@askdb/studio 0.2.0-beta.41 → 0.2.0-beta.43

package/dist/package-manager.js

@@ -1,86 +0,0 @@
-/**
- * Package-manager helpers shared by the setup wizard (`setup.ts`) and the
- * execute-driver install endpoint (`server.ts`).
- *
- * Only allowlisted package names ever reach these helpers — never
- * browser-supplied strings — but {@link packageManagerSpawnSpec} re-checks
- * every argument anyway because Windows needs `shell: true` (see below).
- */
-import { spawnSync } from "node:child_process";
-import { existsSync } from "node:fs";
-import { join } from "node:path";
-/** The package manager implied by a lockfile directly inside `dir`, if any. */
-export function lockfilePackageManager(dir) {
-    if (existsSync(join(dir, "pnpm-lock.yaml")))
-        return "pnpm";
-    if (existsSync(join(dir, "bun.lockb")) || existsSync(join(dir, "bun.lock")))
-        return "bun";
-    if (existsSync(join(dir, "yarn.lock")))
-        return "yarn";
-    if (existsSync(join(dir, "package-lock.json")))
-        return "npm";
-    return null;
-}
-/**
- * Arguments that add `packages` as dependencies with the given package manager.
- * `allowBuilds` are dependencies whose install scripts pnpm must be told to run
- * (`--allow-build=<name>`; pnpm 11 exits 1 on an unapproved one). npm and Yarn
- * run install scripts, and Bun skips untrusted ones without failing, so only
- * pnpm gets them.
- */
-export function packageManagerAddArgs(pm, packages, allowBuilds = []) {
-    if (pm === "npm")
-        return ["install", "--save", ...packages];
-    if (pm === "pnpm")
-        return ["add", ...allowBuilds.map((name) => `--allow-build=${name}`), ...packages];
-    return ["add", ...packages];
-}
-/**
- * The build approvals to pass `pm` in `dir`: `allowBuilds`, or none for a pnpm older
- * than 10.4.0, whose `add` rejects `--allow-build` (pnpm 9 runs install scripts, and
- * 10.0 to 10.3 skip unapproved ones without failing). A pnpm whose version can't be
- * read keeps them. `askdb init` applies the same rule (`apps/cli/src/init.ts`).
- */
-export function supportedBuildApprovals(pm, dir, allowBuilds) {
-    if (pm !== "pnpm" || allowBuilds.length === 0)
-        return [...allowBuilds];
-    const match = /^(\d+)\.(\d+)\./.exec(pnpmVersion(dir) ?? "");
-    if (!match)
-        return [...allowBuilds];
-    const [major, minor] = [Number(match[1]), Number(match[2])];
-    return major > 10 || (major === 10 && minor >= 4) ? [...allowBuilds] : [];
-}
-function pnpmVersion(dir) {
-    const { command, args, shell } = packageManagerSpawnSpec("pnpm", ["--version"]);
-    const result = spawnSync(command, args, { cwd: dir, encoding: "utf8", shell, stdio: ["ignore", "pipe", "ignore"], timeout: 15_000 });
-    return result.status === 0 ? result.stdout.trim() : null;
-}
-/** Human-readable install command, e.g. `pnpm add pg`. */
-export function formatInstallCommand(pm, packages, allowBuilds = []) {
-    return [pm, ...packageManagerAddArgs(pm, packages, allowBuilds)].join(" ");
-}
-// npm package names (optionally scoped, optionally with a version/range suffix),
-// simple `--flag` arguments, and pnpm's `--allow-build=<package name>`. Nothing a
-// shell would interpret.
-const SAFE_ARG = /^(?:--[a-z][a-z-]*|--allow-build=(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*|(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?:@[a-z0-9.^~<>=*_-]+)?|add|install)$/i;
-/**
- * How to spawn a package manager on this platform.
- *
- * On Windows, package managers are `.cmd` shims, and Node refuses to spawn
- * `.cmd`/`.bat` files without a shell (EINVAL since Node 18.20.2 / 20.12.2,
- * CVE-2024-27980). So Windows gets `shell: true` with the bare command name.
- * Arguments are validated against a strict allowlist pattern first, so the
- * shell never sees anything it could interpret.
- */
-export function packageManagerSpawnSpec(pm, args, platform = process.platform) {
-    for (const arg of args) {
-        if (!SAFE_ARG.test(arg)) {
-            throw new Error(`Refusing to pass unsafe argument to ${pm}: ${JSON.stringify(arg)}`);
-        }
-    }
-    if (platform === "win32") {
-        return { command: pm, args: [...args], shell: true };
-    }
-    return { command: pm, args: [...args], shell: false };
-}
-//# sourceMappingURL=package-manager.js.map

package/dist/package-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-manager.js","sourceRoot":"","sources":["../src/package-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAkB,EAClB,QAA2B,EAC3B,cAAiC,EAAE;IAEnC,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC5D,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;IACtG,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAkB,EAAE,GAAW,EAAE,WAA8B;IACrG,IAAI,EAAE,KAAK,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrI,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAClC,EAAkB,EAClB,QAA2B,EAC3B,cAAiC,EAAE;IAEnC,OAAO,CAAC,EAAE,EAAE,GAAG,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,yBAAyB;AACzB,MAAM,QAAQ,GACZ,2KAA2K,CAAC;AAE9K;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAkB,EAClB,IAAuB,EACvB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC"}