-8");
@@ -641,7 +642,7 @@ function bridgeAllowlistFiles(bundle) {
 	for (const rel of bundle.keys()) {
 		if (rel === SKILL_FILE || rel === SCHEMA_FILE) continue;
 		if (rel.startsWith(SEED_PREFIX)) continue;
-		if (!require_collection_paths.isSafeActionTemplatePath(rel)) continue;
+		if (!require_templatePath.isSafeActionTemplatePath(rel)) continue;
 		wanted.add(rel);
 	}
 	return wanted;
@@ -716,7 +717,7 @@ async function writeImportedCollection(params) {
 		contentSha: entry.contentSha,
 		importedAt: nowIso
 	};
-	await require_server.writeFileAtomic(node_path.default.join(staging, ORIGIN_FILE), `${JSON.stringify(origin, null, 2)}\n`);
+	await require_discovery.writeFileAtomic(node_path.default.join(staging, ORIGIN_FILE), `${JSON.stringify(origin, null, 2)}\n`);
 	if (target.updated) await (0, node_fs_promises.rename)(target.targetDir, backup);
 	try {
 		await (0, node_fs_promises.rename)(staging, target.targetDir);
@@ -731,7 +732,7 @@ async function writeImportedCollection(params) {
 	try {
 		await mirrorToClaudeSkills(workspaceRoot, localSlug, bundle);
 	} catch (err) {
-		require_server.log.warn("collections-registry", "mirror to .claude/skills/ failed (data/skills write succeeded; prior mirror left intact)", {
+		require_discovery.log.warn("collections-registry", "mirror to .claude/skills/ failed (data/skills write succeeded; prior mirror left intact)", {
 			localSlug,
 			error: require_server.errorMessage(err)
 		});
@@ -779,7 +780,7 @@ async function performImport(author, slug, workspaceRoot, registry = null) {
 			nowIso: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	} catch (err) {
-		require_server.log.warn("collections-registry", "import write failed", {
+		require_discovery.log.warn("collections-registry", "import write failed", {
 			author,
 			slug,
 			registry: entry.registryName,
@@ -924,7 +925,7 @@ async function writeCollectionExport(params) {
 		...seed.count > 0 ? { dataConsent: true } : {}
 	};
 	await (0, node_fs_promises.writeFile)(node_path.default.join(outDir, "meta.json"), `${JSON.stringify(metaOut, null, 2)}\n`, "utf-8");
-	require_server.log.info("collections-registry", "exported collection", {
+	require_discovery.log.info("collections-registry", "exported collection", {
 		slug: meta.slug,
 		author: meta.author,
 		seedCount: seed.count
@@ -1025,7 +1026,7 @@ async function readJsonObject(file) {
 	}
 }
 async function performExport(slug, opts, workspaceRoot) {
-	const collection = await require_server.loadCollection(slug);
+	const collection = await require_discovery.loadCollection(slug);
 	if (!collection) return {
 		ok: false,
 		status: STATUS_NOT_FOUND,