@tankpkg/sdk 0.16.3 → 0.16.5

package/dist/index.mjs

@@ -6394,18 +6394,31 @@ function writeLockfileWithResolvedGraph(lock, nodes, downloaded, onProgress) {
 	lock.skills = sortedSkills;
 	return lock;
 }
-function mkdirSafeNoSymlinks(targetDir) {
-	const resolved = path.resolve(targetDir);
-	const segments = resolved.split(path.sep).filter(Boolean);
-	let current = resolved.startsWith("/") ? "/" : "";
-	for (const seg of segments) {
-		current = path.join(current, seg);
-		if (fs.existsSync(current)) {
-			const stat = fs.lstatSync(current);
-			if (stat.isSymbolicLink()) throw new TankIntegrityError(`Symlink in install path: ${current}`);
-			if (!stat.isDirectory()) throw new TankIntegrityError(`Non-directory in install path: ${current}`);
-		} else fs.mkdirSync(current);
+/**
+* Plan the ordered list of ancestor directories to create for `targetDir`,
+* from just below the filesystem root down to the leaf (the root itself is
+* never returned — it always exists and must not be `mkdir`'d).
+*
+* The path module is injectable so Windows drive/UNC root handling can be
+* verified on any host via `path.win32` without a real Windows machine.
+*/
+function planMkdirSegments(targetDir, pathMod = path) {
+	const resolved = pathMod.resolve(targetDir);
+	const { root } = pathMod.parse(resolved);
+	const dirs = [];
+	let current = root;
+	for (const seg of resolved.slice(root.length).split(pathMod.sep).filter(Boolean)) {
+		current = pathMod.join(current, seg);
+		dirs.push(current);
 	}
+	return dirs;
+}
+function mkdirSafeNoSymlinks(targetDir) {
+	for (const current of planMkdirSegments(targetDir)) if (fs.existsSync(current)) {
+		const stat = fs.lstatSync(current);
+		if (stat.isSymbolicLink()) throw new TankIntegrityError(`Symlink in install path: ${current}`);
+		if (!stat.isDirectory()) throw new TankIntegrityError(`Non-directory in install path: ${current}`);
+	} else fs.mkdirSync(current);
 }
 function isDirNonEmpty(dir) {
 	try {
@@ -6665,4 +6678,4 @@ async function createSkillTools(client, skillNames) {
 	return tools;
 }
 //#endregion
-export { AGENT_PATHS, DEFAULT_CONFIG_DIR, DEFAULT_MAX_RETRIES, REGISTRY_URL as DEFAULT_REGISTRY_URL, DEFAULT_TIMEOUT_MS, LOCKFILE_FILENAME, MANIFEST_FILENAME, SDK_VERSION, SUPPORTED_AGENTS, TankAuthError, TankClient, TankConflictError, TankError, TankIntegrityError, TankNetworkError, TankNotFoundError, TankPermissionError, buildSkillKey, checkPermissionBudget, collectPermissionViolations, createSkillTool, createSkillTools, downloadAllParallel, extractSafely, getExtractDir, getGlobalExtractDir, getResolvedNodesInOrder, hasNativeAcceleration, isDomainAllowed, isPathAllowed, parseLockKey, parseVersionFromLockKey, readExtractedDependencies, resolveDependencyTree, verifyExtractedDependencies, writeLockfileWithResolvedGraph };
+export { AGENT_PATHS, DEFAULT_CONFIG_DIR, DEFAULT_MAX_RETRIES, REGISTRY_URL as DEFAULT_REGISTRY_URL, DEFAULT_TIMEOUT_MS, LOCKFILE_FILENAME, MANIFEST_FILENAME, SDK_VERSION, SUPPORTED_AGENTS, TankAuthError, TankClient, TankConflictError, TankError, TankIntegrityError, TankNetworkError, TankNotFoundError, TankPermissionError, buildSkillKey, checkPermissionBudget, collectPermissionViolations, createSkillTool, createSkillTools, downloadAllParallel, extractSafely, getExtractDir, getGlobalExtractDir, getResolvedNodesInOrder, hasNativeAcceleration, isDomainAllowed, isPathAllowed, parseLockKey, parseVersionFromLockKey, planMkdirSegments, readExtractedDependencies, resolveDependencyTree, verifyExtractedDependencies, writeLockfileWithResolvedGraph };

package/dist/install/pipeline.d.ts

@@ -1,3 +1,4 @@
+import path from 'node:path';
 import { type SkillsLock } from '@internals/schemas';
 import { type ResolvedNode } from './resolver.js';
 export declare function downloadAllParallel(nodes: ResolvedNode[], onProgress?: (msg: string) => void): Promise<Map<string, {
@@ -10,6 +11,15 @@ export declare function writeLockfileWithResolvedGraph(lock: SkillsLock, nodes:
     buffer: Buffer;
     integrity: string;
 }>, onProgress?: (msg: string) => void): SkillsLock;
+/**
+ * Plan the ordered list of ancestor directories to create for `targetDir`,
+ * from just below the filesystem root down to the leaf (the root itself is
+ * never returned — it always exists and must not be `mkdir`'d).
+ *
+ * The path module is injectable so Windows drive/UNC root handling can be
+ * verified on any host via `path.win32` without a real Windows machine.
+ */
+export declare function planMkdirSegments(targetDir: string, pathMod?: typeof path): string[];
 export declare function extractSafely(tarball: Buffer, destDir: string): Promise<void>;
 export declare function getExtractDir(projectDir: string, skillName: string): string;
 export declare function getGlobalExtractDir(homedir: string, skillName: string): string;

package/dist/install/pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/install/pipeline.ts"],"names":[],"mappings":"AAKA,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAsBjE,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAyE7D;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,IAAI,CAsBN;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2BpF;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9D,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,UAAU,CAiCZ;AA4CD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4EnF;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAO9E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAWhH"}
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/install/pipeline.ts"],"names":[],"mappings":"AAGA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAsBjE,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAyE7D;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,IAAI,CAsBN;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2BpF;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9D,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,UAAU,CAiCZ;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,IAAW,GAAG,MAAM,EAAE,CAY1F;AAuCD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4EnF;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAO9E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAWhH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tankpkg/sdk",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "Official TypeScript SDK for the Tank registry — search, download, install, and audit AI agent skills programmatically",
   "type": "module",
   "homepage": "https://github.com/tankpkg/tank",