agentsmesh 0.28.0 → 0.30.0

package/dist/engine.d.ts

@@ -1,5 +1,5 @@
-import { V as ValidatedConfig, b as CanonicalFiles } from './schema-CzaoYJlG.js';
-import { G as GenerateResult, h as TargetLayoutScope, L as LintDiagnostic, d as ImportResult } from './target-descriptor-ItDY3NR0.js';
+import { V as ValidatedConfig, b as CanonicalFiles } from './schema-CH_JJep8.js';
+import { G as GenerateResult, h as TargetLayoutScope, L as LintDiagnostic, d as ImportResult } from './target-descriptor-CaLUz7SR.js';
 import 'zod';
 
 /**

package/dist/engine.js

@@ -2940,6 +2940,18 @@ var init_linter = __esm({
   }
 });
 
+// src/core/hook-types.ts
+var BEST_EFFORT_HOOK_EVENTS;
+var init_hook_types = __esm({
+  "src/core/hook-types.ts"() {
+    BEST_EFFORT_HOOK_EVENTS = /* @__PURE__ */ new Set([
+      "UserPromptSubmit",
+      "PostToolUseFailure",
+      "SessionStart"
+    ]);
+  }
+});
+
 // src/core/lint/shared/helpers.ts
 function createWarning(file, target31, message) {
   return {
@@ -2955,6 +2967,13 @@ function formatOxfordComma(items) {
   if (items.length === 2) return `${items[0]} and ${items[1]}`;
   return `${items.slice(0, -1).join(", ")}, and ${items[items.length - 1]}`;
 }
+function unsupportedHookEventNames(hooks, supportedEvents) {
+  if (!hooks) return [];
+  const supported = new Set(supportedEvents);
+  return Object.keys(hooks).filter(
+    (event) => !supported.has(event) && !BEST_EFFORT_HOOK_EVENTS.has(event)
+  );
+}
 function createUnsupportedHookWarning(event, target31, supportedEvents, options) {
   const by = options?.unsupportedBy ?? target31;
   const supported = formatOxfordComma(supportedEvents);
@@ -2966,6 +2985,7 @@ function createUnsupportedHookWarning(event, target31, supportedEvents, options)
 }
 var init_helpers = __esm({
   "src/core/lint/shared/helpers.ts"() {
+    init_hook_types();
   }
 });
 
@@ -6309,8 +6329,7 @@ var init_linter5 = __esm({
 // src/targets/augment-code/lint.ts
 function lintHooks3(canonical) {
   if (!canonical.hooks || Object.keys(canonical.hooks).length === 0) return [];
-  const supportedSet = new Set(SUPPORTED_HOOK_EVENTS);
-  return Object.keys(canonical.hooks).filter((event) => !supportedSet.has(event)).map(
+  return unsupportedHookEventNames(canonical.hooks, SUPPORTED_HOOK_EVENTS).map(
     (event) => createUnsupportedHookWarning(event, "augment-code", SUPPORTED_HOOK_EVENTS, {
       unsupportedBy: "AugmentCode hooks"
     })
@@ -10315,8 +10334,7 @@ function lintCommands3(canonical) {
 function lintHooks5(canonical) {
   if (!canonical.hooks || Object.keys(canonical.hooks).length === 0) return [];
   const supported = ["PreToolUse", "PostToolUse", "Notification", "UserPromptSubmit"];
-  const supportedSet = new Set(supported);
-  const diagnostics = Object.keys(canonical.hooks).filter((event) => !supportedSet.has(event)).map(
+  const diagnostics = unsupportedHookEventNames(canonical.hooks, supported).map(
     (event) => createUnsupportedHookWarning(event, "copilot", supported, {
       unsupportedBy: "Copilot hooks"
     })
@@ -11434,7 +11452,7 @@ var init_permissions2 = __esm({
 // src/targets/cursor/hook-format.ts
 function unmappedCursorHookEvents(hooks) {
   return Object.keys(hooks).filter(
-    (event) => Array.isArray(hooks[event]) && hooks[event].length > 0 && !(event in CANONICAL_TO_CURSOR)
+    (event) => Array.isArray(hooks[event]) && hooks[event].length > 0 && !(event in CANONICAL_TO_CURSOR) && !BEST_EFFORT_HOOK_EVENTS.has(event)
   );
 }
 function toCursorHooks(hooks) {
@@ -11482,6 +11500,7 @@ function cursorHooksToCanonical(hooks) {
 var CANONICAL_TO_CURSOR, CURSOR_TO_CANONICAL;
 var init_hook_format = __esm({
   "src/targets/cursor/hook-format.ts"() {
+    init_hook_types();
     init_hook_command();
     CANONICAL_TO_CURSOR = {
       PreToolUse: "preToolUse",
@@ -13932,8 +13951,9 @@ function lintCommands6(canonical) {
 function lintHooks7(canonical) {
   if (!canonical.hooks || Object.keys(canonical.hooks).length === 0) return [];
   const supported = ["PreToolUse", "PostToolUse", "Notification"];
-  const supportedSet = new Set(supported);
-  return Object.keys(canonical.hooks).filter((event) => !supportedSet.has(event)).map((event) => createUnsupportedHookWarning(event, "gemini-cli", supported));
+  return unsupportedHookEventNames(canonical.hooks, supported).map(
+    (event) => createUnsupportedHookWarning(event, "gemini-cli", supported)
+  );
 }
 var init_lint14 = __esm({
   "src/targets/gemini-cli/lint.ts"() {
@@ -16185,8 +16205,7 @@ var init_linter20 = __esm({
 function lintHooks10(canonical) {
   if (!canonical.hooks || Object.keys(canonical.hooks).length === 0) return [];
   const supported = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "SubagentStop"];
-  const supportedSet = new Set(supported);
-  return Object.keys(canonical.hooks).filter((event) => !supportedSet.has(event)).map(
+  return unsupportedHookEventNames(canonical.hooks, supported).map(
     (event) => createUnsupportedHookWarning(event, "kiro", supported, { unsupportedBy: "Kiro hooks" })
   );
 }
@@ -21593,7 +21612,14 @@ var extendSourceSchema = z.object({
   features: z.array(featureSchema),
   /** Repo-relative POSIX path for discovery (skill packs, nested .agentsmesh). */
   path: z.string().optional(),
-  pick: extendPickSchema.optional()
+  pick: extendPickSchema.optional(),
+  /**
+   * Per-entry consent for "elevated" artifacts (`hooks`, `permissions`, `mcp`)
+   * from a remote source. These control local code execution at generate time,
+   * so for non-local extends they are stripped by default and only merged for
+   * the artifacts listed here. Local extends are trusted and ignore this field.
+   */
+  accept: z.array(z.enum(["hooks", "permissions", "mcp"])).optional()
 });
 var collaborationSchema = z.object({
   strategy: z.enum(["merge", "lock", "last-wins"]).default("merge"),
@@ -22302,7 +22328,9 @@ async function resolveExtendPaths(config, configDir, options = {}) {
         as: ext.as,
         version: fetched.version,
         path: ext.path,
-        pick: ext.pick
+        pick: ext.pick,
+        isRemote: true,
+        accept: ext.accept
       });
       continue;
     }
@@ -22319,7 +22347,9 @@ async function resolveExtendPaths(config, configDir, options = {}) {
       target: ext.target,
       as: ext.as,
       path: ext.path,
-      pick: ext.pick
+      pick: ext.pick,
+      isRemote: false,
+      accept: ext.accept
     });
   }
   return result;
@@ -23768,6 +23798,47 @@ function applyExtendPick(canonical, features, pick, extendName) {
   return next;
 }
 
+// src/install/core/elevated-artifacts.ts
+function stripUntrustedElevatedArtifacts(canonical, options) {
+  if (options.sourceKind === "local") {
+    return { canonical, stripped: [] };
+  }
+  const stripped = [];
+  let hooks = canonical.hooks;
+  let permissions = canonical.permissions;
+  let mcp = canonical.mcp;
+  if (hooks !== null && !options.acceptHooks) {
+    hooks = null;
+    stripped.push("hooks");
+  }
+  if (permissions !== null && !options.acceptPermissions) {
+    permissions = null;
+    stripped.push("permissions");
+  }
+  if (mcp !== null && !options.acceptMcp) {
+    mcp = null;
+    stripped.push("mcp");
+  }
+  if (stripped.length === 0) {
+    return { canonical, stripped: [] };
+  }
+  return {
+    canonical: { ...canonical, hooks, permissions, mcp },
+    stripped
+  };
+}
+
+// src/canonical/extends/extend-elevated.ts
+function gateExtendElevatedArtifacts(canonical, ext) {
+  const accept = ext.accept ?? [];
+  return stripUntrustedElevatedArtifacts(canonical, {
+    sourceKind: ext.isRemote ? "git" : "local",
+    acceptHooks: accept.includes("hooks"),
+    acceptPermissions: accept.includes("permissions"),
+    acceptMcp: accept.includes("mcp")
+  });
+}
+
 // src/install/pack/pack-reader.ts
 init_fs();
 var MANUAL_INSTALL_AS = ["rules", "commands", "agents", "skills"];
@@ -23917,7 +23988,14 @@ async function loadCanonicalWithExtends(config, configDir, options = {}, canonic
   for (const ext of resolvedExtends) {
     const extCanonical = await loadCanonicalForExtend(ext);
     const filtered = filterCanonicalByFeatures(extCanonical, ext.features);
-    const picked = applyExtendPick(filtered, ext.features, ext.pick, ext.name);
+    const gated = gateExtendElevatedArtifacts(filtered, ext);
+    if (gated.stripped.length > 0) {
+      const list = gated.stripped.join(", ");
+      logger.warn(
+        `[agentsmesh] Extend "${ext.name}": stripped elevated artifacts from a remote source: ${list}. Add \`accept: [${list}]\` to this extends entry in agentsmesh.yaml to keep them.`
+      );
+    }
+    const picked = applyExtendPick(gated.canonical, ext.features, ext.pick, ext.name);
     merged = mergeCanonicalFiles(merged, picked);
   }
   const packsCanonical = await loadPacksCanonical(canonicalDir);
@@ -23953,7 +24031,18 @@ function canonicalize(path) {
   try {
     return realpathSync(path);
   } catch {
-    return path;
+    let current = resolve(path);
+    const tail = [];
+    for (; ; ) {
+      const parent = dirname(current);
+      if (parent === current) return resolve(path);
+      tail.unshift(basename(current));
+      try {
+        return join(realpathSync(parent), ...tail);
+      } catch {
+        current = parent;
+      }
+    }
   }
 }
 function assertSourceInsideProjectRoot(resolvedPath, projectRoot) {
@@ -24211,7 +24300,7 @@ function lintRuleScopeInversion(input) {
   }
   return out2;
 }
-var CURRENT_GRAPH_VERSION = 1;
+var VersionSchema = z.union([z.literal(1), z.literal(2)]);
 var IdSchema = z.string().regex(/^[a-z0-9-]+$/, "id must be kebab-case");
 var DateSchema = z.string().regex(
   /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}:\d{2}(\.\d{1,3})?Z?)?$/,
@@ -24234,10 +24323,17 @@ var LessonSchema = z.object({
   evidence: z.array(z.string().min(1)),
   status: LessonStatusSchema,
   supersededBy: IdSchema.optional(),
-  createdAt: DateSchema
+  createdAt: DateSchema,
+  /**
+   * `'always'` marks an ALWAYS-ON lesson: a universal standard delivered on
+   * every task (via the UserPromptSubmit hook / a `--always` recall) rather than
+   * matched by triggers. Such a lesson needs no trigger and is excluded from
+   * triggered recall. Absent = a normal triggered lesson.
+   */
+  scope: z.literal("always").optional()
 }).strict();
 var LessonsGraphSchema = z.object({
-  version: z.literal(CURRENT_GRAPH_VERSION),
+  version: VersionSchema,
   lessons: z.record(IdSchema, LessonSchema),
   topics: z.record(IdSchema, TopicSchema),
   triggers: z.record(IdSchema, TriggerSchema)