@rudderjs/cli 4.14.0 → 4.15.0

package/dist/doctor/built-in/index.d.ts

@@ -8,6 +8,7 @@ import './package-manager.js';
 import './env-vars.js';
 import './structure.js';
 import './deps.js';
+import './version-skew.js';
 import './runtime.js';
 import './production.js';
 export declare function loadBuiltInChecks(): void;

package/dist/doctor/built-in/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/doctor/built-in/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,mBAAmB,CAAA;AAC1B,OAAO,sBAAsB,CAAA;AAC7B,OAAO,eAAe,CAAA;AACtB,OAAO,gBAAgB,CAAA;AACvB,OAAO,WAAW,CAAA;AAClB,OAAO,cAAc,CAAA;AACrB,OAAO,iBAAiB,CAAA;AAExB,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/doctor/built-in/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,mBAAmB,CAAA;AAC1B,OAAO,sBAAsB,CAAA;AAC7B,OAAO,eAAe,CAAA;AACtB,OAAO,gBAAgB,CAAA;AACvB,OAAO,WAAW,CAAA;AAClB,OAAO,mBAAmB,CAAA;AAC1B,OAAO,cAAc,CAAA;AACrB,OAAO,iBAAiB,CAAA;AAExB,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC"}

package/dist/doctor/built-in/index.js

@@ -8,6 +8,7 @@ import './package-manager.js';
 import './env-vars.js';
 import './structure.js';
 import './deps.js';
+import './version-skew.js';
 import './runtime.js';
 import './production.js';
 export function loadBuiltInChecks() {

package/dist/doctor/built-in/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/built-in/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,mBAAmB,CAAA;AAC1B,OAAO,sBAAsB,CAAA;AAC7B,OAAO,eAAe,CAAA;AACtB,OAAO,gBAAgB,CAAA;AACvB,OAAO,WAAW,CAAA;AAClB,OAAO,cAAc,CAAA;AACrB,OAAO,iBAAiB,CAAA;AAExB,MAAM,UAAU,iBAAiB;IAC/B,gEAAgE;IAChE,yEAAyE;IACzE,qEAAqE;IACrE,cAAc;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/built-in/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,mBAAmB,CAAA;AAC1B,OAAO,sBAAsB,CAAA;AAC7B,OAAO,eAAe,CAAA;AACtB,OAAO,gBAAgB,CAAA;AACvB,OAAO,WAAW,CAAA;AAClB,OAAO,mBAAmB,CAAA;AAC1B,OAAO,cAAc,CAAA;AACrB,OAAO,iBAAiB,CAAA;AAExB,MAAM,UAAU,iBAAiB;IAC/B,gEAAgE;IAChE,yEAAyE;IACzE,qEAAqE;IACrE,cAAc;AAChB,CAAC"}

package/dist/doctor/built-in/version-skew.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=version-skew.d.ts.map

package/dist/doctor/built-in/version-skew.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-skew.d.ts","sourceRoot":"","sources":["../../../src/doctor/built-in/version-skew.ts"],"names":[],"mappings":""}

package/dist/doctor/built-in/version-skew.js

@@ -0,0 +1,153 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { registerDoctorCheck } from '@rudderjs/console';
+// ── Minimal semver (just enough for @rudderjs/* sibling ranges) ──
+//
+// Real-world shapes in our manifests: `^1.16.0`, `>=2.0.0`, exact pins, and
+// `||` alternatives. Anything unparseable fails OPEN — doctor must never
+// false-fire on a range it can't read.
+function parseTriple(v) {
+    const m = /^[v\s]*(\d+)\.(\d+)\.(\d+)/.exec(v.trim().replace(/^[\^~>=<]+/, ''));
+    if (!m)
+        return null;
+    return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]) };
+}
+function compareTriples(a, b) {
+    if (a.major !== b.major)
+        return a.major - b.major;
+    if (a.minor !== b.minor)
+        return a.minor - b.minor;
+    return a.patch - b.patch;
+}
+/** One comparator (`^1.2.3`, `>=2.0.0`, `1.2.3`, …) against a version. */
+function satisfiesComparator(v, comparator) {
+    const floor = parseTriple(comparator);
+    if (!floor)
+        return true; // unreadable — fail open
+    const cmp = compareTriples(v, floor);
+    if (comparator.startsWith('^')) {
+        // Caret: same left-most non-zero component, at or above the floor.
+        if (floor.major > 0)
+            return v.major === floor.major && cmp >= 0;
+        if (floor.minor > 0)
+            return v.major === 0 && v.minor === floor.minor && cmp >= 0;
+        return cmp === 0;
+    }
+    if (comparator.startsWith('~'))
+        return v.major === floor.major && v.minor === floor.minor && cmp >= 0;
+    if (comparator.startsWith('>='))
+        return cmp >= 0;
+    if (comparator.startsWith('>'))
+        return cmp > 0;
+    if (comparator.startsWith('<='))
+        return cmp <= 0;
+    if (comparator.startsWith('<'))
+        return cmp < 0;
+    return cmp === 0; // exact pin
+}
+/** `||` alternatives of space-joined comparators (`>=1.2.0 <2 || ^3.0.0`). */
+function satisfiesRange(version, range) {
+    const v = parseTriple(version);
+    if (!v)
+        return true;
+    const r = range.trim();
+    if (r === '' || r === '*' || r === 'latest' || r === 'next' || r.startsWith('workspace:'))
+        return true;
+    return r.split('||').some((alt) => {
+        const comparators = alt.trim().split(/\s+/).filter(Boolean);
+        if (comparators.length === 0)
+            return true;
+        return comparators.every((c) => satisfiesComparator(v, c));
+    });
+}
+function readManifest(file) {
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The version of `sibling` that `fromRealDir`'s package actually loads,
+ * following Node's resolution shape across layouts:
+ *
+ *   1. its own nested `node_modules/<sibling>` (npm conflict-nesting),
+ *   2. the adjacent scope dir (pnpm virtual store puts a package's deps as
+ *      siblings: `.pnpm/<pkg>@<v>/node_modules/@rudderjs/<sibling>`; for a
+ *      hoisted top-level package this same step IS the top level),
+ *   3. the app's top-level `node_modules` (hoisted npm/yarn).
+ */
+function resolveSiblingVersion(fromRealDir, sibling) {
+    const candidates = [
+        path.join(fromRealDir, 'node_modules', sibling, 'package.json'),
+        path.resolve(fromRealDir, '..', '..', sibling, 'package.json'),
+        path.join(process.cwd(), 'node_modules', sibling, 'package.json'),
+    ];
+    for (const candidate of candidates) {
+        const manifest = readManifest(candidate);
+        if (manifest?.version)
+            return manifest.version;
+    }
+    return null;
+}
+registerDoctorCheck({
+    id: 'deps:version-skew',
+    category: 'deps',
+    title: '@rudderjs/* sibling versions in range',
+    run() {
+        const scopeDir = path.join(process.cwd(), 'node_modules', '@rudderjs');
+        let entries;
+        try {
+            entries = fs.readdirSync(scopeDir);
+        }
+        catch {
+            return { status: 'ok', message: 'no @rudderjs packages installed' };
+        }
+        const violations = [];
+        let rangesChecked = 0;
+        for (const entry of entries) {
+            let realDir;
+            try {
+                realDir = fs.realpathSync(path.join(scopeDir, entry));
+            }
+            catch {
+                continue;
+            }
+            const manifest = readManifest(path.join(realDir, 'package.json'));
+            if (!manifest?.name || !manifest.version)
+                continue;
+            const optional = manifest.peerDependenciesMeta ?? {};
+            const requirements = { ...manifest.dependencies, ...manifest.peerDependencies };
+            for (const [sibling, range] of Object.entries(requirements)) {
+                if (!sibling.startsWith('@rudderjs/'))
+                    continue;
+                if (range.startsWith('workspace:'))
+                    continue; // monorepo dev link — not an installed range
+                const installed = resolveSiblingVersion(realDir, sibling);
+                if (installed === null) {
+                    // Missing entirely: optional peers are legitimately absent; hard
+                    // deps are deps:declared-installed's finding, not a skew.
+                    void optional;
+                    continue;
+                }
+                rangesChecked++;
+                if (!satisfiesRange(installed, range)) {
+                    violations.push(`${manifest.name}@${manifest.version} requires ${sibling} ${range} — found ${installed}`);
+                }
+            }
+        }
+        if (violations.length > 0) {
+            return {
+                status: 'error',
+                message: violations.length === 1
+                    ? violations[0]
+                    : `${violations.length} sibling ranges violated (first: ${violations[0]})`,
+                fix: 'Bump the pinned version (pnpm.overrides?) so siblings satisfy their declared ranges, then reinstall',
+                detail: violations.join('\n'),
+            };
+        }
+        return { status: 'ok', message: `${rangesChecked} sibling range${rangesChecked === 1 ? '' : 's'} satisfied` };
+    },
+});
+//# sourceMappingURL=version-skew.js.map

package/dist/doctor/built-in/version-skew.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-skew.js","sourceRoot":"","sources":["../../../src/doctor/built-in/version-skew.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAA;AA8B1E,oEAAoE;AACpE,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,uCAAuC;AAEvC,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACjD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACjD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;AAC1B,CAAC;AAED,0EAA0E;AAC1E,SAAS,mBAAmB,CAAC,CAAS,EAAE,UAAkB;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA,CAAC,yBAAyB;IACjD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACpC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,mEAAmE;QACnE,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAA;QAC/D,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAA;QAChF,OAAO,GAAG,KAAK,CAAC,CAAA;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAA;IACrG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC,CAAA;IAChD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAG,OAAO,GAAG,GAAG,CAAC,CAAA;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC,CAAA;IAChD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAG,OAAO,GAAG,GAAG,CAAC,CAAA;IAC/C,OAAO,GAAG,KAAK,CAAC,CAAA,CAAC,YAAY;AAC/B,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACtB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IACtG,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACzC,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAgB,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AAChG,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,WAAmB,EAAE,OAAe;IACjE,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC;KAClE,CAAA;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,QAAQ,EAAE,OAAO;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAA;IAChD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,mBAAmB,CAAC;IAClB,EAAE,EAAQ,mBAAmB;IAC7B,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAK,uCAAuC;IACjD,GAAG;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,CAAA;QACtE,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAA;QACrE,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAA;QAC/B,IAAI,aAAa,GAAG,CAAC,CAAA;QAErB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;YACjE,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,SAAQ;YAElD,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAA;YACpD,MAAM,YAAY,GAAG,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,gBAAgB,EAAE,CAAA;YAC/E,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAQ;gBAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAQ,CAAC,6CAA6C;gBAC1F,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACzD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,iEAAiE;oBACjE,0DAA0D;oBAC1D,KAAK,QAAQ,CAAA;oBACb,SAAQ;gBACV,CAAC;gBACD,aAAa,EAAE,CAAA;gBACf,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,aAAa,OAAO,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC,CAAA;gBAC3G,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAG,OAAO;gBAChB,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;oBAC9B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE;oBAChB,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,oCAAoC,UAAU,CAAC,CAAC,CAAC,GAAG;gBAC5E,GAAG,EAAM,qGAAqG;gBAC9G,MAAM,EAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;aAC/B,CAAA;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,aAAa,iBAAiB,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,CAAA;IAC/G,CAAC;CACF,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rudderjs/cli",
-  "version": "4.14.0",
+  "version": "4.15.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -24,7 +24,7 @@
     "chalk": "^5.0.0",
     "dotenv": "^16.4.0",
     "@clack/prompts": "^1.0.0",
-    "@rudderjs/core": "^1.11.0",
+    "@rudderjs/core": "^1.12.2",
     "@rudderjs/console": "^1.4.0"
   },
   "peerDependencies": {