@tryaura/aura-cli 0.2.0 → 0.2.1

package/dist/{shared-link-plan-DVgOyqP9.js → shared-link-plan-D8fxdFYv.js}

@@ -360,28 +360,44 @@ const MAX_TRUSTED_PATH_LENGTH = 1024;
 * Each entry binds an absolute preset path to a hash of the exact contents that were reviewed, so
 * a file edited after acceptance is untrusted again until someone looks at the new contents. Only
 * acceptances appear here: declining records nothing, and the next interactive setup asks again.
+*
+* `mainWorktreePath` names the same file in the repository's primary Git checkout and carries no
+* uniqueness of its own: every worktree of one repository shares it, so a repository accumulates
+* one entry per distinct set of contents its user accepted rather than one per working directory.
 */
 function optionalTrustedRepoPresets(value) {
 	if (value === void 0) return {};
 	if (!Array.isArray(value)) throw invalid("$.trustedRepoPresets", "must be an array");
 	if (value.length > 64) throw invalid("$.trustedRepoPresets", `must contain at most ${String(64)} entries`);
-	const paths = /* @__PURE__ */ new Set();
+	const records = /* @__PURE__ */ new Set();
 	return { trustedRepoPresets: Object.freeze(value.map((candidate, index) => {
 		const path = `$.trustedRepoPresets[${String(index)}]`;
 		const entry = requiredObject(candidate, path);
-		const presetPath = requiredString(entry, "path", path);
-		if (presetPath.length === 0 || presetPath.length > MAX_TRUSTED_PATH_LENGTH) throw invalid(`${path}.path`, `must be a non-empty path of at most ${String(MAX_TRUSTED_PATH_LENGTH)} characters`);
-		if (paths.has(presetPath)) throw invalid(`${path}.path`, "must not duplicate another trusted preset path");
-		paths.add(presetPath);
+		const presetPath = trustedPath(requiredString(entry, "path", path), `${path}.path`);
 		const hash = requiredString(entry, "hash", path);
 		if (!SHA256_PATTERN.test(hash)) throw invalid(`${path}.hash`, "must be a lowercase SHA-256 hash");
+		const record = `${presetPath}\0${hash}`;
+		if (records.has(record)) throw invalid(`${path}.hash`, "must not duplicate another trusted preset path and hash");
+		records.add(record);
+		const mainWorktree = entry["mainWorktreePath"];
+		if (mainWorktree === void 0) return Object.freeze({
+			...entry,
+			hash,
+			path: presetPath
+		});
+		if (typeof mainWorktree !== "string") throw invalid(`${path}.mainWorktreePath`, "must be a string");
 		return Object.freeze({
 			...entry,
 			hash,
+			mainWorktreePath: trustedPath(mainWorktree, `${path}.mainWorktreePath`),
 			path: presetPath
 		});
 	})) };
 }
+function trustedPath(value, jsonPath) {
+	if (value.length === 0 || value.length > MAX_TRUSTED_PATH_LENGTH) throw invalid(jsonPath, `must be a non-empty path of at most ${String(MAX_TRUSTED_PATH_LENGTH)} characters`);
+	return value;
+}
 //#endregion
 //#region ../core/src/manifest/schema.ts
 const APP_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/u;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryaura/aura-cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "The composable Aura CLI runtime and official plugin distribution.",
   "keywords": [
     "agent",
@@ -50,15 +50,15 @@
     "toml-eslint-parser": "^1.0.3",
     "typanion": "3.14.0",
     "undici": "7.29.0",
-    "@tryaura/aura-sdk": "0.2.0"
+    "@tryaura/aura-sdk": "0.2.1"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
     "ajv": "8.20.0",
     "vitest": "4.1.10",
+    "@tryaura/adapter-claude-code": "0.0.0",
     "@tryaura/adapter-cursor": "0.0.0",
     "@tryaura/adapter-codex": "0.0.0",
-    "@tryaura/adapter-claude-code": "0.0.0",
     "@tryaura/checks-core": "0.0.0",
     "@tryaura/core": "0.0.0",
     "@tryaura/content-official": "0.0.0"