@crewx/sdk 0.9.0-rc.9 → 0.9.0-rc.91

package/dist/esm/publish/index.js

@@ -0,0 +1 @@
+import*as h from'path';import*as m from'fs';import*as H from'crypto';import*as j from'js-yaml';import*as q from'os';import*as C from'tar';import {gunzipSync,gzipSync}from'zlib';function X(e){let r=s=>s.replace(/[.+^${}()|[\]\\]/g,"\\$&"),n=e.split("/").map(s=>s==="**"?".*":s.split("*").map(r).join("[^/]*"));return new RegExp(`^${n.join("\\/")}$`)}function E(e,r){try{return X(r).test(e)}catch{return  false}}function v(e,...r){let t=e.split("/");if(t.length<r.length)return  false;let n=t.length-r.length;return r.every((s,i)=>E(t[n+i],s))}function Z(e,r){return e.split("/").some(t=>E(t,r))}var U=[{label:".env*",test:e=>E(e,".env*")},{label:".git/",test:(e,r,t)=>t&&e===".git"},{label:"memory/",test:(e,r,t)=>t&&e==="memory"},{label:"*.key",test:e=>E(e,"*.key")},{label:"*.pem",test:e=>E(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,r,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,r,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,r,t)=>t&&v(r,".crewx","threads")},{label:".crewx/crewx.db",test:(e,r,t)=>!t&&v(r,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,r,t)=>!t&&v(r,".crewx","*.log")},{label:".crewx/publish/",test:(e,r,t)=>t&&v(r,".crewx","publish")},{label:".crewx/",test:(e,r)=>Z(r,".crewx")}];function R(e,r,t){for(let n of U)if(n.test(e,r,t))return n.label;return null}function D(e){let r=[],t=[];function n(s,i,a){let p;try{p=m.readdirSync(s,{withFileTypes:!0});}catch{return}p.sort((o,c)=>o.name.localeCompare(c.name));for(let o of p){let c=i?`${i}/${o.name}`:o.name,l=h.join(s,o.name);if(o.isSymbolicLink()){let u;try{u=m.statSync(l);}catch{continue}if(u.isDirectory()){t.push({path:c,rule:a??"symlink-dir"});continue}let T=a??R(o.name,c,false);T?t.push({path:c,rule:T}):r.push(c);continue}if(o.isDirectory()){let u=a??R(o.name,c,true);n(l,c,u);continue}if(o.isFile()){let u=a??R(o.name,c,false);u?t.push({path:c,rule:u}):r.push(c);}}}return n(e,"",null),r.sort(),t.sort((s,i)=>s.path<i.path?-1:s.path>i.path?1:0),{included:r,excluded:t}}var J=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function G(e){return e.includes(0)}function z(e,r){let t=[];for(let n of r){let s=h.join(e,n),i;try{i=m.readFileSync(s);}catch{continue}if(G(i))continue;i.toString("utf8").split(/\r\n|\r|\n/).forEach((p,o)=>{for(let{rule:c,regex:l}of J)l.test(p)&&t.push({path:n,line:o+1,rule:c});});}return t}var I=/^[a-z0-9-]+$/,Y=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Q=/^[A-Za-z_][A-Za-z0-9_]*$/;function ee(e){let r=h.join(e,"crewx.yaml");if(!m.existsSync(r))return {};let t;try{t=j.load(m.readFileSync(r,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let n=t.metadata;if(!n||typeof n!="object")return {};let s=n;return {name:typeof s.name=="string"?s.name:void 0,version:typeof s.version=="string"?s.version:void 0,description:typeof s.description=="string"?s.description:void 0,requiredEnv:s.requiredEnv,crewxMinVersion:typeof s.crewxMinVersion=="string"?s.crewxMinVersion:void 0}}function te(e){return H.createHash("sha256").update(new Uint8Array(m.readFileSync(e))).digest("hex")}function N(e,r,t={}){let n=ee(e),s=n.name??h.basename(e);if(!I.test(s))throw new Error(`publish: invalid name "${s}" \u2014 must match ${I} (lowercase letters, numbers, hyphen only)`);let i=t.version??n.version;if(!i)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");if(!Y.test(i))throw new Error(`publish: invalid version "${i}" \u2014 must be semver (e.g. 1.0.0)`);let a=Array.isArray(n.requiredEnv)?n.requiredEnv:[],p=[];for(let l of a){if(typeof l!="string"||!Q.test(l))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(l)}"`);p.push(l);}let o=r.map(l=>({path:l,sha256:te(h.join(e,l))})).sort((l,u)=>l.path<u.path?-1:l.path>u.path?1:0),c={name:s,version:i,type:"template",description:n.description??"",files:o,requiredEnv:p};return n.crewxMinVersion&&(c.crewxMinVersion=n.crewxMinVersion),c}async function V(e,r){let t=h.join(e,".crewx","publish");m.mkdirSync(t,{recursive:true});let n=h.join(t,`${r.name}-${r.version}.tgz`),s=m.mkdtempSync(h.join(q.tmpdir(),"crewx-publish-"));try{m.writeFileSync(h.join(s,"manifest.json"),JSON.stringify(r,null,2));for(let i of r.files){let a=h.join(s,i.path);m.mkdirSync(h.dirname(a),{recursive:!0}),m.copyFileSync(h.join(e,i.path),a);}await C.create({gzip:!0,file:n,cwd:s,portable:!0,noMtime:!0},["manifest.json",...r.files.map(i=>i.path)]);}finally{m.rmSync(s,{recursive:true,force:true});}return n}var y="/api/v1";var se=201,ie=409,S=401;function ae(){return process.env.WI013_FAKE_UPLOAD==="1"}function oe(e){let r=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(r),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function ce(e){return e.replace(/\/+$/,"")}async function x(e){try{return await e.json()}catch{return null}}function L(e,r,t){let n=e;if(!n||n.success!==true||n.data===void 0)throw new Error(`publish: [E_MALFORMED] ${r} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return n.data}async function le(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let r=ce(e.baseUrl),t=e.accessPolicy??"private",n=e.manifest.name,s;try{s=await fetch(`${r}${y}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:n,displayName:n,description:e.manifest.description,type:"template",version:e.manifest.version,accessPolicy:t})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let i;if(s.status===se)i="created";else if(s.status===ie)i="existing";else throw s.status===S?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):(await x(s),new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${s.status}`));let a="not-needed",p=null;if(i==="existing"){let b;try{b=await fetch(`${r}${y}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let W=await x(b);if(b.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${b.status}`);let $=L(W,"publisher items",b.status)?.items;if(!Array.isArray($))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${b.status}`);let _=$.find(f=>!f||typeof f!="object"?false:f.slug===n);if(!_||typeof _.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${n}" \u2014 HTTP ${b.status}`);if(p=_.version,p!==e.manifest.version){let f;try{f=await fetch(`${r}${y}/publisher/items/${encodeURIComponent(n)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!f.ok)throw await x(f),f.status===S?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${f.status})`):f.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${f.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${f.status}`);a="applied";}}let o=m.readFileSync(e.tgzPath),c=ae()?oe(o):o,l=new FormData;l.set("archive",new Blob([new Uint8Array(c)],{type:"application/gzip"}),`${n}-${e.manifest.version}.tgz`);let u;try{u=await fetch(`${r}${y}/publisher/items/${encodeURIComponent(n)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:l});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(u.status===S)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!u.ok)throw await x(u),new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${u.status}`);let T=await x(u),M=L(T,"upload",u.status);return {slug:n,version:e.manifest.version,artifactChecksum:M.artifactChecksum,artifactSizeBytes:M.artifactSizeBytes,submitOutcome:i,versionUpdate:a,serverVersionBefore:p}}async function ue(e,r={}){let t=h.resolve(e),{included:n,excluded:s}=D(t),i=N(t,n,{version:r.version}),a=z(t,n);return {manifest:i,included:n,excluded:s,secretFindings:a}}async function ze(e,r={}){let t=await ue(e,r);if(t.secretFindings.length>0){let i=t.secretFindings.map(a=>`${a.path}:${a.line} (${a.rule})`).join(", ");throw new Error(`publish: aborted \u2014 secret findings must be resolved before packing: ${i}`)}let n=h.resolve(e),s=await V(n,t.manifest);return {manifest:t.manifest,tgzPath:s}}export{U as EXCLUDE_RULES,y as MARKETPLACE_API_PREFIX,ze as packTemplate,ue as planPublish,le as uploadToMarketplace};