@unbound-app/cli 0.8.1 → 0.8.3

package/dist/index.mjs

@@ -7,6 +7,7 @@ import { z } from "zod";
 import { existsSync, mkdirSync, openAsBlob, readFileSync, readdirSync, rmSync, watch, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 import { ControllerClient } from "@unbound-app/debugger-protocol/controller";
+import * as z$1 from "zod/mini";
 import { glob } from "node:fs/promises";
 import { spawn, spawnSync } from "node:child_process";
 import { homedir } from "node:os";
@@ -260,8 +261,11 @@ function toMcpTool(server, definition, context) {
 	});
 }
 //#endregion
+//#region ../contracts/src/zod.ts
+z$1.config(z$1.locales.en());
+//#endregion
 //#region ../contracts/src/errors.ts
-const apiErrorCodeSchema = z.enum([
+const apiErrorCodeSchema = z$1.enum([
 	"invalid_request",
 	"invalid_manifest",
 	"unauthorized",
@@ -290,9 +294,9 @@ const apiErrorCodeSchema = z.enum([
 	"internal_error"
 ]);
 /** The body of every non-2xx JSON response from `/api/v1/*`. */
-const apiErrorResponseSchema = z.object({ error: z.object({
+const apiErrorResponseSchema = z$1.object({ error: z$1.object({
 	code: apiErrorCodeSchema,
-	message: z.string()
+	message: z$1.string()
 }) });
 //#endregion
 //#region ../../apps/web/src/api/client.ts
@@ -488,38 +492,38 @@ const ADDON_TYPES = [
 * A strict SemVer 2.0.0 version (the specification's own pattern): no `v` prefix, no leading zeros.
 * Versions become object-storage path segments and are ordered by the server, so loose forms are refused.
 */
-const semverSchema = z.string().max(64).regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/, "Must be a semver version.");
+const semverSchema = z$1.string().check(z$1.maxLength(64), z$1.regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/, "Must be a semver version."));
 /**
 * Addon ids become object-storage path segments (`addons/{id}/{version}/...`), so they are limited to
 * path-safe characters: alphanumeric runs joined by single `.`, `_` or `-`.
 */
-const addonIdSchema = z.string().max(100).regex(/^[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/, "Must be alphanumeric segments joined by \".\", \"_\" or \"-\".");
-const addonAuthorSchema = z.object({
-	name: z.string().min(1),
-	id: z.templateLiteral([z.int().nonnegative()])
+const addonIdSchema = z$1.string().check(z$1.maxLength(100), z$1.regex(/^[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/, "Must be alphanumeric segments joined by \".\", \"_\" or \"-\"."));
+const addonAuthorSchema = z$1.object({
+	name: z$1.string().check(z$1.minLength(1)),
+	id: z$1.templateLiteral([z$1.int().check(z$1.nonnegative())])
 });
 /**
 * The manifest an author publishes. Unknown keys pass through untouched so the stored manifest is
 * exactly what the author shipped; only the fields the platform relies on are validated.
 */
-const addonManifestSchema = z.looseObject({
+const addonManifestSchema = z$1.looseObject({
 	id: addonIdSchema,
-	type: z.enum(ADDON_TYPES).optional(),
-	name: z.string().min(1),
-	description: z.string(),
-	authors: z.array(addonAuthorSchema).min(1),
-	icon: z.union([z.string(), z.object({ uri: z.string() })]).optional(),
-	main: z.string().regex(/^(?:[\w-][\w.-]*\/)*[\w-][\w.-]*$/, "Must be a relative path inside the addon."),
+	type: z$1.optional(z$1.enum(ADDON_TYPES)),
+	name: z$1.string().check(z$1.minLength(1)),
+	description: z$1.string(),
+	authors: z$1.array(addonAuthorSchema).check(z$1.minLength(1)),
+	icon: z$1.optional(z$1.union([z$1.string(), z$1.object({ uri: z$1.string() })])),
+	main: z$1.string().check(z$1.regex(/^(?:[\w-][\w.-]*\/)*[\w-][\w.-]*$/, "Must be a relative path inside the addon.")),
 	version: semverSchema,
-	capabilities: z.array(z.enum(NATIVE_PLUGIN_CAPABILITIES)).optional(),
-	minNativePluginApi: z.string().optional(),
-	unbound: z.object({ min: semverSchema.optional() }).optional()
+	capabilities: z$1.optional(z$1.array(z$1.enum(NATIVE_PLUGIN_CAPABILITIES))),
+	minNativePluginApi: z$1.optional(z$1.string()),
+	unbound: z$1.optional(z$1.object({ min: z$1.optional(semverSchema) }))
 });
 //#endregion
 //#region ../contracts/src/publish.ts
 /** `listing` claims a new addon id; `update` publishes a new version of an addon the caller maintains. */
-const submissionKindSchema = z.enum(["listing", "update"]);
-const submissionStatusSchema = z.enum([
+const submissionKindSchema = z$1.enum(["listing", "update"]);
+const submissionStatusSchema = z$1.enum([
 	"awaiting_upload",
 	"pending_review",
 	"changes_requested",
@@ -529,56 +533,56 @@ const submissionStatusSchema = z.enum([
 	"expired",
 	"cancelled"
 ]);
-submissionStatusSchema.extract([
+z$1.enum([
 	"awaiting_upload",
 	"pending_review",
 	"changes_requested"
 ]);
 /** A GitHub repository as `owner/name`. */
-const repositorySchema = z.string().regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?\/[A-Za-z0-9._-]+$/, "Must be a GitHub owner/name.");
+const repositorySchema = z$1.string().check(z$1.regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?\/[A-Za-z0-9._-]+$/, "Must be a GitHub owner/name."));
 /** The statuses a reviewer's decision moves a pending submission to. */
-const reviewDecisionSchema = submissionStatusSchema.extract([
+const reviewDecisionSchema = z$1.enum([
 	"approved",
 	"rejected",
 	"changes_requested"
 ]);
-const submissionReviewSchema = z.object({
+const submissionReviewSchema = z$1.object({
 	decision: reviewDecisionSchema,
 	/** The rejection reason or requested changes; optional only on approval. */
-	note: z.string().nullable(),
-	reviewedAt: z.iso.datetime()
+	note: z$1.nullable(z$1.string()),
+	reviewedAt: z$1.iso.datetime()
 });
-const submissionSchema = z.object({
-	id: z.string().min(1),
+const submissionSchema = z$1.object({
+	id: z$1.string().check(z$1.minLength(1)),
 	addonId: addonIdSchema,
-	version: z.string(),
+	version: z$1.string(),
 	kind: submissionKindSchema,
 	status: submissionStatusSchema,
-	repository: repositorySchema.nullable(),
+	repository: z$1.nullable(repositorySchema),
 	/** No repository was named, so reviewers cannot tie the artifact to source the author controls. */
-	unverifiedSource: z.boolean(),
+	unverifiedSource: z$1.boolean(),
 	/** The reviewer's decision, once one was made. */
-	review: submissionReviewSchema.nullable()
+	review: z$1.nullable(submissionReviewSchema)
 });
-z.object({
+z$1.object({
 	manifest: addonManifestSchema,
-	bundleSize: z.int().positive(),
-	repository: repositorySchema.optional(),
-	changelog: z.string().max(1e4).optional()
+	bundleSize: z$1.int().check(z$1.positive()),
+	repository: z$1.optional(repositorySchema),
+	changelog: z$1.optional(z$1.string().check(z$1.maxLength(1e4)))
 });
 /** A presigned upload for the bundle; send exactly `bundleSize` bytes with `headers` before `expiresAt`. */
-const submissionUploadSchema = z.object({
-	url: z.url(),
-	method: z.literal("PUT"),
-	headers: z.record(z.string(), z.string()),
-	expiresAt: z.iso.datetime()
+const submissionUploadSchema = z$1.object({
+	url: z$1.url(),
+	method: z$1.literal("PUT"),
+	headers: z$1.record(z$1.string(), z$1.string()),
+	expiresAt: z$1.iso.datetime()
 });
-const createSubmissionResponseSchema = z.object({
+const createSubmissionResponseSchema = z$1.object({
 	submission: submissionSchema,
 	upload: submissionUploadSchema
 });
-z.object({});
-const finalizeSubmissionResponseSchema = z.object({ submission: submissionSchema });
+z$1.object({});
+const finalizeSubmissionResponseSchema = z$1.object({ submission: submissionSchema });
 //#endregion
 //#region ../../apps/web/src/api/publish.ts
 /**
@@ -625,7 +629,7 @@ function getBundleName(addon, main) {
 //#endregion
 //#region ../contracts/src/api.ts
 /** The origin of the Unbound web API, reduced from any http(s) URL; production when unset. */
-const apiUrlSchema = z.url({ protocol: /^https?$/ }).transform((url) => new URL(url).origin).default("https://unbound.rip");
+const apiUrlSchema = z$1._default(z$1.pipe(z$1.url({ protocol: /^https?$/ }), z$1.transform((url) => new URL(url).origin)), "https://unbound.rip");
 //#endregion
 //#region src/lib/env.ts
 const schema$3 = z.object({

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@unbound-app/cli",
-	"version": "0.8.1",
+	"version": "0.8.3",
 	"description": "The `ubd` command line for the Unbound client: evaluate on-device code and serve the debugger as an MCP.",
 	"author": {
 		"name": "Mario P.",