@forge/lint 6.0.3-next.9 → 6.1.0-next.21

package/CHANGELOG.md

@@ -1,5 +1,97 @@
 # @forge/lint
 
+## 6.1.0-next.21
+
+### Minor Changes
+
+- 342098d: Implement server-side linter logic to prevent accidental major app version deployments
+
+### Patch Changes
+
+- Updated dependencies [342098d]
+  - @forge/cli-shared@9.3.0-next.19
+
+## 6.0.3-next.20
+
+### Patch Changes
+
+- Updated dependencies [87d2d74]
+  - @forge/csp@6.3.0-next.0
+
+## 6.0.3-next.19
+
+### Patch Changes
+
+- Updated dependencies [4404f62]
+  - @forge/manifest@13.3.0-next.10
+  - @forge/cli-shared@9.3.0-next.18
+
+## 6.0.3-next.18
+
+### Patch Changes
+
+- Updated dependencies [8d20095]
+  - @forge/cli-shared@9.3.0-next.17
+
+## 6.0.3-next.17
+
+### Patch Changes
+
+- Updated dependencies [905d8c5]
+  - @forge/cli-shared@9.3.0-next.16
+
+## 6.0.3-next.16
+
+### Patch Changes
+
+- Updated dependencies [52e074e]
+  - @forge/cli-shared@9.3.0-next.15
+
+## 6.0.3-next.15
+
+### Patch Changes
+
+- Updated dependencies [c8105d8]
+- Updated dependencies [3e8de63]
+  - @forge/cli-shared@9.3.0-next.14
+  - @forge/manifest@13.3.0-next.9
+
+## 6.0.3-next.14
+
+### Patch Changes
+
+- Updated dependencies [8a9e608]
+  - @forge/cli-shared@9.3.0-next.13
+
+## 6.0.3-next.13
+
+### Patch Changes
+
+- 4b90a07: Lint target directory when using the manual packaging
+- Updated dependencies [4b90a07]
+  - @forge/manifest@13.3.0-next.8
+  - @forge/cli-shared@9.3.0-next.12
+
+## 6.0.3-next.12
+
+### Patch Changes
+
+- Updated dependencies [18b920d]
+  - @forge/cli-shared@9.3.0-next.11
+
+## 6.0.3-next.11
+
+### Patch Changes
+
+- 0f6f64f: Fix linter setup to support multi-entry resource bundling for Frame component
+
+## 6.0.3-next.10
+
+### Patch Changes
+
+- Updated dependencies [bc2d278]
+  - @forge/cli-shared@9.3.0-next.10
+
 ## 6.0.3-next.9
 
 ### Patch Changes

package/out/lint/lint.d.ts

@@ -1,15 +1,45 @@
-import { StatsigService } from '@forge/cli-shared';
+import { StatsigService, GraphQLClient } from '@forge/cli-shared';
 import { ManifestSchema as Manifest } from '@forge/manifest';
 import fs from 'fs';
 import { tsParser } from '../parse';
 import { LinterInterface, LintInput, LintLogger, LintResult } from './linter-interface';
+import { HandlerLinter } from './linters/handler-linter/handler-linter';
+import { FullManifestLinter } from './linters/manifest-linter/full-manifest-linter';
+import { AgentProductContextPermissionsManifestLinter } from './linters/manifest-linter/agent-product-context-permissions-manifest-linter';
+import { PermissionsManifestLinter } from './linters/manifest-linter/permissions-manifest-linter';
+import { PermissionLinter } from './linters/permission-linter/permission-linter';
+import { DeprecatedCspPermissionsManifestLinter } from './linters/manifest-linter/deprecated-csp-permissions-manifest-linter';
+import { DynamicPropertiesPermissionsLinter } from './linters/dynamic-properties-linter/dynamic-properties-permissions-linter';
+import { InvokeEndpointLinter } from './linters/endpoint-linter/invoke-endpoint-linter';
+import { StorageModulesLinter } from './linters/storage-module-linter/storage-module-linter';
+import { FrameComponentLinter } from './linters/frame-component-linter/frame-component-linter';
+import { DeprecatedEgressPermissionsManifestLinter } from './linters/manifest-linter/deprecated-egress-permissions-manifest-linter';
+import { LlmModuleLinter } from './linters/llm-module-linter/llm-module-linter';
+import { DeprecatedApiModuleLinter } from './linters/deprecated-api-module-linter/deprecated-api-module-linter';
+import { AppManagedPermissionsSdkLinter } from './linters/app-managed-permissions-sdk-linter/app-managed-permissions-sdk-linter';
+import { FunctionTimeoutLinter } from './linters/function-timeout-linter/function-timeout-linter';
 export interface ProblemCount {
     errors: number;
     warnings: number;
+    approvals: number;
 }
 export declare const reportLintResults: (logger: LintLogger, lintResults: LintResult[], showSummary?: boolean) => void;
 export declare const problemCount: (lintResults: LintResult[]) => ProblemCount;
 export declare const parseSourceFile: (filepath: string, parser: typeof tsParser, readFilePromise?: typeof fs.readFile.__promisify__) => Promise<LintInput>;
-export declare const lint: (filesToLint: string[], manifest: Manifest, environment: string, logger: LintLogger, statsigService: StatsigService, parseFunction?: (filepath: string, parser: typeof tsParser, readFilePromise?: typeof fs.readFile.__promisify__) => Promise<LintInput>, linters?: LinterInterface[]) => Promise<LintResult[]>;
+export declare const getClientSideLintersOnly: (manifest: Manifest, environment: string, logger: LintLogger, statsigService: StatsigService) => Promise<(FunctionTimeoutLinter | PermissionLinter | HandlerLinter | FullManifestLinter | AgentProductContextPermissionsManifestLinter | PermissionsManifestLinter | DeprecatedCspPermissionsManifestLinter | DynamicPropertiesPermissionsLinter | InvokeEndpointLinter | StorageModulesLinter | FrameComponentLinter | DeprecatedEgressPermissionsManifestLinter | LlmModuleLinter | DeprecatedApiModuleLinter | AppManagedPermissionsSdkLinter)[]>;
+export interface LintConfig {
+    parseFunction?: (filepath: string, parser: typeof tsParser, readFilePromise?: typeof fs.readFile.__promisify__) => Promise<LintInput>;
+    approveRules?: string[];
+    buildTag?: string;
+    majorVersion?: number;
+    linter: {
+        mode: 'server-side' | 'both';
+        graphqlClient: GraphQLClient;
+    } | {
+        mode: 'client-side';
+    };
+    linters?: LinterInterface[];
+}
+export declare const lint: (filesToLint: string[], manifest: Manifest, environment: string, logger: LintLogger, statsigService: StatsigService, config: LintConfig) => Promise<LintResult[]>;
 export declare const litelint: (logger: LintLogger, statsigService: StatsigService, linter?: LinterInterface) => Promise<LintResult[]>;
 //# sourceMappingURL=lint.d.ts.map

package/out/lint/lint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../src/lint/lint.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAkBxG,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,iBAAiB,GAAI,QAAQ,UAAU,EAAE,aAAa,UAAU,EAAE,EAAE,qBAAkB,KAAG,IA+CrG,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,aAAa,UAAU,EAAE,KAAG,YAQxD,CAAC;AAEF,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,QAAQ,OAAO,QAAQ,EACvB,kBAAiB,OAAO,EAAE,CAAC,QAAQ,CAAC,aAAsC,KACzE,OAAO,CAAC,SAAS,CAOnB,CAAC;AAEF,eAAO,MAAM,IAAI,GACf,aAAa,MAAM,EAAE,EACrB,UAAU,QAAQ,EAClB,aAAa,MAAM,EACnB,QAAQ,UAAU,EAClB,gBAAgB,cAAc,EAC9B,2BAlBU,MAAM,UACR,OAAO,QAAQ,oBACN,OAAO,EAAE,CAAC,QAAQ,CAAC,aAAa,KAChD,OAAO,CAAC,SAAS,CAea,EAC/B,UAAS,eAAe,EAgBvB,KACA,OAAO,CAAC,UAAU,EAAE,CAyCtB,CAAC;AAwBF,eAAO,MAAM,QAAQ,GACnB,QAAQ,UAAU,EAClB,gBAAgB,cAAc,EAC9B,SAAQ,eAAiE,KACxE,OAAO,CAAC,UAAU,EAAE,CAGtB,CAAC"}
+{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../src/lint/lint.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,cAAc,EACd,aAAa,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAExG,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6EAA6E,CAAC;AAC3I,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AACjF,OAAO,EAAE,sCAAsC,EAAE,MAAM,sEAAsE,CAAC;AAC9H,OAAO,EAAE,kCAAkC,EAAE,MAAM,2EAA2E,CAAC;AAC/H,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/F,OAAO,EAAE,yCAAyC,EAAE,MAAM,yEAAyE,CAAC;AACpI,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,8BAA8B,EAAE,MAAM,iFAAiF,CAAC;AACjI,OAAO,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAGlG,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,iBAAiB,GAAI,QAAQ,UAAU,EAAE,aAAa,UAAU,EAAE,EAAE,qBAAkB,KAAG,IAuDrG,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,aAAa,UAAU,EAAE,KAAG,YASxD,CAAC;AAEF,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,QAAQ,OAAO,QAAQ,EACvB,kBAAiB,OAAO,EAAE,CAAC,QAAQ,CAAC,aAAsC,KACzE,OAAO,CAAC,SAAS,CAOnB,CAAC;AA8BF,eAAO,MAAM,wBAAwB,GACnC,UAAU,QAAQ,EAClB,aAAa,MAAM,EACnB,QAAQ,UAAU,EAClB,gBAAgB,cAAc,wbAiB/B,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,QAAQ,EACvB,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,aAAa,KAC/C,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EACF;QACE,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC;QAC7B,aAAa,EAAE,aAAa,CAAC;KAC9B,GACD;QACE,IAAI,EAAE,aAAa,CAAC;KACrB,CAAC;IACN,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,eAAO,MAAM,IAAI,GACf,aAAa,MAAM,EAAE,EACrB,UAAU,QAAQ,EAClB,aAAa,MAAM,EACnB,QAAQ,UAAU,EAClB,gBAAgB,cAAc,EAC9B,QAAQ,UAAU,KACjB,OAAO,CAAC,UAAU,EAAE,CAsEtB,CAAC;AAwBF,eAAO,MAAM,QAAQ,GACnB,QAAQ,UAAU,EAClB,gBAAgB,cAAc,EAC9B,SAAQ,eAAiE,KACxE,OAAO,CAAC,UAAU,EAAE,CAGtB,CAAC"}

package/out/lint/lint.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.litelint = exports.lint = exports.parseSourceFile = exports.problemCount = exports.reportLintResults = void 0;
+exports.litelint = exports.lint = exports.getClientSideLintersOnly = exports.parseSourceFile = exports.problemCount = exports.reportLintResults = void 0;
 const tslib_1 = require("tslib");
 const cli_shared_1 = require("@forge/cli-shared");
 const fs_1 = tslib_1.__importDefault(require("fs"));
@@ -23,8 +23,9 @@ const llm_module_linter_1 = require("./linters/llm-module-linter/llm-module-lint
 const deprecated_api_module_linter_1 = require("./linters/deprecated-api-module-linter/deprecated-api-module-linter");
 const app_managed_permissions_sdk_linter_1 = require("./linters/app-managed-permissions-sdk-linter/app-managed-permissions-sdk-linter");
 const function_timeout_linter_1 = require("./linters/function-timeout-linter/function-timeout-linter");
+const server_side_linter_1 = require("./linters/server-side-linter/server-side-linter");
 const reportLintResults = (logger, lintResults, showSummary = true) => {
-    let numErrors = 0, numWarnings = 0;
+    let numErrors = 0, numWarnings = 0, numApprovals = 0;
     let noProblemsFound = true;
     if (lintResults.length) {
         lintResults.forEach((lintResult) => {
@@ -32,6 +33,7 @@ const reportLintResults = (logger, lintResults, showSummary = true) => {
                 noProblemsFound = false;
                 numErrors += lintResult.errors.length;
                 numWarnings += lintResult.warnings.length;
+                numApprovals += lintResult.approvals.length;
                 logger.info(cli_shared_1.Text.lint.filename(path_1.default.resolve(lintResult.file)));
                 lintResult.errors.forEach(({ line, column, message, reference }) => {
                     logger.info(cli_shared_1.Text.lint.error(line, column, message, reference));
@@ -39,6 +41,9 @@ const reportLintResults = (logger, lintResults, showSummary = true) => {
                 lintResult.warnings.forEach(({ line, column, message, reference }) => {
                     logger.info(cli_shared_1.Text.lint.warning(line, column, message, reference));
                 });
+                lintResult.approvals.forEach(({ line, column, message, reference }) => {
+                    logger.info(cli_shared_1.Text.lint.approval(line, column, message, reference));
+                });
             }
         });
     }
@@ -51,18 +56,21 @@ const reportLintResults = (logger, lintResults, showSummary = true) => {
         const numFixableErrors = resultsWithFixers.reduce((count, result) => count + result.errors.length, 0);
         const numFixableWarnings = resultsWithFixers.reduce((count, result) => count + result.warnings.length, 0);
         if (showSummary) {
-            logger.info(cli_shared_1.Text.lint.summary(numErrors, numWarnings, numFixableErrors, numFixableWarnings));
+            logger.info(cli_shared_1.Text.lint.summary(numErrors, numWarnings, numApprovals, numFixableErrors, numFixableWarnings));
             if (numFixableErrors + numFixableWarnings > 0) {
                 logger.info(cli_shared_1.Text.lint.fixSummary(numErrors, numFixableErrors, numFixableWarnings));
             }
             else if (numErrors + numWarnings === 1) {
                 logger.info(cli_shared_1.Text.lint.noFixableProblem);
             }
+            else if (numApprovals > 0) {
+                logger.info(cli_shared_1.Text.lint.noFixableProblem);
+            }
             else {
                 logger.info(cli_shared_1.Text.lint.noFixableProblems);
             }
         }
-        if (numErrors) {
+        if (numErrors || numApprovals) {
             process.exitCode = 1;
         }
     }
@@ -71,8 +79,9 @@ exports.reportLintResults = reportLintResults;
 const problemCount = (lintResults) => {
     return lintResults.reduce((prev, curr) => ({
         errors: prev.errors + curr.errors.length,
-        warnings: prev.warnings + curr.warnings.length
-    }), { errors: 0, warnings: 0 });
+        warnings: prev.warnings + curr.warnings.length,
+        approvals: prev.approvals + curr.approvals.length
+    }), { errors: 0, warnings: 0, approvals: 0 });
 };
 exports.problemCount = problemCount;
 const parseSourceFile = async (filepath, parser, readFilePromise = (0, util_1.promisify)(fs_1.default.readFile)) => {
@@ -84,7 +93,12 @@ const parseSourceFile = async (filepath, parser, readFilePromise = (0, util_1.pr
     };
 };
 exports.parseSourceFile = parseSourceFile;
-const lint = async (filesToLint, manifest, environment, logger, statsigService, parseFunction = exports.parseSourceFile, linters = [
+const getServerSideLintersOnly = async (manifest, environment, logger, graphqlClient, options) => [await server_side_linter_1.ServerSideLinter.instance(environment, manifest, graphqlClient, logger, options)];
+const getDefaultLinters = async (manifest, environment, logger, statsigService, graphqlClient, options) => [
+    ...(await (0, exports.getClientSideLintersOnly)(manifest, environment, logger, statsigService)),
+    ...(await getServerSideLintersOnly(manifest, environment, logger, graphqlClient, options))
+];
+const getClientSideLintersOnly = async (manifest, environment, logger, statsigService) => [
     new permission_linter_1.PermissionLinter(environment, manifest, logger),
     new permissions_manifest_linter_1.PermissionsManifestLinter(logger, statsigService),
     new agent_product_context_permissions_manifest_linter_1.AgentProductContextPermissionsManifestLinter(logger, statsigService),
@@ -100,7 +114,35 @@ const lint = async (filesToLint, manifest, environment, logger, statsigService,
     new deprecated_egress_permissions_manifest_linter_1.DeprecatedEgressPermissionsManifestLinter(logger, statsigService),
     new app_managed_permissions_sdk_linter_1.AppManagedPermissionsSdkLinter(manifest, logger),
     new function_timeout_linter_1.FunctionTimeoutLinter(manifest, logger)
-]) => {
+];
+exports.getClientSideLintersOnly = getClientSideLintersOnly;
+const lint = async (filesToLint, manifest, environment, logger, statsigService, config) => {
+    let linters;
+    if (config.linters) {
+        linters = config.linters;
+    }
+    else {
+        switch (config.linter.mode) {
+            case 'client-side':
+                linters = await (0, exports.getClientSideLintersOnly)(manifest, environment, logger, statsigService);
+                break;
+            case 'server-side':
+                linters = await getServerSideLintersOnly(manifest, environment, logger, config.linter.graphqlClient, {
+                    approveRules: config.approveRules,
+                    buildTag: config.buildTag,
+                    majorVersion: config.majorVersion
+                });
+                break;
+            case 'both':
+                linters = await getDefaultLinters(manifest, environment, logger, statsigService, config.linter.graphqlClient, {
+                    approveRules: config.approveRules,
+                    buildTag: config.buildTag,
+                    majorVersion: config.majorVersion
+                });
+                break;
+        }
+    }
+    const parseFunction = config.parseFunction || exports.parseSourceFile;
     const { include, exclude } = await (0, cli_shared_1.listTSConfigIncludeExclude)(new cli_shared_1.FileSystemReader());
     const tsInclude = new Set(include);
     const tsExclude = new Set(exclude);
@@ -126,6 +168,7 @@ const lint = async (filesToLint, manifest, environment, logger, statsigService,
             const comparator = (a, b) => a.line === b.line ? a.column - b.column : a.line - b.line;
             result.errors = result.errors.sort(comparator);
             result.warnings = result.warnings.sort(comparator);
+            result.approvals = result.approvals.sort(comparator);
             return result;
         });
     }

package/out/lint/linter-interface.d.ts

@@ -2,7 +2,8 @@ import { ASTParseResult } from '../parse';
 import { ConfigFile, Logger } from '@forge/cli-shared';
 export declare enum LintClass {
     Error = "error",
-    Warning = "warning"
+    Warning = "warning",
+    Approval = "approval"
 }
 export type LintLogger = Pick<Logger, 'info'>;
 export type LintFixer = (errors: LintResultRule[], warnings: LintResultRule[], state: LintFixState) => Promise<LintFixState>;
@@ -16,6 +17,7 @@ export declare class LintResult {
     private fixer?;
     errors: LintResultRule[];
     warnings: LintResultRule[];
+    approvals: LintResultRule[];
     constructor(file: string, fixer?: LintFixer | undefined);
     add(rule: LintResultRule): void;
     batchAdd(...rules: LintResultRule[]): void;

package/out/lint/linter-interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"linter-interface.d.ts","sourceRoot":"","sources":["../../src/lint/linter-interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEvD,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG,CACtB,MAAM,EAAE,cAAc,EAAE,EACxB,QAAQ,EAAE,cAAc,EAAE,EAC1B,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,qBAAa,UAAU;IAKZ,IAAI,EAAE,MAAM;IACnB,OAAO,CAAC,KAAK,CAAC;IALT,MAAM,EAAE,cAAc,EAAE,CAAM;IAC9B,QAAQ,EAAE,cAAc,EAAE,CAAM;gBAG9B,IAAI,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,SAAS,YAAA;IAGpB,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAW/B,QAAQ,CAAC,GAAG,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI;IAI1C,IAAI,IAAI,MAAM;IAId,QAAQ,IAAI,OAAO;IAIb,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;CAMlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"linter-interface.d.ts","sourceRoot":"","sources":["../../src/lint/linter-interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEvD,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG,CACtB,MAAM,EAAE,cAAc,EAAE,EACxB,QAAQ,EAAE,cAAc,EAAE,EAC1B,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,qBAAa,UAAU;IAMZ,IAAI,EAAE,MAAM;IACnB,OAAO,CAAC,KAAK,CAAC;IANT,MAAM,EAAE,cAAc,EAAE,CAAM;IAC9B,QAAQ,EAAE,cAAc,EAAE,CAAM;IAChC,SAAS,EAAE,cAAc,EAAE,CAAM;gBAG/B,IAAI,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,SAAS,YAAA;IAGpB,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAc/B,QAAQ,CAAC,GAAG,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI;IAI1C,IAAI,IAAI,MAAM;IAId,QAAQ,IAAI,OAAO;IAIb,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;CAMlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/out/lint/linter-interface.js

@@ -5,12 +5,14 @@ var LintClass;
 (function (LintClass) {
     LintClass["Error"] = "error";
     LintClass["Warning"] = "warning";
+    LintClass["Approval"] = "approval";
 })(LintClass || (exports.LintClass = LintClass = {}));
 class LintResult {
     file;
     fixer;
     errors = [];
     warnings = [];
+    approvals = [];
     constructor(file, fixer) {
         this.file = file;
         this.fixer = fixer;
@@ -20,6 +22,9 @@ class LintResult {
             case LintClass.Error:
                 this.errors.push(rule);
                 break;
+            case LintClass.Approval:
+                this.approvals.push(rule);
+                break;
             default:
                 this.warnings.push(rule);
                 break;
@@ -29,7 +34,7 @@ class LintResult {
         rules.forEach(this.add, this);
     }
     size() {
-        return this.errors.length + this.warnings.length;
+        return this.errors.length + this.warnings.length + this.approvals.length;
     }
     hasFixer() {
         return !!this.fixer;

package/out/lint/linters/frame-component-linter/verifiers/frame-component-verifier.d.ts

@@ -3,11 +3,11 @@ import { LintClass, LintResultRule } from '../../../linter-interface';
 import { BaseLintIssueVerifier, LintIssueVerifier } from '../../verifier-interface';
 import { type FrameResourceInfo } from '../frame-component-interface';
 export declare class FrameComponentVerifier extends BaseLintIssueVerifier implements LintIssueVerifier<FrameResourceInfo[]> {
-    private possibleFrameResourceKeys;
+    private entryKeysByResourceKey;
     constructor(environment: string, manifest: Manifest);
     protected getLintClass(): LintClass;
     process(frameResources: FrameResourceInfo[]): Promise<LintResultRule[]>;
     private isValidFrameResourceKey;
-    private getPossibleFrameResourceKeysFromManifest;
+    private getEntryKeysByResourceKeyFromManifest;
 }
 //# sourceMappingURL=frame-component-verifier.d.ts.map

package/out/lint/linters/frame-component-linter/verifiers/frame-component-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frame-component-verifier.d.ts","sourceRoot":"","sources":["../../../../../src/lint/linters/frame-component-linter/verifiers/frame-component-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,qBAAa,sBAAuB,SAAQ,qBAAsB,YAAW,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;IACjH,OAAO,CAAC,yBAAyB,CAAc;gBAEnC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAKnD,SAAS,CAAC,YAAY,IAAI,SAAS;IAItB,OAAO,CAAC,cAAc,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAepF,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,wCAAwC;CAQjD"}
+{"version":3,"file":"frame-component-verifier.d.ts","sourceRoot":"","sources":["../../../../../src/lint/linters/frame-component-linter/verifiers/frame-component-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,qBAAa,sBAAuB,SAAQ,qBAAsB,YAAW,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;IAIjH,OAAO,CAAC,sBAAsB,CAA2B;gBAE7C,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAKnD,SAAS,CAAC,YAAY,IAAI,SAAS;IAItB,OAAO,CAAC,cAAc,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAepF,OAAO,CAAC,uBAAuB;IAmB/B,OAAO,CAAC,qCAAqC;CAQ9C"}

package/out/lint/linters/frame-component-linter/verifiers/frame-component-verifier.js

@@ -5,10 +5,10 @@ const linter_interface_1 = require("../../../linter-interface");
 const verifier_interface_1 = require("../../verifier-interface");
 const text_1 = require("../../../text");
 class FrameComponentVerifier extends verifier_interface_1.BaseLintIssueVerifier {
-    possibleFrameResourceKeys;
+    entryKeysByResourceKey;
     constructor(environment, manifest) {
         super(environment, manifest);
-        this.possibleFrameResourceKeys = this.getPossibleFrameResourceKeysFromManifest();
+        this.entryKeysByResourceKey = this.getEntryKeysByResourceKeyFromManifest();
     }
     getLintClass() {
         return linter_interface_1.LintClass.Error;
@@ -31,11 +31,19 @@ class FrameComponentVerifier extends verifier_interface_1.BaseLintIssueVerifier
         if (!resourceKey) {
             return false;
         }
-        return this.possibleFrameResourceKeys.has(resourceKey);
+        const separatorIndex = resourceKey.indexOf('/');
+        if (separatorIndex === -1) {
+            const entryKeys = this.entryKeysByResourceKey.get(resourceKey);
+            return !!entryKeys && entryKeys.size === 0;
+        }
+        const key = resourceKey.slice(0, separatorIndex);
+        const entry = resourceKey.slice(separatorIndex + 1);
+        const entryKeys = this.entryKeysByResourceKey.get(key);
+        return entry.length > 0 && entryKeys !== undefined && entryKeys.has(entry);
     }
-    getPossibleFrameResourceKeysFromManifest() {
+    getEntryKeysByResourceKeyFromManifest() {
         const resources = this.manifest?.resources ?? [];
-        return new Set(resources.map(({ key }) => key));
+        return new Map(resources.map(({ key, entry }) => [key, new Set(entry ? Object.keys(entry) : [])]));
     }
 }
 exports.FrameComponentVerifier = FrameComponentVerifier;

package/out/lint/linters/handler-linter/handler-linter.d.ts

@@ -10,7 +10,8 @@ export declare class HandlerLinter extends BaseLinter<ExportedMethod, HandlerLin
     private manifest;
     constructor(environment: string, manifest: Manifest, logger: LintLogger);
     bootstrap(): Promise<void>;
-    private getHandlerFileRegex;
+    private escapeRegExp;
+    private isHandlerFile;
     private getFunctionHandlers;
     protected setupMatchesMap(filepath: string): void;
     protected filterLintInput(inputs: LintInput[]): LintInput[];

package/out/lint/linters/handler-linter/handler-linter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler-linter.d.ts","sourceRoot":"","sources":["../../../../src/lint/linters/handler-linter/handler-linter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,UAAU,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAW,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE/D,UAAU,0BAA0B;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC;IAC7B,gBAAgB,EAAE,aAAa,CAAC;CACjC;AAED,qBAAa,aAAc,SAAQ,UAAU,CAAC,cAAc,EAAE,0BAA0B,EAAE,aAAa,CAAC;IAGpG,OAAO,CAAC,QAAQ;gBADhB,WAAW,EAAE,MAAM,EACX,QAAQ,EAAE,QAAQ,EAC1B,MAAM,EAAE,UAAU;IAKP,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IASvC,OAAO,CAAC,mBAAmB,CAAqF;IAEhH,OAAO,CAAC,mBAAmB;IAc3B,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAYjD,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE;IAO3D,SAAS,CAAC,oBAAoB,CAAC,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;CAKvF"}
+{"version":3,"file":"handler-linter.d.ts","sourceRoot":"","sources":["../../../../src/lint/linters/handler-linter/handler-linter.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEnF,OAAO,UAAU,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAW,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE/D,UAAU,0BAA0B;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAAC;IAC7B,gBAAgB,EAAE,aAAa,CAAC;CACjC;AAED,qBAAa,aAAc,SAAQ,UAAU,CAAC,cAAc,EAAE,0BAA0B,EAAE,aAAa,CAAC;IAGpG,OAAO,CAAC,QAAQ;gBADhB,WAAW,EAAE,MAAM,EACX,QAAQ,EAAE,QAAQ,EAC1B,MAAM,EAAE,UAAU;IAKP,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IASvC,OAAO,CAAC,YAAY,CAA2E;IAE/F,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,mBAAmB;IAc3B,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAYjD,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE;IAK3D,SAAS,CAAC,oBAAoB,CAAC,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;CAKvF"}

package/out/lint/linters/handler-linter/handler-linter.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.HandlerLinter = void 0;
 const tslib_1 = require("tslib");
 const cli_shared_1 = require("@forge/cli-shared");
+const manifest_1 = require("@forge/manifest");
 const base_linter_1 = tslib_1.__importDefault(require("../../base-linter"));
 const handlers_verifier_1 = require("./verifiers/handlers-verifier");
 const visitors_1 = require("./visitors");
@@ -19,7 +20,12 @@ class HandlerLinter extends base_linter_1.default {
             functionHandlers: new handlers_verifier_1.HandlersVerifier(humanReadableEnvironment, this.manifest)
         };
     }
-    getHandlerFileRegex = (fileName) => new RegExp(`^src(\/|\\\\)${fileName}\.[tj](s|sx)$`);
+    escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    isHandlerFile(handler, filepath) {
+        const handlersDirectory = (0, manifest_1.getHandlersDirectory)(this.manifest);
+        const handlerFileRegex = new RegExp(`^${this.escapeRegExp(handlersDirectory)}(\/|\\\\)${this.escapeRegExp(handler.file)}\.[tj](s|sx)$`);
+        return handlerFileRegex.test(filepath);
+    }
     getFunctionHandlers(manifest) {
         return manifest.modules?.function
             ?.filter((funcs) => funcs.handler && funcs.handler.split('.').length === 2)
@@ -35,7 +41,7 @@ class HandlerLinter extends base_linter_1.default {
     }
     setupMatchesMap(filepath) {
         const handlers = this.getFunctionHandlers(this.manifest);
-        const filteredHandlers = handlers?.filter((handler) => this.getHandlerFileRegex(handler.file).test(filepath));
+        const filteredHandlers = handlers?.filter((handler) => this.isHandlerFile(handler, filepath));
         this.matches.set(filepath, {
             functionHandlers: {
                 expectedMethods: filteredHandlers || [],
@@ -45,7 +51,7 @@ class HandlerLinter extends base_linter_1.default {
     }
     filterLintInput(inputs) {
         const handlers = this.getFunctionHandlers(this.manifest);
-        return inputs.filter((input) => handlers?.find((handler) => this.getHandlerFileRegex(handler.file).test(input.filepath)));
+        return inputs.filter((input) => handlers?.find((handler) => this.isHandlerFile(handler, input.filepath)));
     }
     addLintCriteriaMatch(exportedMethod, filepath) {
         const criteriaMatches = this.matches.get(filepath);

package/out/lint/linters/server-side-linter/archiver.d.ts

@@ -0,0 +1,13 @@
+export declare class ZipArchiver {
+    private readonly archive;
+    private readonly tempFile;
+    private readonly resolves;
+    private readonly rejects;
+    private constructor();
+    static create(): Promise<ZipArchiver>;
+    addFile(fileName: string, contents: Buffer): void;
+    finalise(): Promise<string>;
+    private readonly onArchiveError;
+    private readonly onClose;
+}
+//# sourceMappingURL=archiver.d.ts.map

package/out/lint/linters/server-side-linter/archiver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiver.d.ts","sourceRoot":"","sources":["../../../../src/lint/linters/server-side-linter/archiver.ts"],"names":[],"mappings":"AAaA,qBAAa,WAAW;IAKF,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAE3D,OAAO;WAOa,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC;IAM3C,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIjD,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAQlC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAItB;CACH"}

package/out/lint/linters/server-side-linter/archiver.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZipArchiver = void 0;
+const tslib_1 = require("tslib");
+const node_fs_1 = require("node:fs");
+const tmp_1 = tslib_1.__importDefault(require("tmp"));
+class ZipArchiver {
+    archive;
+    tempFile = tmp_1.default.fileSync({ postfix: '.zip' });
+    resolves = [];
+    rejects = [];
+    constructor(archive) {
+        this.archive = archive;
+        const output = (0, node_fs_1.createWriteStream)(this.tempFile.name).on('close', this.onClose);
+        this.archive.pipe(output);
+        this.archive.on('warning', this.onArchiveError);
+        this.archive.on('error', this.onArchiveError);
+    }
+    static async create() {
+        const { ZipArchive } = await Promise.resolve().then(() => tslib_1.__importStar(require('archiver')));
+        return new ZipArchiver(new ZipArchive());
+    }
+    addFile(fileName, contents) {
+        this.archive.append(contents, { name: fileName });
+    }
+    finalise() {
+        return new Promise((resolve, reject) => {
+            this.resolves.push(resolve);
+            this.rejects.push(reject);
+            return this.archive.finalize();
+        });
+    }
+    onArchiveError = (err) => {
+        const error = new Error(err.message);
+        for (const reject of this.rejects) {
+            reject(error);
+        }
+    };
+    onClose = () => {
+        for (const resolve of this.resolves) {
+            resolve(this.tempFile.name);
+        }
+    };
+}
+exports.ZipArchiver = ZipArchiver;

package/out/lint/linters/server-side-linter/graphql-client.d.ts

@@ -0,0 +1,30 @@
+import { GraphQLClient, UserError } from '@forge/cli-shared';
+interface ManifestCheckChange {
+    added?: (string | null)[] | null;
+    key: string;
+    removed?: (string | null)[] | null;
+}
+export interface ServerSideOutcome {
+    changes?: (ManifestCheckChange | null)[] | null;
+    reason: string;
+    category: string;
+    rule: string;
+    value: boolean;
+}
+export declare class NoManifestURLError extends Error {
+    constructor();
+}
+export declare class MissingManifestError extends UserError {
+    constructor();
+}
+export declare class InvalidManifestError extends UserError {
+    constructor();
+}
+export declare class GraphqlClient {
+    private readonly graphqlClient;
+    constructor(graphqlClient: GraphQLClient);
+    createAppManifestUploadUrl(appId: string, environmentKey: string): Promise<string>;
+    getAppPreDeploymentCheck(appId: string, environmentKey: string, manifestUrl: string, bypassRules: string[], buildTag?: string, majorVersion?: number): Promise<ServerSideOutcome[]>;
+}
+export {};
+//# sourceMappingURL=graphql-client.d.ts.map

package/out/lint/linters/server-side-linter/graphql-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-client.d.ts","sourceRoot":"","sources":["../../../../src/lint/linters/server-side-linter/graphql-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAEb,SAAS,EAIV,MAAM,mBAAmB,CAAC;AAE3B,UAAU,mBAAmB;IAC3B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,CAAC,mBAAmB,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;;CAI5C;AAED,qBAAa,oBAAqB,SAAQ,SAAS;;CAIlD;AAED,qBAAa,oBAAqB,SAAQ,SAAS;;CAIlD;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAE5C,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;IA+ChE,wBAAwB,CACnC,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EAAE,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC;CA0DhC"}

package/out/lint/linters/server-side-linter/graphql-client.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GraphqlClient = exports.InvalidManifestError = exports.MissingManifestError = exports.NoManifestURLError = void 0;
+const cli_shared_1 = require("@forge/cli-shared");
+class NoManifestURLError extends Error {
+    constructor() {
+        super(cli_shared_1.Text.artifact.error.noManifestUrl);
+    }
+}
+exports.NoManifestURLError = NoManifestURLError;
+class MissingManifestError extends cli_shared_1.UserError {
+    constructor() {
+        super(cli_shared_1.Text.lint.errorMissingManifest);
+    }
+}
+exports.MissingManifestError = MissingManifestError;
+class InvalidManifestError extends cli_shared_1.UserError {
+    constructor() {
+        super(cli_shared_1.Text.lint.errorInvalidManifest);
+    }
+}
+exports.InvalidManifestError = InvalidManifestError;
+class GraphqlClient {
+    graphqlClient;
+    constructor(graphqlClient) {
+        this.graphqlClient = graphqlClient;
+    }
+    async createAppManifestUploadUrl(appId, environmentKey) {
+        const mutation = `
+      mutation forge_cli_createAppManifestUploadUrl($input: CreateAppManifestUploadUrlInput!) {
+        createAppManifestUploadUrl(input: $input) {
+          success
+          preSignedUrl
+          errors {
+            message
+            extensions {
+              errorType
+              statusCode
+            }
+          }
+        }
+      }`;
+        const { response: { createAppManifestUploadUrl: { success, preSignedUrl, errors } }, requestId } = await this.graphqlClient.mutate(mutation, {
+            input: {
+                appId,
+                environmentKey
+            }
+        });
+        if (!success) {
+            const error = (0, cli_shared_1.getError)(errors);
+            throw new cli_shared_1.GraphQlMutationError(`${error.message} (requestId: ${requestId || 'unknown'})`, {
+                requestId,
+                code: error.code,
+                statusCode: error.statusCode
+            });
+        }
+        if (!preSignedUrl) {
+            throw new NoManifestURLError();
+        }
+        return preSignedUrl;
+    }
+    async getAppPreDeploymentCheck(appId, environmentKey, manifestUrl, bypassRules, buildTag, majorVersion) {
+        const query = `
+      query forge_cli_appPreDeploymentCheck($input: AppPreDeploymentCheckInput!) {
+        appPreDeploymentCheck(input: $input) {
+          outcome {
+            rule
+            category
+            value
+            reason
+            changes {
+              key
+              added
+              removed
+            }
+            errors {
+              key
+              message
+              line
+              column
+            }
+          }
+        }
+      }
+    `;
+        const result = await this.graphqlClient.query(query, {
+            input: {
+                appId,
+                environmentKey,
+                manifestUrl,
+                bypassRules,
+                buildTag,
+                majorVersion
+            }
+        });
+        if (!result.appPreDeploymentCheck) {
+            throw new MissingManifestError();
+        }
+        if (!result.appPreDeploymentCheck.outcome) {
+            throw new InvalidManifestError();
+        }
+        return result.appPreDeploymentCheck.outcome.filter((p) => p !== null);
+    }
+}
+exports.GraphqlClient = GraphqlClient;

package/out/lint/linters/server-side-linter/server-side-linter.d.ts

@@ -0,0 +1,31 @@
+import { ManifestSchema as Manifest } from '@forge/manifest';
+import { LintLogger, LintResult } from '../../linter-interface';
+import { AbstractLinter } from '../../abstract-linter';
+import { FileSystemReader, FileUploader, GraphQLClient } from '@forge/cli-shared';
+import { GraphqlClient } from './graphql-client';
+import { ZipArchiver } from './archiver';
+export declare class ServerSideLinter extends AbstractLinter {
+    private readonly environment;
+    private readonly manifest;
+    private readonly client;
+    private readonly fileReader;
+    private readonly archiver;
+    private readonly fileUploader;
+    private readonly options;
+    private manifestUploadUrl;
+    constructor(environment: string, manifest: Manifest, client: GraphqlClient, fileReader: FileSystemReader, archiver: ZipArchiver, fileUploader: FileUploader, logger: LintLogger, options: {
+        approveRules?: string[];
+        buildTag?: string;
+        majorVersion?: number;
+    });
+    static instance(environment: string, manifest: Manifest, graphqlClient: GraphQLClient, logger: LintLogger, options: {
+        approveRules?: string[];
+        buildTag?: string;
+        majorVersion?: number;
+    }): Promise<ServerSideLinter>;
+    private mapServerSideResponse;
+    batchExecuteImpl(): Promise<LintResult[]>;
+    bootstrap(): Promise<void>;
+    private getResultsLinter;
+}
+//# sourceMappingURL=server-side-linter.d.ts.map

package/out/lint/linters/server-side-linter/server-side-linter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-side-linter.d.ts","sourceRoot":"","sources":["../../../../src/lint/linters/server-side-linter/server-side-linter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,cAAc,IAAI,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAsC,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,qBAAa,gBAAiB,SAAQ,cAAc;IAIhD,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAV1B,OAAO,CAAC,iBAAiB,CAAqB;gBAG3B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE,WAAW,EACrB,YAAY,EAAE,YAAY,EAC3C,MAAM,EAAE,UAAU,EACD,OAAO,EAAE;QACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;WAKU,QAAQ,CACnB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE;QACP,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;IAeH,OAAO,CAAC,qBAAqB;IAsBvB,gBAAgB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAmBzC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAehC,OAAO,CAAC,gBAAgB;CAIzB"}

package/out/lint/linters/server-side-linter/server-side-linter.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerSideLinter = void 0;
+const manifest_1 = require("@forge/manifest");
+const linter_interface_1 = require("../../linter-interface");
+const abstract_linter_1 = require("../../abstract-linter");
+const cli_shared_1 = require("@forge/cli-shared");
+const graphql_client_1 = require("./graphql-client");
+const archiver_1 = require("./archiver");
+class ServerSideLinter extends abstract_linter_1.AbstractLinter {
+    environment;
+    manifest;
+    client;
+    fileReader;
+    archiver;
+    fileUploader;
+    options;
+    manifestUploadUrl;
+    constructor(environment, manifest, client, fileReader, archiver, fileUploader, logger, options) {
+        super(logger);
+        this.environment = environment;
+        this.manifest = manifest;
+        this.client = client;
+        this.fileReader = fileReader;
+        this.archiver = archiver;
+        this.fileUploader = fileUploader;
+        this.options = options;
+    }
+    static async instance(environment, manifest, graphqlClient, logger, options) {
+        const fileSystemReader = new cli_shared_1.FileSystemReader();
+        return new ServerSideLinter(environment, manifest, new graphql_client_1.GraphqlClient(graphqlClient), fileSystemReader, await archiver_1.ZipArchiver.create(), new cli_shared_1.HttpFileUploader(fileSystemReader), logger, options);
+    }
+    mapServerSideResponse(results) {
+        const manifestLintResults = new linter_interface_1.LintResult(manifest_1.MANIFEST_FILE);
+        manifestLintResults.batchAdd(...(this.getResultsLinter(results).map(({ rule, reason, category }) => {
+            return {
+                class: category.toLowerCase(),
+                message: reason,
+                reference: rule,
+                line: 0,
+                column: 0,
+                metadata: {}
+            };
+        }) ?? []).sort((a, b) => a.line - b.line));
+        return manifestLintResults;
+    }
+    async batchExecuteImpl() {
+        if (!this.manifestUploadUrl) {
+            throw new Error('Bootstrap failed');
+        }
+        const results = await this.client.getAppPreDeploymentCheck(this.manifest.app.id, this.environment, this.manifestUploadUrl, this.options.approveRules ?? [], this.options.buildTag, this.options.majorVersion);
+        return [this.mapServerSideResponse(results)];
+    }
+    async bootstrap() {
+        const manifestContent = this.fileReader.readBinaryFile(cli_shared_1.manifestFileName);
+        if (!manifestContent) {
+            throw new Error('No Manifest content found');
+        }
+        this.archiver.addFile(cli_shared_1.manifestFileName, manifestContent);
+        const archivePath = await this.archiver.finalise();
+        const uploadUrl = await this.client.createAppManifestUploadUrl(this.manifest.app.id, this.environment);
+        await this.fileUploader.uploadFromPath(uploadUrl, archivePath);
+        this.manifestUploadUrl = uploadUrl;
+    }
+    getResultsLinter(results) {
+        return results?.filter((outcome) => outcome.value) || [];
+    }
+}
+exports.ServerSideLinter = ServerSideLinter;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forge/lint",
-  "version": "6.0.3-next.9",
+  "version": "6.1.0-next.21",
   "description": "Linting for forge apps",
   "main": "out/index.js",
   "license": "SEE LICENSE IN LICENSE.txt",
@@ -19,15 +19,17 @@
     "eslint-plugin-import": "^2.29.1"
   },
   "dependencies": {
-    "@forge/cli-shared": "9.3.0-next.9",
-    "@forge/csp": "6.2.0",
+    "@forge/cli-shared": "9.3.0-next.19",
+    "@forge/csp": "6.3.0-next.0",
     "@forge/egress": "3.0.0",
-    "@forge/manifest": "13.3.0-next.7",
+    "@forge/manifest": "13.3.0-next.10",
     "@typescript-eslint/typescript-estree": "^5.62.0",
+    "archiver": "^8.0.0",
     "array.prototype.flatmap": "^1.3.3",
     "@atlassian/atlassian-openapi": "^1.0.6",
     "cross-spawn": "^7.0.6",
     "node-fetch": "2.7.0",
+    "tmp": "^0.2.3",
     "typescript": "5.9.2"
   },
   "publishConfig": {