agentbundle 0.29.4__tar.gz → 0.29.6__tar.gz

{agentbundle-0.29.4 → agentbundle-0.29.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.29.4
+Version: 0.29.6
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License: Apache-2.0 OR MIT
@@ -156,6 +156,13 @@ Produces a deterministic, reproducible gzip archive (versioned) and a mutable ch
 descriptor JSON (`stable.json`), ready to upload to Artifactory. Identical inputs
 produce byte-identical archives (honors `SOURCE_DATE_EPOCH`).
 
+Build residue is excluded, so it does not matter whether you packaged a working
+tree you had just tested or npm-installed in. Pruned at every level of a pack:
+`__pycache__`, `.pytest_cache`, `.mypy_cache`, `.ruff_cache`, `.tox`,
+`.hypothesis`, `htmlcov`, `node_modules`, `.venv`, `venv` — plus `*.pyc`,
+`*.pyo`, `.DS_Store`, `coverage.xml` and `.coverage*` shards. The drop is
+silent, so do not name a directory you mean to ship after one of those.
+
 **Source distribution for air-gapped or self-hosted catalogues:**
 
 ```bash
@@ -167,7 +174,7 @@ agentbundle catalogue package \
   --output dist/
 ```
 
-Produces a `catalogue-source-<release>.tar.gz` from a positive allowlist (packs, profiles, guides, marketplace manifest, legal files). Includes a `self-hosted-source-manifest.json` with per-file SHA-256 digests and provenance fields. `agentbundle install` refuses to install a source archive, preventing accidental misuse.
+Produces a `catalogue-source-<release>.tar.gz` from a positive allowlist (packs, profiles, guides, marketplace manifest, legal files), with the same build-residue exclusions as the default flavour. Includes a `self-hosted-source-manifest.json` with per-file SHA-256 digests and provenance fields. `agentbundle install` refuses to install a source archive, preventing accidental misuse.
 
 **Org bootstrap — ship the default channel in your fork:**
 
@@ -262,7 +269,10 @@ ignore them there; the separation is structural, not incidental.
 `keywords` once; the build projects the cleanly-mappable subset — plus the
 pack's `README.md` — into each distribution route's manifest (the `plugin.json`
 / `marketplace.json` entry), so the catalogue describes each pack richly rather
-than with a single sentence. Extra fields stay in `pack.toml`; the projection
+than with a single sentence. A marketplace entry's `source` is a `git-subdir`
+object (`url`, `path`, and one of `ref`/`sha`) pointing at the pack's directory
+on the published distribution branch, and every entry is schema-validated at
+build time against `marketplace-entry.schema.json`. Extra fields stay in `pack.toml`; the projection
 is deliberately lossy per tool.
 
 Point a catalogue URI (a git URL or a local path) at the repo that holds your packs. Then `validate` a pack against the adapter contract, `render` it to preview the projection, and `install` it into a target repo. `scaffold` drops a pack's seeds into a fresh directory to start from. The build pipeline (`agentbundle.build`) is the same engine `make build` runs.
@@ -278,8 +288,9 @@ The org hint fires after the user-config but before the on-disk IDE probe — so
 
 **Bundled contracts** — the wheel ships the machine contracts used for offline validation:
 `pack.schema.json`, `skill.schema.json`, `guide.schema.json`, `skill-manifest.schema.json`,
-`profile.schema.json`, `catalogue.schema.json`, `target-vocab.toml`, and the adapter
-contract files. All are available without network access via `importlib.resources`.
+`profile.schema.json`, `catalogue.schema.json`, `plugin-manifest.schema.json`,
+`plugin-manifest.derived.schema.json`, `marketplace-entry.schema.json`,
+`target-vocab.toml`, and the adapter contract files. All are available without network access via `importlib.resources`.
 
 **Lint your catalogue** — shallow structural checks run without extra dependencies:
 

{agentbundle-0.29.4 → agentbundle-0.29.6}/README-pypi.md

@@ -134,6 +134,13 @@ Produces a deterministic, reproducible gzip archive (versioned) and a mutable ch
 descriptor JSON (`stable.json`), ready to upload to Artifactory. Identical inputs
 produce byte-identical archives (honors `SOURCE_DATE_EPOCH`).
 
+Build residue is excluded, so it does not matter whether you packaged a working
+tree you had just tested or npm-installed in. Pruned at every level of a pack:
+`__pycache__`, `.pytest_cache`, `.mypy_cache`, `.ruff_cache`, `.tox`,
+`.hypothesis`, `htmlcov`, `node_modules`, `.venv`, `venv` — plus `*.pyc`,
+`*.pyo`, `.DS_Store`, `coverage.xml` and `.coverage*` shards. The drop is
+silent, so do not name a directory you mean to ship after one of those.
+
 **Source distribution for air-gapped or self-hosted catalogues:**
 
 ```bash
@@ -145,7 +152,7 @@ agentbundle catalogue package \
   --output dist/
 ```
 
-Produces a `catalogue-source-<release>.tar.gz` from a positive allowlist (packs, profiles, guides, marketplace manifest, legal files). Includes a `self-hosted-source-manifest.json` with per-file SHA-256 digests and provenance fields. `agentbundle install` refuses to install a source archive, preventing accidental misuse.
+Produces a `catalogue-source-<release>.tar.gz` from a positive allowlist (packs, profiles, guides, marketplace manifest, legal files), with the same build-residue exclusions as the default flavour. Includes a `self-hosted-source-manifest.json` with per-file SHA-256 digests and provenance fields. `agentbundle install` refuses to install a source archive, preventing accidental misuse.
 
 **Org bootstrap — ship the default channel in your fork:**
 
@@ -240,7 +247,10 @@ ignore them there; the separation is structural, not incidental.
 `keywords` once; the build projects the cleanly-mappable subset — plus the
 pack's `README.md` — into each distribution route's manifest (the `plugin.json`
 / `marketplace.json` entry), so the catalogue describes each pack richly rather
-than with a single sentence. Extra fields stay in `pack.toml`; the projection
+than with a single sentence. A marketplace entry's `source` is a `git-subdir`
+object (`url`, `path`, and one of `ref`/`sha`) pointing at the pack's directory
+on the published distribution branch, and every entry is schema-validated at
+build time against `marketplace-entry.schema.json`. Extra fields stay in `pack.toml`; the projection
 is deliberately lossy per tool.
 
 Point a catalogue URI (a git URL or a local path) at the repo that holds your packs. Then `validate` a pack against the adapter contract, `render` it to preview the projection, and `install` it into a target repo. `scaffold` drops a pack's seeds into a fresh directory to start from. The build pipeline (`agentbundle.build`) is the same engine `make build` runs.
@@ -256,8 +266,9 @@ The org hint fires after the user-config but before the on-disk IDE probe — so
 
 **Bundled contracts** — the wheel ships the machine contracts used for offline validation:
 `pack.schema.json`, `skill.schema.json`, `guide.schema.json`, `skill-manifest.schema.json`,
-`profile.schema.json`, `catalogue.schema.json`, `target-vocab.toml`, and the adapter
-contract files. All are available without network access via `importlib.resources`.
+`profile.schema.json`, `catalogue.schema.json`, `plugin-manifest.schema.json`,
+`plugin-manifest.derived.schema.json`, `marketplace-entry.schema.json`,
+`target-vocab.toml`, and the adapter contract files. All are available without network access via `importlib.resources`.
 
 **Lint your catalogue** — shallow structural checks run without extra dependencies:
 

{agentbundle-0.29.4 → agentbundle-0.29.6}/agentbundle/_data/adapter.toml

@@ -188,12 +188,14 @@ install-routes = ["cli", "claude-plugins", "apm"]
 primitive = "skill"
 mode = "direct-directory"
 target-path = ".claude/skills/"
+plugin-target-path = "skills/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter."claude-code".projection]]
 primitive = "agent"
 mode = "direct-file"
 target-path = ".claude/agents/"
+plugin-target-path = "agents/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter."claude-code".projection]]
@@ -213,6 +215,7 @@ on-conflict = "merge-managed-key-only"
 primitive = "command"
 mode = "direct-file"
 target-path = ".claude/commands/"
+plugin-target-path = "commands/"
 on-conflict = "prompt-then-preserve"
 
 # hook-body — scope-conditional target.

{agentbundle-0.29.4 → agentbundle-0.29.6}/agentbundle/_data/catalogue-scaffold/guides/_shared/reference/catalogue-authoring-standards.md

@@ -156,17 +156,51 @@ credentials or private data, prefer synthetic data, stay modest in size, and
 name their licence when sourced externally. Fuzzing corpora, generated output,
 coverage reports, and caches are neither committed nor packaged.
 
+The packager enforces the second half. It prunes these directory names at every
+level of a pack, and never descends into them:
+
+```
+__pycache__  .pytest_cache  .mypy_cache  .ruff_cache  .tox
+.hypothesis  htmlcov  node_modules  .venv  venv
+```
+
+plus `*.pyc`, `*.pyo`, `.DS_Store`, `coverage.xml`, and any `.coverage*` shard.
+A directory you mean to ship must not be named one of those — the drop is
+silent. Note this is matched by name at any depth, so it is deliberately *not*
+the same list as the repository-root exclusions.
+
 ### Repository-root tests
 
 A test concerning one pack stays inside that pack. Behaviour no single pack
 owns — the catalogue system, packaging, shared projection machinery, profiles,
 cross-pack interaction — belongs to the repository, not to a pack.
 
-Where that lives is the repository's call. This catalogue keeps it in the
-engine's own suite (`packages/agentbundle/tests/`) rather than a root `tests/`
-tree; a catalogue that wants the separate tree can add one. Don't create a
-top-level directory for a single test — the ownership rule is what matters,
-not the path.
+Where that lives is the repository's call. This catalogue splits it: behaviour
+that exercises the engine keeps to the engine's own suite
+(`packages/agentbundle/tests/`), while cross-pack *lints* — the ones that read
+every pack's tree and belong to no pack — live with the repository's other
+tooling. Neither is a root `tests/` tree; a catalogue that wants the separate
+tree can add one. Don't create a top-level directory for a single test — the
+ownership rule is what matters, not the path.
+
+### One test process per skill
+
+Run each skill's suite in its own process. This is a correctness requirement,
+not a performance preference.
+
+Skills are independent, so two of them may reasonably ship a `render.py`, and
+their suites may both be called `test_render.py`. Collect them into one pytest
+run and two things break: pytest refuses the duplicate test basenames outright
+(`import file mismatch`), and if it did not, the first `render` module imported
+would serve every suite that expects its own.
+
+```
+pytest packs/<pack>/tests/skills/<skill>/     # one invocation per skill
+```
+
+An invocation that spans two skill test directories is safe only while their
+basenames happen not to collide — which is a property of today's contents, not
+of the layout. Keep the invocations separate and the question never arises.
 
 ### Normative summary
 

{agentbundle-0.29.4 → agentbundle-0.29.6}/agentbundle/_data/catalogue-scaffold/manifest.json

@@ -1,8 +1,8 @@
 {
   "files": {
-    "guides/_shared/reference/catalogue-authoring-standards.md": "0d278062872d62d059e322bae9e5af9f573d79bc93ff24ca18fb750705da5cc6",
+    "guides/_shared/reference/catalogue-authoring-standards.md": "cec0f7afd7a0bf61d7bedd9facd096b083cb7413679a6fbcd0af28d40bece58c",
     "guides/_shared/reference/catalogue-ci-contract.md": "fae793ab47989b6dd3c731afcb0b4cda21c7d08bbe7fa40fca6d3abb3d158141",
-    "packs/AGENTS.md": "7b534acfdaab757079ca678d9290c2257267d7f4e0b4b3c3401d9da22cb4be0b",
+    "packs/AGENTS.md": "861a029007741cd7645cdfcc018e5ac85cf218d332f6688115156c9c676381b8",
     "packs/README.md": "d2de5f9556f4c8e521103474bde74636e02cc805f9bf5312a3a61a1f3eb45d8f",
     "packs/_example/.apm/skills/example-skill/SKILL.md": "33be8cbf4b2c014a5a63e788b7d0b350ad8061c6c4b2579369a3e984135bf9f1",
     "packs/_example/.apm/skills/example-skill/evals/eval_queries.json": "f41ecda0834a22f3b4823c81ab02e58b0e4beba610e3b40c185579abff9cfeee",

{agentbundle-0.29.4 → agentbundle-0.29.6}/agentbundle/_data/catalogue-scaffold/packs/AGENTS.md

@@ -6,8 +6,9 @@ Read `packs/AGENTS.local.md` when present — it carries host-specific overrides
 ## Pack layout
 
 The pack is the ownership and test-execution boundary; `.apm/` is the runtime export boundary; a skill is the
-evaluation-fixture boundary. Tests go in `packs/<pack>/tests/`, never under `.apm/`. Evals stay skill-local at
-`.apm/skills/<skill>/evals/` and project with the skill.
+evaluation-fixture boundary. Tests go in `packs/<pack>/tests/`, never under `.apm/`; evals stay skill-local at
+`.apm/skills/<skill>/evals/` and project with the skill. `tools/lint-pack-test-boundary.py` enforces both across
+every pack, plus one pytest process per skill test dir. Shape: `docs/architecture/pack-layout.md`.
 
 | Path | Purpose |
 |------|---------|

agentbundle-0.29.6/agentbundle/_data/marketplace-entry.schema.json

@@ -0,0 +1,110 @@
+{
+  "x-spec": "docs/specs/claude-plugins-manifest-correctness",
+  "type": "object",
+  "required": [
+    "name",
+    "version",
+    "description"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "version": {
+      "type": "string"
+    },
+    "description": {
+      "type": "string"
+    },
+    "skills": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "agents": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "author": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        }
+      }
+    },
+    "license": {
+      "type": "string"
+    },
+    "homepage": {
+      "type": "string"
+    },
+    "repository": {
+      "type": "string"
+    },
+    "keywords": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "displayName": {
+      "type": "string"
+    },
+    "category": {
+      "type": "string"
+    },
+    "source": {
+      "type": "object",
+      "required": [
+        "source",
+        "url",
+        "path"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "source": {
+          "type": "string",
+          "enum": [
+            "git-subdir"
+          ]
+        },
+        "url": {
+          "type": "string",
+          "pattern": "^https://github\\.com/[^/]+/[^/]+\\.git$"
+        },
+        "path": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "ref": {
+          "type": "string"
+        },
+        "sha": {
+          "type": "string"
+        }
+      },
+      "if": {
+        "required": [
+          "ref"
+        ]
+      },
+      "then": {},
+      "else": {
+        "required": [
+          "sha"
+        ]
+      }
+    }
+  }
+}

agentbundle-0.29.6/agentbundle/_data/plugin-manifest.derived.schema.json

@@ -0,0 +1,147 @@
+{
+  "x-spec": "docs/specs/claude-plugins-manifest-correctness",
+  "type": "object",
+  "required": [
+    "name",
+    "version",
+    "description"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "version": {
+      "type": "string"
+    },
+    "description": {
+      "type": "string"
+    },
+    "skills": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "agents": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "author": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        }
+      }
+    },
+    "license": {
+      "type": "string"
+    },
+    "homepage": {
+      "type": "string"
+    },
+    "repository": {
+      "type": "string"
+    },
+    "keywords": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "displayName": {
+      "type": "string"
+    },
+    "source": {
+      "type": "object",
+      "required": [
+        "source",
+        "url",
+        "path"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "source": {
+          "type": "string",
+          "enum": [
+            "git-subdir"
+          ]
+        },
+        "url": {
+          "type": "string",
+          "pattern": "^https://github\\.com/[^/]+/[^/]+\\.git$"
+        },
+        "path": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "ref": {
+          "type": "string"
+        },
+        "sha": {
+          "type": "string"
+        }
+      },
+      "if": {
+        "required": [
+          "ref"
+        ]
+      },
+      "then": {},
+      "else": {
+        "required": [
+          "sha"
+        ]
+      }
+    },
+    "hooks": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "SessionStart": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "hooks": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "required": [
+                    "type",
+                    "command"
+                  ],
+                  "additionalProperties": false,
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "enum": [
+                        "command"
+                      ]
+                    },
+                    "command": {
+                      "type": "string"
+                    },
+                    "timeout": {
+                      "type": "integer"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

agentbundle-0.29.6/agentbundle/_data/plugin-manifest.schema.json

@@ -0,0 +1,110 @@
+{
+  "x-spec": "docs/specs/claude-plugins-manifest-correctness",
+  "type": "object",
+  "required": [
+    "name",
+    "version",
+    "description"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "version": {
+      "type": "string"
+    },
+    "description": {
+      "type": "string"
+    },
+    "skills": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "agents": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "author": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        }
+      }
+    },
+    "license": {
+      "type": "string"
+    },
+    "homepage": {
+      "type": "string"
+    },
+    "repository": {
+      "type": "string"
+    },
+    "keywords": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "category": {
+      "type": "string"
+    },
+    "displayName": {
+      "type": "string"
+    },
+    "source": {
+      "type": "object",
+      "required": [
+        "source",
+        "url",
+        "path"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "source": {
+          "type": "string",
+          "enum": [
+            "git-subdir"
+          ]
+        },
+        "url": {
+          "type": "string",
+          "pattern": "^https://github\\.com/[^/]+/[^/]+\\.git$"
+        },
+        "path": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "ref": {
+          "type": "string"
+        },
+        "sha": {
+          "type": "string"
+        }
+      },
+      "if": {
+        "required": [
+          "ref"
+        ]
+      },
+      "then": {},
+      "else": {
+        "required": [
+          "sha"
+        ]
+      }
+    }
+  }
+}

{agentbundle-0.29.4 → agentbundle-0.29.6}/agentbundle/build/adapters/claude_code.py

@@ -62,11 +62,33 @@ def project_packs(pack_paths: list[Path], contract: dict, output_root: Path) ->
 # Mirror of kiro.py:_skill_direct_directory_target — keep in sync.
 # A shared helper is barred by the spec's `Never do` boundary (no
 # expansion of projections/direct_directory.py beyond `sweep_orphans`).
+def _resolve_target(output_root: Path, target_path: str) -> Path:
+    """Join a contract ``target-path`` onto ``output_root``, confined.
+
+    ``target-path`` (and its route-scoped sibling ``plugin-target-path``) are
+    contract *data*. An absolute value discards the base entirely on join
+    (``Path("/a/b") / "/etc/x"`` is ``/etc/x``) and a ``..``-bearing one walks
+    out of it — and because the orphan sweep resolves the same value, an
+    escaped target becomes the root of a ``shutil.rmtree``. Confine after
+    resolution rather than trusting the string (CWE-73, not just CWE-22).
+    """
+    candidate = output_root / target_path.rstrip("/")
+    root_resolved = output_root.resolve()
+    try:
+        candidate.resolve().relative_to(root_resolved)
+    except ValueError:
+        raise ValueError(
+            f"claude-code: target-path {target_path!r} escapes the output root "
+            f"{output_root}"
+        ) from None
+    return candidate
+
+
 def _skill_direct_directory_target(contract: dict, output_root: Path) -> Path | None:
     adapter_block = contract["adapter"]["claude-code"]
     for entry in adapter_block.get("projection", []):
         if entry.get("primitive") == "skill" and entry.get("mode") == "direct-directory":
-            return output_root / entry["target-path"].rstrip("/")
+            return _resolve_target(output_root, entry["target-path"])
     return None
 
 
@@ -128,8 +150,11 @@ def _project_single(pack_path: Path, contract: dict, output_root: Path) -> None:
             continue
 
         if mode == "direct-directory":
-            _project_direct_directory(source_dir, output_root / rule["target-path"].rstrip("/"))
+            _project_direct_directory(
+                source_dir, _resolve_target(output_root, rule["target-path"])
+            )
         elif mode == "direct-file":
+            _resolve_target(output_root, rule["target-path"])  # confinement check
             _project_direct_file(source_dir, output_root, rule["target-path"])
         elif mode == "merge-json":
             project_merge_json(source_dir, output_root, rule)