feat: add validation for k6 extensions and version pragmas

[VikaCep]

Closes #1243

As we're implementing Version Management, check versions will be selected by choosing the corresponding channel from the k6 channel selector (see design doc and slack conversation)
This means setting the version restriction in the script is not encouraged, in fact it's not valid (at least for now) as the backend won't honor it. k6 extensions are also not allowed. For this reason I'm adding the respective UI validation both to the form schema and Monaco editor:

• Error message when importing k6 extensions

• Error message when using k6 pragmas

[github-actions]

Script size changes

Name	+/-	Main	This PR	Outcome
[module.js]	+0.14%	2,386.30 kB	2,389.65 kB	✅
[datasource/module.js]	=	24.68 kB	24.68 kB	✅

Totals

Name	+/-	Main	This PR	Outcome
[Scripts]	+0.14%	2,410.98 kB	2,414.33 kB	✅
[Non-script Assets]	=	2,587.82 kB	2,587.82 kB	✅
[All]	+0.07%	4,998.80 kB	5,002.15 kB	✅

Generated by 🚫 dangerJS against bcf519d

[ckbedwell]

I've left a comment but it's quite small so I'm going to approve and leave it to you to decide if you want to address it or not 🙂

[VikaCep]

I've addressed your comments @ckbedwell

[w1kman]

I don't feel that this change actually checks for JavaScript directives, rather it uses a regular expression to find a match.

monaco is way too advanced for not allowing to check specifically for directives, rather than matches, anywhere.

Also, I'd expect the example directives in k6deps to trigger the error.

[w1kman]

Seems possible. Did a simple validation rule for "use k6" (It does not apply to version req).

[w1kman]

See how only the actual "directive" matches the "Thomas Wikidation" rule

✅ "use k6 >= 1";

❌ const myVar = "use k6 >= 1"

❌ console.log("use k6 >= 1");

❌ // "use k6 >= 1"

Note: It's possible to add "Quick fix" to remove directive.

[w1kman]

Screen.Recording.2025-09-24.105312.mp4

[VikaCep]

Thanks for the review @w1kman, I've refactored the implementation to use acorn AST parsing instead, which makes the validation more robust and context-aware. The new approach correctly distinguishes between actual k6 directives and things like comments or strings in console.log statements, while also adding Quick Fix actions to automatically remove forbidden code.
Let me know if this looks better to you :)

Screen.Recording.2025-09-24.at.17.01.43.mov

[ckbedwell]

LGTM! Great job! 🥇

[ckbedwell]

❤️ these tests ❤️

[w1kman]

LFTM 🥳