@morphemecms/cms 0.3.0 → 0.4.0-next-20261104164754

package/lib/lockfile.test.mjs

@@ -0,0 +1,88 @@
+// Tests for lib/lockfile.mjs (moved from morpheme-appstore's test/unit/lockfile.test.mjs). Run: node --test packages/editor/lib/lockfile.test.mjs
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { addToLock, NeedsNpm, removeFromLock } from './lockfile.mjs';
+
+const site = () => ({
+  packageJson: { name: 'site', dependencies: { astro: '^7.3.7', yaml: '^2.9.1' } },
+  lock: {
+    name: 'site',
+    lockfileVersion: 3,
+    requires: true,
+    packages: {
+      '': { name: 'site', dependencies: { astro: '^7.3.7', yaml: '^2.9.1' } },
+      'node_modules/astro': { version: '7.3.7' },
+      'node_modules/yaml': { version: '2.9.1' },
+    },
+  },
+});
+
+const manifest = (over = {}) => ({
+  name: '@morpheme/cms',
+  version: '1.0.0',
+  license: 'UNLICENSED',
+  peerDependencies: { astro: '^7.3.2', yaml: '^2.0.0' },
+  bin: { 'site-editor': './bin/cli.mjs' },
+  dist: {
+    tarball: 'https://morpheme-appstore.larsadolfsen.workers.dev/npm/@morpheme/cms/-/cms-1.0.0.tgz',
+    integrity: 'sha512-abc',
+    shasum: 'def',
+  },
+  ...over,
+});
+
+test('a new package goes into package.json and the lock where npm puts it', () => {
+  const { packageJson, lock } = addToLock(site().packageJson, site().lock, manifest());
+  assert.deepEqual(Object.keys(packageJson.dependencies), ['@morpheme/cms', 'astro', 'yaml']);
+  assert.equal(packageJson.dependencies['@morpheme/cms'], '1.0.0');
+  assert.deepEqual(Object.keys(lock.packages), ['', 'node_modules/@morpheme/cms', 'node_modules/astro', 'node_modules/yaml']);
+  assert.equal(lock.packages[''].dependencies['@morpheme/cms'], '1.0.0');
+  assert.deepEqual(lock.packages['node_modules/@morpheme/cms'], {
+    version: '1.0.0',
+    resolved: manifest().dist.tarball,
+    integrity: 'sha512-abc',
+    license: 'UNLICENSED',
+    bin: { 'site-editor': 'bin/cli.mjs' },
+    peerDependencies: { astro: '^7.3.2', yaml: '^2.0.0' },
+  });
+});
+
+test('an update changes only its own entry', () => {
+  const first = addToLock(site().packageJson, site().lock, manifest());
+  const next = addToLock(first.packageJson, first.lock, manifest({ version: '1.1.0' }));
+  assert.equal(next.lock.packages['node_modules/@morpheme/cms'].version, '1.1.0');
+  assert.deepEqual(next.lock.packages['node_modules/yaml'], first.lock.packages['node_modules/yaml']);
+});
+
+test('peers the site does not have, in those versions, need npm', () => {
+  assert.throws(() => addToLock(site().packageJson, site().lock, manifest({ peerDependencies: { yaml: '^3.0.0' } })), NeedsNpm);
+  assert.throws(() => addToLock(site().packageJson, site().lock, manifest({ peerDependencies: { react: '^19.0.0' } })), NeedsNpm);
+  assert.doesNotThrow(() =>
+    addToLock(
+      site().packageJson,
+      site().lock,
+      manifest({ peerDependencies: { react: '^19.0.0' }, peerDependenciesMeta: { react: { optional: true } } }),
+    ),
+  );
+});
+
+test('dependencies of its own and install scripts need npm', () => {
+  assert.throws(() => addToLock(site().packageJson, site().lock, manifest({ dependencies: { yaml: '^2.0.0' } })), NeedsNpm);
+  assert.throws(() => addToLock(site().packageJson, site().lock, manifest({ scripts: { postinstall: 'node x.js' } })), NeedsNpm);
+});
+
+test('removing a package undoes adding it, and leaves the input alone', () => {
+  const added = addToLock(site().packageJson, site().lock, manifest());
+  const snapshot = structuredClone(added);
+  const { packageJson, lock } = removeFromLock(added.packageJson, added.lock, '@morpheme/cms');
+  assert.deepEqual(packageJson, site().packageJson);
+  assert.deepEqual(lock, site().lock);
+  assert.deepEqual(added, snapshot);
+});
+
+test('removing a package another one needs, or from an old lock, needs npm', () => {
+  const added = addToLock(site().packageJson, site().lock, manifest());
+  added.lock.packages['node_modules/@morpheme/theme'] = { version: '1.0.0', peerDependencies: { '@morpheme/cms': '^1.0.0' } };
+  assert.throws(() => removeFromLock(added.packageJson, added.lock, '@morpheme/cms'), NeedsNpm);
+  assert.throws(() => removeFromLock(site().packageJson, { ...site().lock, lockfileVersion: 2 }, 'yaml'), NeedsNpm);
+});

package/lib/range.d.mts

@@ -0,0 +1,4 @@
+/** Whether version satisfies range; throws Unsupported for what this does not read. */
+export function satisfies(version: any, range: any): any;
+export class Unsupported extends Error {
+}

package/lib/range.mjs

@@ -0,0 +1,104 @@
+// Whether a version satisfies an npm range, for the ranges packages write in peerDependencies: exact versions,
+// x-ranges (1, 1.2, 1.2.x, *), ^, ~, the comparators (>=, >, <=, <, =), hyphen ranges and ||. Anything else (and a
+// version with a pre-release) throws Unsupported, so the caller can say that `npm install` must do it instead of
+// guessing.
+// Moved here from morpheme-appstore (lib/range.js), which keeps its copy until it uses this one.
+
+export class Unsupported extends Error {}
+
+const PART = '(0|[1-9]\\d*|[xX*])';
+const PARTIAL = new RegExp(`^v?${PART}(?:\\.${PART}(?:\\.${PART})?)?$`);
+const VERSION = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+
+const wild = (p) => p === undefined || /^[xX*]$/.test(p);
+
+/** [major, minor, patch] of a version, or Unsupported. */
+function parse(version) {
+  const m = VERSION.exec(version);
+  if (!m) throw new Unsupported(`version ${version}`);
+  return m.slice(1, 4).map(Number);
+}
+
+function compare(a, b) {
+  for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
+  return 0;
+}
+
+/** A partial version as [numbers given] (1.2 → [1, 2]); x, X and * end it. */
+function partial(text) {
+  const m = PARTIAL.exec(text);
+  if (!m) throw new Unsupported(`range ${text}`);
+  const parts = [];
+  for (const p of m.slice(1, 4)) {
+    if (wild(p)) break;
+    parts.push(Number(p));
+  }
+  return parts;
+}
+
+const pad = (parts) => [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
+/** The first version above everything a partial version covers (1.2 → 1.3.0, 1 → 2.0.0). */
+function above(parts) {
+  if (parts.length === 0) return null;
+  if (parts.length === 1) return [parts[0] + 1, 0, 0];
+  if (parts.length === 2) return [parts[0], parts[1] + 1, 0];
+  return null;
+}
+
+/** One comparator as [low, lowInclusive, high, highInclusive] bounds (null: none). */
+function bounds(token) {
+  const op = /^(>=|<=|>|<|=|\^|~)?(.*)$/.exec(token);
+  const [, sign = '', rest] = op;
+  const parts = partial(rest);
+  const full = pad(parts);
+  const next = above(parts);
+  switch (sign) {
+    case '':
+    case '=':
+      if (parts.length === 3) return [full, true, full, true];
+      return [parts.length ? full : null, true, next, false];
+    case '>=':
+      return [parts.length ? full : null, true, null, false];
+    case '>':
+      if (!parts.length) throw new Unsupported(`range ${token}`);
+      return parts.length === 3 ? [full, false, null, false] : [next, true, null, false];
+    case '<':
+      if (!parts.length) throw new Unsupported(`range ${token}`);
+      return [null, true, full, false];
+    case '<=':
+      if (!parts.length) return [null, true, null, false];
+      return parts.length === 3 ? [null, true, full, true] : [null, true, next, false];
+    case '~':
+      if (!parts.length) return [null, true, null, false];
+      return [full, true, parts.length === 1 ? [parts[0] + 1, 0, 0] : [parts[0], parts[1] + 1, 0], false];
+    case '^': {
+      if (!parts.length) return [null, true, null, false];
+      const [a, b, c] = full;
+      if (a > 0 || parts.length === 1) return [full, true, [a + 1, 0, 0], false];
+      if (b > 0 || parts.length === 2) return [full, true, [0, b + 1, 0], false];
+      return [full, true, [0, 0, c + 1], false];
+    }
+  }
+  throw new Unsupported(`range ${token}`);
+}
+
+function within(v, [low, lowIn, high, highIn]) {
+  if (low && (lowIn ? compare(v, low) < 0 : compare(v, low) <= 0)) return false;
+  if (high && (highIn ? compare(v, high) > 0 : compare(v, high) >= 0)) return false;
+  return true;
+}
+
+/** Whether version satisfies range; throws Unsupported for what this does not read. */
+export function satisfies(version, range) {
+  const v = parse(version);
+  return range.split('||').some((set) => {
+    const text = set.trim().replace(/(>=|<=|>|<|=|\^|~)\s+/g, '$1');
+    if (text === '' || text === '*') return true;
+    const hyphen = /^(\S+)\s+-\s+(\S+)$/.exec(text);
+    if (hyphen) {
+      const [from, to] = [partial(hyphen[1]), partial(hyphen[2])];
+      return within(v, [pad(from), true, to.length === 3 ? pad(to) : above(to), to.length === 3]);
+    }
+    return text.split(/\s+/).every((token) => within(v, bounds(token)));
+  });
+}

package/lib/range.test.d.mts

@@ -0,0 +1 @@
+export {};

package/lib/range.test.mjs

@@ -0,0 +1,46 @@
+// Tests for lib/range.mjs (moved from morpheme-appstore's test/unit/range.test.mjs). Run: node --test packages/editor/lib/range.test.mjs
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { satisfies, Unsupported } from './range.mjs';
+
+const cases = [
+  ['1.2.3', '1.2.3', true],
+  ['1.2.4', '1.2.3', false],
+  ['1.9.0', '^1.2.3', true],
+  ['2.0.0', '^1.2.3', false],
+  ['1.2.2', '^1.2.3', false],
+  ['0.2.9', '^0.2.3', true],
+  ['0.3.0', '^0.2.3', false],
+  ['0.0.3', '^0.0.3', true],
+  ['0.0.4', '^0.0.3', false],
+  ['1.2.9', '~1.2.3', true],
+  ['1.3.0', '~1.2.3', false],
+  ['1.9.9', '~1', true],
+  ['19.3.0', '^18.0.0 || ^19.0.0', true],
+  ['17.0.0', '^18.0.0 || ^19.0.0', false],
+  ['7.3.7', '>=7.0.0 <8', true],
+  ['8.0.0', '>=7.0.0 <8', false],
+  ['1.5.0', '1.x', true],
+  ['2.0.0', '1.x', false],
+  ['1.2.7', '1.2', true],
+  ['1.3.0', '1.2', false],
+  ['5.0.0', '*', true],
+  ['5.0.0', '', true],
+  ['2.0.0', '>1', true],
+  ['1.9.9', '>1', false],
+  ['1.2.9', '<=1.2', true],
+  ['1.3.0', '<=1.2', false],
+  ['1.5.0', '1.2.3 - 1.6', true],
+  ['1.7.0', '1.2.3 - 1.6', false],
+  ['2.1.0', '>= 2.0.0', true],
+];
+
+test('satisfies reads the ranges peerDependencies use', () => {
+  for (const [version, range, expected] of cases) assert.equal(satisfies(version, range), expected, `${version} in ${range}`);
+});
+
+test('what it does not read throws Unsupported', () => {
+  assert.throws(() => satisfies('1.0.0-beta.1', '^1.0.0'), Unsupported);
+  assert.throws(() => satisfies('1.0.0', 'latest'), Unsupported);
+  assert.throws(() => satisfies('1.0.0', 'npm:other@1'), Unsupported);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morphemecms/cms",
-  "version": "0.3.0",
+  "version": "0.4.0-next-20261104164754",
   "description": "Morpheme CMS: the editor for a site built with Astro, its screens, its blocks and the rules a site gives it. See README.md.",
   "license": "MIT",
   "author": "Lars Adolfsen",
@@ -41,6 +41,7 @@
   "scripts": {
     "build": "node scripts/demo-build.mjs",
     "icons": "node scripts/icon-packs.mjs",
+    "release:version": "changeset version && node scripts/starter.mjs",
     "prepack": "node scripts/types.mjs write",
     "postpack": "node scripts/types.mjs clean"
   },

package/scripts/built-site.mjs

@@ -111,6 +111,19 @@ const STORE_CATALOG = {
   ],
 };
 
+/** What the Worker's GET /api/cms answers (worker/cms-update.js cmsStatus), made up so "Morpheme" (#morpheme) opens with
+ * a new major version and its notes, an undone update, and two problems (no token, no check runs to read). The other
+ * states (up to date, waiting, skipped, needs npm) are covered by src/cmsView.test.mjs. */
+const CMS_STATUS = {
+  running: JSON.parse(readFileSync(`${import.meta.dirname}/../package.json`, 'utf8')).version,
+  token: false,
+  kv: true,
+  checked: { at: '2026-11-03T08:00:00.000Z', latest: '99.0.0', problem: { kind: 'major' }, noChecks: true },
+  update: { state: 'undone', to: '0.0.1', at: '2026-11-02T10:30:00.000Z' },
+  skipped: ['0.0.1'],
+  notes: [{ version: '99.0.0', text: 'A made-up note for the checks.\n\nA second paragraph.' }],
+};
+
 /** Opens the editor (/editor/) of the site at `site` in `page`, signed in, with GitHub answered from the files on disk
  * (`texts`: some with other texts), and waits until it has loaded the site. */
 export async function openEditor(page, site, texts = {}) {
@@ -118,6 +131,7 @@ export async function openEditor(page, site, texts = {}) {
   await page.route(`${site}/api/r2?**`, (r) =>
     r.fulfill({ contentType: 'application/json', body: JSON.stringify({ bound: false, bucket: 'ready' }) }),
   );
+  await page.route(`${site}/api/cms`, (r) => r.fulfill({ contentType: 'application/json', body: JSON.stringify(CMS_STATUS) }));
   await page.route(`${site}/api/store/**`, (r) =>
     new URL(r.request().url()).pathname === '/api/store/catalog'
       ? r.fulfill({ contentType: 'application/json', body: JSON.stringify(STORE_CATALOG) })