@impeccable/reviews 0.1.7 → 0.1.9

package/dist/playbook/publication-wait.js

@@ -1,46 +0,0 @@
-import { setTimeout as sleep } from 'node:timers/promises';
-const INTERVAL_MS = 30_000;
-const DEADLINE_MS = 8 * 60_000;
-/** One publication deadline per setup PR, including time spent checking the preview. */
-export function createPublicationWait(dependencies = {}) {
-    const now = dependencies.now ?? (() => performance.now());
-    const pause = dependencies.sleep ?? ((ms, signal) => sleep(ms, undefined, { signal }));
-    const starts = new Map();
-    return {
-        begin(pr) {
-            if (!starts.has(pr))
-                starts.set(pr, now());
-        },
-        remainingMs(pr) {
-            const start = starts.get(pr);
-            return start === undefined ? null : Math.max(0, DEADLINE_MS - (now() - start));
-        },
-        async wait(pr, signal) {
-            const start = starts.get(pr);
-            if (start === undefined)
-                return null;
-            const result = (status) => {
-                const elapsed = Math.max(0, now() - start);
-                return {
-                    status,
-                    waited_seconds: Math.floor(elapsed / 1000),
-                    remaining_seconds: Math.ceil(Math.max(0, DEADLINE_MS - elapsed) / 1000),
-                };
-            };
-            if (signal?.aborted)
-                return result('cancelled');
-            const remaining = DEADLINE_MS - (now() - start);
-            if (remaining <= 0)
-                return result('timed-out');
-            try {
-                await pause(Math.min(INTERVAL_MS, remaining), signal);
-            }
-            catch {
-                return result('cancelled');
-            }
-            if (signal?.aborted)
-                return result('cancelled');
-            return result(now() - start >= DEADLINE_MS ? 'timed-out' : 'retry');
-        },
-    };
-}

package/dist/playbook/vercel-protection.js

@@ -1,121 +0,0 @@
-import { execFile } from 'node:child_process';
-import { constants } from 'node:fs';
-import { lstat, open, realpath } from 'node:fs/promises';
-import { join } from 'node:path';
-const METADATA_LIMIT = 16 * 1024;
-const OUTPUT_LIMIT = 2 * 1024 * 1024;
-function record(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value)
-        ? value : undefined;
-}
-/** Only the root's small project-link metadata is read; CLI authentication stays with the CLI. */
-async function linkedProject(cwd) {
-    try {
-        const root = await realpath(cwd);
-        const directory = join(root, '.vercel');
-        const directoryStat = await lstat(directory);
-        if (!directoryStat.isDirectory() || directoryStat.isSymbolicLink() || await realpath(directory) !== directory)
-            return;
-        const path = join(directory, 'project.json');
-        if (!(await lstat(path)).isFile())
-            return;
-        const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
-        try {
-            const stat = await file.stat();
-            const currentDirectory = await lstat(directory);
-            const currentFile = await lstat(path);
-            if (!stat.isFile() || stat.size > METADATA_LIMIT
-                || currentDirectory.dev !== directoryStat.dev || currentDirectory.ino !== directoryStat.ino
-                || currentFile.isSymbolicLink() || currentFile.dev !== stat.dev || currentFile.ino !== stat.ino
-                || await realpath(path) !== path)
-                return;
-            const buffer = Buffer.alloc(METADATA_LIMIT + 1);
-            const { bytesRead } = await file.read(buffer, 0, buffer.length, 0);
-            if (bytesRead > METADATA_LIMIT)
-                return;
-            const metadata = record(JSON.parse(buffer.toString('utf8', 0, bytesRead)));
-            if (typeof metadata?.projectId !== 'string' || !/^prj_[A-Za-z0-9]{1,128}$/.test(metadata.projectId)
-                || typeof metadata.orgId !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(metadata.orgId))
-                return;
-            return { root, projectId: metadata.projectId, orgId: metadata.orgId };
-        }
-        finally {
-            await file.close();
-        }
-    }
-    catch {
-        return;
-    }
-}
-/** Reuse one existing default automation bypass in memory, without exposing project responses or keys. */
-export async function useExistingVercelBypass(input, dependencies) {
-    const { signal } = dependencies;
-    if (signal?.aborted)
-        return { status: 'cancelled' };
-    if (!/^[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,37}[a-zA-Z0-9])?$/.test(input.owner)
-        || !/^[a-zA-Z0-9_.-]{1,100}$/.test(input.repo) || input.repo === '.' || input.repo === '..') {
-        return { status: 'project-mismatch' };
-    }
-    const linked = await linkedProject(input.cwd);
-    if (signal?.aborted)
-        return { status: 'cancelled' };
-    if (!linked)
-        return { status: 'not-linked' };
-    const runVercel = dependencies.runVercel ?? ((args) => new Promise((resolve, reject) => {
-        const child = execFile('vercel', args, {
-            cwd: linked.root, encoding: 'utf8', timeout: 30_000, maxBuffer: OUTPUT_LIMIT, signal,
-        }, (error, stdout) => error ? reject(new Error('Vercel project lookup failed.')) : resolve(stdout));
-        child.stdin?.end();
-    }));
-    // teamId selects the linked team. Legacy personal projects omit it and still require accountId to match.
-    const route = `/v9/projects/${linked.projectId}${linked.orgId.startsWith('team_') ? `?teamId=${linked.orgId}` : ''}`;
-    let selected;
-    try {
-        const stdout = await runVercel(['api', route, '--method', 'GET', '--raw', '--non-interactive'], signal);
-        if (signal?.aborted)
-            return { status: 'cancelled' };
-        if (Buffer.byteLength(stdout, 'utf8') > OUTPUT_LIMIT)
-            return { status: 'unavailable' };
-        const project = record(JSON.parse(stdout));
-        const link = record(project?.link);
-        if (project?.id !== linked.projectId || project.accountId !== linked.orgId
-            || !link || !['github', 'github-limited'].includes(String(link.type))
-            || typeof link.org !== 'string' || link.org.toLowerCase() !== input.owner.toLowerCase()
-            || typeof link.repo !== 'string' || link.repo.toLowerCase() !== input.repo.toLowerCase()) {
-            return { status: 'project-mismatch' };
-        }
-        const bypasses = record(project.protectionBypass);
-        if (!bypasses || Object.keys(bypasses).length > 128)
-            return { status: 'unavailable' };
-        const candidates = [];
-        for (const [value, metadata] of Object.entries(bypasses)) {
-            const bypass = record(metadata);
-            if (bypass?.scope !== 'automation-bypass')
-                continue;
-            if (!/^[A-Za-z0-9]{32}$/.test(value)
-                || (bypass.isEnvVar !== undefined && typeof bypass.isEnvVar !== 'boolean'))
-                return { status: 'unavailable' };
-            // An omitted isEnvVar is the legacy default. Explicit false keys must never be chosen implicitly.
-            if (bypass.isEnvVar !== false)
-                candidates.push(value);
-        }
-        if (candidates.length > 1)
-            return { status: 'ambiguous' };
-        if (candidates.length === 0)
-            return { status: 'unavailable' };
-        selected = candidates[0];
-        dependencies.rememberSecret(selected);
-    }
-    catch {
-        return { status: signal?.aborted ? 'cancelled' : 'unavailable' };
-    }
-    if (signal?.aborted)
-        return { status: 'cancelled' };
-    try {
-        const status = await dependencies.save(selected);
-        return { status: ['saved', 'save-failed', 'partial-save', 'cancelled'].includes(status) ? status : 'save-failed' };
-    }
-    catch {
-        return { status: signal?.aborted ? 'cancelled' : 'save-failed' };
-    }
-}