@unbrained/pm-cli 2026.6.6 → 2026.6.8

package/dist/cli-bundle/chunks/{chunk-3BWOVLTH.js → chunk-EPWT7BEA.js}

@@ -14,27 +14,27 @@ import {
   parseLinkedTestMinLines,
   parseLinkedTestRegexList,
   parseLinkedTestStringList
-} from "./chunk-E5FJNAZA.js";
+} from "./chunk-XNGMIVQY.js";
 import {
   createStdinTokenResolver,
   parseCsvKv,
   parseOptionalNumber
-} from "./chunk-PO3GSVFV.js";
+} from "./chunk-NLVCMVC7.js";
 import {
   runInit
-} from "./chunk-AY43SBIN.js";
+} from "./chunk-R4XIE7NQ.js";
 import {
   locateItem,
   mutateItem,
   readLocatedItem
-} from "./chunk-GGYWB3Y2.js";
+} from "./chunk-ODN53S6H.js";
 import {
   resolveItemTypeRegistry
-} from "./chunk-2VBQ6ZXS.js";
+} from "./chunk-Z2HXAFFH.js";
 import {
   compareTimestampStrings,
   nowIso
-} from "./chunk-TCD3R2PF.js";
+} from "./chunk-XZS4MV37.js";
 import {
   EXIT_CODE,
   ITEM_FILE_EXTENSIONS,
@@ -47,7 +47,7 @@ import {
   resolveGlobalPmRoot,
   resolvePmRoot,
   stableValueEquals
-} from "./chunk-5SFCOO6B.js";
+} from "./chunk-YJAKN2N2.js";
 
 // dist/cli/commands/test.js
 import { spawn } from "node:child_process";
@@ -1659,6 +1659,6 @@ export {
   runLinkedTests,
   runTest
 };
-//# sourceMappingURL=chunk-3BWOVLTH.js.map
+//# sourceMappingURL=chunk-EPWT7BEA.js.map
 
 //# debugId=fb2ef78d-78c8-5583-8c98-89541410a9ff

package/dist/cli-bundle/chunks/chunk-ETZZU5QF.js

@@ -0,0 +1,112 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="537a6d63-6806-5bdc-ae0f-3e84cf25eb7e")}catch(e){}}();
+import {
+  EXIT_CODE,
+  PmCliError,
+  isPathWithinDirectory,
+  pathExists
+} from "./chunk-YJAKN2N2.js";
+
+// dist/cli/commands/extension/shared.js
+import fs from "node:fs/promises";
+import path from "node:path";
+var DEFAULT_EXTENSION_PRIORITY = 100;
+function normalizeStringList(values) {
+  return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))].sort((left, right) => left.localeCompare(right));
+}
+function normalizeExtensionNameForMatch(value) {
+  return value.trim().toLowerCase();
+}
+function normalizeManagedDirectoryName(name) {
+  const normalized = name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+  if (normalized.length === 0) {
+    throw new PmCliError("Extension manifest name must resolve to a non-empty directory name.", EXIT_CODE.USAGE);
+  }
+  if (normalized === "." || normalized === "..") {
+    throw new PmCliError('Extension manifest name must not resolve to "." or "..".', EXIT_CODE.USAGE);
+  }
+  return normalized;
+}
+function parseExtensionManifest(raw) {
+  if (typeof raw !== "object" || raw === null) {
+    return null;
+  }
+  const candidate = raw;
+  if (typeof candidate.name !== "string" || candidate.name.trim().length === 0) {
+    return null;
+  }
+  if (typeof candidate.version !== "string" || candidate.version.trim().length === 0) {
+    return null;
+  }
+  if (typeof candidate.entry !== "string" || candidate.entry.trim().length === 0) {
+    return null;
+  }
+  let priority = DEFAULT_EXTENSION_PRIORITY;
+  if (candidate.priority !== void 0 && candidate.priority !== null) {
+    if (typeof candidate.priority !== "number" || !Number.isInteger(candidate.priority)) {
+      return null;
+    }
+    priority = candidate.priority;
+  }
+  let capabilities = [];
+  if (candidate.capabilities !== void 0 && candidate.capabilities !== null) {
+    if (!Array.isArray(candidate.capabilities) || candidate.capabilities.some((value) => typeof value !== "string")) {
+      return null;
+    }
+    capabilities = normalizeStringList(candidate.capabilities.map((value) => String(value).toLowerCase()));
+  }
+  return {
+    name: candidate.name.trim(),
+    version: candidate.version.trim(),
+    entry: candidate.entry.trim(),
+    priority,
+    capabilities
+  };
+}
+async function isCanonicalPathWithinDirectory(directory, targetPath) {
+  const [resolvedDirectory, resolvedTargetPath] = await Promise.all([fs.realpath(directory), fs.realpath(targetPath)]);
+  return isPathWithinDirectory(resolvedDirectory, resolvedTargetPath);
+}
+async function validateExtensionDirectory(directory) {
+  const manifestPath = path.join(directory, "manifest.json");
+  if (!await pathExists(manifestPath)) {
+    throw new PmCliError(`Extension manifest is missing at "${manifestPath}".`, EXIT_CODE.USAGE);
+  }
+  let parsedManifest;
+  try {
+    parsedManifest = JSON.parse(await fs.readFile(manifestPath, "utf8"));
+  } catch (error) {
+    throw new PmCliError(`Failed to parse extension manifest at "${manifestPath}": ${error instanceof Error ? error.message : String(error)}`, EXIT_CODE.USAGE);
+  }
+  const manifest = parseExtensionManifest(parsedManifest);
+  if (!manifest) {
+    throw new PmCliError(`Extension manifest at "${manifestPath}" is invalid.`, EXIT_CODE.USAGE);
+  }
+  const entryPath = path.resolve(directory, manifest.entry);
+  if (!isPathWithinDirectory(directory, entryPath)) {
+    throw new PmCliError(`Extension entry "${manifest.entry}" resolves outside extension directory "${directory}".`, EXIT_CODE.USAGE);
+  }
+  if (!await pathExists(entryPath)) {
+    throw new PmCliError(`Extension entry file is missing at "${entryPath}".`, EXIT_CODE.USAGE);
+  }
+  if (!await isCanonicalPathWithinDirectory(directory, entryPath)) {
+    throw new PmCliError(`Extension entry "${manifest.entry}" resolves outside extension directory after symlink resolution.`, EXIT_CODE.USAGE);
+  }
+  return {
+    directory,
+    manifest_path: manifestPath,
+    entry_path: entryPath,
+    manifest
+  };
+}
+
+export {
+  normalizeStringList,
+  normalizeExtensionNameForMatch,
+  normalizeManagedDirectoryName,
+  parseExtensionManifest,
+  validateExtensionDirectory
+};
+//# sourceMappingURL=chunk-ETZZU5QF.js.map
+
+//# debugId=537a6d63-6806-5bdc-ae0f-3e84cf25eb7e

package/dist/cli-bundle/chunks/chunk-ETZZU5QF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../cli/commands/extension/shared.ts"],"sourcesContent":["import fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathExists } from \"../../../core/fs/fs-utils.js\";\nimport { isPathWithinDirectory } from \"../../../core/fs/path-utils.js\";\nimport { EXIT_CODE } from \"../../../core/shared/constants.js\";\nimport { PmCliError } from \"../../../core/shared/errors.js\";\nimport type { ExtensionManifest } from \"../../../core/extensions/loader.js\";\n\nexport const DEFAULT_EXTENSION_PRIORITY = 100;\n\nexport interface ValidatedExtensionDirectory {\n  directory: string;\n  manifest_path: string;\n  entry_path: string;\n  manifest: ExtensionManifest;\n}\n\nexport function normalizeStringList(values: readonly string[]): string[] {\n  return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))].sort((left, right) =>\n    left.localeCompare(right),\n  );\n}\n\nexport function normalizeExtensionNameForMatch(value: string): string {\n  return value.trim().toLowerCase();\n}\n\nexport function normalizeManagedDirectoryName(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (normalized.length === 0) {\n    throw new PmCliError(\"Extension manifest name must resolve to a non-empty directory name.\", EXIT_CODE.USAGE);\n  }\n  if (normalized === \".\" || normalized === \"..\") {\n    // Manifest-controlled input must resolve to a dedicated child directory, never\n    // the extensions root itself or its parent (path-traversal guard).\n    throw new PmCliError(\"Extension manifest name must not resolve to \\\".\\\" or \\\"..\\\".\", EXIT_CODE.USAGE);\n  }\n  return normalized;\n}\n\nexport function parseExtensionManifest(raw: unknown): ExtensionManifest | null {\n  if (typeof raw !== \"object\" || raw === null) {\n    return null;\n  }\n  const candidate = raw as Record<string, unknown>;\n  if (typeof candidate.name !== \"string\" || candidate.name.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.version !== \"string\" || candidate.version.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.entry !== \"string\" || candidate.entry.trim().length === 0) {\n    return null;\n  }\n\n  let priority = DEFAULT_EXTENSION_PRIORITY;\n  if (candidate.priority !== undefined && candidate.priority !== null) {\n    if (typeof candidate.priority !== \"number\" || !Number.isInteger(candidate.priority)) {\n      return null;\n    }\n    priority = candidate.priority;\n  }\n\n  let capabilities: string[] = [];\n  if (candidate.capabilities !== undefined && candidate.capabilities !== null) {\n    if (!Array.isArray(candidate.capabilities) || candidate.capabilities.some((value) => typeof value !== \"string\")) {\n      return null;\n    }\n    capabilities = normalizeStringList(candidate.capabilities.map((value) => String(value).toLowerCase()));\n  }\n\n  return {\n    name: candidate.name.trim(),\n    version: candidate.version.trim(),\n    entry: candidate.entry.trim(),\n    priority,\n    capabilities,\n  };\n}\n\nexport async function isCanonicalPathWithinDirectory(directory: string, targetPath: string): Promise<boolean> {\n  const [resolvedDirectory, resolvedTargetPath] = await Promise.all([fs.realpath(directory), fs.realpath(targetPath)]);\n  return isPathWithinDirectory(resolvedDirectory, resolvedTargetPath);\n}\n\nexport async function validateExtensionDirectory(directory: string): Promise<ValidatedExtensionDirectory> {\n  const manifestPath = path.join(directory, \"manifest.json\");\n  if (!(await pathExists(manifestPath))) {\n    throw new PmCliError(`Extension manifest is missing at \"${manifestPath}\".`, EXIT_CODE.USAGE);\n  }\n\n  let parsedManifest: unknown;\n  try {\n    parsedManifest = JSON.parse(await fs.readFile(manifestPath, \"utf8\")) as unknown;\n  } catch (error: unknown) {\n    throw new PmCliError(\n      `Failed to parse extension manifest at \"${manifestPath}\": ${error instanceof Error ? error.message : String(error)}`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  const manifest = parseExtensionManifest(parsedManifest);\n  if (!manifest) {\n    throw new PmCliError(`Extension manifest at \"${manifestPath}\" is invalid.`, EXIT_CODE.USAGE);\n  }\n\n  const entryPath = path.resolve(directory, manifest.entry);\n  if (!isPathWithinDirectory(directory, entryPath)) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory \"${directory}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (!(await pathExists(entryPath))) {\n    throw new PmCliError(`Extension entry file is missing at \"${entryPath}\".`, EXIT_CODE.USAGE);\n  }\n  if (!(await isCanonicalPathWithinDirectory(directory, entryPath))) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory after symlink resolution.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  return {\n    directory,\n    manifest_path: manifestPath,\n    entry_path: entryPath,\n    manifest,\n  };\n}\n"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAOV,IAAM,6BAA6B;AASpC,SAAU,oBAAoB,QAAyB;AAC3D,SAAO,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,EAAE,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,UACvG,KAAK,cAAc,KAAK,CAAC;AAE7B;AAEM,SAAU,+BAA+B,OAAa;AAC1D,SAAO,MAAM,KAAI,EAAG,YAAW;AACjC;AAEM,SAAU,8BAA8B,MAAY;AACxD,QAAM,aAAa,KAChB,KAAI,EACJ,YAAW,EACX,QAAQ,kBAAkB,GAAG,EAC7B,QAAQ,YAAY,EAAE;AACzB,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,IAAI,WAAW,uEAAuE,UAAU,KAAK;EAC7G;AACA,MAAI,eAAe,OAAO,eAAe,MAAM;AAG7C,UAAM,IAAI,WAAW,4DAAgE,UAAU,KAAK;EACtG;AACA,SAAO;AACT;AAEM,SAAU,uBAAuB,KAAY;AACjD,MAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,WAAO;EACT;AACA,QAAM,YAAY;AAClB,MAAI,OAAO,UAAU,SAAS,YAAY,UAAU,KAAK,KAAI,EAAG,WAAW,GAAG;AAC5E,WAAO;EACT;AACA,MAAI,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,KAAI,EAAG,WAAW,GAAG;AAClF,WAAO;EACT;AACA,MAAI,OAAO,UAAU,UAAU,YAAY,UAAU,MAAM,KAAI,EAAG,WAAW,GAAG;AAC9E,WAAO;EACT;AAEA,MAAI,WAAW;AACf,MAAI,UAAU,aAAa,UAAa,UAAU,aAAa,MAAM;AACnE,QAAI,OAAO,UAAU,aAAa,YAAY,CAAC,OAAO,UAAU,UAAU,QAAQ,GAAG;AACnF,aAAO;IACT;AACA,eAAW,UAAU;EACvB;AAEA,MAAI,eAAyB,CAAA;AAC7B,MAAI,UAAU,iBAAiB,UAAa,UAAU,iBAAiB,MAAM;AAC3E,QAAI,CAAC,MAAM,QAAQ,UAAU,YAAY,KAAK,UAAU,aAAa,KAAK,CAAC,UAAU,OAAO,UAAU,QAAQ,GAAG;AAC/G,aAAO;IACT;AACA,mBAAe,oBAAoB,UAAU,aAAa,IAAI,CAAC,UAAU,OAAO,KAAK,EAAE,YAAW,CAAE,CAAC;EACvG;AAEA,SAAO;IACL,MAAM,UAAU,KAAK,KAAI;IACzB,SAAS,UAAU,QAAQ,KAAI;IAC/B,OAAO,UAAU,MAAM,KAAI;IAC3B;IACA;;AAEJ;AAEA,eAAsB,+BAA+B,WAAmB,YAAkB;AACxF,QAAM,CAAC,mBAAmB,kBAAkB,IAAI,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,SAAS,GAAG,GAAG,SAAS,UAAU,CAAC,CAAC;AACnH,SAAO,sBAAsB,mBAAmB,kBAAkB;AACpE;AAEA,eAAsB,2BAA2B,WAAiB;AAChE,QAAM,eAAe,KAAK,KAAK,WAAW,eAAe;AACzD,MAAI,CAAE,MAAM,WAAW,YAAY,GAAI;AACrC,UAAM,IAAI,WAAW,qCAAqC,YAAY,MAAM,UAAU,KAAK;EAC7F;AAEA,MAAI;AACJ,MAAI;AACF,qBAAiB,KAAK,MAAM,MAAM,GAAG,SAAS,cAAc,MAAM,CAAC;EACrE,SAAS,OAAgB;AACvB,UAAM,IAAI,WACR,0CAA0C,YAAY,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,IAClH,UAAU,KAAK;EAEnB;AAEA,QAAM,WAAW,uBAAuB,cAAc;AACtD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,WAAW,0BAA0B,YAAY,iBAAiB,UAAU,KAAK;EAC7F;AAEA,QAAM,YAAY,KAAK,QAAQ,WAAW,SAAS,KAAK;AACxD,MAAI,CAAC,sBAAsB,WAAW,SAAS,GAAG;AAChD,UAAM,IAAI,WACR,oBAAoB,SAAS,KAAK,2CAA2C,SAAS,MACtF,UAAU,KAAK;EAEnB;AACA,MAAI,CAAE,MAAM,WAAW,SAAS,GAAI;AAClC,UAAM,IAAI,WAAW,uCAAuC,SAAS,MAAM,UAAU,KAAK;EAC5F;AACA,MAAI,CAAE,MAAM,+BAA+B,WAAW,SAAS,GAAI;AACjE,UAAM,IAAI,WACR,oBAAoB,SAAS,KAAK,oEAClC,UAAU,KAAK;EAEnB;AAEA,SAAO;IACL;IACA,eAAe;IACf,YAAY;IACZ;;AAEJ","debugId":"537a6d63-6806-5bdc-ae0f-3e84cf25eb7e"}