@santi020k/lumen 1.6.0 → 1.7.0

package/dist/registry-types.d.ts

@@ -27,6 +27,7 @@ export interface LumenRegistry {
 }
 export interface LumenRegistryLoadOptions {
     headers?: Record<string, string>;
+    maxBytes?: number;
     timeoutMs?: number;
     token?: string;
 }

package/dist/registry-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-types.d.ts","sourceRoot":"","sources":["../src/registry-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAA;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,KAAK,CAAC,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAA;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,eAAe,GAAG,eAAe,GAAG,QAAQ,CAAA;CACnD;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,iBAAiB,CAAA;AAE3E,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}
+{"version":3,"file":"registry-types.d.ts","sourceRoot":"","sources":["../src/registry-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAA;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,KAAK,CAAC,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAA;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,eAAe,GAAG,eAAe,GAAG,QAAQ,CAAA;CACnD;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,iBAAiB,CAAA;AAE3E,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,aAAa,EAAE,CAAA;AAExB,YAAY,EACV,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACzB,CAAA;AASD,eAAO,MAAM,uBAAuB,GAAI,WAAU,aAA6B,KAAG,kBAAkB,EAGnG,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC/B,MAAM,MAAM,EACZ,WAAU,aAA6B,KACtC,kBAAkB,GAAG,SAQvB,CAAA;AAmFD,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,GAAG,GAAG,EACpB,UAAS,wBAA6B,KACrC,OAAO,CAAC,aAAa,CAevB,CAAA;AAED,OAAO,EACL,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,aAAa,EAAE,CAAA;AAExB,YAAY,EACV,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACzB,CAAA;AAwBD,eAAO,MAAM,uBAAuB,GAAI,WAAU,aAA6B,KAAG,kBAAkB,EAGnG,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC/B,MAAM,MAAM,EACZ,WAAU,aAA6B,KACtC,kBAAkB,GAAG,SAQvB,CAAA;AA6JD,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,GAAG,GAAG,EACpB,UAAS,wBAA6B,KACrC,OAAO,CAAC,aAAa,CAsBvB,CAAA;AAED,OAAO,EACL,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAA"}

package/dist/registry.js

@@ -1,8 +1,17 @@
 /* eslint-disable complexity */
-import { readFile } from 'node:fs/promises';
+import { readFile, stat } from 'node:fs/promises';
 import { lumenRegistry } from './registry-data.js';
+import { isSafeRegistryFilePath } from './registry-path.js';
 export { lumenRegistry };
 const defaultRegistryTimeoutMs = 30_000;
+const defaultRegistryMaxBytes = 5 * 1024 * 1024;
+const resolvePositiveInteger = (value, fallback, name) => {
+    const resolved = value ?? fallback;
+    if (!Number.isSafeInteger(resolved) || resolved <= 0) {
+        throw new Error(`${name} must be a positive integer.`);
+    }
+    return resolved;
+};
 const normalizeRegistryEntryName = (name) => name
     .replaceAll(/([a-z0-9])([A-Z])/g, '$1-$2')
     .replaceAll(/[\s_]+/g, '-')
@@ -23,7 +32,9 @@ const isRegistryFile = (value) => {
     if (!value || typeof value !== 'object')
         return false;
     const file = value;
-    return typeof file.path === 'string' && typeof file.source === 'string';
+    return (typeof file.path === 'string' &&
+        isSafeRegistryFilePath(file.path) &&
+        typeof file.source === 'string');
 };
 const isString = (entry) => typeof entry === 'string';
 const isStringArray = (value) => Array.isArray(value) && value.every(isString);
@@ -33,7 +44,7 @@ const isRegistryItem = (value) => {
     if (!value || typeof value !== 'object')
         return false;
     const item = value;
-    return (typeof item.name === 'string' &&
+    return (typeof item.name === 'string' && item.name.trim().length > 0 &&
         typeof item.type === 'string' &&
         registryItemTypes.has(item.type) &&
         (item.components === undefined || isStringArray(item.components)) &&
@@ -43,10 +54,10 @@ const isRegistryComponent = (value) => {
     if (!value || typeof value !== 'object')
         return false;
     const component = value;
-    return (typeof component.name === 'string' &&
+    return (typeof component.name === 'string' && component.name.trim().length > 0 &&
         component.type === 'component' &&
-        typeof component.description === 'string' &&
-        typeof component.category === 'string' &&
+        typeof component.description === 'string' && component.description.trim().length > 0 &&
+        typeof component.category === 'string' && component.category.trim().length > 0 &&
         isRegistryFileArray(component.files) &&
         (component.dependencies === undefined || isStringArray(component.dependencies)));
 };
@@ -54,16 +65,53 @@ const isLumenRegistry = (value) => {
     if (!value || typeof value !== 'object')
         return false;
     const registry = value;
-    return (typeof registry.name === 'string' &&
+    return (typeof registry.name === 'string' && registry.name.trim().length > 0 &&
         typeof registry.version === 'number' &&
-        typeof registry.description === 'string' &&
+        Number.isSafeInteger(registry.version) && registry.version > 0 &&
+        typeof registry.description === 'string' && registry.description.trim().length > 0 &&
         isStringArray(registry.packages) &&
         Array.isArray(registry.items) &&
         registry.items.every(item => isRegistryItem(item)) &&
         (registry.components === undefined ||
             (Array.isArray(registry.components) && registry.components.every(component => isRegistryComponent(component)))));
 };
-const fetchRegistrySource = async (source, options) => {
+const getResponseBody = (response) => response.body;
+const readBoundedResponse = async (response, maxBytes) => {
+    const contentLength = Number(response.headers.get('content-length'));
+    if (Number.isFinite(contentLength) && contentLength > maxBytes) {
+        await response.body?.cancel();
+        throw new Error(`Lumen registry exceeds the ${maxBytes} byte limit.`);
+    }
+    const body = getResponseBody(response);
+    if (!body)
+        return '';
+    const reader = body.getReader();
+    const chunks = [];
+    let totalBytes = 0;
+    try {
+        let chunk = await reader.read();
+        while (!chunk.done) {
+            totalBytes += chunk.value.byteLength;
+            if (totalBytes > maxBytes) {
+                await reader.cancel();
+                throw new Error(`Lumen registry exceeds the ${maxBytes} byte limit.`);
+            }
+            chunks.push(chunk.value);
+            chunk = await reader.read();
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(totalBytes);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(bytes);
+};
+const fetchRegistrySource = async (source, options, maxBytes) => {
     if (options.token && source.startsWith('http://')) {
         throw new Error('Refusing to send a Lumen registry token over plain HTTP. Use an https:// registry URL.');
     }
@@ -72,19 +120,33 @@ const fetchRegistrySource = async (source, options) => {
             ...options.headers,
             ...(options.token ? { authorization: `Bearer ${options.token}` } : {})
         },
-        signal: AbortSignal.timeout(options.timeoutMs ?? defaultRegistryTimeoutMs)
+        signal: AbortSignal.timeout(resolvePositiveInteger(options.timeoutMs, defaultRegistryTimeoutMs, 'timeoutMs'))
     });
     if (!response.ok) {
         throw new Error(`Failed to load Lumen registry: ${response.status} ${response.statusText}`);
     }
-    return response.text();
+    return readBoundedResponse(response, maxBytes);
+};
+const readRegistrySource = async (source, maxBytes) => {
+    const details = await stat(source);
+    if (details.size > maxBytes) {
+        throw new Error(`Lumen registry exceeds the ${maxBytes} byte limit.`);
+    }
+    return readFile(source, 'utf8');
 };
 export const loadLumenRegistry = async (source, options = {}) => {
     const sourceValue = String(source);
+    const maxBytes = resolvePositiveInteger(options.maxBytes, defaultRegistryMaxBytes, 'maxBytes');
     const raw = sourceValue.startsWith('http://') || sourceValue.startsWith('https://') ?
-        await fetchRegistrySource(sourceValue, options) :
-        await readFile(source, 'utf8');
-    const parsed = JSON.parse(raw);
+        await fetchRegistrySource(sourceValue, options, maxBytes) :
+        await readRegistrySource(source, maxBytes);
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error('Invalid Lumen registry JSON');
+    }
     if (!isLumenRegistry(parsed)) {
         throw new Error('Invalid Lumen registry manifest');
     }

package/dist/v2-migration.d.ts

@@ -0,0 +1,29 @@
+export type LumenV2MigrationKind = 'astro-runtime-subpath' | 'react-native-datetime-subpath' | 'sonner-alias-removal' | 'visual-size-alias-removal';
+export interface LumenV2MigrationFinding {
+    column: number;
+    file: string;
+    kind: LumenV2MigrationKind;
+    line: number;
+    message: string;
+}
+export interface LumenV2SourceMigration {
+    changes: LumenV2MigrationFinding[];
+    manualReview: LumenV2MigrationFinding[];
+    source: string;
+}
+export interface LumenV2MigrationOptions {
+    apply?: boolean;
+    cwd?: string;
+}
+export interface LumenV2MigrationReport {
+    applied: boolean;
+    changedFiles: string[];
+    changes: LumenV2MigrationFinding[];
+    filesScanned: number;
+    manualReview: LumenV2MigrationFinding[];
+    root: string;
+}
+export declare const migrateLumenV2Source: (source: string, file?: string) => LumenV2SourceMigration;
+export declare const migrateLumenV2: (options?: LumenV2MigrationOptions) => Promise<LumenV2MigrationReport>;
+export declare const formatLumenV2Migration: (report: LumenV2MigrationReport) => string;
+//# sourceMappingURL=v2-migration.d.ts.map

package/dist/v2-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-migration.d.ts","sourceRoot":"","sources":["../src/v2-migration.ts"],"names":[],"mappings":"AA4CA,MAAM,MAAM,oBAAoB,GAC5B,uBAAuB,GACzB,+BAA+B,GAC/B,sBAAsB,GACtB,2BAA2B,CAAA;AAE7B,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,oBAAoB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,uBAAuB,EAAE,CAAA;IAClC,YAAY,EAAE,uBAAuB,EAAE,CAAA;IACvC,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,EAAE,uBAAuB,EAAE,CAAA;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,uBAAuB,EAAE,CAAA;IACvC,IAAI,EAAE,MAAM,CAAA;CACb;AA8nCD,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,aAAiB,KAChB,sBA4DF,CAAA;AAqBD,eAAO,MAAM,cAAc,GACzB,UAAS,uBAA4B,KACpC,OAAO,CAAC,sBAAsB,CAgChC,CAAA;AAED,eAAO,MAAM,sBAAsB,GACjC,QAAQ,sBAAsB,KAC7B,MA0BF,CAAA"}