loadout-ai 0.5.8 → 0.6.0

package/dist/src/core/skills.js

@@ -62,19 +62,18 @@ export async function discoverSkillDirectories(root, options = {}) {
             // are validated as content, not recursively treated as additional skills.
             return;
         }
+        // This loop only runs for directories that are NOT a skill root (a SKILL.md
+        // directory returns above). Symlinks encountered while walking the repository
+        // tree toward skill roots are skipped. Symlinks *inside* a skill package are
+        // rejected by validateSkillDirectory -> scanSkillSecurity at the return above,
+        // which fails closed on any nested symlink before the package is copied.
         for (const entry of entries) {
             if (entry === ".git" || entry === "node_modules")
                 continue;
             const child = join(directory, entry);
             const childStat = await lstat(child);
-            // Repositories may contain unrelated symlinked documentation or metadata.
-            // Ignore those while walking, but validate and reject symlinks inside an
-            // actual skill directory before it is copied.
-            if (childStat.isSymbolicLink()) {
-                if (entries.includes("SKILL.md"))
-                    throw new Error(`Refusing symlink in skill package: ${child}`);
+            if (childStat.isSymbolicLink())
                 continue;
-            }
             // Files such as a root-level SKILL.md are not directories to recurse into.
             if (childStat.isDirectory())
                 await visit(child, depth + 1);

package/dist/src/core/source.js

@@ -302,8 +302,15 @@ function normalizeGitUrl(input) {
 }
 /** Fetch a generic Git source without running repository hooks or lifecycle scripts. */
 export async function fetchGitSnapshot(input, options = {}) {
-    if (options.maxBytes !== undefined || options.maxFiles !== undefined)
-        throw new Error("Pre-check size/file bounds are supported only for public GitHub owner/repository sources; refusing an unbounded generic Git clone");
+    // A generic Git host has no cheap pre-clone tree API, so size cannot be
+    // checked before fetching the way the GitHub path does. Enforce a bound
+    // AFTER a shallow clone instead of refusing bounded requests, giving parity
+    // with the catalog path and a default ceiling against an adversarial repo.
+    const boundedOptions = {
+        ...options,
+        maxBytes: options.maxBytes ?? 128 * 1024 * 1024,
+        maxFiles: options.maxFiles ?? 20_000,
+    };
     const url = normalizeGitUrl(input);
     const temporary = await mkdtemp(join(tmpdir(), "loadout-git-"));
     try {
@@ -320,7 +327,7 @@ export async function fetchGitSnapshot(input, options = {}) {
         const commit = stdout.trim();
         if (!/^[0-9a-f]{40}$/i.test(commit))
             throw new Error("Git returned an invalid commit");
-        await enforceRepositoryBounds(temporary, options);
+        await enforceRepositoryBounds(temporary, boundedOptions);
         const key = createHash("sha256").update(url).digest("hex");
         const cachePath = join(loadoutHome(), "cache", "git", key, commit);
         await ensureDirectory(join(loadoutHome(), "cache", "git", key));

package/dist/src/core/upgrade.js

@@ -1,5 +1,6 @@
 import { buildAdapterCapabilityGaps, } from "./adapters.js";
-import { applyPreparedCatalogInstall, formatPreparedCatalogInstall, prepareCatalogInstall, RECOMMENDED_ACTIVE_SKILL_LIMIT, } from "./catalog-install.js";
+import { applyPreparedCatalogInstall, formatPreparedCatalogInstall, prepareCatalogInstall, } from "./catalog-install.js";
+import { DEFAULT_ACTIVE_SKILL_LIMIT } from "./active-limit.js";
 import { loadEffectiveCatalog } from "./catalog.js";
 import { buildHealthReport, formatHealthReport } from "./health.js";
 import { buildLocalAgentHealthScores } from "./health-score-evidence.js";
@@ -80,23 +81,23 @@ export async function planUpgrade(selection, options = {}) {
     const activeSet = selection.mode === "maximum"
         ? {
             policy: "disabled-library",
-            recommendedLimit: RECOMMENDED_ACTIVE_SKILL_LIMIT,
+            recommendedLimit: DEFAULT_ACTIVE_SKILL_LIMIT,
             plannedDirectoriesPerAgent,
-            exceedsRecommendedLimit: plannedDirectoriesPerAgent > RECOMMENDED_ACTIVE_SKILL_LIMIT,
+            exceedsRecommendedLimit: plannedDirectoriesPerAgent > DEFAULT_ACTIVE_SKILL_LIMIT,
             explanation: "Maximum stores reviewed skills in the disabled library; it does not expose the full library to agent context.",
-            nextCommand: `loadout optimize --project ${project.root} --limit ${RECOMMENDED_ACTIVE_SKILL_LIMIT}`,
+            nextCommand: `loadout optimize --project ${project.root} --limit ${DEFAULT_ACTIVE_SKILL_LIMIT}`,
         }
         : {
             policy: "bounded-active",
-            recommendedLimit: RECOMMENDED_ACTIVE_SKILL_LIMIT,
+            recommendedLimit: DEFAULT_ACTIVE_SKILL_LIMIT,
             plannedDirectoriesPerAgent,
-            exceedsRecommendedLimit: plannedDirectoriesPerAgent > RECOMMENDED_ACTIVE_SKILL_LIMIT,
-            explanation: plannedDirectoriesPerAgent <= RECOMMENDED_ACTIVE_SKILL_LIMIT
+            exceedsRecommendedLimit: plannedDirectoriesPerAgent > DEFAULT_ACTIVE_SKILL_LIMIT,
+            explanation: plannedDirectoriesPerAgent <= DEFAULT_ACTIVE_SKILL_LIMIT
                 ? "The prepared profile stays within the recommended active-set ceiling."
                 : "The prepared profile exceeds the recommended active-set ceiling; use Stable or project optimization before treating it as a daily active set.",
-            ...(plannedDirectoriesPerAgent > RECOMMENDED_ACTIVE_SKILL_LIMIT
+            ...(plannedDirectoriesPerAgent > DEFAULT_ACTIVE_SKILL_LIMIT
                 ? {
-                    nextCommand: `loadout optimize --project ${project.root} --limit ${RECOMMENDED_ACTIVE_SKILL_LIMIT}`,
+                    nextCommand: `loadout optimize --project ${project.root} --limit ${DEFAULT_ACTIVE_SKILL_LIMIT}`,
                 }
                 : {}),
         };

package/docs/ACTIVE_SET.md

@@ -45,7 +45,7 @@ loadout library
 loadout disable <package-or-package/skill> [more-selectors] [--agents codex,claude-code]
 loadout disable <package-or-package/skill> --yes
 loadout enable <package-or-package/skill> --yes
-loadout activate --project . --limit 40
+loadout activate --project . --limit 30
 loadout optimize --project .
 loadout rollback --snapshot <id>
 ```

package/docs/ACTIVE_SET_POLICY.md

@@ -34,7 +34,7 @@ filled with fake benchmark or feedback data.
 ## Commands
 
 ```bash
-loadout activate --project . --limit 40
+loadout activate --project . --limit 30
 loadout activate --project . --pin openai-skills/playwright
 loadout optimize --project .
 loadout optimize --project . --yes

package/docs/CATALOG.md

@@ -27,10 +27,10 @@ The machine-readable catalog remains the source of truth. Run `loadout catalog -
 | [Anthropic Skills](https://github.com/anthropics/skills)                          | `anthropic-skills`               | agent-skills             | `skill`                    | **Review required** | [`9d2f1ae18723`](https://github.com/anthropics/skills/tree/9d2f1ae187231d8199c64b5b762e1bdf2244733d)                    |
 | [Agent Skills Marketplace](https://github.com/wshobson/agents)                    | `wshobson-agents`                | agent-skills             | `skill`, `plugin`          | `MIT`               | [`b6af37110581`](https://github.com/wshobson/agents/tree/b6af3711058190e4b5c5274b9758498fe626ec5a)                      |
 | [Vercel Agent Skills](https://github.com/vercel-labs/agent-skills)                | `vercel-agent-skills`            | frontend-development     | `skill`                    | **Review required** | [`f8a72b960372`](https://github.com/vercel-labs/agent-skills/tree/f8a72b9603728bb92a217a879b7e62e43ad76c81)             |
-| [Vercel Skills](https://github.com/vercel-labs/skills)                            | `vercel-skills`                  | skill-discovery          | `skill`                    | **Review required** | [`5527c09adc36`](https://github.com/vercel-labs/skills/tree/5527c09adc367612b0bffd9c80e3bc28a6b01b6d)                   |
+| [Vercel Skills](https://github.com/vercel-labs/skills)                            | `vercel-skills`                  | skill-discovery          | `skill`                    | `MIT`               | [`5527c09adc36`](https://github.com/vercel-labs/skills/tree/5527c09adc367612b0bffd9c80e3bc28a6b01b6d)                   |
 | [Cloudflare MCP Server](https://github.com/cloudflare/mcp-server-cloudflare)      | `cloudflare-mcp-server`          | cloud-platform           | `mcp`                      | `Apache-2.0`        | [`52c633e37684`](https://github.com/cloudflare/mcp-server-cloudflare/tree/52c633e37684fadb94ae236f74909b9bbefc0db8)     |
 | [Supabase MCP](https://github.com/supabase/mcp)                                   | `supabase-mcp`                   | database                 | `mcp`                      | `Apache-2.0`        | [`9f0396a1b367`](https://github.com/supabase/mcp/tree/9f0396a1b367dfa6a424f4686a21701c8f05b1c3)                         |
-| [Sentry MCP](https://github.com/getsentry/sentry-mcp)                             | `sentry-mcp`                     | observability            | `skill`, `mcp`             | **Review required** | [`ce099fd25197`](https://github.com/getsentry/sentry-mcp/tree/ce099fd251973774116749016847b78a6049ba0a)                 |
+| [Sentry MCP](https://github.com/getsentry/sentry-mcp)                             | `sentry-mcp`                     | observability            | `skill`, `mcp`             | `FSL-1.1-ALv2`      | [`ce099fd25197`](https://github.com/getsentry/sentry-mcp/tree/ce099fd251973774116749016847b78a6049ba0a)                 |
 | [Exa MCP Server](https://github.com/exa-labs/exa-mcp-server)                      | `exa-mcp-server`                 | web-research             | `skill`, `mcp`, `plugin`   | `MIT`               | [`8823cbea80b6`](https://github.com/exa-labs/exa-mcp-server/tree/8823cbea80b6ec5999c6217cccd91660fe953b97)              |
 | [Firecrawl MCP Server](https://github.com/firecrawl/firecrawl-mcp-server)         | `firecrawl-mcp-server`           | web-research             | `mcp`                      | `MIT`               | [`3eb1115b1f28`](https://github.com/firecrawl/firecrawl-mcp-server/tree/3eb1115b1f2883ff2fb74e61b5c4acf5a9ac0fb0)       |
 | [Azure DevOps MCP](https://github.com/microsoft/azure-devops-mcp)                 | `azure-devops-mcp`               | devops                   | `mcp`                      | `MIT`               | [`0a08dc649c95`](https://github.com/microsoft/azure-devops-mcp/tree/0a08dc649c951208eda942154c66187dec9985bd)           |

package/docs/DEMO_SCRIPT.md

@@ -10,7 +10,7 @@ not show the retired dashboard. The final YouTube upload must be public.
 2. Confirm the release and product health:
 
    ```bash
-   npm install --global loadout-ai@0.5.8
+   npm install --global loadout-ai@0.5.9
    hash -r
    loadout --version
    loadout health
@@ -113,14 +113,14 @@ loadout install --mode custom --package humanizer --agents codex
 
 ```bash
 loadout update
-loadout discover --limit 5
+loadout candidate list --limit 5
 ```
 
 **Say:**
 
-> Update checks managed pinned sources without silently changing them. Discovery
-> watches a wider ecosystem and queues new projects for review, so something going
-> viral can be noticed quickly without being trusted blindly.
+> Update checks managed pinned sources without silently changing them. The discovery
+> feed watches a wider ecosystem and ranks new projects for review. A repository can
+> be noticed quickly without being trusted or installed blindly.
 
 ### 2:25 to 2:48: Codex, GPT-5.6, and close