@starlein/paperclip-plugin-company-wizard 0.6.3 → 0.6.4

package/dist/worker.js

@@ -29352,7 +29352,7 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 var manifest = {
   id: "starlein.paperclip-plugin-company-wizard",
   apiVersion: 1,
-  version: "0.6.3",
+  version: "0.6.4",
   displayName: "Company Wizard",
   description: "AI-powered wizard to bootstrap agent companies from composable templates",
   author: "Sascha Pietrowski <sp@speednetwork.de>",
@@ -29388,7 +29388,7 @@ var manifest = {
       },
       templatesPath: {
         type: "string",
-        description: "Optional existing template root containing roles/, modules/, and presets/. Overrides the GitHub URL. Leave empty to use bundled release templates or a custom GitHub source. Refresh never populates or overwrites this directory."
+        description: "Optional existing template root containing roles/, modules/, and presets/. Overrides the GitHub URL. Leave empty to use bundled release templates or a custom GitHub source. Refresh never overwrites this directory. For an existing empty directory, the wizard offers an explicit sync from the configured template URL."
       },
       templatesRepoUrl: {
         type: "string",
@@ -29562,6 +29562,16 @@ function humanizeSkillName(baseName, variant) {
 function hashSkillContent(markdown) {
   return createHash("sha256").update(String(markdown), "utf-8").digest("hex").slice(0, 16);
 }
+function ensureSkillFrontmatter(slug, description, markdown) {
+  const content = String(markdown);
+  if (/^---\r?\n[\s\S]*?\r?\n---(?:\r?\n|$)/.test(content)) return content;
+  return `---
+name: ${slug}
+description: ${JSON.stringify(String(description || slug))}
+---
+
+${content}`;
+}
 function buildCompanySkillSet(records) {
   const byBaseSlug = /* @__PURE__ */ new Map();
   for (const rec of records) {
@@ -29585,13 +29595,14 @@ function buildCompanySkillSet(records) {
     const groups = [...byHash.values()].map((g) => ({ ...g, repRole: [...g.roles].sort()[0] })).sort((a, b) => a.repRole.localeCompare(b.repRole));
     groups.forEach((group, idx) => {
       const slug = idx === 0 ? baseSlug : `${baseSlug}-${group.repRole}`;
+      const markdown = ensureSkillFrontmatter(slug, group.rec.description, group.rec.markdown);
       companySkills.push({
         slug,
         name: group.rec.name,
         description: group.rec.description,
         categories: group.rec.categories,
-        markdown: group.rec.markdown,
-        contentHash: group.hash
+        markdown,
+        contentHash: hashSkillContent(markdown)
       });
       for (const roleName of group.roles) addRoleSlug(roleName, slug);
     });
@@ -31627,19 +31638,25 @@ function copyDirSync(src, dest) {
     const s = path2.join(src, entry.name);
     const d = path2.join(dest, entry.name);
     if (entry.isDirectory()) copyDirSync(s, d);
-    else fs2.copyFileSync(s, d);
+    else if (entry.isFile()) fs2.copyFileSync(s, d);
+    else throw new Error("Template downloads must contain only regular files and directories.");
   }
 }
 function downloadTemplatesFromGithub(destDir, githubUrl) {
-  const match = githubUrl.match(/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)\/(.+)/);
+  const match = githubUrl.match(
+    /^https:\/\/github\.com\/([\w-]+)\/([\w.-]+)\/tree\/([\w.-]+)\/([\w./-]+)$/
+  );
   if (!match) {
     throw new Error(
-      `Unsupported templates URL: ${githubUrl}. Expected https://github.com/{owner}/{repo}/tree/{branch}/{path}`
+      "Unsupported templates URL. Expected https://github.com/{owner}/{repo}/tree/{branch}/{path} (no credentials or query string)."
     );
   }
   const [, owner, repo, branch, subpath] = match;
+  if (subpath.split("/").some((part) => !part || part === "." || part === ".." || part.startsWith("-"))) {
+    throw new Error("Unsupported templates URL path.");
+  }
   const cloneUrl = `https://github.com/${owner}/${repo}.git`;
-  const tmpDir = path2.join(os.tmpdir(), `plugin-templates-dl-${Date.now()}`);
+  const tmpDir = fs2.mkdtempSync(path2.join(os.tmpdir(), "plugin-templates-dl-"));
   try {
     execFileSync(
       "git",
@@ -31658,6 +31675,9 @@ function downloadTemplatesFromGithub(destDir, githubUrl) {
     );
     execFileSync("git", ["sparse-checkout", "set", subpath], { cwd: tmpDir, stdio: "pipe" });
     const srcDir = path2.join(tmpDir, subpath);
+    if (fs2.existsSync(srcDir) && (!fs2.lstatSync(srcDir).isDirectory() || !fs2.realpathSync(srcDir).startsWith(`${tmpDir}${path2.sep}`))) {
+      throw new Error("Template source must be a directory inside the downloaded repository.");
+    }
     if (!fs2.existsSync(srcDir)) throw new Error(`Path '${subpath}' not found in ${cloneUrl}`);
     copyDirSync(srcDir, destDir);
   } finally {
@@ -31724,6 +31744,48 @@ function refreshTemplatesCache(cfg, log) {
   log?.(`\u2713 Refreshed templates cache from ${repoUrl} \u2192 ${targetDir}`);
   return targetDir;
 }
+function emptyTemplateSyncOffer(cfg) {
+  try {
+    if (!cfg.templatesPath) return void 0;
+    const stat = fs2.lstatSync(cfg.templatesPath);
+    if (!stat.isDirectory() || fs2.readdirSync(cfg.templatesPath).length) return void 0;
+    const targetDir = fs2.realpathSync(cfg.templatesPath);
+    const token = createHash2("sha256").update(
+      JSON.stringify([
+        cfg.templatesPath,
+        targetDir,
+        cfg.templatesRepoUrl || "",
+        stat.dev,
+        stat.ino
+      ])
+    ).digest("hex");
+    return { targetDir, token, canSync: !!cfg.templatesRepoUrl?.trim() };
+  } catch {
+    return void 0;
+  }
+}
+function syncEmptyTemplates(cfg, confirmation) {
+  const offer = emptyTemplateSyncOffer(cfg);
+  if (!offer?.canSync || confirmation !== offer.token) {
+    throw new Error(
+      "Sync requires confirmation for the current empty templatesPath and a configured templatesRepoUrl. Reload the page and check settings."
+    );
+  }
+  const stagingDir = fs2.mkdtempSync(`${offer.targetDir}-sync-`);
+  try {
+    downloadTemplatesFromGithub(stagingDir, cfg.templatesRepoUrl);
+    validateTemplatesDir(stagingDir, "Downloaded templates");
+    const { loadErrors } = loadTemplates(stagingDir);
+    if (loadErrors.length) throw new Error("Downloaded template metadata is invalid.");
+    if (emptyTemplateSyncOffer(cfg)?.token !== offer.token) {
+      throw new Error("Template directory changed during sync. No existing files were replaced.");
+    }
+    fs2.renameSync(stagingDir, offer.targetDir);
+    return offer.targetDir;
+  } finally {
+    fs2.rmSync(stagingDir, { recursive: true, force: true });
+  }
+}
 var ANTHROPIC_AI_MODEL = "claude-opus-5";
 var OPENAI_AI_MODEL = "gpt-6-astra";
 function isLikelyAnthropicApiKey(value) {
@@ -32102,13 +32164,14 @@ async function provisionCompanySkills(client, companyId, companySkills, log) {
     }
   }
   for (const skill of companySkills) {
+    const markdown = ensureSkillFrontmatter(skill.slug, skill.description, skill.markdown);
     const found = bySlug.get(skill.slug);
     if (!found) {
       const created = await client.createCompanySkill(companyId, {
-        name: skill.name,
+        name: skill.slug,
         slug: skill.slug,
         description: skill.description,
-        markdown: skill.markdown,
+        markdown,
         categories: skill.categories
       });
       slugToKey.set(skill.slug, created?.key || created?.slug || skill.slug);
@@ -32117,16 +32180,16 @@ async function provisionCompanySkills(client, companyId, companySkills, log) {
     }
     slugToKey.set(skill.slug, found.key || skill.slug);
     let updated = false;
-    if ((found.markdown ?? "") !== skill.markdown) {
+    if ((found.markdown ?? "") !== markdown) {
       await client.updateCompanySkillFile(companyId, found.id, {
         path: "SKILL.md",
-        content: skill.markdown
+        content: markdown
       });
       updated = true;
     }
-    if ((found.name ?? "") !== skill.name) {
+    if ((found.name ?? "") !== skill.slug) {
       const renamed = await client.renameCompanySkill(companyId, found.id, {
-        name: skill.name,
+        name: skill.slug,
         slug: found.slug
       });
       if (renamed == null) {
@@ -32389,6 +32452,11 @@ var plugin = definePlugin({
     ctx.data.register("templates", async () => {
       try {
         const cfg = await ctx.config.get() ?? {};
+        const syncOffer = emptyTemplateSyncOffer(cfg);
+        if (syncOffer) {
+          const error61 = `Configured templatesPath "${syncOffer.targetDir}" is empty. ` + (syncOffer.canSync ? "Confirm sync from the configured template URL to populate it." : "Set templatesRepoUrl in plugin settings to enable sync, or clear templatesPath to use bundled templates.");
+          return { presets: [], modules: [], roles: [], loadErrors: [error61], error: error61, syncOffer };
+        }
         const templates = loadTemplates(await ensureTemplatesDir(cfg));
         for (const warning of templates.loadErrors) {
           ctx.logger.info(`\u26A0 Template load warning: ${warning}`);
@@ -32409,6 +32477,19 @@ var plugin = definePlugin({
         return { ok: false, error: err instanceof Error ? err.message : String(err) };
       }
     });
+    ctx.actions.register("sync-empty-templates", async (params) => {
+      try {
+        const cfg = await ctx.config.get() ?? {};
+        const targetDir = syncEmptyTemplates(cfg, params.confirmation);
+        ctx.logger.info("Synced empty configured template directory.");
+        return { ok: true, targetDir };
+      } catch {
+        return {
+          ok: false,
+          error: "Template sync failed. Check the configured GitHub tree URL, permissions, and that the directory is still empty. Existing files were not overwritten. Reload to retry."
+        };
+      }
+    });
     ctx.actions.register("check-update", async () => {
       try {
         const latestVersion = await fetchLatestPluginVersion();