@vscode/vsce 2.26.2-5 → 2.27.1-0

package/dist/vsce.d.ts

@@ -175,6 +175,8 @@ export declare interface IPublishOptions {
     readonly skipDuplicate?: boolean;
     readonly skipLicense?: boolean;
     readonly sigzipPath?: string[];
+    readonly manifestPath?: string[];
+    readonly signaturePath?: string[];
     readonly signTool?: string;
 }
 

package/out/main.js

@@ -154,6 +154,8 @@ module.exports = function (argv) {
         .option('--no-git-tag-version', 'Do not create a version commit and tag when calling `npm version`. Valid only when [version] is provided.')
         .option('--no-update-package-json', 'Do not update `package.json`. Valid only when [version] is provided.')
         .option('-i, --packagePath <paths...>', 'Publish the provided VSIX packages.')
+        .option('--manifestPath <paths...>', 'Manifest files to publish alongside the VSIX packages.')
+        .option('--signaturePath <paths...>', 'Signature files to publish alongside the VSIX packages.')
         .option('--sigzipPath <paths...>', 'Signature archives to publish alongside the VSIX packages.')
         .option('--sign-tool <path>', 'Path to the VSIX signing tool. Will be invoked with two arguments: `SIGNTOOL <path/to/extension.signature.manifest> <path/to/extension.signature.p7s>`. This will be ignored if --sigzipPath is provided.')
         .option('--githubBranch <branch>', 'The GitHub branch used to infer relative links in README.md. Can be overridden by --baseContentUrl and --baseImagesUrl.')
@@ -174,7 +176,7 @@ module.exports = function (argv) {
         .option('--allow-missing-repository', 'Allow missing a repository URL in package.json')
         .option('--skip-duplicate', 'Fail silently if version already exists on the marketplace')
         .option('--skip-license', 'Allow publishing without license file')
-        .action((version, { pat, azureCredential, target, ignoreOtherTargetFolders, readmePath, changelogPath, message, gitTagVersion, updatePackageJson, packagePath, sigzipPath, githubBranch, gitlabBranch, baseContentUrl, baseImagesUrl, yarn, noVerify, allowProposedApis, allowAllProposedApis, ignoreFile, dependencies, preRelease, allowStarActivation, allowMissingRepository, skipDuplicate, skipLicense, signTool, }) => main((0, publish_1.publish)({
+        .action((version, { pat, azureCredential, target, ignoreOtherTargetFolders, readmePath, changelogPath, message, gitTagVersion, updatePackageJson, packagePath, manifestPath, signaturePath, sigzipPath, githubBranch, gitlabBranch, baseContentUrl, baseImagesUrl, yarn, noVerify, allowProposedApis, allowAllProposedApis, ignoreFile, dependencies, preRelease, allowStarActivation, allowMissingRepository, skipDuplicate, skipLicense, signTool, }) => main((0, publish_1.publish)({
         pat,
         azureCredential,
         version,
@@ -186,6 +188,8 @@ module.exports = function (argv) {
         gitTagVersion,
         updatePackageJson,
         packagePath,
+        manifestPath,
+        signaturePath,
         sigzipPath,
         githubBranch,
         gitlabBranch,
@@ -211,6 +215,12 @@ module.exports = function (argv) {
         .option('--azure-credential', 'Use Microsoft Entra ID for authentication')
         .option('-f, --force', 'Skip confirmation prompt when unpublishing an extension')
         .action((id, { pat, azureCredential, force }) => main((0, publish_1.unpublish)({ id, pat, azureCredential, force })));
+    commander_1.default
+        .command('generate-manifest')
+        .description('Generates the extension manifest from the provided VSIX package.')
+        .requiredOption('-i, --packagePath <path>', 'Path to the VSIX package')
+        .option('-o, --out <path>', 'Output the extension manifest to <path> location (defaults to <packagename>.manifest)')
+        .action((packagePath, out) => main((0, package_1.generateManifest)(packagePath, out)));
     commander_1.default
         .command('ls-publishers')
         .description('Lists all known publishers')

package/out/package.js

@@ -26,7 +26,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ls = exports.listFiles = exports.packageCommand = exports.signPackage = exports.pack = exports.prepublish = exports.collect = exports.createDefaultProcessors = exports.processFiles = exports.toContentTypes = exports.toVsixManifest = exports.readManifest = exports.validateManifest = exports.ValidationProcessor = exports.NLSProcessor = exports.isWebKind = exports.LicenseProcessor = exports.ChangelogProcessor = exports.ReadmeProcessor = exports.MarkdownProcessor = exports.TagsProcessor = exports.ManifestProcessor = exports.Targets = exports.versionBump = exports.BaseProcessor = exports.read = void 0;
+exports.ls = exports.listFiles = exports.packageCommand = exports.createSignatureArchive = exports.generateManifest = exports.signPackage = exports.pack = exports.prepublish = exports.collect = exports.createDefaultProcessors = exports.processFiles = exports.toContentTypes = exports.toVsixManifest = exports.readManifest = exports.validateManifest = exports.ValidationProcessor = exports.NLSProcessor = exports.isWebKind = exports.LicenseProcessor = exports.ChangelogProcessor = exports.ReadmeProcessor = exports.MarkdownProcessor = exports.TagsProcessor = exports.ManifestProcessor = exports.Targets = exports.versionBump = exports.BaseProcessor = exports.read = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const util_1 = require("util");
@@ -47,7 +47,7 @@ const npm_1 = require("./npm");
 const GitHost = __importStar(require("hosted-git-info"));
 const parse_semver_1 = __importDefault(require("parse-semver"));
 const jsonc = __importStar(require("jsonc-parser"));
-const vsce_sign_1 = require("@vscode/vsce-sign");
+const vsceSign = __importStar(require("@vscode/vsce-sign"));
 const MinimatchOptions = { dot: true };
 function isInMemoryFile(file) {
     return !!file.contents;
@@ -1356,14 +1356,27 @@ async function signPackage(packageFile, signTool) {
     const manifestFile = path.join(packageFolder, `${packageName}.signature.manifest`);
     const signatureFile = path.join(packageFolder, `${packageName}.signature.p7s`);
     const signatureZip = path.join(packageFolder, `${packageName}.signature.zip`);
-    // Generate the signature manifest file
-    await (0, vsce_sign_1.generateManifest)(packageFile, manifestFile);
+    await generateManifest(packageFile, manifestFile);
     // Sign the manifest file to generate the signature file
     cp.execSync(`${signTool} "${manifestFile}" "${signatureFile}"`, { stdio: 'inherit' });
-    // Create a signature zip file containing the manifest and signature file
-    return (0, vsce_sign_1.zip)(manifestFile, signatureFile, signatureZip);
+    return createSignatureArchive(manifestFile, signatureFile, signatureZip);
 }
 exports.signPackage = signPackage;
+// Generate the signature manifest file
+function generateManifest(packageFile, outputFile) {
+    if (!outputFile) {
+        const packageFolder = path.dirname(packageFile);
+        const packageName = path.basename(packageFile, '.vsix');
+        outputFile = path.join(packageFolder, `${packageName}.manifest`);
+    }
+    return vsceSign.generateManifest(packageFile, outputFile);
+}
+exports.generateManifest = generateManifest;
+// Create a signature zip file containing the manifest and signature file
+async function createSignatureArchive(manifestFile, signatureFile, outputFile) {
+    return vsceSign.zip(manifestFile, signatureFile, outputFile);
+}
+exports.createSignatureArchive = createSignatureArchive;
 async function packageCommand(options = {}) {
     const cwd = options.cwd || process.cwd();
     const manifest = await readManifest(cwd);

package/out/publish.js

@@ -49,6 +49,11 @@ async function publish(options = {}) {
         else if (options.targets) {
             throw new Error(`Both options not supported simultaneously: 'packagePath' and 'target'. Use 'vsce package --target <target>' to first create a platform specific package, then use 'vsce publish --packagePath <path>' to publish it.`);
         }
+        if (options.manifestPath || options.signaturePath) {
+            if (options.packagePath.length !== options.manifestPath?.length || options.packagePath.length !== options.signaturePath?.length) {
+                throw new Error(`Either all packages must be signed or none of them.`);
+            }
+        }
         for (let index = 0; index < options.packagePath.length; index++) {
             const packagePath = options.packagePath[index];
             const vsix = await (0, zip_1.readVSIXPackage)(packagePath);
@@ -72,7 +77,13 @@ async function publish(options = {}) {
                 }
             }
             validateMarketplaceRequirements(vsix.manifest, options);
-            let sigzipPath = options.sigzipPath?.[index];
+            let sigzipPath;
+            if (options.manifestPath?.[index] && options.signaturePath?.[index]) {
+                sigzipPath = await (0, package_1.createSignatureArchive)(options.manifestPath[index], options.signaturePath[index]);
+            }
+            if (!sigzipPath) {
+                sigzipPath = options.sigzipPath?.[index];
+            }
             if (!sigzipPath && options.signTool) {
                 sigzipPath = await (0, package_1.signPackage)(packagePath, options.signTool);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vscode/vsce",
-	"version": "2.26.2-5",
+	"version": "2.27.1-0",
 	"description": "VS Code Extensions Manager",
 	"repository": {
 		"type": "git",