@doubledigit/cli 0.1.0

package/dist/lib/rewrite-extension-tsconfig.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Rewrite an extension package's tsconfig.json so its relative references
+ * (extends, compilerOptions.paths) remain correct after installation into
+ * a deeper directory (extensions/<kind>/<name>/ instead of packages/<name>/).
+ *
+ * Packages authored against the old `packages/<name>/` depth (2 levels from
+ * monorepo root) typically use:
+ * - `../../tsconfig.base.json` for `extends`
+ * - `../shared/...`, `../auth/...`, `../adapters/...` sibling path aliases
+ *
+ * Extensions live at depth 3 (`extensions/<kind>/<name>/`), so those legacy
+ * sibling aliases need to become `../../../packages/...`.
+ *
+ * Important: this helper must not re-rewrite already-correct extension paths.
+ */
+/**
+ * Adjust tsconfig.json relative paths for the actual installation depth.
+ * No-op when the package is already at the standard packages/<name>/ depth
+ * or when no tsconfig.json exists.
+ */
+export declare function rewriteExtensionTsconfig(packageDir: string, monorepoRoot: string): void;
+//# sourceMappingURL=rewrite-extension-tsconfig.d.ts.map

package/dist/lib/rewrite-extension-tsconfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-extension-tsconfig.d.ts","sourceRoot":"","sources":["../../src/lib/rewrite-extension-tsconfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,IAAI,CA2DN"}

package/dist/lib/rewrite-extension-tsconfig.js

@@ -0,0 +1,80 @@
+/**
+ * Rewrite an extension package's tsconfig.json so its relative references
+ * (extends, compilerOptions.paths) remain correct after installation into
+ * a deeper directory (extensions/<kind>/<name>/ instead of packages/<name>/).
+ *
+ * Packages authored against the old `packages/<name>/` depth (2 levels from
+ * monorepo root) typically use:
+ * - `../../tsconfig.base.json` for `extends`
+ * - `../shared/...`, `../auth/...`, `../adapters/...` sibling path aliases
+ *
+ * Extensions live at depth 3 (`extensions/<kind>/<name>/`), so those legacy
+ * sibling aliases need to become `../../../packages/...`.
+ *
+ * Important: this helper must not re-rewrite already-correct extension paths.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/** Depth of the legacy packages/<name>/ layout relative to monorepo root. */
+const LEGACY_DEPTH = 2;
+const LEGACY_EXTENDS_PREFIX = '../'.repeat(LEGACY_DEPTH);
+const LEGACY_SIBLING_PREFIX = '../';
+/**
+ * Adjust tsconfig.json relative paths for the actual installation depth.
+ * No-op when the package is already at the standard packages/<name>/ depth
+ * or when no tsconfig.json exists.
+ */
+export function rewriteExtensionTsconfig(packageDir, monorepoRoot) {
+    const tsconfigPath = path.join(packageDir, 'tsconfig.json');
+    if (!fs.existsSync(tsconfigPath))
+        return;
+    let tsconfig;
+    try {
+        tsconfig = JSON.parse(fs.readFileSync(tsconfigPath, 'utf-8'));
+    }
+    catch {
+        return;
+    }
+    const depth = path.relative(monorepoRoot, packageDir).split(path.sep).length;
+    if (depth === LEGACY_DEPTH)
+        return;
+    const newRootPrefix = '../'.repeat(depth);
+    const newPackagesPrefix = `${newRootPrefix}packages/`;
+    let changed = false;
+    // Fix "extends"
+    if (typeof tsconfig.extends === 'string' &&
+        !tsconfig.extends.startsWith(newRootPrefix) &&
+        tsconfig.extends.startsWith(LEGACY_EXTENDS_PREFIX)) {
+        tsconfig.extends =
+            newRootPrefix +
+                tsconfig.extends.slice(LEGACY_EXTENDS_PREFIX.length);
+        changed = true;
+    }
+    // Fix compilerOptions.paths values
+    const co = tsconfig.compilerOptions;
+    if (co?.paths && typeof co.paths === 'object') {
+        const paths = co.paths;
+        for (const [key, value] of Object.entries(paths)) {
+            if (Array.isArray(value)) {
+                paths[key] = value.map((v) => {
+                    if (typeof v !== 'string')
+                        return v;
+                    if (v.startsWith(newRootPrefix))
+                        return v;
+                    if (v.startsWith(LEGACY_EXTENDS_PREFIX)) {
+                        changed = true;
+                        return newRootPrefix + v.slice(LEGACY_EXTENDS_PREFIX.length);
+                    }
+                    if (v.startsWith(LEGACY_SIBLING_PREFIX)) {
+                        changed = true;
+                        return newPackagesPrefix + v.slice(LEGACY_SIBLING_PREFIX.length);
+                    }
+                    return v;
+                });
+            }
+        }
+    }
+    if (changed) {
+        fs.writeFileSync(tsconfigPath, JSON.stringify(tsconfig, null, 2) + '\n', 'utf-8');
+    }
+}

package/dist/lib/source-parser.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Parse GitHub source URLs into structured objects.
+ *
+ * Supported formats:
+ *   gh:owner/repo
+ *   gh:owner/repo/path/to/subdir
+ *   gh:owner/repo#branch
+ *   gh:owner/repo/path#v1.0.0
+ *   github:owner/repo/path
+ *   https://github.com/owner/repo/tree/main
+ */
+export interface ParsedSource {
+    type: 'github';
+    owner: string;
+    repo: string;
+    subdir?: string;
+    ref?: string;
+    /** Reconstructed giget-compatible template string */
+    templateString: string;
+    /** Human-readable display string */
+    displayString: string;
+}
+/**
+ * Note on full GitHub URLs with refs containing slashes (e.g. feature/foo):
+ * The URL parser assumes the ref is a single path segment. For branches like
+ * `feature/foo`, use the shorthand syntax instead:
+ *   gh:owner/repo/path#feature/foo
+ */
+/**
+ * Parse a source string into a structured ParsedSource object.
+ *
+ * @throws {Error} if the source string is invalid or missing required parts
+ */
+export declare function parseSource(source: string): ParsedSource;
+//# sourceMappingURL=source-parser.d.ts.map

package/dist/lib/source-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-parser.d.ts","sourceRoot":"","sources":["../../src/lib/source-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;GAKG;AAEH;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA4CxD"}

package/dist/lib/source-parser.js

@@ -0,0 +1,121 @@
+/**
+ * Parse GitHub source URLs into structured objects.
+ *
+ * Supported formats:
+ *   gh:owner/repo
+ *   gh:owner/repo/path/to/subdir
+ *   gh:owner/repo#branch
+ *   gh:owner/repo/path#v1.0.0
+ *   github:owner/repo/path
+ *   https://github.com/owner/repo/tree/main
+ */
+const SHORTHAND_RE = /^(?:gh|github):(.+)$/;
+const GITHUB_URL_RE = /^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)(?:\/(.+))?$/;
+/**
+ * Note on full GitHub URLs with refs containing slashes (e.g. feature/foo):
+ * The URL parser assumes the ref is a single path segment. For branches like
+ * `feature/foo`, use the shorthand syntax instead:
+ *   gh:owner/repo/path#feature/foo
+ */
+/**
+ * Parse a source string into a structured ParsedSource object.
+ *
+ * @throws {Error} if the source string is invalid or missing required parts
+ */
+export function parseSource(source) {
+    if (!source || typeof source !== 'string') {
+        throw new Error('Source string is required');
+    }
+    const trimmed = source.trim();
+    // Full GitHub URL: https://github.com/owner/repo/tree/branch
+    const urlMatch = trimmed.match(GITHUB_URL_RE);
+    if (urlMatch) {
+        if (urlMatch[4]) {
+            throw new Error('Full GitHub URLs with subdirectories are ambiguous because refs can contain slashes.\n' +
+                `Use the shorthand syntax instead:\n  gh:${urlMatch[1]}/${urlMatch[2]}/${urlMatch[4]}#${urlMatch[3]}`);
+        }
+        return buildParsedSource(urlMatch[1], urlMatch[2], undefined, urlMatch[3]);
+    }
+    // Shorthand: gh:owner/repo/path#ref or github:owner/repo/path#ref
+    const shortMatch = trimmed.match(SHORTHAND_RE);
+    if (shortMatch) {
+        return parseShorthand(shortMatch[1]);
+    }
+    throw new Error(`Invalid source format: "${trimmed}"\n` +
+        'Expected one of:\n' +
+        '  gh:owner/repo\n' +
+        '  gh:owner/repo/path/to/subdir\n' +
+        '  gh:owner/repo#branch\n' +
+        '  gh:owner/repo/path#v1.0.0\n' +
+        '  github:owner/repo/path\n' +
+        '  https://github.com/owner/repo/tree/branch\n' +
+        '\n' +
+        'Note: For subdirectories or refs with slashes (e.g. feature/foo), use shorthand:\n' +
+        '  gh:owner/repo/path#feature/foo');
+}
+function parseShorthand(body) {
+    // Split off #ref first
+    let ref;
+    let pathPart = body;
+    const hashIdx = body.indexOf('#');
+    if (hashIdx !== -1) {
+        ref = body.slice(hashIdx + 1);
+        pathPart = body.slice(0, hashIdx);
+        if (!ref) {
+            throw new Error('Empty ref after "#" — specify a branch, tag, or commit SHA');
+        }
+    }
+    const segments = pathPart.split('/').filter(Boolean);
+    if (segments.length < 2) {
+        throw new Error(`Invalid source: expected at least "owner/repo" but got "${pathPart}"`);
+    }
+    const owner = segments[0];
+    const repo = segments[1];
+    const subdir = segments.length > 2 ? segments.slice(2).join('/') : undefined;
+    return buildParsedSource(owner, repo, subdir, ref);
+}
+const GITHUB_NAME_RE = /^[a-zA-Z0-9._-]+$/;
+function buildParsedSource(owner, repo, subdir, ref) {
+    if (!owner || !repo) {
+        throw new Error('Owner and repo are required in the source string');
+    }
+    // Validate owner/repo against GitHub's allowed character set
+    if (!GITHUB_NAME_RE.test(owner)) {
+        throw new Error(`Invalid GitHub owner: "${owner}" — must match [a-zA-Z0-9._-]`);
+    }
+    if (!GITHUB_NAME_RE.test(repo)) {
+        throw new Error(`Invalid GitHub repo: "${repo}" — must match [a-zA-Z0-9._-]`);
+    }
+    // Reject `.` and `..` — they pass the regex but are path traversal hazards
+    if (owner === '.' || owner === '..') {
+        throw new Error(`Invalid GitHub owner: "${owner}" — path traversal not allowed`);
+    }
+    if (repo === '.' || repo === '..') {
+        throw new Error(`Invalid GitHub repo: "${repo}" — path traversal not allowed`);
+    }
+    // Reject path traversal in subdir
+    if (subdir && subdir.split('/').some((seg) => seg === '..' || seg === '.')) {
+        throw new Error(`Invalid subdirectory path: "${subdir}" — path traversal not allowed`);
+    }
+    // Build giget-compatible template string: gh:owner/repo/subdir#ref
+    let templateString = `gh:${owner}/${repo}`;
+    if (subdir)
+        templateString += `/${subdir}`;
+    if (ref)
+        templateString += `#${ref}`;
+    // Human-readable display: owner/repo/subdir@ref or owner/repo/subdir
+    let displayString = `${owner}/${repo}`;
+    if (subdir)
+        displayString += `/${subdir}`;
+    if (ref)
+        displayString += `@${ref}`;
+    return {
+        type: 'github',
+        owner,
+        repo,
+        subdir,
+        ref,
+        templateString,
+        displayString,
+    };
+}

package/dist/lib/validators.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Pre-install validation checks for `dd install`.
+ *
+ * Validates local directory conflicts, remote repository existence,
+ * downloaded package structure, and slug prefix collisions before
+ * (or just after) downloading from GitHub.
+ */
+import type { ParsedSource } from './source-parser.js';
+import type { ExtensionKind } from './marketplace-schema.js';
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+}
+export interface ManagedPackageMetadata {
+    npmName?: string;
+    kind?: ExtensionKind;
+    isManagedExtension: boolean;
+}
+/**
+ * Check if a local directory already exists for this app name across
+ * all known installation roots (packages/, extensions/micro-apps/,
+ * extensions/payload-plugins/).
+ */
+export declare function validateLocalDirectory(scanRoots: string[], appName: string): ValidationResult;
+/**
+ * Check if an app with this name already exists in any of the
+ * installation roots.
+ */
+export declare function validateNoNameCollision(scanRoots: string[], appName: string): ValidationResult;
+/**
+ * Validate that the remote GitHub repository exists and the path is accessible.
+ */
+export declare function validateRemoteSource(source: ParsedSource): Promise<ValidationResult>;
+/**
+ * Detect the extension kind from a downloaded package's package.json.
+ * Returns 'payload-plugin' when ddPackageType is set, otherwise 'micro-app'.
+ */
+export declare function detectPackageKind(packageDir: string): ExtensionKind;
+/**
+ * Read package.json metadata without importing the package.
+ * Returns whether the directory looks like a dd-managed extension.
+ */
+export declare function readManagedPackageMetadata(packageDir: string): ManagedPackageMetadata;
+/**
+ * After download: validate the downloaded package has the correct structure.
+ * When kind is 'payload-plugin', checks for ddPackageType instead of ddapp.
+ */
+export declare function validateDownloadedPackage(packageDir: string, kind?: ExtensionKind): ValidationResult;
+export declare function resolvePackageEntryPoint(packageDir: string, pkg: Record<string, unknown>): string | null;
+export declare function extractMicroAppMetadata(packageDir: string, pkg: Record<string, unknown>, preferredEntryPoint?: string): {
+    key?: string;
+    slugPrefix?: string;
+};
+/**
+ * Check slug prefix collisions with existing installed dd apps across
+ * all known package roots.
+ *
+ * Scans index files for `slugPrefix: '...'` patterns since we cannot
+ * import the modules at CLI time.
+ */
+export declare function validateSlugPrefix(scanRoots: string[], slugPrefix: string, excludeKey?: string): ValidationResult;
+/**
+ * Check if another installed workspace package already uses the same npm name.
+ * This prevents installing the same payload plugin under multiple folder aliases.
+ * Scans all known package roots including extensions/.
+ */
+export declare function validateNoPackageNameCollision(scanRoots: string[], npmName: string, excludeKey?: string): ValidationResult;
+/**
+ * Run all pre-install validations (local + remote) in one call.
+ */
+export declare function runPreInstallValidation(scanRoots: string[], appName: string, source: ParsedSource): Promise<ValidationResult>;
+//# sourceMappingURL=validators.d.ts.map

package/dist/lib/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/lib/validators.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AA0BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAWlB;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAgClB;AAMD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,gBAAgB,CAAC,CA2E3B;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAEnE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,GACjB,sBAAsB,CAsBxB;AAMD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,aAAa,GACnB,gBAAgB,CA+ClB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,GAAG,IAAI,CAgCf;AAqDD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,mBAAmB,CAAC,EAAE,MAAM,GAC3B;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBvC;AAMD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EAAE,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,gBAAgB,CAyClB;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,gBAAgB,CAiClB;AAMD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAY3B"}