@unbrained/pm-cli 2026.5.10 → 2026.5.12

package/dist/core/shared/errors.d.ts

@@ -1,3 +1,10 @@
+export interface PmCliErrorRecoveryPayload {
+    attempted_command?: string;
+    normalized_args?: string[];
+    provided_fields?: string[];
+    missing?: string[];
+    suggested_retry?: string;
+}
 export interface PmCliErrorContext {
     code?: string;
     type?: string;
@@ -5,6 +12,7 @@ export interface PmCliErrorContext {
     why?: string;
     examples?: string[];
     nextSteps?: string[];
+    recovery?: PmCliErrorRecoveryPayload;
 }
 export declare class PmCliError extends Error {
     readonly exitCode: number;

package/dist/core/shared/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"/","sources":["core/shared/errors.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnB,QAAQ,CAAS;IACjB,OAAO,CAAoB;IAE3C,YAAY,OAAe,EAAE,QAAgB,EAAE,UAA6B,EAAE;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF","sourcesContent":["export interface PmCliErrorContext {\n  code?: string;\n  type?: string;\n  required?: string;\n  why?: string;\n  examples?: string[];\n  nextSteps?: string[];\n}\n\nexport class PmCliError extends Error {\n  public readonly exitCode: number;\n  public readonly context: PmCliErrorContext;\n\n  constructor(message: string, exitCode: number, context: PmCliErrorContext = {}) {\n    super(message);\n    this.name = \"PmCliError\";\n    this.exitCode = exitCode;\n    this.context = context;\n  }\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"/","sources":["core/shared/errors.ts"],"names":[],"mappings":"AAkBA,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnB,QAAQ,CAAS;IACjB,OAAO,CAAoB;IAE3C,YAAY,OAAe,EAAE,QAAgB,EAAE,UAA6B,EAAE;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF","sourcesContent":["export interface PmCliErrorRecoveryPayload {\n  attempted_command?: string;\n  normalized_args?: string[];\n  provided_fields?: string[];\n  missing?: string[];\n  suggested_retry?: string;\n}\n\nexport interface PmCliErrorContext {\n  code?: string;\n  type?: string;\n  required?: string;\n  why?: string;\n  examples?: string[];\n  nextSteps?: string[];\n  recovery?: PmCliErrorRecoveryPayload;\n}\n\nexport class PmCliError extends Error {\n  public readonly exitCode: number;\n  public readonly context: PmCliErrorContext;\n\n  constructor(message: string, exitCode: number, context: PmCliErrorContext = {}) {\n    super(message);\n    this.name = \"PmCliError\";\n    this.exitCode = exitCode;\n    this.context = context;\n  }\n}\n"]}

package/dist/core/shared/levenshtein.d.ts

@@ -0,0 +1 @@
+export declare function levenshteinDistanceWithinLimit(left: string, right: string, limit: number): number | null;

package/dist/core/shared/levenshtein.js

@@ -0,0 +1,37 @@
+export function levenshteinDistanceWithinLimit(left, right, limit) {
+    if (left === right) {
+        return 0;
+    }
+    if (Math.abs(left.length - right.length) > limit) {
+        return null;
+    }
+    const previous = new Array(right.length + 1);
+    const current = new Array(right.length + 1);
+    for (let column = 0; column <= right.length; column += 1) {
+        previous[column] = column;
+    }
+    for (let row = 1; row <= left.length; row += 1) {
+        current[0] = row;
+        let rowMin = current[0];
+        for (let column = 1; column <= right.length; column += 1) {
+            const cost = left[row - 1] === right[column - 1] ? 0 : 1;
+            const substitution = previous[column - 1] + cost;
+            const insertion = current[column - 1] + 1;
+            const deletion = previous[column] + 1;
+            const candidate = Math.min(substitution, insertion, deletion);
+            current[column] = candidate;
+            if (candidate < rowMin) {
+                rowMin = candidate;
+            }
+        }
+        if (rowMin > limit) {
+            return null;
+        }
+        for (let column = 0; column <= right.length; column += 1) {
+            previous[column] = current[column];
+        }
+    }
+    const result = previous[right.length];
+    return result <= limit ? result : null;
+}
+//# sourceMappingURL=levenshtein.js.map

package/dist/core/shared/levenshtein.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"levenshtein.js","sourceRoot":"/","sources":["core/shared/levenshtein.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,8BAA8B,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IACvF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAS,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAS,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IACD,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,IAAI,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YACjD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9D,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;YAC5B,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC","sourcesContent":["export function levenshteinDistanceWithinLimit(left: string, right: string, limit: number): number | null {\n  if (left === right) {\n    return 0;\n  }\n  if (Math.abs(left.length - right.length) > limit) {\n    return null;\n  }\n  const previous = new Array<number>(right.length + 1);\n  const current = new Array<number>(right.length + 1);\n  for (let column = 0; column <= right.length; column += 1) {\n    previous[column] = column;\n  }\n  for (let row = 1; row <= left.length; row += 1) {\n    current[0] = row;\n    let rowMin = current[0];\n    for (let column = 1; column <= right.length; column += 1) {\n      const cost = left[row - 1] === right[column - 1] ? 0 : 1;\n      const substitution = previous[column - 1] + cost;\n      const insertion = current[column - 1] + 1;\n      const deletion = previous[column] + 1;\n      const candidate = Math.min(substitution, insertion, deletion);\n      current[column] = candidate;\n      if (candidate < rowMin) {\n        rowMin = candidate;\n      }\n    }\n    if (rowMin > limit) {\n      return null;\n    }\n    for (let column = 0; column <= right.length; column += 1) {\n      previous[column] = current[column];\n    }\n  }\n  const result = previous[right.length];\n  return result <= limit ? result : null;\n}\n"]}

package/dist/core/store/paths.js

@@ -1,3 +1,4 @@
+import { statSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { PM_DIRNAME, SETTINGS_FILENAME, TYPE_TO_FOLDER } from "../shared/constants.js";
@@ -10,9 +11,41 @@ const ITEM_FORMAT_BY_EXTENSION = {
     ".toon": "toon",
 };
 export const ITEM_FILE_EXTENSIONS = [".md", ".toon"];
+function pathExists(pathValue) {
+    try {
+        statSync(pathValue);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function discoverPmRootFromAncestors(cwd) {
+    let current = path.resolve(cwd);
+    while (true) {
+        const candidateRoot = path.join(current, PM_DIRNAME);
+        const candidateSettingsPath = path.join(candidateRoot, SETTINGS_FILENAME);
+        if (pathExists(candidateSettingsPath)) {
+            return candidateRoot;
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return undefined;
+        }
+        current = parent;
+    }
+}
 export function resolvePmRoot(cwd, cliPath) {
     const envPath = process.env.PM_PATH;
-    const selected = cliPath?.trim() || envPath?.trim() || PM_DIRNAME;
+    const explicitPath = cliPath?.trim() || envPath?.trim();
+    if (explicitPath) {
+        return path.resolve(cwd, explicitPath);
+    }
+    const discoveredRoot = discoverPmRootFromAncestors(cwd);
+    if (discoveredRoot) {
+        return discoveredRoot;
+    }
+    const selected = PM_DIRNAME;
     return path.resolve(cwd, selected);
 }
 export function resolveGlobalPmRoot(cwd) {

package/dist/core/store/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"/","sources":["core/store/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGvF,MAAM,CAAC,MAAM,6BAA6B,GAAwC;IAChF,aAAa,EAAE,KAAK;IACpB,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,MAAM;CAC8B,CAAC;AAEhD,MAAM,CAAC,MAAM,oBAAoB,GAAiD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAEnG,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAgB;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAc,EAAE,eAAuC,cAAc;IAClH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAAc,EACd,EAAU,EACV,aAAyB,MAAM,EAC/B,eAAuC,cAAc;IAErD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,6BAA6B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAA2C,CAAC;IAChG,OAAO,wBAAwB,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,EAAU;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACpE,CAAC","sourcesContent":["import os from \"node:os\";\nimport path from \"node:path\";\nimport { PM_DIRNAME, SETTINGS_FILENAME, TYPE_TO_FOLDER } from \"../shared/constants.js\";\nimport type { ItemFormat, ItemType } from \"../../types/index.js\";\n\nexport const ITEM_FILE_EXTENSION_BY_FORMAT: Record<ItemFormat, \".md\" | \".toon\"> = {\n  json_markdown: \".md\",\n  toon: \".toon\",\n};\n\nconst ITEM_FORMAT_BY_EXTENSION = {\n  \".md\": \"json_markdown\",\n  \".toon\": \"toon\",\n} as const satisfies Record<string, ItemFormat>;\n\nexport const ITEM_FILE_EXTENSIONS: Array<keyof typeof ITEM_FORMAT_BY_EXTENSION> = [\".md\", \".toon\"];\n\nexport function resolvePmRoot(cwd: string, cliPath?: string): string {\n  const envPath = process.env.PM_PATH;\n  const selected = cliPath?.trim() || envPath?.trim() || PM_DIRNAME;\n  return path.resolve(cwd, selected);\n}\n\nexport function resolveGlobalPmRoot(cwd: string): string {\n  const envPath = process.env.PM_GLOBAL_PATH?.trim();\n  const selected = envPath && envPath.length > 0 ? envPath : path.join(os.homedir(), \".pm-cli\");\n  return path.resolve(cwd, selected);\n}\n\nexport function getSettingsPath(pmRoot: string): string {\n  return path.join(pmRoot, SETTINGS_FILENAME);\n}\n\nfunction deriveDefaultTypeFolder(type: string): string {\n  const normalized = type\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (normalized.length === 0) {\n    return \"items\";\n  }\n  return normalized.endsWith(\"s\") ? normalized : `${normalized}s`;\n}\n\nexport function getTypeDirPath(pmRoot: string, type: ItemType, typeToFolder: Record<string, string> = TYPE_TO_FOLDER): string {\n  const folder = typeToFolder[type] ?? deriveDefaultTypeFolder(type);\n  return path.join(pmRoot, folder);\n}\n\nexport function getItemPath(\n  pmRoot: string,\n  type: ItemType,\n  id: string,\n  itemFormat: ItemFormat = \"toon\",\n  typeToFolder: Record<string, string> = TYPE_TO_FOLDER,\n): string {\n  return path.join(getTypeDirPath(pmRoot, type, typeToFolder), `${id}${ITEM_FILE_EXTENSION_BY_FORMAT[itemFormat]}`);\n}\n\nexport function getItemFormatFromPath(itemPath: string): ItemFormat | null {\n  const extension = path.extname(itemPath).toLowerCase() as keyof typeof ITEM_FORMAT_BY_EXTENSION;\n  return ITEM_FORMAT_BY_EXTENSION[extension] ?? null;\n}\n\nexport function getHistoryPath(pmRoot: string, id: string): string {\n  return path.join(pmRoot, \"history\", `${id}.jsonl`);\n}\n\nexport function getLockPath(pmRoot: string, id: string): string {\n  return path.join(pmRoot, \"locks\", `${id}.lock`);\n}\n\nexport function getRuntimePath(pmRoot: string): string {\n  return path.join(pmRoot, \"runtime\");\n}\n\nexport function getTestRunsPath(pmRoot: string): string {\n  return path.join(getRuntimePath(pmRoot), \"test-runs\");\n}\n\nexport function getTestRunsRecordsPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"runs\");\n}\n\nexport function getTestRunRecordPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsRecordsPath(pmRoot), `${runId}.json`);\n}\n\nexport function getTestRunsStdoutPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"stdout\");\n}\n\nexport function getTestRunsStderrPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"stderr\");\n}\n\nexport function getTestRunStdoutPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsStdoutPath(pmRoot), `${runId}.log`);\n}\n\nexport function getTestRunStderrPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsStderrPath(pmRoot), `${runId}.log`);\n}\n\nexport function getTestRunsResultsPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"results\");\n}\n\nexport function getTestRunResultPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsResultsPath(pmRoot), `${runId}.json`);\n}\n"]}
+{"version":3,"file":"paths.js","sourceRoot":"/","sources":["core/store/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGvF,MAAM,CAAC,MAAM,6BAA6B,GAAwC;IAChF,aAAa,EAAE,KAAK;IACpB,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,MAAM;CAC8B,CAAC;AAEhD,MAAM,CAAC,MAAM,oBAAoB,GAAiD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAEnG,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,CAAC;QACH,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAC1E,IAAI,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACtC,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAgB;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,cAAc,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAc,EAAE,eAAuC,cAAc;IAClH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAAc,EACd,EAAU,EACV,aAAyB,MAAM,EAC/B,eAAuC,cAAc;IAErD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,6BAA6B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAA2C,CAAC;IAChG,OAAO,wBAAwB,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,EAAU;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACpE,CAAC","sourcesContent":["import { statSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { PM_DIRNAME, SETTINGS_FILENAME, TYPE_TO_FOLDER } from \"../shared/constants.js\";\nimport type { ItemFormat, ItemType } from \"../../types/index.js\";\n\nexport const ITEM_FILE_EXTENSION_BY_FORMAT: Record<ItemFormat, \".md\" | \".toon\"> = {\n  json_markdown: \".md\",\n  toon: \".toon\",\n};\n\nconst ITEM_FORMAT_BY_EXTENSION = {\n  \".md\": \"json_markdown\",\n  \".toon\": \"toon\",\n} as const satisfies Record<string, ItemFormat>;\n\nexport const ITEM_FILE_EXTENSIONS: Array<keyof typeof ITEM_FORMAT_BY_EXTENSION> = [\".md\", \".toon\"];\n\nfunction pathExists(pathValue: string): boolean {\n  try {\n    statSync(pathValue);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction discoverPmRootFromAncestors(cwd: string): string | undefined {\n  let current = path.resolve(cwd);\n  while (true) {\n    const candidateRoot = path.join(current, PM_DIRNAME);\n    const candidateSettingsPath = path.join(candidateRoot, SETTINGS_FILENAME);\n    if (pathExists(candidateSettingsPath)) {\n      return candidateRoot;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) {\n      return undefined;\n    }\n    current = parent;\n  }\n}\n\nexport function resolvePmRoot(cwd: string, cliPath?: string): string {\n  const envPath = process.env.PM_PATH;\n  const explicitPath = cliPath?.trim() || envPath?.trim();\n  if (explicitPath) {\n    return path.resolve(cwd, explicitPath);\n  }\n  const discoveredRoot = discoverPmRootFromAncestors(cwd);\n  if (discoveredRoot) {\n    return discoveredRoot;\n  }\n  const selected = PM_DIRNAME;\n  return path.resolve(cwd, selected);\n}\n\nexport function resolveGlobalPmRoot(cwd: string): string {\n  const envPath = process.env.PM_GLOBAL_PATH?.trim();\n  const selected = envPath && envPath.length > 0 ? envPath : path.join(os.homedir(), \".pm-cli\");\n  return path.resolve(cwd, selected);\n}\n\nexport function getSettingsPath(pmRoot: string): string {\n  return path.join(pmRoot, SETTINGS_FILENAME);\n}\n\nfunction deriveDefaultTypeFolder(type: string): string {\n  const normalized = type\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (normalized.length === 0) {\n    return \"items\";\n  }\n  return normalized.endsWith(\"s\") ? normalized : `${normalized}s`;\n}\n\nexport function getTypeDirPath(pmRoot: string, type: ItemType, typeToFolder: Record<string, string> = TYPE_TO_FOLDER): string {\n  const folder = typeToFolder[type] ?? deriveDefaultTypeFolder(type);\n  return path.join(pmRoot, folder);\n}\n\nexport function getItemPath(\n  pmRoot: string,\n  type: ItemType,\n  id: string,\n  itemFormat: ItemFormat = \"toon\",\n  typeToFolder: Record<string, string> = TYPE_TO_FOLDER,\n): string {\n  return path.join(getTypeDirPath(pmRoot, type, typeToFolder), `${id}${ITEM_FILE_EXTENSION_BY_FORMAT[itemFormat]}`);\n}\n\nexport function getItemFormatFromPath(itemPath: string): ItemFormat | null {\n  const extension = path.extname(itemPath).toLowerCase() as keyof typeof ITEM_FORMAT_BY_EXTENSION;\n  return ITEM_FORMAT_BY_EXTENSION[extension] ?? null;\n}\n\nexport function getHistoryPath(pmRoot: string, id: string): string {\n  return path.join(pmRoot, \"history\", `${id}.jsonl`);\n}\n\nexport function getLockPath(pmRoot: string, id: string): string {\n  return path.join(pmRoot, \"locks\", `${id}.lock`);\n}\n\nexport function getRuntimePath(pmRoot: string): string {\n  return path.join(pmRoot, \"runtime\");\n}\n\nexport function getTestRunsPath(pmRoot: string): string {\n  return path.join(getRuntimePath(pmRoot), \"test-runs\");\n}\n\nexport function getTestRunsRecordsPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"runs\");\n}\n\nexport function getTestRunRecordPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsRecordsPath(pmRoot), `${runId}.json`);\n}\n\nexport function getTestRunsStdoutPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"stdout\");\n}\n\nexport function getTestRunsStderrPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"stderr\");\n}\n\nexport function getTestRunStdoutPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsStdoutPath(pmRoot), `${runId}.log`);\n}\n\nexport function getTestRunStderrPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsStderrPath(pmRoot), `${runId}.log`);\n}\n\nexport function getTestRunsResultsPath(pmRoot: string): string {\n  return path.join(getTestRunsPath(pmRoot), \"results\");\n}\n\nexport function getTestRunResultPath(pmRoot: string, runId: string): string {\n  return path.join(getTestRunsResultsPath(pmRoot), `${runId}.json`);\n}\n"]}

package/dist/core/store/settings.js

@@ -109,6 +109,45 @@ const governanceSettingsSchema = z
     force_required_for_stale_lock: z.boolean().optional(),
 })
     .optional();
+const extensionPolicyOverrideSchema = z.object({
+    name: z.string(),
+    disabled: z.boolean().optional(),
+    require_trusted: z.boolean().optional(),
+    require_provenance: z.boolean().optional(),
+    sandbox_profile: z.union([z.literal("none"), z.literal("restricted"), z.literal("strict")]).optional(),
+    allowed_capabilities: z.array(z.string()).optional(),
+    blocked_capabilities: z.array(z.string()).optional(),
+    allowed_surfaces: z.array(z.string()).optional(),
+    blocked_surfaces: z.array(z.string()).optional(),
+    allowed_commands: z.array(z.string()).optional(),
+    blocked_commands: z.array(z.string()).optional(),
+    allowed_actions: z.array(z.string()).optional(),
+    blocked_actions: z.array(z.string()).optional(),
+    allowed_services: z.array(z.string()).optional(),
+    blocked_services: z.array(z.string()).optional(),
+});
+const extensionPolicySchema = z
+    .object({
+    mode: z.union([z.literal("off"), z.literal("warn"), z.literal("enforce")]).optional(),
+    trust_mode: z.union([z.literal("off"), z.literal("warn"), z.literal("enforce")]).optional(),
+    require_provenance: z.boolean().optional(),
+    trusted_extensions: z.array(z.string()).optional(),
+    default_sandbox_profile: z.union([z.literal("none"), z.literal("restricted"), z.literal("strict")]).optional(),
+    allowed_extensions: z.array(z.string()).optional(),
+    blocked_extensions: z.array(z.string()).optional(),
+    allowed_capabilities: z.array(z.string()).optional(),
+    blocked_capabilities: z.array(z.string()).optional(),
+    allowed_surfaces: z.array(z.string()).optional(),
+    blocked_surfaces: z.array(z.string()).optional(),
+    allowed_commands: z.array(z.string()).optional(),
+    blocked_commands: z.array(z.string()).optional(),
+    allowed_actions: z.array(z.string()).optional(),
+    blocked_actions: z.array(z.string()).optional(),
+    allowed_services: z.array(z.string()).optional(),
+    blocked_services: z.array(z.string()).optional(),
+    extension_overrides: z.array(extensionPolicyOverrideSchema).optional(),
+})
+    .optional();
 const settingsSchema = z.object({
     version: z.number().int(),
     id_prefix: z.string(),
@@ -186,6 +225,7 @@ const settingsSchema = z.object({
     extensions: z.object({
         enabled: z.array(z.string()),
         disabled: z.array(z.string()),
+        policy: extensionPolicySchema,
     }),
     search: z.object({
         score_threshold: z.number(),
@@ -286,6 +326,123 @@ function hasExplicitItemFormat(raw) {
 function normalizeStringList(values) {
     return [...new Set((values ?? []).map((value) => value.trim()).filter((value) => value.length > 0))].sort((left, right) => left.localeCompare(right));
 }
+function normalizeLowerStringList(values) {
+    return [...new Set((values ?? []).map((value) => value.trim().toLowerCase()).filter((value) => value.length > 0))].sort((left, right) => left.localeCompare(right));
+}
+function normalizeExtensionPolicyMode(value) {
+    if (value === "off" || value === "warn" || value === "enforce") {
+        return value;
+    }
+    return SETTINGS_DEFAULTS.extensions.policy.mode;
+}
+function normalizeExtensionTrustMode(value) {
+    if (value === "off" || value === "warn" || value === "enforce") {
+        return value;
+    }
+    return SETTINGS_DEFAULTS.extensions.policy.trust_mode;
+}
+function normalizeExtensionSandboxProfile(value) {
+    if (value === "none" || value === "restricted" || value === "strict") {
+        return value;
+    }
+    return SETTINGS_DEFAULTS.extensions.policy.default_sandbox_profile;
+}
+function normalizeExtensionPolicyOverride(override) {
+    const name = override.name.trim().toLowerCase();
+    if (name.length === 0) {
+        return null;
+    }
+    const normalized = {
+        name,
+    };
+    if (override.disabled === true) {
+        normalized.disabled = true;
+    }
+    if (override.require_trusted === true) {
+        normalized.require_trusted = true;
+    }
+    if (override.require_provenance === true) {
+        normalized.require_provenance = true;
+    }
+    if (override.sandbox_profile !== undefined) {
+        normalized.sandbox_profile = normalizeExtensionSandboxProfile(override.sandbox_profile);
+    }
+    const allowedCapabilities = normalizeLowerStringList(override.allowed_capabilities);
+    const blockedCapabilities = normalizeLowerStringList(override.blocked_capabilities);
+    const allowedSurfaces = normalizeLowerStringList(override.allowed_surfaces);
+    const blockedSurfaces = normalizeLowerStringList(override.blocked_surfaces);
+    const allowedCommands = normalizeLowerStringList(override.allowed_commands);
+    const blockedCommands = normalizeLowerStringList(override.blocked_commands);
+    const allowedActions = normalizeLowerStringList(override.allowed_actions);
+    const blockedActions = normalizeLowerStringList(override.blocked_actions);
+    const allowedServices = normalizeLowerStringList(override.allowed_services);
+    const blockedServices = normalizeLowerStringList(override.blocked_services);
+    if (allowedCapabilities.length > 0) {
+        normalized.allowed_capabilities = allowedCapabilities;
+    }
+    if (blockedCapabilities.length > 0) {
+        normalized.blocked_capabilities = blockedCapabilities;
+    }
+    if (allowedSurfaces.length > 0) {
+        normalized.allowed_surfaces = allowedSurfaces;
+    }
+    if (blockedSurfaces.length > 0) {
+        normalized.blocked_surfaces = blockedSurfaces;
+    }
+    if (allowedCommands.length > 0) {
+        normalized.allowed_commands = allowedCommands;
+    }
+    if (blockedCommands.length > 0) {
+        normalized.blocked_commands = blockedCommands;
+    }
+    if (allowedActions.length > 0) {
+        normalized.allowed_actions = allowedActions;
+    }
+    if (blockedActions.length > 0) {
+        normalized.blocked_actions = blockedActions;
+    }
+    if (allowedServices.length > 0) {
+        normalized.allowed_services = allowedServices;
+    }
+    if (blockedServices.length > 0) {
+        normalized.blocked_services = blockedServices;
+    }
+    return normalized;
+}
+function normalizeExtensionPolicyOverrides(overrides) {
+    const dedupedByName = new Map();
+    for (const override of overrides ?? []) {
+        const normalized = normalizeExtensionPolicyOverride(override);
+        if (!normalized) {
+            continue;
+        }
+        dedupedByName.set(normalized.name, normalized);
+    }
+    return [...dedupedByName.values()].sort((left, right) => left.name.localeCompare(right.name));
+}
+function normalizeExtensionPolicySettings(policy) {
+    const defaults = SETTINGS_DEFAULTS.extensions.policy;
+    return {
+        mode: normalizeExtensionPolicyMode(policy?.mode),
+        trust_mode: normalizeExtensionTrustMode(policy?.trust_mode),
+        require_provenance: policy?.require_provenance === true,
+        trusted_extensions: normalizeLowerStringList(policy?.trusted_extensions ?? defaults.trusted_extensions),
+        default_sandbox_profile: normalizeExtensionSandboxProfile(policy?.default_sandbox_profile),
+        allowed_extensions: normalizeLowerStringList(policy?.allowed_extensions ?? defaults.allowed_extensions),
+        blocked_extensions: normalizeLowerStringList(policy?.blocked_extensions ?? defaults.blocked_extensions),
+        allowed_capabilities: normalizeLowerStringList(policy?.allowed_capabilities ?? defaults.allowed_capabilities),
+        blocked_capabilities: normalizeLowerStringList(policy?.blocked_capabilities ?? defaults.blocked_capabilities),
+        allowed_surfaces: normalizeLowerStringList(policy?.allowed_surfaces ?? defaults.allowed_surfaces),
+        blocked_surfaces: normalizeLowerStringList(policy?.blocked_surfaces ?? defaults.blocked_surfaces),
+        allowed_commands: normalizeLowerStringList(policy?.allowed_commands ?? defaults.allowed_commands),
+        blocked_commands: normalizeLowerStringList(policy?.blocked_commands ?? defaults.blocked_commands),
+        allowed_actions: normalizeLowerStringList(policy?.allowed_actions ?? defaults.allowed_actions),
+        blocked_actions: normalizeLowerStringList(policy?.blocked_actions ?? defaults.blocked_actions),
+        allowed_services: normalizeLowerStringList(policy?.allowed_services ?? defaults.allowed_services),
+        blocked_services: normalizeLowerStringList(policy?.blocked_services ?? defaults.blocked_services),
+        extension_overrides: normalizeExtensionPolicyOverrides(policy?.extension_overrides ?? defaults.extension_overrides),
+    };
+}
 function normalizeValidationMetadataRequiredFields(values) {
     const normalized = [...new Set((values ?? []).map((value) => value.trim().toLowerCase().replaceAll("-", "_")))]
         .filter((value) => value.length > 0)
@@ -447,6 +604,7 @@ function mergeSettings(raw) {
         extensions: {
             enabled: [...settings.extensions.enabled],
             disabled: [...settings.extensions.disabled],
+            policy: normalizeExtensionPolicySettings(settings.extensions.policy ?? defaults.extensions.policy),
         },
         search: { ...defaults.search, ...settings.search },
         providers: {
@@ -484,6 +642,20 @@ export function serializeSettings(settings) {
             definitions: normalizeItemTypeDefinitions(settings.item_types?.definitions),
         },
         schema: normalizeRuntimeSchemaSettings(settings.schema),
+        context: {
+            default_depth: settings.context?.default_depth ?? SETTINGS_DEFAULTS.context.default_depth,
+            activity_limit: settings.context?.activity_limit ?? SETTINGS_DEFAULTS.context.activity_limit,
+            stale_threshold_days: settings.context?.stale_threshold_days ?? SETTINGS_DEFAULTS.context.stale_threshold_days,
+            sections: {
+                ...SETTINGS_DEFAULTS.context.sections,
+                ...(settings.context?.sections ?? {}),
+            },
+        },
+        extensions: {
+            enabled: normalizeStringList(settings.extensions?.enabled),
+            disabled: normalizeStringList(settings.extensions?.disabled),
+            policy: normalizeExtensionPolicySettings(settings.extensions?.policy),
+        },
     };
     const ordered = orderObject({
         ...normalizedSettings,
@@ -559,7 +731,44 @@ export function serializeSettings(settings) {
         "sections",
     ]);
     ordered.context.sections = orderObject((ordered.context.sections ?? {}), ["hierarchy", "activity", "progress", "blockers", "files", "workload", "staleness", "tests"]);
-    ordered.extensions = orderObject(ordered.extensions, ["enabled", "disabled"]);
+    ordered.extensions = orderObject(ordered.extensions, ["enabled", "disabled", "policy"]);
+    ordered.extensions.policy = orderObject((ordered.extensions.policy ?? {}), [
+        "mode",
+        "trust_mode",
+        "require_provenance",
+        "trusted_extensions",
+        "default_sandbox_profile",
+        "allowed_extensions",
+        "blocked_extensions",
+        "allowed_capabilities",
+        "blocked_capabilities",
+        "allowed_surfaces",
+        "blocked_surfaces",
+        "allowed_commands",
+        "blocked_commands",
+        "allowed_actions",
+        "blocked_actions",
+        "allowed_services",
+        "blocked_services",
+        "extension_overrides",
+    ]);
+    ordered.extensions.policy.extension_overrides = (ordered.extensions.policy.extension_overrides ?? []).map((entry) => orderObject((entry ?? {}), [
+        "name",
+        "disabled",
+        "require_trusted",
+        "require_provenance",
+        "sandbox_profile",
+        "allowed_capabilities",
+        "blocked_capabilities",
+        "allowed_surfaces",
+        "blocked_surfaces",
+        "allowed_commands",
+        "blocked_commands",
+        "allowed_actions",
+        "blocked_actions",
+        "allowed_services",
+        "blocked_services",
+    ]));
     ordered.search = orderObject(ordered.search, [
         "score_threshold",
         "hybrid_semantic_weight",