mano-coding 0.1.39 → 0.1.41

package/dist/bin.js

@@ -23725,21 +23725,9 @@ function isValidLocalPath(localPath) {
   if (!localPath || localPath.trim().length === 0) {
     return false;
   }
-  if (isAbsolute2(localPath)) {
+  if (localPath.includes("\0")) {
     return false;
   }
-  if (/^[a-zA-Z]:/.test(localPath)) {
-    return false;
-  }
-  if (localPath.includes("\\")) {
-    return false;
-  }
-  const parts = localPath.split("/");
-  for (const part of parts) {
-    if (part === "..") {
-      return false;
-    }
-  }
   return true;
 }
 function toProjectRelativePath(absPath, projectRoot) {
@@ -23777,8 +23765,8 @@ var init_local_resolver = __esm({
             versionRange
           );
         }
-        const localPath = source.path;
-        if (!localPath) {
+        const rawLocalPath = source.path;
+        if (!rawLocalPath) {
           throw new ResolveError(
             `local \u6E90\u9700\u8981 path \u53C2\u6570`,
             "RESOLVE_SOURCE_INVALID",
@@ -23786,22 +23774,47 @@ var init_local_resolver = __esm({
             versionRange
           );
         }
-        if (!isValidLocalPath(localPath)) {
+        if (!isValidLocalPath(rawLocalPath)) {
           throw new ResolveError(
-            `local \u6E90\u8DEF\u5F84 '${localPath}' \u4E0D\u5408\u6CD5\uFF1A\u7981\u6B62\u7EDD\u5BF9\u8DEF\u5F84\u3001\u76D8\u7B26\u3001\u53CD\u659C\u6760\u548C '..'`,
+            `local \u6E90\u8DEF\u5F84 '${rawLocalPath}' \u4E0D\u5408\u6CD5`,
             "RESOLVE_PATH_INVALID",
             packageId,
             versionRange
           );
         }
+        const localPath = rawLocalPath.replaceAll("\\", "/");
         const baseRoot = this.manifestRootProvider?.() ?? context.projectRoot ?? process.cwd();
-        const absPath = isAbsolute2(localPath) ? normalize(localPath) : normalize(resolvePath2(baseRoot, localPath));
+        const isAbs = isAbsolute2(localPath) || /^[a-zA-Z]:/.test(localPath);
+        let absPath;
+        if (isAbs) {
+          absPath = normalize(localPath).replaceAll("\\", "/");
+        } else {
+          const cwdCandidate = normalize(resolvePath2(process.cwd(), localPath)).replaceAll("\\", "/");
+          const baseRootCandidate = normalize(resolvePath2(baseRoot, localPath)).replaceAll("\\", "/");
+          let foundInCwd = false;
+          try {
+            await access3(resolvePath2(cwdCandidate, "manifest.yaml"));
+            foundInCwd = true;
+          } catch {
+          }
+          if (foundInCwd) {
+            absPath = cwdCandidate;
+          } else {
+            let foundInBaseRoot = false;
+            try {
+              await access3(resolvePath2(baseRootCandidate, "manifest.yaml"));
+              foundInBaseRoot = true;
+            } catch {
+            }
+            absPath = foundInBaseRoot ? baseRootCandidate : cwdCandidate;
+          }
+        }
         const manifestPath = resolvePath2(absPath, "manifest.yaml");
         try {
           await access3(manifestPath);
         } catch {
           throw new ResolveError(
-            `\u672C\u5730\u8DEF\u5F84 '${localPath}' \u4E0B\u672A\u627E\u5230 manifest.yaml`,
+            `\u672C\u5730\u8DEF\u5F84 '${rawLocalPath}' \u4E0B\u672A\u627E\u5230 manifest.yaml`,
             "RESOLVE_MANIFEST_NOT_FOUND",
             packageId,
             versionRange
@@ -23876,7 +23889,7 @@ var init_local_resolver = __esm({
           }
         }
         const integrity = computeContentDigest(manifestContent);
-        const lockPath = toProjectRelativePath(absPath, baseRoot);
+        const lockPath = toProjectRelativePath(absPath, baseRoot).replaceAll("\\", "/");
         const resolvedSource = {
           type: "local",
           path: lockPath
@@ -45923,10 +45936,11 @@ async function buildRequestedSource(req) {
         "RESOLVE_SOURCE_INVALID"
       );
     }
+    const normalizedPath = req.localPath.replaceAll("\\", "/");
     return {
       packageId,
       versionRange,
-      source: { type: "local", path: req.localPath }
+      source: { type: "local", path: normalizedPath }
     };
   }
   return {
@@ -52750,7 +52764,11 @@ async function verifyCliVersion(binPath, expected, runner = runCommand) {
 }
 async function performUpgrade(installation, targetVersion, offline, runner = runCommand) {
   const args = installation.manager === "npm" ? ["install", "-g", `${CLI_PACKAGE_NAME}@${targetVersion}`] : ["add", "-g", `${CLI_PACKAGE_NAME}@${targetVersion}`];
-  if (offline) args.push("--offline");
+  if (offline) {
+    args.push("--offline");
+  } else if (installation.manager === "npm") {
+    args.push("--prefer-online");
+  }
   const result = await runner(installation.managerExecutable, args);
   if (result.exitCode === 0 && await verifyCliVersion(installation.binPath, targetVersion, runner)) {
     return;
@@ -52765,7 +52783,9 @@ async function performUpgrade(installation, targetVersion, offline, runner = run
       "CLI_UPDATE_ROLLBACK_FAILED"
     );
   }
-  throw new CliError(t("selfUpgrade.upgradeFailed"), ExitCode.ExecuteFailed, "CLI_UPDATE_FAILED");
+  const rawErr = (result.stderr || result.stdout || "").trim();
+  const detail = rawErr ? ` (${rawErr.split("\n")[0].replace(/[\r\n]+/g, " ").slice(0, 100)})` : "";
+  throw new CliError(`${t("selfUpgrade.upgradeFailed")}${detail}`, ExitCode.ExecuteFailed, "CLI_UPDATE_FAILED");
 }
 async function fetchCliMetadata(registry, request = fetch, options) {
   const envTimeout = process.env["AICODING_FETCH_TIMEOUT"] ? Number.parseInt(process.env["AICODING_FETCH_TIMEOUT"], 10) : void 0;
@@ -52951,6 +52971,15 @@ async function executeSelfUpgrade(options, cliVersion) {
         rollbackResult: "not-needed"
       });
       await cacheRepository.resetAutoUpdateFailure().catch(() => void 0);
+      const previous = await cacheRepository.read().catch(() => void 0);
+      const isHigher = !previous?.latestVersion || isCliUpdateAvailable(previous.latestVersion, result.plan.targetVersion);
+      await cacheRepository.write({
+        schemaVersion: 1,
+        registryOrigin: registry,
+        checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        latestVersion: isHigher ? result.plan.targetVersion : previous.latestVersion,
+        ...previous?.lastNotifiedAt ? { lastNotifiedAt: previous.lastNotifiedAt } : {}
+      }).catch(() => void 0);
     }
     if (options.json) emitSuccessJson("self-upgrade", { dryRun: result.dryRun, ...result.plan, changed: result.changed });
     else if (result.dryRun) writeHumanOutput(
@@ -53082,9 +53111,11 @@ async function scheduleAutoUpdateWorker(argv, currentVersion, options) {
   const cacheRepository = new CliUpdateCacheRepository(userDataDir);
   const cache = await cacheRepository.read();
   if (cache?.autoUpdatePaused) return;
+  const forceCheck = Boolean(process.env["AICODING_FORCE_UPDATE_CHECK"]) && process.env["AICODING_FORCE_UPDATE_CHECK"] !== "0" && process.env["AICODING_FORCE_UPDATE_CHECK"] !== "false";
   const checkedAt = cache?.checkedAt ? Date.parse(cache.checkedAt) : Number.NaN;
-  const within24h = Number.isFinite(checkedAt) && Date.now() - checkedAt < 24 * 60 * 60 * 1e3;
-  if (within24h && (!cache?.latestVersion || !isCliUpdateAvailable(currentVersion, cache.latestVersion))) {
+  const isFresh = Number.isFinite(checkedAt) && Date.now() - checkedAt < AUTO_UPDATE_CHECK_INTERVAL_MS;
+  const isCacheStale = Boolean(cache?.latestVersion && isCliUpdateAvailable(cache.latestVersion, currentVersion));
+  if (!forceCheck && isFresh && !isCacheStale && (!cache?.latestVersion || !isCliUpdateAvailable(currentVersion, cache.latestVersion))) {
     return;
   }
   if (options?.spawner) {
@@ -53118,11 +53149,13 @@ async function executeAutoUpdateWorker(options) {
   if (cache?.autoUpdatePaused) return;
   const registry = getRegistryUrl2();
   if (!registry) return;
+  const forceCheck = Boolean(process.env["AICODING_FORCE_UPDATE_CHECK"]) && process.env["AICODING_FORCE_UPDATE_CHECK"] !== "0" && process.env["AICODING_FORCE_UPDATE_CHECK"] !== "false";
   const checkedAt = cache?.checkedAt ? Date.parse(cache.checkedAt) : Number.NaN;
-  const within24h = Number.isFinite(checkedAt) && Date.now() - checkedAt < 24 * 60 * 60 * 1e3;
+  const isFresh = Number.isFinite(checkedAt) && Date.now() - checkedAt < AUTO_UPDATE_CHECK_INTERVAL_MS;
+  const isCacheStale = Boolean(cache?.latestVersion && isCliUpdateAvailable(cache.latestVersion, options.cliVersion));
   let targetVersion = cache?.latestVersion;
   let enginesNode = cache?.latestEnginesNode;
-  if (!within24h || !targetVersion || !isCliUpdateAvailable(options.cliVersion, targetVersion)) {
+  if (forceCheck || !isFresh || isCacheStale || !targetVersion || !isCliUpdateAvailable(options.cliVersion, targetVersion)) {
     const metadata = await fetchCliMetadata(registry, options.fetcher, { timeoutMs: 3e3, retries: 0 }).catch(() => void 0);
     if (!metadata) return;
     const latest = parseLatestCliVersion(metadata);
@@ -53237,7 +53270,7 @@ function getRegistryUrl2() {
     return "";
   }
 }
-var DEFAULT_NPM_REGISTRY2;
+var DEFAULT_NPM_REGISTRY2, AUTO_UPDATE_CHECK_INTERVAL_MS;
 var init_auto_update = __esm({
   "packages/cli/src/commands/auto-update.ts"() {
     "use strict";
@@ -53246,6 +53279,7 @@ var init_auto_update = __esm({
     init_self_upgrade_pipeline();
     init_cli_output();
     DEFAULT_NPM_REGISTRY2 = "https://registry.npmjs.org";
+    AUTO_UPDATE_CHECK_INTERVAL_MS = 60 * 60 * 1e3;
   }
 });
 
@@ -53287,7 +53321,7 @@ import { createRequire as createRequire2 } from "node:module";
 import { readFileSync as readFileSync4 } from "node:fs";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function resolveVersion() {
-  if (true) return "0.1.39";
+  if (true) return "0.1.41";
   const candidates = [
     new URL("../package.json", import.meta.url),
     new URL("../../package.json", import.meta.url),

package/dist/schemas/project-lock.schema.json

@@ -43,6 +43,13 @@
       "maxLength": 512,
       "pattern": "^(?![A-Za-z]:)(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*//)(?!\\.?$).+$"
     },
+    "localSourcePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!.*\\\\).+$",
+      "description": "Normalized local source path; forward slashes only"
+    },
     "integrity": {
       "type": "string",
       "pattern": "^(sha256|sha512)-[A-Za-z0-9+/]+={0,2}$",
@@ -111,7 +118,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },
@@ -178,7 +185,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mano-coding",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "Mano Coding CLI and toolchain",
   "type": "module",
   "main": "index.js",

package/schemas/project-lock.schema.json

@@ -43,6 +43,13 @@
       "maxLength": 512,
       "pattern": "^(?![A-Za-z]:)(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*//)(?!\\.?$).+$"
     },
+    "localSourcePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!.*\\\\).+$",
+      "description": "Normalized local source path; forward slashes only"
+    },
     "integrity": {
       "type": "string",
       "pattern": "^(sha256|sha512)-[A-Za-z0-9+/]+={0,2}$",
@@ -111,7 +118,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },
@@ -178,7 +185,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },