akm-cli 0.0.19 → 0.0.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +64 -182
- package/dist/asset-spec.js +6 -0
- package/dist/config.js +4 -1
- package/dist/metadata.js +2 -6
- package/dist/stash-resolve.js +32 -2
- package/dist/stash-search.js +2 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -10,167 +10,97 @@ A package manager for AI agent capabilities -- scripts, skills, commands,
|
|
|
10
10
|
agents, and knowledge -- that works with any AI coding assistant that can run
|
|
11
11
|
shell commands.
|
|
12
12
|
|
|
13
|
-
|
|
14
|
-
**stash**, shares them as installable **kits** via **registries**, and gives
|
|
15
|
-
any model a way to discover and use them. No plugins required -- just CLI
|
|
16
|
-
output any tool-calling model can read.
|
|
13
|
+
## Install
|
|
17
14
|
|
|
18
|
-
|
|
15
|
+
```sh
|
|
16
|
+
# Standalone binary (no runtime dependencies)
|
|
17
|
+
curl -fsSL https://raw.githubusercontent.com/itlackey/agentikit/main/install.sh | bash
|
|
19
18
|
|
|
20
|
-
|
|
21
|
-
|
|
19
|
+
# Or via Bun
|
|
20
|
+
bun install -g akm-cli
|
|
21
|
+
```
|
|
22
22
|
|
|
23
|
-
|
|
24
|
-
> bundles everything and has no runtime dependencies.
|
|
23
|
+
Upgrade in place with `akm upgrade`.
|
|
25
24
|
|
|
26
25
|
## Quick Start
|
|
27
26
|
|
|
28
27
|
```sh
|
|
29
|
-
#
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
#
|
|
33
|
-
akm init
|
|
34
|
-
|
|
35
|
-
# Add a kit from GitHub
|
|
36
|
-
akm add github:owner/repo
|
|
37
|
-
|
|
38
|
-
# Clone an asset to a specific directory
|
|
39
|
-
akm clone script:deploy.sh --dest ./project/.claude
|
|
40
|
-
|
|
41
|
-
# Search for assets
|
|
42
|
-
akm search "deploy"
|
|
43
|
-
|
|
44
|
-
# Show an asset
|
|
45
|
-
akm show script:deploy.sh
|
|
28
|
+
akm init # Initialize your stash
|
|
29
|
+
akm add github:owner/repo # Add a kit from GitHub
|
|
30
|
+
akm search "deploy" # Find assets
|
|
31
|
+
akm show script:deploy.sh # View details and run command
|
|
46
32
|
```
|
|
47
33
|
|
|
48
|
-
##
|
|
49
|
-
|
|
50
|
-
`akm` is platform agnostic. Any model that can execute shell commands can search
|
|
51
|
-
your stash and use what it finds. The workflow is three commands:
|
|
52
|
-
|
|
53
|
-
1. `akm search "what you need"` -- find relevant assets (returns JSON by default)
|
|
54
|
-
2. `akm show <ref>` -- get the details (run command, instructions, prompt, etc.)
|
|
55
|
-
3. Use the asset -- execute the `run` command, follow the skill instructions, fill in the template
|
|
34
|
+
## Features
|
|
56
35
|
|
|
57
|
-
###
|
|
36
|
+
### Works with Any AI Agent
|
|
58
37
|
|
|
59
|
-
|
|
60
|
-
|
|
38
|
+
Any model that can run shell commands can use `akm`. Add this to your
|
|
39
|
+
`AGENTS.md`, `CLAUDE.md`, or system prompt:
|
|
61
40
|
|
|
62
41
|
~~~markdown
|
|
63
42
|
## Resources & Capabilities
|
|
64
43
|
|
|
65
|
-
You have access to a searchable library of scripts, skills, commands, agents,
|
|
66
|
-
|
|
67
|
-
Use `akm -h` for more information about searching and using assets.
|
|
44
|
+
You have access to a searchable library of scripts, skills, commands, agents,
|
|
45
|
+
and knowledge documents via the `akm` CLI. Use `akm -h` for details.
|
|
68
46
|
~~~
|
|
69
47
|
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
### Platform plugins (optional)
|
|
48
|
+
No plugins, SDKs, or integration code required. Platform-specific plugins
|
|
49
|
+
(e.g., [OpenCode](https://github.com/itlackey/akm-plugins?tab=readme-ov-file#opencode))
|
|
50
|
+
are available for tighter integration but purely optional.
|
|
74
51
|
|
|
75
|
-
|
|
76
|
-
native tool bindings so the agent doesn't need to shell out, but they're
|
|
77
|
-
purely optional -- the CLI works everywhere.
|
|
52
|
+
### Clone Assets Anywhere
|
|
78
53
|
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
```json
|
|
82
|
-
{
|
|
83
|
-
"plugin": ["akm-opencode"]
|
|
84
|
-
}
|
|
85
|
-
```
|
|
86
|
-
|
|
87
|
-
**Claude Code** -- Add the prompt snippet above to your `CLAUDE.md` or
|
|
88
|
-
project instructions. Claude Code can run `akm` commands directly.
|
|
89
|
-
|
|
90
|
-
**Everything else** -- If your agent can run shell commands, it can use `akm`.
|
|
91
|
-
Add the prompt snippet above or in [AGENTS.md](docs/AGENTS.md) to whatever instruction/rules mechanism your platform uses.
|
|
92
|
-
|
|
93
|
-
## The Stash
|
|
94
|
-
|
|
95
|
-
Your stash is the local library where assets live. It combines three sources
|
|
96
|
-
in priority order:
|
|
97
|
-
|
|
98
|
-
1. **Primary stash** -- Your personal assets (`AKM_STASH_DIR`), created by `akm init`
|
|
99
|
-
2. **Search paths** -- Additional directories (team shares, project dirs, etc.)
|
|
100
|
-
3. **Installed kits** -- Kits from npm, GitHub, or git via `akm add` (cache-managed)
|
|
101
|
-
|
|
102
|
-
The first match wins, so local assets always override installed ones. Use
|
|
103
|
-
`akm clone` to fork an installed asset into your stash for editing.
|
|
104
|
-
|
|
105
|
-
## Registries
|
|
106
|
-
|
|
107
|
-
Registries are indexes of available kits. akm ships with the official
|
|
108
|
-
[akm-registry](https://github.com/itlackey/akm-registry) pre-configured.
|
|
54
|
+
`akm clone` copies any asset from your stash or a remote source into a
|
|
55
|
+
target directory for local editing:
|
|
109
56
|
|
|
110
57
|
```sh
|
|
111
|
-
#
|
|
112
|
-
akm
|
|
113
|
-
|
|
114
|
-
#
|
|
115
|
-
akm registry add https://example.com/registry/index.json --name team
|
|
116
|
-
|
|
117
|
-
# List configured registries
|
|
118
|
-
akm registry list
|
|
58
|
+
akm clone script:deploy.sh # Clone to your stash
|
|
59
|
+
akm clone script:deploy.sh --dest ./project/.claude # Clone to a specific directory
|
|
60
|
+
akm clone script:deploy.sh --name my-deploy.sh # Clone with a new name
|
|
61
|
+
akm clone "npm:@scope/pkg//script:deploy.sh" --force # Clone from a remote package
|
|
119
62
|
```
|
|
120
63
|
|
|
121
|
-
|
|
122
|
-
|
|
64
|
+
Key behaviors:
|
|
65
|
+
- Type subdirectories are appended automatically (e.g., `--dest ./project/.claude` becomes `./project/.claude/scripts/deploy.sh`)
|
|
66
|
+
- Skills clone as entire directories; scripts/commands clone as single files
|
|
67
|
+
- Remote packages are fetched on-demand without registering as installed kits
|
|
68
|
+
- `--force` overwrites existing assets
|
|
123
69
|
|
|
124
|
-
|
|
70
|
+
### skills.sh Integration
|
|
125
71
|
|
|
126
|
-
|
|
127
|
-
|
|
72
|
+
`akm` includes [skills.sh](https://skills.sh) as a built-in registry. Community
|
|
73
|
+
skills from skills.sh are searchable out of the box alongside the official
|
|
74
|
+
registry -- no setup required:
|
|
128
75
|
|
|
129
76
|
```sh
|
|
130
|
-
akm search "
|
|
77
|
+
akm search "code review" # Searches skills.sh and official registry
|
|
78
|
+
akm registry search "code review" # Search registries directly
|
|
131
79
|
```
|
|
132
80
|
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
"hits": [
|
|
136
|
-
{
|
|
137
|
-
"name": "docker-build",
|
|
138
|
-
"type": "script",
|
|
139
|
-
"description": "Build and push Docker images",
|
|
140
|
-
"action": "akm show script:docker-build.sh -> execute the run command"
|
|
141
|
-
}
|
|
142
|
-
]
|
|
143
|
-
}
|
|
144
|
-
```
|
|
81
|
+
Results include install counts and link back to skills.sh for details. The
|
|
82
|
+
provider caches queries for 15 minutes with a 24-hour stale fallback.
|
|
145
83
|
|
|
146
|
-
|
|
84
|
+
### Registries and Private Registry Support
|
|
147
85
|
|
|
148
|
-
|
|
149
|
-
akm
|
|
150
|
-
```
|
|
151
|
-
|
|
152
|
-
```json
|
|
153
|
-
{
|
|
154
|
-
"type": "script",
|
|
155
|
-
"name": "docker-build.sh",
|
|
156
|
-
"origin": null,
|
|
157
|
-
"action": "Execute the run command below",
|
|
158
|
-
"run": "bash /path/to/scripts/docker-build.sh",
|
|
159
|
-
"setup": "bun install",
|
|
160
|
-
"cwd": "/path/to/scripts"
|
|
161
|
-
}
|
|
162
|
-
```
|
|
163
|
-
|
|
164
|
-
For knowledge assets, navigate without loading the entire document:
|
|
86
|
+
Registries are indexes of available kits. The official
|
|
87
|
+
[akm-registry](https://github.com/itlackey/akm-registry) is pre-configured.
|
|
165
88
|
|
|
166
89
|
```sh
|
|
167
|
-
akm
|
|
168
|
-
akm
|
|
90
|
+
akm registry search "code review" # Search registries
|
|
91
|
+
akm registry add https://example.com/registry/index.json --name team # Add a registry
|
|
92
|
+
akm registry list # List configured registries
|
|
169
93
|
```
|
|
170
94
|
|
|
171
|
-
|
|
95
|
+
Private access is supported through:
|
|
96
|
+
- **GitHub tokens** -- Set `GITHUB_TOKEN` to access private GitHub repos when installing kits
|
|
97
|
+
- **Provider options** -- Each registry entry supports an `options` field for provider-specific configuration (tokens, custom headers)
|
|
98
|
+
- **Pluggable providers** -- Custom registry providers can implement their own authentication
|
|
99
|
+
|
|
100
|
+
See the [Registry docs](docs/registry.md) for hosting your own registry and
|
|
101
|
+
the v2 index format.
|
|
172
102
|
|
|
173
|
-
Install
|
|
103
|
+
### Install Kits from Anywhere
|
|
174
104
|
|
|
175
105
|
```sh
|
|
176
106
|
akm add @scope/my-kit # npm
|
|
@@ -179,75 +109,27 @@ akm add git+https://gitlab.com/org/kit # Any git repo
|
|
|
179
109
|
akm add ./path/to/local/kit # Local directory
|
|
180
110
|
```
|
|
181
111
|
|
|
182
|
-
Manage
|
|
183
|
-
|
|
184
|
-
```sh
|
|
185
|
-
akm list # Show installed kits with status
|
|
186
|
-
akm update --all # Update all (reports version changes)
|
|
187
|
-
akm remove owner/repo # Remove and reindex
|
|
188
|
-
akm clone script:deploy.sh # Fork an asset into your stash for editing
|
|
189
|
-
```
|
|
112
|
+
Manage kits with `akm list`, `akm update --all`, and `akm remove`.
|
|
190
113
|
|
|
191
|
-
###
|
|
114
|
+
### Publish Your Own Kit
|
|
192
115
|
|
|
193
|
-
1. Organize your assets
|
|
194
|
-
2. Add `"akm"` to `keywords` in `package.json` or
|
|
116
|
+
1. Organize your assets into a directory
|
|
117
|
+
2. Add `"akm"` to `keywords` in `package.json` or the `akm` topic to your GitHub repo
|
|
195
118
|
3. Optionally add `akm.include` in `package.json` to control what gets installed
|
|
196
119
|
4. Publish to npm or push to GitHub
|
|
197
120
|
|
|
198
121
|
See the [Kit Maker's Guide](docs/kit-makers.md) for a full walkthrough.
|
|
199
122
|
|
|
200
|
-
## Installation
|
|
201
|
-
|
|
202
|
-
`akm` requires [Bun](https://bun.sh) v1.0+ as its runtime. It uses Bun-specific
|
|
203
|
-
APIs (`bun:sqlite`) that are not available in Node.js.
|
|
204
|
-
|
|
205
|
-
```sh
|
|
206
|
-
# Install Bun if you don't have it
|
|
207
|
-
curl -fsSL https://bun.sh/install | bash
|
|
208
|
-
|
|
209
|
-
# Install akm
|
|
210
|
-
bun install -g akm-cli
|
|
211
|
-
```
|
|
212
|
-
|
|
213
|
-
### Standalone binary
|
|
214
|
-
|
|
215
|
-
The standalone binary bundles everything and has **no runtime dependencies** --
|
|
216
|
-
no Bun, no Node.js.
|
|
217
|
-
|
|
218
|
-
```sh
|
|
219
|
-
# macOS / Linux
|
|
220
|
-
curl -fsSL https://raw.githubusercontent.com/itlackey/agentikit/main/install.sh | bash
|
|
221
|
-
|
|
222
|
-
# Windows (PowerShell)
|
|
223
|
-
irm https://raw.githubusercontent.com/itlackey/agentikit/main/install.ps1 -OutFile install.ps1; ./install.ps1
|
|
224
|
-
```
|
|
225
|
-
|
|
226
|
-
The shell installer verifies the binary against release checksums.
|
|
227
|
-
|
|
228
|
-
Upgrade the binary in place:
|
|
229
|
-
|
|
230
|
-
```sh
|
|
231
|
-
akm upgrade # Download and replace the running binary
|
|
232
|
-
akm upgrade --check # Check for updates without installing
|
|
233
|
-
```
|
|
234
|
-
|
|
235
123
|
## Documentation
|
|
236
124
|
|
|
237
125
|
| Doc | Description |
|
|
238
126
|
| --- | --- |
|
|
239
127
|
| [Getting Started](docs/getting-started.md) | Quick setup guide |
|
|
240
|
-
| [CLI Reference](docs/cli.md) | All
|
|
241
|
-
| [Configuration](docs/configuration.md) |
|
|
242
|
-
| [Concepts](docs/concepts.md) | Asset types, classification, stash
|
|
243
|
-
| [Kit Maker's Guide](docs/kit-makers.md) | Build and share
|
|
244
|
-
| [Registry](docs/registry.md) | Registries, search, and
|
|
245
|
-
|
|
246
|
-
## Status
|
|
247
|
-
|
|
248
|
-
`akm` is approaching v1.0. The core CLI, stash model, and registry are generally stable
|
|
249
|
-
and in daily use. Feedback, issues, and PRs welcome -- especially around
|
|
250
|
-
real-world usage patterns and integrations with different AI coding assistants.
|
|
128
|
+
| [CLI Reference](docs/cli.md) | All commands and flags |
|
|
129
|
+
| [Configuration](docs/configuration.md) | Settings, providers, and Ollama setup |
|
|
130
|
+
| [Concepts](docs/concepts.md) | Asset types, classification, stash model |
|
|
131
|
+
| [Kit Maker's Guide](docs/kit-makers.md) | Build and share kits |
|
|
132
|
+
| [Registry](docs/registry.md) | Registries, search, and the v2 index format |
|
|
251
133
|
|
|
252
134
|
## License
|
|
253
135
|
|
package/dist/asset-spec.js
CHANGED
|
@@ -65,6 +65,12 @@ export function isRelevantAssetFile(assetType, fileName) {
|
|
|
65
65
|
export function deriveCanonicalAssetName(assetType, typeRoot, filePath) {
|
|
66
66
|
return ASSET_SPECS[assetType].toCanonicalName(typeRoot, filePath);
|
|
67
67
|
}
|
|
68
|
+
export function deriveCanonicalAssetNameFromStashRoot(assetType, stashRoot, filePath) {
|
|
69
|
+
const relPath = toPosix(path.relative(stashRoot, filePath));
|
|
70
|
+
const firstSegment = relPath.split("/").filter(Boolean)[0];
|
|
71
|
+
const typeRoot = firstSegment === TYPE_DIRS[assetType] ? path.join(stashRoot, firstSegment) : stashRoot;
|
|
72
|
+
return deriveCanonicalAssetName(assetType, typeRoot, filePath);
|
|
73
|
+
}
|
|
68
74
|
export function resolveAssetPathFromName(assetType, typeRoot, name) {
|
|
69
75
|
return ASSET_SPECS[assetType].toAssetPath(typeRoot, name);
|
|
70
76
|
}
|
package/dist/config.js
CHANGED
|
@@ -5,7 +5,10 @@ import { getConfigDir as _getConfigDir, getConfigPath as _getConfigPath } from "
|
|
|
5
5
|
export const DEFAULT_CONFIG = {
|
|
6
6
|
semanticSearch: true,
|
|
7
7
|
searchPaths: [],
|
|
8
|
-
registries: [
|
|
8
|
+
registries: [
|
|
9
|
+
{ url: "https://raw.githubusercontent.com/itlackey/akm-registry/main/index.json", name: "official" },
|
|
10
|
+
{ url: "https://skills.sh", name: "skills.sh", provider: "skills-sh" },
|
|
11
|
+
],
|
|
9
12
|
output: {
|
|
10
13
|
format: "json",
|
|
11
14
|
detail: "brief",
|
package/dist/metadata.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import fs from "node:fs";
|
|
2
2
|
import path from "node:path";
|
|
3
|
-
import { deriveCanonicalAssetName,
|
|
3
|
+
import { deriveCanonicalAssetName, deriveCanonicalAssetNameFromStashRoot, isRelevantAssetFile } from "./asset-spec";
|
|
4
4
|
import { isAssetType } from "./common";
|
|
5
5
|
import { buildFileContext, buildRenderContext, getRenderer, runMatchers } from "./file-context";
|
|
6
6
|
import { parseFrontmatter, toStringOrUndefined } from "./frontmatter";
|
|
@@ -204,8 +204,6 @@ export function generateMetadata(dirPath, assetType, files, typeRoot = dirPath)
|
|
|
204
204
|
}
|
|
205
205
|
return { entries };
|
|
206
206
|
}
|
|
207
|
-
/** Set of all known type directory names (e.g. "scripts", "skills", "agents") */
|
|
208
|
-
const TYPE_DIR_NAMES = new Set(Object.values(TYPE_DIRS));
|
|
209
207
|
/**
|
|
210
208
|
* Generate metadata for files using the matcher system instead of a fixed asset type.
|
|
211
209
|
*
|
|
@@ -227,11 +225,9 @@ export function generateMetadataFlat(stashRoot, files) {
|
|
|
227
225
|
// If the file lives under a known type directory, use that as the root
|
|
228
226
|
// for canonical naming so names don't include the type prefix.
|
|
229
227
|
// e.g. scripts/deploy.sh → "deploy.sh" not "scripts/deploy.sh"
|
|
230
|
-
const firstAncestor = ctx.ancestorDirs[0];
|
|
231
|
-
const effectiveRoot = firstAncestor && TYPE_DIR_NAMES.has(firstAncestor) ? path.join(stashRoot, firstAncestor) : stashRoot;
|
|
232
228
|
const ext = path.extname(file).toLowerCase();
|
|
233
229
|
const baseName = path.basename(file, ext);
|
|
234
|
-
const canonicalName =
|
|
230
|
+
const canonicalName = deriveCanonicalAssetNameFromStashRoot(assetType, stashRoot, file) ?? baseName;
|
|
235
231
|
const entry = {
|
|
236
232
|
name: canonicalName,
|
|
237
233
|
type: assetType,
|
package/dist/stash-resolve.js
CHANGED
|
@@ -1,13 +1,25 @@
|
|
|
1
1
|
import fs from "node:fs";
|
|
2
2
|
import path from "node:path";
|
|
3
|
-
import { isRelevantAssetFile, resolveAssetPathFromName, TYPE_DIRS } from "./asset-spec";
|
|
3
|
+
import { deriveCanonicalAssetNameFromStashRoot, isRelevantAssetFile, resolveAssetPathFromName, TYPE_DIRS, } from "./asset-spec";
|
|
4
4
|
import { hasErrnoCode, isWithin } from "./common";
|
|
5
5
|
import { NotFoundError, UsageError } from "./errors";
|
|
6
|
+
import { runMatchers } from "./file-context";
|
|
7
|
+
import { walkStashFlat } from "./walker";
|
|
6
8
|
/**
|
|
7
9
|
* Resolve an asset path from a stash directory, type, and name.
|
|
8
10
|
*/
|
|
9
11
|
export function resolveAssetPath(stashDir, type, name) {
|
|
10
|
-
|
|
12
|
+
try {
|
|
13
|
+
return resolveInTypeDir(stashDir, TYPE_DIRS[type], type, name);
|
|
14
|
+
}
|
|
15
|
+
catch (error) {
|
|
16
|
+
if (!(error instanceof NotFoundError))
|
|
17
|
+
throw error;
|
|
18
|
+
const fallback = resolveByCanonicalName(stashDir, type, name);
|
|
19
|
+
if (fallback)
|
|
20
|
+
return fallback;
|
|
21
|
+
throw error;
|
|
22
|
+
}
|
|
11
23
|
}
|
|
12
24
|
/**
|
|
13
25
|
* Try to resolve an asset path within a specific type directory.
|
|
@@ -53,3 +65,21 @@ function readTypeRootStat(root, type, name) {
|
|
|
53
65
|
throw error;
|
|
54
66
|
}
|
|
55
67
|
}
|
|
68
|
+
function resolveByCanonicalName(stashDir, type, name) {
|
|
69
|
+
const normalizedName = name.replace(/\\/g, "/");
|
|
70
|
+
for (const ctx of walkStashFlat(stashDir)) {
|
|
71
|
+
const match = runMatchers(ctx);
|
|
72
|
+
if (!match || match.type !== type)
|
|
73
|
+
continue;
|
|
74
|
+
const canonicalName = deriveCanonicalAssetNameFromStashRoot(type, stashDir, ctx.absPath);
|
|
75
|
+
if (canonicalName !== normalizedName)
|
|
76
|
+
continue;
|
|
77
|
+
const realTarget = fs.realpathSync(ctx.absPath);
|
|
78
|
+
const resolvedRoot = fs.realpathSync(stashDir);
|
|
79
|
+
if (!isWithin(realTarget, resolvedRoot)) {
|
|
80
|
+
throw new UsageError("Ref resolves outside the stash root.");
|
|
81
|
+
}
|
|
82
|
+
return realTarget;
|
|
83
|
+
}
|
|
84
|
+
return undefined;
|
|
85
|
+
}
|
package/dist/stash-search.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import fs from "node:fs";
|
|
2
2
|
import path from "node:path";
|
|
3
|
-
import {
|
|
3
|
+
import { deriveCanonicalAssetNameFromStashRoot } from "./asset-spec";
|
|
4
4
|
import { loadConfig } from "./config";
|
|
5
5
|
import { closeDatabase, getAllEntries, getEntryById, getEntryCount, getMeta, openDatabase, searchFts, searchVec, } from "./db";
|
|
6
6
|
import { UsageError } from "./errors";
|
|
@@ -303,8 +303,7 @@ function substringSearch(query, searchType, limit, stashDir, sources, config) {
|
|
|
303
303
|
// ── Hit building ────────────────────────────────────────────────────────────
|
|
304
304
|
function buildDbHit(input) {
|
|
305
305
|
const entryStashDir = findSourceForPath(input.path, input.sources)?.path ?? input.defaultStashDir;
|
|
306
|
-
const
|
|
307
|
-
const canonical = deriveCanonicalAssetName(input.entry.type, typeRoot, input.path);
|
|
306
|
+
const canonical = deriveCanonicalAssetNameFromStashRoot(input.entry.type, entryStashDir, input.path);
|
|
308
307
|
// Guard against path traversal when the file is outside the expected type root
|
|
309
308
|
// (e.g. source detection fell back to defaultStashDir for a file from another source)
|
|
310
309
|
const refName = canonical && !canonical.startsWith("../") && !canonical.startsWith("..\\") ? canonical : input.entry.name;
|