@adea-ai/plugins 2.0.41 → 2.0.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adea-ai/plugins",
-  "version": "2.0.41",
+  "version": "2.0.43",
   "description": "Deterministic compiler for AI agent plugin marketplaces: schemas, source parsing, provenance verification, per-harness materialization, and provenance-checked static artifacts.",
   "keywords": [
     "agents",
@@ -91,7 +91,7 @@
   "dependencies": {
     "tar-stream": "^3.2.1",
     "yaml": "2.9.1",
-    "zod": "^4.6.5"
+    "zod": "^4.6.6"
   },
   "engines": {
     "bun": ">=1.4.0 <2",

package/src/agent-plugins-schema.test.ts

@@ -25,3 +25,38 @@ for (const [name, schema] of [
     })
   })
 }
+
+it('rejects an oversized file collection before reading any attacker-controlled entries', () => {
+  let visitedEntries = 0
+  const oversizedFiles = new Proxy([], {
+    get(target, property, receiver) {
+      if (property === 'length') return 8193
+      if (typeof property === 'string' && /^(0|[1-9][0-9]*)$/.test(property)) {
+        visitedEntries += 1
+        throw new Error('Oversized file entries must not be traversed.')
+      }
+      return Reflect.get(target, property, receiver)
+    },
+  })
+
+  const result = AgentPackageSchema.shape.files.safeParse(oversizedFiles)
+
+  assert.equal(result.success, false)
+  assert.equal(visitedEntries, 0)
+  if (!result.success) assert.equal(result.error.issues[0]?.code, 'too_big')
+})
+
+it('accepts a file collection at the public schema limit', () => {
+  const file = {
+    action: 'copy',
+    sourcePath: 'source.txt',
+    targetPath: 'target.txt',
+    digest: `sha256:${'a'.repeat(64)}`,
+    preserveMode: true,
+  } as const
+
+  const result = AgentPackageSchema.shape.files.safeParse(Array.from({ length: 8192 }, () => file))
+
+  assert.equal(result.success, true)
+  if (result.success) assert.equal(result.data.length, 8192)
+})

package/src/bun-download-cache.test.ts

@@ -22,7 +22,7 @@ for (const name of ['marketplace-ci', 'marketplace-sync', 'publish-packages']) {
       "github.ref == format('refs/heads/{0}', github.event.repository.default_branch)"
     )
     expect(block).toContain("steps.bun-downloads.outputs.cache-hit != 'true'")
-    expect(block).toContain("runner.os }}-${{ runner.arch }}-1.4.3-${{ hashFiles('bun.lock')")
+    expect(block).toContain("runner.os }}-${{ runner.arch }}-1.4.4-${{ hashFiles('bun.lock')")
     const events = name === 'marketplace-sync' ? ['schedule', 'workflow_dispatch'] : ['push']
     for (const event of events) {
       expect(source.slice(0, source.indexOf('\npermissions:'))).toContain(`${event}:`)

package/src/portable-catalog.test.ts

@@ -2,7 +2,8 @@ import { it } from 'node:test'
 import assert from 'node:assert/strict'
 import { existsSync, lstatSync, realpathSync } from 'node:fs'
 import { writeFile, mkdir, readFile, readdir, mkdtemp, symlink, rm, chmod } from 'node:fs/promises'
-import { join } from 'node:path'
+import { join, sep } from 'node:path'
+import { pathToFileURL } from 'node:url'
 import { tmpdir } from 'node:os'
 import { synchronize, verifyArtifacts, digest } from './index.js'
 import {
@@ -420,10 +421,13 @@ it('gives a PACKED consumer the same installation plan as the workspace path', (
     // The compiled artifact was reached through the PUBLIC specifier: the
     // resolved module lives in the packed package's dist, not in the
     // workspace source.
-    assert.ok(nodeResult.resolvedHarness.startsWith('file://' + consumer.consumerRoot))
+    const physicalConsumerRootUrl = pathToFileURL(
+      `${realpathSync(consumer.consumerRoot)}${sep}`
+    ).href
+    assert.ok(nodeResult.resolvedHarness.startsWith(physicalConsumerRootUrl))
     assert.ok(nodeResult.resolvedHarness.includes('@adea-ai/plugins'))
     assert.ok(nodeResult.resolvedHarness.includes('/dist/'))
-    assert.ok(nodeResult.resolvedCatalog.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(nodeResult.resolvedCatalog.startsWith(physicalConsumerRootUrl))
     assert.ok(nodeResult.resolvedCatalog.includes('@adea-ai/plugins'))
     assert.ok(nodeResult.resolvedCatalog.includes('/dist/'))
 
@@ -440,10 +444,10 @@ it('gives a PACKED consumer the same installation plan as the workspace path', (
     }
     assert.equal(bunResult.ok, true)
     assert.deepEqual(bunResult.plan, sourcePlan)
-    assert.ok(bunResult.resolvedHarness.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(bunResult.resolvedHarness.startsWith(physicalConsumerRootUrl))
     assert.ok(bunResult.resolvedHarness.includes('@adea-ai/plugins'))
     assert.ok(bunResult.resolvedHarness.includes('/src/'))
-    assert.ok(bunResult.resolvedCatalog.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(bunResult.resolvedCatalog.startsWith(physicalConsumerRootUrl))
     assert.ok(bunResult.resolvedCatalog.includes('@adea-ai/plugins'))
     assert.ok(bunResult.resolvedCatalog.includes('/src/'))
   }))