@unbrained/pm-cli 2026.6.23 → 2026.6.30

package/dist/sdk/compose.js

@@ -1,7 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3a61717e-bae1-57d3-a1d1-436b1a60deca")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fa377459-0629-5c62-a22b-a21485250792")}catch(e){}}();
 import { normalizeKnownExtensionCapability, resolveLegacyExtensionCapabilityAlias, } from "../core/extensions/extension-capability-aliases.js";
 import { normalizeCommandName } from "../core/extensions/extension-runtime-helpers.js";
+import { evaluatePmMaxVersionBound, evaluatePmMinVersionBound, } from "../core/extensions/version-compat.js";
 /**
  * Typed identity helper for extension module exports.
  *
@@ -14,14 +15,34 @@ import { normalizeCommandName } from "../core/extensions/extension-runtime-helpe
 export function defineExtension(module) {
     return module;
 }
+/**
+ * Typed identity helper for a (partial) {@link ExtensionBlueprint} authored as its
+ * own module — the typed entry point of the modular declarative-authoring loop.
+ *
+ * It is the natural companion to {@link mergeExtensionBlueprints}: when an
+ * extension's surface is split across files — a commands module, a search module,
+ * a hooks module — wrap each fragment so it is contract-checked *at its definition
+ * site* (with editor completion), exactly as {@link defineExtension} types a whole
+ * module and {@link defineExtensionManifest} types a manifest. It returns its
+ * argument unchanged, preserving the literal type
+ * so the fragment composes into {@link mergeExtensionBlueprints},
+ * {@link composeExtension}, or {@link composeExtensionPackage} with no loss of
+ * inference.
+ *
+ * Use as:
+ * `export const commandsModule = defineExtensionBlueprint({ commands: [...] })`
+ */
+export function defineExtensionBlueprint(blueprint) {
+    return blueprint;
+}
 /**
  * Assemble an {@link ExtensionModule} from a declarative {@link ExtensionBlueprint}.
  *
  * The returned module's `activate` registers every populated surface through the
  * matching `api.register*` method in a deterministic order (commands → overrides
  * → flags → parsers → renderers → services → preflights → item types → item
- * fields → migrations → search providers → vector store adapters → importers →
- * exporters → hooks), then awaits the blueprint's optional imperative `activate`
+ * fields → migrations → profiles → search providers → vector store adapters →
+ * importers → exporters → hooks), then awaits the blueprint's optional imperative `activate`
  * so it can layer on anything the declarative form cannot express. `manifest`
  * and `deactivate` are copied onto the module verbatim.
  *
@@ -64,6 +85,9 @@ export function composeExtension(blueprint) {
         for (const migration of blueprint.migrations ?? []) {
             api.registerMigration(migration);
         }
+        for (const profile of blueprint.profiles ?? []) {
+            api.registerProfile(profile);
+        }
         for (const provider of blueprint.searchProviders ?? []) {
             api.registerSearchProvider(provider);
         }
@@ -76,9 +100,10 @@ export function composeExtension(blueprint) {
         for (const entry of blueprint.exporters ?? []) {
             api.registerExporter(entry.name, entry.exporter, entry.options);
         }
-        // `?? {}` (rather than a `!== undefined` guard) so an untyped JavaScript
-        // author who passes `hooks: null` is treated the same as omitting it,
-        // instead of throwing on the first `hooks.beforeCommand` access.
+        // `?? {}` (rather than a `!== undefined` guard) so an explicit `hooks: null`
+        // crossing an untyped boundary (e.g. a blueprint hydrated from JSON) is
+        // treated the same as omitting it, instead of throwing on the first
+        // `hooks.beforeCommand` access.
         const hooks = blueprint.hooks ?? {};
         for (const hook of hooks.beforeCommand ?? []) {
             api.hooks.beforeCommand(hook);
@@ -108,6 +133,183 @@ export function composeExtension(blueprint) {
     }
     return module;
 }
+/**
+ * Concatenate the populated entries of an array surface across blueprints,
+ * preserving argument order. Returns `undefined` when no blueprint contributes
+ * any entry, so {@link mergeExtensionBlueprints} omits the field instead of
+ * emitting an empty array. `?? []` tolerates an explicit `null` field (e.g. from a
+ * blueprint hydrated across an untyped boundary) exactly as {@link composeExtension} does.
+ */
+function mergeArraySurface(surfaces) {
+    const merged = surfaces.flatMap((surface) => surface ?? []);
+    return merged.length > 0 ? merged : undefined;
+}
+/**
+ * Shallow-merge single-handler record surfaces (`commandOverrides`, `parsers`,
+ * `renderers`, `services`) with last-defined-wins precedence on a key collision,
+ * exactly like spreading the records in argument order. Returns `undefined` when
+ * no blueprint contributes any key.
+ */
+function mergeHandlerRecord(surfaces) {
+    const merged = Object.assign({}, ...surfaces.map((surface) => surface ?? {}));
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
+/**
+ * Merge `flags` records by concatenating every blueprint's flag array for a shared
+ * target command, mirroring the additive `api.registerFlags` semantics so each
+ * module's flags reach the command. Returns `undefined` when no blueprint declares
+ * any flags.
+ */
+function mergeFlagRecord(surfaces) {
+    const merged = {};
+    for (const surface of surfaces) {
+        for (const [command, flags] of Object.entries(surface ?? {})) {
+            // `flags` is the record's array value, never nullish in-type — `composeExtension`
+            // likewise passes it to `registerFlags` unguarded — so it is spread directly.
+            merged[command] = [...(merged[command] ?? []), ...flags];
+        }
+    }
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
+const EXTENSION_BLUEPRINT_HOOK_KEYS = [
+    "beforeCommand",
+    "afterCommand",
+    "onWrite",
+    "onRead",
+    "onIndex",
+];
+// Compile-time exhaustiveness guard: adding a hook field must update the canonical
+// merge order above, and stale keys cannot remain in that list.
+const EXTENSION_BLUEPRINT_HOOK_KEY_COVERAGE = {};
+void EXTENSION_BLUEPRINT_HOOK_KEY_COVERAGE;
+function assignMergedHookSurface(merged, surfaces, key) {
+    const hookArrays = surfaces.map((hooks) => hooks?.[key]);
+    const value = mergeArraySurface(hookArrays);
+    if (value !== undefined) {
+        const typedMerged = merged;
+        typedMerged[key] = value;
+    }
+}
+/**
+ * Merge the nested `hooks` surface by concatenating each lifecycle kind's array in
+ * canonical order. Returns `undefined` when no blueprint registers any hook.
+ */
+function mergeHookSurfaces(surfaces) {
+    const merged = {};
+    for (const key of EXTENSION_BLUEPRINT_HOOK_KEYS) {
+        assignMergedHookSurface(merged, surfaces, key);
+    }
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
+/**
+ * Merge several partial {@link ExtensionBlueprint}s into one, so an extension's
+ * surface can be authored *modularly* — a commands module, a search module, a
+ * hooks module — and combined into a single blueprint to feed
+ * {@link composeExtension}, {@link composeExtensionPackage},
+ * {@link synthesizeExtensionManifest}, {@link describeExtensionBlueprint}, or
+ * {@link preflightExtension}.
+ *
+ * The merge is pure and deterministic and never mutates an input. Each surface
+ * combines the way its underlying `api.register*` call composes:
+ *
+ * - **Array surfaces** — `commands`, `preflights`, `itemTypes`, `itemFields`,
+ *   `migrations`, `profiles`, `searchProviders`, `vectorStoreAdapters`,
+ *   `importers`, `exporters` — concatenate in argument order.
+ * - **`flags`** concatenates the flag arrays of any shared target command,
+ *   mirroring additive `api.registerFlags`: every module's flags reach the command.
+ * - **Single-handler records** — `commandOverrides`, `parsers`, `renderers`,
+ *   `services` — follow last-defined-wins precedence on a key collision, exactly
+ *   like spreading the records in argument order; a later module deliberately
+ *   overrides an earlier one's handler for that key.
+ * - **`hooks`** concatenates each lifecycle kind's array in canonical order.
+ * - The imperative **`activate`** escape hatches chain in argument order (each
+ *   awaited), so every module's escape-hatch wiring still runs.
+ * - The **`deactivate`** teardown hooks chain in *reverse* argument order (LIFO),
+ *   releasing resources in the inverse of acquisition. Teardown is best-effort:
+ *   a throwing hook does not strand later modules' cleanup — every hook runs and
+ *   teardown failures are re-thrown afterwards (as the original error for one
+ *   failure, or an `AggregateError` for several).
+ * - The **`manifest`** mirror is last-defined-wins.
+ *
+ * Because `composeExtension` and the derive/lint/describe helpers are pure readers
+ * of this data, a merged blueprint behaves exactly as a hand-written one: a command
+ * two modules both define survives as a duplicate in the merged `commands` array
+ * and {@link lintExtensionBlueprint} flags it, just as it would in one file. An
+ * empty field is omitted rather than emitted empty, so merging zero blueprints
+ * returns an empty blueprint (`{}`).
+ */
+export function mergeExtensionBlueprints(...blueprints) {
+    const merged = {};
+    const assign = (key, value) => {
+        if (value !== undefined) {
+            merged[key] = value;
+        }
+    };
+    assign("commands", mergeArraySurface(blueprints.map((blueprint) => blueprint.commands)));
+    assign("commandOverrides", mergeHandlerRecord(blueprints.map((blueprint) => blueprint.commandOverrides)));
+    assign("flags", mergeFlagRecord(blueprints.map((blueprint) => blueprint.flags)));
+    assign("parsers", mergeHandlerRecord(blueprints.map((blueprint) => blueprint.parsers)));
+    assign("renderers", mergeHandlerRecord(blueprints.map((blueprint) => blueprint.renderers)));
+    assign("services", mergeHandlerRecord(blueprints.map((blueprint) => blueprint.services)));
+    assign("preflights", mergeArraySurface(blueprints.map((blueprint) => blueprint.preflights)));
+    assign("itemTypes", mergeArraySurface(blueprints.map((blueprint) => blueprint.itemTypes)));
+    assign("itemFields", mergeArraySurface(blueprints.map((blueprint) => blueprint.itemFields)));
+    assign("migrations", mergeArraySurface(blueprints.map((blueprint) => blueprint.migrations)));
+    assign("profiles", mergeArraySurface(blueprints.map((blueprint) => blueprint.profiles)));
+    assign("searchProviders", mergeArraySurface(blueprints.map((blueprint) => blueprint.searchProviders)));
+    assign("vectorStoreAdapters", mergeArraySurface(blueprints.map((blueprint) => blueprint.vectorStoreAdapters)));
+    assign("importers", mergeArraySurface(blueprints.map((blueprint) => blueprint.importers)));
+    assign("exporters", mergeArraySurface(blueprints.map((blueprint) => blueprint.exporters)));
+    assign("hooks", mergeHookSurfaces(blueprints.map((blueprint) => blueprint.hooks)));
+    // Last-defined-wins for the in-module manifest mirror: a later module's identity
+    // supersedes an earlier one's, matching the single-handler record precedence.
+    let manifest;
+    for (const blueprint of blueprints) {
+        if (blueprint.manifest) {
+            manifest = blueprint.manifest;
+        }
+    }
+    assign("manifest", manifest);
+    // Imperative escape hatches chain forward (acquisition order); teardown chains
+    // in reverse (LIFO), so resources release in the inverse of acquisition.
+    const hasActivates = blueprints.some((blueprint) => blueprint.activate);
+    assign("activate", hasActivates
+        ? async (api) => {
+            for (const blueprint of blueprints) {
+                if (blueprint.activate) {
+                    await blueprint.activate(api);
+                }
+            }
+        }
+        : undefined);
+    const hasDeactivates = blueprints.some((blueprint) => blueprint.deactivate);
+    assign("deactivate", hasDeactivates
+        ? async () => {
+            // Teardown is best-effort across modules: a throwing `deactivate` must
+            // not strand a later module's cleanup, so every hook runs (in reverse,
+            // LIFO) and failures are surfaced after cleanup completes.
+            const errors = [];
+            for (const blueprint of [...blueprints].reverse()) {
+                if (!blueprint.deactivate) {
+                    continue;
+                }
+                try {
+                    await blueprint.deactivate();
+                }
+                catch (error) {
+                    errors.push(error);
+                }
+            }
+            if (errors.length > 0) {
+                if (errors.length > 1) {
+                    throw new AggregateError(errors, "Multiple extension blueprint deactivate hooks failed.");
+                }
+                throw errors[0];
+            }
+        }
+        : undefined);
+    return merged;
+}
 /**
  * Blueprint registration fields whose presence implies a capability, paired with
  * the capability each grants. Mirrors `EXTENSION_CAPABILITY_REGISTRATION_SURFACES`
@@ -124,6 +326,7 @@ const BLUEPRINT_FIELD_CAPABILITIES = [
     ["itemTypes", "schema"],
     ["itemFields", "schema"],
     ["migrations", "schema"],
+    ["profiles", "schema"],
     ["parsers", "parser"],
     ["renderers", "renderers"],
     ["services", "services"],
@@ -168,9 +371,29 @@ export function deriveExtensionCapabilities(blueprint) {
     // what activation enforces when a command declares flags inline and the
     // blueprint has no separate `flags` field. `!== undefined` (not a truthiness or
     // length check) matches the loader's exact guard, including an empty inline array.
-    if ((blueprint.commands ?? []).some((command) => command.flags !== undefined)) {
+    if ((blueprint.commands ?? []).filter(isPresent).some((command) => command.flags !== undefined)) {
+        capabilities.add("schema");
+    }
+    // `registerImporter`/`registerExporter` with `options.flags` register flag
+    // metadata through the same surface as `registerFlags`, asserting the `schema`
+    // capability on top of `importers` (loader `applyImportExportCommandMetadata`).
+    // Mirror that guard so a flag-bearing importer/exporter derives `schema` too —
+    // otherwise a least-privilege manifest synthesized from the blueprint would
+    // under-grant `schema` and fail activation. `!== undefined` matches the loader's
+    // exact `options.flags` guard, including an empty flag array. `entry?.` keeps a
+    // malformed null array entry (from an untyped `.js`/JSON boundary) from crashing
+    // derivation, consistent with the null-field robustness above.
+    const importExportEntries = [...(blueprint.importers ?? []), ...(blueprint.exporters ?? [])].filter(isPresent);
+    if (importExportEntries.some((entry) => entry?.options?.flags !== undefined)) {
         capabilities.add("schema");
     }
+    // Importers/exporters always synthesize command handlers (`<name> import` /
+    // `<name> export`), so runtime capability summaries attribute them to the
+    // commands surface as well as the importers surface. Keep the author-time
+    // capability preview aligned with describeExtensionActivation.
+    if (importExportEntries.some((entry) => typeof entry === "object")) {
+        capabilities.add("commands");
+    }
     // `?? {}` keeps an explicit `hooks: null` from throwing, mirroring composeExtension.
     const hooks = blueprint.hooks ?? {};
     if ([hooks.beforeCommand, hooks.afterCommand, hooks.onWrite, hooks.onRead, hooks.onIndex].some(hasEntries)) {
@@ -196,6 +419,9 @@ const BLUEPRINT_HOOK_FIELD_TO_KIND = [
 function sortUnique(values) {
     return [...new Set(values)].sort((left, right) => left.localeCompare(right));
 }
+function isPresent(value) {
+    return value !== null && value !== undefined;
+}
 /**
  * Compute, without activating, the exact {@link ExtensionActivationSummary} that
  * {@link composeExtension}'s generated `activate` would produce for a blueprint.
@@ -221,16 +447,36 @@ function sortUnique(values) {
  * blueprint that registers everything through that hatch summarizes as empty.
  */
 export function describeExtensionBlueprint(blueprint) {
-    const commandPaths = (blueprint.commands ?? []).map((command) => normalizeCommandName(command.name));
-    const importerPaths = (blueprint.importers ?? []).map((entry) => normalizeCommandName(`${entry.name} import`));
-    const exporterPaths = (blueprint.exporters ?? []).map((entry) => normalizeCommandName(`${entry.name} export`));
+    const commands = (blueprint.commands ?? []).filter(isPresent);
+    const importers = (blueprint.importers ?? []).filter(isPresent);
+    const exporters = (blueprint.exporters ?? []).filter(isPresent);
+    const importerPaths = importers.map((entry) => normalizeCommandName(`${entry.name} import`));
+    const exporterPaths = exporters.map((entry) => normalizeCommandName(`${entry.name} export`));
+    const importerCommandDefinitionPaths = importers
+        .filter((entry) => entry.options !== undefined)
+        .map((entry) => normalizeCommandName(`${entry.name} import`));
+    const exporterCommandDefinitionPaths = exporters
+        .filter((entry) => entry.options !== undefined)
+        .map((entry) => normalizeCommandName(`${entry.name} export`));
+    const commandPaths = [
+        ...commands.map((command) => normalizeCommandName(command.name)),
+        ...importerCommandDefinitionPaths,
+        ...exporterCommandDefinitionPaths,
+    ];
     // A command definition with inline `flags` registers a flag target under its own
-    // path in addition to any top-level `flags` record, so union both sources.
+    // path in addition to any top-level `flags` record. Import/export options with
+    // `flags` register through the same runtime metadata path, so union all sources.
     const flagCommands = [
         ...Object.keys(blueprint.flags ?? {}).map((command) => normalizeCommandName(command)),
-        ...(blueprint.commands ?? [])
+        ...commands
             .filter((command) => command.flags !== undefined)
             .map((command) => normalizeCommandName(command.name)),
+        ...importers
+            .filter((entry) => entry.options?.flags !== undefined)
+            .map((entry) => normalizeCommandName(`${entry.name} import`)),
+        ...exporters
+            .filter((entry) => entry.options?.flags !== undefined)
+            .map((entry) => normalizeCommandName(`${entry.name} export`)),
     ];
     const hooks = blueprint.hooks ?? {};
     return {
@@ -247,8 +493,9 @@ export function describeExtensionBlueprint(blueprint) {
         // id-less migrations register but carry no identifier, so they are omitted —
         // exactly as describeExtensionActivation drops them from its `migrations` list.
         migrations: sortUnique((blueprint.migrations ?? []).flatMap((migration) => (typeof migration.id === "string" ? [migration.id] : []))),
-        importers: sortUnique((blueprint.importers ?? []).map((entry) => normalizeCommandName(entry.name))),
-        exporters: sortUnique((blueprint.exporters ?? []).map((entry) => normalizeCommandName(entry.name))),
+        profiles: sortUnique((blueprint.profiles ?? []).map((profile) => profile.name)),
+        importers: sortUnique(importers.map((entry) => normalizeCommandName(entry.name))),
+        exporters: sortUnique(exporters.map((entry) => normalizeCommandName(entry.name))),
         search_providers: sortUnique((blueprint.searchProviders ?? []).map((provider) => provider.name)),
         vector_store_adapters: sortUnique((blueprint.vectorStoreAdapters ?? []).map((adapter) => adapter.name)),
         parser_overrides: sortUnique(Object.keys(blueprint.parsers ?? {}).map((command) => normalizeCommandName(command))),
@@ -274,6 +521,7 @@ const BLUEPRINT_LINTABLE_SURFACE_FIELDS = [
     "itemTypes",
     "itemFields",
     "migrations",
+    "profiles",
     "searchProviders",
     "vectorStoreAdapters",
     "importers",
@@ -416,5 +664,228 @@ export function lintExtensionBlueprint(blueprint, options = {}) {
         declared,
     };
 }
+/**
+ * Generate a complete, least-privilege {@link ExtensionManifest} from a
+ * declarative {@link ExtensionBlueprint} and the author's identity fields.
+ *
+ * This is the *generate* verb that completes the declarative authoring loop
+ * (`compose → derive → describe/lint → synthesize`). Where
+ * {@link defineExtensionManifest} only *types* a hand-written manifest and
+ * {@link deriveExtensionCapabilities} computes only the capability set, this
+ * function assembles the whole manifest: it copies every author-supplied identity
+ * field verbatim and fills `capabilities` with `deriveExtensionCapabilities`
+ * unioned with any {@link SynthesizeExtensionManifestIdentity.additionalCapabilities | additionalCapabilities},
+ * sorted and de-duplicated. The author writes the blueprint once and never
+ * hand-syncs `manifest.capabilities` — declaring nothing the extension does not
+ * use and nothing it does.
+ *
+ * It is a pure assembler: it neither validates the blueprint definitions (that
+ * stays in `api.register*` at activation) nor the identity fields (the loader
+ * validates the on-disk manifest). Pair it with
+ * {@link ../sdk/testing.js#assertExtensionManifestMatchesBlueprint} to guard a
+ * hand-maintained `manifest.json` against drift in CI.
+ */
+export function synthesizeExtensionManifest(blueprint, identity) {
+    const { additionalCapabilities, ...manifestIdentity } = identity;
+    // `Array.isArray` keeps a non-array value (or an omitted field) crossing an
+    // untyped boundary from crashing the spread, mirroring the rest of the SDK.
+    const extra = Array.isArray(additionalCapabilities) ? normalizeDeclaredCapabilities(additionalCapabilities) : [];
+    const capabilities = [...new Set([...deriveExtensionCapabilities(blueprint), ...extra])].sort((left, right) => left.localeCompare(right));
+    return { ...manifestIdentity, capabilities };
+}
+/**
+ * Assemble both halves of a shippable extension package from one declarative
+ * {@link ExtensionBlueprint} and the author's identity fields — the author-once
+ * capstone of the declarative loop.
+ *
+ * Where {@link composeExtension} produces only the runtime module and
+ * {@link synthesizeExtensionManifest} produces only the manifest, this unifies
+ * them: it synthesizes the complete least-privilege manifest from the blueprint
+ * and identity, then composes the module with that synthesized manifest set as its
+ * authoritative in-module `manifest` mirror. Both halves are therefore generated
+ * from a single source and cannot drift — the module's `manifest` is the very
+ * object returned as `manifest`. Export `module` as the package entry's default
+ * export and write `manifest` as `manifest.json`.
+ *
+ * It is a pure assembler with no validation, loading, or filesystem access,
+ * exactly like the two functions it composes; pair it with
+ * {@link preflightExtension} (or {@link ../sdk/testing.js#assertExtensionPreflight})
+ * for the author-time verify step. Use {@link mergeExtensionBlueprints} first to
+ * assemble the blueprint modularly, then this to ship it.
+ */
+export function composeExtensionPackage(blueprint, identity) {
+    const manifest = synthesizeExtensionManifest(blueprint, identity);
+    const module = composeExtension({ ...blueprint, manifest });
+    return { module, manifest };
+}
+/** Map a non-trivial bound evaluation to a compatibility finding, or `null` when the bound is absent or satisfied. */
+function toCompatibilityFinding(evaluation, pmVersion) {
+    if (evaluation.status === "absent" || evaluation.status === "ok") {
+        return null;
+    }
+    const code = `${evaluation.kind}_${evaluation.status}`;
+    let message;
+    switch (code) {
+        case "pm_min_version_invalid":
+            message = `pm_min_version "${evaluation.required}" is not a valid version; the extension is treated as incompatible and the loader skips it.`;
+            break;
+        case "pm_min_version_unchecked":
+            message = `pm_min_version "${evaluation.required}" could not be compared against pm ${pmVersion}; compatibility is unverified.`;
+            break;
+        case "pm_min_version_unmet":
+            message = `Requires pm >= ${evaluation.required} but the target is pm ${pmVersion}; the loader skips the extension.`;
+            break;
+        case "pm_max_version_invalid":
+            message = `pm_max_version "${evaluation.required}" is not a valid inclusive upper bound (version ranges are not allowed); the extension is treated as incompatible and the loader skips it.`;
+            break;
+        case "pm_max_version_unchecked":
+            message = `pm_max_version "${evaluation.required}" could not be compared against pm ${pmVersion}; compatibility is unverified.`;
+            break;
+        case "pm_max_version_exceeded":
+            message = `Allows pm <= ${evaluation.required} but the target is pm ${pmVersion}; the loader skips the extension.`;
+            break;
+        case "pm_max_version_exceeded_warn":
+            message = `Target pm ${pmVersion} is newer than pm_max_version ${evaluation.required}, but the "warn" exceeded mode lets it load with a warning.`;
+            break;
+    }
+    return {
+        code,
+        severity: evaluation.allowed ? "warning" : "error",
+        constraint: evaluation.kind,
+        required: evaluation.required,
+        current: pmVersion,
+        message,
+    };
+}
+/**
+ * Check, without loading anything, whether an extension manifest's declared
+ * version bounds permit it to load on a given pm CLI version.
+ *
+ * This is the author-time inverse of the loader's runtime version gate: where the
+ * loader resolves the *installed* CLI version (asynchronously, from `package.json`)
+ * and emits `extension_pm_*_version_*` warnings, this pure synchronous function
+ * takes the {@link ExtensionManifestCompatibilityTarget.pmVersion | target version}
+ * the author supplies and returns structured findings. Both share the
+ * {@link ../core/extensions/version-compat.js | version-compat core}, so the
+ * author-time verdict and the runtime decision agree by construction — a package
+ * author can pin a CI test to the pm version they support and catch a too-tight
+ * `pm_min_version`, a malformed `pm_max_version`, or an upper bound a newer CLI
+ * would exceed, long before publishing.
+ *
+ * `compatible` is `true` only when no bound blocks the load (`*_invalid`,
+ * `*_unmet`, and a `block`-mode `*_exceeded`); `*_unchecked` (an uninterpretable
+ * bound or target) and a `warn`-mode `*_exceeded_warn` are advisory `warning`
+ * findings that still load. Pair it with
+ * {@link ../sdk/testing.js#assertExtensionManifestCompatible} to fail CI on a
+ * blocking incompatibility.
+ */
+export function checkExtensionManifestCompatibility(manifest, target) {
+    const minEvaluation = evaluatePmMinVersionBound(manifest.pm_min_version, target.pmVersion);
+    const maxEvaluation = evaluatePmMaxVersionBound(manifest.pm_max_version, target.pmVersion, target.pmMaxVersionExceededMode ?? "block");
+    const findings = [];
+    const minFinding = toCompatibilityFinding(minEvaluation, target.pmVersion);
+    if (minFinding !== null) {
+        findings.push(minFinding);
+    }
+    const maxFinding = toCompatibilityFinding(maxEvaluation, target.pmVersion);
+    if (maxFinding !== null) {
+        findings.push(maxFinding);
+    }
+    return {
+        compatible: minEvaluation.allowed && maxEvaluation.allowed,
+        findings,
+        pmVersion: target.pmVersion,
+    };
+}
+/**
+ * The lint codes whose verdict depends on the *declared* capability set rather
+ * than the blueprint's structure. {@link preflightExtension} drops these from its
+ * consolidated view when it synthesizes the manifest from an `identity` without an
+ * explicit declared set, because the synthesized manifest — not the blueprint's
+ * stale in-module `manifest` mirror — is what the package ships, so a drift against
+ * the mirror is a false positive. Structural codes (`duplicate_command`,
+ * `command_override_conflict`, `empty_surface`) are never suppressed.
+ */
+const CAPABILITY_DRIFT_LINT_CODES = new Set([
+    "capability_undeclared",
+    "capability_unused",
+    "manifest_capabilities_absent",
+]);
+/**
+ * Preflight a declarative {@link ExtensionBlueprint} through every author-time
+ * check in one call, returning a single consolidated {@link ExtensionPreflightReport}.
+ *
+ * This is the author-time capstone — the static analog of
+ * {@link ../sdk/testing.js#createExtensionTestHarness}, which unified the
+ * runtime-test helpers. Instead of chaining {@link lintExtensionBlueprint},
+ * {@link synthesizeExtensionManifest}, and {@link checkExtensionManifestCompatibility}
+ * (and reconciling their separate results) before publishing a package, an author
+ * runs `preflightExtension(blueprint, { identity, target })` and reads one report:
+ *
+ * - the blueprint is always linted (structural footguns + capability drift);
+ * - when `options.identity` is given, the complete least-privilege manifest is
+ *   synthesized and returned, so the author never hand-syncs `capabilities`;
+ * - when `options.target` is given, the synthesized manifest's version bounds
+ *   (or, absent an identity, the blueprint's in-module `manifest` mirror) are
+ *   checked against that pm version.
+ *
+ * It is pure and side-effect-free — no loading, activation, or filesystem access,
+ * exactly like the stages it composes — so it is safe in any author-time or CI
+ * context. The per-stage structured results are exposed unmodified
+ * (`report.blueprint`/`manifest`/`compatibility`) alongside the flattened,
+ * source-tagged `report.findings`; `report.ok` is `false` if any stage produced an
+ * `error`-severity finding. The flattened `findings` are curated for the author-once
+ * flow: once an `identity` synthesizes the manifest (and no explicit
+ * `declaredCapabilities` was pinned), the synthesized manifest — not the blueprint's
+ * in-module `manifest` mirror — is what ships, so capability-drift findings the lint
+ * raised against that mirror are false positives and are omitted from
+ * `report.findings` (the raw `report.blueprint` result still reports them). Pair it
+ * with {@link ../sdk/testing.js#assertExtensionPreflight} to fail CI in one line.
+ */
+export function preflightExtension(blueprint, options = {}) {
+    const blueprintResult = lintExtensionBlueprint(blueprint, { declaredCapabilities: options.declaredCapabilities });
+    const manifest = options.identity ? synthesizeExtensionManifest(blueprint, options.identity) : null;
+    // Compatibility evaluates the bounds the package will ship: the synthesized
+    // manifest when an identity drives generation, else the blueprint's in-module
+    // manifest mirror, else an empty manifest (no bounds → trivially compatible).
+    const compatibility = options.target
+        ? checkExtensionManifestCompatibility(manifest ?? blueprint.manifest ?? {}, options.target)
+        : null;
+    // When preflight synthesizes the manifest from an identity (and the caller did not
+    // pin an explicit declaredCapabilities set), the blueprint lint reconciled against
+    // the blueprint's in-module `manifest` mirror — which the synthesized manifest
+    // supersedes. Capability-drift findings against that stale mirror are false
+    // positives in the consolidated view (a missing capability would even flip `ok` to
+    // false though the synthesized manifest declares it), so drop them; structural
+    // findings are unaffected and the raw lint result on `report.blueprint` keeps all of
+    // them. An explicit declaredCapabilities set is a deliberate "check exactly this"
+    // request, so it is never suppressed.
+    const suppressCapabilityDrift = manifest !== null && options.declaredCapabilities === undefined;
+    const blueprintFindings = suppressCapabilityDrift
+        ? blueprintResult.findings.filter((finding) => !CAPABILITY_DRIFT_LINT_CODES.has(finding.code))
+        : blueprintResult.findings;
+    const findings = [
+        ...blueprintFindings.map((finding) => ({
+            source: "blueprint",
+            severity: finding.severity,
+            code: finding.code,
+            message: finding.message,
+        })),
+        ...(compatibility?.findings ?? []).map((finding) => ({
+            source: "compatibility",
+            severity: finding.severity,
+            code: finding.code,
+            message: finding.message,
+        })),
+    ];
+    return {
+        ok: findings.every((finding) => finding.severity !== "error"),
+        capabilities: blueprintResult.used,
+        blueprint: blueprintResult,
+        manifest,
+        compatibility,
+        findings,
+    };
+}
 //# sourceMappingURL=compose.js.map
-//# debugId=3a61717e-bae1-57d3-a1d1-436b1a60deca
+//# debugId=fa377459-0629-5c62-a22b-a21485250792