@north-light/crouter 0.3.318 → 0.3.319

package/dist/core/command-plugins/bundle.js

@@ -1,261 +1 @@
-import { Parser } from 'tar';
-import { validateCommandManifest } from '../command-manifests/manifest.js';
-import { invalidPluginKindsReasons } from '../config.js';
-import { invalidPageComponentsReasons, normalizePageComponents } from '../human/page-catalog.js';
-import { validateMemoryExtensionDeclarations } from '../memory/extensions.js';
-function issue(code, message, received, expected, next, path) {
-    return { code, message, received, expected, next, ...(path !== undefined ? { path } : {}) };
-}
-function bundleInvalid(message, received, expected, next, path) {
-    return issue('plugin_bundle_invalid', message, received, expected, next, path);
-}
-function archiveEnvelopeIssue(archive) {
-    // tar v7's Parser always sniffs gzip, even when passed gzip: false. Reject
-    // its unambiguous magic bytes before parsing so archive plugins stay tar-only.
-    if (archive[0] === 0x1f && archive[1] === 0x8b) {
-        return bundleInvalid('bundle archive must be uncompressed tar data', 'gzip-compressed archive', 'an uncompressed tar archive', 'Serve the archive without compression.');
-    }
-    if (archive.length === 0 || archive.length % 512 !== 0) {
-        return bundleInvalid('bundle archive must be a non-empty whole number of 512-byte tar blocks', `${archive.length} bytes`, 'a non-empty tar stream with a 512-byte block length', 'Serve one complete uncompressed tar archive.');
-    }
-    if (archive.length < 1024 || !archive.subarray(-1024).every((byte) => byte === 0)) {
-        return bundleInvalid('bundle archive is missing the required two zero-block terminator', 'archive tail is not 1024 zero bytes', 'a complete tar stream ending in two 512-byte zero blocks', 'Serve the complete uncompressed tar archive.');
-    }
-    return undefined;
-}
-function validateMemberName(path, type) {
-    if (path.length === 0 || path.includes('\u0000') || path.includes('\\') || path.startsWith('/') || /^[A-Za-z]:($|\/)/.test(path)) {
-        return bundleInvalid('bundle member path must be a safe relative POSIX path', path, 'a relative path without absolute, drive-letter, backslash, or NUL forms', 'Use a safe relative POSIX member path.', path);
-    }
-    if (type === 'file' && path.endsWith('/')) {
-        return bundleInvalid('only directory members may have a trailing slash', path, 'a regular-file path without a trailing slash', 'Emit this member as a regular file path.', path);
-    }
-    const segments = (type === 'directory' && path.endsWith('/') ? path.slice(0, -1) : path).split('/');
-    if (segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
-        return bundleInvalid('bundle member path contains an unsafe segment', path, 'non-empty segments other than . or ..', 'Use a safe relative POSIX member path.', path);
-    }
-    return undefined;
-}
-function validateMemberShape(path, type) {
-    if (type === 'file') {
-        if (path === 'bundle.json' || path === 'commands.json' || path === 'hooks.json' || (path.startsWith('memory/') && path.endsWith('.md')) || path.startsWith('hooks/'))
-            return undefined;
-        return bundleInvalid('bundle contains an unsupported file member', path, 'bundle.json, commands.json, hooks.json, memory/**/*.md, or hooks/**', 'Remove unsupported members from the archive.', path);
-    }
-    if (path === 'memory' || path.startsWith('memory/') || path === 'hooks' || path.startsWith('hooks/'))
-        return undefined;
-    return bundleInvalid('bundle contains an unsupported directory member', path, 'memory or hooks, or a directory below either subtree', 'Remove unsupported directory members from the archive.', path);
-}
-/** A member path as it will exist on disk: directories carry no trailing slash. */
-function materializedPath(member) {
-    return member.type === 'directory' && member.path.endsWith('/') ? member.path.slice(0, -1) : member.path;
-}
-/** Reject member sets that cannot become one filesystem tree — a path claimed as
- *  both a file and a directory, the same path twice after directory
- *  normalization, or a file that another member nests beneath. */
-function validateMemberTree(members) {
-    const claimed = new Map();
-    for (const member of members) {
-        const path = materializedPath(member);
-        const existing = claimed.get(path);
-        if (existing !== undefined) {
-            return bundleInvalid(existing === member.type
-                ? 'bundle contains a duplicate member'
-                : 'bundle claims one path as both a file and a directory', `${path} (${existing} and ${member.type})`, 'each materialized path exactly once, with one type', 'Emit each archive path once, as a single member type.', path);
-        }
-        claimed.set(path, member.type);
-    }
-    for (const [path, type] of claimed) {
-        if (type !== 'file')
-            continue;
-        for (const other of claimed.keys()) {
-            if (other.startsWith(`${path}/`)) {
-                return bundleInvalid('bundle nests a member beneath a regular-file path', `${other} beneath file ${path}`, 'members nested only beneath directory paths', 'Emit the parent path as a directory or remove the nested member.', other);
-            }
-        }
-    }
-    return undefined;
-}
-async function parseArchive(archive) {
-    const members = [];
-    const seen = new Set();
-    let memberIssue;
-    await new Promise((resolve, reject) => {
-        const parser = new Parser({
-            strict: true,
-            maxMetaEntrySize: Number.MAX_SAFE_INTEGER,
-            gzip: false,
-            brotli: false,
-            zstd: false,
-            onReadEntry: (entry) => {
-                const path = entry.path;
-                const type = entry.type === 'File' || entry.type === 'OldFile'
-                    ? 'file'
-                    : entry.type === 'Directory'
-                        ? 'directory'
-                        : undefined;
-                if (type === undefined || entry.unsupported || entry.ignore || entry.linkpath !== undefined) {
-                    memberIssue ??= bundleInvalid('bundle member must be a regular file or directory without a link target', `${path} (${entry.type})`, 'a regular file or directory member without link metadata', 'Remove links and unsupported member types from the archive.', path);
-                    entry.resume();
-                    return;
-                }
-                memberIssue ??= validateMemberName(path, type);
-                memberIssue ??= validateMemberShape(path, type);
-                if (seen.has(path)) {
-                    memberIssue ??= bundleInvalid('bundle contains a duplicate member', path, 'each member path exactly once', 'Emit each archive member only once.', path);
-                }
-                seen.add(path);
-                const chunks = [];
-                entry.on('data', (chunk) => chunks.push(chunk));
-                entry.on('end', () => {
-                    if (memberIssue === undefined)
-                        members.push({ path, type, bytes: new Uint8Array(Buffer.concat(chunks)) });
-                });
-            },
-        });
-        parser.on('ignoredEntry', (entry) => {
-            const path = entry.path;
-            memberIssue ??= bundleInvalid('bundle contains an ignored or unsupported archive member', `${path} (${entry.type})`, 'only supported regular file or directory members', 'Remove ignored or unsupported members from the archive.', path);
-            entry.resume();
-        });
-        parser.once('error', reject);
-        parser.once('end', resolve);
-        try {
-            parser.end(Buffer.from(archive));
-        }
-        catch (error) {
-            reject(error);
-        }
-    }).catch((error) => {
-        memberIssue ??= bundleInvalid('bundle archive could not be parsed', error instanceof Error ? error.message : String(error), 'a valid complete uncompressed tar archive', 'Fix the archive format and serve it again.');
-    });
-    return memberIssue === undefined ? { members } : { issue: memberIssue };
-}
-function parseBundleMetadata(bytes) {
-    let raw;
-    try {
-        raw = JSON.parse(Buffer.from(bytes).toString('utf8'));
-    }
-    catch {
-        return { issue: bundleInvalid('bundle.json is not valid JSON', 'invalid JSON', '{"bundleVersion":1}', 'Write valid bundle metadata.', 'bundle.json') };
-    }
-    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
-        return {
-            issue: bundleInvalid('bundle.json must be a JSON object', JSON.stringify(raw), 'an object with bundleVersion set to 1 and optionally kinds', 'Set bundle.json to {"bundleVersion":1}.', 'bundle.json'),
-        };
-    }
-    const record = raw;
-    const unknownKeys = Object.keys(record).filter((key) => key !== 'bundleVersion' && key !== 'kinds' && key !== 'page_components' && key !== 'memory_extensions');
-    if (record['bundleVersion'] !== 1 || unknownKeys.length > 0) {
-        return {
-            issue: bundleInvalid('bundle.json must contain bundleVersion 1 and at most kinds, page_components, and memory_extensions blocks', JSON.stringify(raw), 'an object with bundleVersion set to 1 and optional kinds, page_components, and memory_extensions', 'Set bundle.json to {"bundleVersion":1} plus optional contribution blocks.', 'bundle.json'),
-        };
-    }
-    // Install-time strictness: a bad block fails the install loudly here, because
-    // the read side (`mergeKinds`) drops invalid kind entries silently and would
-    // otherwise ship a kind that never registers.
-    if (record['kinds'] !== undefined) {
-        const reasons = invalidPluginKindsReasons(record['kinds']);
-        if (reasons.length > 0) {
-            return {
-                issue: bundleInvalid('bundle.json kinds block is invalid', reasons.join('; '), 'each entry a full KindConfig (whenToUse required) or a sparse patch of launch fields', 'Fix the kinds entries in bundle.json.', 'bundle.json'),
-            };
-        }
-    }
-    if (record['page_components'] !== undefined) {
-        const reasons = invalidPageComponentsReasons(record['page_components']);
-        if (reasons.length > 0) {
-            return {
-                issue: bundleInvalid('bundle.json page_components block is invalid', reasons.join('; '), 'an array of page component registrations, each a kind string or {kind, description?, useWhen?, doc?, display?}', 'Fix the page_components entries in bundle.json.', 'bundle.json'),
-            };
-        }
-    }
-    let memoryExtensions;
-    if (record['memory_extensions'] !== undefined) {
-        try {
-            memoryExtensions = validateMemoryExtensionDeclarations(record['memory_extensions']);
-        }
-        catch (error) {
-            return {
-                issue: bundleInvalid('bundle.json memory_extensions block is invalid', error instanceof Error ? error.message : String(error), 'a valid memory_extensions declaration object', 'Fix the memory_extensions declarations in bundle.json.', 'bundle.json'),
-            };
-        }
-    }
-    return {
-        ...(record['kinds'] !== undefined ? { kinds: record['kinds'] } : {}),
-        ...(record['page_components'] !== undefined ? { page_components: normalizePageComponents(record['page_components']) } : {}),
-        ...(memoryExtensions !== undefined ? { memory_extensions: memoryExtensions } : {}),
-    };
-}
-function parseCommands(bytes, reservedCoreNames, coreCommandPaths, extensibleCoreBranches = new Set()) {
-    let raw;
-    try {
-        raw = JSON.parse(Buffer.from(bytes).toString('utf8'));
-    }
-    catch {
-        return {
-            issues: [bundleInvalid('commands.json is not valid JSON', 'invalid JSON', 'a valid command-manifest JSON object', 'Regenerate commands.json.', 'commands.json')],
-        };
-    }
-    const validation = validateCommandManifest(raw, { transport: 'http', reservedCoreNames, extensibleCoreBranches, ...(coreCommandPaths !== undefined ? { coreCommandPaths } : {}) });
-    return {
-        ...(validation.manifest !== undefined ? { commands: validation.manifest } : {}),
-        issues: validation.issues,
-    };
-}
-/** Validate a Core-served plugin directory archive entirely in memory. */
-export async function validatePluginBundle(archive, options) {
-    const envelope = archiveEnvelopeIssue(archive);
-    if (envelope !== undefined)
-        return { issues: [envelope] };
-    const parsed = await parseArchive(archive);
-    if (parsed.issue !== undefined || parsed.members === undefined)
-        return { issues: [parsed.issue] };
-    const treeIssue = validateMemberTree(parsed.members);
-    if (treeIssue !== undefined)
-        return { issues: [treeIssue] };
-    const bundle = parsed.members.find((member) => member.path === 'bundle.json' && member.type === 'file');
-    const commands = parsed.members.find((member) => member.path === 'commands.json' && member.type === 'file');
-    if (bundle === undefined || commands === undefined) {
-        return {
-            issues: [bundleInvalid('bundle must contain exactly one bundle.json and one commands.json regular file', `bundle.json=${bundle !== undefined}, commands.json=${commands !== undefined}`, 'one regular bundle.json and one regular commands.json member', 'Add the required metadata members to the archive.')],
-        };
-    }
-    const hookManifest = parsed.members.find((member) => member.path === 'hooks.json' && member.type === 'file');
-    const hookFiles = parsed.members.filter((member) => member.type === 'file' && member.path.startsWith('hooks/'));
-    const carriesHooks = hookManifest !== undefined || parsed.members.some((member) => member.path === 'hooks' || member.path.startsWith('hooks/'));
-    if (carriesHooks && (hookManifest === undefined || !hookFiles.some((member) => member.path === 'hooks/dispatch'))) {
-        return {
-            issues: [bundleInvalid('bundle hook payload must contain both hooks.json and hooks/dispatch regular files', `hooks.json=${hookManifest !== undefined}, hooks/dispatch=${hookFiles.some((member) => member.path === 'hooks/dispatch')}`, 'both hooks.json and hooks/dispatch regular files', 'Add both required hook members or remove the hook payload.')],
-        };
-    }
-    const metadata = parseBundleMetadata(bundle.bytes);
-    if (metadata.issue !== undefined)
-        return { issues: [metadata.issue] };
-    const commandValidation = parseCommands(commands.bytes, options.reservedCoreNames, options.coreCommandPaths, options.extensibleCoreBranches);
-    if (commandValidation.commands === undefined)
-        return { issues: commandValidation.issues };
-    return {
-        bundle: {
-            bundleVersion: 1,
-            ...(metadata.kinds !== undefined ? { kinds: metadata.kinds } : {}),
-            ...(metadata.page_components !== undefined ? { page_components: metadata.page_components } : {}),
-            ...(metadata.memory_extensions !== undefined ? { memory_extensions: metadata.memory_extensions } : {}),
-            commands: commandValidation.commands,
-            commandsBytes: commands.bytes,
-            directories: parsed.members
-                .filter((member) => member.type === 'directory')
-                .map((member) => ({ path: member.path })),
-            memory: parsed.members
-                .filter((member) => member.type === 'file' && member.path.startsWith('memory/'))
-                .map((member) => ({ path: member.path, bytes: member.bytes })),
-            ...(hookManifest !== undefined ? {
-                hooks: {
-                    manifest: hookManifest.bytes,
-                    files: hookFiles.map((member) => ({ path: member.path, bytes: member.bytes })),
-                },
-            } : {}),
-        },
-        issues: [],
-    };
-}
+var p=Object.defineProperty;var m=(e,s)=>p(e,"name",{value:s,configurable:!0});import{Parser as b}from"tar";import{validateCommandManifest as y}from"../command-manifests/manifest.js";import{invalidPluginKindsReasons as g}from"../config.js";import{invalidPageComponentsReasons as k,normalizePageComponents as v}from"../human/page-catalog.js";import{validateMemoryExtensionDeclarations as j}from"../memory/extensions.js";function _(e,s,t,n,r,i){return{code:e,message:s,received:t,expected:n,next:r,...i!==void 0?{path:i}:{}}}m(_,"issue");function d(e,s,t,n,r){return _("plugin_bundle_invalid",e,s,t,n,r)}m(d,"bundleInvalid");function x(e){if(e[0]===31&&e[1]===139)return d("bundle archive must be uncompressed tar data","gzip-compressed archive","an uncompressed tar archive","Serve the archive without compression.");if(e.length===0||e.length%512!==0)return d("bundle archive must be a non-empty whole number of 512-byte tar blocks",`${e.length} bytes`,"a non-empty tar stream with a 512-byte block length","Serve one complete uncompressed tar archive.");if(e.length<1024||!e.subarray(-1024).every(s=>s===0))return d("bundle archive is missing the required two zero-block terminator","archive tail is not 1024 zero bytes","a complete tar stream ending in two 512-byte zero blocks","Serve the complete uncompressed tar archive.")}m(x,"archiveEnvelopeIssue");function S(e,s){if(e.length===0||e.includes("\0")||e.includes("\\")||e.startsWith("/")||/^[A-Za-z]:($|\/)/.test(e))return d("bundle member path must be a safe relative POSIX path",e,"a relative path without absolute, drive-letter, backslash, or NUL forms","Use a safe relative POSIX member path.",e);if(s==="file"&&e.endsWith("/"))return d("only directory members may have a trailing slash",e,"a regular-file path without a trailing slash","Emit this member as a regular file path.",e);if((s==="directory"&&e.endsWith("/")?e.slice(0,-1):e).split("/").some(n=>n===""||n==="."||n===".."))return d("bundle member path contains an unsafe segment",e,"non-empty segments other than . or ..","Use a safe relative POSIX member path.",e)}m(S,"validateMemberName");function w(e,s){if(s==="file")return e==="bundle.json"||e==="commands.json"||e==="hooks.json"||e.startsWith("memory/")&&e.endsWith(".md")||e.startsWith("hooks/")?void 0:d("bundle contains an unsupported file member",e,"bundle.json, commands.json, hooks.json, memory/**/*.md, or hooks/**","Remove unsupported members from the archive.",e);if(!(e==="memory"||e.startsWith("memory/")||e==="hooks"||e.startsWith("hooks/")))return d("bundle contains an unsupported directory member",e,"memory or hooks, or a directory below either subtree","Remove unsupported directory members from the archive.",e)}m(w,"validateMemberShape");function $(e){return e.type==="directory"&&e.path.endsWith("/")?e.path.slice(0,-1):e.path}m($,"materializedPath");function E(e){const s=new Map;for(const t of e){const n=$(t),r=s.get(n);if(r!==void 0)return d(r===t.type?"bundle contains a duplicate member":"bundle claims one path as both a file and a directory",`${n} (${r} and ${t.type})`,"each materialized path exactly once, with one type","Emit each archive path once, as a single member type.",n);s.set(n,t.type)}for(const[t,n]of s)if(n==="file"){for(const r of s.keys())if(r.startsWith(`${t}/`))return d("bundle nests a member beneath a regular-file path",`${r} beneath file ${t}`,"members nested only beneath directory paths","Emit the parent path as a directory or remove the nested member.",r)}}m(E,"validateMemberTree");async function N(e){const s=[],t=new Set;let n;return await new Promise((r,i)=>{const c=new b({strict:!0,maxMetaEntrySize:Number.MAX_SAFE_INTEGER,gzip:!1,brotli:!1,zstd:!1,onReadEntry:m(a=>{const u=a.path,f=a.type==="File"||a.type==="OldFile"?"file":a.type==="Directory"?"directory":void 0;if(f===void 0||a.unsupported||a.ignore||a.linkpath!==void 0){n??=d("bundle member must be a regular file or directory without a link target",`${u} (${a.type})`,"a regular file or directory member without link metadata","Remove links and unsupported member types from the archive.",u),a.resume();return}n??=S(u,f),n??=w(u,f),t.has(u)&&(n??=d("bundle contains a duplicate member",u,"each member path exactly once","Emit each archive member only once.",u)),t.add(u);const l=[];a.on("data",h=>l.push(h)),a.on("end",()=>{n===void 0&&s.push({path:u,type:f,bytes:new Uint8Array(Buffer.concat(l))})})},"onReadEntry")});c.on("ignoredEntry",a=>{const u=a.path;n??=d("bundle contains an ignored or unsupported archive member",`${u} (${a.type})`,"only supported regular file or directory members","Remove ignored or unsupported members from the archive.",u),a.resume()}),c.once("error",i),c.once("end",r);try{c.end(Buffer.from(e))}catch(a){i(a)}}).catch(r=>{n??=d("bundle archive could not be parsed",r instanceof Error?r.message:String(r),"a valid complete uncompressed tar archive","Fix the archive format and serve it again.")}),n===void 0?{members:s}:{issue:n}}m(N,"parseArchive");function O(e){let s;try{s=JSON.parse(Buffer.from(e).toString("utf8"))}catch{return{issue:d("bundle.json is not valid JSON","invalid JSON",'{"bundleVersion":1}',"Write valid bundle metadata.","bundle.json")}}if(typeof s!="object"||s===null||Array.isArray(s))return{issue:d("bundle.json must be a JSON object",JSON.stringify(s),"an object with bundleVersion set to 1 and optionally kinds",'Set bundle.json to {"bundleVersion":1}.',"bundle.json")};const t=s,n=Object.keys(t).filter(i=>i!=="bundleVersion"&&i!=="kinds"&&i!=="page_components"&&i!=="memory_extensions");if(t.bundleVersion!==1||n.length>0)return{issue:d("bundle.json must contain bundleVersion 1 and at most kinds, page_components, and memory_extensions blocks",JSON.stringify(s),"an object with bundleVersion set to 1 and optional kinds, page_components, and memory_extensions",'Set bundle.json to {"bundleVersion":1} plus optional contribution blocks.',"bundle.json")};if(t.kinds!==void 0){const i=g(t.kinds);if(i.length>0)return{issue:d("bundle.json kinds block is invalid",i.join("; "),"each entry a full KindConfig (whenToUse required) or a sparse patch of launch fields","Fix the kinds entries in bundle.json.","bundle.json")}}if(t.page_components!==void 0){const i=k(t.page_components);if(i.length>0)return{issue:d("bundle.json page_components block is invalid",i.join("; "),"an array of page component registrations, each a kind string or {kind, description?, useWhen?, doc?, display?}","Fix the page_components entries in bundle.json.","bundle.json")}}let r;if(t.memory_extensions!==void 0)try{r=j(t.memory_extensions)}catch(i){return{issue:d("bundle.json memory_extensions block is invalid",i instanceof Error?i.message:String(i),"a valid memory_extensions declaration object","Fix the memory_extensions declarations in bundle.json.","bundle.json")}}return{...t.kinds!==void 0?{kinds:t.kinds}:{},...t.page_components!==void 0?{page_components:v(t.page_components)}:{},...r!==void 0?{memory_extensions:r}:{}}}m(O,"parseBundleMetadata");function W(e,s,t,n=new Set){let r;try{r=JSON.parse(Buffer.from(e).toString("utf8"))}catch{return{issues:[d("commands.json is not valid JSON","invalid JSON","a valid command-manifest JSON object","Regenerate commands.json.","commands.json")]}}const i=y(r,{transport:"http",reservedCoreNames:s,extensibleCoreBranches:n,...t!==void 0?{coreCommandPaths:t}:{}});return{...i.manifest!==void 0?{commands:i.manifest}:{},issues:i.issues}}m(W,"parseCommands");async function R(e,s){const t=x(e);if(t!==void 0)return{issues:[t]};const n=await N(e);if(n.issue!==void 0||n.members===void 0)return{issues:[n.issue]};const r=E(n.members);if(r!==void 0)return{issues:[r]};const i=n.members.find(o=>o.path==="bundle.json"&&o.type==="file"),c=n.members.find(o=>o.path==="commands.json"&&o.type==="file");if(i===void 0||c===void 0)return{issues:[d("bundle must contain exactly one bundle.json and one commands.json regular file",`bundle.json=${i!==void 0}, commands.json=${c!==void 0}`,"one regular bundle.json and one regular commands.json member","Add the required metadata members to the archive.")]};const a=n.members.find(o=>o.path==="hooks.json"&&o.type==="file"),u=n.members.filter(o=>o.type==="file"&&o.path.startsWith("hooks/"));if((a!==void 0||n.members.some(o=>o.path==="hooks"||o.path.startsWith("hooks/")))&&(a===void 0||!u.some(o=>o.path==="hooks/dispatch")))return{issues:[d("bundle hook payload must contain both hooks.json and hooks/dispatch regular files",`hooks.json=${a!==void 0}, hooks/dispatch=${u.some(o=>o.path==="hooks/dispatch")}`,"both hooks.json and hooks/dispatch regular files","Add both required hook members or remove the hook payload.")]};const l=O(i.bytes);if(l.issue!==void 0)return{issues:[l.issue]};const h=W(c.bytes,s.reservedCoreNames,s.coreCommandPaths,s.extensibleCoreBranches);return h.commands===void 0?{issues:h.issues}:{bundle:{bundleVersion:1,...l.kinds!==void 0?{kinds:l.kinds}:{},...l.page_components!==void 0?{page_components:l.page_components}:{},...l.memory_extensions!==void 0?{memory_extensions:l.memory_extensions}:{},commands:h.commands,commandsBytes:c.bytes,directories:n.members.filter(o=>o.type==="directory").map(o=>({path:o.path})),memory:n.members.filter(o=>o.type==="file"&&o.path.startsWith("memory/")).map(o=>({path:o.path,bytes:o.bytes})),...a!==void 0?{hooks:{manifest:a.bytes,files:u.map(o=>({path:o.path,bytes:o.bytes}))}}:{}},issues:[]}}m(R,"validatePluginBundle");export{R as validatePluginBundle};

package/dist/core/command-plugins/compose.js

@@ -1,65 +1 @@
-import { defineBranch, defineLeaf } from '../command.js';
-import { executeExternalLeaf } from './transport/exec-invoke.js';
-import { invokeHttpLeaf } from './transport/http-invoke.js';
-function adaptLeaf(contribution, commandPathFor) {
-    return (leaf, commandPath) => {
-        const transport = contribution.transport;
-        const manifestCommandPath = commandPathFor(commandPath);
-        if (transport.kind === 'exec') {
-            const executable = transport.executable;
-            if (executable === undefined)
-                throw new Error(`exec plugin "${contribution.plugin.name}" has an executable leaf without transport.executable`);
-            return {
-                outputKind: 'object',
-                run: async (input) => executeExternalLeaf({ plugin: contribution.plugin, executable, commandPath: manifestCommandPath, output: leaf.output }, input),
-            };
-        }
-        const httpLeaf = leaf;
-        return {
-            outputKind: httpLeaf.rest.streaming === true ? 'jsonl' : 'object',
-            run: (input, context) => invokeHttpLeaf({
-                registration: { name: contribution.plugin.name, endpoint: transport.endpoint, ...(transport.authEnv !== undefined ? { authEnv: transport.authEnv } : {}) },
-                ...(contribution.manifest?.baseUrl !== undefined ? { baseUrl: contribution.manifest.baseUrl } : {}),
-                ...(contribution.manifest?.timeouts !== undefined ? { timeouts: contribution.manifest.timeouts } : {}),
-                params: httpLeaf.params, rest: httpLeaf.rest, output: httpLeaf.output, commandPath: manifestCommandPath,
-            }, input, context),
-        };
-    };
-}
-export function adaptPluginContributions(contributions) {
-    return {
-        contributions: contributions.map((contribution) => ({
-            contributor: { name: contribution.plugin.name, scope: contribution.plugin.scope, sourceMarketplace: contribution.plugin.sourceMarketplace },
-            node: contribution.node,
-            manifestName: contribution.manifestName,
-            adaptLeaf: adaptLeaf(contribution, (commandPath) => [contribution.manifestName, ...commandPath.slice(1)]),
-        })),
-        coreMounts: [],
-        issues: [],
-    };
-}
-export function adaptPluginCoreMounts(mounts) {
-    return mounts.map((mount) => ({
-        parent: mount.parent,
-        plugin: mount.plugin.name,
-        contributor: { name: mount.plugin.name, scope: mount.plugin.scope, sourceMarketplace: mount.plugin.sourceMarketplace },
-        node: mount.node,
-        adaptLeaf: adaptLeaf({ ...mount, manifestName: mount.node.name }, (commandPath) => [...commandPath]),
-    }));
-}
-export function composeExternalSubtrees(snapshot) {
-    return snapshot.contributions.map((contribution) => buildBranch(contribution, contribution.node, [contribution.node.name]));
-}
-export function composeCoreBranchMounts(mounts, parent) {
-    return mounts.filter((mount) => mount.parent.join('\u0000') === parent.join('\u0000')).map((mount) => mount.node.kind === 'branch'
-        ? buildBranch(mount, mount.node, [...parent, mount.node.name])
-        : buildLeaf(mount, mount.node, [...parent, mount.node.name]));
-}
-function buildBranch(contribution, node, path) {
-    const rootEntry = node.rootEntry === undefined ? undefined : { concept: node.rootEntry.concept, desc: node.rootEntry.description, useWhen: node.rootEntry.whenToUse };
-    return defineBranch({ name: node.name, description: node.description, whenToUse: node.whenToUse, ...(node.tier !== undefined ? { tier: node.tier } : {}), ...(contribution.plugin !== undefined ? { plugin: contribution.plugin } : {}), ...(rootEntry !== undefined ? { rootEntry } : {}), help: { name: path.join(' '), summary: node.summary, ...(node.model !== undefined ? { model: node.model } : {}), ...(path.length === 1 && contribution.extensionIssue !== undefined ? { extensionIssue: contribution.extensionIssue } : {}) }, ...(node.passthrough !== undefined ? { passthrough: node.passthrough } : {}), children: node.children.map((child) => child.kind === 'branch' ? buildBranch(contribution, child, [...path, child.name]) : buildLeaf(contribution, child, [...path, child.name])) });
-}
-function buildLeaf(contribution, node, path) {
-    const adapted = contribution.adaptLeaf(node, path);
-    return defineLeaf({ name: node.name, description: node.description, whenToUse: node.whenToUse, ...(node.tier !== undefined ? { tier: node.tier } : {}), ...(contribution.plugin !== undefined ? { plugin: contribution.plugin } : {}), help: { name: path.join(' '), summary: node.summary, params: node.params, output: node.output, outputKind: adapted.outputKind, effects: [...node.effects] }, run: adapted.run });
-}
+var l=Object.defineProperty;var r=(n,e)=>l(n,"name",{value:e,configurable:!0});import{defineBranch as c,defineLeaf as g}from"../command.js";import{executeExternalLeaf as h}from"./transport/exec-invoke.js";import{invokeHttpLeaf as x}from"./transport/http-invoke.js";function d(n,e){return(a,s)=>{const t=n.transport,f=e(s);if(t.kind==="exec"){const p=t.executable;if(p===void 0)throw new Error(`exec plugin "${n.plugin.name}" has an executable leaf without transport.executable`);return{outputKind:"object",run:r(async i=>h({plugin:n.plugin,executable:p,commandPath:f,output:a.output},i),"run")}}const u=a;return{outputKind:u.rest.streaming===!0?"jsonl":"object",run:r((p,i)=>x({registration:{name:n.plugin.name,endpoint:t.endpoint,...t.authEnv!==void 0?{authEnv:t.authEnv}:{}},...n.manifest?.baseUrl!==void 0?{baseUrl:n.manifest.baseUrl}:{},...n.manifest?.timeouts!==void 0?{timeouts:n.manifest.timeouts}:{},params:u.params,rest:u.rest,output:u.output,commandPath:f},p,i),"run")}}}r(d,"adaptLeaf");function w(n){return{contributions:n.map(e=>({contributor:{name:e.plugin.name,scope:e.plugin.scope,sourceMarketplace:e.plugin.sourceMarketplace},node:e.node,manifestName:e.manifestName,adaptLeaf:d(e,a=>[e.manifestName,...a.slice(1)])})),coreMounts:[],issues:[]}}r(w,"adaptPluginContributions");function U(n){return n.map(e=>({parent:e.parent,plugin:e.plugin.name,contributor:{name:e.plugin.name,scope:e.plugin.scope,sourceMarketplace:e.plugin.sourceMarketplace},node:e.node,adaptLeaf:d({...e,manifestName:e.node.name},a=>[...a])}))}r(U,"adaptPluginCoreMounts");function j(n){return n.contributions.map(e=>m(e,e.node,[e.node.name]))}r(j,"composeExternalSubtrees");function M(n,e){return n.filter(a=>a.parent.join("\0")===e.join("\0")).map(a=>a.node.kind==="branch"?m(a,a.node,[...e,a.node.name]):o(a,a.node,[...e,a.node.name]))}r(M,"composeCoreBranchMounts");function m(n,e,a){const s=e.rootEntry===void 0?void 0:{concept:e.rootEntry.concept,desc:e.rootEntry.description,useWhen:e.rootEntry.whenToUse};return c({name:e.name,description:e.description,whenToUse:e.whenToUse,...e.tier!==void 0?{tier:e.tier}:{},...n.plugin!==void 0?{plugin:n.plugin}:{},...s!==void 0?{rootEntry:s}:{},help:{name:a.join(" "),summary:e.summary,...e.model!==void 0?{model:e.model}:{},...a.length===1&&n.extensionIssue!==void 0?{extensionIssue:n.extensionIssue}:{}},...e.passthrough!==void 0?{passthrough:e.passthrough}:{},children:e.children.map(t=>t.kind==="branch"?m(n,t,[...a,t.name]):o(n,t,[...a,t.name]))})}r(m,"buildBranch");function o(n,e,a){const s=n.adaptLeaf(e,a);return g({name:e.name,description:e.description,whenToUse:e.whenToUse,...e.tier!==void 0?{tier:e.tier}:{},...n.plugin!==void 0?{plugin:n.plugin}:{},help:{name:a.join(" "),summary:e.summary,params:e.params,output:e.output,outputKind:s.outputKind,effects:[...e.effects]},run:s.run})}r(o,"buildLeaf");export{w as adaptPluginContributions,U as adaptPluginCoreMounts,M as composeCoreBranchMounts,j as composeExternalSubtrees};

package/dist/core/command-plugins/discovery.js

@@ -1,245 +1 @@
-import { realpathSync, readFileSync, statSync } from 'node:fs';
-import { isAbsolute, resolve, sep } from 'node:path';
-import { listInstalledPlugins, listInstalledPluginsInRoot } from '../resolver.js';
-import { projectScopeRoots } from '../scope.js';
-import { validateCommandManifest } from '../command-manifests/manifest.js';
-import { qualifiedTopLevelCommandName, resolveCommandRegistry } from '../command-manifests/registry.js';
-import { adaptPluginContributions, adaptPluginCoreMounts } from './compose.js';
-import { validateHttpPluginTransport } from './endpoint.js';
-import { applyCommandExtensions } from './extensions.js';
-export function effectiveCommandPlugins(startDir = process.cwd(), profileId) {
-    const seen = new Set();
-    const result = [];
-    const consider = (plugin) => { if (!seen.has(plugin.name)) {
-        seen.add(plugin.name);
-        result.push(plugin);
-    } };
-    for (const root of projectScopeRoots(startDir, profileId))
-        for (const plugin of listInstalledPluginsInRoot('project', root))
-            consider(plugin);
-    for (const plugin of listInstalledPlugins('user'))
-        consider(plugin);
-    return result.filter((plugin) => plugin.enabled && (plugin.manifest.commands !== undefined || plugin.manifest.transport !== undefined));
-}
-function issueFor(plugin, issues) {
-    return (issue) => issues.push({ ...issue, plugin: plugin.name });
-}
-function safePath(root, rel) {
-    if (typeof rel !== 'string' || rel.length === 0)
-        return null;
-    try {
-        const rootReal = realpathSync(root);
-        const real = realpathSync(resolve(root, rel));
-        return real === rootReal || real.startsWith(rootReal + sep) ? statSync(real).isFile() ? real : null : null;
-    }
-    catch {
-        return null;
-    }
-}
-function transportFor(plugin, issues) {
-    const raw = plugin.manifest.transport;
-    if (raw === undefined) {
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: 'commands requires transport in plugin.json', received: '(missing)', expected: 'a transport object', next: 'Add plugin.json.transport.', path: 'transport' });
-        return undefined;
-    }
-    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: 'transport must be an object', received: Array.isArray(raw) ? 'array' : typeof raw, expected: 'an exec or http transport object', next: 'Fix plugin.json.transport.', path: 'transport' });
-        return undefined;
-    }
-    const value = raw;
-    if (value.kind === 'http') {
-        const result = validateHttpPluginTransport(value);
-        if (result.transport !== undefined)
-            return result.transport;
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: result.errors.join('; '), received: JSON.stringify(raw), expected: 'a valid HTTP transport', next: 'Fix plugin.json.transport.', path: 'transport' });
-        return undefined;
-    }
-    const unknown = Object.keys(value).filter((key) => !['kind', 'executable'].includes(key));
-    if (value.kind !== 'exec' || unknown.length || (value.executable !== undefined && (typeof value.executable !== 'string' || value.executable.length === 0))) {
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: unknown.length ? `transport has unknown keys: ${unknown.join(', ')}` : 'exec transport requires a non-empty executable when declared', received: JSON.stringify(raw), expected: '{ kind: "exec", executable?: "plugin-relative path" }', next: 'Fix plugin.json.transport.', path: 'transport' });
-        return undefined;
-    }
-    return { kind: 'exec', ...(value.executable !== undefined ? { executable: value.executable } : {}) };
-}
-function hasExecutableLeaf(node) {
-    return node.kind === 'leaf' || node.children.some(hasExecutableLeaf);
-}
-function manifestNodes(manifest) {
-    return [...manifest.roots, ...manifest.coreMounts.map((mount) => mount.node)];
-}
-function validateExecExecutable(plugin, transport, manifest, issues) {
-    if (transport.executable === undefined) {
-        if (!manifestNodes(manifest).some(hasExecutableLeaf))
-            return transport;
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: 'exec transport requires executable when commands.json declares executable leaves', received: '(missing)', expected: '{ kind: "exec", executable: "plugin-relative path" }', next: 'Add plugin.json.transport.executable.', path: 'transport.executable' });
-        return undefined;
-    }
-    const executable = safePath(plugin.root, transport.executable);
-    if (executable === null) {
-        issues.push({ code: 'command_path_unsafe', plugin: plugin.name, message: 'executable escapes the plugin root or is not a regular file', received: transport.executable, expected: 'a relative path to a regular file inside the plugin root', next: 'Fix plugin.json.transport.executable.', path: 'transport.executable' });
-        return undefined;
-    }
-    if ((statSync(executable).mode & 0o111) === 0) {
-        issues.push({ code: 'command_not_executable', plugin: plugin.name, message: 'executable lacks the POSIX exec bit', received: transport.executable, expected: 'a file with an executable permission bit', next: 'chmod +x the plugin executable, then update the plugin.', path: 'transport.executable' });
-        return undefined;
-    }
-    return { kind: 'exec', executable };
-}
-function namesPath(bin) {
-    return isAbsolute(bin) || bin.startsWith('.') || bin.includes('/') || bin.includes('\\');
-}
-/** Resolve plugin-owned passthrough programs during discovery. Bare program
- * names intentionally remain untouched so spawn resolves them through PATH. */
-function resolvePassthroughBinaries(plugin, manifest, issues) {
-    let valid = true;
-    const visit = (node) => {
-        if (node.kind !== 'branch')
-            return;
-        const passthrough = node.passthrough;
-        if (passthrough !== undefined && namesPath(passthrough.bin)) {
-            const executable = safePath(plugin.root, passthrough.bin);
-            if (executable === null) {
-                issues.push({ code: 'command_path_unsafe', plugin: plugin.name, message: 'passthrough binary escapes the plugin root or is not a regular file', received: passthrough.bin, expected: 'a relative path to a regular file inside the plugin root', next: 'Fix passthrough.bin in commands.json.', path: 'passthrough.bin' });
-                valid = false;
-            }
-            else if ((statSync(executable).mode & 0o111) === 0) {
-                issues.push({ code: 'command_not_executable', plugin: plugin.name, message: 'passthrough binary lacks the POSIX exec bit', received: passthrough.bin, expected: 'a file with an executable permission bit', next: 'chmod +x the plugin executable, then update commands.json.', path: 'passthrough.bin' });
-                valid = false;
-            }
-            else {
-                node.passthrough = { ...passthrough, bin: executable };
-            }
-        }
-        for (const child of node.children)
-            visit(child);
-    };
-    for (const root of manifestNodes(manifest))
-        visit(root);
-    return valid;
-}
-export function validatePluginCommands(plugin, reservedNames = new Set(), coreCommandPaths, extensibleCoreBranches = new Set()) {
-    const issues = [];
-    const commands = plugin.manifest.commands;
-    const transportRaw = plugin.manifest.transport;
-    let manifestPath = resolve(plugin.root, typeof commands === 'string' ? commands : 'commands.json');
-    const empty = (transport) => ({ plugin, manifestPath, ...(transport === undefined ? {} : { transport }), contributions: [], coreMounts: [], issues });
-    if (commands === undefined && transportRaw === undefined)
-        return empty();
-    if (typeof commands !== 'string' || commands.length === 0) {
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: 'transport requires commands in plugin.json', received: '(missing)', expected: 'a plugin-root-relative commands path', next: 'Add plugin.json.commands or remove transport.', path: 'commands' });
-        return empty();
-    }
-    const transport = transportFor(plugin, issues);
-    if (transport === undefined)
-        return empty();
-    const safe = safePath(plugin.root, commands);
-    if (safe === null) {
-        issues.push({ code: 'command_path_unsafe', plugin: plugin.name, message: 'commands pointer escapes the plugin root or is not a regular file', received: commands, expected: 'a relative path to a regular file inside the plugin root', next: 'Fix plugin.json.commands.', path: 'commands' });
-        return empty(transport);
-    }
-    manifestPath = safe;
-    let bytes;
-    try {
-        bytes = readFileSync(safe);
-    }
-    catch {
-        bytes = null;
-    }
-    if (bytes === null) {
-        issues.push({ code: 'command_manifest_unreadable', plugin: plugin.name, message: 'commands.json is missing or unreadable', received: safe, expected: 'a readable JSON file', next: 'Reinstall or update the plugin.' });
-        return empty(transport);
-    }
-    let raw;
-    try {
-        raw = JSON.parse(Buffer.from(bytes).toString('utf8'));
-    }
-    catch {
-        issues.push({ code: 'command_manifest_invalid', plugin: plugin.name, message: 'commands.json is not valid JSON', received: safe, expected: 'a JSON object', next: 'Regenerate commands.json.' });
-        return empty(transport);
-    }
-    const validation = validateCommandManifest(raw, { transport: transport.kind, reservedCoreNames: reservedNames, extensibleCoreBranches, ...(coreCommandPaths !== undefined ? { coreCommandPaths } : {}) });
-    if (validation.manifest === undefined) {
-        validation.issues.forEach(issueFor(plugin, issues));
-        return empty(transport);
-    }
-    const resolvedTransport = transport.kind === 'exec'
-        ? validateExecExecutable(plugin, transport, validation.manifest, issues)
-        : transport;
-    if (resolvedTransport === undefined)
-        return empty(transport);
-    if (resolvedTransport.kind === 'exec' && !resolvePassthroughBinaries(plugin, validation.manifest, issues))
-        return empty(resolvedTransport);
-    const roots = validation.manifest.roots;
-    if (!roots.every((node) => node.kind === 'branch')) {
-        throw new Error('plugin manifest validation returned a top-level leaf');
-    }
-    return {
-        plugin,
-        manifestPath,
-        transport: resolvedTransport,
-        manifest: validation.manifest,
-        contributions: roots.map((node) => ({ plugin, transport: resolvedTransport, node, manifest: validation.manifest, manifestName: node.name })),
-        coreMounts: validation.manifest.coreMounts.map((mount) => ({ plugin, transport: resolvedTransport, parent: mount.parent, node: mount.node, manifest: validation.manifest })),
-        issues,
-    };
-}
-export function discoverPluginCommandCandidates(startDir = process.cwd(), profileId) {
-    return effectiveCommandPlugins(startDir, profileId).map((plugin) => validatePluginCommands(plugin));
-}
-export function validateEffectiveCommandPlugins(reservedNames, startDir = process.cwd(), profileId, coreCommandPaths, extensibleCoreBranches = new Set()) {
-    const validations = effectiveCommandPlugins(startDir, profileId).map((plugin) => validatePluginCommands(plugin, reservedNames, coreCommandPaths, extensibleCoreBranches));
-    const claims = new Map();
-    for (const validation of validations)
-        for (const contribution of validation.contributions) {
-            const claimants = claims.get(contribution.node.name);
-            if (claimants === undefined)
-                claims.set(contribution.node.name, [contribution]);
-            else
-                claimants.push(contribution);
-        }
-    for (const [name, claimants] of claims)
-        if (claimants.length > 1)
-            for (const claimant of claimants) {
-                const { plugin } = claimant;
-                const qualifiedName = qualifiedTopLevelCommandName({ name: plugin.name, sourceMarketplace: plugin.sourceMarketplace }, name);
-                const validation = validations.find((candidate) => candidate.plugin.root === plugin.root);
-                validation.contributions = validation.contributions.map((contribution) => contribution === claimant ? { ...contribution, node: { ...contribution.node, name: qualifiedName } } : contribution);
-                validation.issues.push({ code: 'command_collision', plugin: plugin.name, path: name, message: `top-level command "${name}" is claimed by ${claimants.map((entry) => entry.plugin.name).join(', ')} — mounted as "${qualifiedName}"`, received: claimants.map((entry) => entry.plugin.name).join(', '), expected: 'an origin-qualified top-level command for each claimant', next: `Invoke "${qualifiedName}" to use this plugin command.` });
-            }
-    const coreClaims = new Map();
-    for (const validation of validations)
-        for (const mount of validation.coreMounts) {
-            const key = [...mount.parent, mount.node.name].join('/');
-            const claimants = coreClaims.get(key);
-            if (claimants === undefined)
-                coreClaims.set(key, [mount]);
-            else
-                claimants.push(mount);
-        }
-    for (const [path, claimants] of coreClaims)
-        if (claimants.length > 1)
-            for (const claimant of claimants) {
-                const validation = validations.find((candidate) => candidate.plugin.root === claimant.plugin.root);
-                validation.coreMounts = validation.coreMounts.filter((mount) => mount !== claimant);
-                validation.issues.push({ code: 'command_collision', plugin: claimant.plugin.name, path: path.replace('/', '.'), message: `contributed command "${claimant.node.name}" conflicts with another plugin child below the extensible core branch`, received: claimants.map((entry) => entry.plugin.name).join(', '), expected: `a unique child name below ${claimant.parent.join('.')}`, next: 'Rename the contributed command or remove this mount.' });
-            }
-    return validations;
-}
-function contributorIssue(plugin, issue) {
-    return { ...issue, contributor: { name: plugin.name, scope: plugin.scope, sourceMarketplace: plugin.sourceMarketplace } };
-}
-export function discoverCommandContributions(reservedNames, startDir = process.cwd(), profileId, coreCommandPaths, extensibleCoreBranches = new Set()) {
-    const validations = validateEffectiveCommandPlugins(reservedNames, startDir, profileId, coreCommandPaths, extensibleCoreBranches);
-    return { contributions: validations.flatMap((validation) => validation.contributions), coreMounts: validations.flatMap((validation) => validation.coreMounts), issues: validations.flatMap((validation) => validation.issues) };
-}
-export function buildExternalCommandSnapshot(reservedCoreNames, startDir = process.cwd(), profileId, coreCommandPaths, extensibleCoreBranches = new Set()) {
-    const validations = validateEffectiveCommandPlugins(reservedCoreNames, startDir, profileId, coreCommandPaths, extensibleCoreBranches);
-    const candidates = adaptPluginContributions(validations.flatMap((validation) => validation.contributions)).contributions;
-    const resolved = resolveCommandRegistry(candidates, reservedCoreNames);
-    const extensions = applyCommandExtensions(resolved.contributions, startDir);
-    return {
-        contributions: extensions.contributions,
-        coreMounts: adaptPluginCoreMounts(validations.flatMap((validation) => validation.coreMounts)),
-        issues: [...validations.flatMap((validation) => validation.issues.map((issue) => contributorIssue(validation.plugin, issue))), ...resolved.issues],
-    };
-}
+var P=Object.defineProperty;var d=(e,t)=>P(e,"name",{value:t,configurable:!0});import{realpathSync as j,readFileSync as C,statSync as g}from"node:fs";import{isAbsolute as F,resolve as y,sep as N}from"node:path";import{listInstalledPlugins as O,listInstalledPluginsInRoot as q}from"../resolver.js";import{projectScopeRoots as A}from"../scope.js";import{validateCommandManifest as E}from"../command-manifests/manifest.js";import{qualifiedTopLevelCommandName as R,resolveCommandRegistry as I}from"../command-manifests/registry.js";import{adaptPluginContributions as $,adaptPluginCoreMounts as J}from"./compose.js";import{validateHttpPluginTransport as T}from"./endpoint.js";import{applyCommandExtensions as B}from"./extensions.js";function _(e=process.cwd(),t){const a=new Set,s=[],i=d(n=>{a.has(n.name)||(a.add(n.name),s.push(n))},"consider");for(const n of A(e,t))for(const r of q("project",n))i(r);for(const n of O("user"))i(n);return s.filter(n=>n.enabled&&(n.manifest.commands!==void 0||n.manifest.transport!==void 0))}d(_,"effectiveCommandPlugins");function H(e,t){return a=>t.push({...a,plugin:e.name})}d(H,"issueFor");function b(e,t){if(typeof t!="string"||t.length===0)return null;try{const a=j(e),s=j(y(e,t));return(s===a||s.startsWith(a+N))&&g(s).isFile()?s:null}catch{return null}}d(b,"safePath");function L(e,t){const a=e.manifest.transport;if(a===void 0){t.push({code:"command_manifest_invalid",plugin:e.name,message:"commands requires transport in plugin.json",received:"(missing)",expected:"a transport object",next:"Add plugin.json.transport.",path:"transport"});return}if(typeof a!="object"||a===null||Array.isArray(a)){t.push({code:"command_manifest_invalid",plugin:e.name,message:"transport must be an object",received:Array.isArray(a)?"array":typeof a,expected:"an exec or http transport object",next:"Fix plugin.json.transport.",path:"transport"});return}const s=a;if(s.kind==="http"){const n=T(s);if(n.transport!==void 0)return n.transport;t.push({code:"command_manifest_invalid",plugin:e.name,message:n.errors.join("; "),received:JSON.stringify(a),expected:"a valid HTTP transport",next:"Fix plugin.json.transport.",path:"transport"});return}const i=Object.keys(s).filter(n=>!["kind","executable"].includes(n));if(s.kind!=="exec"||i.length||s.executable!==void 0&&(typeof s.executable!="string"||s.executable.length===0)){t.push({code:"command_manifest_invalid",plugin:e.name,message:i.length?`transport has unknown keys: ${i.join(", ")}`:"exec transport requires a non-empty executable when declared",received:JSON.stringify(a),expected:'{ kind: "exec", executable?: "plugin-relative path" }',next:"Fix plugin.json.transport.",path:"transport"});return}return{kind:"exec",...s.executable!==void 0?{executable:s.executable}:{}}}d(L,"transportFor");function w(e){return e.kind==="leaf"||e.children.some(w)}d(w,"hasExecutableLeaf");function k(e){return[...e.roots,...e.coreMounts.map(t=>t.node)]}d(k,"manifestNodes");function W(e,t,a,s){if(t.executable===void 0){if(!k(a).some(w))return t;s.push({code:"command_manifest_invalid",plugin:e.name,message:"exec transport requires executable when commands.json declares executable leaves",received:"(missing)",expected:'{ kind: "exec", executable: "plugin-relative path" }',next:"Add plugin.json.transport.executable.",path:"transport.executable"});return}const i=b(e.root,t.executable);if(i===null){s.push({code:"command_path_unsafe",plugin:e.name,message:"executable escapes the plugin root or is not a regular file",received:t.executable,expected:"a relative path to a regular file inside the plugin root",next:"Fix plugin.json.transport.executable.",path:"transport.executable"});return}if((g(i).mode&73)===0){s.push({code:"command_not_executable",plugin:e.name,message:"executable lacks the POSIX exec bit",received:t.executable,expected:"a file with an executable permission bit",next:"chmod +x the plugin executable, then update the plugin.",path:"transport.executable"});return}return{kind:"exec",executable:i}}d(W,"validateExecExecutable");function X(e){return F(e)||e.startsWith(".")||e.includes("/")||e.includes("\\")}d(X,"namesPath");function z(e,t,a){let s=!0;const i=d(n=>{if(n.kind!=="branch")return;const r=n.passthrough;if(r!==void 0&&X(r.bin)){const l=b(e.root,r.bin);l===null?(a.push({code:"command_path_unsafe",plugin:e.name,message:"passthrough binary escapes the plugin root or is not a regular file",received:r.bin,expected:"a relative path to a regular file inside the plugin root",next:"Fix passthrough.bin in commands.json.",path:"passthrough.bin"}),s=!1):(g(l).mode&73)===0?(a.push({code:"command_not_executable",plugin:e.name,message:"passthrough binary lacks the POSIX exec bit",received:r.bin,expected:"a file with an executable permission bit",next:"chmod +x the plugin executable, then update commands.json.",path:"passthrough.bin"}),s=!1):n.passthrough={...r,bin:l}}for(const l of n.children)i(l)},"visit");for(const n of k(t))i(n);return s}d(z,"resolvePassthroughBinaries");function M(e,t=new Set,a,s=new Set){const i=[],n=e.manifest.commands,r=e.manifest.transport;let l=y(e.root,typeof n=="string"?n:"commands.json");const c=d(x=>({plugin:e,manifestPath:l,...x===void 0?{}:{transport:x},contributions:[],coreMounts:[],issues:i}),"empty");if(n===void 0&&r===void 0)return c();if(typeof n!="string"||n.length===0)return i.push({code:"command_manifest_invalid",plugin:e.name,message:"transport requires commands in plugin.json",received:"(missing)",expected:"a plugin-root-relative commands path",next:"Add plugin.json.commands or remove transport.",path:"commands"}),c();const o=L(e,i);if(o===void 0)return c();const u=b(e.root,n);if(u===null)return i.push({code:"command_path_unsafe",plugin:e.name,message:"commands pointer escapes the plugin root or is not a regular file",received:n,expected:"a relative path to a regular file inside the plugin root",next:"Fix plugin.json.commands.",path:"commands"}),c(o);l=u;let p;try{p=C(u)}catch{p=null}if(p===null)return i.push({code:"command_manifest_unreadable",plugin:e.name,message:"commands.json is missing or unreadable",received:u,expected:"a readable JSON file",next:"Reinstall or update the plugin."}),c(o);let h;try{h=JSON.parse(Buffer.from(p).toString("utf8"))}catch{return i.push({code:"command_manifest_invalid",plugin:e.name,message:"commands.json is not valid JSON",received:u,expected:"a JSON object",next:"Regenerate commands.json."}),c(o)}const f=E(h,{transport:o.kind,reservedCoreNames:t,extensibleCoreBranches:s,...a!==void 0?{coreCommandPaths:a}:{}});if(f.manifest===void 0)return f.issues.forEach(H(e,i)),c(o);const m=o.kind==="exec"?W(e,o,f.manifest,i):o;if(m===void 0)return c(o);if(m.kind==="exec"&&!z(e,f.manifest,i))return c(m);const v=f.manifest.roots;if(!v.every(x=>x.kind==="branch"))throw new Error("plugin manifest validation returned a top-level leaf");return{plugin:e,manifestPath:l,transport:m,manifest:f.manifest,contributions:v.map(x=>({plugin:e,transport:m,node:x,manifest:f.manifest,manifestName:x.name})),coreMounts:f.manifest.coreMounts.map(x=>({plugin:e,transport:m,parent:x.parent,node:x.node,manifest:f.manifest})),issues:i}}d(M,"validatePluginCommands");function oe(e=process.cwd(),t){return _(e,t).map(a=>M(a))}d(oe,"discoverPluginCommandCandidates");function S(e,t=process.cwd(),a,s,i=new Set){const n=_(t,a).map(c=>M(c,e,s,i)),r=new Map;for(const c of n)for(const o of c.contributions){const u=r.get(o.node.name);u===void 0?r.set(o.node.name,[o]):u.push(o)}for(const[c,o]of r)if(o.length>1)for(const u of o){const{plugin:p}=u,h=R({name:p.name,sourceMarketplace:p.sourceMarketplace},c),f=n.find(m=>m.plugin.root===p.root);f.contributions=f.contributions.map(m=>m===u?{...m,node:{...m.node,name:h}}:m),f.issues.push({code:"command_collision",plugin:p.name,path:c,message:`top-level command "${c}" is claimed by ${o.map(m=>m.plugin.name).join(", ")} \u2014 mounted as "${h}"`,received:o.map(m=>m.plugin.name).join(", "),expected:"an origin-qualified top-level command for each claimant",next:`Invoke "${h}" to use this plugin command.`})}const l=new Map;for(const c of n)for(const o of c.coreMounts){const u=[...o.parent,o.node.name].join("/"),p=l.get(u);p===void 0?l.set(u,[o]):p.push(o)}for(const[c,o]of l)if(o.length>1)for(const u of o){const p=n.find(h=>h.plugin.root===u.plugin.root);p.coreMounts=p.coreMounts.filter(h=>h!==u),p.issues.push({code:"command_collision",plugin:u.plugin.name,path:c.replace("/","."),message:`contributed command "${u.node.name}" conflicts with another plugin child below the extensible core branch`,received:o.map(h=>h.plugin.name).join(", "),expected:`a unique child name below ${u.parent.join(".")}`,next:"Rename the contributed command or remove this mount."})}return n}d(S,"validateEffectiveCommandPlugins");function G(e,t){return{...t,contributor:{name:e.name,scope:e.scope,sourceMarketplace:e.sourceMarketplace}}}d(G,"contributorIssue");function ae(e,t=process.cwd(),a,s,i=new Set){const n=S(e,t,a,s,i);return{contributions:n.flatMap(r=>r.contributions),coreMounts:n.flatMap(r=>r.coreMounts),issues:n.flatMap(r=>r.issues)}}d(ae,"discoverCommandContributions");function se(e,t=process.cwd(),a,s,i=new Set){const n=S(e,t,a,s,i),r=$(n.flatMap(o=>o.contributions)).contributions,l=I(r,e);return{contributions:B(l.contributions,t).contributions,coreMounts:J(n.flatMap(o=>o.coreMounts)),issues:[...n.flatMap(o=>o.issues.map(u=>G(o.plugin,u))),...l.issues]}}d(se,"buildExternalCommandSnapshot");export{se as buildExternalCommandSnapshot,ae as discoverCommandContributions,oe as discoverPluginCommandCandidates,_ as effectiveCommandPlugins,S as validateEffectiveCommandPlugins,M as validatePluginCommands};