agentsmesh 0.24.0 → 0.26.0

package/dist/engine.js

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { stringify, parse } from 'yaml';
 import { basename, join, dirname, relative, win32, posix, sep, resolve, extname } from 'path';
-import { readFile, rm, mkdir, readdir, stat, lstat, unlink, writeFile, rename, chmod, realpath, access, mkdtemp, cp } from 'fs/promises';
+import { readFile, rm, mkdir, readdir, stat, lstat, unlink, writeFile, rename, chmod, access, realpath, mkdtemp, cp } from 'fs/promises';
 import { setTimeout } from 'timers/promises';
 import { existsSync, readFileSync, constants, readdirSync, realpathSync, statSync } from 'fs';
 import { parse as parse$1 } from 'smol-toml';
@@ -1379,7 +1379,7 @@ async function importEmbeddedSkills(projectRoot, skillsDir, fromTool, results, n
       toPath: `${AB_SKILLS}/${entry.name}/SKILL.md`,
       feature: "skills"
     });
-    const sourceFiles = await readDirRecursive(sourceSkillDir);
+    const sourceFiles = await readDirRecursiveNoSymlinks(sourceSkillDir);
     for (const sourcePath of sourceFiles) {
       if (sourcePath === sourceSkillFile) continue;
       const relativePath = relative(sourceSkillDir, sourcePath).replace(/\\/g, "/");
@@ -2327,7 +2327,7 @@ function matchesExtension(path, extensions) {
   return extensions.some((extension) => path.endsWith(extension));
 }
 async function importFileDirectory(opts) {
-  const files = await readDirRecursive(opts.srcDir);
+  const files = await readDirRecursiveNoSymlinks(opts.srcDir);
   const matchedFiles = files.filter((path) => matchesExtension(path, opts.extensions));
   const results = [];
   for (const srcPath of matchedFiles) {
@@ -6746,7 +6746,7 @@ var init_settings_helpers2 = __esm({
 async function importClaudeSkills(projectRoot, results, normalize) {
   const skillsBaseDir = join(projectRoot, CLAUDE_SKILLS_DIR);
   const destBase = join(projectRoot, CLAUDE_CANONICAL_SKILLS_DIR);
-  const allFiles = await readDirRecursive(skillsBaseDir);
+  const allFiles = await readDirRecursiveNoSymlinks(skillsBaseDir);
   const skillMdFiles = allFiles.filter((f) => f.endsWith("SKILL.md"));
   for (const skillMdPath of skillMdFiles) {
     const skillDir = dirname(skillMdPath);
@@ -6765,7 +6765,7 @@ async function importClaudeSkills(projectRoot, results, normalize) {
 `);
       continue;
     }
-    const skillFiles = await readDirRecursive(skillDir);
+    const skillFiles = await readDirRecursiveNoSymlinks(skillDir);
     for (const filePath of skillFiles) {
       const fileContent = await readFileSafe(filePath);
       if (fileContent === null) continue;
@@ -7390,7 +7390,7 @@ async function importClineRules(projectRoot, results, normalize) {
         feature: "rules"
       });
     } else {
-      const ruleFiles = await readDirRecursive(clineRulesPath);
+      const ruleFiles = await readDirRecursiveNoSymlinks(clineRulesPath);
       const mdFiles = ruleFiles.filter((f) => f.endsWith(".md") && !f.includes("/workflows/")).sort();
       const first = mdFiles[0];
       if (first) {
@@ -7454,27 +7454,40 @@ var init_importer_rules = __esm({
     init_constants8();
   }
 });
+function toStringRecord2(raw) {
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return {};
+  return Object.fromEntries(
+    Object.entries(raw).filter((entry) => typeof entry[1] === "string")
+  );
+}
 function mapClineServerToCanonical(raw) {
   if (!raw || typeof raw !== "object") return null;
   const obj = raw;
-  const command = typeof obj.command === "string" ? obj.command : "";
-  if (!command) return null;
-  const type = typeof obj.type === "string" ? obj.type : typeof obj.transportType === "string" ? obj.transportType : "stdio";
-  const args = Array.isArray(obj.args) ? obj.args.filter((x) => typeof x === "string") : [];
-  const envRaw = obj.env;
-  const env = envRaw !== null && typeof envRaw === "object" && !Array.isArray(envRaw) ? Object.fromEntries(
-    Object.entries(envRaw).filter(
-      (entry) => typeof entry[1] === "string"
-    )
-  ) : {};
+  const transport = typeof obj.type === "string" ? obj.type : void 0;
+  const transportType = typeof obj.transportType === "string" ? obj.transportType : void 0;
+  const env = toStringRecord2(obj.env);
   const description = typeof obj.description === "string" ? obj.description : void 0;
-  return {
-    ...description !== void 0 && { description },
-    type,
-    command,
-    args,
-    env
-  };
+  const command = typeof obj.command === "string" ? obj.command : "";
+  if (command) {
+    const args = Array.isArray(obj.args) ? obj.args.filter((x) => typeof x === "string") : [];
+    return {
+      ...description !== void 0 && { description },
+      type: transport ?? transportType ?? "stdio",
+      command,
+      args,
+      env
+    };
+  }
+  if (typeof obj.url === "string") {
+    return {
+      ...description !== void 0 && { description },
+      type: transport ?? transportType ?? "http",
+      url: obj.url,
+      headers: toStringRecord2(obj.headers),
+      env
+    };
+  }
+  return null;
 }
 async function importClineMcp(projectRoot, results) {
   const candidatePaths = [CLINE_MCP_SETTINGS, CLINE_MCP_SETTINGS_LEGACY].map(
@@ -7548,7 +7561,7 @@ var init_reserved = __esm({
   }
 });
 async function readNativeSkill(skillDir) {
-  const allFiles = await readDirRecursive(skillDir).catch(() => []);
+  const allFiles = await readDirRecursiveNoSymlinks(skillDir).catch(() => []);
   const entries = [];
   for (const absPath of allFiles) {
     const relPath = relative(skillDir, absPath).replace(/\\/g, "/");
@@ -7614,7 +7627,7 @@ async function importFlatSkill(skillName, srcPath, content, options) {
 async function findDirectorySkills(skillsDir) {
   const skills = /* @__PURE__ */ new Map();
   try {
-    const allFiles = await readDirRecursive(skillsDir);
+    const allFiles = await readDirRecursiveNoSymlinks(skillsDir);
     const skillMdFiles = allFiles.filter((f) => basename(f) === "SKILL.md");
     for (const skillMdPath of skillMdFiles) {
       const skillDir = dirname(skillMdPath);
@@ -7745,7 +7758,7 @@ function extractMeta(content, key) {
   return match?.[1]?.trim() ?? null;
 }
 async function loadHooksFromDir(dir, hooks) {
-  const files = await readDirRecursive(dir).catch(() => []);
+  const files = await readDirRecursiveNoSymlinks(dir).catch(() => []);
   const shFiles = files.filter((f) => basename(f).endsWith(".sh") && dirname(f) === dir);
   for (const srcPath of shFiles) {
     const content = await readFileSafe(srcPath);
@@ -8480,7 +8493,7 @@ async function importCodexAgentsFromToml(projectRoot, results, normalize) {
   const agentsPath = join(projectRoot, CODEX_AGENTS_DIR);
   const agentsDestDir = join(projectRoot, CODEX_CANONICAL_AGENTS_DIR);
   try {
-    const agentFiles = await readDirRecursive(agentsPath);
+    const agentFiles = await readDirRecursiveNoSymlinks(agentsPath);
     const tomlFiles = agentFiles.filter((f) => f.endsWith(".toml"));
     for (const srcPath of tomlFiles) {
       const content = await readFileSafe(srcPath);
@@ -8576,7 +8589,7 @@ async function importCodexNonRootRuleFiles(projectRoot, destDir, normalize) {
   const results = [];
   const codexRulesPath = join(projectRoot, CODEX_RULES_DIR);
   try {
-    const ruleFiles = await readDirRecursive(codexRulesPath);
+    const ruleFiles = await readDirRecursiveNoSymlinks(codexRulesPath);
     const mdFiles = ruleFiles.filter((f) => f.endsWith(".md"));
     for (const srcPath of mdFiles) {
       const content = await readFileSafe(srcPath);
@@ -8733,7 +8746,7 @@ async function importCodexRules(projectRoot, results, normalize, normalizeWindsu
 }
 async function importInstructionMirrors(projectRoot, destDir, results, normalize) {
   try {
-    const files = await readDirRecursive(join(projectRoot, CODEX_INSTRUCTIONS_DIR));
+    const files = await readDirRecursiveNoSymlinks(join(projectRoot, CODEX_INSTRUCTIONS_DIR));
     const instructionFiles = files.filter((file) => file.endsWith(".md"));
     const instructionsRoot = join(projectRoot, CODEX_INSTRUCTIONS_DIR);
     for (const srcPath of instructionFiles) {
@@ -9179,19 +9192,31 @@ function readMcpServers(content, extension) {
   for (const [name, value] of Object.entries(rawServers)) {
     if (!value || typeof value !== "object" || Array.isArray(value)) continue;
     const server = value;
-    if (typeof server.command !== "string") continue;
-    servers[name] = {
-      type: typeof server.type === "string" ? server.type : "stdio",
-      command: server.command,
-      args: toStringArray5(server.args),
-      env: toStringRecord(server.env),
-      description: typeof server.description === "string" ? server.description : void 0
-    };
+    const description = typeof server.description === "string" ? server.description : void 0;
+    if (typeof server.command === "string") {
+      servers[name] = {
+        type: typeof server.type === "string" ? server.type : "stdio",
+        command: server.command,
+        args: toStringArray5(server.args),
+        env: toStringRecord(server.env),
+        description
+      };
+      continue;
+    }
+    if (typeof server.url === "string") {
+      servers[name] = {
+        type: typeof server.type === "string" ? server.type : "http",
+        url: server.url,
+        headers: toStringRecord(server.headers),
+        env: toStringRecord(server.env),
+        description
+      };
+    }
   }
   return servers;
 }
 async function importMcp2(projectRoot, results) {
-  const files = (await readDirRecursive(join(projectRoot, CONTINUE_MCP_DIR))).filter(
+  const files = (await readDirRecursiveNoSymlinks(join(projectRoot, CONTINUE_MCP_DIR))).filter(
     (file) => [".json", ".yaml", ".yml"].includes(extname(file))
   );
   const merged = {};
@@ -9851,7 +9876,7 @@ function extractWrapperCommand(content) {
 }
 async function importHooks(projectRoot, results) {
   const hooksDir = join(projectRoot, COPILOT_HOOKS_DIR);
-  const allFiles = await readDirRecursive(hooksDir).catch(() => []);
+  const allFiles = await readDirRecursiveNoSymlinks(hooksDir).catch(() => []);
   const jsonFiles = allFiles.filter((file) => file.endsWith(".json"));
   const hooks = {};
   for (const srcPath of jsonFiles) {
@@ -9887,7 +9912,7 @@ async function importHooks(projectRoot, results) {
     }
   }
   const legacyDir = join(projectRoot, COPILOT_LEGACY_HOOKS_DIR);
-  const legacyFiles = await readDirRecursive(legacyDir).catch(() => []);
+  const legacyFiles = await readDirRecursiveNoSymlinks(legacyDir).catch(() => []);
   const shFiles = legacyFiles.filter(
     (file) => dirname(file) === legacyDir && /^[^-]+-\d+\.sh$/i.test(basename(file))
   );
@@ -9964,7 +9989,7 @@ var init_importer10 = __esm({
   }
 });
 async function skillNamesFromNativeSkillDir(scanRoot) {
-  const files = await readDirRecursive(scanRoot);
+  const files = await readDirRecursiveNoSymlinks(scanRoot);
   const names = /* @__PURE__ */ new Set();
   for (const f of files) {
     if (basename(f) === "SKILL.md") {
@@ -9986,7 +10011,7 @@ var init_native_skill_scan = __esm({
 async function inferCopilotPickFromPath(repoRoot, posixPath) {
   const scan = join(repoRoot, ...posixPath.split("/"));
   if (posixPath.startsWith(COPILOT_PROMPTS_DIR)) {
-    const files = await readDirRecursive(scan);
+    const files = await readDirRecursiveNoSymlinks(scan);
     const commands = [
       ...new Set(
         files.filter((f) => f.toLowerCase().endsWith(".prompt.md")).map((f) => basename(f, ".prompt.md"))
@@ -9995,7 +10020,7 @@ async function inferCopilotPickFromPath(repoRoot, posixPath) {
     return commands.length ? { commands } : {};
   }
   if (posixPath.startsWith(".github/copilot") && !posixPath.includes("copilot-instructions.md")) {
-    const files = await readDirRecursive(scan);
+    const files = await readDirRecursiveNoSymlinks(scan);
     const rules = [
       ...new Set(
         files.filter((f) => f.includes(".instructions.md")).map((f) => basename(f).replace(/\.instructions\.md$/i, ""))
@@ -10004,7 +10029,7 @@ async function inferCopilotPickFromPath(repoRoot, posixPath) {
     return rules.length ? { rules } : {};
   }
   if (posixPath.startsWith(".github/instructions")) {
-    const files = await readDirRecursive(scan);
+    const files = await readDirRecursiveNoSymlinks(scan);
     const names = /* @__PURE__ */ new Set();
     for (const f of files) {
       const b = basename(f);
@@ -10020,7 +10045,7 @@ async function inferCopilotPickFromPath(repoRoot, posixPath) {
     return skills.length ? { skills } : {};
   }
   if (posixPath.startsWith(".github/agents")) {
-    const files = await readDirRecursive(scan);
+    const files = await readDirRecursiveNoSymlinks(scan);
     const agents = [
       ...new Set(
         files.filter((f) => f.toLowerCase().endsWith(".agent.md")).map((f) => basename(f, ".agent.md"))
@@ -11569,7 +11594,7 @@ async function importSkills3(projectRoot, results, normalize, skillsRelDir = CUR
   for (const [skillName, skillDir] of directorySkills) {
     await importDirectorySkill(skillName, skillDir, options);
   }
-  const allFiles = await readDirRecursive(skillsDir).catch(() => []);
+  const allFiles = await readDirRecursiveNoSymlinks(skillsDir).catch(() => []);
   const mdFiles = allFiles.filter((f) => f.endsWith(".md"));
   const handledPaths = new Set(
     Array.from(directorySkills.values()).flatMap(
@@ -11607,11 +11632,11 @@ async function hasGlobalCursorArtifacts(projectRoot) {
     const stat8 = await readFileSafe(p);
     if (stat8 !== null && stat8.trim() !== "") return true;
   }
-  const skillFiles = await readDirRecursive(join(projectRoot, CURSOR_SKILLS_DIR));
+  const skillFiles = await readDirRecursiveNoSymlinks(join(projectRoot, CURSOR_SKILLS_DIR));
   if (skillFiles.some((f) => f.endsWith(".md"))) return true;
-  const agentFiles = await readDirRecursive(join(projectRoot, CURSOR_AGENTS_DIR));
+  const agentFiles = await readDirRecursiveNoSymlinks(join(projectRoot, CURSOR_AGENTS_DIR));
   if (agentFiles.some((f) => f.endsWith(".md"))) return true;
-  const commandFiles = await readDirRecursive(join(projectRoot, CURSOR_COMMANDS_DIR));
+  const commandFiles = await readDirRecursiveNoSymlinks(join(projectRoot, CURSOR_COMMANDS_DIR));
   if (commandFiles.some((f) => f.endsWith(".md"))) return true;
   return false;
 }
@@ -13199,7 +13224,7 @@ async function importGeminiPolicies(projectRoot) {
   const policiesDir = join(projectRoot, GEMINI_POLICIES_DIR);
   let policyFiles;
   try {
-    policyFiles = await readDirRecursive(policiesDir);
+    policyFiles = await readDirRecursiveNoSymlinks(policiesDir);
   } catch {
     return results;
   }
@@ -13298,7 +13323,7 @@ var init_importer_strip = __esm({
 });
 async function importGeminiSkillsAndAgents(projectRoot, results, normalize) {
   const geminiSkillsPath = join(projectRoot, GEMINI_SKILLS_DIR);
-  const skillDirs = await readDirRecursive(geminiSkillsPath);
+  const skillDirs = await readDirRecursiveNoSymlinks(geminiSkillsPath);
   const skillMdFiles = skillDirs.filter((f) => basename(f) === "SKILL.md");
   for (const srcPath of skillMdFiles) {
     const content = await readFileSafe(srcPath);
@@ -13337,7 +13362,7 @@ async function importGeminiSkillsAndAgents(projectRoot, results, normalize) {
       toPath: `${GEMINI_CANONICAL_SKILLS_DIR}/${skillName}/SKILL.md`,
       feature: "skills"
     });
-    const allSkillFiles = await readDirRecursive(dirname(srcPath));
+    const allSkillFiles = await readDirRecursiveNoSymlinks(dirname(srcPath));
     for (const absPath of allSkillFiles) {
       if (absPath === srcPath) continue;
       const supportContent = await readFileSafe(absPath);
@@ -13356,7 +13381,7 @@ async function importGeminiSkillsAndAgents(projectRoot, results, normalize) {
   }
   const geminiAgentsPath = join(projectRoot, GEMINI_AGENTS_DIR);
   try {
-    const agentFiles = await readDirRecursive(geminiAgentsPath);
+    const agentFiles = await readDirRecursiveNoSymlinks(geminiAgentsPath);
     const agentMdFiles = agentFiles.filter((f) => f.endsWith(".md"));
     for (const srcPath of agentMdFiles) {
       const content = await readFileSafe(srcPath);
@@ -13489,7 +13514,7 @@ function isUnderGeminiCommands(pathInRepoPosix) {
 async function inferGeminiCommandNamesFromFiles(repoRoot, pathInRepoPosix) {
   const commandsRoot = join(repoRoot, ...GEMINI_COMMANDS_DIR.split("/"));
   const scanDir = join(repoRoot, ...pathInRepoPosix.split("/"));
-  const files = await readDirRecursive(scanDir);
+  const files = await readDirRecursiveNoSymlinks(scanDir);
   const names = [];
   for (const f of files) {
     if (!/\.(toml|md)$/i.test(f)) continue;
@@ -15701,7 +15726,7 @@ async function importNonRootRules(projectRoot, results, normalize) {
 }
 async function importHooks2(projectRoot, results) {
   const hooks = {};
-  for (const absPath of await readDirRecursive(join(projectRoot, KIRO_HOOKS_DIR))) {
+  for (const absPath of await readDirRecursiveNoSymlinks(join(projectRoot, KIRO_HOOKS_DIR))) {
     if (!absPath.endsWith(".kiro.hook")) continue;
     const parsed = parseKiroHookFile(await readFileSafe(absPath) ?? "");
     if (!parsed) continue;
@@ -16053,7 +16078,7 @@ var init_generator24 = __esm({
     init_constants19();
   }
 });
-function toStringRecord2(value) {
+function toStringRecord3(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};
   const out2 = {};
   for (const [k, v] of Object.entries(value)) {
@@ -16079,8 +16104,8 @@ function parseOpenCodeMcp(content) {
       out2[name] = {
         type: "url",
         url: entry.url,
-        headers: toStringRecord2(entry.headers),
-        env: toStringRecord2(entry.environment),
+        headers: toStringRecord3(entry.headers),
+        env: toStringRecord3(entry.environment),
         ...typeof entry.description === "string" ? { description: entry.description } : {}
       };
       continue;
@@ -16094,7 +16119,7 @@ function parseOpenCodeMcp(content) {
         type: "stdio",
         command,
         args,
-        env: toStringRecord2(entry.environment),
+        env: toStringRecord3(entry.environment),
         ...typeof entry.description === "string" ? { description: entry.description } : {}
       };
     }
@@ -18916,7 +18941,7 @@ function toStringArray8(value) {
 }
 async function importWorkflows(projectRoot, results, normalize) {
   const workflowsDir = join(projectRoot, WINDSURF_WORKFLOWS_DIR);
-  const workflowFiles = await readDirRecursive(workflowsDir);
+  const workflowFiles = await readDirRecursiveNoSymlinks(workflowsDir);
   const workflowMdFiles = workflowFiles.filter((f) => f.endsWith(".md"));
   const destCommandsDir = join(projectRoot, WINDSURF_CANONICAL_COMMANDS_DIR);
   for (const srcPath of workflowMdFiles) {
@@ -20758,8 +20783,22 @@ function resolveOutputCollisions(results) {
     }
     deduped[existingIdx] = mergeDuplicateMetadata(existing, result);
   }
+  assertNoCaseOnlyPathCollisions(deduped);
   return deduped;
 }
+function assertNoCaseOnlyPathCollisions(results) {
+  const byLower = /* @__PURE__ */ new Map();
+  for (const result of results) {
+    const key = result.path.toLowerCase();
+    const prior = byLower.get(key);
+    if (prior !== void 0 && prior.path !== result.path) {
+      throw new Error(
+        `Case-only path collision: "${prior.path}" (${prior.target}) and "${result.path}" (${result.target}) resolve to the same file on case-insensitive filesystems (Windows/macOS). Rename one canonical source.`
+      );
+    }
+    byLower.set(key, result);
+  }
+}
 function refreshResultStatus(result) {
   const status = result.currentContent === void 0 ? "created" : result.currentContent !== result.content ? "updated" : "unchanged";
   return result.status === status ? result : { ...result, status };
@@ -21314,6 +21353,100 @@ function redactUrlSecrets(message) {
     }
   );
 }
+function gitProtocolOptIns() {
+  const on = (v) => v === "1" || v === "true";
+  return {
+    http: on(process.env.AGENTSMESH_ALLOW_INSECURE_GIT),
+    file: on(process.env.AGENTSMESH_ALLOW_LOCAL_GIT)
+  };
+}
+function isAllowedGitProtocol(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return false;
+  }
+  const { http, file } = gitProtocolOptIns();
+  const allowed = ["https:", "ssh:"];
+  if (http) allowed.push("http:");
+  if (file) allowed.push("file:");
+  return allowed.includes(parsed.protocol);
+}
+function gitAllowProtocolEnv() {
+  const { http, file } = gitProtocolOptIns();
+  const protos = ["https", "ssh"];
+  if (http) protos.push("http");
+  if (file) protos.push("file");
+  return protos.join(":");
+}
+function assertAllowedGitUrl(url) {
+  if (isAllowedGitProtocol(url)) return;
+  throw new Error(
+    `agentsmesh refuses a git remote with a disallowed transport: "${redactUrlSecrets(url)}". Allowed: https, ssh. Set AGENTSMESH_ALLOW_INSECURE_GIT=1 to permit http, AGENTSMESH_ALLOW_LOCAL_GIT=1 to permit file.`
+  );
+}
+function splitSourceRef(source, prefix, defaultRef) {
+  if (!source.startsWith(prefix)) return null;
+  const rest = source.slice(prefix.length).trim();
+  if (!rest) return null;
+  const refIdx = rest.lastIndexOf("@");
+  if (refIdx < 0) return [rest, defaultRef];
+  const slug = rest.slice(0, refIdx).trim();
+  const ref = rest.slice(refIdx + 1).trim();
+  if (!slug || !ref) return null;
+  return [slug, ref];
+}
+function parseGithubSource(source) {
+  const parts = splitSourceRef(source, "github:", "latest");
+  if (!parts) return null;
+  const [slug, tag] = parts;
+  const slash = slug.indexOf("/");
+  if (slash < 0) return null;
+  const org = slug.slice(0, slash).trim();
+  const repo = slug.slice(slash + 1).trim();
+  if (!org || !repo || !tag) return null;
+  return { org, repo, tag };
+}
+function parseGitlabSource(source) {
+  const parts = splitSourceRef(source, "gitlab:");
+  if (!parts) return null;
+  const [slug, ref] = parts;
+  const slash = slug.lastIndexOf("/");
+  if (slash < 0) return null;
+  const namespace = slug.slice(0, slash).trim();
+  const project31 = slug.slice(slash + 1).trim();
+  if (!namespace || !project31) return null;
+  return {
+    namespace,
+    project: project31,
+    ref,
+    cloneUrl: `https://gitlab.com/${namespace}/${project31}.git`
+  };
+}
+function parseGitSource(source) {
+  if (!source.startsWith("git+")) return null;
+  const rest = source.slice(4).trim();
+  if (!rest) return null;
+  const hashIdx = rest.lastIndexOf("#");
+  const url = (hashIdx < 0 ? rest : rest.slice(0, hashIdx)).trim();
+  const ref = hashIdx < 0 ? void 0 : rest.slice(hashIdx + 1).trim();
+  if (!url || hashIdx >= 0 && !ref) return null;
+  if (!isAllowedGitProtocol(url)) return null;
+  return { url, ref };
+}
+function parseRemoteSource(source) {
+  const github = parseGithubSource(source);
+  if (github) return { kind: "github", ...github };
+  const gitlab = parseGitlabSource(source);
+  if (gitlab) return { kind: "gitlab", ...gitlab };
+  const git = parseGitSource(source);
+  if (git) return { kind: "git", ...git };
+  return null;
+}
+function isSupportedRemoteSource(source) {
+  return parseRemoteSource(source) !== null;
+}
 
 // src/config/remote/git-remote.ts
 var execFileAsync = promisify(execFile);
@@ -21384,7 +21517,8 @@ function resolveCloneUrl(parsed) {
 }
 async function cloneRepo(cloneUrl, repoDir) {
   ensureNotFlag(cloneUrl, "clone-url");
-  await runGit(["clone", cloneUrl, repoDir]);
+  assertAllowedGitUrl(cloneUrl);
+  await runGit(["clone", "-c", "core.symlinks=false", cloneUrl, repoDir]);
 }
 async function checkoutRef(repoDir, ref) {
   ensureNotFlag(ref, "ref");
@@ -21398,7 +21532,10 @@ async function runGit(args, cwd) {
     cwd,
     env: {
       ...process.env,
-      GIT_TERMINAL_PROMPT: "0"
+      GIT_TERMINAL_PROMPT: "0",
+      // Constrain transports git may use (incl. mid-clone redirects/insteadOf)
+      // to the same allowlist the clone URL itself passed.
+      GIT_ALLOW_PROTOCOL: gitAllowProtocolEnv()
     }
   });
   return stdout.trim();
@@ -21586,80 +21723,6 @@ async function fetchGithubDefaultBranch(parsed, extendName, options, cacheDir, b
   }
   throw lastError instanceof Error ? lastError : new Error("Failed to clone GitHub default branch");
 }
-function splitSourceRef(source, prefix, defaultRef) {
-  if (!source.startsWith(prefix)) return null;
-  const rest = source.slice(prefix.length).trim();
-  if (!rest) return null;
-  const refIdx = rest.lastIndexOf("@");
-  if (refIdx < 0) return [rest, defaultRef];
-  const slug = rest.slice(0, refIdx).trim();
-  const ref = rest.slice(refIdx + 1).trim();
-  if (!slug || !ref) return null;
-  return [slug, ref];
-}
-function parseGithubSource(source) {
-  const parts = splitSourceRef(source, "github:", "latest");
-  if (!parts) return null;
-  const [slug, tag] = parts;
-  const slash = slug.indexOf("/");
-  if (slash < 0) return null;
-  const org = slug.slice(0, slash).trim();
-  const repo = slug.slice(slash + 1).trim();
-  if (!org || !repo || !tag) return null;
-  return { org, repo, tag };
-}
-function parseGitlabSource(source) {
-  const parts = splitSourceRef(source, "gitlab:");
-  if (!parts) return null;
-  const [slug, ref] = parts;
-  const slash = slug.lastIndexOf("/");
-  if (slash < 0) return null;
-  const namespace = slug.slice(0, slash).trim();
-  const project31 = slug.slice(slash + 1).trim();
-  if (!namespace || !project31) return null;
-  return {
-    namespace,
-    project: project31,
-    ref,
-    cloneUrl: `https://gitlab.com/${namespace}/${project31}.git`
-  };
-}
-function parseGitSource(source) {
-  if (!source.startsWith("git+")) return null;
-  const rest = source.slice(4).trim();
-  if (!rest) return null;
-  const hashIdx = rest.lastIndexOf("#");
-  const url = (hashIdx < 0 ? rest : rest.slice(0, hashIdx)).trim();
-  const ref = hashIdx < 0 ? void 0 : rest.slice(hashIdx + 1).trim();
-  if (!url || hashIdx >= 0 && !ref) return null;
-  let parsedUrl;
-  try {
-    parsedUrl = new URL(url);
-  } catch {
-    return null;
-  }
-  const allowInsecure = process.env.AGENTSMESH_ALLOW_INSECURE_GIT === "1" || process.env.AGENTSMESH_ALLOW_INSECURE_GIT === "true";
-  const allowLocalGit = process.env.AGENTSMESH_ALLOW_LOCAL_GIT === "1" || process.env.AGENTSMESH_ALLOW_LOCAL_GIT === "true";
-  const allowed = ["https:", "ssh:"];
-  if (allowInsecure) allowed.push("http:");
-  if (allowLocalGit) allowed.push("file:");
-  if (!allowed.includes(parsedUrl.protocol)) {
-    return null;
-  }
-  return { url, ref };
-}
-function parseRemoteSource(source) {
-  const github = parseGithubSource(source);
-  if (github) return { kind: "github", ...github };
-  const gitlab = parseGitlabSource(source);
-  if (gitlab) return { kind: "gitlab", ...gitlab };
-  const git = parseGitSource(source);
-  if (git) return { kind: "git", ...git };
-  return null;
-}
-function isSupportedRemoteSource(source) {
-  return parseRemoteSource(source) !== null;
-}
 async function sweepStaleCache(cacheDir, maxAgeMs) {
   const dir = cacheDir ?? getCacheDir();
   const threshold = Number(process.env.AGENTSMESH_CACHE_MAX_AGE_DAYS ?? 30) * 864e5;
@@ -21893,15 +21956,17 @@ function assertNoBasenameCollisions(feature, paths, stripExt) {
     const idx = Math.max(fwdIdx, bckIdx);
     const base = idx === -1 ? p : p.slice(idx + 1);
     const slug = base.endsWith(stripExt) ? base.slice(0, -stripExt.length) : base;
-    const prior = seen.get(slug);
-    if (prior !== void 0 && prior !== p) {
+    const key = slug.toLowerCase();
+    const prior = seen.get(key);
+    if (prior !== void 0 && prior.path !== p) {
+      const detail = prior.slug === slug ? `"${slug}"` : `"${prior.slug}" vs "${slug}" (case-insensitive)`;
       throw new CanonicalNameError(
         feature,
         slug,
-        `canonical ${feature} files collide on slug "${slug}": ${prior} vs ${p}. Rename one.`
+        `canonical ${feature} files collide on slug ${detail}: ${prior.path} vs ${p}. Rename one.`
       );
     }
-    seen.set(slug, p);
+    seen.set(key, { path: p, slug });
   }
 }
 var ALTERNATE_RESOURCE_FORMATS = /* @__PURE__ */ new Set([".toml", ".yaml", ".yml", ".json"]);
@@ -21935,7 +22000,7 @@ function toStrArray(v) {
   return [];
 }
 async function parseRules(rulesDir, opts = {}) {
-  const files = await readDirRecursive(rulesDir);
+  const files = await readDirRecursiveNoSymlinks(rulesDir);
   const mdFiles = files.filter((f) => {
     if (!f.endsWith(".md")) return false;
     const name = basename(f, ".md");
@@ -21944,6 +22009,7 @@ async function parseRules(rulesDir, opts = {}) {
   warnIfUnrecognizedResourceFormats("rules", rulesDir, files, mdFiles, {
     handledByOtherReader: opts.handledByOtherReader
   });
+  assertNoBasenameCollisions("rule", mdFiles, ".md");
   const rules = [];
   for (const path of mdFiles) {
     const content = await readFileSafe(path);
@@ -21992,7 +22058,7 @@ function toToolsArray2(v) {
   return [];
 }
 async function parseCommands(commandsDir, opts = {}) {
-  const files = await readDirRecursive(commandsDir);
+  const files = await readDirRecursiveNoSymlinks(commandsDir);
   const mdFiles = files.filter((f) => f.endsWith(".md") && !basename(f).startsWith("_"));
   warnIfUnrecognizedResourceFormats("commands", commandsDir, files, mdFiles, {
     handledByOtherReader: opts.handledByOtherReader
@@ -22052,7 +22118,7 @@ function toHooks2(v) {
   return {};
 }
 async function parseAgents(agentsDir, opts = {}) {
-  const files = await readDirRecursive(agentsDir);
+  const files = await readDirRecursiveNoSymlinks(agentsDir);
   const mdFiles = files.filter((f) => f.endsWith(".md") && !basename(f).startsWith("_"));
   warnIfUnrecognizedResourceFormats("agents", agentsDir, files, mdFiles, {
     handledByOtherReader: opts.handledByOtherReader
@@ -22636,7 +22702,7 @@ async function importEntities(kind, dir, opts) {
 }
 async function readToolNativeEntities(srcDir, targetId, kind, parseOpts = {}) {
   const specs = directorySpecsFor(getDescriptor(targetId)?.importer, kind);
-  const allFiles = await readDirRecursive(srcDir);
+  const allFiles = await readDirRecursiveNoSymlinks(srcDir);
   const nonMdExtensions = /* @__PURE__ */ new Set();
   for (const spec of specs) {
     for (const ext of spec.extensions) {
@@ -22993,7 +23059,7 @@ async function stageSingleFile(sourcePath, destinationDir, acceptMdc) {
 async function stageMarkdownCollection(sourceRoot, destinationDir, acceptMdc) {
   const info = await stat(sourceRoot);
   if (info.isFile()) return stageSingleFile(sourceRoot, destinationDir, acceptMdc);
-  const files = (await readDirRecursive(sourceRoot)).filter(
+  const files = (await readDirRecursiveNoSymlinks(sourceRoot)).filter(
     (file) => isAcceptedFile(file, acceptMdc) && !isBoilerplate(basename(file))
   );
   if (files.length === 0) {
@@ -23040,7 +23106,7 @@ async function stagePreferredSkills(sourceRoot, destinationDir, preferredSkillNa
   }
   const wanted = new Set(preferredSkillNames);
   const matches = /* @__PURE__ */ new Map();
-  for (const file of await readDirRecursive(sourceRoot)) {
+  for (const file of await readDirRecursiveNoSymlinks(sourceRoot)) {
     if (!file.endsWith("/SKILL.md") && !file.endsWith("\\SKILL.md")) continue;
     const skillDir = dirname(file);
     const skillName = basename(skillDir);
@@ -23088,7 +23154,7 @@ async function stageSkills(sourceRoot, destinationDir, options = {}) {
       return;
     }
     await mkdirp(destinationDir);
-    const entries = await readDirRecursive(sourceRoot);
+    const entries = await readDirRecursiveNoSymlinks(sourceRoot);
     const roots = /* @__PURE__ */ new Set();
     for (const file of entries.filter(
       (entry) => entry.endsWith("/SKILL.md") || entry.endsWith("\\SKILL.md")