@unbrained/pm-cli 2026.10.11 → 2026.10.13

package/dist/core/extensions/capability-usage.d.ts

@@ -23,35 +23,35 @@ import type { ExtensionActivationResult, ExtensionCapability, ExtensionLayer } f
  * a capability that has *no* surface from being perpetually flagged as unused.
  */
 export declare const EXTENSION_CAPABILITY_REGISTRATION_SURFACES: {
-    readonly commands: readonly ["registerCommand", "command override", "command handler"];
-    readonly renderers: readonly ["registerRenderer"];
-    readonly hooks: readonly ["hooks.beforeCommand", "hooks.beforeMutation", "hooks.afterCommand", "hooks.onWrite", "hooks.onRead", "hooks.onIndex"];
-    readonly schema: readonly ["registerFlags", "registerItemFields", "registerItemTypes", "registerRelationshipKinds", "registerMigration", "registerProfile"];
-    readonly importers: readonly ["registerImporter", "registerExporter"];
-    readonly search: readonly ["registerSearchProvider", "registerVectorStoreAdapter"];
-    readonly parser: readonly ["registerParser"];
-    readonly preflight: readonly ["registerPreflight"];
-    readonly services: readonly ["registerService", "registerAssuranceMeasurementProvider"];
+readonly commands: readonly ["registerCommand", "command override", "command handler"];
+readonly renderers: readonly ["registerRenderer"];
+readonly hooks: readonly ["hooks.beforeCommand", "hooks.beforeMutation", "hooks.afterCommand", "hooks.onWrite", "hooks.onRead", "hooks.onIndex"];
+readonly schema: readonly ["registerFlags", "registerItemFields", "registerItemTypes", "registerRelationshipKinds", "registerMigration", "registerProfile"];
+readonly importers: readonly ["registerImporter", "registerExporter"];
+readonly search: readonly ["registerSearchProvider", "registerVectorStoreAdapter"];
+readonly parser: readonly ["registerParser"];
+readonly preflight: readonly ["registerPreflight"];
+readonly services: readonly ["registerService", "registerAssuranceMeasurementProvider"];
 };
 /** Per-extension reconciliation of declared versus exercised capabilities. */
 export interface ExtensionCapabilityUsageReconciliation {
-    /** Layer the extension was loaded from (`global` or `project`). */
-    layer: ExtensionLayer;
-    /** Extension name as it appears in the manifest. */
-    name: string;
-    /** Known capabilities declared in the manifest, sorted and de-duplicated. */
-    declared: ExtensionCapability[];
-    /** Known capabilities the extension actually registered against, sorted. */
-    used: ExtensionCapability[];
-    /** Declared capabilities with no matching registration (least-privilege gap). */
-    unused: ExtensionCapability[];
+/** Layer the extension was loaded from (`global` or `project`). */
+layer: ExtensionLayer;
+/** Extension name as it appears in the manifest. */
+name: string;
+/** Known capabilities declared in the manifest, sorted and de-duplicated. */
+declared: ExtensionCapability[];
+/** Known capabilities the extension actually registered against, sorted. */
+used: ExtensionCapability[];
+/** Declared capabilities with no matching registration (least-privilege gap). */
+unused: ExtensionCapability[];
 }
 /** Options for {@link collectUsedExtensionCapabilities}. */
 export interface CollectUsedExtensionCapabilitiesOptions {
-    /** Restrict the result to a single extension by name. Names are matched case-insensitively after trimming. Omit to union across every extension in the activation result. */
-    extensionName?: string;
-    /** Restrict the result to a set of extension names. This preserves the single-name option while allowing package aliases that activate multiple extensions to summarize their combined capability surface. */
-    extensionNames?: readonly string[];
+/** Restrict the result to a single extension by name. Names are matched case-insensitively after trimming. Omit to union across every extension in the activation result. */
+extensionName?: string;
+/** Restrict the result to a set of extension names. This preserves the single-name option while allowing package aliases that activate multiple extensions to summarize their combined capability surface. */
+extensionNames?: readonly string[];
 }
 /**
  * Canonical extension-name normalization (trim + lowercase) used to match an
@@ -80,7 +80,7 @@ export declare function collectUsedExtensionCapabilities(activation: ExtensionAc
  * when `unused` is empty so callers can report fully-minimal manifests too.
  */
 export declare function reconcileExtensionCapabilityUsage(loaded: ReadonlyArray<{
-    layer: ExtensionLayer;
-    name: string;
-    capabilities?: readonly string[];
+layer: ExtensionLayer;
+name: string;
+capabilities?: readonly string[];
 }>, activation: ExtensionActivationResult): ExtensionCapabilityUsageReconciliation[];

package/dist/core/extensions/command-hook-context.d.ts

@@ -8,33 +8,33 @@ import type { GlobalOptions } from "../shared/command-types.js";
 import type { ExtensionHookRegistry } from "./loader.js";
 /** Runtime state consumed after a command finishes. */
 export interface ActiveExtensionHookContext<TMigrationBlocker> {
-    /** Active extension hooks, empty for a core-only invocation. */
-    hooks: ExtensionHookRegistry;
-    /** Canonical dotted command path. */
-    commandName: string;
-    /** Positional command arguments after parser overrides. */
-    commandArgs: string[];
-    /** Command-scoped options after parser overrides. */
-    commandOptions: Record<string, unknown>;
-    /** Global options after parser overrides. */
-    globalOptions: GlobalOptions;
-    /** Tracker root for hooks and derived feedback. */
-    pmRoot: string;
-    /** Whether profile diagnostics should be rendered. */
-    profileEnabled: boolean;
-    /** Mandatory extension migrations that remain unresolved. */
-    migrationBlockers: TMigrationBlocker[];
+/** Active extension hooks, empty for a core-only invocation. */
+hooks: ExtensionHookRegistry;
+/** Canonical dotted command path. */
+commandName: string;
+/** Positional command arguments after parser overrides. */
+commandArgs: string[];
+/** Command-scoped options after parser overrides. */
+commandOptions: Record<string, unknown>;
+/** Global options after parser overrides. */
+globalOptions: GlobalOptions;
+/** Tracker root for hooks and derived feedback. */
+pmRoot: string;
+/** Whether profile diagnostics should be rendered. */
+profileEnabled: boolean;
+/** Mandatory extension migrations that remain unresolved. */
+migrationBlockers: TMigrationBlocker[];
 }
 /** Creates post-command runtime state for an invocation without extensions. */
 export declare function createCoreCommandHookContext(options: {
-    /** Canonical dotted command path. */
-    commandName: string;
-    /** Positional command arguments. */
-    commandArgs: string[];
-    /** Command-scoped options. */
-    commandOptions: Record<string, unknown>;
-    /** Parsed global options. */
-    globalOptions: GlobalOptions;
-    /** Resolved tracker root. */
-    pmRoot: string;
+/** Canonical dotted command path. */
+commandName: string;
+/** Positional command arguments. */
+commandArgs: string[];
+/** Command-scoped options. */
+commandOptions: Record<string, unknown>;
+/** Parsed global options. */
+globalOptions: GlobalOptions;
+/** Resolved tracker root. */
+pmRoot: string;
 }): ActiveExtensionHookContext<never>;

package/dist/core/extensions/contribution-inventory.d.ts

@@ -3,25 +3,25 @@ import type { ExtensionContributionInventory } from "./extension-types.js";
 export declare function normalizeExtensionContributionInventory(value: unknown): ExtensionContributionInventory | null | undefined;
 /** Project an activation summary into the versioned static inventory contract. */
 export declare function createExtensionContributionInventory(summary: {
-    commands: string[];
-    command_overrides: string[];
-    command_handlers: string[];
-    hooks: string[];
-    flag_commands: string[];
-    item_types: string[];
-    item_fields: string[];
-    relationship_kinds?: string[];
-    migrations: string[];
-    profiles: string[];
-    importers: string[];
-    exporters: string[];
-    search_providers: string[];
-    vector_store_adapters: string[];
-    assurance_providers?: string[];
-    parser_overrides: string[];
-    service_overrides: string[];
-    renderer_overrides: string[];
-    renderer_ownership?: ExtensionContributionInventory["renderer_ownership"];
-    preflight_overrides: number;
-    preflight_ownership?: ExtensionContributionInventory["preflight_ownership"];
+commands: string[];
+command_overrides: string[];
+command_handlers: string[];
+hooks: string[];
+flag_commands: string[];
+item_types: string[];
+item_fields: string[];
+relationship_kinds?: string[];
+migrations: string[];
+profiles: string[];
+importers: string[];
+exporters: string[];
+search_providers: string[];
+vector_store_adapters: string[];
+assurance_providers?: string[];
+parser_overrides: string[];
+service_overrides: string[];
+renderer_overrides: string[];
+renderer_ownership?: ExtensionContributionInventory["renderer_ownership"];
+preflight_overrides: number;
+preflight_ownership?: ExtensionContributionInventory["preflight_ownership"];
 }): ExtensionContributionInventory;

package/dist/core/extensions/extension-candidate.d.ts

@@ -6,21 +6,21 @@
 import type { ExtensionCandidate, ExtensionContributionInventory, ExtensionLayer, ExtensionManifest } from "./extension-types.js";
 /** Managed package identity attached to a discovered extension directory. */
 export interface ExtensionCandidateSourceIdentity {
-    /** Registry package name when known. */
-    package_name?: string;
-    /** Install-source aliases accepted by lifecycle commands. */
-    aliases: string[];
-    /** Persisted install-time contribution snapshot. */
-    contributions?: ExtensionContributionInventory;
+/** Registry package name when known. */
+package_name?: string;
+/** Install-source aliases accepted by lifecycle commands. */
+aliases: string[];
+/** Persisted install-time contribution snapshot. */
+contributions?: ExtensionContributionInventory;
 }
 /** Build an import-ready discovery candidate only after every static gate passes. */
 export declare function buildReadyExtensionCandidate(params: {
-    layer: ExtensionLayer;
-    directory: string;
-    manifestPath: string;
-    entryPath: string;
-    manifest: ExtensionManifest;
-    sourceIdentity: ExtensionCandidateSourceIdentity | undefined;
-    extensionReady: boolean;
-    enabledForLoad: boolean;
+layer: ExtensionLayer;
+directory: string;
+manifestPath: string;
+entryPath: string;
+manifest: ExtensionManifest;
+sourceIdentity: ExtensionCandidateSourceIdentity | undefined;
+extensionReady: boolean;
+enabledForLoad: boolean;
 }): ExtensionCandidate | null;

package/dist/core/extensions/extension-capability-aliases.d.ts

@@ -16,8 +16,8 @@ export declare function collectUnknownExtensionCapabilities(capabilities: readon
 export declare function resolveLegacyExtensionCapabilityAlias(capability: string): ExtensionCapability | null;
 /** Implements normalize manifest capabilities for the public runtime surface of this module. */
 export declare function normalizeManifestCapabilities(rawCapabilities: readonly string[]): {
-    capabilities: string[];
-    legacy_aliases: LegacyExtensionCapabilityAliasMapping[];
+capabilities: string[];
+legacy_aliases: LegacyExtensionCapabilityAliasMapping[];
 };
 /** Implements suggest known extension capability for the public runtime surface of this module. */
 export declare function suggestKnownExtensionCapability(capability: string): string | null;

package/dist/core/extensions/extension-policy.d.ts

@@ -6,86 +6,86 @@
 import { type ExtensionCapability, type ExtensionGovernancePolicy, type ExtensionLayer, type ExtensionPolicyMode, type ExtensionPolicySurface, type ExtensionSandboxProfile, type ExtensionTrustMode, type PmMaxVersionExceededMode, type PmMaxVersionExceededModeSetting } from "./extension-types.js";
 import type { PmSettings } from "../../types/index.js";
 interface NormalizedExtensionPolicyOverride {
-    name: string;
-    disabled: boolean;
-    requireTrusted: boolean;
-    requireProvenance: boolean;
-    sandboxProfile?: ExtensionSandboxProfile;
-    allowedCapabilities: Set<string>;
-    blockedCapabilities: Set<string>;
-    allowedSurfaces: Set<string>;
-    blockedSurfaces: Set<string>;
-    allowedCommands: Set<string>;
-    blockedCommands: Set<string>;
-    allowedActions: Set<string>;
-    blockedActions: Set<string>;
-    allowedServices: Set<string>;
-    blockedServices: Set<string>;
+name: string;
+disabled: boolean;
+requireTrusted: boolean;
+requireProvenance: boolean;
+sandboxProfile?: ExtensionSandboxProfile;
+allowedCapabilities: Set<string>;
+blockedCapabilities: Set<string>;
+allowedSurfaces: Set<string>;
+blockedSurfaces: Set<string>;
+allowedCommands: Set<string>;
+blockedCommands: Set<string>;
+allowedActions: Set<string>;
+blockedActions: Set<string>;
+allowedServices: Set<string>;
+blockedServices: Set<string>;
 }
 /** Concrete per-layer resolution of `pm_max_version_exceeded_mode` (default: block). */
 export interface NormalizedPmMaxVersionExceededMode {
-    /** Value that configures or reports global for this contract. */
-    global: PmMaxVersionExceededMode;
-    /** Value that configures or reports project for this contract. */
-    project: PmMaxVersionExceededMode;
+/** Value that configures or reports global for this contract. */
+global: PmMaxVersionExceededMode;
+/** Value that configures or reports project for this contract. */
+project: PmMaxVersionExceededMode;
 }
 /** Documents the normalized extension policy payload exchanged by command, SDK, and package integrations. */
 export interface NormalizedExtensionPolicy {
-    /** Value that configures or reports mode for this contract. */
-    mode: ExtensionPolicyMode;
-    /** Strategy used to control trust behavior. */
-    trustMode: ExtensionTrustMode;
-    /** Strategy used to control pm max version exceeded behavior. */
-    pmMaxVersionExceededMode: NormalizedPmMaxVersionExceededMode;
-    /** Value that configures or reports require provenance for this contract. */
-    requireProvenance: boolean;
-    /** Value that configures or reports trusted extensions for this contract. */
-    trustedExtensions: Set<string>;
-    /** Fallback sandbox profile used when callers do not provide an override. */
-    defaultSandboxProfile: ExtensionSandboxProfile;
-    /** Value that configures or reports allowed extensions for this contract. */
-    allowedExtensions: Set<string>;
-    /** Value that configures or reports blocked extensions for this contract. */
-    blockedExtensions: Set<string>;
-    /** Value that configures or reports allowed capabilities for this contract. */
-    allowedCapabilities: Set<string>;
-    /** Value that configures or reports blocked capabilities for this contract. */
-    blockedCapabilities: Set<string>;
-    /** Value that configures or reports allowed surfaces for this contract. */
-    allowedSurfaces: Set<string>;
-    /** Value that configures or reports blocked surfaces for this contract. */
-    blockedSurfaces: Set<string>;
-    /** Value that configures or reports allowed commands for this contract. */
-    allowedCommands: Set<string>;
-    /** Value that configures or reports blocked commands for this contract. */
-    blockedCommands: Set<string>;
-    /** Value that configures or reports allowed actions for this contract. */
-    allowedActions: Set<string>;
-    /** Value that configures or reports blocked actions for this contract. */
-    blockedActions: Set<string>;
-    /** Value that configures or reports allowed services for this contract. */
-    allowedServices: Set<string>;
-    /** Value that configures or reports blocked services for this contract. */
-    blockedServices: Set<string>;
-    /** Value that configures or reports overrides by name for this contract. */
-    overridesByName: Map<string, NormalizedExtensionPolicyOverride>;
-    /** Value that configures or reports warnings for this contract. */
-    warnings: string[];
+/** Value that configures or reports mode for this contract. */
+mode: ExtensionPolicyMode;
+/** Strategy used to control trust behavior. */
+trustMode: ExtensionTrustMode;
+/** Strategy used to control pm max version exceeded behavior. */
+pmMaxVersionExceededMode: NormalizedPmMaxVersionExceededMode;
+/** Value that configures or reports require provenance for this contract. */
+requireProvenance: boolean;
+/** Value that configures or reports trusted extensions for this contract. */
+trustedExtensions: Set<string>;
+/** Fallback sandbox profile used when callers do not provide an override. */
+defaultSandboxProfile: ExtensionSandboxProfile;
+/** Value that configures or reports allowed extensions for this contract. */
+allowedExtensions: Set<string>;
+/** Value that configures or reports blocked extensions for this contract. */
+blockedExtensions: Set<string>;
+/** Value that configures or reports allowed capabilities for this contract. */
+allowedCapabilities: Set<string>;
+/** Value that configures or reports blocked capabilities for this contract. */
+blockedCapabilities: Set<string>;
+/** Value that configures or reports allowed surfaces for this contract. */
+allowedSurfaces: Set<string>;
+/** Value that configures or reports blocked surfaces for this contract. */
+blockedSurfaces: Set<string>;
+/** Value that configures or reports allowed commands for this contract. */
+allowedCommands: Set<string>;
+/** Value that configures or reports blocked commands for this contract. */
+blockedCommands: Set<string>;
+/** Value that configures or reports allowed actions for this contract. */
+allowedActions: Set<string>;
+/** Value that configures or reports blocked actions for this contract. */
+blockedActions: Set<string>;
+/** Value that configures or reports allowed services for this contract. */
+allowedServices: Set<string>;
+/** Value that configures or reports blocked services for this contract. */
+blockedServices: Set<string>;
+/** Value that configures or reports overrides by name for this contract. */
+overridesByName: Map<string, NormalizedExtensionPolicyOverride>;
+/** Value that configures or reports warnings for this contract. */
+warnings: string[];
 }
 /** Documents the policy extension ref payload exchanged by command, SDK, and package integrations. */
 export interface PolicyExtensionRef {
-    /** Value that configures or reports layer for this contract. */
-    layer: ExtensionLayer;
-    /** Value that configures or reports name for this contract. */
-    name: string;
-    /** Value that configures or reports trusted for this contract. */
-    trusted?: boolean;
-    /** Value that configures or reports provenance verified for this contract. */
-    provenanceVerified?: boolean;
-    /** Value that configures or reports sandbox profile for this contract. */
-    sandboxProfile?: ExtensionSandboxProfile;
-    /** Value that configures or reports permissions for this contract. */
-    permissions?: Record<string, boolean | undefined>;
+/** Value that configures or reports layer for this contract. */
+layer: ExtensionLayer;
+/** Value that configures or reports name for this contract. */
+name: string;
+/** Value that configures or reports trusted for this contract. */
+trusted?: boolean;
+/** Value that configures or reports provenance verified for this contract. */
+provenanceVerified?: boolean;
+/** Value that configures or reports sandbox profile for this contract. */
+sandboxProfile?: ExtensionSandboxProfile;
+/** Value that configures or reports permissions for this contract. */
+permissions?: Record<string, boolean | undefined>;
 }
 /** Implements normalize policy sandbox profile for the public runtime surface of this module. */
 export declare function normalizePolicySandboxProfile(value: string | undefined): ExtensionSandboxProfile;
@@ -106,21 +106,21 @@ export declare function serializeExtensionPolicy(policy: NormalizedExtensionPoli
 export declare function hydrateExtensionPolicy(policy: ExtensionGovernancePolicy): NormalizedExtensionPolicy;
 /** Evaluate the layer-level governance policy for one extension by combining the extension allow/block decision, the trust-mode decision, and the sandbox-profile decision. Reasons are weighed in extension → trust → sandbox order: the first reason whose governing mode is `enforce` blocks the extension; otherwise the first whose mode is `warn` surfaces a non-blocking violation warning; otherwise the extension is allowed. The all-`off` short-circuit skips reason resolution entirely. */
 export declare function evaluateExtensionPolicyForExtension(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): {
-    allowed: boolean;
-    warning: string | null;
+allowed: boolean;
+warning: string | null;
 };
 /** Implements evaluate extension policy for capability for the public runtime surface of this module. */
 export declare function evaluateExtensionPolicyForCapability(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef, capability: string): {
-    allowed: boolean;
-    warning: string | null;
+allowed: boolean;
+warning: string | null;
 };
 /** Evaluate the governance policy for a single capability/surface registration an extension performs during activation. When `mode` is `off` the registration is always allowed; otherwise the first allow/block reason (capability → surface → command → action → service) blocks the registration under `enforce` or surfaces a non-blocking violation warning under `warn`. */
 export declare function evaluateExtensionPolicyForRegistration(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef, surface: ExtensionPolicySurface, method: string, capability?: ExtensionCapability, details?: {
-    command?: string;
-    action?: string;
-    service?: string;
+command?: string;
+action?: string;
+service?: string;
 }): {
-    allowed: boolean;
-    warning: string | null;
+allowed: boolean;
+warning: string | null;
 };
 export {};