@0xrama/bnpm 0.0.1

package/dist/src/commands/process.js

@@ -0,0 +1,189 @@
+import { spawn } from "node:child_process";
+import { access, readFile } from "node:fs/promises";
+import { delimiter, dirname, join, resolve } from "node:path";
+import { realpath } from "node:fs/promises";
+import { parseManifest } from "../project/manifest.js";
+import { analyzePackage } from "../security/analyzer.js";
+import packageMetadata from "../../package.json" with { type: "json" };
+export class ProcessCommandError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ProcessCommandError";
+    }
+}
+function shellQuote(value) {
+    if (process.platform === "win32")
+        return `"${value.replaceAll('"', '\\"')}"`;
+    return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+async function execute(options) {
+    const child = spawn(options.command, options.args ?? [], {
+        cwd: options.cwd,
+        shell: options.shell,
+        stdio: options.passthrough ? "inherit" : ["inherit", "pipe", "pipe"],
+        env: { ...process.env, ...options.environment, PATH: [join(options.cwd, "node_modules", ".bin"), process.env.PATH].filter((value) => Boolean(value)).join(delimiter) },
+        windowsHide: true,
+    });
+    let bytes = 0;
+    const limit = 8 * 1024 * 1024;
+    const consume = (stream, chunk) => {
+        bytes += chunk.length;
+        if (bytes <= limit)
+            options.output.childOutput(stream, chunk.toString("utf8"), options.attribution);
+        else if (bytes - chunk.length <= limit)
+            options.output.childOutput("stderr", `[output truncated after ${limit} bytes]`, { ...options.attribution, truncated: true });
+    };
+    if (!options.passthrough) {
+        child.stdout.on("data", (chunk) => consume("stdout", chunk));
+        child.stderr.on("data", (chunk) => consume("stderr", chunk));
+    }
+    const abort = () => { child.kill("SIGTERM"); };
+    options.signal.addEventListener("abort", abort, { once: true });
+    try {
+        const code = await new Promise((resolve, reject) => {
+            child.once("error", reject);
+            child.once("close", (exitCode, exitSignal) => resolve(exitCode ?? (exitSignal === "SIGINT" ? 130 : 1)));
+        });
+        if (options.signal.aborted)
+            throw options.signal.reason;
+        return code;
+    }
+    finally {
+        options.signal.removeEventListener("abort", abort);
+    }
+}
+export async function runProjectScript(cwd, name, args, signal, output, allowedDangerous, lifecycleEnvironment = {}) {
+    const path = join(cwd, "package.json");
+    const bytes = await readFile(path, "utf8");
+    const strict = parseManifest(bytes, path);
+    const raw = JSON.parse(bytes);
+    if (raw.scripts === null || typeof raw.scripts !== "object" || Array.isArray(raw.scripts))
+        throw new ProcessCommandError("package.json does not define scripts");
+    const command = raw.scripts[name];
+    if (typeof command !== "string" || command.length === 0)
+        throw new ProcessCommandError(`Unknown project script: ${name}`);
+    const version = typeof raw.version === "string" ? raw.version : "0.0.0";
+    const packageName = strict.name ?? "project";
+    const analyzed = await analyzePackage({ root: cwd, packageName, packageVersion: version, integrity: "local-project" });
+    const dangerous = analyzed.analysis.findings.filter((finding) => finding.severity === "dangerous");
+    if (dangerous.length > 0 && !allowedDangerous.has(`${packageName}@${version}`)) {
+        output.info(`Project script analysis found ${dangerous.length} dangerous behavior${dangerous.length === 1 ? "" : "s"}`, dangerous);
+        throw new ProcessCommandError(`Project script blocked by security policy: ${name}`);
+    }
+    const fullCommand = args.length === 0 ? command : `${command} ${args.map(shellQuote).join(" ")}`;
+    return execute({ command: fullCommand, shell: true, cwd, signal, output, attribution: { package: `${packageName}@${version}`, stage: `run:${name}` }, environment: { INIT_CWD: cwd, npm_command: "run-script", npm_lifecycle_event: name, npm_package_json: path, npm_package_name: packageName, npm_package_version: version, npm_node_execpath: process.execPath, npm_execpath: process.argv[1] ?? "bnpm", npm_config_user_agent: `bnpm/${packageMetadata.version} node/${process.versions.node} ${process.platform} ${process.arch}`, ...lifecycleEnvironment } });
+}
+export async function runProjectScriptIfPresent(cwd, name, signal, output, allowedDangerous, lifecycleEnvironment = {}) {
+    const path = join(cwd, "package.json");
+    const raw = JSON.parse(await readFile(path, "utf8"));
+    if (raw.scripts === undefined)
+        return;
+    if (raw.scripts === null || typeof raw.scripts !== "object" || Array.isArray(raw.scripts))
+        throw new ProcessCommandError("package.json scripts must be an object");
+    if (!Object.prototype.hasOwnProperty.call(raw.scripts, name))
+        return;
+    const code = await runProjectScript(cwd, name, [], signal, output, allowedDangerous, lifecycleEnvironment);
+    if (code !== 0)
+        throw new ProcessCommandError(`Project script ${name} exited with ${code}`);
+}
+export async function projectScriptNames(cwd) {
+    const path = join(cwd, "package.json");
+    const bytes = await readFile(path, "utf8");
+    parseManifest(bytes, path);
+    const raw = JSON.parse(bytes);
+    if (raw.scripts === undefined)
+        return new Set();
+    if (raw.scripts === null || typeof raw.scripts !== "object" || Array.isArray(raw.scripts))
+        throw new ProcessCommandError("package.json scripts must be an object");
+    const names = new Set();
+    for (const [name, command] of Object.entries(raw.scripts)) {
+        if (typeof command !== "string")
+            throw new ProcessCommandError(`package.json script ${name} must be a string`);
+        names.add(name);
+    }
+    return names;
+}
+export async function runProjectScriptLifecycle(cwd, name, args, signal, output, allowedDangerous, includeHooks = true) {
+    const scripts = await projectScriptNames(cwd);
+    if (!scripts.has(name)) {
+        if (name !== "start")
+            throw new ProcessCommandError(`Unknown project script: ${name}`);
+        try {
+            await access(join(cwd, "server.js"));
+        }
+        catch {
+            throw new ProcessCommandError(`Unknown project script: ${name}`);
+        }
+        const manifestPath = join(cwd, "package.json");
+        const bytes = await readFile(manifestPath, "utf8");
+        const strict = parseManifest(bytes, manifestPath);
+        const raw = JSON.parse(bytes);
+        const version = typeof raw.version === "string" ? raw.version : "0.0.0";
+        const packageName = strict.name ?? "project";
+        const analyzed = await analyzePackage({ root: cwd, packageName, packageVersion: version, integrity: "local-project" });
+        const dangerous = analyzed.analysis.findings.filter((finding) => finding.severity === "dangerous");
+        if (dangerous.length > 0 && !allowedDangerous.has(`${packageName}@${version}`)) {
+            output.info(`Project script analysis found ${dangerous.length} dangerous behavior${dangerous.length === 1 ? "" : "s"}`, dangerous);
+            throw new ProcessCommandError("Project start fallback blocked by security policy");
+        }
+        return execute({ command: process.execPath, args: ["server.js", ...args], shell: false, cwd, signal, output, attribution: { package: `${packageName}@${version}`, stage: "run:start" }, environment: { INIT_CWD: cwd, npm_command: "start", npm_lifecycle_event: "start", npm_package_json: manifestPath, npm_package_name: packageName, npm_package_version: version, npm_node_execpath: process.execPath, npm_execpath: process.argv[1] ?? "bnpm", npm_config_user_agent: `bnpm/${packageMetadata.version} node/${process.versions.node} ${process.platform} ${process.arch}` } });
+    }
+    for (const stage of includeHooks ? [`pre${name}`, name, `post${name}`] : [name]) {
+        if (!scripts.has(stage))
+            continue;
+        const code = await runProjectScript(cwd, stage, stage === name ? args : [], signal, output, allowedDangerous);
+        if (code !== 0)
+            return code;
+    }
+    return 0;
+}
+export async function runProjectInstallLifecycle(cwd, signal, output, allowedDangerous) {
+    const scripts = await projectScriptNames(cwd);
+    for (const stage of ["preinstall", "install", "postinstall", "prepublish", "preprepare", "prepare", "postprepare"]) {
+        if (!scripts.has(stage))
+            continue;
+        const code = await runProjectScript(cwd, stage, [], signal, output, allowedDangerous);
+        if (code !== 0)
+            return code;
+    }
+    return 0;
+}
+export async function execInstalled(cwd, binary, args, signal, output, passthrough = false) {
+    if (!/^[A-Za-z0-9._-]+$/.test(binary))
+        throw new ProcessCommandError(`Invalid executable name: ${binary}`);
+    const path = join(cwd, "node_modules", ".bin", process.platform === "win32" ? `${binary}.cmd` : binary);
+    try {
+        await access(path);
+    }
+    catch {
+        throw new ProcessCommandError(`Installed executable not found: ${binary}`);
+    }
+    if (process.platform === "win32") {
+        const shim = await readFile(path, "utf8");
+        const match = /(?:^|\r?\n)@?node\s+"([^"]+)"\s+%\*\s*(?:\r?\n|$)/i.exec(shim);
+        if (!match?.[1])
+            throw new ProcessCommandError(`Installed executable has an unsupported Windows shim: ${binary}`);
+        const expanded = match[1].replace(/^%~dp0[\\/]/i, "");
+        const target = resolve(dirname(path), expanded);
+        return execute({ command: process.execPath, args: [target, ...args], shell: false, cwd, signal, output, attribution: { package: binary, stage: "exec" }, passthrough });
+    }
+    return execute({ command: path, args, shell: false, cwd, signal, output, attribution: { package: binary, stage: "exec" }, passthrough });
+}
+export async function exploreInstalled(cwd, packageName, command, signal, output) {
+    if (!/^(?:@[^/@\s]+\/)?[A-Za-z0-9][A-Za-z0-9._-]*$/.test(packageName))
+        throw new ProcessCommandError(`Invalid package name: ${packageName}`);
+    let packageRoot;
+    try {
+        packageRoot = await realpath(join(cwd, "node_modules", ...packageName.split("/")));
+    }
+    catch {
+        throw new ProcessCommandError(`Installed package not found: ${packageName}`);
+    }
+    const manifestPath = join(packageRoot, "package.json");
+    parseManifest(await readFile(manifestPath, "utf8"), manifestPath);
+    const executable = command[0] ?? (process.platform === "win32" ? process.env.ComSpec ?? "cmd.exe" : "/bin/sh");
+    if (command.length > 0 && (!/^[A-Za-z0-9._+-]+$/.test(executable) || executable.includes("..")))
+        throw new ProcessCommandError(`Invalid explore executable: ${executable}`);
+    return execute({ command: executable, args: command.slice(1), shell: false, cwd: packageRoot, signal, output, attribution: { package: packageName, stage: "explore" } });
+}
+//# sourceMappingURL=process.js.map

package/dist/src/commands/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../../src/commands/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,eAAe,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEvE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAUtB;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;QACvD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;QACpE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QACvL,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAQ,EAAE;QACnE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;aAC/F,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,2BAA2B,KAAK,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvK,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAuB,EAAE,MAAmB,EAAE,MAAc,EAAE,gBAAqC,EAAE,oBAAoB,GAAqC,EAAE;IAChO,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA6C,CAAC;IAC1E,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,sCAAsC,CAAC,CAAC;IACjK,MAAM,OAAO,GAAI,GAAG,CAAC,OAAmC,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAC1H,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;IACvH,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IACnG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,CAAC,MAAM,sBAAsB,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACnI,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjG,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,WAAW,IAAI,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,qBAAqB,EAAE,QAAQ,eAAe,CAAC,OAAO,SAAS,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,oBAAoB,EAAE,EAAE,CAAC,CAAC;AACxiB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAW,EAAE,IAAY,EAAE,MAAmB,EAAE,MAAc,EAAE,gBAAqC,EAAE,oBAAoB,GAAqC,EAAE;IAChN,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC;IAC9E,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO;IACtC,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,CAAC,CAAC;IACnK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,OAAO;IACrE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IAC3G,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,IAAI,gBAAgB,IAAI,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA0B,CAAC;IACvD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,CAAC,CAAC;IACnK,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,CAAC;QAC/G,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAuB,EAAE,MAAmB,EAAE,MAAc,EAAE,gBAAqC,EAAE,YAAY,GAAG,IAAI;IACjM,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACzH,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACtJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA0B,CAAC;QAAC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QAC9K,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;QACvH,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,CAAC,MAAM,sBAAsB,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;YACnI,MAAM,IAAI,mBAAmB,CAAC,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,WAAW,IAAI,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,qBAAqB,EAAE,QAAQ,eAAe,CAAC,OAAO,SAAS,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvjB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9G,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,MAAmB,EAAE,MAAc,EAAE,gBAAqC;IACtI,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;QACnH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,MAAc,EAAE,IAAuB,EAAE,MAAmB,EAAE,MAAc,EAAE,WAAW,GAAG,KAAK;IAChJ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxG,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;IAAC,CAAC;IACjH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,yDAAyD,MAAM,EAAE,CAAC,CAAC;QAClH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1K,CAAC;IACD,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,WAAmB,EAAE,OAA0B,EAAE,MAAmB,EAAE,MAAc;IACtI,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;IAC7I,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAC;IAAC,CAAC;IACnL,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACvD,aAAa,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;IAC5K,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAC3K,CAAC"}

package/dist/src/commands/prompts.d.ts

@@ -0,0 +1,6 @@
+import type { InstallPrompts } from "../installer/install.js";
+import type { CommandOptions } from "../core/cli-parser.js";
+export declare function commandInstallPrompts(options: CommandOptions): InstallPrompts;
+export declare function confirmCommand(question: string, options: Pick<CommandOptions, "json" | "yes">): Promise<boolean>;
+export declare function readSecret(question: string, signal?: AbortSignal): Promise<string | undefined>;
+export declare function readInput(question: string, json: boolean): Promise<string | undefined>;

package/dist/src/commands/prompts.js

@@ -0,0 +1,86 @@
+import { createInterface } from "node:readline/promises";
+import { detectInteractiveMode } from "../config/interactive.js";
+async function ask(question) {
+    const readline = createInterface({ input: process.stdin, output: process.stderr, terminal: true });
+    try {
+        return (await readline.question(question)).trim();
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        readline.close();
+    }
+}
+const yes = (value) => value?.toLowerCase() === "y" || value?.toLowerCase() === "yes";
+export function commandInstallPrompts(options) {
+    const mode = detectInteractiveMode({ json: options.json, environment: process.env, stdinIsTTY: process.stdin.isTTY, stderrIsTTY: process.stderr.isTTY, promptAvailable: true });
+    return {
+        mode,
+        ...(mode.interactive ? {
+            selectRecencyHours: () => ask("Choose recent-release warning window in hours [1/6/24] (default 1): "),
+            allowRecent: (decision) => ask(`${decision.identity}: ${decision.reason}. Install this recently published package? [y/N] `).then(yes),
+            allowDangerous: (analyzed) => {
+                const identity = `${analyzed.analysis.packageName}@${analyzed.analysis.packageVersion}`;
+                const rules = analyzed.analysis.findings.filter((finding) => finding.severity === "dangerous").map((finding) => finding.ruleId).join(", ");
+                return ask(`${identity} has dangerous findings (${rules}). Override and continue? [y/N] `).then(yes);
+            },
+            approveLifecycle: (fact) => ask(`${fact.packageName}@${fact.packageVersion} wants to run ${fact.stage}: ${fact.command}\n` +
+                "This command is NOT sandboxed and will run with your normal operating-system permissions. Approve once? [y/N] ").then(yes),
+        } : {}),
+    };
+}
+export async function confirmCommand(question, options) {
+    if (options.yes === true)
+        return true;
+    const mode = detectInteractiveMode({ json: options.json, environment: process.env, stdinIsTTY: process.stdin.isTTY, stderrIsTTY: process.stderr.isTTY, promptAvailable: true });
+    if (!mode.interactive)
+        return false;
+    return yes(await ask(`${question} [y/N] `));
+}
+export async function readSecret(question, signal) {
+    if (!process.stdin.isTTY || !process.stderr.isTTY || typeof process.stdin.setRawMode !== "function")
+        return undefined;
+    process.stderr.write(question);
+    const wasRaw = process.stdin.isRaw;
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding("utf8");
+    let value = "";
+    return new Promise((resolvePromise) => {
+        const finish = (result) => {
+            process.stdin.off("data", data);
+            signal?.removeEventListener("abort", aborted);
+            process.stdin.setRawMode(wasRaw);
+            process.stdin.pause();
+            process.stderr.write("\n");
+            resolvePromise(result);
+        };
+        const aborted = () => { finish(undefined); };
+        const data = (chunk) => {
+            for (const character of chunk) {
+                if (character === "\r" || character === "\n") {
+                    finish(value);
+                    return;
+                }
+                if (character === "\u0003") {
+                    finish(undefined);
+                    return;
+                }
+                if (character === "\u007f" || character === "\b")
+                    value = value.slice(0, -1);
+                else if (character >= " " && value.length < 1024)
+                    value += character;
+            }
+        };
+        process.stdin.on("data", data);
+        signal?.addEventListener("abort", aborted, { once: true });
+        if (signal?.aborted)
+            finish(undefined);
+    });
+}
+export async function readInput(question, json) {
+    const mode = detectInteractiveMode({ json, environment: process.env, stdinIsTTY: process.stdin.isTTY, stderrIsTTY: process.stderr.isTTY, promptAvailable: true });
+    return mode.interactive ? ask(question) : undefined;
+}
+//# sourceMappingURL=prompts.js.map

package/dist/src/commands/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/commands/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAMjE,KAAK,UAAU,GAAG,CAAC,QAAgB;IACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAC1D,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;YACnB,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,KAAyB,EAAW,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,GAAG,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC;AAEnH,MAAM,UAAU,qBAAqB,CAAC,OAAuB;IAC3D,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAChL,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YACrB,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,sEAAsE,CAAC;YACrG,WAAW,EAAE,CAAC,QAA+B,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,mDAAmD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5J,cAAc,EAAE,CAAC,QAAyB,EAAE,EAAE;gBAC5C,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3I,OAAO,GAAG,CAAC,GAAG,QAAQ,4BAA4B,KAAK,kCAAkC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvG,CAAC;YACD,gBAAgB,EAAE,CAAC,IAAmB,EAAE,EAAE,CAAC,GAAG,CAC5C,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,iBAAiB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI;gBAC1F,gHAAgH,CACjH,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAA6C;IAClG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAChL,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAoB;IACrE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACtH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,OAAO,IAAI,OAAO,CAAqB,CAAC,cAAc,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAQ,EAAE;YAClD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;YACnC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;gBAC9B,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACxE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAC1D,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;oBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;qBACxE,IAAI,SAAS,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;oBAAE,KAAK,IAAI,SAAS,CAAC;YACvE,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAa;IAC7D,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAClK,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/src/commands/query.d.ts

@@ -0,0 +1,48 @@
+import { type BnpmPaths } from "../config/paths.js";
+import { type RegistryAdvisory } from "../registry/audit.js";
+import type { Requirement, ResolutionGraph } from "../resolver/types.js";
+export declare class QueryError extends Error {
+    constructor(message: string);
+}
+type QueryKind = Requirement["kind"] | "bundled";
+export interface QueryResult {
+    readonly [key: string]: unknown;
+    readonly id: string;
+    readonly name: string;
+    readonly version: string;
+    readonly source: string;
+    readonly direct: boolean;
+    readonly aliases: readonly string[];
+    readonly types: readonly QueryKind[];
+    readonly dangerous: boolean;
+    readonly dependencies: readonly string[];
+    readonly dependents: readonly string[];
+}
+interface QueryEnrichment {
+    readonly outdated?: ReadonlyMap<string, {
+        readonly categories: ReadonlySet<string>;
+        readonly versions: readonly string[];
+    }>;
+    readonly advisories?: ReadonlyMap<string, readonly RegistryAdvisory[]>;
+}
+export declare function queryResolutionGraph(graph: ResolutionGraph, roots: ReadonlyMap<string, string>, requirements: readonly Requirement[], dangerousIds: ReadonlySet<string>, selector: string, rootManifest?: Readonly<Record<string, unknown>>, enrichment?: QueryEnrichment): readonly QueryResult[];
+export declare function enrichQuery(options: {
+    readonly selector: string;
+    readonly graph: ResolutionGraph;
+    readonly roots: ReadonlyMap<string, string>;
+    readonly requirements: readonly Requirement[];
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<QueryEnrichment>;
+export declare function queryInstalledPackages(options: {
+    readonly cwd: string;
+    readonly selector: string;
+    readonly paths?: BnpmPaths;
+    readonly allWorkspaces?: boolean;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<readonly QueryResult[]>;
+export {};