@rosthq/cli 0.7.142 → 0.7.143

package/dist/index.js

@@ -53729,7 +53729,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-31.2",
+    version: "2026-07-31.3",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -54369,7 +54369,7 @@ Skills wrapper help:
 {{cli}} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]
 \`\`\`
 
-\`{{cli}} skills install\` writes into the client Skills directory and records \`.rost-skill.json\` with \`skill_version_id\`, \`content_sha256\`, source, client, and \`installed_from: "rost_api"\`. Set \`ROST_SKILL_INSTALL_ROOT\` to override the local root in CI or a sandbox. Use \`install\` for one Skill and \`sync\` as the default local-agent command because it installs every approved Skill assigned to the Seat and skips unchanged local copies by hash. Entitlement failures mean the tenant cannot access that {{brand}} catalog tier yet; stale local copies are fixed by rerunning \`sync\`; private catalog access is always served by {{brand}} APIs, not by giving the agent a private GitHub credential.
+\`{{cli}} skills install\` writes into the client Skills directory and records \`.rost-skill.json\` with \`skill_version_id\`, \`content_sha256\`, source, client, and \`installed_from: "rost_api"\`. Set \`ROST_SKILL_INSTALL_ROOT\` to override the local root in CI or a sandbox. Use \`install\` for one Skill and \`sync\` as the default local-agent command because it installs every approved Skill assigned to the Seat and skips a local copy only when its recorded hash matches and the installed file's own sha256 and byte size verify against the package the server returned; an edited or truncated local file is reinstalled instead of being reported unchanged. For \`--client claude-code\` the root is \`$CLAUDE_CONFIG_DIR/skills\` \u2014 \`CLAUDE_CONFIG_DIR\` is the variable Claude Code itself reads \u2014 otherwise \`~/.claude/skills\`; \`CLAUDE_HOME\` set on its own is a usage error with a migration instruction, and \`CLAUDE_HOME\` set alongside a different \`CLAUDE_CONFIG_DIR\` prints a notice that \`CLAUDE_HOME\` is ignored. For \`--client codex\` the root is \`$CODEX_HOME/skills\`, otherwise \`~/.codex/skills\`. For \`--client cursor\` the root is \`~/.cursor/skills\`. Catalog Skills land under \`<skills root>/rost/<slug>\`, except under \`ROST_SKILL_INSTALL_ROOT\`, where they land under \`<override root>/<client>/<slug>\`. A whitespace-only value for any of these variables is rejected rather than resolving somewhere unintended; an empty value means unset (the shell's \`FOO= cmd\` idiom for turning an inherited variable off) and falls back to the default root above. Entitlement failures mean the tenant cannot access that {{brand}} catalog tier yet; stale local copies are fixed by rerunning \`sync\`; private catalog access is always served by {{brand}} APIs, not by giving the agent a private GitHub credential.
 
 {{brand}}-maintained catalog entries are seeded from first-party Skill packages with stable content hashes, application descriptors, and declared required or optional tool dependencies. Catalog seed validation is fail-closed: a package with parser warnings is not published. Enabling a catalog Skill copies the current immutable version into the company library; later catalog refreshes update the global catalog row but do not silently rewrite already-enabled tenant Skill versions.
 
@@ -61954,7 +61954,6 @@ function ensureTrailingSlash2(value) {
 
 // src/skills.ts
 import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import os2 from "node:os";
 import path5 from "node:path";
 
 // src/skill-install.ts
@@ -62473,7 +62472,7 @@ async function runInstallImplementation(context, args) {
     parsed = parseFlags2(args);
     client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
     tag = optionalValue2(parsed, "tag") ?? DEFAULT_RELEASE_TAG;
-    installRoot(client, context.env);
+    resolveSkillInstallRoot(client, context.env);
   } catch (error51) {
     if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
@@ -62640,7 +62639,7 @@ async function installRelease(context, plan, testOverrides = {}) {
   let legacyNotice;
   let viaOverride;
   try {
-    ({ root, legacyNotice, viaOverride } = installRoot(plan.client, context.env));
+    ({ root, legacyNotice, viaOverride } = resolveSkillInstallRoot(plan.client, context.env));
   } catch (error51) {
     if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
@@ -62771,7 +62770,7 @@ function writeMarker(dir, input) {
   writeFileSync(path4.join(dir, SKILL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
 }
-function listInstalledFiles(dir) {
+function listInstalledFiles(dir, markerFile) {
   const files = [];
   const walk = (current, prefix) => {
     for (const name of readdirSync(current)) {
@@ -62785,7 +62784,7 @@ function listInstalledFiles(dir) {
         walk(absolute, relative);
         continue;
       }
-      if (relative === SKILL_MARKER_FILE) {
+      if (relative === markerFile) {
         continue;
       }
       files.push({ path: relative, absolute, dev: stats.dev, ino: stats.ino });
@@ -62794,26 +62793,32 @@ function listInstalledFiles(dir) {
   walk(dir, "");
   return files;
 }
-function verifyInstalledTree(dir, manifest) {
+function verifyInstalledTree(dir, manifest, options = {}) {
+  const markerFile = options.markerFile ?? SKILL_MARKER_FILE;
   let present;
   try {
-    present = listInstalledFiles(dir);
+    present = listInstalledFiles(dir, markerFile);
   } catch (error51) {
     return { ok: false, reason: error51 instanceof Error ? error51.message : "install directory is unreadable" };
   }
-  const manifestPaths = new Set(manifest.files.map((file2) => file2.path));
-  const unexpected = present.find((file2) => !manifestPaths.has(file2.path));
+  const manifestByPath = new Map(manifest.files.map((file2) => [file2.path, file2]));
+  const unexpected = present.find((file2) => !manifestByPath.has(file2.path));
   if (unexpected !== void 0) {
-    return { ok: false, reason: "an installed file is not listed in the signed manifest" };
+    return { ok: false, reason: "an installed file is not listed in the package" };
   }
-  if (present.length !== manifestPaths.size) {
-    return { ok: false, reason: "the installed tree is missing files listed in the signed manifest" };
+  if (present.length !== manifestByPath.size) {
+    return { ok: false, reason: "the installed tree is missing files listed in the package" };
   }
   for (const file2 of present) {
     try {
-      if (statSync(file2.absolute).size > MAX_RESPONSE_BYTES) {
+      const size = statSync(file2.absolute).size;
+      if (size > MAX_RESPONSE_BYTES) {
         return { ok: false, reason: `an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}` };
       }
+      const declaredSize = manifestByPath.get(file2.path)?.sizeBytes;
+      if (declaredSize !== void 0 && size !== declaredSize) {
+        return { ok: false, reason: `an installed file's size does not match the declared size: ${file2.path}` };
+      }
     } catch (error51) {
       return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
     }
@@ -62911,7 +62916,7 @@ function resolveCodexSkillsRoot(env) {
   const codexHome = requireNonBlank("CODEX_HOME", env.CODEX_HOME);
   return path4.resolve(path4.join(codexHome ?? path4.join(resolveHome(env), ".codex"), "skills"));
 }
-function installRoot(client, env) {
+function resolveSkillInstallRoot(client, env) {
   const override = requireNonBlank("ROST_SKILL_INSTALL_ROOT", env.ROST_SKILL_INSTALL_ROOT);
   if (override !== null) {
     return { root: path4.resolve(override, client), legacyNotice: null, viaOverride: true };
@@ -62966,6 +62971,7 @@ function parseClient2(value) {
 }
 
 // src/skills.ts
+var CATALOG_SKILL_MARKER_FILE = ".rost-skill.json";
 var UsageError3 = class extends Error {
 };
 var CLIENTS2 = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
@@ -63095,7 +63101,7 @@ async function installOne(context, args, env) {
   });
   const options = seatId ? { targetSeatId: seatId } : {};
   const output = await executeInstallCommand(context, body, options);
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
+  const summary = applyLocalSkillChanges(context.io, output, client, env, { removeRevoked: false });
   const outputRecord = asRecord4(output);
   context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
 ` : `${formatLocalSummary(summary)}
@@ -63110,7 +63116,7 @@ async function syncAssigned(context, args, env) {
     seat_id: seatId,
     client
   }, { targetSeatId: seatId });
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
+  const summary = applyLocalSkillChanges(context.io, output, client, env, { removeRevoked: true });
   const outputRecord = asRecord4(output);
   context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
 ` : `${formatLocalSummary(summary)}
@@ -63146,15 +63152,19 @@ async function executeSkillCommand(context, commandId, body, options = {}) {
     throw error51;
   }
 }
-function applyLocalSkillChanges(output, client, env, options) {
-  const root = installRoot2(client, env);
-  const changes = writeInstalls(output, root);
+function applyLocalSkillChanges(io, output, client, env, options) {
+  const { root, legacyNotice } = installRoot(client, env);
+  if (legacyNotice !== null) {
+    io.stderr.write(`${legacyNotice}
+`);
+  }
+  const changes = writeInstalls(io, output, root);
   if (options.removeRevoked) {
     changes.push(...removeRevokedInstalls(output, root));
   }
   return changes;
 }
-function writeInstalls(output, root) {
+function writeInstalls(io, output, root) {
   const installs = asArray2(asRecord4(output).installs);
   return installs.map((entry) => {
     const install = asRecord4(entry);
@@ -63162,10 +63172,27 @@ function writeInstalls(output, root) {
     const metadata = asRecord4(install.metadata);
     const files = asArray2(install.files).map(asRecord4);
     const dir = path5.join(root, slug2);
-    const metadataPath = path5.join(dir, ".rost-skill.json");
+    const metadataPath = path5.join(dir, CATALOG_SKILL_MARKER_FILE);
     const expectedHash = String(metadata.content_sha256 ?? "");
     if (existingHash(metadataPath) === expectedHash) {
-      return { slug: slug2, dir, status: "unchanged", files: files.length };
+      const expected = files.map((file2) => {
+        const declaredHash = file2.content_sha256;
+        const sha256 = typeof declaredHash === "string" ? declaredHash : "";
+        const sizeBytes = typeof file2.size_bytes === "number" ? file2.size_bytes : void 0;
+        return {
+          path: safeRelativePath2(String(file2.path ?? "")),
+          sha256,
+          ...sizeBytes === void 0 ? {} : { sizeBytes }
+        };
+      });
+      const verified = verifyInstalledTree(dir, { files: expected }, { markerFile: CATALOG_SKILL_MARKER_FILE });
+      if (verified.ok) {
+        return { slug: slug2, dir, status: "unchanged", files: files.length };
+      }
+      io.stderr.write(
+        `NOTICE: the installed Skill ${slug2} does not match the server package (${verified.reason}); reinstalling.
+`
+      );
     }
     rmSync2(dir, { recursive: true, force: true });
     mkdirSync2(dir, { recursive: true });
@@ -63202,32 +63229,29 @@ function removeRevokedInstalls(output, root) {
   }
   return changes;
 }
-function installRoot2(client, env) {
-  const override = env.ROST_SKILL_INSTALL_ROOT;
-  if (override && override.length > 0) {
-    return path5.resolve(override, client);
-  }
-  if (client === "codex") {
-    try {
-      return path5.join(resolveCodexSkillsRoot(env), "rost");
-    } catch (error51) {
-      if (error51 instanceof UsageError2) {
-        throw new UsageError3(error51.message);
-      }
-      throw error51;
+function installRoot(client, env) {
+  let resolved;
+  try {
+    resolved = resolveSkillInstallRoot(client, env);
+  } catch (error51) {
+    if (error51 instanceof UsageError2) {
+      throw new UsageError3(error51.message);
     }
+    throw error51;
   }
-  if (client === "claude-code") {
-    return path5.join(env.CLAUDE_HOME ?? path5.join(os2.homedir(), ".claude"), "skills", "rost");
-  }
-  return path5.join(os2.homedir(), ".cursor", "skills", "rost");
+  const root = resolved.viaOverride ? resolved.root : path5.join(resolved.root, "rost");
+  return { root, legacyNotice: resolved.legacyNotice };
 }
 function safeRelativePath2(value) {
   const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
   if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
     throw new UsageError3("Server returned an invalid skill file path.");
   }
-  return normalized;
+  const collapsed = normalized.split("/").filter((segment) => segment !== ".").join("/");
+  if (!collapsed) {
+    throw new UsageError3("Server returned an invalid skill file path.");
+  }
+  return collapsed;
 }
 function safeLocalSlug(value) {
   if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
@@ -64661,7 +64685,7 @@ import { execFile as execFileCallback4 } from "node:child_process";
 import { createHash as createHash3, randomBytes } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
 import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile8, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
-import os3 from "node:os";
+import os2 from "node:os";
 import path8 from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import { promisify as promisify4 } from "node:util";
@@ -64764,7 +64788,7 @@ function resolveSourceClaudeConfigDir(base) {
     return explicit;
   }
   const home = base.HOME;
-  const homeDir = typeof home === "string" && home.length > 0 ? home : os3.homedir();
+  const homeDir = typeof home === "string" && home.length > 0 ? home : os2.homedir();
   return path8.join(homeDir, ".claude");
 }
 async function provisionIsolatedClaudeConfigDir(base, configDir, onRepair) {
@@ -64787,7 +64811,7 @@ function resolveSourceCodexHomeDir(base) {
     return explicit;
   }
   const home = base.HOME;
-  const homeDir = typeof home === "string" && home.length > 0 ? home : os3.homedir();
+  const homeDir = typeof home === "string" && home.length > 0 ? home : os2.homedir();
   return path8.join(homeDir, ".codex");
 }
 var CODEX_HOME_TMP_PREFIX = ".rost-tmp-";