jupytermind 0.3.0 → 0.3.1

package/bin/ai-data-scientist.js

@@ -29,6 +29,20 @@ const VENV_PYTHON = path.join(
 );
 const PYPROJECT_PATH = path.join(PACKAGE_ROOT, "pyproject.toml");
 const MARKER_PATH = path.join(VENV_DIR, ".ai-data-scientist-setup-complete.json");
+const SKILLS_SOURCE_DIR = path.join(PACKAGE_ROOT, ".github", "skills");
+const SKILL_ALLOWLIST = Object.freeze([
+  "ai-data-scientist",
+  "ai-chemistry-scientist",
+  "ai-genomics-scientist",
+  "ai-materials-scientist",
+  "ai-structural-biology-scientist",
+  "ai-scientist",
+  "tech-writer",
+  "japanese-prose",
+  "presentation-planner",
+]);
+
+class SkillDeployError extends Error {}
 
 function log(message) {
   process.stderr.write(`[ai-data-scientist] ${message}\n`);
@@ -66,6 +80,128 @@ function readMarker() {
   }
 }
 
+function realpathNative(targetPath) {
+  return fs.realpathSync.native(targetPath);
+}
+
+function isContained(candidateReal, rootReal) {
+  return candidateReal === rootReal || candidateReal.startsWith(rootReal + path.sep);
+}
+
+function lstatIfExists(targetPath) {
+  try {
+    return fs.lstatSync(targetPath);
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    throw err;
+  }
+}
+
+// Walks `targetDir` upward to the nearest already-existing ancestor and
+// verifies that ancestor's real path is contained within `cwdReal` before
+// anything beneath it may be created.
+function resolveContainedAncestor(targetDir, cwdReal) {
+  let current = targetDir;
+  while (!fs.existsSync(current)) {
+    const parent = path.dirname(current);
+    if (parent === current) {
+      throw new SkillDeployError(`No existing ancestor directory found for ${targetDir}`);
+    }
+    current = parent;
+  }
+  const existingAncestorReal = realpathNative(current);
+  if (!isContained(existingAncestorReal, cwdReal)) {
+    throw new SkillDeployError(
+      `Refusing to use ${current} as an ancestor of ${targetDir}: it resolves ` +
+        `outside the current working directory (${existingAncestorReal})`
+    );
+  }
+  const missingComponents =
+    targetDir === current
+      ? []
+      : path.relative(current, targetDir).split(path.sep).filter(Boolean);
+  return { existingAncestorPath: current, existingAncestorReal, missingComponents };
+}
+
+// Creates `targetDir` one path segment at a time, re-verifying containment
+// against `cwdReal` after creating each segment, before descending to the
+// next one. Returns `targetDir`'s own verified real path.
+function ensureContainedDir(targetDir, cwdReal) {
+  const { existingAncestorPath, missingComponents } = resolveContainedAncestor(targetDir, cwdReal);
+  let currentPath = existingAncestorPath;
+  for (const component of missingComponents) {
+    currentPath = path.join(currentPath, component);
+    fs.mkdirSync(currentPath);
+    const currentReal = realpathNative(currentPath);
+    if (!isContained(currentReal, cwdReal)) {
+      throw new SkillDeployError(
+        `Refusing to continue past ${currentPath}: it resolves outside the ` +
+          `current working directory (${currentReal})`
+      );
+    }
+  }
+  return realpathNative(targetDir);
+}
+
+/** @id CODE-AIDS-148
+ * @implements REQ-AIDS-097
+ * @design DES-AIDS-095
+ */
+// Deploys the 9 allowlisted skills from the installed package's
+// `.github/skills/` into `<cwd>/.github/skills/`. Runs a full preflight of
+// all 9 destinations (symlink-identity rejection plus canonical-skills-root
+// containment) before removing or copying any of them, so a failure on a
+// later skill never destroys an earlier, already-verified one.
+function deploySkills() {
+  const cwd = process.cwd();
+  const cwdReal = realpathNative(cwd);
+  const skillsRootReal = ensureContainedDir(path.join(cwd, ".github", "skills"), cwdReal);
+
+  const plan = [];
+  for (const name of SKILL_ALLOWLIST) {
+    const destination = path.join(skillsRootReal, name);
+    const lst = lstatIfExists(destination);
+    if (lst) {
+      if (lst.isSymbolicLink()) {
+        throw new SkillDeployError(
+          `Refusing to deploy skill "${name}": destination ${destination} is itself a symlink`
+        );
+      }
+      const destinationReal = realpathNative(destination);
+      if (!isContained(destinationReal, skillsRootReal)) {
+        throw new SkillDeployError(
+          `Refusing to deploy skill "${name}": destination ${destination} resolves ` +
+            `outside the skills root (${destinationReal})`
+        );
+      }
+    }
+    plan.push({ name, destination });
+  }
+
+  for (const { name, destination } of plan) {
+    const source = path.join(SKILLS_SOURCE_DIR, name);
+    if (fs.existsSync(destination)) {
+      fs.rmSync(destination, { recursive: true, force: true });
+    }
+    fs.cpSync(source, destination, { recursive: true });
+    log(`Deployed skill "${name}" to ${destination}`);
+  }
+}
+
+/** @id CODE-AIDS-149
+ * @implements REQ-AIDS-097
+ * @design DES-AIDS-095
+ */
+// Verifies the application Python modules the 9 deployed skills' documented
+// entry points depend on are importable from the bootstrap venv.
+function verifySkillPythonModules() {
+  run(VENV_PYTHON, [
+    "-c",
+    "import ai_data_scientist, ai_chemistry_scientist, ai_genomics_scientist, " +
+      "ai_materials_scientist, ai_structural_biology_scientist, ai_scientist",
+  ]);
+}
+
 function isSetupCurrent() {
   if (!fs.existsSync(VENV_PYTHON)) return false;
   const marker = readMarker();
@@ -102,6 +238,8 @@ function main() {
   ensureSetup();
 
   if (!command || command === "setup") {
+    deploySkills();
+    verifySkillPythonModules();
     log("Environment ready (環境は準備済みです).");
     return;
   }

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "jupytermind",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "GitHub Copilot Agent Skill: AI Data Scientist over Jupyter MCP (npm bootstrap for the Python implementation)",
   "license": "MIT",
   "bin": {
-    "ai-data-scientist": "bin/ai-data-scientist.js"
+    "ai-data-scientist": "bin/ai-data-scientist.js",
+    "jupytermind": "bin/ai-data-scientist.js"
   },
   "files": [
     "bin",