@raishin/vanguard-frontier-agentic 3.1.0 → 3.1.1

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
-    "version": "3.1.0"
+    "version": "3.1.1"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "Raishin",

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "Raishin",

package/.github/plugin/marketplace.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/github/copilot-cli/main/schemas/marketplace.schema.json",
   "name": "vanguard-frontier-agentic",
   "description": "Curated marketplace for cloud, zero-trust, and compliance-aware AI workflows — agents, skills, and rules spanning cloud, security, ERP, and platform providers.",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "owner": {
     "name": "Raishin",
     "url": "https://github.com/Raishin"

package/catalog/asset-integrity.json

@@ -28968,7 +28968,7 @@
     },
     {
       "tree": "scripts",
-      "aggregate_sha256": "db4bd93be8066b5265477e477704183162962e9f0166fd3fe63d3e1faa6f38b3",
+      "aggregate_sha256": "ce5d7d297fec4a8fb096413d766d941200fe6568f0f7e1e6f947f473efcdeadc",
       "files": [
         {
           "path": "scripts/apply-skill-allowed-tools.py",
@@ -28982,8 +28982,8 @@
         },
         {
           "path": "scripts/export-marketplace-agents.mjs",
-          "sha256": "c79e3e7decbb3b9ba77f33e05145a22892bcfbf6a15231a74191a1d60e47cbac",
-          "bytes": 27654
+          "sha256": "0624a3ae7d7aa250985dd5e3763a1f9266bc46722c7f5f7620f0859dccf38f37",
+          "bytes": 28726
         },
         {
           "path": "scripts/gen_azure_live_guards.py",
@@ -29385,7 +29385,7 @@
     },
     {
       "tree": "plugins",
-      "aggregate_sha256": "dbfc79627e60a0cdab406d60ff983cbea890a062926f6736a319c9eb1aea09af",
+      "aggregate_sha256": "9bcbf79b42023ffea07ac35e7d6a57f5b945c05afdced8cda7ae50cdcab53339",
       "files": [
         {
           "path": "plugins/cross-platform-agent-template/.codex-plugin/plugin.json",
@@ -29399,7 +29399,7 @@
         },
         {
           "path": "plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json",
-          "sha256": "dc0b9c5aae471a7bbd0647ec54b866c8151c346c1fe9479d07293f57f9aa8327",
+          "sha256": "4a5ac9ae2f5a81204afcb5c1ddd8157fd0866dc64bf4b6bcb519dc10192c4119",
           "bytes": 1875
         },
         {
@@ -29416,7 +29416,7 @@
     },
     {
       "tree": ".claude-plugin",
-      "aggregate_sha256": "55485289fad3d6ff7e17af2e5b51dd7c418797697f445178d800297431ba9fb2",
+      "aggregate_sha256": "a7c6e0414abf134bf22d1be821262175e1f23d942a4c8d238f91e9c902b792c4",
       "files": [
         {
           "path": ".claude-plugin/README.md",
@@ -29425,19 +29425,19 @@
         },
         {
           "path": ".claude-plugin/marketplace.json",
-          "sha256": "e751e34703e505e1c19e28979626334b970fef59acbe0d4933aef8ce00813953",
+          "sha256": "6cac558ae8e51168149f96771c2ae1b350e7447b3583c16368d24f32fb4954aa",
           "bytes": 834
         },
         {
           "path": ".claude-plugin/plugin.json",
-          "sha256": "0a8937a0e894990c5e09c0886b48d6aec9e2a6a7e207bcd7f56f4ab1f30da501",
+          "sha256": "dae34758b5252059c18d4d2c20ed6d16a09eb478541fa79985b3f27ab0ea7d30",
           "bytes": 54712
         }
       ]
     },
     {
       "tree": ".cursor-plugin",
-      "aggregate_sha256": "615022c865da4130652ad14cf46dac7486d256a65db611f910ac3940ea50fca1",
+      "aggregate_sha256": "ca39c896a869dd5f5a7c3c6bf2b630ed13fe4749eca55dc23fad24eeecdbbb95",
       "files": [
         {
           "path": ".cursor-plugin/README.md",
@@ -29446,14 +29446,14 @@
         },
         {
           "path": ".cursor-plugin/plugin.json",
-          "sha256": "c97d139681e69a3d0ba17ab89ed1a527214065f03e57a683a2aa423d1d201e87",
+          "sha256": "2363eda3be3e94f7aa2b0ebf13dc3de398862fe0c6c083a66566f8e9e9a911e7",
           "bytes": 51718
         }
       ]
     },
     {
       "tree": ".github/plugin",
-      "aggregate_sha256": "7315474adafd807d9fdea7832cceb4f3ecdcda6b62cbac1b0fd6ea1617a431f2",
+      "aggregate_sha256": "0e0b126f84993b25cacefd2e3b2a0822a9373927af4e5780623e837eac9c673d",
       "files": [
         {
           "path": ".github/plugin/README.md",
@@ -29462,7 +29462,7 @@
         },
         {
           "path": ".github/plugin/marketplace.json",
-          "sha256": "0132338c721fa65f3770f18d78a161c203af6c38c0b14f83326dbcb8016a2945",
+          "sha256": "d6c094a33713c48cb3ea799d927b90168fb8c9f7f4e57089ec3cb2464b04b1c8",
           "bytes": 770
         }
       ]
@@ -29485,7 +29485,7 @@
     },
     {
       "tree": "tests",
-      "aggregate_sha256": "8382df613db41b771c34920817ec5891475cd8e99cff5e1e6f2b8ddb57050cfb",
+      "aggregate_sha256": "f4056e5dacbb3c0e960409c6065a627d1cadc32ce69019a5183563328d6f0ce5",
       "files": [
         {
           "path": "tests/AGENTS.md",
@@ -37059,8 +37059,8 @@
         },
         {
           "path": "tests/test-vfa-export-coverage.test.mjs",
-          "sha256": "d9ba3f88b05a05f433e1f9750047ae88d29263e3206c05829b9190611fc601c1",
-          "bytes": 45467
+          "sha256": "a054c8b1e0acc8e96da9f99f7442aa7396858e46d0894c8e6f0a010119c798ea",
+          "bytes": 46776
         },
         {
           "path": "tests/validate-agent-frontmatter-schema.py",
@@ -37213,8 +37213,8 @@
     },
     {
       "path": "package.json",
-      "sha256": "3f531aefe46a9d2b7482c3527b6f2e7d0eb44509908684f481479aef40f1d4ce",
-      "bytes": 5933
+      "sha256": "3c58dd28c3ae02d94893f352843839c578d4583793841d042d8c2f9a25473afd",
+      "bytes": 5934
     },
     {
       "path": ".releaserc.js",
@@ -37222,5 +37222,5 @@
       "bytes": 8340
     }
   ],
-  "aggregate_sha256": "9ff94ce2ca1a8c12f1f0c8d5447928d929238653af00ad4858b58990a39c6fb1"
+  "aggregate_sha256": "6b52cc932c71df7ec6143148489857d4f876392197c9026e529504cb899faead"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {
@@ -85,10 +85,10 @@
     "@semantic-release/commit-analyzer": "13.0.1",
     "@semantic-release/exec": "7.1.0",
     "@semantic-release/git": "10.0.1",
-    "@semantic-release/github": "12.0.8",
+    "@semantic-release/github": "12.0.9",
     "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "14.1.1",
-    "conventional-changelog-conventionalcommits": "9.3.1",
+    "conventional-changelog-conventionalcommits": "10.2.1",
     "fast-check": "^4.7.0",
     "semantic-release": "25.0.5"
   },

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "Raishin",

package/scripts/export-marketplace-agents.mjs

@@ -273,16 +273,6 @@ function ensurePlatform(platform) {
 }
 
 function assertWithin(parent, child, label) {
-  // Lexical containment check — path.resolve() is purely string-based and does
-  // NOT follow symlinks. This guards against traversal strings (../../) and
-  // metadata.json with absolute paths outside the repo.
-  //
-  // Residual TOCTOU: if an adversary races to create a symlink at `child`
-  // AFTER this check but BEFORE the actual write, the symlink target would be
-  // written to. copyFile()/copySkillTree() use lstatSync on source AND
-  // destination to detect pre-existing symlinks, which closes the window for
-  // the common case. A fully TOCTOU-proof solution requires O_NOFOLLOW at the
-  // kernel level, which is not exposed by Node.js fs APIs.
   const resolvedParent = path.resolve(parent);
   const resolvedChild = path.resolve(child);
   const sep = path.sep;
@@ -295,6 +285,47 @@ function assertWithin(parent, child, label) {
   }
 }
 
+function assertNoSymlinkAncestor(parent, child, label) {
+  assertWithin(parent, child, label);
+
+  const resolvedParent = path.resolve(parent);
+  const resolvedChild = path.resolve(child);
+  const relativeParent = path.dirname(path.relative(resolvedParent, resolvedChild));
+  if (!relativeParent || relativeParent === ".") return;
+
+  let current = resolvedParent;
+  for (const part of relativeParent.split(path.sep)) {
+    current = path.join(current, part);
+    let stat;
+    try {
+      stat = fs.lstatSync(current);
+    } catch (err) {
+      if (err && err.code === "ENOENT") return;
+      throw err;
+    }
+    if (stat.isSymbolicLink()) {
+      throw new Error(
+        `Refusing to ${label}: symbolic link ancestor '${current}' would redirect writes outside '${resolvedParent}'. ` +
+        `Remove the symlink and retry.`
+      );
+    }
+    if (!stat.isDirectory()) {
+      throw new Error(
+        `Refusing to ${label}: path ancestor '${current}' is not a directory.`
+      );
+    }
+  }
+}
+
+function assertSafeWriteDestination(parent, destination, label) {
+  // Lexical containment blocks traversal strings and absolute-path metadata.
+  // The ancestor walk then rejects pre-existing symlinks such as `.codex -> /x`
+  // before mkdir/copy can follow them. Node does not expose fully race-proof
+  // O_NOFOLLOW directory creation, so this intentionally closes the reachable
+  // planted-symlink case without pretending to solve privileged TOCTOU races.
+  assertNoSymlinkAncestor(parent, destination, label);
+}
+
 function loadSkills() {
   const skillsRoot = path.join(repoRoot, "skills");
   if (!fs.existsSync(skillsRoot)) return new Map();
@@ -325,11 +356,12 @@ function loadSkills() {
   return byName;
 }
 
-function copySkillTree(sourceDir, destDir, force) {
+function copySkillTree(sourceDir, destDir, force, targetRoot) {
   assertWithin(repoRoot, sourceDir, "read skill source");
   for (const entry of fs.readdirSync(sourceDir, { withFileTypes: true })) {
     const src = path.join(sourceDir, entry.name);
     const dst = path.join(destDir, entry.name);
+    assertSafeWriteDestination(targetRoot, dst, "write skill tree destination");
     if (entry.isSymbolicLink()) {
       throw new Error(`Refusing to copy symbolic link in skill tree: ${src}`);
     }
@@ -342,7 +374,7 @@ function copySkillTree(sourceDir, destDir, force) {
       );
     }
     if (entry.isDirectory()) {
-      copySkillTree(src, dst, force);
+      copySkillTree(src, dst, force, targetRoot);
       continue;
     }
     if (!entry.isFile()) continue;
@@ -404,7 +436,8 @@ function resolveCompanionSkills(selectedAgents, skillsByName, role, includeAll,
   return { skillNames: [...skillNames].sort(), orphans };
 }
 
-function copyFile(source, destination, force) {
+function copyFile(source, destination, force, targetRoot) {
+  assertSafeWriteDestination(targetRoot, destination, "write file destination");
   const sourceStat = fs.lstatSync(source);
   if (sourceStat.isSymbolicLink()) {
     throw new Error(`Refusing to copy symbolic link as harness source: ${source}`);
@@ -662,7 +695,7 @@ function main() {
 
   for (const operation of operations) {
     assertWithin(args.repo, operation.dest, "write destination");
-    copyFile(operation.source, operation.dest, args.force);
+    copyFile(operation.source, operation.dest, args.force, args.repo);
     if (platform === "codex") {
       rewriteCodexAgentSkillPaths(operation.dest, args.repo);
     }
@@ -705,7 +738,7 @@ function main() {
       if (!sourceDir) continue;
       const destDir = path.join(args.repo, skillsDestRoot, skillName);
       assertWithin(args.repo, destDir, "write skill destination");
-      copySkillTree(sourceDir, destDir, args.force);
+      copySkillTree(sourceDir, destDir, args.force, args.repo);
       console.log(`installed\tskill:${skillName}\t${platform}\t${path.relative(args.repo, destDir)}`);
       bundled += 1;
     }

package/tests/test-vfa-export-coverage.test.mjs

@@ -864,6 +864,36 @@ const onDiskSkillNames = new Set(skillProviderByName.keys());
   }
 }
 
+// F28c: codex export rejects symlinked platform directory ancestors.
+{
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "vfa-test-codex-parent-symlink-"));
+  const outsideDir = fs.mkdtempSync(path.join(os.tmpdir(), "vfa-test-outside-"));
+  try {
+    fs.symlinkSync(outsideDir, path.join(tmpDir, ".codex"));
+    const r = run([
+      "--platform", "codex",
+      "--agents", "aws-iam-least-privilege-review-agent",
+      "--repo", tmpDir,
+      "--force",
+    ]);
+    const outsideAgent = path.join(outsideDir, "agents", "aws-iam-least-privilege-review-agent.toml");
+    const outsideSkill = path.join(outsideDir, "skills", "aws-iam-least-privilege-review", "SKILL.md");
+    if (
+      r.exitCode !== 0 &&
+      /symbolic link ancestor/i.test(r.stderr) &&
+      !fs.existsSync(outsideAgent) &&
+      !fs.existsSync(outsideSkill)
+    ) {
+      ok("F28c codex export rejects symlinked .codex ancestor without outside writes");
+    } else {
+      fail(`F28c expected symlink ancestor rejection without outside writes; exit=${r.exitCode} agentOutside=${fs.existsSync(outsideAgent)} skillOutside=${fs.existsSync(outsideSkill)} stderr=${r.stderr.slice(0, 300)}`);
+    }
+  } finally {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    fs.rmSync(outsideDir, { recursive: true, force: true });
+  }
+}
+
 // F29: two-stage installer dry-run composes marketplace-safe export path.
 {
   const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "vfa-test-two-stage-"));