Ali jawwad 7b1065d857 fix(bundler): enforce version pin on bundled preset/extension installs (#3377) ...

* fix(bundler): enforce version pin on bundled preset/extension installs

The bundled install branch of _PresetKindManager/_ExtensionKindManager
called install_from_directory and returned before _assert_pinned_version,
so a bundle manifest pinning e.g. 2.0.0 would silently install the
bundled asset's own version (1.0.0) — the pin was only enforced on the
catalog path. _WorkflowKindManager already enforces it unconditionally.
Read the bundled asset's declared version from its manifest (best-effort;
None => cannot enforce, matching the catalog 'advertises no version'
escape hatch) and call _assert_pinned_version before install, in both
bundled branches.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(bundler): address review on bundled version-pin check

- Make _assert_pinned_version's error source-agnostic ('resolved version'
  / 'the source') so bundled preset.yml/extension.yml mismatches read
  correctly, not just catalog ones.
- Type-guard _bundled_manifest_version: only a non-empty string version is
  usable; missing/non-string/whitespace -> None ('cannot enforce').
- Add bundled-preset success-path test (matching pin + version=None both
  proceed to install_from_directory), mirroring the extension test.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-09 07:46:22 -05:00

..

contract

fix: resolve GitHub release asset API URL for private repo bundle downloads (#3136)

2026-07-01 16:30:20 -05:00

extensions

feat(extensions): port update-agent-context to Python (#3387)

2026-07-08 07:46:29 -05:00

hooks

fix: wire after_tasks and after_implement hook events into command templates (#1702)

2026-03-04 08:16:31 -06:00

integration

fix(bundler): bundle update uninstalls components dropped by new version (#3353)

2026-07-07 14:59:27 -05:00

integrations

test: isolate integration test home (#3144)

2026-07-09 07:35:38 -05:00

unit

fix(bundler): enforce version pin on bundled preset/extension installs (#3377)

2026-07-09 07:46:22 -05:00

__init__.py

Add modular extension system (#1551)

2026-02-10 14:27:20 -06:00

auth_helpers.py

feat: Config-driven opt-in authentication registry with multi-platform support (#2393)

2026-05-07 12:51:20 -05:00

bundler_helpers.py

feat: add specify bundle command (#3070)

2026-06-19 17:07:20 -05:00

conftest.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

http_helpers.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

self_upgrade_helpers.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_agent_config_consistency.py

chore: retire Roo Code integration — extension shut down (#3167) (#3212)

2026-06-30 10:24:04 -05:00

test_authentication.py

fix(cli): exit cleanly on malformed IPv6 URLs in extension/preset/workflow add (#3369)

2026-07-07 15:20:13 -05:00

test_branch_numbering.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_check_prerequisites_paths_only.py

fix: fall back to feature dir basename for empty CURRENT_BRANCH (#3026) (#3229)

2026-07-01 13:50:53 -05:00

test_check_prerequisites_python_parity.py

feat(scripts): add Python check-prerequisites PoC (#3302)

2026-07-06 17:54:31 -05:00

test_check_tool.py

feat: add support for rovodev (#2539)

2026-06-04 11:34:05 -05:00

test_cli_version.py

feat: add version feature reporting (#2548)

2026-05-14 12:52:14 -05:00

test_commands_package.py

feat(cli): add py script type & Python interpreter resolution (#3278) (#3285)

2026-07-01 16:34:46 -05:00

test_console_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_extension_registration.py

fix(cli): harden extension registration and discovery workflows (#2499)

2026-05-13 12:02:01 -05:00

test_extension_skills.py

fix extension-local script path rewriting (#3364)

2026-07-07 10:51:50 -05:00

test_extension_update_hardening.py

refactor: move extension command handlers to extensions/_commands.py (PR-7/8) (#3014)

2026-06-22 13:40:57 -05:00

test_extensions.py

fix(toml): escape control characters so generated command files parse (#3341)

2026-07-08 07:42:34 -05:00

test_github_http.py

fix(github-http): return None on malformed GHES port instead of raising (#3379)

2026-07-07 15:14:25 -05:00

test_github_workflows.py

ci: pin actions to commit SHAs and add shellcheck (#3126)

2026-06-24 15:08:16 -05:00

test_init_dir_cli.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

test_init_dir.py

feat(scripts): add SPECIFY_INIT_DIR to target a member project from the repo root (#2892)

2026-06-19 12:05:42 -05:00

test_live_transient_windows.py

fix: disable Rich Live transient mode on Windows to prevent PS 5.1 hang (#2938)

2026-06-17 06:48:42 -05:00

test_merge.py

feat(cli): polite deep merge for settings.json and support JSONC (#1874)

2026-03-17 09:51:13 -05:00

test_post_process.py

feat(integrations): generalize post-processing to all format types (#3311)

2026-07-07 11:35:43 -05:00

test_presets.py

fix(cli): exit cleanly on malformed IPv6 URLs in extension/preset/workflow add (#3369)

2026-07-07 15:20:13 -05:00

test_ps1_encoding.py

fix: PS 5.1 compat — replace non-ASCII chars in shipped PowerShell scripts (#2709)

2026-05-26 13:18:34 -05:00

test_registrar_path_traversal.py

Harden command registration path handling (#3088)

2026-06-22 10:25:29 -05:00

test_self_upgrade_detection.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_execution.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_guidance.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_verification.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_setup_plan_feature_json.py

fix(scripts): fall through to grep/sed when python3 is a broken stub in feature.json parser (#3312)

2026-07-08 07:45:01 -05:00

test_setup_plan_no_overwrite.py

fix(scripts): route 'Plan template not found' per --json in setup-plan.ps1 (parity with bash) (#3241)

2026-06-29 16:37:40 -05:00

test_setup_tasks.py

fix(scripts): count subdirectory-only dirs as non-empty in PowerShell (parity with bash) (#3137)

2026-06-29 14:38:39 -05:00

test_shared_infra_integrity.py

feat(extensions): verify catalog archive sha256 before install (#3080)

2026-06-24 14:52:24 -05:00

test_timestamp_branches.py

fix(scripts): warn when spec template is missing in create-new-feature.ps1 (parity with bash) (#3230)

2026-06-29 14:46:35 -05:00

test_upgrade.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_utils_assets_imports.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_utils.py

harden: reject shell=True in run_command (#3132)

2026-06-24 13:05:21 -05:00

test_version_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_workflow_run_without_project.py

fix(workflows): route run/resume errors to stderr under --json (#3352)

2026-07-07 14:52:36 -05:00

test_workflows.py

fix(cli): exit cleanly on malformed IPv6 URLs in extension/preset/workflow add (#3369)

2026-07-07 15:20:13 -05:00