fix(setup): alias skills install as rewritten copies, never symlinks

The two back-compat alias dirs — _gstack-command (root router) and
connect-chrome (→ open-gstack-browser) — symlinked the canonical SKILL.md
verbatim, so each alias re-served the canonical frontmatter name:. Claude
Code keys skills on that name and requires global uniqueness: the
connect-chrome duplicate silently shadowed /open-gstack-browser (whichever
readdir returned first won), and the _gstack-command duplicate could drop
the ENTIRE personal-skills set — every /gstack command vanished until the
user hand-deleted the alias dirs, and the next setup re-broke it.

Fix: copy-then-rewrite. A shared _install_alias_skill_md helper reads the
SOURCE SKILL.md and writes a fresh copy with name: rewritten to the alias
dir's own name (_gstack-command / connect-chrome / gstack-connect-chrome).
sed never edits in place: on Unix the old install was a symlink into the
repo, and an in-place rewrite through it would have corrupted the generated
source (eng review E2). bin/gstack-relink gets the same treatment for its
root-alias helper, and its discovery loop now skips symlinked source dirs
so the connect-chrome repo symlink can't re-mint the duplicate.

Tests assert: installed aliases are NOT symlinks, carry their own unique
names, all installed frontmatter names are globally unique, re-runs refresh
cleanly, legacy symlinked aliases are replaced not written through, and the
source files stay byte-intact.

Fixes #2511
Fixes #2201

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Garry Tan
2026-08-16 09:49:30 -07:00
co-authored by Claude Fable 5
parent 0f38feee78
commit 663aca3b05
5 changed files with 261 additions and 20 deletions
+4 -1
View File
@@ -2435,7 +2435,10 @@ describe('setup script validation', () => {
const fnEnd = setupContent.indexOf('# ─── Helper: remove old unprefixed Claude skill entries', fnStart);
const fnBody = setupContent.slice(fnStart, fnEnd);
expect(fnBody).toContain('_gstack-command');
expect(fnBody).toContain('_link_or_copy "$gstack_dir/SKILL.md" "$target/SKILL.md"');
// #2511: the alias must be a rewritten COPY (unique frontmatter name),
// never a verbatim symlink of the canonical SKILL.md.
expect(fnBody).toContain('_install_alias_skill_md "$gstack_dir/SKILL.md" "$target" "_gstack-command"');
expect(fnBody).not.toContain('_link_or_copy "$gstack_dir/SKILL.md"');
const claudeSection = setupContent.slice(
setupContent.indexOf('# 4. Install for Claude'),
+43 -3
View File
@@ -215,9 +215,15 @@ describe('gstack-relink (#578)', () => {
const aliasSkill = path.join(aliasDir, 'SKILL.md');
expect(fs.lstatSync(aliasDir).isDirectory()).toBe(true);
expect(fs.lstatSync(aliasDir).isSymbolicLink()).toBe(false);
expect(fs.lstatSync(aliasSkill).isSymbolicLink()).toBe(true);
expect(fs.readlinkSync(aliasSkill)).toBe(path.join(installDir, 'SKILL.md'));
expect(fs.readFileSync(aliasSkill, 'utf-8')).toContain('name: gstack');
// #2511: the alias is a rewritten COPY, never a symlink. A symlinked
// alias re-serves the canonical `name: gstack`; Claude Code refuses
// duplicate skill names and drops the entire personal-skills set.
expect(fs.lstatSync(aliasSkill).isSymbolicLink()).toBe(false);
const aliasContent = fs.readFileSync(aliasSkill, 'utf-8');
expect(aliasContent).toContain('name: _gstack-command');
expect(aliasContent).not.toContain('name: gstack\n');
// The rewrite happened on the COPY: the canonical source keeps its name.
expect(fs.readFileSync(path.join(installDir, 'SKILL.md'), 'utf-8')).toContain('name: gstack');
run(`${path.join(installDir, 'bin', 'gstack-config')} set skill_prefix true`, {
GSTACK_INSTALL_DIR: installDir,
@@ -226,6 +232,40 @@ describe('gstack-relink (#578)', () => {
expect(fs.existsSync(aliasSkill)).toBe(true);
});
// #2201: connect-chrome ships as a dir SYMLINK to open-gstack-browser. The
// discovery loop used to link it under its own basename while its SKILL.md
// carried `name: open-gstack-browser` — a duplicate name that silently
// shadows the real skill (readdir-order roulette). Symlinked source dirs
// must be skipped; setup owns the rewritten-copy alias.
test('symlinked skill dirs are skipped, so no duplicate frontmatter names (#2201)', () => {
setupMockInstall(['open-gstack-browser', 'qa']);
fs.symlinkSync(
path.join(installDir, 'open-gstack-browser'),
path.join(installDir, 'connect-chrome'),
);
run(`${path.join(installDir, 'bin', 'gstack-config')} set skill_prefix false`, {
GSTACK_INSTALL_DIR: installDir,
GSTACK_SKILLS_DIR: skillsDir,
});
run(`${path.join(installDir, 'bin', 'gstack-relink')}`, {
GSTACK_INSTALL_DIR: installDir,
GSTACK_SKILLS_DIR: skillsDir,
});
expect(fs.existsSync(path.join(skillsDir, 'open-gstack-browser'))).toBe(true);
expect(fs.existsSync(path.join(skillsDir, 'connect-chrome'))).toBe(false);
// No two installed SKILL.md files may share a frontmatter name.
const names: string[] = [];
for (const entry of fs.readdirSync(skillsDir)) {
const skillMd = path.join(skillsDir, entry, 'SKILL.md');
if (!fs.existsSync(skillMd)) continue;
const m = fs.readFileSync(skillMd, 'utf-8').match(/^name:\s*(\S+)/m);
if (m) names.push(m[1]);
}
expect(new Set(names).size).toBe(names.length);
});
// FIRST INSTALL: --no-prefix must create ONLY flat names, zero gstack-* pollution
test('first install --no-prefix: only flat names exist, zero gstack-* entries', () => {
setupMockInstall(['qa', 'ship', 'review', 'plan-ceo-review', 'gstack-upgrade']);
+164
View File
@@ -0,0 +1,164 @@
/**
* Alias name uniqueness (#2511 / #2201).
*
* setup installs two back-compat alias dirs — `_gstack-command` (root router)
* and `connect-chrome` (→ open-gstack-browser). Both used to symlink the
* canonical SKILL.md verbatim, so the alias carried the canonical frontmatter
* `name:`. Claude Code keys skills on that name and requires global
* uniqueness: the `connect-chrome` duplicate silently shadowed
* /open-gstack-browser (readdir-order roulette), and the `_gstack-command`
* duplicate could drop the ENTIRE personal-skills set.
*
* The fix is copy-then-rewrite: sed reads the SOURCE and writes a fresh copy
* with `name:` set to the alias dir's own name. Eng review E2 pinned the
* hazard this suite guards hardest: on Unix the old install path was a
* SYMLINK to the repo source, so an in-place sed through it would have
* corrupted the generated SKILL.md — the source files must stay byte-intact.
*/
import { describe, test, expect, beforeAll, afterAll } from 'bun:test';
import { spawnSync } from 'child_process';
import * as fs from 'fs';
import * as os from 'os';
import * as path from 'path';
const ROOT = path.resolve(import.meta.dir, '..');
const SETUP_SRC = fs.readFileSync(path.join(ROOT, 'setup'), 'utf-8');
function extractFn(name: string): string {
const start = SETUP_SRC.indexOf(`${name}() {`);
const end = SETUP_SRC.indexOf('\n}\n', start);
if (start < 0 || end < 0) throw new Error(`Could not locate ${name}() in setup`);
return SETUP_SRC.slice(start, end + 2);
}
const installDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-alias-install-'));
const sourceRootSkill = fs.readFileSync(path.join(ROOT, 'SKILL.md'), 'utf-8');
const sourceOgbSkill = fs.readFileSync(
path.join(ROOT, 'open-gstack-browser', 'SKILL.md'),
'utf-8',
);
beforeAll(() => {
const installOnce = [
`link_claude_skill_dirs "${ROOT}" "${installDir}"`,
`link_claude_root_skill_alias "${ROOT}" "${installDir}"`,
// The connect-chrome back-compat alias, exactly as the install section does it.
`_install_alias_skill_md "${ROOT}/open-gstack-browser/SKILL.md" "${installDir}/connect-chrome" "connect-chrome"`,
].join('\n');
const script = [
'set -e',
'IS_WINDOWS=0',
'SKILL_PREFIX=0',
'QUIET=1',
'_WINDOWS_COPY_NOTE_PRINTED=1',
extractFn('_link_or_copy'),
extractFn('_print_windows_copy_note_once'),
extractFn('_link_skill_runtime_assets'),
extractFn('link_claude_skill_dirs'),
extractFn('_install_alias_skill_md'),
extractFn('link_claude_root_skill_alias'),
// Run TWICE: the second pass proves re-runs refresh instead of corrupting
// (the historical failure mode was sed'ing through a symlink on re-run).
installOnce,
installOnce,
].join('\n');
const result = spawnSync('bash', ['-c', script], { encoding: 'utf-8', timeout: 60_000 });
if (result.status !== 0) {
throw new Error(`alias install failed: ${result.stderr}\n${result.stdout}`);
}
}, 30_000);
afterAll(() => {
fs.rmSync(installDir, { recursive: true, force: true });
});
function frontmatterName(skillMdPath: string): string | null {
const m = fs.readFileSync(skillMdPath, 'utf-8').match(/^name:\s*(\S+)/m);
return m ? m[1] : null;
}
describe('alias installs are rewritten copies (#2511, #2201)', () => {
test('_gstack-command alias is NOT a symlink and carries its own name', () => {
const aliasDir = path.join(installDir, '_gstack-command');
const aliasSkill = path.join(aliasDir, 'SKILL.md');
expect(fs.lstatSync(aliasDir).isSymbolicLink()).toBe(false);
expect(fs.lstatSync(aliasSkill).isSymbolicLink()).toBe(false);
expect(frontmatterName(aliasSkill)).toBe('_gstack-command');
});
test('connect-chrome alias is NOT a symlink and carries its own name', () => {
const aliasDir = path.join(installDir, 'connect-chrome');
const aliasSkill = path.join(aliasDir, 'SKILL.md');
expect(fs.lstatSync(aliasDir).isSymbolicLink()).toBe(false);
expect(fs.lstatSync(aliasSkill).isSymbolicLink()).toBe(false);
expect(frontmatterName(aliasSkill)).toBe('connect-chrome');
});
test('alias body is the canonical content — only the name: line differs', () => {
const alias = fs.readFileSync(
path.join(installDir, '_gstack-command', 'SKILL.md'),
'utf-8',
);
expect(alias.replace(/^name:.*$/m, 'name: gstack')).toBe(sourceRootSkill);
const ogbAlias = fs.readFileSync(
path.join(installDir, 'connect-chrome', 'SKILL.md'),
'utf-8',
);
expect(ogbAlias.replace(/^name:.*$/m, 'name: open-gstack-browser')).toBe(sourceOgbSkill);
});
test('the SOURCE files are byte-intact (E2: sed never wrote through a symlink)', () => {
expect(fs.readFileSync(path.join(ROOT, 'SKILL.md'), 'utf-8')).toBe(sourceRootSkill);
expect(
fs.readFileSync(path.join(ROOT, 'open-gstack-browser', 'SKILL.md'), 'utf-8'),
).toBe(sourceOgbSkill);
expect(frontmatterName(path.join(ROOT, 'SKILL.md'))).toBe('gstack');
expect(frontmatterName(path.join(ROOT, 'open-gstack-browser', 'SKILL.md'))).toBe(
'open-gstack-browser',
);
});
test('every installed skill name is globally unique', () => {
const names: string[] = [];
for (const entry of fs.readdirSync(installDir)) {
const skillMd = path.join(installDir, entry, 'SKILL.md');
if (!fs.existsSync(skillMd)) continue;
const name = frontmatterName(skillMd);
if (name) names.push(name);
}
expect(names.length).toBeGreaterThan(10);
const dupes = names.filter((n, i) => names.indexOf(n) !== i);
expect(dupes).toEqual([]);
});
test('a legacy symlinked alias is replaced, not written through', () => {
// Simulate a pre-fix install: alias SKILL.md is a symlink to the source.
const legacyDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-alias-legacy-'));
try {
const aliasDir = path.join(legacyDir, '_gstack-command');
fs.mkdirSync(aliasDir);
fs.symlinkSync(path.join(ROOT, 'SKILL.md'), path.join(aliasDir, 'SKILL.md'));
const script = [
'set -e',
'IS_WINDOWS=0',
extractFn('_link_or_copy'),
extractFn('_install_alias_skill_md'),
extractFn('link_claude_root_skill_alias'),
`link_claude_root_skill_alias "${ROOT}" "${legacyDir}"`,
].join('\n');
const result = spawnSync('bash', ['-c', script], { encoding: 'utf-8', timeout: 30_000 });
expect(result.status).toBe(0);
const aliasSkill = path.join(aliasDir, 'SKILL.md');
expect(fs.lstatSync(aliasSkill).isSymbolicLink()).toBe(false);
expect(frontmatterName(aliasSkill)).toBe('_gstack-command');
// The source the legacy symlink pointed at is untouched.
expect(fs.readFileSync(path.join(ROOT, 'SKILL.md'), 'utf-8')).toBe(sourceRootSkill);
} finally {
fs.rmSync(legacyDir, { recursive: true, force: true });
}
});
});