claude-dev-env 8.106.0 → 8.106.1

package/bin/install.mjs

@@ -1064,6 +1064,7 @@ export function pruneStaleInstalledFiles(
         currentInstalledFiles.map(currentFile => comparisonKeyForPath(currentFile, options)),
     );
     const resolvedRoot = resolve(destinationRoot);
+    const resolvedRootTarget = realPathOrNull(resolvedRoot);
     let prunedCount = 0;
     const failedPaths = [];
     for (const priorFile of priorInstalledFiles) {
@@ -1072,6 +1073,17 @@ export function pruneStaleInstalledFiles(
         if (currentFileKeys.has(comparisonKeyForPath(stalePath, options))) continue;
         if (isRetainedUnmanagedPath(stalePath, managedHomeDirectory)) continue;
         if (!isMovableStaleFile(stalePath)) continue;
+        const staleTarget = realPathOrNull(stalePath);
+        if (!staleTarget || !resolvedRootTarget) {
+            failedPaths.push(stalePath);
+            continue;
+        }
+        if (!isInsideDirectory(staleTarget, resolvedRootTarget)) {
+            console.warn(
+                `  Warning: leaving ${relative(managedHomeDirectory, stalePath)} in place — a link on its path leads outside ${resolvedRoot}`,
+            );
+            continue;
+        }
         const backupRelativePath = relative(resolvedRoot, stalePath);
         const didMove = moveIntoRunBackup(
             stalePath, backupRoot, backupRelativePath, STALE_FILE_REASON_LABEL, managedHomeDirectory,
@@ -3013,6 +3025,10 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
             if (allowedSkills && !allowedSkills.has(skillDir.name)) continue;
             const skillSourceDirectory = join(skillsSource, skillDir.name);
             const skillDestinationDirectory = join(CLAUDE_HOME, MANAGED_SKILLS_DIRECTORY_NAME, skillDir.name);
+            if (lstatSync(skillDestinationDirectory, { throwIfNoEntry: false })?.isSymbolicLink()) {
+                console.log(`  = ${join(MANAGED_SKILLS_DIRECTORY_NAME, skillDir.name)} (linked skill left in place)`);
+                continue;
+            }
             const stats = copyTree(skillSourceDirectory, skillDestinationDirectory);
             skillsCreated += stats.created;
             skillsUpdated += stats.updated;

package/bin/install.prune.test.mjs

@@ -9,6 +9,8 @@ import {
     readFileSync,
     readdirSync,
     rmSync,
+    symlinkSync,
+    lstatSync,
 } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, dirname, basename } from 'node:path';
@@ -828,6 +830,49 @@ test('a fresh scoped core install includes efficient-review', () => {
     }
 });
 
+test('a full reinstall leaves a skill folder linked into another repository untouched', () => {
+    const sandbox = createSandbox();
+    const linkedRepositoryDirectory = mkdtempSync(join(tmpdir(), 'cdev-linked-skill-repo-'));
+    try {
+        runInstaller(sandbox.homeDirectory, []);
+        const linkedSkillName = 'efficient-review';
+        const repositorySkillDirectory = join(linkedRepositoryDirectory, 'skills', linkedSkillName);
+        const repositorySkillText = 'name: efficient-review\nthe repository copy\n';
+        writeFileWithParents(join(repositorySkillDirectory, 'SKILL.md'), repositorySkillText);
+        const skillLinkPath = join(sandbox.skillsDirectory, linkedSkillName);
+        rmSync(skillLinkPath, { recursive: true, force: true });
+        symlinkSync(repositorySkillDirectory, skillLinkPath, 'junction');
+
+        const installerOutput = runInstallerReadingBothStreams(sandbox.homeDirectory, []);
+
+        assert.equal(lstatSync(skillLinkPath).isSymbolicLink(), true, 'the skill link stays a link');
+        assert.equal(
+            readFileSync(join(repositorySkillDirectory, 'SKILL.md'), 'utf8'),
+            repositorySkillText,
+            'the repository SKILL.md keeps its own text',
+        );
+        assert.deepEqual(
+            readdirSync(repositorySkillDirectory),
+            ['SKILL.md'],
+            'the install writes no package file into the linked repository',
+        );
+        assert.equal(
+            prunedSkillBackupContains(sandbox.claudeDirectory, join(linkedSkillName, 'SKILL.md')),
+            false,
+            'the stale prune moves no file out of the linked repository',
+        );
+        assert.match(installerOutput, /skills[\\/]efficient-review \(linked skill left in place\)/);
+        assert.equal(
+            readManifest(sandbox.manifestPath).files.some(recordedPath => recordedPath.includes(linkedSkillName)),
+            false,
+            'the manifest records no file under the linked skill',
+        );
+    } finally {
+        rmSync(sandbox.homeDirectory, { recursive: true, force: true });
+        rmSync(linkedRepositoryDirectory, { recursive: true, force: true });
+    }
+});
+
 test('a fresh scoped core install ships active skills and omits retired skills', () => {
     const sandbox = createSandbox();
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.106.0",
+    "version": "8.106.1",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {