@untangle-code/cli 0.0.0-stage → 0.1.1

package/dist/commands/extensions/invoke.js

@@ -0,0 +1,275 @@
+/** Shared extension execution for `extensions run` and `scan`.
+ * Expected refusals and failures are data; cancellation still aborts the caller.
+ * The caller owns rendering and persistence of the returned run record.
+ */
+import { buildRefId, buildRepoId, buildWorkspaceId, sha256Hex } from "@untangle-code/domain";
+import { buildHttpAuthHeaders, createFetchHttpRunner, createNodeProcessRunner, detectExtension, runExtension, redactSecrets, } from "@untangle-code/extension-runtime";
+import { createContainerCli } from "./container.js";
+import { gateFor } from "./context.js";
+import { provisionContainer } from "./provision.js";
+import { resolveSecretEnvironment } from "./secret-store.js";
+import { missingAnalyzerSecrets, setupCredentials } from "./setup.js";
+/**
+ * Warum eine Extension NICHT gelaufen ist — geschlossene Menge (E4).
+ *
+ * Bewusst NICHT die `SkipReason` des Domains: die beschreibt uebersprungene
+ * GEGENSTAENDE einer Pipeline und hat fuer offenes Gate, fehlendes Secret,
+ * verweigerte Zustimmung und nicht-aktiviert kein Glied. Diese Menge beschreibt
+ * einen nicht stattgefundenen AUFRUF, und sie bleibt lokal, bis ein zweiter
+ * Konsument sie braucht.
+ */
+export const EXTENSION_NOT_RUN_REASONS = [
+    "not_enabled",
+    "license_gate_open",
+    "consent_withheld",
+    "secret_missing",
+    "setup_failed",
+    "provision_failed",
+    "invocation_failed",
+];
+export async function invokeExtension(input) {
+    input.signal?.throwIfAborted();
+    const secrets = input.extension.manifest.secrets
+        .map((secret) => input.environment.env[secret.envVar])
+        .filter((value) => value !== undefined && value !== "");
+    try {
+        const outcome = await executeExtension(input, secrets);
+        input.signal?.throwIfAborted();
+        return outcome;
+    }
+    catch (error) {
+        input.signal?.throwIfAborted();
+        return {
+            status: "not_run",
+            extensionId: input.extension.manifest.id,
+            reason: "invocation_failed",
+            detail: redactSecrets(error instanceof Error ? error.message : String(error), secrets),
+            nextStep: `untangle extensions status ${input.extension.manifest.id}`,
+        };
+    }
+}
+async function executeExtension(input, sensitiveValues) {
+    const { environment, context, extension } = input;
+    const manifest = extension.manifest;
+    const extensionId = manifest.id;
+    const ruleset = input.ruleset ?? manifest.defaultRuleset;
+    if (input.requireEnabled === true && !context.state.enabled.includes(extensionId)) {
+        return {
+            status: "not_run",
+            extensionId,
+            reason: "not_enabled",
+            detail: `"${extensionId}" is installed but not enabled; enabling starts nothing (X1)`,
+            nextStep: `untangle extensions enable ${extensionId}`,
+        };
+    }
+    // Das Lizenz-Gate steht vor allem anderen (X5): ohne Bestaetigung wird nicht
+    // einmal die Version abgefragt.
+    const gate = gateFor(context, extension, ruleset);
+    if (!gate.allowed) {
+        const reasons = [gate.tool, ...gate.rulesets]
+            .filter((outcome) => outcome.status !== "acknowledged" && outcome.status !== "not_required")
+            .map((outcome) => outcome.reason)
+            .join("; ");
+        return {
+            status: "not_run",
+            extensionId,
+            reason: "license_gate_open",
+            detail: `nothing was started and nothing was pulled: ${reasons}`,
+            ...(gate.acknowledgeCommands.length === 0
+                ? {}
+                : { nextStep: gate.acknowledgeCommands.join(" && ") }),
+        };
+    }
+    const clock = environment.clock;
+    const runtimeDeps = {
+        clock,
+        random: environment.random,
+        processRunner: createNodeProcessRunner(clock),
+        httpRunner: createFetchHttpRunner((input.fetchImpl ?? fetch), clock),
+    };
+    let provision;
+    if (manifest.container !== undefined) {
+        if (!input.provisionConsent) {
+            const resources = manifest.resources;
+            return {
+                status: "not_run",
+                extensionId,
+                reason: "consent_withheld",
+                detail: `a container would have to be provisioned first: at least ` +
+                    `${String(resources.minMemoryMb)} MB memory (recommended ` +
+                    `${String(resources.recommendedMemoryMb)} MB), ${String(resources.recommendedCpus)} CPUs, ` +
+                    `image ${manifest.container.image}@${manifest.container.digest}`,
+                nextStep: `untangle extensions run ${extensionId} --yes`,
+            };
+        }
+        const resources = manifest.resources;
+        input.onProvisionPlanned?.(`${extensionId}: memory at least ${String(resources.minMemoryMb)} MB, ` +
+            `recommended ${String(resources.recommendedMemoryMb)} MB; ` +
+            `cpus recommended ${String(resources.recommendedCpus)}; ` +
+            `image ${manifest.container.image}@${manifest.container.digest}`);
+        provision = await provisionContainer({
+            fs: environment.fs,
+            container: createContainerCli({
+                processRunner: runtimeDeps.processRunner,
+                limits: { ...input.limits, timeoutMs: 300_000 },
+                ...(environment.env["UNTANGLE_CONTAINER_CLI"] === undefined
+                    ? {}
+                    : { command: environment.env["UNTANGLE_CONTAINER_CLI"] }),
+            }),
+            httpRunner: runtimeDeps.httpRunner,
+            limits: input.limits,
+            wait: waitForRetry,
+        }, {
+            manifest,
+            userDataDirectory: environment.userDataDir,
+            workspacePath: input.workspacePath,
+            ...(input.signal === undefined ? {} : { signal: input.signal }),
+        });
+        for (const step of provision.steps) {
+            input.onProvisionStep?.(step);
+        }
+        if (!provision.healthy) {
+            return {
+                status: "not_run",
+                extensionId,
+                reason: "provision_failed",
+                detail: provision.detail,
+                nextStep: `untangle extensions logs ${extensionId}`,
+            };
+        }
+    }
+    const httpUrl = input.httpUrl ?? manifest.http?.defaultUrl;
+    let effectiveEnv = await resolveSecretEnvironment(environment, manifest, httpUrl);
+    if (manifest.setup && missingAnalyzerSecrets(manifest, effectiveEnv).length > 0) {
+        try {
+            effectiveEnv = await setupCredentials({
+                environment,
+                manifest,
+                ...(provision === undefined ? {} : { provision }),
+                consent: input.provisionConsent,
+                ...(httpUrl === undefined ? {} : { url: httpUrl }),
+                processRunner: runtimeDeps.processRunner,
+                limits: input.limits,
+                ...(input.signal === undefined ? {} : { signal: input.signal }),
+            });
+            input.onProvisionStep?.("required credentials were initialized and stored in the private user profile");
+        }
+        catch (error) {
+            input.signal?.throwIfAborted();
+            return {
+                status: "not_run",
+                extensionId,
+                reason: "setup_failed",
+                detail: error instanceof Error ? error.message : "Credential setup failed.",
+                nextStep: `untangle extensions configure ${extensionId}`,
+            };
+        }
+    }
+    for (const secret of manifest.secrets) {
+        const value = effectiveEnv[secret.envVar];
+        if (value)
+            sensitiveValues.push(value);
+    }
+    // Secrets kommen aus Umgebung/privatem Store, nie aus dem Manifest (§8.5). Die
+    // Reihenfolge nach der Bereitstellung ist Absicht: ein Token kann der Dienst
+    // erst ausstellen, wenn er laeuft.
+    const secretEnv = {};
+    const secretValues = [];
+    const missingSecrets = [];
+    for (const secret of manifest.secrets) {
+        if (secret.setupOnly)
+            continue;
+        const value = effectiveEnv[secret.envVar];
+        if (value === undefined || value === "") {
+            if (secret.required) {
+                missingSecrets.push(`${secret.name} (${secret.envVar}): ${secret.purpose}`);
+            }
+            continue;
+        }
+        secretEnv[secret.envVar] = value;
+        secretValues.push(value);
+    }
+    if (missingSecrets.length > 0) {
+        return {
+            status: "not_run",
+            extensionId,
+            reason: "secret_missing",
+            detail: `required secrets are not set in the environment or private config: ${missingSecrets.join("; ")}` +
+                (provision?.healthy === true
+                    ? "; the service itself is up, so a token can be created there now"
+                    : ""),
+            nextStep: `untangle extensions configure ${extensionId}`,
+        };
+    }
+    const toolEnv = {
+        PATH: environment.env["PATH"] ?? "",
+        ...(environment.env["HOME"] === undefined ? {} : { HOME: environment.env["HOME"] }),
+        ...(environment.env["LANG"] === undefined ? {} : { LANG: environment.env["LANG"] }),
+        ...secretEnv,
+    };
+    const httpHeaders = buildHttpAuthHeaders(manifest, effectiveEnv);
+    const health = await detectExtension(runtimeDeps, {
+        extension,
+        licenseGate: gate.tool.status,
+        env: toolEnv,
+        secretValues,
+        limits: input.limits,
+        ...(httpUrl === undefined ? {} : { httpUrl }),
+        ...(Object.keys(httpHeaders).length === 0 ? {} : { httpHeaders }),
+        ...(input.signal === undefined ? {} : { signal: input.signal }),
+    });
+    // X6: der Pin gilt fuer den Container, den Untangle gestartet hat — auch
+    // wenn analysiert wird, indem man ihn fragt.
+    if (provision !== undefined && manifest.container !== undefined) {
+        const digest = provision.state.imageDigest;
+        if (digest !== undefined) {
+            health.imageDigest = digest;
+            health.digestMatchesManifest = digest === manifest.container.digest;
+        }
+    }
+    const repoId = buildRepoId({ canonicalPath: input.workspacePath });
+    const workspaceId = buildWorkspaceId({ configHash: sha256Hex(input.workspacePath) });
+    const refId = buildRefId(repoId, "working-tree");
+    const result = await runExtension(runtimeDeps, {
+        extension,
+        health,
+        gate,
+        workspaceId,
+        repoId,
+        refId,
+        workspacePath: input.workspacePath,
+        target: input.target,
+        env: toolEnv,
+        secretValues,
+        limits: input.limits,
+        ...(ruleset === undefined ? {} : { ruleset }),
+        ...(httpUrl === undefined ? {} : { httpUrl }),
+        ...(Object.keys(httpHeaders).length === 0 ? {} : { httpHeaders }),
+        ...(input.signal === undefined ? {} : { signal: input.signal }),
+        resolveFile: input.resolveFile,
+        resolvePosition: input.resolvePosition,
+    });
+    return {
+        status: "ran",
+        extensionId,
+        health,
+        result,
+        ...(provision === undefined ? {} : { provision }),
+    };
+}
+/** Abortable wait without leaving listeners behind after each health probe. */
+function waitForRetry(ms, signal) {
+    signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal?.reason);
+        };
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=invoke.js.map

package/dist/commands/extensions/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../../src/commands/extensions/invoke.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,aAAa,GAOd,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAA0B,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,aAAa;IACb,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,mBAAmB;CACX,CAAC;AAmDX,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA2B;IAE3B,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO;SAC7C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvD,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YACxC,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YACtF,QAAQ,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE;SACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAA2B,EAC3B,eAAyB;IAEzB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,cAAc,CAAC;IAEzD,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,IAAI,WAAW,8DAA8D;YACrF,QAAQ,EAAE,8BAA8B,WAAW,EAAE;SACtD,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,gCAAgC;IAChC,MAAM,IAAI,GAA0B,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;aAC1C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC;aAC3F,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;aAChC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,+CAA+C,OAAO,EAAE;YAChE,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IAChC,MAAM,WAAW,GAAG;QAClB,KAAK;QACL,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,aAAa,EAAE,uBAAuB,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,qBAAqB,CAC/B,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAgD,EACzE,KAAK,CACN;KACF,CAAC;IAEF,IAAI,SAAwC,CAAC;IAC7C,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW;gBACX,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EACJ,2DAA2D;oBAC3D,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,0BAA0B;oBAC1D,GAAG,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS;oBAC3F,SAAS,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;gBAClE,QAAQ,EAAE,2BAA2B,WAAW,QAAQ;aACzD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACrC,KAAK,CAAC,kBAAkB,EAAE,CACxB,GAAG,WAAW,qBAAqB,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO;YACrE,eAAe,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO;YAC3D,oBAAoB,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;YACzD,SAAS,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CACnE,CAAC;QACF,SAAS,GAAG,MAAM,kBAAkB,CAClC;YACE,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,SAAS,EAAE,kBAAkB,CAAC;gBAC5B,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;gBAC/C,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS;oBACzD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;aAC5D,CAAC;YACF,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,YAAY;SACnB,EACD;YACE,QAAQ;YACR,iBAAiB,EAAE,WAAW,CAAC,WAAW;YAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CACF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW;gBACX,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,QAAQ,EAAE,4BAA4B,WAAW,EAAE;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC3D,IAAI,YAAY,GAAG,MAAM,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,KAAK,IAAI,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,gBAAgB,CAAC;gBACpC,WAAW;gBACX,QAAQ;gBACR,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;gBACjD,OAAO,EAAE,KAAK,CAAC,gBAAgB;gBAC/B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;gBAClD,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aAChE,CAAC,CAAC;YACH,KAAK,CAAC,eAAe,EAAE,CACrB,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW;gBACX,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;gBAC3E,QAAQ,EAAE,iCAAiC,WAAW,EAAE;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK;YAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,mCAAmC;IACnC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,SAAS;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,cAAc,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,SAAS;QACX,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACjC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,MAAM,EAAE,gBAAgB;YACxB,MAAM,EACJ,sEAAsE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjG,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;oBAC1B,CAAC,CAAC,iEAAiE;oBACnE,CAAC,CAAC,EAAE,CAAC;YACT,QAAQ,EAAE,iCAAiC,WAAW,EAAE;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;QACnC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,GAAG,SAAS;KACb,CAAC;IACF,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE;QAChD,SAAS;QACT,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;QAC7B,GAAG,EAAE,OAAO;QACZ,YAAY;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC,CAAC;IAEH,yEAAyE;IACzE,6CAA6C;IAC7C,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;YAC5B,MAAM,CAAC,qBAAqB,GAAG,MAAM,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE;QAC7C,SAAS;QACT,MAAM;QACN,IAAI;QACJ,WAAW;QACX,MAAM;QACN,KAAK;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,OAAO;QACZ,YAAY;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,KAAK;QACb,WAAW;QACX,MAAM;QACN,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,EAAU,EAAE,MAAoB;IACpD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/extensions/list.d.ts

@@ -0,0 +1,5 @@
+import { type ParsedArgs } from "../../cli/args.js";
+import { type Io } from "../../cli/io.js";
+import type { ExtensionEnvironmentV1 } from "./environment.js";
+export declare function runList(environment: ExtensionEnvironmentV1, args: ParsedArgs, io: Io, format: "text" | "json"): Promise<number>;
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/extensions/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/extensions/list.ts"],"names":[],"mappings":"AAcA,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAc,KAAK,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAGtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAqB/D,wBAAsB,OAAO,CAC3B,WAAW,EAAE,sBAAsB,EACnC,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,GAAG,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAgGjB"}

package/dist/commands/extensions/list.js

@@ -0,0 +1,125 @@
+/**
+ * `untangle extensions list`
+ *
+ * Shows what is installed for THIS user: name, license, status, last run.
+ *
+ * The listing is also where the two silences E4 forbids are broken. A
+ * manifest that was found but rejected, and a manifest that was found but
+ * deliberately not loaded — a project-local one above all — both appear with
+ * their reason. So do the roots that were searched, including the ones that
+ * do not exist: "no extensions" must be a statement about a place, not an
+ * unexplained blank.
+ */
+import { compareCodepoints } from "@untangle-code/domain";
+import { boolFlag, stringFlag } from "../../cli/args.js";
+import { EXIT } from "../../cli/exit.js";
+import { line, note } from "../../cli/io.js";
+import { gateFor, loadExtensionContext } from "./context.js";
+import { emitJson, renderTable } from "./render.js";
+export async function runList(environment, args, io, format) {
+    const context = await loadExtensionContext(environment);
+    const categoryFilter = stringFlag(args, "category")
+        ?.split(",")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry !== "");
+    const enabledOnly = boolFlag(args, "enabled-only");
+    const rows = [];
+    for (const extension of context.discovery.extensions) {
+        const manifest = extension.manifest;
+        if (categoryFilter !== undefined && !categoryFilter.includes(manifest.category)) {
+            continue;
+        }
+        const enabled = context.state.enabled.includes(manifest.id);
+        if (enabledOnly && !enabled) {
+            continue;
+        }
+        const gate = gateFor(context, extension);
+        const lastRun = context.state.lastRuns[manifest.id];
+        rows.push({
+            id: manifest.id,
+            displayName: manifest.displayName,
+            category: manifest.category,
+            invocation: manifest.invocation,
+            outputFormat: manifest.outputFormat,
+            license: {
+                spdxId: manifest.license.spdxId,
+                usageRestriction: manifest.license.usageRestriction,
+                gateStatus: gate.tool.status,
+                gateReason: gate.tool.reason,
+            },
+            enabled,
+            status: statusOf(enabled, gate.allowed, gate.tool.status),
+            networkAccess: manifest.networkAccess,
+            pin: manifest.container === undefined
+                ? null
+                : { image: manifest.container.image, digest: manifest.container.digest },
+            manifestPath: extension.manifestPath,
+            origin: extension.origin,
+            ...(lastRun === undefined ? {} : { lastRun }),
+        });
+    }
+    rows.sort((left, right) => compareCodepoints(left.id, right.id));
+    if (format === "json") {
+        emitJson(io, {
+            command: "extensions list",
+            rootsScanned: context.discovery.rootsScanned,
+            projectRootsExcluded: environment.projectRoots,
+            extensions: rows,
+            rejected: context.discovery.rejected,
+            ignored: context.discovery.ignored,
+            warnings: context.warnings,
+        });
+    }
+    else {
+        if (rows.length === 0) {
+            line(io, "no extensions installed.");
+        }
+        else {
+            for (const rendered of renderTable(["ID", "LICENSE", "RESTRICTION", "STATUS", "LAST RUN"], rows.map((row) => [
+                row.id,
+                row.license.spdxId,
+                row.license.usageRestriction,
+                row.status,
+                describeLastRun(row.lastRun),
+            ]))) {
+                line(io, rendered);
+            }
+        }
+        line(io, "");
+        line(io, "roots searched (project directories are never searched):");
+        for (const root of context.discovery.rootsScanned) {
+            line(io, `  ${root.root}${root.exists ? "" : "  (does not exist)"}`);
+        }
+        if (environment.projectRoots.length > 0) {
+            line(io, `  excluded as project directories: ${environment.projectRoots.join(", ")}`);
+        }
+    }
+    for (const rejected of context.discovery.rejected) {
+        note(io, `rejected ${rejected.manifestPath}:`);
+        for (const issue of rejected.issues) {
+            note(io, `  ${issue.field}: ${issue.message}`);
+        }
+    }
+    for (const ignored of context.discovery.ignored) {
+        note(io, `ignored ${ignored.manifestPath} (${ignored.reason}): ${ignored.detail}`);
+    }
+    for (const warning of context.warnings) {
+        note(io, `warning: ${warning}`);
+    }
+    return EXIT.ok;
+}
+function statusOf(enabled, gateAllowed, gateStatus) {
+    if (!gateAllowed) {
+        return `blocked (license ${gateStatus})`;
+    }
+    return enabled ? "enabled" : "installed, not enabled";
+}
+function describeLastRun(lastRun) {
+    if (lastRun === undefined) {
+        return "never";
+    }
+    const when = lastRun.finishedAt ?? lastRun.startedAt;
+    const suffix = lastRun.errorCode === undefined ? "" : ` ${lastRun.errorCode}`;
+    return `${when} ${lastRun.exitStatus}${suffix} (${String(lastRun.findingsTotal)} findings)`;
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/extensions/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/extensions/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAmB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAW,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAoBpD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,WAAmC,EACnC,IAAgB,EAChB,EAAM,EACN,MAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;QACjD,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC;YACR,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB;gBACnD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC5B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;aAC7B;YACD,OAAO;YACP,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACzD,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,GAAG,EACD,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAC9B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;YAC5E,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,QAAQ,CAAC,EAAE,EAAE;YACX,OAAO,EAAE,iBAAiB;YAC1B,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;YAC5C,oBAAoB,EAAE,WAAW,CAAC,YAAY;YAC9C,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;YACpC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,QAAQ,IAAI,WAAW,CAChC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,EACtD,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBAChB,GAAG,CAAC,EAAE;gBACN,GAAG,CAAC,OAAO,CAAC,MAAM;gBAClB,GAAG,CAAC,OAAO,CAAC,gBAAgB;gBAC5B,GAAG,CAAC,MAAM;gBACV,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;aAC7B,CAAC,CACH,EAAE,CAAC;gBACF,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,EAAE,EAAE,0DAA0D,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,WAAW,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,EAAE,EAAE,sCAAsC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAClD,IAAI,CAAC,EAAE,EAAE,YAAY,QAAQ,CAAC,YAAY,GAAG,CAAC,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,CAAC,EAAE,EAAE,WAAW,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,YAAY,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB,EAAE,WAAoB,EAAE,UAAkB;IAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,oBAAoB,UAAU,GAAG,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,OAAoC;IAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAC9E,OAAO,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC;AAC9F,CAAC"}

package/dist/commands/extensions/logs.d.ts

@@ -0,0 +1,5 @@
+import { type ParsedArgs } from "../../cli/args.js";
+import { type Io } from "../../cli/io.js";
+import type { ExtensionEnvironmentV1 } from "./environment.js";
+export declare function runLogs(environment: ExtensionEnvironmentV1, args: ParsedArgs, io: Io, format: "text" | "json"): Promise<number>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/commands/extensions/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../../src/commands/extensions/logs.ts"],"names":[],"mappings":"AAeA,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAQ,KAAK,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAK/D,wBAAsB,OAAO,CAC3B,WAAW,EAAE,sBAAsB,EACnC,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,GAAG,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAwEjB"}

package/dist/commands/extensions/logs.js

@@ -0,0 +1,74 @@
+/**
+ * `untangle extensions logs <id>`
+ *
+ * Liest ausschliesslich die Logs des EIGENEN Containers (extensions.md §11.1).
+ * Die Besitzprobe liegt im Container-Adapter: ohne beide Labels wird nichts
+ * gelesen, auch wenn ein Container des erwarteten Namens existiert. Der Name
+ * `untangle-ext-<id>` ist vorhersagbar, und niemand hindert einen fremden
+ * Container daran, so zu heissen.
+ */
+import { defaultProcessLimits, createNodeProcessRunner, redactSecrets, } from "@untangle-code/extension-runtime";
+import { integerFlag } from "../../cli/args.js";
+import { EXIT, OperationalError, UsageError } from "../../cli/exit.js";
+import { line } from "../../cli/io.js";
+import { createContainerCli } from "./container.js";
+import { explainMissing, findExtension, loadExtensionContext } from "./context.js";
+import { composeFilePath } from "./provision.js";
+import { emitJson } from "./render.js";
+import { readStoredSecrets } from "./secret-store.js";
+export async function runLogs(environment, args, io, format) {
+    const extensionId = args.positionals[1];
+    if (extensionId === undefined) {
+        throw new UsageError("`untangle extensions logs` needs an extension id.", "Run `untangle extensions list` to see the installed ids.");
+    }
+    const context = await loadExtensionContext(environment);
+    const extension = findExtension(context, extensionId);
+    if (extension === null) {
+        throw new OperationalError(explainMissing(context, extensionId), "Install it first: untangle extensions add --from=<path-or-url>");
+    }
+    const manifest = extension.manifest;
+    if (manifest.container === undefined) {
+        throw new OperationalError(`"${extensionId}" declares no container; there are no container logs to read.`, "Logs exist only for extensions Untangle provisions as a container.");
+    }
+    const tail = integerFlag(args, "tail", 200);
+    if (tail <= 0) {
+        throw new UsageError("--tail expects a positive number of lines.", "Example: --tail=200");
+    }
+    // Include bootstrap credentials and stored values even when an environment
+    // override is active: old credentials can still occur in retained logs.
+    const stored = await readStoredSecrets(environment, manifest);
+    const secrets = manifest.secrets.flatMap((secret) => [stored[secret.name], environment.env[secret.envVar]].filter((value) => Boolean(value)));
+    const containerCli = createContainerCli({
+        processRunner: createNodeProcessRunner(environment.clock),
+        limits: { ...defaultProcessLimits(), timeoutMs: 60_000 },
+        ...(environment.env["UNTANGLE_CONTAINER_CLI"] === undefined
+            ? {}
+            : { command: environment.env["UNTANGLE_CONTAINER_CLI"] }),
+    });
+    const result = await containerCli.logs({
+        manifest,
+        composeFilePath: composeFilePath(environment.userDataDir, manifest.id),
+        tail,
+    });
+    result.detail = redactSecrets(result.detail, secrets);
+    result.text = redactSecrets(result.text, secrets);
+    if (format === "json") {
+        emitJson(io, {
+            command: "extensions logs",
+            extensionId,
+            ok: result.ok,
+            detail: result.detail,
+            lines: result.text === "" ? [] : result.text.split("\n"),
+        });
+    }
+    else {
+        if (!result.ok) {
+            throw new OperationalError(`No logs were read for "${extensionId}": ${result.detail}`, `Check the container with untangle extensions status ${extensionId}`);
+        }
+        for (const entry of result.text.split("\n")) {
+            line(io, entry);
+        }
+    }
+    return result.ok ? EXIT.ok : EXIT.operational;
+}
+//# sourceMappingURL=logs.js.map

package/dist/commands/extensions/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../../src/commands/extensions/logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,GACd,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAmB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAW,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,WAAmC,EACnC,IAAgB,EAChB,EAAM,EACN,MAAuB;IAEvB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,mDAAmD,EACnD,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CACxB,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,EACpC,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,gBAAgB,CACxB,IAAI,WAAW,+DAA+D,EAC9E,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,qBAAqB,CAAC,CAAC;IAC5F,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClD,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CACtF,OAAO,CAAC,KAAK,CAAC,CACf,CACF,CAAC;IACF,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,aAAa,EAAE,uBAAuB,CAAC,WAAW,CAAC,KAAK,CAAC;QACzD,MAAM,EAAE,EAAE,GAAG,oBAAoB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;QACxD,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;QACrC,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,IAAI;KACL,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,CAAC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAElD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,QAAQ,CAAC,EAAE,EAAE;YACX,OAAO,EAAE,iBAAiB;YAC1B,WAAW;YACX,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,WAAW,MAAM,MAAM,CAAC,MAAM,EAAE,EAC1D,uDAAuD,WAAW,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;AAChD,CAAC"}

package/dist/commands/extensions/provision.d.ts

@@ -0,0 +1,36 @@
+import type { ExtensionManifestV1, FileSystemPort } from "@untangle-code/domain";
+import { type ContainerRuntimePort, type ContainerStateV1, type HttpRunnerPort, type ProcessLimitsV1 } from "@untangle-code/extension-runtime";
+/** Ort der gerenderten Datei: im Nutzer-Datenverzeichnis, nie im Projekt. */
+export declare function composeFilePath(userDataDirectory: string, extensionId: string): string;
+/** Der erste Hostport des Manifests, mit optionaler Ueberschreibung. */
+export declare function primaryHostPort(manifest: ExtensionManifestV1, overrides?: Readonly<Record<string, number>>): number | undefined;
+export interface ProvisionDeps {
+    fs: FileSystemPort;
+    container: ContainerRuntimePort;
+    httpRunner: HttpRunnerPort;
+    limits: ProcessLimitsV1;
+    /** Wartepause zwischen zwei Gesundheitsproben; injiziert, damit Tests nicht schlafen. */
+    wait: (ms: number, signal?: AbortSignal) => Promise<void>;
+}
+export interface ProvisionResultV1 {
+    /** True, wenn der Dienst am Ende gesund erreichbar ist. */
+    healthy: boolean;
+    /** Was getan wurde — auch wenn nichts getan wurde (E4). */
+    steps: string[];
+    state: ContainerStateV1;
+    detail: string;
+}
+/**
+ * Startet den Dienst, falls noetig, und wartet auf seine Gesundheit.
+ *
+ * Ein bereits laufender, Untangle gehoerender Container wird NICHT neu
+ * gestartet: der Lauf soll den Dienst benutzen, nicht bewirtschaften.
+ */
+export declare function provisionContainer(deps: ProvisionDeps, input: {
+    manifest: ExtensionManifestV1;
+    userDataDirectory: string;
+    hostPorts?: Readonly<Record<string, number>>;
+    workspacePath?: string;
+    signal?: AbortSignal;
+}): Promise<ProvisionResultV1>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/commands/extensions/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../../src/commands/extensions/provision.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAE1C,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAC/C,MAAM,GAAG,SAAS,CAMpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,cAAc,CAAC;IACnB,SAAS,EAAE,oBAAoB,CAAC;IAChC,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB,yFAAyF;IACzF,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE;IACL,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GACA,OAAO,CAAC,iBAAiB,CAAC,CA0E5B"}