loadout-ai 0.2.2 → 0.2.3

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.2.3 - 2026-07-17
+
+### Fixed
+
+- Validate large rollback snapshots in linear, constant-stack time so project-aware activation can safely snapshot large reviewed skills.
+- Preserve strict malformed-base64 rejection without relying on a stack-intensive regular expression.
+- Rewrite every generated Graphify top-level lookup, repair, and optional Gemini install to the reviewed hashed artifact instead of leaving unpinned package fallbacks.
+
 ## 0.2.2 - 2026-07-17
 
 ### Fixed

package/dist/src/cli.js

@@ -262,7 +262,7 @@ async function runSetup(options) {
         reader?.close();
     }
 }
-const LOADOUT_VERSION = "0.2.2";
+const LOADOUT_VERSION = "0.2.3";
 function durableSchedulerLauncher() {
     return [
         join(dirname(process.execPath), process.platform === "win32" ? "npx.cmd" : "npx"),

package/dist/src/core/runtime-tool-recipe.js

@@ -118,7 +118,14 @@ const generatedFilesSchema = z
         .object({
         fileExtension: z.string().regex(/^\.[A-Za-z0-9]+$/),
         from: nonControlTextSchema,
-        to: nonControlTextSchema.refine((value) => !/[{}]/u.test(value.replaceAll("{artifactRequirement}", "")), "unknown rewrite template variable"),
+        to: nonControlTextSchema.refine((value) => {
+            const rendered = [
+                "{artifactRequirement}",
+                "{artifactUrl}",
+                "{artifactSha256}",
+            ].reduce((current, placeholder) => current.replaceAll(placeholder, ""), value);
+            return !/[{}]/u.test(rendered);
+        }, "unknown rewrite template variable"),
         mustEliminate: z.boolean(),
     })
         .strict()),
@@ -306,6 +313,8 @@ export function runtimeArtifactRequirement(recipe) {
 export function renderRuntimeRecipeValue(value, recipe) {
     return value
         .replaceAll("{artifactRequirement}", runtimeArtifactRequirement(recipe))
+        .replaceAll("{artifactUrl}", recipe.artifactUrl)
+        .replaceAll("{artifactSha256}", recipe.artifactSha256)
         .replaceAll("{version}", recipe.version);
 }
 /** Resolve reviewed path segments without ever accepting a recipe-owned root. */

package/dist/src/core/runtime-tools.js

@@ -162,6 +162,24 @@ export const GRAPHIFY_RECIPE = deepFreeze(parseRuntimeToolRecipe({
                 to: "--from '{artifactRequirement}'",
                 mustEliminate: true,
             },
+            {
+                fileExtension: ".md",
+                from: "install --upgrade graphifyy",
+                to: "install '{artifactRequirement}' --exclude-newer 2026-07-17T00:00:00Z",
+                mustEliminate: true,
+            },
+            {
+                fileExtension: ".md",
+                from: "pip install graphifyy",
+                to: "pip install '{artifactRequirement}'",
+                mustEliminate: true,
+            },
+            {
+                fileExtension: ".md",
+                from: "pip install 'graphifyy[gemini]'",
+                to: "pip install 'graphifyy[gemini] @ {artifactUrl}#sha256={artifactSha256}'",
+                mustEliminate: true,
+            },
         ],
     },
     guarantees: [
@@ -169,7 +187,7 @@ export const GRAPHIFY_RECIPE = deepFreeze(parseRuntimeToolRecipe({
         "exact top-level wheel URL and SHA-256; dependency uploads bounded by the reviewed cutoff",
         "no API keys or provider credentials inherited by installer subprocesses",
         "agent skill targets and isolated runtime are snapshotted for rollback/removal",
-        "generated runtime lookup is rewritten to the same pinned Graphify artifact",
+        "generated top-level Graphify lookups and repair commands are rewritten to the same pinned artifact",
     ],
 }));
 export const REVIEWED_RUNTIME_TOOLS = [GRAPHIFY_RECIPE];

package/dist/src/core/snapshot.js

@@ -205,6 +205,19 @@ export function validateSnapshot(value) {
     return value;
 }
 function isCanonicalBase64(value) {
-    return (value.length % 4 === 0 &&
-        /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value));
+    if (value.length % 4 !== 0)
+        return false;
+    const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+    const contentLength = value.length - padding;
+    for (let index = 0; index < contentLength; index += 1) {
+        const code = value.charCodeAt(index);
+        const valid = (code >= 65 && code <= 90) ||
+            (code >= 97 && code <= 122) ||
+            (code >= 48 && code <= 57) ||
+            code === 43 ||
+            code === 47;
+        if (!valid)
+            return false;
+    }
+    return value.slice(contentLength) === "=".repeat(padding);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loadout-ai",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "private": false,
   "license": "MIT",
   "description": "Universal upgrade manager for AI coding agents",