@unbrained/pm-cli 2026.7.3 → 2026.7.5

package/dist/cli/commands/extension/shared.d.ts

@@ -1,5 +1,5 @@
-import type { ExtensionManifest } from "../../../core/extensions/loader.js";
-export declare const DEFAULT_EXTENSION_PRIORITY = 100;
+import { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory, type ExtensionManifest } from "../../../core/extensions/loader.js";
+export { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory };
 /**
  * Documents the validated extension directory payload exchanged by command, SDK, and package integrations.
  */
@@ -25,10 +25,6 @@ export declare function normalizeManagedDirectoryName(name: string): string;
  * Implements parse extension manifest for the public runtime surface of this module.
  */
 export declare function parseExtensionManifest(raw: unknown): ExtensionManifest | null;
-/**
- * Implements check whether canonical path within directory for the public runtime surface of this module.
- */
-export declare function isCanonicalPathWithinDirectory(directory: string, targetPath: string): Promise<boolean>;
 /**
  * Implements validate extension directory for the public runtime surface of this module.
  */
@@ -37,4 +33,3 @@ declare function formatManifestReadError(error: unknown): string;
 export declare const _testOnlyExtensionShared: {
     formatManifestReadError: typeof formatManifestReadError;
 };
-export {};

package/dist/cli/commands/extension/shared.js

@@ -4,14 +4,15 @@
  * Implements extension package-management support for Shared.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="860ac58e-284f-5ddb-a310-0aa423b2b4fd")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="898a48ff-e844-5325-9c9e-d6c5893a65a6")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { pathExists } from "../../../core/fs/fs-utils.js";
 import { isPathWithinDirectory } from "../../../core/fs/path-utils.js";
 import { EXIT_CODE } from "../../../core/shared/constants.js";
 import { PmCliError } from "../../../core/shared/errors.js";
-export const DEFAULT_EXTENSION_PRIORITY = 100;
+import { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory } from "../../../core/extensions/loader.js";
+export { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory };
 /**
  * Implements normalize string list for the public runtime surface of this module.
  */
@@ -88,13 +89,6 @@ export function parseExtensionManifest(raw) {
         capabilities,
     };
 }
-/**
- * Implements check whether canonical path within directory for the public runtime surface of this module.
- */
-export async function isCanonicalPathWithinDirectory(directory, targetPath) {
-    const [resolvedDirectory, resolvedTargetPath] = await Promise.all([fs.realpath(directory), fs.realpath(targetPath)]);
-    return isPathWithinDirectory(resolvedDirectory, resolvedTargetPath);
-}
 /**
  * Implements validate extension directory for the public runtime surface of this module.
  */
@@ -138,4 +132,4 @@ export const _testOnlyExtensionShared = {
     formatManifestReadError,
 };
 //# sourceMappingURL=shared.js.map
-//# debugId=860ac58e-284f-5ddb-a310-0aa423b2b4fd
+//# debugId=898a48ff-e844-5325-9c9e-d6c5893a65a6

package/dist/cli/commands/extension/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sources":["cli/commands/extension/shared.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module cli/commands/extension/shared\n *\n * Implements extension package-management support for Shared.\n */\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathExists } from \"../../../core/fs/fs-utils.js\";\nimport { isPathWithinDirectory } from \"../../../core/fs/path-utils.js\";\nimport { EXIT_CODE } from \"../../../core/shared/constants.js\";\nimport { PmCliError } from \"../../../core/shared/errors.js\";\nimport type { ExtensionManifest } from \"../../../core/extensions/loader.js\";\n\nexport const DEFAULT_EXTENSION_PRIORITY = 100;\n\n/**\n * Documents the validated extension directory payload exchanged by command, SDK, and package integrations.\n */\nexport interface ValidatedExtensionDirectory {\n  directory: string;\n  manifest_path: string;\n  entry_path: string;\n  manifest: ExtensionManifest;\n}\n\n/**\n * Implements normalize string list for the public runtime surface of this module.\n */\nexport function normalizeStringList(values: readonly string[]): string[] {\n  return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))].sort((left, right) =>\n    left.localeCompare(right),\n  );\n}\n\n/**\n * Implements normalize extension name for match for the public runtime surface of this module.\n */\nexport function normalizeExtensionNameForMatch(value: string): string {\n  return value.trim().toLowerCase();\n}\n\n/**\n * Implements normalize managed directory name for the public runtime surface of this module.\n */\nexport function normalizeManagedDirectoryName(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (normalized.length === 0) {\n    throw new PmCliError(\"Extension manifest name must resolve to a non-empty directory name.\", EXIT_CODE.USAGE);\n  }\n  if (normalized === \".\" || normalized === \"..\") {\n    // Manifest-controlled input must resolve to a dedicated child directory, never\n    // the extensions root itself or its parent (path-traversal guard).\n    throw new PmCliError(\"Extension manifest name must not resolve to \\\".\\\" or \\\"..\\\".\", EXIT_CODE.USAGE);\n  }\n  return normalized;\n}\n\nfunction parseOptionalManifestPriority(value: unknown): number | null {\n  if (value === undefined || value === null) {\n    return DEFAULT_EXTENSION_PRIORITY;\n  }\n  return typeof value === \"number\" && Number.isInteger(value) ? value : null;\n}\n\nfunction parseOptionalManifestCapabilities(value: unknown): string[] | null {\n  if (value === undefined || value === null) {\n    return [];\n  }\n  if (!Array.isArray(value) || value.some((entry) => typeof entry !== \"string\")) {\n    return null;\n  }\n  return normalizeStringList(value.map((entry) => String(entry).toLowerCase()));\n}\n\n/**\n * Implements parse extension manifest for the public runtime surface of this module.\n */\nexport function parseExtensionManifest(raw: unknown): ExtensionManifest | null {\n  if (typeof raw !== \"object\" || raw === null) {\n    return null;\n  }\n  const candidate = raw as Record<string, unknown>;\n  if (typeof candidate.name !== \"string\" || candidate.name.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.version !== \"string\" || candidate.version.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.entry !== \"string\" || candidate.entry.trim().length === 0) {\n    return null;\n  }\n\n  const priority = parseOptionalManifestPriority(candidate.priority);\n  const capabilities = parseOptionalManifestCapabilities(candidate.capabilities);\n  if (priority === null || capabilities === null) {\n    return null;\n  }\n\n  return {\n    name: candidate.name.trim(),\n    version: candidate.version.trim(),\n    entry: candidate.entry.trim(),\n    priority,\n    capabilities,\n  };\n}\n\n/**\n * Implements check whether canonical path within directory for the public runtime surface of this module.\n */\nexport async function isCanonicalPathWithinDirectory(directory: string, targetPath: string): Promise<boolean> {\n  const [resolvedDirectory, resolvedTargetPath] = await Promise.all([fs.realpath(directory), fs.realpath(targetPath)]);\n  return isPathWithinDirectory(resolvedDirectory, resolvedTargetPath);\n}\n\n/**\n * Implements validate extension directory for the public runtime surface of this module.\n */\nexport async function validateExtensionDirectory(directory: string): Promise<ValidatedExtensionDirectory> {\n  const manifestPath = path.join(directory, \"manifest.json\");\n  if (!(await pathExists(manifestPath))) {\n    throw new PmCliError(`Extension manifest is missing at \"${manifestPath}\".`, EXIT_CODE.USAGE);\n  }\n\n  let parsedManifest: unknown;\n  try {\n    parsedManifest = JSON.parse(await fs.readFile(manifestPath, \"utf8\")) as unknown;\n  } catch (error: unknown) {\n    throw new PmCliError(\n      `Failed to parse extension manifest at \"${manifestPath}\": ${formatManifestReadError(error)}`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  const manifest = parseExtensionManifest(parsedManifest);\n  if (!manifest) {\n    throw new PmCliError(`Extension manifest at \"${manifestPath}\" is invalid.`, EXIT_CODE.USAGE);\n  }\n\n  const entryPath = path.resolve(directory, manifest.entry);\n  if (!isPathWithinDirectory(directory, entryPath)) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory \"${directory}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (!(await pathExists(entryPath))) {\n    throw new PmCliError(`Extension entry file is missing at \"${entryPath}\".`, EXIT_CODE.USAGE);\n  }\n  if (!(await isCanonicalPathWithinDirectory(directory, entryPath))) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory after symlink resolution.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  return {\n    directory,\n    manifest_path: manifestPath,\n    entry_path: entryPath,\n    manifest,\n  };\n}\n\nfunction formatManifestReadError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport const _testOnlyExtensionShared = {\n  formatManifestReadError,\n};\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAG5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAY9C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAC3D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChH,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,qEAAqE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9C,+EAA+E;QAC/E,mEAAmE;QACnE,MAAM,IAAI,UAAU,CAAC,8DAA8D,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,iCAAiC,CAAC,KAAc;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAA8B,CAAC;IACjD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,6BAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,iCAAiC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/E,IAAI,QAAQ,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;QAC7B,QAAQ;QACR,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,SAAiB,EAAE,UAAkB;IACxF,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrH,OAAO,qBAAqB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAiB;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,qCAAqC,YAAY,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IAClF,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,0CAA0C,YAAY,MAAM,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAC5F,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,CAAC,0BAA0B,YAAY,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAClB,oBAAoB,QAAQ,CAAC,KAAK,2CAA2C,SAAS,IAAI,EAC1F,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,uCAAuC,SAAS,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAClB,oBAAoB,QAAQ,CAAC,KAAK,kEAAkE,EACpG,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,SAAS;QACrB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,uBAAuB;CACxB,CAAC","debugId":"860ac58e-284f-5ddb-a310-0aa423b2b4fd"}
+{"version":3,"file":"shared.js","sources":["cli/commands/extension/shared.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module cli/commands/extension/shared\n *\n * Implements extension package-management support for Shared.\n */\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathExists } from \"../../../core/fs/fs-utils.js\";\nimport { isPathWithinDirectory } from \"../../../core/fs/path-utils.js\";\nimport { EXIT_CODE } from \"../../../core/shared/constants.js\";\nimport { PmCliError } from \"../../../core/shared/errors.js\";\nimport { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory, type ExtensionManifest } from \"../../../core/extensions/loader.js\";\n\nexport { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory };\n\n/**\n * Documents the validated extension directory payload exchanged by command, SDK, and package integrations.\n */\nexport interface ValidatedExtensionDirectory {\n  directory: string;\n  manifest_path: string;\n  entry_path: string;\n  manifest: ExtensionManifest;\n}\n\n/**\n * Implements normalize string list for the public runtime surface of this module.\n */\nexport function normalizeStringList(values: readonly string[]): string[] {\n  return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))].sort((left, right) =>\n    left.localeCompare(right),\n  );\n}\n\n/**\n * Implements normalize extension name for match for the public runtime surface of this module.\n */\nexport function normalizeExtensionNameForMatch(value: string): string {\n  return value.trim().toLowerCase();\n}\n\n/**\n * Implements normalize managed directory name for the public runtime surface of this module.\n */\nexport function normalizeManagedDirectoryName(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (normalized.length === 0) {\n    throw new PmCliError(\"Extension manifest name must resolve to a non-empty directory name.\", EXIT_CODE.USAGE);\n  }\n  if (normalized === \".\" || normalized === \"..\") {\n    // Manifest-controlled input must resolve to a dedicated child directory, never\n    // the extensions root itself or its parent (path-traversal guard).\n    throw new PmCliError(\"Extension manifest name must not resolve to \\\".\\\" or \\\"..\\\".\", EXIT_CODE.USAGE);\n  }\n  return normalized;\n}\n\nfunction parseOptionalManifestPriority(value: unknown): number | null {\n  if (value === undefined || value === null) {\n    return DEFAULT_EXTENSION_PRIORITY;\n  }\n  return typeof value === \"number\" && Number.isInteger(value) ? value : null;\n}\n\nfunction parseOptionalManifestCapabilities(value: unknown): string[] | null {\n  if (value === undefined || value === null) {\n    return [];\n  }\n  if (!Array.isArray(value) || value.some((entry) => typeof entry !== \"string\")) {\n    return null;\n  }\n  return normalizeStringList(value.map((entry) => String(entry).toLowerCase()));\n}\n\n/**\n * Implements parse extension manifest for the public runtime surface of this module.\n */\nexport function parseExtensionManifest(raw: unknown): ExtensionManifest | null {\n  if (typeof raw !== \"object\" || raw === null) {\n    return null;\n  }\n  const candidate = raw as Record<string, unknown>;\n  if (typeof candidate.name !== \"string\" || candidate.name.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.version !== \"string\" || candidate.version.trim().length === 0) {\n    return null;\n  }\n  if (typeof candidate.entry !== \"string\" || candidate.entry.trim().length === 0) {\n    return null;\n  }\n\n  const priority = parseOptionalManifestPriority(candidate.priority);\n  const capabilities = parseOptionalManifestCapabilities(candidate.capabilities);\n  if (priority === null || capabilities === null) {\n    return null;\n  }\n\n  return {\n    name: candidate.name.trim(),\n    version: candidate.version.trim(),\n    entry: candidate.entry.trim(),\n    priority,\n    capabilities,\n  };\n}\n\n/**\n * Implements validate extension directory for the public runtime surface of this module.\n */\nexport async function validateExtensionDirectory(directory: string): Promise<ValidatedExtensionDirectory> {\n  const manifestPath = path.join(directory, \"manifest.json\");\n  if (!(await pathExists(manifestPath))) {\n    throw new PmCliError(`Extension manifest is missing at \"${manifestPath}\".`, EXIT_CODE.USAGE);\n  }\n\n  let parsedManifest: unknown;\n  try {\n    parsedManifest = JSON.parse(await fs.readFile(manifestPath, \"utf8\")) as unknown;\n  } catch (error: unknown) {\n    throw new PmCliError(\n      `Failed to parse extension manifest at \"${manifestPath}\": ${formatManifestReadError(error)}`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  const manifest = parseExtensionManifest(parsedManifest);\n  if (!manifest) {\n    throw new PmCliError(`Extension manifest at \"${manifestPath}\" is invalid.`, EXIT_CODE.USAGE);\n  }\n\n  const entryPath = path.resolve(directory, manifest.entry);\n  if (!isPathWithinDirectory(directory, entryPath)) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory \"${directory}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (!(await pathExists(entryPath))) {\n    throw new PmCliError(`Extension entry file is missing at \"${entryPath}\".`, EXIT_CODE.USAGE);\n  }\n  if (!(await isCanonicalPathWithinDirectory(directory, entryPath))) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory after symlink resolution.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  return {\n    directory,\n    manifest_path: manifestPath,\n    entry_path: entryPath,\n    manifest,\n  };\n}\n\nfunction formatManifestReadError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport const _testOnlyExtensionShared = {\n  formatManifestReadError,\n};\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAA0B,MAAM,oCAAoC,CAAC;AAExI,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,CAAC;AAYtE;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAC3D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChH,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,qEAAqE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9C,+EAA+E;QAC/E,mEAAmE;QACnE,MAAM,IAAI,UAAU,CAAC,8DAA8D,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,iCAAiC,CAAC,KAAc;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAA8B,CAAC;IACjD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,6BAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,iCAAiC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/E,IAAI,QAAQ,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3B,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;QAC7B,QAAQ;QACR,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAiB;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,qCAAqC,YAAY,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IAClF,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,0CAA0C,YAAY,MAAM,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAC5F,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,CAAC,0BAA0B,YAAY,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAClB,oBAAoB,QAAQ,CAAC,KAAK,2CAA2C,SAAS,IAAI,EAC1F,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,uCAAuC,SAAS,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAClB,oBAAoB,QAAQ,CAAC,KAAK,kEAAkE,EACpG,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,SAAS;QACrB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,uBAAuB;CACxB,CAAC","debugId":"898a48ff-e844-5325-9c9e-d6c5893a65a6"}

package/dist/cli/commands/extension.js

@@ -4,7 +4,7 @@
  * Implements the pm extension command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0e9a5528-9595-5a89-89b7-5a5acce477a8")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3ff8a83f-729e-576a-8830-d52097bd0d34")}catch(e){}}();
 import { execFile } from "node:child_process";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -29,7 +29,7 @@ import { ensureTypeFolderScaffold } from "./schema.js";
 import { normalizeStringList, normalizeExtensionNameForMatch, normalizeManagedDirectoryName, parseExtensionManifest, validateExtensionDirectory, } from "./extension/shared.js";
 import { sortManagedEntries, managedExtensionSourcesEquivalent, readManagedExtensionState, writeManagedExtensionState, upsertManagedEntry, resolveManagedExtensionStatePath, } from "./extension/managed-state.js";
 import { parseExtensionInstallSource, resolveInstallSource, areDirectoriesEquivalent, runGitCommand, } from "./extension/install-sources.js";
-import { resolveBundledExtensionAliasSource, isBundledPackageInstallAllTarget, listBundledPackageAliases, resolveBundledAliasManifestName, buildBundledPackageCatalog, } from "./extension/bundled-catalog.js";
+import { resolveBundledExtensionAliasSource, resolveBundledPackageNpmName, isBundledPackageInstallAllTarget, listBundledPackageAliases, resolveBundledAliasManifestName, buildBundledPackageCatalog, } from "./extension/bundled-catalog.js";
 import { scaffoldExtensionProject } from "./extension/scaffold.js";
 import { buildExtensionDescribeResult } from "./extension/describe.js";
 import { applyDoctorRuntimeActivationState, classifyDoctorLoadFailureWarnings, classifyDoctorActivationFailureWarnings, classifyUnusedCapabilityWarnings, buildExtensionTriageSummary, parseDoctorDetailMode, collectUnknownCapabilityGuidance, buildCapabilityContractMetadata, buildDoctorConsistencySummary, } from "./extension/doctor.js";
@@ -150,6 +150,21 @@ function sleep(ms) {
         setTimeout(resolve, ms);
     });
 }
+/**
+ * Ensure the installed extension directory carries a `package.json` with
+ * `"type": "module"`. Extension entrypoints are ESM TypeScript; without a
+ * nearby package.json Node resolves the module type from the HOST project's
+ * package.json, so installs into `"type": "commonjs"` projects fail activation
+ * with `extension_load_failed` (pm-r0m4). Extensions that ship their own
+ * package.json are left untouched.
+ */
+async function ensureExtensionModuleTypeMarker(destinationDirectory) {
+    const markerPath = path.join(destinationDirectory, "package.json");
+    if (await pathExists(markerPath)) {
+        return;
+    }
+    await fs.writeFile(markerPath, `${JSON.stringify({ type: "module" }, null, 2)}\n`, "utf8");
+}
 /**
  * Implements copy extension directory for install for the public runtime surface of this module.
  */
@@ -572,7 +587,7 @@ function summarizeRuntimeCommandPathsForExtension(extensionName, installed) {
     };
 }
 function resolveCommandDiscoveryPackageName(extensionName, source) {
-    if (source.kind === "npm" && typeof source.package === "string" && source.package.trim().length > 0) {
+    if (typeof source.package === "string" && source.package.trim().length > 0) {
         return source.package.trim();
     }
     if (source.kind === "builtin" && typeof source.name === "string" && source.name.trim().length > 0) {
@@ -1099,13 +1114,14 @@ async function runExtensionCatalogAction(ctx) {
  * GitHub repository, capturing the location/commit/subpath provenance the manage
  * and upgrade flows later read back.
  */
-function buildInstallManagedSource(bundledAliasName, installSource, resolvedSource) {
+function buildInstallManagedSource(bundledAliasName, bundledPackageName, installSource, resolvedSource) {
     if (bundledAliasName) {
         return {
             kind: "builtin",
             input: bundledAliasName,
             location: bundledAliasName,
             name: bundledAliasName,
+            ...(bundledPackageName === null ? {} : { package: bundledPackageName }),
         };
     }
     if (installSource.kind === "local") {
@@ -1146,7 +1162,7 @@ function buildInstallManagedSource(bundledAliasName, installSource, resolvedSour
  */
 async function performExtensionInstallUnderLock(ctx, input) {
     const { scope, resolvedRoots, warnings, global, withResult } = ctx;
-    const { validated, destinationDirectoryName, bundledAliasName, installSource, resolvedSource } = input;
+    const { validated, destinationDirectoryName, bundledAliasName, bundledPackageName, installSource, resolvedSource } = input;
     const settings = await readSettings(resolvedRoots.settings_root);
     const managedStateRead = await readManagedExtensionState(resolvedRoots.selected_root);
     warnings.push(...managedStateRead.warnings);
@@ -1157,7 +1173,8 @@ async function performExtensionInstallUnderLock(ctx, input) {
     if (!installInPlace) {
         await copyExtensionDirectoryForInstall(validated.directory, destinationDirectory);
     }
-    const sourceRecord = buildInstallManagedSource(bundledAliasName, installSource, resolvedSource);
+    await ensureExtensionModuleTypeMarker(destinationDirectory);
+    const sourceRecord = buildInstallManagedSource(bundledAliasName, bundledPackageName, installSource, resolvedSource);
     const now = nowIso();
     const existingManagedEntry = managedStateRead.state.entries.find((entry) => normalizeExtensionNameForMatch(entry.name) === normalizeExtensionNameForMatch(validated.manifest.name));
     const sourceUnchanged = existingManagedEntry !== undefined &&
@@ -1266,6 +1283,7 @@ async function runExtensionInstallAction(ctx) {
     const bundledAliasSource = typeof githubOption === "string" ? null : await resolveBundledExtensionAliasSource(explicitSourceInput);
     /* c8 ignore stop */
     const bundledAliasName = bundledAliasSource === null ? null : explicitSourceInput.trim().toLowerCase();
+    const bundledPackageName = bundledAliasName === null ? null : await resolveBundledPackageNpmName(bundledAliasName);
     const sourceInput = bundledAliasSource ?? explicitSourceInput;
     /* c8 ignore start -- install-source branch combinations are covered in install-sources focused tests */
     const installSource = parseExtensionInstallSource(sourceInput, {
@@ -1281,6 +1299,7 @@ async function runExtensionInstallAction(ctx) {
             validated,
             destinationDirectoryName,
             bundledAliasName,
+            bundledPackageName,
             installSource,
             resolvedSource,
         }));
@@ -1743,7 +1762,13 @@ async function runExtensionDescribeAction(ctx) {
     const describeResult = buildExtensionDescribeResult(normalizedTarget, loadResult, activationResult);
     if (normalizedTarget !== undefined && describeResult.extensions.length === 0) {
         const noun = options.vocabulary === "package" ? "package" : "extension";
-        throw new PmCliError(`No loaded ${noun} named "${normalizedTarget}" was found in ${scope} scope. Run pm ${noun} explore to list discovered ${noun}s.`, EXIT_CODE.NOT_FOUND);
+        const loadedNames = [
+            ...new Set(loadResult.loaded.map((entry) => options.vocabulary === "package" && typeof entry.source_package === "string" && entry.source_package.trim().length > 0
+                ? entry.source_package.trim()
+                : entry.name)),
+        ].sort((left, right) => left.localeCompare(right));
+        const loadedHint = loadedNames.length > 0 ? ` Loaded ${noun} names: ${loadedNames.join(", ")}.` : "";
+        throw new PmCliError(`No loaded ${noun} named "${normalizedTarget}" was found in ${scope} scope.${loadedHint} Run pm ${noun} explore to list discovered ${noun}s.`, EXIT_CODE.NOT_FOUND);
     }
     return withResult({
         target: describeResult.target,
@@ -1917,4 +1942,4 @@ export const _testOnly = {
     withExtensionInstallLock,
 };
 //# sourceMappingURL=extension.js.map
-//# debugId=0e9a5528-9595-5a89-89b7-5a5acce477a8
+//# debugId=3ff8a83f-729e-576a-8830-d52097bd0d34