superbee 0.1.5-pre.1 → 0.1.5-pre.2

package/README.md

@@ -67,6 +67,10 @@ the Windows shim explicitly). Setup walks the agent through Agent Skill, Session
 registration. It is read-only: it inspects your configuration and returns one safe next command at
 a time, so the agent performs any actual changes with your approval.
 
+The managed Agent Skill works in Claude Code, Codex, and OpenCode. OpenCode discovers Superbee from
+its documented Claude-compatible Skill path. It shares Claude Code's Skill bytes by default; if
+Claude Code is explicitly relocated, the installer manages the two documented host paths separately.
+
 Upgrading from the legacy `@holaxis/aslite` package or the retired marketplace plugin? Install
 `superbee` alongside it, have your agent run `superbee setup` to migrate the exact legacy
 integrations, then remove the old package with `npm uninstall -g @holaxis/aslite`. Existing

package/dist/publication-bridge.mjs

@@ -1153,7 +1153,7 @@ var require_omap = __commonJS({
     var _toString = Object.prototype.toString;
     function resolveYamlOmap(data) {
       if (data === null) return true;
-      var objectKeys = [], index, length, pair, pairKey, pairHasKey, object = data;
+      var objectKeys = {}, index, length, pair, pairKey, pairHasKey, object = data;
       for (index = 0, length = object.length; index < length; index += 1) {
         pair = object[index];
         pairHasKey = false;
@@ -1165,8 +1165,8 @@ var require_omap = __commonJS({
           }
         }
         if (!pairHasKey) return false;
-        if (objectKeys.indexOf(pairKey) === -1) objectKeys.push(pairKey);
-        else return false;
+        if (_hasOwnProperty.call(objectKeys, pairKey)) return false;
+        Object.defineProperty(objectKeys, pairKey, { value: true });
       }
       return true;
     }
@@ -1603,17 +1603,22 @@ var require_loader = __commonJS({
         state.result += _result;
       }
     }
+    function chargeMergeWork(state) {
+      state.totalMergeKeys += 1;
+      if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
+        throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
+      }
+    }
     function mergeMappings(state, destination, source, overridableKeys) {
       var sourceKeys, key, index, quantity;
       if (!common.isObject(source)) {
         throwError(state, "cannot merge mappings; the provided source object is unacceptable");
       }
+      chargeMergeWork(state);
       sourceKeys = Object.keys(source);
       for (index = 0, quantity = sourceKeys.length; index < quantity; index += 1) {
         key = sourceKeys[index];
-        if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
-          throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
-        }
+        chargeMergeWork(state);
         if (!_hasOwnProperty.call(destination, key)) {
           setProperty(destination, key, source[key]);
           overridableKeys[key] = true;
@@ -1642,6 +1647,9 @@ var require_loader = __commonJS({
       }
       if (keyTag === "tag:yaml.org,2002:merge") {
         if (Array.isArray(valueNode)) {
+          if (valueNode.length > 100) {
+            throwError(state, "abnormal merge sequence size");
+          }
           for (index = 0, quantity = valueNode.length; index < quantity; index += 1) {
             mergeMappings(state, _result, valueNode[index], overridableKeys);
           }
@@ -3582,6 +3590,13 @@ var MalformedDocumentError = class extends Error {
   }
 };
 function parseMarkdown(raw, context) {
+  if (/^---(?:\r?\n|$)/.test(raw)) {
+    const firstLineEnd = raw.indexOf("\n");
+    const afterOpening = firstLineEnd === -1 ? "" : raw.slice(firstLineEnd + 1);
+    if (!/^---\r?$/m.test(afterOpening)) {
+      throw new MalformedDocumentError(context, new Error("unterminated YAML frontmatter delimiter"));
+    }
+  }
   let parsed;
   try {
     parsed = (0, import_gray_matter.default)(raw, { engines: { yaml: yamlEngine } });
@@ -3591,16 +3606,20 @@ function parseMarkdown(raw, context) {
   const frontmatter2 = normalizeFrontmatter(parsed.data ?? {});
   return { frontmatter: frontmatter2, body: parsed.content };
 }
+function normalizeDocumentBodyForStorage(body) {
+  return body.endsWith("\n") ? body : `${body}
+`;
+}
 function stringifyWithData(data, body) {
   const engines2 = import_gray_matter.default.engines;
   const yaml3 = engines2.yaml.stringify(data).trim();
   const content = body ?? "";
   const newline = (value) => value.endsWith("\n") ? value : `${value}
 `;
-  if (yaml3 === "{}") return newline(content);
+  if (yaml3 === "{}") return normalizeDocumentBodyForStorage(content);
   return `---
 ${newline(yaml3)}---
-${newline(content)}`;
+${normalizeDocumentBodyForStorage(content)}`;
 }
 function stringifyDoc(frontmatter2, body) {
   return stringifyWithData(frontmatter2, body);
@@ -3885,6 +3904,33 @@ function processExists(pid) {
     return err.code !== "ESRCH";
   }
 }
+function staleLockQuarantinePath(lockPath, owner) {
+  const tokenHash = createHash("sha256").update(owner.token).digest("hex");
+  return `${lockPath}.stale-${tokenHash}`;
+}
+async function pathExists(candidate) {
+  try {
+    await fs.lstat(candidate);
+    return true;
+  } catch (err) {
+    if (err.code === "ENOENT") return false;
+    throw err;
+  }
+}
+async function quarantineStaleLock(lockPath, owner) {
+  if (owner.hostname !== hostname() || processExists(owner.pid)) return false;
+  const quarantinePath = staleLockQuarantinePath(lockPath, owner);
+  try {
+    await fs.rename(lockPath, quarantinePath);
+    return true;
+  } catch (err) {
+    const code = err.code;
+    if (code === "ENOENT") return false;
+    if (await pathExists(quarantinePath)) return false;
+    if (process.platform === "win32" && WINDOWS_DIRECTORY_CONTENTION_CODES.has(code ?? "")) return false;
+    throw err;
+  }
+}
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -3947,11 +3993,11 @@ async function selectLockRoot(options2) {
   await ensurePrivateLockRoot(lockRoot);
   return lockRoot;
 }
-var WINDOWS_CLAIM_CONTENTION_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
+var WINDOWS_DIRECTORY_CONTENTION_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
 async function classifyLockClaimFailure(error, lockPath) {
   const code = error.code;
   if (code === "EEXIST") return "contention";
-  if (process.platform !== "win32" || !WINDOWS_CLAIM_CONTENTION_CODES.has(code ?? "")) return "terminal";
+  if (process.platform !== "win32" || !WINDOWS_DIRECTORY_CONTENTION_CODES.has(code ?? "")) return "terminal";
   try {
     await fs.lstat(lockPath);
     return "contention";
@@ -3976,7 +4022,12 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs) {
       } else {
         unwitnessedWindowsRetryUsed = false;
       }
-      if (Date.now() - started >= waitMs) throw timeoutError(lockPath, await readOwner(lockPath), owner.target);
+      let existingOwner = await readOwner(lockPath);
+      if (existingOwner !== null) {
+        if (await quarantineStaleLock(lockPath, existingOwner)) continue;
+        existingOwner = await readOwner(lockPath);
+      }
+      if (Date.now() - started >= waitMs) throw timeoutError(lockPath, existingOwner, owner.target);
       await delay(pollMs);
       continue;
     }

package/dist/publication.mjs

@@ -1157,7 +1157,7 @@ var require_omap = __commonJS({
     var _toString = Object.prototype.toString;
     function resolveYamlOmap(data) {
       if (data === null) return true;
-      var objectKeys = [], index2, length, pair, pairKey, pairHasKey, object = data;
+      var objectKeys = {}, index2, length, pair, pairKey, pairHasKey, object = data;
       for (index2 = 0, length = object.length; index2 < length; index2 += 1) {
         pair = object[index2];
         pairHasKey = false;
@@ -1169,8 +1169,8 @@ var require_omap = __commonJS({
           }
         }
         if (!pairHasKey) return false;
-        if (objectKeys.indexOf(pairKey) === -1) objectKeys.push(pairKey);
-        else return false;
+        if (_hasOwnProperty.call(objectKeys, pairKey)) return false;
+        Object.defineProperty(objectKeys, pairKey, { value: true });
       }
       return true;
     }
@@ -1607,17 +1607,22 @@ var require_loader = __commonJS({
         state.result += _result;
       }
     }
+    function chargeMergeWork(state) {
+      state.totalMergeKeys += 1;
+      if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
+        throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
+      }
+    }
     function mergeMappings(state, destination, source, overridableKeys) {
       var sourceKeys, key, index2, quantity;
       if (!common.isObject(source)) {
         throwError(state, "cannot merge mappings; the provided source object is unacceptable");
       }
+      chargeMergeWork(state);
       sourceKeys = Object.keys(source);
       for (index2 = 0, quantity = sourceKeys.length; index2 < quantity; index2 += 1) {
         key = sourceKeys[index2];
-        if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
-          throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
-        }
+        chargeMergeWork(state);
         if (!_hasOwnProperty.call(destination, key)) {
           setProperty(destination, key, source[key]);
           overridableKeys[key] = true;
@@ -1646,6 +1651,9 @@ var require_loader = __commonJS({
       }
       if (keyTag === "tag:yaml.org,2002:merge") {
         if (Array.isArray(valueNode)) {
+          if (valueNode.length > 100) {
+            throwError(state, "abnormal merge sequence size");
+          }
           for (index2 = 0, quantity = valueNode.length; index2 < quantity; index2 += 1) {
             mergeMappings(state, _result, valueNode[index2], overridableKeys);
           }
@@ -31536,6 +31544,13 @@ var MalformedDocumentError = class extends Error {
   }
 };
 function parseMarkdown(raw, context) {
+  if (/^---(?:\r?\n|$)/.test(raw)) {
+    const firstLineEnd = raw.indexOf("\n");
+    const afterOpening = firstLineEnd === -1 ? "" : raw.slice(firstLineEnd + 1);
+    if (!/^---\r?$/m.test(afterOpening)) {
+      throw new MalformedDocumentError(context, new Error("unterminated YAML frontmatter delimiter"));
+    }
+  }
   let parsed;
   try {
     parsed = (0, import_gray_matter.default)(raw, { engines: { yaml: yamlEngine } });
@@ -31545,16 +31560,20 @@ function parseMarkdown(raw, context) {
   const frontmatter2 = normalizeFrontmatter(parsed.data ?? {});
   return { frontmatter: frontmatter2, body: parsed.content };
 }
+function normalizeDocumentBodyForStorage(body) {
+  return body.endsWith("\n") ? body : `${body}
+`;
+}
 function stringifyWithData(data, body) {
   const engines2 = import_gray_matter.default.engines;
   const yaml3 = engines2.yaml.stringify(data).trim();
   const content3 = body ?? "";
   const newline = (value) => value.endsWith("\n") ? value : `${value}
 `;
-  if (yaml3 === "{}") return newline(content3);
+  if (yaml3 === "{}") return normalizeDocumentBodyForStorage(content3);
   return `---
 ${newline(yaml3)}---
-${newline(content3)}`;
+${normalizeDocumentBodyForStorage(content3)}`;
 }
 function stringifyDoc(frontmatter2, body) {
   return stringifyWithData(frontmatter2, body);
@@ -31839,6 +31858,33 @@ function processExists(pid) {
     return err.code !== "ESRCH";
   }
 }
+function staleLockQuarantinePath(lockPath, owner) {
+  const tokenHash = createHash("sha256").update(owner.token).digest("hex");
+  return `${lockPath}.stale-${tokenHash}`;
+}
+async function pathExists(candidate) {
+  try {
+    await fs.lstat(candidate);
+    return true;
+  } catch (err) {
+    if (err.code === "ENOENT") return false;
+    throw err;
+  }
+}
+async function quarantineStaleLock(lockPath, owner) {
+  if (owner.hostname !== hostname() || processExists(owner.pid)) return false;
+  const quarantinePath = staleLockQuarantinePath(lockPath, owner);
+  try {
+    await fs.rename(lockPath, quarantinePath);
+    return true;
+  } catch (err) {
+    const code2 = err.code;
+    if (code2 === "ENOENT") return false;
+    if (await pathExists(quarantinePath)) return false;
+    if (process.platform === "win32" && WINDOWS_DIRECTORY_CONTENTION_CODES.has(code2 ?? "")) return false;
+    throw err;
+  }
+}
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -31901,11 +31947,11 @@ async function selectLockRoot(options2) {
   await ensurePrivateLockRoot(lockRoot);
   return lockRoot;
 }
-var WINDOWS_CLAIM_CONTENTION_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
+var WINDOWS_DIRECTORY_CONTENTION_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
 async function classifyLockClaimFailure(error, lockPath) {
   const code2 = error.code;
   if (code2 === "EEXIST") return "contention";
-  if (process.platform !== "win32" || !WINDOWS_CLAIM_CONTENTION_CODES.has(code2 ?? "")) return "terminal";
+  if (process.platform !== "win32" || !WINDOWS_DIRECTORY_CONTENTION_CODES.has(code2 ?? "")) return "terminal";
   try {
     await fs.lstat(lockPath);
     return "contention";
@@ -31930,7 +31976,12 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs) {
       } else {
         unwitnessedWindowsRetryUsed = false;
       }
-      if (Date.now() - started >= waitMs) throw timeoutError(lockPath, await readOwner(lockPath), owner.target);
+      let existingOwner = await readOwner(lockPath);
+      if (existingOwner !== null) {
+        if (await quarantineStaleLock(lockPath, existingOwner)) continue;
+        existingOwner = await readOwner(lockPath);
+      }
+      if (Date.now() - started >= waitMs) throw timeoutError(lockPath, existingOwner, owner.target);
       await delay(pollMs);
       continue;
     }