agentsmesh 0.27.0 → 0.29.0

package/dist/index.d.ts

@@ -2,6 +2,6 @@ export { AgentsMeshError, AgentsMeshErrorCode, CheckLockSyncOptions, ComputeDiff
 export { LoadCanonicalOptions, loadCanonical, loadCanonicalFiles } from './canonical.js';
 export { getAllDescriptors, getDescriptor, getTargetCatalog, registerTargetDescriptor } from './targets.js';
 export { A as AddLessonInput, a as AddLessonOptions, b as AddLessonResult, c as AddLessonTriggers, D as DEFAULT_RECALL_LIMIT, I as ImportLegacyOptions, d as ImportLegacyReport, L as LESSONS_PROCEDURAL_RULE, e as Lesson, f as LessonStatus, g as LessonsGraph, h as LessonsGraphSchema, i as LessonsPaths, j as LessonsQuery, M as MatchedLesson, k as MergeLessonsOptions, l as MergeLessonsResult, m as MutateOptions, R as RankOptions, n as RankReason, o as RankedLesson, S as ScaffoldLessonsResult, p as StripMarkersOptions, q as StripMarkersReport, T as Topic, r as Trigger, s as TriggerKind, U as UnknownTopicError, V as ValidationFinding, t as ValidationLevel, u as ValidationReport, v as acquireLessonsLock, w as addLesson, x as graphFilePath, y as importLegacyLessons, z as lessonsPaths, B as loadLessonsGraph, C as mergeLessons, E as mutateLessonsGraph, F as parseGraph, G as queryLessons, H as rankLessons, J as scaffoldLessons, K as serializeGraph, N as stripLegacyMarkers, O as stripMarkersInGraph, P as toRelPath, Q as tryLoadLessonsGraph, W as validateLessonsGraph } from './init-B0aI-g8W.js';
-export { C as CanonicalAgent, a as CanonicalCommand, b as CanonicalFiles, c as CanonicalRule, d as CanonicalSkill, H as HookEntry, e as Hooks, I as IgnorePatterns, M as McpConfig, f as McpServer, P as Permissions, S as SkillSupportingFile, g as StdioMcpServer, U as UrlMcpServer, V as ValidatedConfig } from './schema-CzaoYJlG.js';
-export { E as ExtraRuleOutputContext, a as ExtraRuleOutputResolver, F as FeatureLinter, G as GenerateResult, b as GeneratedOutputMerger, c as GlobalTargetSupport, I as ImportPathBuilder, d as ImportResult, L as LintDiagnostic, R as RuleLinter, S as ScopeExtrasFn, T as TargetCapabilities, e as TargetDescriptor, f as TargetGenerators, g as TargetLayout, h as TargetLayoutScope, i as TargetLintHooks, j as TargetManagedOutputs, k as TargetOutputFamily, l as TargetPathResolvers } from './target-descriptor-ItDY3NR0.js';
+export { C as CanonicalAgent, a as CanonicalCommand, b as CanonicalFiles, c as CanonicalRule, d as CanonicalSkill, H as HookEntry, e as Hooks, I as IgnorePatterns, M as McpConfig, f as McpServer, P as Permissions, S as SkillSupportingFile, g as StdioMcpServer, U as UrlMcpServer, V as ValidatedConfig } from './schema-CH_JJep8.js';
+export { E as ExtraRuleOutputContext, a as ExtraRuleOutputResolver, F as FeatureLinter, G as GenerateResult, b as GeneratedOutputMerger, c as GlobalTargetSupport, I as ImportPathBuilder, d as ImportResult, L as LintDiagnostic, R as RuleLinter, S as ScopeExtrasFn, T as TargetCapabilities, e as TargetDescriptor, f as TargetGenerators, g as TargetLayout, h as TargetLayoutScope, i as TargetLintHooks, j as TargetManagedOutputs, k as TargetOutputFamily, l as TargetPathResolvers } from './target-descriptor-CaLUz7SR.js';
 import 'zod';

package/dist/index.js

@@ -21595,7 +21595,14 @@ var extendSourceSchema = z.object({
   features: z.array(featureSchema),
   /** Repo-relative POSIX path for discovery (skill packs, nested .agentsmesh). */
   path: z.string().optional(),
-  pick: extendPickSchema.optional()
+  pick: extendPickSchema.optional(),
+  /**
+   * Per-entry consent for "elevated" artifacts (`hooks`, `permissions`, `mcp`)
+   * from a remote source. These control local code execution at generate time,
+   * so for non-local extends they are stripped by default and only merged for
+   * the artifacts listed here. Local extends are trusted and ignore this field.
+   */
+  accept: z.array(z.enum(["hooks", "permissions", "mcp"])).optional()
 });
 var collaborationSchema = z.object({
   strategy: z.enum(["merge", "lock", "last-wins"]).default("merge"),
@@ -22304,7 +22311,9 @@ async function resolveExtendPaths(config, configDir, options = {}) {
         as: ext.as,
         version: fetched.version,
         path: ext.path,
-        pick: ext.pick
+        pick: ext.pick,
+        isRemote: true,
+        accept: ext.accept
       });
       continue;
     }
@@ -22321,7 +22330,9 @@ async function resolveExtendPaths(config, configDir, options = {}) {
       target: ext.target,
       as: ext.as,
       path: ext.path,
-      pick: ext.pick
+      pick: ext.pick,
+      isRemote: false,
+      accept: ext.accept
     });
   }
   return result;
@@ -23770,6 +23781,47 @@ function applyExtendPick(canonical, features, pick, extendName) {
   return next;
 }
 
+// src/install/core/elevated-artifacts.ts
+function stripUntrustedElevatedArtifacts(canonical, options) {
+  if (options.sourceKind === "local") {
+    return { canonical, stripped: [] };
+  }
+  const stripped = [];
+  let hooks = canonical.hooks;
+  let permissions = canonical.permissions;
+  let mcp = canonical.mcp;
+  if (hooks !== null && !options.acceptHooks) {
+    hooks = null;
+    stripped.push("hooks");
+  }
+  if (permissions !== null && !options.acceptPermissions) {
+    permissions = null;
+    stripped.push("permissions");
+  }
+  if (mcp !== null && !options.acceptMcp) {
+    mcp = null;
+    stripped.push("mcp");
+  }
+  if (stripped.length === 0) {
+    return { canonical, stripped: [] };
+  }
+  return {
+    canonical: { ...canonical, hooks, permissions, mcp },
+    stripped
+  };
+}
+
+// src/canonical/extends/extend-elevated.ts
+function gateExtendElevatedArtifacts(canonical, ext) {
+  const accept = ext.accept ?? [];
+  return stripUntrustedElevatedArtifacts(canonical, {
+    sourceKind: ext.isRemote ? "git" : "local",
+    acceptHooks: accept.includes("hooks"),
+    acceptPermissions: accept.includes("permissions"),
+    acceptMcp: accept.includes("mcp")
+  });
+}
+
 // src/install/pack/pack-reader.ts
 init_fs();
 var MANUAL_INSTALL_AS = ["rules", "commands", "agents", "skills"];
@@ -23919,7 +23971,14 @@ async function loadCanonicalWithExtends(config, configDir, options = {}, canonic
   for (const ext of resolvedExtends) {
     const extCanonical = await loadCanonicalForExtend(ext);
     const filtered = filterCanonicalByFeatures(extCanonical, ext.features);
-    const picked = applyExtendPick(filtered, ext.features, ext.pick, ext.name);
+    const gated = gateExtendElevatedArtifacts(filtered, ext);
+    if (gated.stripped.length > 0) {
+      const list = gated.stripped.join(", ");
+      logger.warn(
+        `[agentsmesh] Extend "${ext.name}": stripped elevated artifacts from a remote source: ${list}. Add \`accept: [${list}]\` to this extends entry in agentsmesh.yaml to keep them.`
+      );
+    }
+    const picked = applyExtendPick(gated.canonical, ext.features, ext.pick, ext.name);
     merged = mergeCanonicalFiles(merged, picked);
   }
   const packsCanonical = await loadPacksCanonical(canonicalDir);
@@ -23955,7 +24014,18 @@ function canonicalize(path) {
   try {
     return realpathSync(path);
   } catch {
-    return path;
+    let current = resolve(path);
+    const tail = [];
+    for (; ; ) {
+      const parent = dirname(current);
+      if (parent === current) return resolve(path);
+      tail.unshift(basename(current));
+      try {
+        return join(realpathSync(parent), ...tail);
+      } catch {
+        current = parent;
+      }
+    }
   }
 }
 function assertSourceInsideProjectRoot(resolvedPath, projectRoot) {
@@ -25817,8 +25887,8 @@ function isBroadGlob(pattern) {
   const p = pattern.trim();
   if (p === "*" || p === "**") return true;
   if (!p.includes("**")) return false;
-  const basename70 = p.slice(p.lastIndexOf("/") + 1);
-  return basename70.startsWith("*");
+  const basename71 = p.slice(p.lastIndexOf("/") + 1);
+  return basename71.startsWith("*");
 }
 function inspectCapturedLesson(graph, lessonId, knownPaths) {
   const lesson = graph.lessons[lessonId];
@@ -26702,23 +26772,31 @@ async function stripMarkersInGraph(projectRoot, options = {}) {
 }
 var RECALL_HOOK_COMMAND = "agentsmesh lessons hook";
 var RECALL_HOOK_MATCHER = "Edit|Write|Bash";
-function injectRecallHook(projectRoot) {
-  const path = join(projectRoot, ".agentsmesh", "hooks.yaml");
-  if (!existsSync(path)) return false;
-  const doc = parseDocument(readFileSync(path, "utf8"));
-  const existing = doc.get("PostToolUse");
-  const post = existing instanceof YAMLSeq ? existing : new YAMLSeq();
-  const present = post.items.some(
+var RECALL_EVENTS = ["PreToolUse", "PostToolUse"];
+function injectEvent(doc, event) {
+  const existing = doc.get(event);
+  const seq = existing instanceof YAMLSeq ? existing : new YAMLSeq();
+  const present = seq.items.some(
     (item) => item instanceof YAMLMap && item.get("command") === RECALL_HOOK_COMMAND
   );
   if (present) return false;
-  post.add(
+  seq.add(
     doc.createNode({ matcher: RECALL_HOOK_MATCHER, type: "command", command: RECALL_HOOK_COMMAND })
   );
-  doc.set("PostToolUse", post);
-  writeFileSync(path, String(doc), "utf8");
+  doc.set(event, seq);
   return true;
 }
+function injectRecallHook(projectRoot) {
+  const path = join(projectRoot, ".agentsmesh", "hooks.yaml");
+  if (!existsSync(path)) return false;
+  const doc = parseDocument(readFileSync(path, "utf8"));
+  let changed = false;
+  for (const event of RECALL_EVENTS) {
+    if (injectEvent(doc, event)) changed = true;
+  }
+  if (changed) writeFileSync(path, String(doc), "utf8");
+  return changed;
+}
 
 // src/utils/filesystem/gitignore.ts
 init_fs();