@maka/meteor-sdk 0.2.4 → 0.2.5

package/isopackets/combined/npm/node_modules/meteor/babel-compiler/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1snkx7vjcuf",
+  "name": "package-new-6k929wsbwx9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/boilerplate-generator/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-4u9fx8mbxny",
+  "name": "package-new-2mclqghmngi",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/constraint-solver/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-sm91z7t3z4o",
+  "name": "package-new-icvdrmvpe98",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/ddp-client/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-gsvm5rcc2iq",
+  "name": "package-new-1l89kpenr14",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/ecmascript/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-3gg4doz5i88",
+  "name": "package-new-1a111eybcxg",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/ecmascript-runtime/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1nb1rwir7xu",
+  "name": "package-new-4otzch89cvg",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/ecmascript-runtime-client/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1jo8olhxkjm",
+  "name": "package-new-1j6yd8m9jmr",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/ecmascript-runtime-server/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-2ybexym7dno",
+  "name": "package-new-u5yoxmo7e8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/fetch/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-i9b1vaovh2j",
+  "name": "package-new-gl6nw0kh6ad",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/inter-process-messaging/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-dymdsziwayf",
+  "name": "package-new-1s0oep6bdbh",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/logging/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-ffz4udz1rzl",
+  "name": "package-new-3esnphw257u",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/logic-solver/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1gj1i1e8erq",
+  "name": "package-new-aalglzldmd",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/meteor/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1hynmr3gjvhf",
+  "name": "package-new-170bck5w9fh",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/modules/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-1ffagznc9qh",
+  "name": "package-new-flkytgvx9c",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/modules-runtime/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-e37v0zigxr6",
+  "name": "package-new-i7wq86jxilm",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/npm-mongo/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-wfebwy06fwm",
+  "name": "package-new-1l34vs5ock9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/package-version-parser/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-dbv0mrj9kh",
+  "name": "package-new-5gfs3kuobru",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/promise/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-4rd6cn8q4z7",
+  "name": "package-new-17orohwcgko",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/react-fast-refresh/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-m44yzrtc8cq",
+  "name": "package-new-1srjvp9mfq6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/isopackets/combined/npm/node_modules/meteor/socket-stream-client/node_modules/.package-lock.json

@@ -1,5 +1,5 @@
 {
-  "name": "package-new-c4g2z219k47",
+  "name": "package-new-18nqdduk0bm",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/meteor-sdk",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Programmatic Node API over the Meteor build tool (bundle/run/create/etc.) -- for driving Meteor's build system from plain Node code instead of shelling out to a meteor CLI (there isn't one anymore; see README.md). \"dependencies\" is generated by scripts/write-tool-package-json.js from scripts/dev-bundle-tool-package.js at the monorepo root -- do not hand-edit that field, edit that file and re-run the script instead.",
   "main": "src/index.js",
   "exports": {

package/tools/isobuild/meteor-npm.js

@@ -957,6 +957,36 @@ const npmUserConfigFile = files.pathJoin(
   "meteor-npm-userconfig"
 );
 
+// The npm major version of the system npm these installs spawn --
+// resolved once per process. Needed because npm 12 changed script
+// execution policy: install-time lifecycle scripts are SKIPPED unless
+// covered by allow-scripts, which silently breaks native-binding deps
+// (@meteorjs/swc-core's postinstall never runs -> no binding -> builds
+// fail much later). --dangerously-allow-all-scripts restores the
+// pre-npm-12 behavior for these tool-controlled installs (the deps come
+// from meteor's own package manifests, same trust model npm<=11 always
+// had) -- but the flag can't be passed unconditionally: npm 12 hard-errors
+// on flags it doesn't recognize, and vice versa older npms warn/err on
+// unknown ones, so it's gated on the detected major.
+let npmMajorVersionPromise = null;
+function getNpmMajorVersion(commandToRun, npmPath, isWindows, env) {
+  if (!npmMajorVersionPromise) {
+    npmMajorVersionPromise = new Promise(function (resolve) {
+      const versionArgs = isWindows
+        ? ['/c', npmPath, '--version']
+        : ['--version'];
+      require('child_process').execFile(
+        commandToRun, versionArgs, { env },
+        function (err, stdout) {
+          const major = err ? NaN : parseInt(String(stdout).trim(), 10);
+          resolve(Number.isNaN(major) ? 0 : major);
+        }
+      );
+    });
+  }
+  return npmMajorVersionPromise;
+}
+
 var runNpmCommand = meteorNpm.runNpmCommand =
 Profile("meteorNpm.runNpmCommand", async function (args, cwd) {
   import { getEnv } from "../utils/dev-bundle-env.js";
@@ -978,6 +1008,33 @@ Profile("meteorNpm.runNpmCommand", async function (args, cwd) {
   // http://nodejs.org/api/child_process.html#child_process_shell_requirements.
 
   let commandToRun = npmPath;
+
+  const env = await getEnv({devBundle: toolRootDir});
+  // Make sure we don't honor any user-provided configuration files.
+  env.npm_config_userconfig = npmUserConfigFile;
+
+  // npm 12 skips uncovered install scripts (see getNpmMajorVersion's
+  // comment); restore full script execution for the script-running
+  // subcommands only.
+  const npmMajor = await getNpmMajorVersion(
+    isWindows ? (process.env.ComSpec || "cmd.exe") : npmPath,
+    npmPath, isWindows, env
+  );
+  const runsScripts = ['install', 'i', 'ci', 'rebuild', 'update'].includes(args[0]);
+  if (npmMajor >= 12 && runsScripts) {
+    // Also restore git/tarball-URL dependency fetching: npm 12 defaults
+    // allow-git and allow-remote to "none", but core packages
+    // legitimately pin such deps (e.g. ddp-server's uWebSockets.js,
+    // which upstream only distributes via GitHub) -- EALLOWGIT broke
+    // every fresh machine's first build of ddp-server.
+    args = [
+      ...args,
+      '--dangerously-allow-all-scripts',
+      '--allow-git=all',
+      '--allow-remote=all',
+    ];
+  }
+
   if (isWindows) {
     args = ['/c', npmPath, ...args];
     commandToRun = process.env.ComSpec || "cmd.exe";
@@ -989,20 +1046,22 @@ Profile("meteorNpm.runNpmCommand", async function (args, cwd) {
                          args.join(' ') + ' ...\n');
   }
 
-  const env = await getEnv({devBundle: toolRootDir});
-
   const opts = {
     env: env,
-    maxBuffer: 10 * 1024 * 1024
+    maxBuffer: 10 * 1024 * 1024,
+    // stdin 'ignore', NOT the default open pipe: a child npm that decides
+    // to prompt (npm 12's interactive allow-scripts confirmation, auth
+    // prompts, ...) would otherwise block forever on a pipe nobody writes
+    // to -- observed as a hard hang (^C-immune) during a fresh machine's
+    // first `maka create` on an npm 12 box. With stdin closed, npm sees
+    // a non-interactive session and warns/skips instead of waiting.
+    stdio: ['ignore', 'pipe', 'pipe'],
   };
 
   if (cwd) {
     opts.cwd = files.convertToOSPath(cwd);
   }
 
-  // Make sure we don't honor any user-provided configuration files.
-  env.npm_config_userconfig = npmUserConfigFile;
-
   return new Promise(function (resolve) {
     require('child_process').execFile(
         commandToRun, args, opts, function (err, stdout, stderr) {