cognitive-modules-cli 2.2.1 → 2.2.7

package/dist/commands/index.d.ts

@@ -10,3 +10,7 @@ export * from './update.js';
 export * from './remove.js';
 export * from './versions.js';
 export * from './compose.js';
+export * from './validate.js';
+export * from './migrate.js';
+export * from './test.js';
+export * from './search.js';

package/dist/commands/index.js

@@ -10,3 +10,7 @@ export * from './update.js';
 export * from './remove.js';
 export * from './versions.js';
 export * from './compose.js';
+export * from './validate.js';
+export * from './migrate.js';
+export * from './test.js';
+export * from './search.js';

package/dist/commands/init.js

@@ -3,6 +3,28 @@
  */
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
+function assertSafeModuleName(name) {
+    const trimmed = name.trim();
+    if (!trimmed) {
+        throw new Error('Invalid module name: empty');
+    }
+    if (trimmed.includes('..') || trimmed.includes('/') || trimmed.includes('\\')) {
+        throw new Error(`Invalid module name: ${name}`);
+    }
+    if (path.isAbsolute(trimmed)) {
+        throw new Error(`Invalid module name (absolute path not allowed): ${name}`);
+    }
+    return trimmed;
+}
+function resolveModuleDir(rootDir, moduleName) {
+    const safeName = assertSafeModuleName(moduleName);
+    const targetPath = path.resolve(rootDir, safeName);
+    const root = path.resolve(rootDir) + path.sep;
+    if (!targetPath.startsWith(root)) {
+        throw new Error(`Invalid module name (path traversal): ${moduleName}`);
+    }
+    return targetPath;
+}
 const EXAMPLE_MODULE_MD = `---
 name: my-module
 version: 1.0.0
@@ -46,7 +68,7 @@ export async function init(ctx, moduleName) {
         await fs.mkdir(cognitiveDir, { recursive: true });
         // If module name provided, create a new module
         if (moduleName) {
-            const moduleDir = path.join(cognitiveDir, moduleName);
+            const moduleDir = resolveModuleDir(cognitiveDir, moduleName);
             await fs.mkdir(moduleDir, { recursive: true });
             await fs.writeFile(path.join(moduleDir, 'MODULE.md'), EXAMPLE_MODULE_MD.replace('my-module', moduleName));
             await fs.writeFile(path.join(moduleDir, 'schema.json'), EXAMPLE_SCHEMA_JSON);

package/dist/commands/migrate.d.ts

@@ -0,0 +1,30 @@
+/**
+ * cog migrate - Migrate modules to v2.2 format
+ *
+ * Aligns with Python CLI's `cog migrate` command.
+ * Performs migration from v0/v1/v2.1 to v2.2 format.
+ */
+import type { CommandContext, CommandResult } from '../types.js';
+export interface MigrateOptions {
+    /** Dry run - only show what would be done */
+    dryRun?: boolean;
+    /** Create backup before migration */
+    backup?: boolean;
+    /** Migrate all modules */
+    all?: boolean;
+}
+export interface MigrateResult {
+    moduleName: string;
+    modulePath: string;
+    success: boolean;
+    changes: string[];
+    warnings: string[];
+}
+/**
+ * Migrate a single module to v2.2 format.
+ */
+export declare function migrate(nameOrPath: string, ctx: CommandContext, options?: MigrateOptions): Promise<CommandResult>;
+/**
+ * Migrate all modules to v2.2 format.
+ */
+export declare function migrateAll(ctx: CommandContext, options?: MigrateOptions): Promise<CommandResult>;