@biffo/cli 0.316.0 → 0.316.2

package/dist/index.js

@@ -9169,10 +9169,10 @@ var RegistryPluginEntrySchema = z8.object({
   ui_components: z8.array(UiComponentEntrySchema).optional(),
   status: z8.enum(["active", "disabled"])
 });
-var PluginRegistrySchema = z8.object({
+var PluginRegistryEnvelopeSchema = z8.object({
   schema_version: z8.string(),
   last_updated: z8.string(),
-  plugins: z8.array(RegistryPluginEntrySchema)
+  plugins: z8.array(z8.unknown())
 });
 var DEFAULT_REGISTRY_URL = "https://raw.githubusercontent.com/keiranholloway/biffo-plugins-registry/main/plugins.json";
 var RegistryAdapter = class {
@@ -9203,14 +9203,31 @@ var RegistryAdapter = class {
         `Plugin registry at ${this.registryUrl} did not return valid JSON: ${err.message}`
       );
     }
-    const result = PluginRegistrySchema.safeParse(raw);
-    if (!result.success) {
-      const messages = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+    const envelope = PluginRegistryEnvelopeSchema.safeParse(raw);
+    if (!envelope.success) {
+      const messages = envelope.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
       throw new Error(
         `Plugin registry at ${this.registryUrl} has an invalid shape: ${messages.join("; ")}`
       );
     }
-    return result.data;
+    const plugins = [];
+    for (const [index, entry] of envelope.data.plugins.entries()) {
+      const entryResult = RegistryPluginEntrySchema.safeParse(entry);
+      if (entryResult.success) {
+        plugins.push(entryResult.data);
+        continue;
+      }
+      const label = entry !== null && typeof entry === "object" && "name" in entry && typeof entry.name === "string" ? `'${entry.name}'` : `at index ${index}`;
+      const messages = entryResult.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      log.warn(
+        `Plugin registry at ${this.registryUrl} has a malformed entry ${label} \u2014 skipped: ${messages.join("; ")}`
+      );
+    }
+    return {
+      schema_version: envelope.data.schema_version,
+      last_updated: envelope.data.last_updated,
+      plugins
+    };
   }
   /**
    * Resolves `name@minorVersion` (e.g. "rbac", "1.0") against the registry.
@@ -10232,16 +10249,21 @@ async function checkPluginStaleness(cwd, deps) {
   const servicesDir = join36(cwd, "services");
   const names = discoverVendoredPlugins(servicesDir);
   let registryRepoByName = null;
+  let registryFetchFailure = null;
   const resolveRegistryRepo = async (name) => {
-    if (registryRepoByName === null) {
-      registryRepoByName = /* @__PURE__ */ new Map();
+    if (registryRepoByName === null && registryFetchFailure === null) {
       try {
         const reg = await deps.registry.fetchRegistry();
+        registryRepoByName = /* @__PURE__ */ new Map();
         for (const entry of reg.plugins) registryRepoByName.set(entry.name, entry.repo);
-      } catch {
+      } catch (err) {
+        registryFetchFailure = err.message;
       }
     }
-    return registryRepoByName.get(name) ?? null;
+    if (registryFetchFailure !== null) {
+      return { repo: null, fetchFailure: registryFetchFailure };
+    }
+    return { repo: registryRepoByName?.get(name) ?? null, fetchFailure: null };
   };
   const results = [];
   for (const name of names) {
@@ -10275,15 +10297,24 @@ async function checkOnePlugin(pluginDir2, name, resolveRegistryRepo, git) {
   if (localOrigin) {
     return checkViaContentDiff(name, pluginDir2, localOrigin, { isLocalDir: true }, git);
   }
-  const registryRepo = await resolveRegistryRepo(name);
-  if (!registryRepo) {
+  const lookup = await resolveRegistryRepo(name);
+  if (!lookup.repo) {
+    if (lookup.fetchFailure) {
+      return {
+        name,
+        status: "cannot-tell",
+        method: "unresolvable",
+        detail: record ? `provenance records origin '${record.origin}', which is neither a reachable git URL nor a local directory that still exists, and the plugin registry could not be fetched to resolve '${name}' by name either: ${lookup.fetchFailure}` : `no provenance recorded (vendored before #1547) and the plugin registry could not be fetched to resolve '${name}' by name: ${lookup.fetchFailure}`
+      };
+    }
     return {
       name,
       status: "cannot-tell",
       method: "unresolvable",
-      detail: record ? `provenance records origin '${record.origin}', which is neither a reachable git URL nor a local directory that still exists, and '${name}' was not found in the plugin registry either` : `no provenance recorded (vendored before #1547, or an unreachable registry) and '${name}' was not found in the plugin registry \u2014 nothing to compare against`
+      detail: record ? `provenance records origin '${record.origin}', which is neither a reachable git URL nor a local directory that still exists, and '${name}' was not found in the plugin registry either` : `no provenance recorded (vendored before #1547) and '${name}' was not found in the plugin registry \u2014 nothing to compare against`
     };
   }
+  const registryRepo = lookup.repo;
   if (record?.sha) {
     return checkViaProvenance(name, record, registryRepo, git);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.316.0",
+  "version": "0.316.2",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",