Merge pull request #174 from gblanc-1a/fix/vulnerability_fix_in_direct_dependencies

fix: minimatch high vulnerability for direct dependencies

Author: wherka-ama

.eslintrc.json

@@ -38,6 +38,7 @@ build/
 # Test outputs
 test-out/
 test-dist/
+lib/dist-test/
 coverage/
 .nyc_output/
 

.gitignore

@@ -211,7 +211,7 @@ LOG_LEVEL=ERROR npm test
 # Capture test output for analysis
 LOG_LEVEL=ERROR npm test 2>&1 | tee test.log | tail -20
 
-npm run lint                   # ESLint
+npm run lint                   # ESLint (v9 flat config: eslint.config.mjs)
 npm run package:vsix           # Create .vsix package
 ```
 
@@ -241,6 +241,12 @@ Register via `RepositoryAdapterFactory.register('type', AdapterClass)`. Implemen
 ### Scopes
 Installs support `user`, `workspace`, and `repository` scopes. Repository scope uses the lockfile (`prompt-registry.lock.json`) as the single source of truth.
 
+### Linting
+ESLint v9 with flat config (`eslint.config.mjs`). The `lib/` directory is excluded from root linting (it has its own ESLint setup). The `@typescript-eslint/semi` rule was removed in v8 — formatting is handled by Prettier (`eslint-config-prettier`).
+
+### lib/ workspace
+`lib/` is a separate npm workspace (`@prompt-registry/collection-scripts`). Tests compile to `lib/dist-test/` via `lib/tsconfig.test.json` before running with mocha. Run `cd lib && npm test` to build and test.
+
 ### Error Handling
 Use `Logger.getInstance()`. Throw errors with clear messages. Commands catch and show via VS Code notifications.
 

AGENTS.md

@@ -4,6 +4,7 @@
 
 - Node.js 18.x or 20.x
 - npm 8.x+
+- TypeScript 5.3+
 - VS Code (latest)
 - Git
 
@@ -25,8 +26,8 @@ Press `F5` in VS Code to launch Extension Development Host.
 # Development
 npm run watch          # Dev mode with auto-compile
 npm run compile        # Production build
-npm run lint           # Check code style
-npm run lint -- --fix  # Auto-fix lint issues
+npm run lint           # Check code style (ESLint v9 flat config)
+npm run lint:fix       # Auto-fix lint issues
 
 # Testing
 npm test               # Run all tests (unit + integration)

docs/contributor-guide/development-setup.md

@@ -0,0 +1,75 @@
+import eslint from "@eslint/js";
+import tseslint from "typescript-eslint";
+import eslintConfigPrettier from "eslint-config-prettier";
+
+export default tseslint.config(
+  {
+    ignores: ["out/", "test-out/", "dist/", "test-dist/", "**/*.d.ts", "node_modules/", "lib/"],
+  },
+  eslint.configs.recommended,
+  eslintConfigPrettier,
+  {
+    files: ["src/**/*.ts"],
+    plugins: {
+      "@typescript-eslint": tseslint.plugin,
+    },
+    languageOptions: {
+      parser: tseslint.parser,
+      ecmaVersion: 2020,
+      sourceType: "module",
+      globals: {
+        Buffer: "readonly",
+        NodeJS: "readonly",
+        console: "readonly",
+        process: "readonly",
+        setTimeout: "readonly",
+        clearTimeout: "readonly",
+        setInterval: "readonly",
+        clearInterval: "readonly",
+        URL: "readonly",
+        __dirname: "readonly",
+        __filename: "readonly",
+        require: "readonly",
+        module: "readonly",
+        exports: "readonly",
+      },
+    },
+    rules: {
+      "no-unused-vars": "off",
+      "@typescript-eslint/naming-convention": [
+        "warn",
+        {
+          selector: "import",
+          format: ["camelCase", "PascalCase"],
+        },
+      ],
+      curly: "warn",
+      eqeqeq: "warn",
+      "no-throw-literal": "warn",
+      semi: "off",
+    },
+  },
+  {
+    files: ["src/ui/webview/**/*.js"],
+    languageOptions: {
+      ecmaVersion: 2020,
+      sourceType: "module",
+      globals: {
+        document: "readonly",
+        window: "readonly",
+        console: "readonly",
+        acquireVsCodeApi: "readonly",
+        setTimeout: "readonly",
+        clearTimeout: "readonly",
+        MutationObserver: "readonly",
+        HTMLElement: "readonly",
+      },
+    },
+    rules: {
+      "no-unused-vars": "off",
+      curly: "warn",
+      eqeqeq: "warn",
+      semi: "off",
+    },
+  }
+);