@skaile/workspaces 4.8.0 → 4.9.0

package/dist/{chunk-HKOC273F.js → chunk-P2G6XSJ3.js}

@@ -2,8 +2,8 @@ import { SUPPORTED_DRIVER_TARGETS, globalBackendRoot } from './chunk-MENCWIHW.js
 import { decodeSkaileManifest, SKAILE_MANIFEST_FILENAME } from './chunk-P4VHQA4N.js';
 import { scanDirectory, parseFrontmatter, bundleDepRefs, fromMcpServerMdContent, withFsDeadline, tryWithFsDeadline, fsDeadlineMs } from './chunk-MKZOK4JU.js';
 import { isValidAssetName, slugifyAssetName, parseAssetRef, assetRefToStr } from './chunk-GEEW6SY2.js';
-import { existsSync, mkdirSync, renameSync, readdirSync, rmdirSync, readFileSync, writeFileSync, lstatSync, symlinkSync, rmSync } from 'fs';
-import { readdir, stat, cp, writeFile, rm } from 'fs/promises';
+import { existsSync, mkdirSync, renameSync, readdirSync, rmdirSync, readFileSync, writeFileSync, lstatSync, symlinkSync, rmSync, constants } from 'fs';
+import { readdir, stat, cp, rm, open, readFile } from 'fs/promises';
 import { homedir } from 'os';
 import { join, dirname, relative, resolve, parse as parse$1, basename, sep } from 'path';
 import { parse, stringify } from 'yaml';
@@ -1818,7 +1818,7 @@ async function stageMaterializedSkills(projectDir, skillsDir, opts) {
       try {
         await withFsDeadline(
           `write ${join(dest, STAGED_SKILL_MARKER)}`,
-          () => writeFile(join(dest, STAGED_SKILL_MARKER), "")
+          () => writeStagedSkillMarker(join(dest, STAGED_SKILL_MARKER), name)
         );
       } catch (err) {
         console.warn(
@@ -1834,6 +1834,80 @@ async function stageMaterializedSkills(projectDir, skillsDir, opts) {
   return staged;
 }
 var STAGED_SKILL_MARKER = ".skaile-staged";
+var MARKER_READ_LIMIT = 512;
+var FOREIGN_MARKER_CODES = /* @__PURE__ */ new Set(["ELOOP", "ENXIO", "EAGAIN", "EISDIR", "ENOTDIR", "EACCES"]);
+async function writeStagedSkillMarker(path, name) {
+  const flags = constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW;
+  for (let attempt = 0; ; attempt++) {
+    await rm(path, { force: true });
+    try {
+      const handle = await open(path, flags, 420);
+      try {
+        await handle.writeFile(name);
+      } finally {
+        await handle.close();
+      }
+      return;
+    } catch (err) {
+      if (err?.code !== "EEXIST" || attempt > 0) throw err;
+    }
+  }
+}
+async function stagedSkillMarkerState(dir, name) {
+  const path = join(dir, STAGED_SKILL_MARKER);
+  let content;
+  try {
+    content = await withFsDeadline(`read ${path}`, async () => {
+      const handle = await open(
+        path,
+        constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK
+      );
+      try {
+        const st = await handle.stat();
+        if (!st.isFile() || st.size > MARKER_READ_LIMIT) return null;
+        const buf = Buffer.alloc(MARKER_READ_LIMIT);
+        const { bytesRead } = await handle.read(buf, 0, MARKER_READ_LIMIT, 0);
+        return buf.subarray(0, bytesRead).toString("utf8");
+      } finally {
+        await handle.close();
+      }
+    });
+  } catch (err) {
+    const code = err?.code;
+    if (code === "ENOENT") return "absent";
+    if (code !== void 0 && FOREIGN_MARKER_CODES.has(code)) return "other";
+    throw err;
+  }
+  if (content === null) return "other";
+  const claimed = content.trim();
+  if (claimed === "") return "legacy";
+  return claimed === name ? "named" : "other";
+}
+async function isStagedSkillMarkerFor(dir, name) {
+  return await stagedSkillMarkerState(dir, name) === "named";
+}
+var SKILL_ALLOWLIST_FILE = ".skaile/assets/skill-allowlist.json";
+var SKILL_ALLOWLIST_VERSION = 1;
+async function readSkillAllowList(projectDir) {
+  const path = join(projectDir, SKILL_ALLOWLIST_FILE);
+  const raw = await tryWithFsDeadline(
+    `read ${path}`,
+    () => readFile(path, "utf8"),
+    null
+  );
+  if (raw === null) return null;
+  let doc;
+  try {
+    doc = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (typeof doc !== "object" || doc === null || Array.isArray(doc)) return null;
+  const { version, skills } = doc;
+  if (version !== SKILL_ALLOWLIST_VERSION || !Array.isArray(skills)) return null;
+  if (!skills.every((s) => typeof s === "string")) return null;
+  return new Set(skills.flatMap((s) => [s, unscopedTail(s)]));
+}
 var SKILL_NAME_RE = /^(?:@[A-Za-z0-9._-]+\/)?[A-Za-z0-9._-]+$/;
 function skillDirName(name) {
   const tail = SKILL_NAME_RE.test(name) ? unscopedTail(name) : "";
@@ -1862,8 +1936,8 @@ async function unstageSkill(projectDir, skillsDir, name, opts) {
   const dir = skillDirName(name);
   const staged = join(projectDir, skillsDir, dir);
   const asset = join(projectDir, ".skaile/assets/skill", dir);
-  const owned = await probePath(staged) ? opts?.knownStaged === true || await probePath(join(staged, STAGED_SKILL_MARKER)) : null;
-  const removedAsset = await probePath(asset);
+  const owned = await probePath(staged) ? opts?.knownStaged === true || ["named", "legacy"].includes(await stagedSkillMarkerState(staged, dir)) : null;
+  const removedAsset = opts?.keepAsset !== true && await probePath(asset);
   if (removedAsset) await removeTree(asset);
   if (owned === false) {
     return { name: dir, removedStaged: false, removedAsset, reason: "not_staged" };
@@ -2019,6 +2093,6 @@ function resolveAgentDir(projectDir) {
   return resolve(projectDir, definition);
 }
 
-export { COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_RECIPE_ATTR, SKAILE_YAML_DEFAULT, SKAILE_YAML_SUFFIX, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, STAGED_SKILL_MARKER, __resetCacheMigrationMemo, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, coerceVersion, decodeSkaileYaml, deriveSingleMaterializedMcpDeclaration, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, globalCacheRoot, globalSkaileDir, isWorkspaceConfigFilename, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, matchPin, mergeLegacyEntriesInto, mergeLegacyEntriesKeyed, mergeSkWorkspaceConfigs, migrateLegacyDir, normalizeConfig, pullRepo, pullRepoResult, readLinks, resolveAgentDir, resolveAll, resolveAsset, resolveGlobalBackends, resolveGlobalSkWorkspaceConfig, resolveSkWorkspaceConfig, resolveSourcePublisher, saveSkWorkspaceConfig, scanRepo, sourceCacheKey, sourceShortName, stageMaterializedSkills, storeManifestSlug, unlinkRepo, unstageSkill, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, workspaceNameFromFilename, writeLinks };
-//# sourceMappingURL=chunk-HKOC273F.js.map
-//# sourceMappingURL=chunk-HKOC273F.js.map
+export { COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_RECIPE_ATTR, SKAILE_YAML_DEFAULT, SKAILE_YAML_SUFFIX, SKILL_ALLOWLIST_FILE, SKILL_ALLOWLIST_VERSION, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, STAGED_SKILL_MARKER, __resetCacheMigrationMemo, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, coerceVersion, decodeSkaileYaml, deriveSingleMaterializedMcpDeclaration, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, globalCacheRoot, globalSkaileDir, isStagedSkillMarkerFor, isWorkspaceConfigFilename, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, matchPin, mergeLegacyEntriesInto, mergeLegacyEntriesKeyed, mergeSkWorkspaceConfigs, migrateLegacyDir, normalizeConfig, pullRepo, pullRepoResult, readLinks, readSkillAllowList, resolveAgentDir, resolveAll, resolveAsset, resolveGlobalBackends, resolveGlobalSkWorkspaceConfig, resolveSkWorkspaceConfig, resolveSourcePublisher, saveSkWorkspaceConfig, scanRepo, sourceCacheKey, sourceShortName, stageMaterializedSkills, stagedSkillMarkerState, storeManifestSlug, unlinkRepo, unstageSkill, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, workspaceNameFromFilename, writeLinks };
+//# sourceMappingURL=chunk-P2G6XSJ3.js.map
+//# sourceMappingURL=chunk-P2G6XSJ3.js.map