@tryaura/aura-cli 0.1.1 → 0.2.1

package/dist/{shared-link-plan-BigeLxDX.js → shared-link-plan-D8fxdFYv.js}

@@ -5,6 +5,26 @@ import { createHash } from "node:crypto";
 import { createTwoFilesPatch } from "diff";
 import { gt, valid } from "semver";
 import { isDeepStrictEqual } from "node:util";
+//#region ../core/src/display-path.ts
+/**
+* Names a path the way a user can address it from where they ran the command.
+*
+* Project-relative first, then `~/`, then the path unchanged. Every renderer goes through this so
+* one report cannot show the same file two ways — a check that bakes a path into its message and
+* the CLI that prints that finding's locations must agree, or the two lines read as two files.
+*/
+function displayPath(path, roots) {
+	const project = pathInside(roots.projectRoot ?? roots.cwd, path);
+	if (project !== void 0) return project;
+	const home = pathInside(roots.homeDir, path);
+	return home === void 0 ? path : `~/${home}`;
+}
+function pathInside(root, path) {
+	const difference = relative(root, path);
+	if (difference.length === 0 || difference === ".." || difference.startsWith(`..${sep}`) || isAbsolute(difference)) return;
+	return difference.split(sep).join("/");
+}
+//#endregion
 //#region ../core/src/pluralize.ts
 /** Selects the noun or verb form that agrees with a numeric count. */
 function pluralize(count, singular, plural = `${singular}s`) {
@@ -52,6 +72,7 @@ var src_default = definePlugin({
 		id: "directory:agenticskills",
 		kind: "directory",
 		name: "agenticskills.io",
+		protocol: "agenticskills",
 		url: "https://agenticskills.io"
 	}],
 	snippets: [
@@ -162,6 +183,7 @@ function isRecord(value) {
 }
 //#endregion
 //#region ../core/src/manifest/schema-values.ts
+const SHA256_PATTERN = /^[0-9a-f]{64}$/u;
 var AuraManifestValidationError = class extends Error {
 	jsonPath;
 	constructor(jsonPath, message) {
@@ -331,9 +353,53 @@ function targetApps(value, path, name, scope, claimed) {
 	}
 	return entries;
 }
+const MAX_TRUSTED_PATH_LENGTH = 1024;
+/**
+* Reads `trustedRepoPresets`, the repository presets the user accepted during setup.
+*
+* Each entry binds an absolute preset path to a hash of the exact contents that were reviewed, so
+* a file edited after acceptance is untrusted again until someone looks at the new contents. Only
+* acceptances appear here: declining records nothing, and the next interactive setup asks again.
+*
+* `mainWorktreePath` names the same file in the repository's primary Git checkout and carries no
+* uniqueness of its own: every worktree of one repository shares it, so a repository accumulates
+* one entry per distinct set of contents its user accepted rather than one per working directory.
+*/
+function optionalTrustedRepoPresets(value) {
+	if (value === void 0) return {};
+	if (!Array.isArray(value)) throw invalid("$.trustedRepoPresets", "must be an array");
+	if (value.length > 64) throw invalid("$.trustedRepoPresets", `must contain at most ${String(64)} entries`);
+	const records = /* @__PURE__ */ new Set();
+	return { trustedRepoPresets: Object.freeze(value.map((candidate, index) => {
+		const path = `$.trustedRepoPresets[${String(index)}]`;
+		const entry = requiredObject(candidate, path);
+		const presetPath = trustedPath(requiredString(entry, "path", path), `${path}.path`);
+		const hash = requiredString(entry, "hash", path);
+		if (!SHA256_PATTERN.test(hash)) throw invalid(`${path}.hash`, "must be a lowercase SHA-256 hash");
+		const record = `${presetPath}\0${hash}`;
+		if (records.has(record)) throw invalid(`${path}.hash`, "must not duplicate another trusted preset path and hash");
+		records.add(record);
+		const mainWorktree = entry["mainWorktreePath"];
+		if (mainWorktree === void 0) return Object.freeze({
+			...entry,
+			hash,
+			path: presetPath
+		});
+		if (typeof mainWorktree !== "string") throw invalid(`${path}.mainWorktreePath`, "must be a string");
+		return Object.freeze({
+			...entry,
+			hash,
+			mainWorktreePath: trustedPath(mainWorktree, `${path}.mainWorktreePath`),
+			path: presetPath
+		});
+	})) };
+}
+function trustedPath(value, jsonPath) {
+	if (value.length === 0 || value.length > MAX_TRUSTED_PATH_LENGTH) throw invalid(jsonPath, `must be a non-empty path of at most ${String(MAX_TRUSTED_PATH_LENGTH)} characters`);
+	return value;
+}
 //#endregion
 //#region ../core/src/manifest/schema.ts
-const SHA256_PATTERN = /^[0-9a-f]{64}$/u;
 const APP_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/u;
 const MCP_CATALOG_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*\/[a-zA-Z0-9][a-zA-Z0-9._-]*$/u;
 const SKILL_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
@@ -367,7 +433,8 @@ function validateAuraManifest(value) {
 		...optionalPreset(source["preset"]),
 		schemaVersion: 1,
 		skills: skills(source["skills"]),
-		snippets: snippets(source["snippets"])
+		snippets: snippets(source["snippets"]),
+		...optionalTrustedRepoPresets(source["trustedRepoPresets"])
 	});
 }
 /**
@@ -2130,4 +2197,4 @@ function entryStatus(app, path) {
 	return app.sourceFiles.find((file) => resolve(file.spec.path) === resolve(path));
 }
 //#endregion
-export { renderRemoveDiff as A, errorMessage as B, canonicalizeManagedSnippet as C, renderArchiveDiff as D, renderRedactedWriteDiff as E, assertAuraManifestWritable as F, src_default as G, resolveAuraManifestPath as H, createAuraManifestWriteOperation as I, pluralize as K, createEmptyAuraManifest as L, FILE_MODES as M, MAX_MUTABLE_FILE_BYTES as N, renderConflict as O, MAX_RETAINED_PLAN_BYTES as P, parseAuraManifest as R, readManagedBlock as S, hashManagedSnippet as T, AuraManifestError as U, isRecord as V, SHARED_INSTRUCTIONS_TEMPLATE as W, planSharedSkillTreeUpdate as _, rememberMcpSecretPlanner as a, reconcileManagedSnippet as b, planManifestMcpConvergence as c, createAppMcpConvergence as d, isAuraOwnedSkillTarget as f, managedContentRevisionStatus as g, skillDeploymentStatus as h, planMcpSecretRemediation as i, renderSymlinkDiff as j, renderMoveDiff as k, planMcpServerRemoval as l, sharedSkillsRoot as m, canPlanMcpSecretRemediation as n, mcpConvergenceBlockers as o, planSkillDeployment as p, createAppMcpSecretPlanner as r, planDesiredMcpConvergence as s, planSharedInstructionLink as t, rememberMcpConvergence as u, reconcileParsedManagedBlock as v, hashCanonicalManagedSnippet as w, managedSnippetContentProblems as x, diffManagedSnippet as y, errorCode as z };
+export { renderRemoveDiff as A, errorMessage as B, canonicalizeManagedSnippet as C, renderArchiveDiff as D, renderRedactedWriteDiff as E, assertAuraManifestWritable as F, src_default as G, resolveAuraManifestPath as H, createAuraManifestWriteOperation as I, pluralize as K, createEmptyAuraManifest as L, FILE_MODES as M, MAX_MUTABLE_FILE_BYTES as N, renderConflict as O, MAX_RETAINED_PLAN_BYTES as P, parseAuraManifest as R, readManagedBlock as S, hashManagedSnippet as T, AuraManifestError as U, isRecord as V, SHARED_INSTRUCTIONS_TEMPLATE as W, planSharedSkillTreeUpdate as _, rememberMcpSecretPlanner as a, reconcileManagedSnippet as b, planManifestMcpConvergence as c, createAppMcpConvergence as d, isAuraOwnedSkillTarget as f, managedContentRevisionStatus as g, skillDeploymentStatus as h, planMcpSecretRemediation as i, renderSymlinkDiff as j, renderMoveDiff as k, planMcpServerRemoval as l, sharedSkillsRoot as m, canPlanMcpSecretRemediation as n, mcpConvergenceBlockers as o, planSkillDeployment as p, displayPath as q, createAppMcpSecretPlanner as r, planDesiredMcpConvergence as s, planSharedInstructionLink as t, rememberMcpConvergence as u, reconcileParsedManagedBlock as v, hashCanonicalManagedSnippet as w, managedSnippetContentProblems as x, diffManagedSnippet as y, errorCode as z };

package/dist/{types-DmBu6g0d.d.ts → types--E7zqKfw.d.ts}

@@ -57,8 +57,10 @@ interface CliRuntime {
   /**
    * Color depth reported to the command framework.
    *
-   * Defaults to what the terminal supports, honouring `NO_COLOR` and `FORCE_COLOR`. Always no color
-   * when `stdout` is injected, since the destination is then not a terminal Aura can ask.
+   * Defaults to what the process's own stdout supports, honouring the CLI and environment color
+   * policy. Always no color when `stdout` is injected, since neither that stream nor the
+   * surrounding process's `FORCE_COLOR` says anything about the destination — set this to ask for
+   * color there. An explicit value stays authoritative unless the command line says `--no-color`.
    */
   readonly colorDepth?: number | undefined;
   /** Directory the command was invoked from. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryaura/aura-cli",
-  "version": "0.1.1",
+  "version": "0.2.1",
   "description": "The composable Aura CLI runtime and official plugin distribution.",
   "keywords": [
     "agent",
@@ -50,18 +50,18 @@
     "toml-eslint-parser": "^1.0.3",
     "typanion": "3.14.0",
     "undici": "7.29.0",
-    "@tryaura/aura-sdk": "0.1.1"
+    "@tryaura/aura-sdk": "0.2.1"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
     "ajv": "8.20.0",
     "vitest": "4.1.10",
     "@tryaura/adapter-claude-code": "0.0.0",
+    "@tryaura/adapter-cursor": "0.0.0",
     "@tryaura/adapter-codex": "0.0.0",
     "@tryaura/checks-core": "0.0.0",
-    "@tryaura/content-official": "0.0.0",
-    "@tryaura/adapter-cursor": "0.0.0",
-    "@tryaura/core": "0.0.0"
+    "@tryaura/core": "0.0.0",
+    "@tryaura/content-official": "0.0.0"
   },
   "engines": {
     "node": ">=24"

package/schema/check-output-v1.schema.json

@@ -21,7 +21,7 @@
       "required": ["label", "layer"],
       "properties": {
         "label": { "type": "string" },
-        "layer": { "enum": ["cli", "default", "distro", "manifest", "preset"] }
+        "layer": { "enum": ["cli", "default", "distro", "manifest", "preset", "repo"] }
       }
     },
     "summary": {
@@ -61,6 +61,21 @@
         "phase": { "enum": ["check", "detect", "files", "fix", "parse", "read", "support"] }
       }
     },
+    "configuration": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "repositoryPreset": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["path", "status"],
+          "properties": {
+            "path": { "type": "string" },
+            "status": { "enum": ["applied", "held"] }
+          }
+        }
+      }
+    },
     "support": {
       "type": "object",
       "additionalProperties": false,
@@ -186,6 +201,7 @@
       ],
       "properties": {
         "apps": { "type": "array", "items": { "$ref": "#/$defs/app" } },
+        "configuration": { "$ref": "#/$defs/configuration" },
         "diagnostics": { "type": "array", "items": { "$ref": "#/$defs/diagnostic" } },
         "findings": { "type": "array", "items": { "$ref": "#/$defs/finding" } },
         "fixes": { "type": "array", "items": { "$ref": "#/$defs/fix" } },
@@ -225,6 +241,7 @@
         "title"
       ],
       "properties": {
+        "configuration": { "$ref": "#/$defs/configuration" },
         "enabled": { "type": "boolean" },
         "explain": { "type": "string" },
         "fixability": { "enum": ["auto", "guided", "manual"] },