mano-coding 0.1.40 → 0.1.41

package/dist/bin.js

@@ -23725,21 +23725,9 @@ function isValidLocalPath(localPath) {
   if (!localPath || localPath.trim().length === 0) {
     return false;
   }
-  if (isAbsolute2(localPath)) {
+  if (localPath.includes("\0")) {
     return false;
   }
-  if (/^[a-zA-Z]:/.test(localPath)) {
-    return false;
-  }
-  if (localPath.includes("\\")) {
-    return false;
-  }
-  const parts = localPath.split("/");
-  for (const part of parts) {
-    if (part === "..") {
-      return false;
-    }
-  }
   return true;
 }
 function toProjectRelativePath(absPath, projectRoot) {
@@ -23777,8 +23765,8 @@ var init_local_resolver = __esm({
             versionRange
           );
         }
-        const localPath = source.path;
-        if (!localPath) {
+        const rawLocalPath = source.path;
+        if (!rawLocalPath) {
           throw new ResolveError(
             `local \u6E90\u9700\u8981 path \u53C2\u6570`,
             "RESOLVE_SOURCE_INVALID",
@@ -23786,22 +23774,47 @@ var init_local_resolver = __esm({
             versionRange
           );
         }
-        if (!isValidLocalPath(localPath)) {
+        if (!isValidLocalPath(rawLocalPath)) {
           throw new ResolveError(
-            `local \u6E90\u8DEF\u5F84 '${localPath}' \u4E0D\u5408\u6CD5\uFF1A\u7981\u6B62\u7EDD\u5BF9\u8DEF\u5F84\u3001\u76D8\u7B26\u3001\u53CD\u659C\u6760\u548C '..'`,
+            `local \u6E90\u8DEF\u5F84 '${rawLocalPath}' \u4E0D\u5408\u6CD5`,
             "RESOLVE_PATH_INVALID",
             packageId,
             versionRange
           );
         }
+        const localPath = rawLocalPath.replaceAll("\\", "/");
         const baseRoot = this.manifestRootProvider?.() ?? context.projectRoot ?? process.cwd();
-        const absPath = isAbsolute2(localPath) ? normalize(localPath) : normalize(resolvePath2(baseRoot, localPath));
+        const isAbs = isAbsolute2(localPath) || /^[a-zA-Z]:/.test(localPath);
+        let absPath;
+        if (isAbs) {
+          absPath = normalize(localPath).replaceAll("\\", "/");
+        } else {
+          const cwdCandidate = normalize(resolvePath2(process.cwd(), localPath)).replaceAll("\\", "/");
+          const baseRootCandidate = normalize(resolvePath2(baseRoot, localPath)).replaceAll("\\", "/");
+          let foundInCwd = false;
+          try {
+            await access3(resolvePath2(cwdCandidate, "manifest.yaml"));
+            foundInCwd = true;
+          } catch {
+          }
+          if (foundInCwd) {
+            absPath = cwdCandidate;
+          } else {
+            let foundInBaseRoot = false;
+            try {
+              await access3(resolvePath2(baseRootCandidate, "manifest.yaml"));
+              foundInBaseRoot = true;
+            } catch {
+            }
+            absPath = foundInBaseRoot ? baseRootCandidate : cwdCandidate;
+          }
+        }
         const manifestPath = resolvePath2(absPath, "manifest.yaml");
         try {
           await access3(manifestPath);
         } catch {
           throw new ResolveError(
-            `\u672C\u5730\u8DEF\u5F84 '${localPath}' \u4E0B\u672A\u627E\u5230 manifest.yaml`,
+            `\u672C\u5730\u8DEF\u5F84 '${rawLocalPath}' \u4E0B\u672A\u627E\u5230 manifest.yaml`,
             "RESOLVE_MANIFEST_NOT_FOUND",
             packageId,
             versionRange
@@ -23876,7 +23889,7 @@ var init_local_resolver = __esm({
           }
         }
         const integrity = computeContentDigest(manifestContent);
-        const lockPath = toProjectRelativePath(absPath, baseRoot);
+        const lockPath = toProjectRelativePath(absPath, baseRoot).replaceAll("\\", "/");
         const resolvedSource = {
           type: "local",
           path: lockPath
@@ -45923,10 +45936,11 @@ async function buildRequestedSource(req) {
         "RESOLVE_SOURCE_INVALID"
       );
     }
+    const normalizedPath = req.localPath.replaceAll("\\", "/");
     return {
       packageId,
       versionRange,
-      source: { type: "local", path: req.localPath }
+      source: { type: "local", path: normalizedPath }
     };
   }
   return {
@@ -53307,7 +53321,7 @@ import { createRequire as createRequire2 } from "node:module";
 import { readFileSync as readFileSync4 } from "node:fs";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function resolveVersion() {
-  if (true) return "0.1.40";
+  if (true) return "0.1.41";
   const candidates = [
     new URL("../package.json", import.meta.url),
     new URL("../../package.json", import.meta.url),

package/dist/schemas/project-lock.schema.json

@@ -43,6 +43,13 @@
       "maxLength": 512,
       "pattern": "^(?![A-Za-z]:)(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*//)(?!\\.?$).+$"
     },
+    "localSourcePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!.*\\\\).+$",
+      "description": "Normalized local source path; forward slashes only"
+    },
     "integrity": {
       "type": "string",
       "pattern": "^(sha256|sha512)-[A-Za-z0-9+/]+={0,2}$",
@@ -111,7 +118,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },
@@ -178,7 +185,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mano-coding",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Mano Coding CLI and toolchain",
   "type": "module",
   "main": "index.js",

package/schemas/project-lock.schema.json

@@ -43,6 +43,13 @@
       "maxLength": 512,
       "pattern": "^(?![A-Za-z]:)(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*//)(?!\\.?$).+$"
     },
+    "localSourcePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!.*\\\\).+$",
+      "description": "Normalized local source path; forward slashes only"
+    },
     "integrity": {
       "type": "string",
       "pattern": "^(sha256|sha512)-[A-Za-z0-9+/]+={0,2}$",
@@ -111,7 +118,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },
@@ -178,7 +185,7 @@
       "required": ["type", "path"],
       "properties": {
         "type": { "const": "local" },
-        "path": { "$ref": "#/$defs/projectPath" }
+        "path": { "$ref": "#/$defs/localSourcePath" }
       },
       "additionalProperties": false
     },