@kora-platform/cli 0.7.0-rc1 → 0.8.0-rc2

package/dist/files.js

@@ -1,8 +1,13 @@
 import { Buffer } from "node:buffer";
-import { readdir, readFile, stat } from "node:fs/promises";
-import { basename, join, relative, resolve } from "node:path";
+import { lstat, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { usageProblem } from "./cli-errors.js";
 import { parseDotEnv } from "./dotenv.js";
+import { shouldIgnoreWorkspacePath } from "./workspace-source.js";
+const MAX_IMPORT_FILE_COUNT = 500;
+const MAX_IMPORT_FILE_BYTES = 1_000_000;
+const MAX_PACKAGE_FILE_BYTES = 2_000_000;
+const MAX_IMPORT_TOTAL_BYTES = 10_000_000;
 export async function readJsonInputSpecifier(specifier, stdin, instance) {
     if (specifier === "-") {
         return readJsonObject(await readStream(stdin), instance);
@@ -22,16 +27,146 @@ export async function readTextInputSpecifier(specifier, stdin, instance) {
     return readFile(specifier.slice(1), "utf8");
 }
 export async function readImportEntries(pathValue) {
+    return await readUtf8Entries(pathValue, {
+        instance: "org.import",
+        maxFileBytes: MAX_IMPORT_FILE_BYTES
+    });
+}
+export function isZipArchivePath(pathValue) {
+    return extname(pathValue).toLowerCase() === ".zip";
+}
+export async function readArchiveBytes(pathValue, instance) {
+    const absolutePath = resolve(pathValue);
+    const pathStat = await lstat(absolutePath);
+    if (pathStat.isSymbolicLink() || !pathStat.isFile()) {
+        throw usageProblem("Archive path must be a regular .zip file, not a directory or symbolic link.", instance);
+    }
+    return await readFile(absolutePath);
+}
+export async function readWorkspaceTestEntries(pathValue) {
+    return await readUtf8Entries(pathValue, {
+        instance: "test node",
+        maxFileBytes: MAX_PACKAGE_FILE_BYTES
+    });
+}
+async function readUtf8Entries(pathValue, options) {
     const absolutePath = resolve(pathValue);
-    const pathStat = await stat(absolutePath);
+    const pathStat = await lstat(absolutePath);
+    if (pathStat.isSymbolicLink()) {
+        throw usageProblem("Import path must be a regular file or directory, not a symbolic link.", options.instance);
+    }
     if (pathStat.isFile()) {
+        const content = await readLimitedUtf8File(absolutePath, basename(absolutePath), {
+            fileCount: 0,
+            totalBytes: 0
+        }, options);
         return [{
-                content: await readFile(absolutePath, "utf8"),
+                content: content.content,
                 path: basename(absolutePath)
             }];
     }
     const entries = [];
-    await walkImportDirectory(absolutePath, absolutePath, entries);
+    await walkImportDirectory(absolutePath, absolutePath, entries, {
+        fileCount: 0,
+        totalBytes: 0
+    }, options);
+    entries.sort((left, right) => left.path.localeCompare(right.path));
+    return entries;
+}
+export async function readWorkspaceExportMetadata(pathValue) {
+    const absolutePath = resolve(pathValue);
+    try {
+        const metadata = await readFile(join(absolutePath, ".kora", "export.json"), "utf8");
+        const parsed = JSON.parse(metadata);
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch (error) {
+        if (isNodeErrorWithCode(error, "ENOENT") || isNodeErrorWithCode(error, "ENOTDIR")) {
+            return null;
+        }
+        throw error;
+    }
+}
+export async function writeWorkspaceExport(outPath, envelope) {
+    const absolutePath = resolve(outPath);
+    await assertExportOutputIsEmpty(absolutePath, "org.export");
+    await mkdir(absolutePath, { recursive: true });
+    for (const file of envelope.files) {
+        const targetPath = resolveExportTargetPath(absolutePath, file.path, "org.export");
+        await mkdir(dirname(targetPath), { recursive: true });
+        await writeFile(targetPath, file.content, "utf8");
+    }
+    const metadataPath = join(absolutePath, ".kora", "export.json");
+    await mkdir(dirname(metadataPath), { recursive: true });
+    await writeFile(metadataPath, `${JSON.stringify(envelope.metadata, null, 2)}\n`, "utf8");
+}
+export async function writeReleaseSourceFiles(outPath, envelope) {
+    const absolutePath = resolve(outPath);
+    await assertExportOutputIsEmpty(absolutePath, "release source", "Release source");
+    await mkdir(absolutePath, { recursive: true });
+    const seenPaths = new Set();
+    for (const file of envelope.files) {
+        if (seenPaths.has(file.path)) {
+            throw usageProblem(`Release source contains duplicate file path '${file.path}'.`, "release source");
+        }
+        seenPaths.add(file.path);
+        const targetPath = resolveExportTargetPath(absolutePath, file.path, "release source");
+        await mkdir(dirname(targetPath), { recursive: true });
+        await writeFile(targetPath, file.content, "utf8");
+    }
+    const metadataPath = join(absolutePath, ".kora", "release-source.json");
+    await mkdir(dirname(metadataPath), { recursive: true });
+    await writeFile(metadataPath, `${JSON.stringify(envelope.metadata, null, 2)}\n`, "utf8");
+}
+export async function writeArchiveExport(outPath, archive, instance) {
+    const absolutePath = resolve(outPath);
+    await mkdir(dirname(absolutePath), { recursive: true });
+    try {
+        await writeFile(absolutePath, archive, { flag: "wx" });
+    }
+    catch (error) {
+        if (isNodeErrorWithCode(error, "EEXIST")) {
+            throw usageProblem("Export output file already exists.", instance);
+        }
+        throw error;
+    }
+}
+export async function writePackageExport(outPath, envelope) {
+    const absolutePath = resolve(outPath);
+    await assertExportOutputIsEmpty(absolutePath, "extensions.export");
+    await mkdir(absolutePath, { recursive: true });
+    for (const file of envelope.files) {
+        const targetPath = resolveExportTargetPath(absolutePath, file.path, "extensions.export");
+        await mkdir(dirname(targetPath), { recursive: true });
+        await writeFile(targetPath, Buffer.from(file.contentBase64, "base64"));
+    }
+    const metadataPath = join(absolutePath, ".kora", "export.json");
+    await mkdir(dirname(metadataPath), { recursive: true });
+    await writeFile(metadataPath, `${JSON.stringify(envelope.metadata, null, 2)}\n`, "utf8");
+}
+export async function readPackageFileEntries(pathValue, instance) {
+    const absolutePath = resolve(pathValue);
+    const pathStat = await lstat(absolutePath);
+    if (pathStat.isSymbolicLink()) {
+        throw usageProblem("Package path must be a regular file or directory, not a symbolic link.", instance);
+    }
+    if (pathStat.isFile()) {
+        assertPackageFileCanBeRead(pathStat.size, basename(absolutePath), {
+            fileCount: 0,
+            totalBytes: 0
+        }, instance);
+        return [{
+                contentBase64: (await readFile(absolutePath)).toString("base64"),
+                path: basename(absolutePath)
+            }];
+    }
+    const entries = [];
+    await walkPackageDirectory(absolutePath, absolutePath, entries, {
+        fileCount: 0,
+        totalBytes: 0
+    }, instance);
     entries.sort((left, right) => left.path.localeCompare(right.path));
     return entries;
 }
@@ -62,24 +197,124 @@ async function readStream(stream) {
     }
     return Buffer.concat(chunks).toString("utf8");
 }
-async function walkImportDirectory(root, current, entries) {
+async function walkImportDirectory(root, current, entries, counters, options) {
     const children = await readdir(current, { withFileTypes: true });
     children.sort((left, right) => left.name.localeCompare(right.name));
     for (const child of children) {
-        if (shouldIgnoreImportSegment(child.name)) {
+        const childPath = join(current, child.name);
+        const relativePath = relative(root, childPath).replaceAll("\\", "/");
+        if (shouldIgnoreImportPath(relativePath)) {
             continue;
         }
+        if (child.isDirectory()) {
+            await walkImportDirectory(root, childPath, entries, counters, options);
+            continue;
+        }
+        if (!child.isFile()) {
+            continue;
+        }
+        const content = await readLimitedUtf8File(childPath, relativePath, counters, options);
+        entries.push({
+            content: content.content,
+            path: relativePath
+        });
+    }
+}
+async function walkPackageDirectory(root, current, entries, counters, instance) {
+    const children = await readdir(current, { withFileTypes: true });
+    children.sort((left, right) => left.name.localeCompare(right.name));
+    for (const child of children) {
         const childPath = join(current, child.name);
+        const relativePath = relative(root, childPath).replaceAll("\\", "/");
+        if (shouldIgnoreImportPath(relativePath)) {
+            continue;
+        }
         if (child.isDirectory()) {
-            await walkImportDirectory(root, childPath, entries);
+            await walkPackageDirectory(root, childPath, entries, counters, instance);
             continue;
         }
+        if (!child.isFile()) {
+            continue;
+        }
+        const childStat = await lstat(childPath);
+        assertPackageFileCanBeRead(childStat.size, relativePath, counters, instance);
         entries.push({
-            content: await readFile(childPath, "utf8"),
-            path: relative(root, childPath).replaceAll("\\", "/")
+            contentBase64: (await readFile(childPath)).toString("base64"),
+            path: relativePath
         });
     }
 }
-function shouldIgnoreImportSegment(segment) {
-    return new Set([".git", ".kora", "coverage", "dist", "node_modules"]).has(segment);
+function shouldIgnoreImportPath(pathValue) {
+    return shouldIgnoreWorkspacePath(pathValue);
+}
+async function assertExportOutputIsEmpty(absolutePath, instance, outputLabel = "Export") {
+    try {
+        const pathStat = await lstat(absolutePath);
+        if (pathStat.isSymbolicLink()) {
+            throw usageProblem(`${outputLabel} output path must not be a symbolic link.`, instance);
+        }
+        if (!pathStat.isDirectory()) {
+            throw usageProblem(`${outputLabel} output path must be a directory.`, instance);
+        }
+        const children = await readdir(absolutePath);
+        if (children.length > 0) {
+            throw usageProblem(`${outputLabel} output directory must be empty or not exist.`, instance);
+        }
+    }
+    catch (error) {
+        if (isNodeErrorWithCode(error, "ENOENT")) {
+            return;
+        }
+        throw error;
+    }
+}
+function resolveExportTargetPath(root, filePath, instance) {
+    const normalizedPath = filePath.replaceAll("\\", "/");
+    const segments = normalizedPath.split("/");
+    if (normalizedPath.trim().length === 0 ||
+        isAbsolute(normalizedPath) ||
+        segments.some((segment) => segment.length === 0 || segment === "." || segment === "..")) {
+        throw usageProblem("Export file paths must be relative paths inside the output directory.", instance);
+    }
+    const targetPath = resolve(root, normalizedPath);
+    const relativeTarget = relative(root, targetPath);
+    if (relativeTarget === "" || relativeTarget.startsWith("..") || isAbsolute(relativeTarget)) {
+        throw usageProblem("Export file paths must be relative paths inside the output directory.", instance);
+    }
+    return targetPath;
+}
+async function readLimitedUtf8File(filePath, displayPath, counters, options) {
+    if (counters.fileCount >= MAX_IMPORT_FILE_COUNT) {
+        throw usageProblem(`Import has more than ${String(MAX_IMPORT_FILE_COUNT)} files.`, options.instance);
+    }
+    const content = await readFile(filePath, "utf8");
+    const bytes = Buffer.byteLength(content, "utf8");
+    if (bytes > options.maxFileBytes) {
+        throw usageProblem(`Import file ${displayPath} exceeds the per-file byte limit.`, options.instance);
+    }
+    if (counters.totalBytes + bytes > MAX_IMPORT_TOTAL_BYTES) {
+        throw usageProblem(`Import exceeds the ${String(MAX_IMPORT_TOTAL_BYTES)} byte limit.`, options.instance);
+    }
+    counters.fileCount += 1;
+    counters.totalBytes += bytes;
+    return { content };
+}
+function assertPackageFileCanBeRead(bytes, displayPath, counters, instance) {
+    if (counters.fileCount >= MAX_IMPORT_FILE_COUNT) {
+        throw usageProblem(`Package has more than ${String(MAX_IMPORT_FILE_COUNT)} files.`, instance);
+    }
+    if (bytes > MAX_PACKAGE_FILE_BYTES) {
+        throw usageProblem(`Package file ${displayPath} exceeds the per-file byte limit.`, instance);
+    }
+    if (counters.totalBytes + bytes > MAX_IMPORT_TOTAL_BYTES) {
+        throw usageProblem(`Package exceeds the ${String(MAX_IMPORT_TOTAL_BYTES)} byte limit.`, instance);
+    }
+    counters.fileCount += 1;
+    counters.totalBytes += bytes;
+}
+function isNodeErrorWithCode(error, code) {
+    return typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === code;
 }

package/dist/format.d.ts

@@ -1,4 +1,5 @@
 export interface CommandOutput {
+    exitCode?: number;
     human: string;
     kind: string;
     meta?: Record<string, unknown>;
@@ -10,6 +11,7 @@ export declare function renderJsonEnvelope(input: {
 }): string;
 export declare function renderProblemJson(input: {
     detail: string;
+    details?: Record<string, unknown>;
     instance: string;
     status: number;
     title: string;
@@ -27,12 +29,15 @@ export declare function renderPrettyJson(value: unknown): string;
 export declare function renderVerboseHuman(base: string, data: unknown): string;
 export declare function renderVerboseProblem(input: {
     detail: string;
+    details?: Record<string, unknown>;
     instance: string;
     rawDetail?: string;
     title: string;
     type: string;
 }): string;
 export declare function renderSuccess(message: string): string;
+export declare function formatProblemDetail(detail: string, details?: Record<string, unknown>): string;
+export declare function formatProblemDetailsSummary(details: Record<string, unknown> | undefined): string | null;
 export declare function renderDiffSummary(input: {
     added: string[];
     changed: string[];

package/dist/format.js

@@ -6,7 +6,14 @@ export function renderJsonEnvelope(input) {
     }, null, 2)}\n`;
 }
 export function renderProblemJson(input) {
-    return `${JSON.stringify(input, null, 2)}\n`;
+    return `${JSON.stringify({
+        detail: input.detail,
+        ...(input.details ? { details: input.details } : {}),
+        instance: input.instance,
+        status: input.status,
+        title: input.title,
+        type: input.type
+    }, null, 2)}\n`;
 }
 export function renderTable(rows, columns) {
     if (rows.length === 0) {
@@ -38,8 +45,10 @@ export function renderVerboseHuman(base, data) {
     return `${base}\n\nDetails:\n${detail}`;
 }
 export function renderVerboseProblem(input) {
+    const detailsSummary = formatProblemDetailsSummary(input.details);
     const lines = [
         `${input.title}: ${input.detail}`,
+        ...(detailsSummary ? ["", detailsSummary] : []),
         "",
         "Details:",
         `Type: ${input.type}`,
@@ -48,11 +57,79 @@ export function renderVerboseProblem(input) {
     if (input.rawDetail && input.rawDetail !== input.detail) {
         lines.push(`Raw backend message: ${input.rawDetail}`);
     }
+    if (input.details) {
+        lines.push(`Structured details: ${renderPrettyJson(input.details)}`);
+    }
     return lines.join("\n");
 }
 export function renderSuccess(message) {
     return message;
 }
+export function formatProblemDetail(detail, details) {
+    const detailsSummary = formatProblemDetailsSummary(details);
+    return detailsSummary ? `${detail}\n${detailsSummary}` : detail;
+}
+export function formatProblemDetailsSummary(details) {
+    if (!details) {
+        return null;
+    }
+    const diagnostics = formatProblemDetailsList(details.diagnostics, "Diagnostics", formatDiagnosticLikeEntry);
+    if (diagnostics) {
+        return diagnostics;
+    }
+    const errors = formatProblemDetailsList(details.errors, "Errors", formatUnknownDetailEntry);
+    if (errors) {
+        return errors;
+    }
+    return formatProblemDetailsList(details.issues, "Issues", formatUnknownDetailEntry);
+}
+function formatProblemDetailsList(value, label, formatter) {
+    if (!Array.isArray(value) || value.length === 0) {
+        return null;
+    }
+    const lines = value
+        .map(formatter)
+        .filter((entry) => typeof entry === "string" && entry.trim().length > 0);
+    if (lines.length === 0) {
+        return null;
+    }
+    return [label, ...lines.slice(0, 5).map((entry) => `- ${entry}`)].join("\n");
+}
+function formatDiagnosticLikeEntry(entry) {
+    if (!isRecord(entry)) {
+        return formatUnknownDetailEntry(entry);
+    }
+    const message = readString(entry.message);
+    if (!message) {
+        return formatUnknownDetailEntry(entry);
+    }
+    const path = readString(entry.path) ?? readString(entry.filePath) ?? readString(entry.instancePath);
+    const code = readString(entry.code);
+    return [
+        path ? `${path}:` : null,
+        message,
+        code && !path ? `(${code})` : null
+    ].filter((part) => typeof part === "string" && part.length > 0).join(" ");
+}
+function formatUnknownDetailEntry(entry) {
+    if (typeof entry === "string") {
+        return entry.trim() || null;
+    }
+    if (isRecord(entry)) {
+        const message = readString(entry.message);
+        if (message) {
+            const path = readString(entry.path) ?? readString(entry.instancePath);
+            return path ? `${path}: ${message}` : message;
+        }
+    }
+    return null;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readString(value) {
+    return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
 export function renderDiffSummary(input) {
     const lines = [
         `Add: ${input.added.length}`,

package/dist/runner.js

@@ -2,7 +2,7 @@ import { defaultGlobalConfigPath, loadCliConfig } from "./config.js";
 import { authProblem, exitCodeFromError, toProblem, usageProblem } from "./cli-errors.js";
 import { buildHelpJson, findCommandDefinition, listSubcommands, resolveCommandAliases } from "./command-registry.js";
 import { executeParsedCommand } from "./commands.js";
-import { renderJsonEnvelope, renderProblemJson, renderVerboseHuman, renderVerboseProblem } from "./format.js";
+import { formatProblemDetail, renderJsonEnvelope, renderProblemJson, renderVerboseHuman, renderVerboseProblem } from "./format.js";
 import { createFileSessionStore, createMemorySessionStore } from "./session-store.js";
 import { defaultSessionPath, readSessionFromEnv } from "./session.js";
 const VISIBLE_COMMAND_LABELS_ENV = "KORA_VISIBLE_COMMAND_LABELS";
@@ -57,7 +57,7 @@ export async function runCli(argv, input = {}) {
             stdout
         });
         return {
-            exitCode: 0,
+            exitCode: executed.exitCode ?? 0,
             stderr: "",
             stdout: parsed.json
                 ? renderJsonEnvelope({
@@ -72,6 +72,7 @@ export async function runCli(argv, input = {}) {
         const wantsJson = tokens.includes("--json");
         const wantsVerbose = tokens.includes("--verbose");
         const problem = toProblem(error, tokens.join(" "));
+        const details = hasProblemDetails(problem) ? problem.details : undefined;
         return {
             exitCode: exitCodeFromError(problem),
             stderr: wantsJson
@@ -79,15 +80,17 @@ export async function runCli(argv, input = {}) {
                 : `${wantsVerbose
                     ? renderVerboseProblem({
                         detail: problem.detail,
+                        ...(details ? { details } : {}),
                         instance: problem.instance,
                         ...(hasRawDetail(problem) ? { rawDetail: problem.rawDetail } : {}),
                         title: problem.title,
                         type: problem.type
                     })
-                    : `${problem.title}: ${problem.detail}`}\n`,
+                    : `${problem.title}: ${formatProblemDetail(problem.detail, details)}`}\n`,
             stdout: wantsJson
                 ? renderProblemJson({
                     detail: problem.detail,
+                    ...(details ? { details } : {}),
                     instance: problem.instance,
                     status: problem.status,
                     title: problem.title,
@@ -137,6 +140,9 @@ function resolveHelpInvocation(tokens, commandFilter) {
 function hasRawDetail(problem) {
     return "rawDetail" in problem && typeof problem.rawDetail === "string";
 }
+function hasProblemDetails(problem) {
+    return "details" in problem && typeof problem.details === "object" && problem.details !== null && !Array.isArray(problem.details);
+}
 function normalizeHelpPath(tokens, commandFilter) {
     if (tokens.length === 0) {
         return [];
@@ -213,7 +219,10 @@ function parseInvocation(tokens, commandFilter) {
         throw usageProblem(withHelpSuggestion(`Unknown command: ${tokens.join(" ")}.`, resolved.commandPath, commandFilter), tokens.join(" "));
     }
     const definition = resolved.definition;
-    const flagDefinitions = new Map(definition.flags.map((entry) => [entry.name, entry]));
+    const visibleFlags = commandFilter
+        ? definition.flags.filter((entry) => !entry.hiddenWhenCommandFiltered)
+        : definition.flags;
+    const flagDefinitions = new Map(visibleFlags.map((entry) => [entry.name, entry]));
     const positionals = [];
     const flags = {};
     for (let index = 0; index < resolved.remainder.length; index += 1) {
@@ -254,7 +263,7 @@ function parseInvocation(tokens, commandFilter) {
     if (positionals.length > definition.args.length) {
         throw usageProblem(`Too many positional arguments for '${definition.path.join(" ")}'.`, definition.path.join(" "));
     }
-    for (const flag of definition.flags) {
+    for (const flag of visibleFlags) {
         if (flag.required && flags[flag.name] === undefined) {
             throw usageProblem(`Missing required flag '--${flag.name}'.`, definition.path.join(" "));
         }