@nirvana-labs/nirvana-mcp 1.31.0 → 1.32.0

package/oidc/node_modules/npm/lib/commands/run.js

@@ -0,0 +1,222 @@
+const { output } = require('proc-log')
+const pkgJson = require('@npmcli/package-json')
+const BaseCommand = require('../base-cmd.js')
+const { getError } = require('../utils/error-message.js')
+const { outputError } = require('../utils/output-error.js')
+
+class RunScript extends BaseCommand {
+  static description = 'Run arbitrary package scripts'
+  static params = [
+    'workspace',
+    'workspaces',
+    'include-workspace-root',
+    'if-present',
+    'ignore-scripts',
+    'foreground-scripts',
+    'script-shell',
+  ]
+
+  static name = 'run'
+  static usage = ['<command> [-- <args>]']
+  static workspaces = true
+  static ignoreImplicitWorkspace = false
+  static isShellout = true
+  static checkDevEngines = true
+
+  static async completion (opts, npm) {
+    const argv = opts.conf.argv.remain
+    if (argv.length === 2) {
+      const workspacePrefixes = npm.config.get('workspace', 'default')
+      const localPrefix = workspacePrefixes.length
+        ? workspacePrefixes[0]
+        : npm.localPrefix
+      const { content: { scripts = {} } } = await pkgJson.normalize(localPrefix)
+        .catch(() => ({ content: {} }))
+      if (opts.isFish) {
+        return Object.keys(scripts).map(s => `${s}\t${scripts[s].slice(0, 30)}`)
+      }
+      return Object.keys(scripts)
+    }
+  }
+
+  async exec (args) {
+    if (args.length) {
+      await this.#run(args, { path: this.npm.localPrefix })
+    } else {
+      await this.#list(this.npm.localPrefix)
+    }
+  }
+
+  async execWorkspaces (args) {
+    await this.setWorkspaces()
+
+    const ws = [...this.workspaces.entries()]
+    for (const [workspace, path] of ws) {
+      const last = path === ws.at(-1)[1]
+
+      if (!args.length) {
+        const newline = await this.#list(path, { workspace })
+        if (newline && !last) {
+          output.standard('')
+        }
+        continue
+      }
+
+      const pkg = await pkgJson.normalize(path).then(p => p.content)
+      try {
+        await this.#run(args, { path, pkg, workspace })
+      } catch (e) {
+        const err = getError(e, { npm: this.npm, command: null })
+        outputError({
+          ...err,
+          error: [
+            ['', `Lifecycle script \`${args[0]}\` failed with error:`],
+            ...err.error,
+            ['workspace', pkg._id || pkg.name],
+            ['location', path],
+          ],
+        })
+        process.exitCode = err.exitCode
+        if (!last) {
+          output.error('')
+        }
+      }
+    }
+  }
+
+  async #run ([event, ...args], { path, pkg, workspace }) {
+    const runScript = require('@npmcli/run-script')
+
+    pkg ??= await pkgJson.normalize(path).then(p => p.content)
+
+    const { scripts = {} } = pkg
+
+    if (event === 'restart' && !scripts.restart) {
+      scripts.restart = 'npm stop --if-present && npm start'
+    } else if (event === 'env' && !scripts.env) {
+      const { isWindowsShell } = require('../utils/is-windows.js')
+      scripts.env = isWindowsShell ? 'SET' : 'env'
+    }
+
+    pkg.scripts = scripts
+
+    if (
+      !Object.prototype.hasOwnProperty.call(scripts, event) &&
+      !(event === 'start' && (await runScript.isServerPackage(path)))
+    ) {
+      if (this.npm.config.get('if-present')) {
+        return
+      }
+
+      const suggestions = require('../utils/did-you-mean.js')(pkg, event)
+      const wsArg = workspace && path !== this.npm.localPrefix
+        ? ` --workspace=${pkg._id || pkg.name}`
+        : ''
+      throw new Error([
+        `Missing script: "${event}"${suggestions}\n`,
+        'To see a list of scripts, run:',
+        `  npm run${wsArg}`,
+      ].join('\n'))
+    }
+
+    // positional args only added to the main event, not pre/post
+    const events = [[event, args]]
+    if (!this.npm.config.get('ignore-scripts')) {
+      if (scripts[`pre${event}`]) {
+        events.unshift([`pre${event}`, []])
+      }
+
+      if (scripts[`post${event}`]) {
+        events.push([`post${event}`, []])
+      }
+    }
+
+    for (const [ev, evArgs] of events) {
+      await runScript({
+        args: evArgs,
+        event: ev,
+        nodeGyp: this.npm.config.get('node-gyp'),
+        path,
+        pkg,
+        // || undefined is because runScript will be unhappy with the default null value
+        scriptShell: this.npm.config.get('script-shell') || undefined,
+        stdio: 'inherit',
+      })
+    }
+  }
+
+  async #list (path, { workspace } = {}) {
+    const { scripts = {}, name, _id } = await pkgJson.normalize(path).then(p => p.content)
+    const scriptEntries = Object.entries(scripts)
+
+    if (this.npm.silent) {
+      return
+    }
+
+    if (this.npm.config.get('json')) {
+      output.buffer(workspace ? { [workspace]: scripts } : scripts)
+      return
+    }
+
+    if (!scriptEntries.length) {
+      return
+    }
+
+    if (this.npm.config.get('parseable')) {
+      output.standard(scriptEntries
+        .map((s) => (workspace ? [workspace, ...s] : s).join(':'))
+        .join('\n')
+        .trim())
+      return
+    }
+
+    const cmdList = [
+      'prepare', 'prepublishOnly',
+      'prepack', 'postpack',
+      'dependencies',
+      'preinstall', 'install', 'postinstall',
+      'prepublish', 'publish', 'postpublish',
+      'prerestart', 'restart', 'postrestart',
+      'prestart', 'start', 'poststart',
+      'prestop', 'stop', 'poststop',
+      'pretest', 'test', 'posttest',
+      'preuninstall', 'uninstall', 'postuninstall',
+      'preversion', 'version', 'postversion',
+    ]
+    const [cmds, runScripts] = scriptEntries.reduce((acc, s) => {
+      acc[cmdList.includes(s[0]) ? 0 : 1].push(s)
+      return acc
+    }, [[], []])
+
+    const { reset, bold, cyan, dim, blue } = this.npm.chalk
+    const pkgId = `in ${cyan(_id || name)}`
+    const title = (t) => reset(bold(t))
+
+    if (cmds.length) {
+      output.standard(`${title('Lifecycle scripts')} included ${pkgId}:`)
+      for (const [k, v] of cmds) {
+        output.standard(`  ${k}`)
+        output.standard(`    ${dim(v)}`)
+      }
+    }
+
+    if (runScripts.length) {
+      const via = `via \`${blue('npm run')}\`:`
+      if (!cmds.length) {
+        output.standard(`${title('Scripts')} available ${pkgId} ${via}`)
+      } else {
+        output.standard(`available ${via}`)
+      }
+      for (const [k, v] of runScripts) {
+        output.standard(`  ${k}`)
+        output.standard(`    ${dim(v)}`)
+      }
+    }
+
+    // Return true to indicate that something was output for this path
+    // that should be separated from others
+    return true
+  }
+}
+
+module.exports = RunScript

package/oidc/node_modules/npm/lib/commands/sbom.js

@@ -0,0 +1,132 @@
+const localeCompare = require('@isaacs/string-locale-compare')('en')
+const BaseCommand = require('../base-cmd.js')
+const { log, output } = require('proc-log')
+const { cyclonedxOutput } = require('../utils/sbom-cyclonedx.js')
+const { spdxOutput } = require('../utils/sbom-spdx.js')
+
+const SBOM_FORMATS = ['cyclonedx', 'spdx']
+
+class SBOM extends BaseCommand {
+  #response = {} // response is the sbom response
+
+  static description = 'Generate a Software Bill of Materials (SBOM)'
+  static name = 'sbom'
+  static workspaces = true
+
+  static params = [
+    'omit',
+    'package-lock-only',
+    'sbom-format',
+    'sbom-type',
+    'workspace',
+    'workspaces',
+  ]
+
+  async exec () {
+    const sbomFormat = this.npm.config.get('sbom-format')
+    const packageLockOnly = this.npm.config.get('package-lock-only')
+
+    if (!sbomFormat) {
+      throw this.usageError(`Must specify --sbom-format flag with one of: ${SBOM_FORMATS.join(', ')}.`)
+    }
+
+    const opts = {
+      ...this.npm.flatOptions,
+      path: this.npm.prefix,
+      forceActual: true,
+    }
+    const Arborist = require('@npmcli/arborist')
+    const arb = new Arborist(opts)
+
+    const tree = packageLockOnly ? await arb.loadVirtual(opts).catch(() => {
+      throw this.usageError('A package lock or shrinkwrap file is required in package-lock-only mode')
+    }) : await arb.loadActual(opts)
+
+    // Collect the list of selected workspaces in the project
+    const wsNodes = this.workspaceNames?.length
+      ? arb.workspaceNodes(tree, this.workspaceNames)
+      : null
+
+    // Build the selector and query the tree for the list of nodes
+    const selector = this.#buildSelector({ wsNodes })
+    log.info('sbom', `Using dependency selector: ${selector}`)
+    const items = await tree.querySelectorAll(selector)
+
+    const errors = items.flatMap(node => detectErrors(node))
+    if (errors.length) {
+      throw Object.assign(new Error([...new Set(errors)].join('\n')), {
+        code: 'ESBOMPROBLEMS',
+      })
+    }
+
+    // Populate the response with the list of unique nodes (sorted by location)
+    this.#buildResponse(items.sort((a, b) => localeCompare(a.location, b.location)))
+
+    // TODO(BREAKING_CHANGE): all sbom output is in json mode but setting it before
+    // any of the errors will cause those to be thrown in json mode.
+    this.npm.config.set('json', true)
+    output.buffer(this.#response)
+  }
+
+  async execWorkspaces (args) {
+    await this.setWorkspaces()
+    return this.exec(args)
+  }
+
+  // Build the selector from all of the specified filter options
+  #buildSelector ({ wsNodes }) {
+    let selector
+    const omit = this.npm.flatOptions.omit
+    const workspacesEnabled = this.npm.flatOptions.workspacesEnabled
+
+    // If omit is specified, omit all nodes and their children which match the
+    // specified selectors
+    const omits = omit.reduce((acc, o) => `${acc}:not(.${o})`, '')
+
+    if (!workspacesEnabled) {
+      // If workspaces are disabled, omit all workspace nodes and their children
+      selector = `:root > :not(.workspace)${omits},:root > :not(.workspace) *${omits},:extraneous`
+    } else if (wsNodes && wsNodes.length > 0) {
+      // If one or more workspaces are selected, select only those workspaces and their children
+      selector = wsNodes.map(ws => `#${ws.name},#${ws.name} *${omits}`).join(',')
+    } else {
+      selector = `:root *${omits},:extraneous`
+    }
+
+    // Always include the root node
+    return `:root,${selector}`
+  }
+
+  // builds a normalized inventory
+  #buildResponse (items) {
+    const sbomFormat = this.npm.config.get('sbom-format')
+    const packageType = this.npm.config.get('sbom-type')
+    const packageLockOnly = this.npm.config.get('package-lock-only')
+
+    this.#response = sbomFormat === 'cyclonedx'
+      ? cyclonedxOutput({ npm: this.npm, nodes: items, packageType, packageLockOnly })
+      : spdxOutput({ npm: this.npm, nodes: items, packageType })
+  }
+}
+
+const detectErrors = (node) => {
+  const errors = []
+
+  // Look for missing dependencies (that are NOT optional), or invalid dependencies
+  for (const edge of node.edgesOut.values()) {
+    if (edge.missing && !(edge.type === 'optional' || edge.type === 'peerOptional')) {
+      errors.push(`missing: ${edge.name}@${edge.spec}, required by ${edge.from.pkgid}`)
+    }
+
+    if (edge.invalid) {
+      /* istanbul ignore next */
+      const spec = edge.spec || '*'
+      const from = edge.from.pkgid
+      errors.push(`invalid: ${edge.to.pkgid}, ${spec} required by ${from}`)
+    }
+  }
+
+  return errors
+}
+
+module.exports = SBOM

package/oidc/node_modules/npm/lib/commands/search.js

@@ -0,0 +1,70 @@
+const Pipeline = require('minipass-pipeline')
+const libSearch = require('libnpmsearch')
+const { log, output } = require('proc-log')
+const formatSearchStream = require('../utils/format-search-stream.js')
+const BaseCommand = require('../base-cmd.js')
+
+class Search extends BaseCommand {
+  static description = 'Search for packages'
+  static name = 'search'
+  static params = [
+    'json',
+    'color',
+    'parseable',
+    'description',
+    'searchlimit',
+    'searchopts',
+    'searchexclude',
+    'registry',
+    'prefer-online',
+    'prefer-offline',
+    'offline',
+  ]
+
+  static usage = ['<search term> [<search term> ...]']
+
+  async exec (args) {
+    const opts = {
+      ...this.npm.flatOptions,
+      ...this.npm.flatOptions.search,
+      include: args.map(s => s.toLowerCase()).filter(Boolean),
+      exclude: this.npm.flatOptions.search.exclude.split(/\s+/),
+    }
+
+    if (opts.include.length === 0) {
+      throw new Error('search must be called with arguments')
+    }
+
+    // Used later to figure out whether we had any packages go out
+    let anyOutput = false
+
+    // Grab a configured output stream that will spit out packages in the desired format.
+    const outputStream = formatSearchStream({
+      args, // --searchinclude options are not highlighted
+      ...opts,
+      npm: this.npm,
+    })
+
+    log.silly('search', 'searching packages')
+    const p = new Pipeline(
+      libSearch.stream(opts.include, opts),
+      outputStream
+    )
+
+    p.on('data', chunk => {
+      if (!anyOutput) {
+        anyOutput = true
+      }
+      output.standard(chunk.toString('utf8'))
+    })
+
+    await p.promise()
+    if (!anyOutput && !this.npm.config.get('json') && !this.npm.config.get('parseable')) {
+      output.standard('No matches found for ' + (args.map(JSON.stringify).join(' ')))
+    }
+
+    log.silly('search', 'search completed')
+  }
+}
+
+module.exports = Search

package/oidc/node_modules/npm/lib/commands/set.js

@@ -0,0 +1,26 @@
+const Npm = require('../npm.js')
+const BaseCommand = require('../base-cmd.js')
+
+class Set extends BaseCommand {
+  static description = 'Set a value in the npm configuration'
+  static name = 'set'
+  static usage = ['<key>=<value> [<key>=<value> ...] (See `npm config`)']
+  static params = ['global', 'location']
+  static ignoreImplicitWorkspace = false
+
+  // TODO
+  /* istanbul ignore next */
+  static async completion (opts) {
+    const Config = Npm.cmd('config')
+    return Config.completion(opts)
+  }
+
+  async exec (args) {
+    if (!args.length) {
+      throw this.usageError()
+    }
+    return this.npm.exec('config', ['set'].concat(args))
+  }
+}
+
+module.exports = Set

package/oidc/node_modules/npm/lib/commands/shrinkwrap.js

@@ -0,0 +1,73 @@
+const { resolve, basename } = require('node:path')
+const { unlink } = require('node:fs/promises')
+const { log } = require('proc-log')
+const BaseCommand = require('../base-cmd.js')
+
+class Shrinkwrap extends BaseCommand {
+  static description = 'Lock down dependency versions for publication'
+  static name = 'shrinkwrap'
+  static ignoreImplicitWorkspace = false
+
+  async exec () {
+    // if has a npm-shrinkwrap.json, nothing to do
+    // if has a package-lock.json, rename to npm-shrinkwrap.json
+    // if has neither, load the actual tree and save that as npm-shrinkwrap.json
+    //
+    // loadVirtual, fall back to loadActual
+    // rename shrinkwrap file type, and tree.meta.save()
+    if (this.npm.global) {
+      const er = new Error('`npm shrinkwrap` does not work for global packages')
+      er.code = 'ESHRINKWRAPGLOBAL'
+      throw er
+    }
+
+    const Arborist = require('@npmcli/arborist')
+    const path = this.npm.prefix
+    const sw = resolve(path, 'npm-shrinkwrap.json')
+    const arb = new Arborist({ ...this.npm.flatOptions, path })
+    const tree = await arb.loadVirtual().catch(() => arb.loadActual())
+    const { meta } = tree
+    const newFile = meta.hiddenLockfile || !meta.loadedFromDisk
+    const oldFilename = meta.filename
+    const notSW = !newFile && basename(oldFilename) !== 'npm-shrinkwrap.json'
+
+    // The computed lockfile version of a hidden lockfile is always 3
+    // even if the actual value of the property is a different.
+    // When shrinkwrap is run with only a hidden lockfile we want to
+    // set the shrinkwrap lockfile version as whatever was explicitly
+    // requested with a fallback to the actual value from the hidden
+    // lockfile.
+    if (meta.hiddenLockfile) {
+      meta.lockfileVersion = arb.options.lockfileVersion ||
+        meta.originalLockfileVersion
+    }
+    meta.hiddenLockfile = false
+    meta.filename = sw
+    await meta.save()
+
+    const updatedVersion = meta.originalLockfileVersion !== meta.lockfileVersion
+      ? meta.lockfileVersion
+      : null
+
+    if (newFile) {
+      let message = 'created a lockfile as npm-shrinkwrap.json'
+      if (updatedVersion) {
+        message += ` with version ${updatedVersion}`
+      }
+      log.notice('', message)
+    } else if (notSW) {
+      await unlink(oldFilename)
+      let message = 'package-lock.json has been renamed to npm-shrinkwrap.json'
+      if (updatedVersion) {
+        message += ` and updated to version ${updatedVersion}`
+      }
+      log.notice('', message)
+    } else if (updatedVersion) {
+      log.notice('', `npm-shrinkwrap.json updated to version ${updatedVersion}`)
+    } else {
+      log.notice('', 'npm-shrinkwrap.json up to date')
+    }
+  }
+}
+
+module.exports = Shrinkwrap

package/oidc/node_modules/npm/lib/commands/star.js

@@ -0,0 +1,72 @@
+const npmFetch = require('npm-registry-fetch')
+const npa = require('npm-package-arg')
+const { log, output } = require('proc-log')
+const getIdentity = require('../utils/get-identity')
+const BaseCommand = require('../base-cmd.js')
+
+class Star extends BaseCommand {
+  static description = 'Mark your favorite packages'
+  static name = 'star'
+  static usage = ['[<package-spec>...]']
+  static params = [
+    'registry',
+    'unicode',
+    'otp',
+  ]
+
+  static ignoreImplicitWorkspace = false
+
+  async exec (args) {
+    if (!args.length) {
+      throw this.usageError()
+    }
+
+    // if we're unstarring, then show an empty star image
+    // otherwise, show the full star image
+    const unicode = this.npm.config.get('unicode')
+    const full = unicode ? '\u2605 ' : '(*)'
+    const empty = unicode ? '\u2606 ' : '( )'
+    const show = this.name === 'star' ? full : empty
+
+    const pkgs = args.map(npa)
+    const username = await getIdentity(this.npm, this.npm.flatOptions)
+
+    for (const pkg of pkgs) {
+      const fullData = await npmFetch.json(pkg.escapedName, {
+        ...this.npm.flatOptions,
+        spec: pkg,
+        query: { write: true },
+        preferOnline: true,
+      })
+
+      const body = {
+        _id: fullData._id,
+        _rev: fullData._rev,
+        users: fullData.users || {},
+      }
+
+      if (this.name === 'star') {
+        log.info('star', 'starring', body._id)
+        body.users[username] = true
+        log.verbose('star', 'starring', body)
+      } else {
+        delete body.users[username]
+        log.info('unstar', 'unstarring', body._id)
+        log.verbose('unstar', 'unstarring', body)
+      }
+
+      const data = await npmFetch.json(pkg.escapedName, {
+        ...this.npm.flatOptions,
+        spec: pkg,
+        method: 'PUT',
+        body,
+      })
+
+      output.standard(show + ' ' + pkg.name)
+      log.verbose('star', data)
+      return data
+    }
+  }
+}
+
+module.exports = Star

package/oidc/node_modules/npm/lib/commands/stars.js

@@ -0,0 +1,39 @@
+const npmFetch = require('npm-registry-fetch')
+const { log, output } = require('proc-log')
+const getIdentity = require('../utils/get-identity.js')
+const BaseCommand = require('../base-cmd.js')
+
+class Stars extends BaseCommand {
+  static description = 'View packages marked as favorites'
+  static name = 'stars'
+  static usage = ['[<user>]']
+  static params = ['registry']
+  static ignoreImplicitWorkspace = false
+
+  async exec ([user]) {
+    try {
+      if (!user) {
+        user = await getIdentity(this.npm, this.npm.flatOptions)
+      }
+
+      const { rows } = await npmFetch.json('/-/_view/starredByUser', {
+        ...this.npm.flatOptions,
+        query: { key: `"${user}"` },
+      })
+      if (rows.length === 0) {
+        log.warn('stars', 'user has not starred any packages')
+      }
+
+      for (const row of rows) {
+        output.standard(row.value)
+      }
+    } catch (err) {
+      if (err.code === 'ENEEDAUTH') {
+        log.warn('stars', 'auth is required to look up your username')
+      }
+      throw err
+    }
+  }
+}
+
+module.exports = Stars

package/oidc/node_modules/npm/lib/commands/start.js

@@ -0,0 +1,13 @@
+const LifecycleCmd = require('../lifecycle-cmd.js')
+
+// This ends up calling run(['start', ...args])
+class Start extends LifecycleCmd {
+  static description = 'Start a package'
+  static name = 'start'
+  static params = [
+    'ignore-scripts',
+    'script-shell',
+  ]
+}
+
+module.exports = Start

package/oidc/node_modules/npm/lib/commands/stop.js

@@ -0,0 +1,13 @@
+const LifecycleCmd = require('../lifecycle-cmd.js')
+
+// This ends up calling run(['stop', ...args])
+class Stop extends LifecycleCmd {
+  static description = 'Stop a package'
+  static name = 'stop'
+  static params = [
+    'ignore-scripts',
+    'script-shell',
+  ]
+}
+
+module.exports = Stop