@servicetitan/install 36.1.2-canary.5 → 36.1.2-canary.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/index.js +31 -11
- package/dist/cli/index.js.map +1 -1
- package/dist/cli/install.d.ts +5 -0
- package/dist/cli/install.d.ts.map +1 -1
- package/dist/cli/install.js +58 -13
- package/dist/cli/install.js.map +1 -1
- package/dist/package-manager/__mocks__/index.d.ts +2 -0
- package/dist/package-manager/__mocks__/index.d.ts.map +1 -0
- package/dist/package-manager/__mocks__/index.js +18 -0
- package/dist/package-manager/__mocks__/index.js.map +1 -0
- package/dist/package-manager/__mocks__/mock-package-manager.d.ts +1 -2
- package/dist/package-manager/__mocks__/mock-package-manager.d.ts.map +1 -1
- package/dist/package-manager/__mocks__/mock-package-manager.js +34 -0
- package/dist/package-manager/__mocks__/mock-package-manager.js.map +1 -0
- package/dist/package-manager/index.d.ts +1 -1
- package/dist/package-manager/index.d.ts.map +1 -1
- package/dist/package-manager/index.js.map +1 -1
- package/dist/package-manager/npm-package-manager.d.ts +4 -1
- package/dist/package-manager/npm-package-manager.d.ts.map +1 -1
- package/dist/package-manager/npm-package-manager.js +69 -5
- package/dist/package-manager/npm-package-manager.js.map +1 -1
- package/dist/package-manager/package-manager.d.ts +4 -3
- package/dist/package-manager/package-manager.d.ts.map +1 -1
- package/dist/package-manager/package-manager.js +0 -8
- package/dist/package-manager/package-manager.js.map +1 -1
- package/dist/package-manager/pnpm-package-manager.d.ts +2 -1
- package/dist/package-manager/pnpm-package-manager.d.ts.map +1 -1
- package/dist/package-manager/pnpm-package-manager.js +18 -11
- package/dist/package-manager/pnpm-package-manager.js.map +1 -1
- package/dist/package-manager/utils/index.d.ts +5 -0
- package/dist/package-manager/utils/index.d.ts.map +1 -0
- package/dist/package-manager/utils/index.js +23 -0
- package/dist/package-manager/utils/index.js.map +1 -0
- package/dist/package-manager/utils/log-allowed-scripts.d.ts +3 -0
- package/dist/package-manager/utils/log-allowed-scripts.d.ts.map +1 -0
- package/dist/package-manager/utils/log-allowed-scripts.js +26 -0
- package/dist/package-manager/utils/log-allowed-scripts.js.map +1 -0
- package/dist/package-manager/utils/parse-allow-scripts.d.ts +2 -0
- package/dist/package-manager/utils/parse-allow-scripts.d.ts.map +1 -0
- package/dist/package-manager/utils/parse-allow-scripts.js +15 -0
- package/dist/package-manager/utils/parse-allow-scripts.js.map +1 -0
- package/dist/package-manager/utils/resolve-allow-scripts.d.ts +4 -0
- package/dist/package-manager/utils/resolve-allow-scripts.d.ts.map +1 -0
- package/dist/package-manager/utils/resolve-allow-scripts.js +36 -0
- package/dist/package-manager/utils/resolve-allow-scripts.js.map +1 -0
- package/dist/package-manager/utils/should-ignore-scripts.d.ts +3 -0
- package/dist/package-manager/utils/should-ignore-scripts.d.ts.map +1 -0
- package/dist/package-manager/utils/should-ignore-scripts.js +21 -0
- package/dist/package-manager/utils/should-ignore-scripts.js.map +1 -0
- package/dist/utils/get-packages-with-install-scripts.d.ts +8 -0
- package/dist/utils/get-packages-with-install-scripts.d.ts.map +1 -0
- package/dist/utils/get-packages-with-install-scripts.js +34 -0
- package/dist/utils/get-packages-with-install-scripts.js.map +1 -0
- package/dist/utils/has-lockfile-changed.d.ts +2 -0
- package/dist/utils/has-lockfile-changed.d.ts.map +1 -0
- package/dist/utils/has-lockfile-changed.js +27 -0
- package/dist/utils/has-lockfile-changed.js.map +1 -0
- package/dist/utils/index.d.ts +3 -0
- package/dist/utils/index.d.ts.map +1 -1
- package/dist/utils/index.js +3 -0
- package/dist/utils/index.js.map +1 -1
- package/dist/utils/warn-untrusted-install-scripts.d.ts +6 -0
- package/dist/utils/warn-untrusted-install-scripts.d.ts.map +1 -0
- package/dist/utils/warn-untrusted-install-scripts.js +52 -0
- package/dist/utils/warn-untrusted-install-scripts.js.map +1 -0
- package/package.json +9 -1
- package/src/cli/index.ts +26 -8
- package/src/cli/install.ts +16 -11
- package/src/package-manager/__mocks__/index.ts +1 -0
- package/src/package-manager/__mocks__/mock-package-manager.ts +1 -4
- package/src/package-manager/index.ts +6 -1
- package/src/package-manager/npm-package-manager.ts +84 -9
- package/src/package-manager/package-manager.ts +5 -10
- package/src/package-manager/pnpm-package-manager.ts +19 -7
- package/src/package-manager/utils/index.ts +4 -0
- package/src/package-manager/utils/log-allowed-scripts.ts +17 -0
- package/src/package-manager/utils/parse-allow-scripts.ts +6 -0
- package/src/package-manager/utils/resolve-allow-scripts.ts +11 -0
- package/src/package-manager/utils/should-ignore-scripts.ts +11 -0
- package/src/utils/get-packages-with-install-scripts.ts +24 -0
- package/src/utils/has-lockfile-changed.ts +10 -0
- package/src/utils/index.ts +3 -0
- package/src/utils/warn-untrusted-install-scripts.ts +54 -0
package/dist/cli/index.js
CHANGED
|
@@ -6,9 +6,19 @@ const _util = require("util");
|
|
|
6
6
|
const _utils = require("../utils");
|
|
7
7
|
const _install = require("./install");
|
|
8
8
|
const args = function getArgs() {
|
|
9
|
-
const {
|
|
9
|
+
const { tokens } = (0, _util.parseArgs)({
|
|
10
10
|
args: process.argv.slice(2),
|
|
11
11
|
options: {
|
|
12
|
+
'allow-scripts': {
|
|
13
|
+
type: 'string',
|
|
14
|
+
multiple: true
|
|
15
|
+
},
|
|
16
|
+
'no-allow-scripts': {
|
|
17
|
+
type: 'boolean'
|
|
18
|
+
},
|
|
19
|
+
'allow-all-scripts': {
|
|
20
|
+
type: 'boolean'
|
|
21
|
+
},
|
|
12
22
|
'fix': {
|
|
13
23
|
type: 'boolean'
|
|
14
24
|
},
|
|
@@ -24,21 +34,31 @@ const args = function getArgs() {
|
|
|
24
34
|
},
|
|
25
35
|
tokens: true
|
|
26
36
|
});
|
|
37
|
+
const result = {};
|
|
27
38
|
tokens.forEach((token)=>{
|
|
28
39
|
if (token.kind === 'option') {
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
40
|
+
switch(token.name){
|
|
41
|
+
case 'allow-scripts':
|
|
42
|
+
if (!Array.isArray(result.allowScripts)) {
|
|
43
|
+
result.allowScripts = [];
|
|
44
|
+
}
|
|
45
|
+
result.allowScripts.push(token.value);
|
|
46
|
+
break;
|
|
47
|
+
case 'no-allow-scripts':
|
|
48
|
+
result.allowScripts = false;
|
|
49
|
+
break;
|
|
50
|
+
case 'allow-all-scripts':
|
|
51
|
+
result.allowScripts = true;
|
|
52
|
+
break;
|
|
53
|
+
case 'no-token':
|
|
54
|
+
result.token = false;
|
|
55
|
+
break;
|
|
56
|
+
default:
|
|
57
|
+
result[token.name] = true;
|
|
36
58
|
}
|
|
37
59
|
}
|
|
38
60
|
});
|
|
39
|
-
return
|
|
40
|
-
...values
|
|
41
|
-
};
|
|
61
|
+
return result;
|
|
42
62
|
}();
|
|
43
63
|
(0, _utils.debug)('install:args', {
|
|
44
64
|
args
|
package/dist/cli/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/cli/index.ts"],"sourcesContent":["import { parseArgs } from 'util';\nimport { debug } from '../utils';\nimport { Install } from './install';\n\nconst args = (function getArgs() {\n const {
|
|
1
|
+
{"version":3,"sources":["../../src/cli/index.ts"],"sourcesContent":["import { parseArgs } from 'util';\nimport { debug } from '../utils';\nimport type { Args } from './install';\nimport { Install } from './install';\n\nconst args = (function getArgs() {\n const { tokens } = parseArgs({\n args: process.argv.slice(2),\n options: {\n 'allow-scripts': { type: 'string', multiple: true },\n 'no-allow-scripts': { type: 'boolean' },\n 'allow-all-scripts': { type: 'boolean' },\n 'fix': { type: 'boolean' },\n 'quiet': { type: 'boolean' },\n 'token': { type: 'boolean' },\n 'no-token': { type: 'boolean' },\n },\n tokens: true,\n });\n\n const result: Args = {};\n\n tokens.forEach(token => {\n if (token.kind === 'option') {\n switch (token.name) {\n case 'allow-scripts':\n if (!Array.isArray(result.allowScripts)) {\n result.allowScripts = [];\n }\n result.allowScripts.push(token.value);\n break;\n case 'no-allow-scripts':\n result.allowScripts = false;\n break;\n case 'allow-all-scripts':\n result.allowScripts = true;\n break;\n case 'no-token':\n result.token = false;\n break;\n default:\n result[token.name] = true;\n }\n }\n });\n\n return result;\n})();\n\ndebug('install:args', { args });\n\nnew Install(args).execute();\n"],"names":["args","getArgs","tokens","parseArgs","process","argv","slice","options","type","multiple","result","forEach","token","kind","name","Array","isArray","allowScripts","push","value","debug","Install","execute"],"mappings":";;;;sBAA0B;uBACJ;yBAEE;AAExB,MAAMA,OAAO,AAAC,SAASC;IACnB,MAAM,EAAEC,MAAM,EAAE,GAAGC,IAAAA,eAAS,EAAC;QACzBH,MAAMI,QAAQC,IAAI,CAACC,KAAK,CAAC;QACzBC,SAAS;YACL,iBAAiB;gBAAEC,MAAM;gBAAUC,UAAU;YAAK;YAClD,oBAAoB;gBAAED,MAAM;YAAU;YACtC,qBAAqB;gBAAEA,MAAM;YAAU;YACvC,OAAO;gBAAEA,MAAM;YAAU;YACzB,SAAS;gBAAEA,MAAM;YAAU;YAC3B,SAAS;gBAAEA,MAAM;YAAU;YAC3B,YAAY;gBAAEA,MAAM;YAAU;QAClC;QACAN,QAAQ;IACZ;IAEA,MAAMQ,SAAe,CAAC;IAEtBR,OAAOS,OAAO,CAACC,CAAAA;QACX,IAAIA,MAAMC,IAAI,KAAK,UAAU;YACzB,OAAQD,MAAME,IAAI;gBACd,KAAK;oBACD,IAAI,CAACC,MAAMC,OAAO,CAACN,OAAOO,YAAY,GAAG;wBACrCP,OAAOO,YAAY,GAAG,EAAE;oBAC5B;oBACAP,OAAOO,YAAY,CAACC,IAAI,CAACN,MAAMO,KAAK;oBACpC;gBACJ,KAAK;oBACDT,OAAOO,YAAY,GAAG;oBACtB;gBACJ,KAAK;oBACDP,OAAOO,YAAY,GAAG;oBACtB;gBACJ,KAAK;oBACDP,OAAOE,KAAK,GAAG;oBACf;gBACJ;oBACIF,MAAM,CAACE,MAAME,IAAI,CAAC,GAAG;YAC7B;QACJ;IACJ;IAEA,OAAOJ;AACX;AAEAU,IAAAA,YAAK,EAAC,gBAAgB;IAAEpB;AAAK;AAE7B,IAAIqB,gBAAO,CAACrB,MAAMsB,OAAO"}
|
package/dist/cli/install.d.ts
CHANGED
|
@@ -1,14 +1,19 @@
|
|
|
1
|
+
import type { AllowScripts } from '../package-manager';
|
|
1
2
|
export interface Args {
|
|
3
|
+
allowScripts?: AllowScripts;
|
|
2
4
|
fix?: boolean;
|
|
3
5
|
quiet?: boolean;
|
|
4
6
|
token?: boolean;
|
|
5
7
|
}
|
|
6
8
|
export declare class Install {
|
|
9
|
+
#private;
|
|
7
10
|
args: Args;
|
|
8
11
|
constructor(args: Args);
|
|
9
12
|
execute(): void;
|
|
10
13
|
private configureNpmToken;
|
|
11
14
|
private fetchNpmToken;
|
|
12
15
|
private installPackages;
|
|
16
|
+
private get packageManager();
|
|
17
|
+
private log;
|
|
13
18
|
}
|
|
14
19
|
//# sourceMappingURL=install.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASvD,MAAM,WAAW,IAAI;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,OAAO;;IAChB,IAAI,EAAE,IAAI,CAAC;gBAGC,IAAI,EAAE,IAAI;IAItB,OAAO;IAOP,OAAO,CAAC,iBAAiB;IAwCzB,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,eAAe;IAUvB,OAAO,KAAK,cAAc,GAEzB;IAED,OAAO,CAAC,GAAG;CAKd"}
|
package/dist/cli/install.js
CHANGED
|
@@ -13,6 +13,46 @@ const _os = /*#__PURE__*/ _interop_require_default(require("os"));
|
|
|
13
13
|
const _path = /*#__PURE__*/ _interop_require_default(require("path"));
|
|
14
14
|
const _packagemanager = require("../package-manager");
|
|
15
15
|
const _utils = require("../utils");
|
|
16
|
+
function _check_private_redeclaration(obj, privateCollection) {
|
|
17
|
+
if (privateCollection.has(obj)) {
|
|
18
|
+
throw new TypeError("Cannot initialize the same private elements twice on an object");
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
function _class_apply_descriptor_get(receiver, descriptor) {
|
|
22
|
+
if (descriptor.get) {
|
|
23
|
+
return descriptor.get.call(receiver);
|
|
24
|
+
}
|
|
25
|
+
return descriptor.value;
|
|
26
|
+
}
|
|
27
|
+
function _class_apply_descriptor_set(receiver, descriptor, value) {
|
|
28
|
+
if (descriptor.set) {
|
|
29
|
+
descriptor.set.call(receiver, value);
|
|
30
|
+
} else {
|
|
31
|
+
if (!descriptor.writable) {
|
|
32
|
+
throw new TypeError("attempted to set read only private field");
|
|
33
|
+
}
|
|
34
|
+
descriptor.value = value;
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
function _class_extract_field_descriptor(receiver, privateMap, action) {
|
|
38
|
+
if (!privateMap.has(receiver)) {
|
|
39
|
+
throw new TypeError("attempted to " + action + " private field on non-instance");
|
|
40
|
+
}
|
|
41
|
+
return privateMap.get(receiver);
|
|
42
|
+
}
|
|
43
|
+
function _class_private_field_get(receiver, privateMap) {
|
|
44
|
+
var descriptor = _class_extract_field_descriptor(receiver, privateMap, "get");
|
|
45
|
+
return _class_apply_descriptor_get(receiver, descriptor);
|
|
46
|
+
}
|
|
47
|
+
function _class_private_field_init(obj, privateMap, value) {
|
|
48
|
+
_check_private_redeclaration(obj, privateMap);
|
|
49
|
+
privateMap.set(obj, value);
|
|
50
|
+
}
|
|
51
|
+
function _class_private_field_set(receiver, privateMap, value) {
|
|
52
|
+
var descriptor = _class_extract_field_descriptor(receiver, privateMap, "set");
|
|
53
|
+
_class_apply_descriptor_set(receiver, descriptor, value);
|
|
54
|
+
return value;
|
|
55
|
+
}
|
|
16
56
|
function _define_property(obj, key, value) {
|
|
17
57
|
if (key in obj) {
|
|
18
58
|
Object.defineProperty(obj, key, {
|
|
@@ -35,11 +75,10 @@ const REPO_NAME = 'frontend-dev-config';
|
|
|
35
75
|
const AUTH_TOKEN_KEY = '//registry.npmjs.org/:_authToken';
|
|
36
76
|
const AUTH_TOKEN_REGEX = /^\/\/registry\.npmjs\.org\/:_authToken=\s*(?<authToken>.+)/m;
|
|
37
77
|
const ENVIRONMENT_VARIABLE_REGEX = /\${(?<environmentVariable>[^}]+)}/;
|
|
78
|
+
var _packageManager = /*#__PURE__*/ new WeakMap();
|
|
38
79
|
class Install {
|
|
39
80
|
execute() {
|
|
40
|
-
|
|
41
|
-
console.log(`install cli v${(0, _utils.getVersion)()}`);
|
|
42
|
-
}
|
|
81
|
+
this.log(`install cli v${(0, _utils.getVersion)()}`);
|
|
43
82
|
const env = this.configureNpmToken();
|
|
44
83
|
this.installPackages(env);
|
|
45
84
|
}
|
|
@@ -49,9 +88,7 @@ class Install {
|
|
|
49
88
|
if ((0, _utils.isCI)() || this.args.fix || this.args.token === false) {
|
|
50
89
|
return;
|
|
51
90
|
}
|
|
52
|
-
|
|
53
|
-
console.log('Configuring NPM token ...');
|
|
54
|
-
}
|
|
91
|
+
this.log('Configuring NPM token ...');
|
|
55
92
|
if (this.args.token !== true) {
|
|
56
93
|
if ((0, _utils.npmWhoAmI)() === 'st-team') {
|
|
57
94
|
return;
|
|
@@ -134,19 +171,27 @@ class Install {
|
|
|
134
171
|
if (this.args.token) {
|
|
135
172
|
return;
|
|
136
173
|
}
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
console.log(`Running ${packageManager.command} install`);
|
|
140
|
-
}
|
|
141
|
-
packageManager.installPackages({
|
|
142
|
-
fix: this.args.fix
|
|
143
|
-
}, {
|
|
174
|
+
this.log(`Running ${this.packageManager.command} install`);
|
|
175
|
+
this.packageManager.installPackages(this.args, {
|
|
144
176
|
env,
|
|
145
177
|
stdio: 'inherit'
|
|
146
178
|
});
|
|
147
179
|
}
|
|
180
|
+
get packageManager() {
|
|
181
|
+
var _class_private_field_get1;
|
|
182
|
+
return _class_private_field_set(this, _packageManager, (_class_private_field_get1 = _class_private_field_get(this, _packageManager)) !== null && _class_private_field_get1 !== void 0 ? _class_private_field_get1 : (0, _packagemanager.getPackageManager)());
|
|
183
|
+
}
|
|
184
|
+
log(message) {
|
|
185
|
+
if (!this.args.quiet) {
|
|
186
|
+
console.log(message);
|
|
187
|
+
}
|
|
188
|
+
}
|
|
148
189
|
constructor(args){
|
|
149
190
|
_define_property(this, "args", void 0);
|
|
191
|
+
_class_private_field_init(this, _packageManager, {
|
|
192
|
+
writable: true,
|
|
193
|
+
value: void 0
|
|
194
|
+
});
|
|
150
195
|
this.args = args;
|
|
151
196
|
}
|
|
152
197
|
}
|
package/dist/cli/install.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/cli/install.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport { getPackageManager } from '../package-manager';\nimport { debug, getVersion, gitCloneRepo, isCI, npmWhoAmI, readJson, runCommand } from '../utils';\n\nconst REPO_NAME = 'frontend-dev-config';\nconst AUTH_TOKEN_KEY = '//registry.npmjs.org/:_authToken';\nconst AUTH_TOKEN_REGEX = /^\\/\\/registry\\.npmjs\\.org\\/:_authToken=\\s*(?<authToken>.+)/m;\nconst ENVIRONMENT_VARIABLE_REGEX = /\\${(?<environmentVariable>[^}]+)}/;\n\nexport interface Args {\n fix?: boolean;\n quiet?: boolean;\n token?: boolean;\n}\n\nexport class Install {\n args: Args;\n\n constructor(args: Args) {\n this.args = args;\n }\n\n execute() {\n
|
|
1
|
+
{"version":3,"sources":["../../src/cli/install.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport type { AllowScripts } from '../package-manager';\nimport { getPackageManager, PackageManager } from '../package-manager';\nimport { debug, getVersion, gitCloneRepo, isCI, npmWhoAmI, readJson, runCommand } from '../utils';\n\nconst REPO_NAME = 'frontend-dev-config';\nconst AUTH_TOKEN_KEY = '//registry.npmjs.org/:_authToken';\nconst AUTH_TOKEN_REGEX = /^\\/\\/registry\\.npmjs\\.org\\/:_authToken=\\s*(?<authToken>.+)/m;\nconst ENVIRONMENT_VARIABLE_REGEX = /\\${(?<environmentVariable>[^}]+)}/;\n\nexport interface Args {\n allowScripts?: AllowScripts;\n fix?: boolean;\n quiet?: boolean;\n token?: boolean;\n}\n\nexport class Install {\n args: Args;\n #packageManager: PackageManager | undefined;\n\n constructor(args: Args) {\n this.args = args;\n }\n\n execute() {\n this.log(`install cli v${getVersion()}`);\n\n const env = this.configureNpmToken();\n this.installPackages(env);\n }\n\n private configureNpmToken() {\n if (isCI() || this.args.fix || this.args.token === false) {\n return;\n }\n\n this.log('Configuring NPM token ...');\n\n if (this.args.token !== true) {\n if (npmWhoAmI() === 'st-team') {\n return;\n }\n }\n\n const token = this.fetchNpmToken();\n if (!token) {\n return;\n }\n\n runCommand('npm', ['config', 'set', `${AUTH_TOKEN_KEY}=${token}`]);\n\n if (!fs.existsSync('.npmrc')) {\n return;\n }\n\n const npmrc = fs.readFileSync('.npmrc', 'utf-8');\n const { authToken } = AUTH_TOKEN_REGEX.exec(npmrc)?.groups ?? {};\n debug({ authToken });\n if (!authToken) {\n return;\n }\n\n const { environmentVariable } = ENVIRONMENT_VARIABLE_REGEX.exec(authToken)?.groups ?? {};\n debug({ environmentVariable });\n if (environmentVariable) {\n return { [environmentVariable]: token };\n }\n\n runCommand('npm', ['config', 'delete', '--location=project', AUTH_TOKEN_KEY]);\n }\n\n private fetchNpmToken() {\n const tempDirPath = fs.mkdtempSync(path.join(os.tmpdir(), 'st-install-'));\n try {\n if (!gitCloneRepo({ destination: tempDirPath, name: REPO_NAME })) {\n throw new Error(`could not clone servicetitan/${REPO_NAME}`);\n }\n\n const npmJson = readJson(path.join(tempDirPath, '.npm.json'));\n debug('install:fetch-npm-token', { npmJson });\n\n if (!((npmJson && typeof npmJson === 'object') || Array.isArray(npmJson))) {\n throw new Error('.npm.json is not an object');\n }\n\n const { readOnlyToken: authToken } = npmJson;\n if (!authToken) {\n throw new Error('.npm.json does not contain auth token');\n }\n\n if (typeof authToken !== 'string') {\n throw new Error('.npm.json auth token is not a string');\n }\n\n return Buffer.from(authToken, 'base64').toString('utf-8');\n } catch (e) {\n console.warn(String(e));\n } finally {\n try {\n fs.rmSync(tempDirPath, { recursive: true, force: true });\n } catch {\n // ignore\n }\n }\n }\n\n private installPackages(env?: Record<string, string>) {\n if (this.args.token) {\n return;\n }\n\n this.log(`Running ${this.packageManager.command} install`);\n\n this.packageManager.installPackages(this.args, { env, stdio: 'inherit' });\n }\n\n private get packageManager() {\n return (this.#packageManager ??= getPackageManager());\n }\n\n private log(message: string) {\n if (!this.args.quiet) {\n console.log(message);\n }\n }\n}\n"],"names":["Install","REPO_NAME","AUTH_TOKEN_KEY","AUTH_TOKEN_REGEX","ENVIRONMENT_VARIABLE_REGEX","execute","log","getVersion","env","configureNpmToken","installPackages","isCI","args","fix","token","npmWhoAmI","fetchNpmToken","runCommand","fs","existsSync","npmrc","readFileSync","authToken","exec","groups","debug","environmentVariable","tempDirPath","mkdtempSync","path","join","os","tmpdir","gitCloneRepo","destination","name","Error","npmJson","readJson","Array","isArray","readOnlyToken","Buffer","from","toString","e","console","warn","String","rmSync","recursive","force","packageManager","command","stdio","getPackageManager","message","quiet"],"mappings":"AAAA,6BAA6B;;;;+BAoBhBA;;;eAAAA;;;2DAnBE;2DACA;6DACE;gCAEiC;uBACqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEvF,MAAMC,YAAY;AAClB,MAAMC,iBAAiB;AACvB,MAAMC,mBAAmB;AACzB,MAAMC,6BAA6B;IAW/B;AAFG,MAAMJ;IAQTK,UAAU;QACN,IAAI,CAACC,GAAG,CAAC,CAAC,aAAa,EAAEC,IAAAA,iBAAU,KAAI;QAEvC,MAAMC,MAAM,IAAI,CAACC,iBAAiB;QAClC,IAAI,CAACC,eAAe,CAACF;IACzB;IAEQC,oBAAoB;;YAyBFN,wBAMUC;QA9BhC,IAAIO,IAAAA,WAAI,OAAM,IAAI,CAACC,IAAI,CAACC,GAAG,IAAI,IAAI,CAACD,IAAI,CAACE,KAAK,KAAK,OAAO;YACtD;QACJ;QAEA,IAAI,CAACR,GAAG,CAAC;QAET,IAAI,IAAI,CAACM,IAAI,CAACE,KAAK,KAAK,MAAM;YAC1B,IAAIC,IAAAA,gBAAS,QAAO,WAAW;gBAC3B;YACJ;QACJ;QAEA,MAAMD,QAAQ,IAAI,CAACE,aAAa;QAChC,IAAI,CAACF,OAAO;YACR;QACJ;QAEAG,IAAAA,iBAAU,EAAC,OAAO;YAAC;YAAU;YAAO,GAAGf,eAAe,CAAC,EAAEY,OAAO;SAAC;QAEjE,IAAI,CAACI,WAAE,CAACC,UAAU,CAAC,WAAW;YAC1B;QACJ;QAEA,MAAMC,QAAQF,WAAE,CAACG,YAAY,CAAC,UAAU;QACxC,MAAM,EAAEC,SAAS,EAAE,YAAGnB,yBAAAA,iBAAiBoB,IAAI,CAACH,oBAAtBjB,6CAAAA,uBAA8BqB,MAAM,uCAAI,CAAC;QAC/DC,IAAAA,YAAK,EAAC;YAAEH;QAAU;QAClB,IAAI,CAACA,WAAW;YACZ;QACJ;QAEA,MAAM,EAAEI,mBAAmB,EAAE,aAAGtB,mCAAAA,2BAA2BmB,IAAI,CAACD,wBAAhClB,uDAAAA,iCAA4CoB,MAAM,yCAAI,CAAC;QACvFC,IAAAA,YAAK,EAAC;YAAEC;QAAoB;QAC5B,IAAIA,qBAAqB;YACrB,OAAO;gBAAE,CAACA,oBAAoB,EAAEZ;YAAM;QAC1C;QAEAG,IAAAA,iBAAU,EAAC,OAAO;YAAC;YAAU;YAAU;YAAsBf;SAAe;IAChF;IAEQc,gBAAgB;QACpB,MAAMW,cAAcT,WAAE,CAACU,WAAW,CAACC,aAAI,CAACC,IAAI,CAACC,WAAE,CAACC,MAAM,IAAI;QAC1D,IAAI;YACA,IAAI,CAACC,IAAAA,mBAAY,EAAC;gBAAEC,aAAaP;gBAAaQ,MAAMlC;YAAU,IAAI;gBAC9D,MAAM,IAAImC,MAAM,CAAC,6BAA6B,EAAEnC,WAAW;YAC/D;YAEA,MAAMoC,UAAUC,IAAAA,eAAQ,EAACT,aAAI,CAACC,IAAI,CAACH,aAAa;YAChDF,IAAAA,YAAK,EAAC,2BAA2B;gBAAEY;YAAQ;YAE3C,IAAI,CAAE,CAAA,AAACA,WAAW,OAAOA,YAAY,YAAaE,MAAMC,OAAO,CAACH,QAAO,GAAI;gBACvE,MAAM,IAAID,MAAM;YACpB;YAEA,MAAM,EAAEK,eAAenB,SAAS,EAAE,GAAGe;YACrC,IAAI,CAACf,WAAW;gBACZ,MAAM,IAAIc,MAAM;YACpB;YAEA,IAAI,OAAOd,cAAc,UAAU;gBAC/B,MAAM,IAAIc,MAAM;YACpB;YAEA,OAAOM,OAAOC,IAAI,CAACrB,WAAW,UAAUsB,QAAQ,CAAC;QACrD,EAAE,OAAOC,GAAG;YACRC,QAAQC,IAAI,CAACC,OAAOH;QACxB,SAAU;YACN,IAAI;gBACA3B,WAAE,CAAC+B,MAAM,CAACtB,aAAa;oBAAEuB,WAAW;oBAAMC,OAAO;gBAAK;YAC1D,EAAE,eAAM;YACJ,SAAS;YACb;QACJ;IACJ;IAEQzC,gBAAgBF,GAA4B,EAAE;QAClD,IAAI,IAAI,CAACI,IAAI,CAACE,KAAK,EAAE;YACjB;QACJ;QAEA,IAAI,CAACR,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC8C,cAAc,CAACC,OAAO,CAAC,QAAQ,CAAC;QAEzD,IAAI,CAACD,cAAc,CAAC1C,eAAe,CAAC,IAAI,CAACE,IAAI,EAAE;YAAEJ;YAAK8C,OAAO;QAAU;IAC3E;IAEA,IAAYF,iBAAiB;;QACzB,sCAAa,uEAAL,IAAI,EAAC,iGAAoBG,IAAAA,iCAAiB;IACtD;IAEQjD,IAAIkD,OAAe,EAAE;QACzB,IAAI,CAAC,IAAI,CAAC5C,IAAI,CAAC6C,KAAK,EAAE;YAClBX,QAAQxC,GAAG,CAACkD;QAChB;IACJ;IAxGA,YAAY5C,IAAU,CAAE;QAHxBA,uBAAAA,QAAAA,KAAAA;QACA,gCAAA;;mBAAA,KAAA;;QAGI,IAAI,CAACA,IAAI,GAAGA;IAChB;AAuGJ"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/package-manager/__mocks__/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./mock-package-manager"), exports);
|
|
18
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/package-manager/__mocks__/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC"}
|
|
@@ -3,11 +3,10 @@ import type { DeclaredVersionQuery, ResolvedVersionQuery } from '../package-mana
|
|
|
3
3
|
export declare class MockPackageManager extends PackageManager {
|
|
4
4
|
readonly command = "test";
|
|
5
5
|
readonly lockFileName = "test-lock.json";
|
|
6
|
-
readonly installArgs: string[];
|
|
7
6
|
clearCache(): void;
|
|
8
7
|
getDeclaredVersion(_query: DeclaredVersionQuery): string | undefined;
|
|
9
8
|
getResolvedVersion(_query: ResolvedVersionQuery): string | undefined;
|
|
10
|
-
|
|
9
|
+
installPackages(): void;
|
|
11
10
|
protected parseLockFile(): unknown;
|
|
12
11
|
}
|
|
13
12
|
//# sourceMappingURL=mock-package-manager.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mock-package-manager.d.ts","sourceRoot":"","sources":["../../../src/package-manager/__mocks__/mock-package-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAErF,qBAAa,kBAAmB,SAAQ,cAAc;IAClD,QAAQ,CAAC,OAAO,UAAU;IAC1B,QAAQ,CAAC,YAAY,oBAAoB;
|
|
1
|
+
{"version":3,"file":"mock-package-manager.d.ts","sourceRoot":"","sources":["../../../src/package-manager/__mocks__/mock-package-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAErF,qBAAa,kBAAmB,SAAQ,cAAc;IAClD,QAAQ,CAAC,OAAO,UAAU;IAC1B,QAAQ,CAAC,YAAY,oBAAoB;IAEzC,UAAU;IAEV,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAIpE,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAIpE,eAAe;IAEf,SAAS,CAAC,aAAa,IAAI,OAAO;CAGrC"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.MockPackageManager = void 0;
|
|
4
|
+
const package_manager_1 = require("../../package-manager");
|
|
5
|
+
class MockPackageManager extends package_manager_1.PackageManager {
|
|
6
|
+
constructor() {
|
|
7
|
+
super(...arguments);
|
|
8
|
+
Object.defineProperty(this, "command", {
|
|
9
|
+
enumerable: true,
|
|
10
|
+
configurable: true,
|
|
11
|
+
writable: true,
|
|
12
|
+
value: 'test'
|
|
13
|
+
});
|
|
14
|
+
Object.defineProperty(this, "lockFileName", {
|
|
15
|
+
enumerable: true,
|
|
16
|
+
configurable: true,
|
|
17
|
+
writable: true,
|
|
18
|
+
value: 'test-lock.json'
|
|
19
|
+
});
|
|
20
|
+
}
|
|
21
|
+
clearCache() { }
|
|
22
|
+
getDeclaredVersion(_query) {
|
|
23
|
+
return undefined;
|
|
24
|
+
}
|
|
25
|
+
getResolvedVersion(_query) {
|
|
26
|
+
return undefined;
|
|
27
|
+
}
|
|
28
|
+
installPackages() { }
|
|
29
|
+
parseLockFile() {
|
|
30
|
+
return undefined;
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
exports.MockPackageManager = MockPackageManager;
|
|
34
|
+
//# sourceMappingURL=mock-package-manager.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"mock-package-manager.js","sourceRoot":"","sources":["../../../src/package-manager/__mocks__/mock-package-manager.ts"],"names":[],"mappings":";;;AAAA,2DAAuD;AAGvD,MAAa,kBAAmB,SAAQ,gCAAc;IAAtD;;QACa;;;;mBAAU,MAAM;WAAC;QACjB;;;;mBAAe,gBAAgB;WAAC;IAiB7C,CAAC;IAfG,UAAU,KAAI,CAAC;IAEf,kBAAkB,CAAC,MAA4B;QAC3C,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,kBAAkB,CAAC,MAA4B;QAC3C,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,eAAe,KAAI,CAAC;IAEV,aAAa;QACnB,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AAnBD,gDAmBC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
export { getPackageManager } from './get-package-manager';
|
|
2
2
|
export { PackageManager } from './package-manager';
|
|
3
|
-
export type { DeclaredVersionQuery, ResolvedVersionQuery } from './package-manager';
|
|
3
|
+
export type { AllowScripts, DeclaredVersionQuery, InstallArgs, ResolvedVersionQuery, } from './package-manager';
|
|
4
4
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/package-manager/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/package-manager/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EACR,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,oBAAoB,GACvB,MAAM,mBAAmB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/package-manager/index.ts"],"sourcesContent":["export { getPackageManager } from './get-package-manager';\nexport { PackageManager } from './package-manager';\nexport type {
|
|
1
|
+
{"version":3,"sources":["../../src/package-manager/index.ts"],"sourcesContent":["export { getPackageManager } from './get-package-manager';\nexport { PackageManager } from './package-manager';\nexport type {\n AllowScripts,\n DeclaredVersionQuery,\n InstallArgs,\n ResolvedVersionQuery,\n} from './package-manager';\n"],"names":["PackageManager","getPackageManager"],"mappings":";;;;;;;;;;;QACSA;eAAAA,8BAAc;;QADdC;eAAAA,oCAAiB;;;mCAAQ;gCACH"}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { runCommand } from '../utils';
|
|
1
2
|
import type { DeclaredVersionQuery, InstallArgs, ResolvedVersionQuery } from './package-manager';
|
|
2
3
|
import { PackageManager } from './package-manager';
|
|
3
4
|
interface NpmLockFileEntry {
|
|
@@ -14,7 +15,7 @@ export declare class NpmPackageManager extends PackageManager<NpmLockFile> {
|
|
|
14
15
|
clearCache(): void;
|
|
15
16
|
getDeclaredVersion({ workspacePackage, declaredBy, dependency, }: DeclaredVersionQuery): string | undefined;
|
|
16
17
|
getResolvedVersion({ workspacePackage, dependency }: ResolvedVersionQuery): string | undefined;
|
|
17
|
-
|
|
18
|
+
installPackages(args?: InstallArgs, options?: Parameters<typeof runCommand>[2]): void;
|
|
18
19
|
protected parseLockFile(): NpmLockFile | undefined;
|
|
19
20
|
/**
|
|
20
21
|
* Looks up a lockfile entry for the given workspace package, falling back
|
|
@@ -23,6 +24,8 @@ export declare class NpmPackageManager extends PackageManager<NpmLockFile> {
|
|
|
23
24
|
* workspace package itself, matching npm's own lockfile key convention.
|
|
24
25
|
*/
|
|
25
26
|
private findEntry;
|
|
27
|
+
private runRebuild;
|
|
28
|
+
private runProjectPostinstall;
|
|
26
29
|
}
|
|
27
30
|
export {};
|
|
28
31
|
//# sourceMappingURL=npm-package-manager.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"npm-package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/npm-package-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"npm-package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/npm-package-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,UAAU,EAA+B,MAAM,UAAU,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQnD,UAAU,gBAAgB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C;AAED,qBAAa,iBAAkB,SAAQ,cAAc,CAAC,WAAW,CAAC;IAC9D,QAAQ,CAAC,OAAO,SAAS;IACzB,QAAQ,CAAC,YAAY,uBAAuB;IAE5C,UAAU;IAIV,kBAAkB,CAAC,EACf,gBAAgB,EAChB,UAAU,EACV,UAAU,GACb,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAK5C,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAI9F,eAAe,CAAC,IAAI,GAAE,WAAgB,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IA6DlF,SAAS,CAAC,aAAa,IAAI,WAAW,GAAG,SAAS;IAQlD;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,qBAAqB;CAOhC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
"use strict";
|
|
1
|
+
/* eslint-disable no-console */ "use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", {
|
|
3
3
|
value: true
|
|
4
4
|
});
|
|
@@ -11,6 +11,7 @@ Object.defineProperty(exports, "NpmPackageManager", {
|
|
|
11
11
|
const _fs = /*#__PURE__*/ _interop_require_default(require("fs"));
|
|
12
12
|
const _utils = require("../utils");
|
|
13
13
|
const _packagemanager = require("./package-manager");
|
|
14
|
+
const _utils1 = require("./utils");
|
|
14
15
|
function _define_property(obj, key, value) {
|
|
15
16
|
if (key in obj) {
|
|
16
17
|
Object.defineProperty(obj, key, {
|
|
@@ -53,17 +54,58 @@ class NpmPackageManager extends _packagemanager.PackageManager {
|
|
|
53
54
|
package: dependency
|
|
54
55
|
})) === null || _this_findEntry === void 0 ? void 0 : _this_findEntry.version;
|
|
55
56
|
}
|
|
56
|
-
|
|
57
|
-
|
|
57
|
+
installPackages(args = {}, options) {
|
|
58
|
+
var _args_allowScripts;
|
|
59
|
+
/*
|
|
60
|
+
* The `true` fallback allows projects a grace period to identify and
|
|
61
|
+
* allowlist trusted scripts. Remove the fallback when the grace period expires.
|
|
62
|
+
*/ const allowScripts = (0, _utils1.resolveAllowScripts)((_args_allowScripts = args.allowScripts) !== null && _args_allowScripts !== void 0 ? _args_allowScripts : true);
|
|
63
|
+
if (!args.quiet) {
|
|
64
|
+
(0, _utils1.logAllowedScripts)(allowScripts);
|
|
65
|
+
}
|
|
66
|
+
(0, _utils.runCommand)('npm', [
|
|
58
67
|
(0, _utils.isCI)() ? 'ci' : 'i',
|
|
59
68
|
'--audit=false',
|
|
60
69
|
'--fund=false',
|
|
61
70
|
'--legacy-peer-deps',
|
|
62
|
-
...
|
|
71
|
+
...(0, _utils1.shouldIgnoreScripts)(allowScripts) ? [
|
|
72
|
+
'--ignore-scripts'
|
|
73
|
+
] : [],
|
|
74
|
+
...args.fix ? [
|
|
63
75
|
'--package-lock-only',
|
|
64
76
|
'--prefer-dedupe'
|
|
65
77
|
] : []
|
|
66
|
-
];
|
|
78
|
+
], options);
|
|
79
|
+
try {
|
|
80
|
+
if (args.fix) {
|
|
81
|
+
return;
|
|
82
|
+
}
|
|
83
|
+
/*
|
|
84
|
+
* Rebuild applies when allowScripts is an explicit list:
|
|
85
|
+
* `true` means npm install already ran every script, `false`
|
|
86
|
+
* means the user opted out.
|
|
87
|
+
*/ if (Array.isArray(allowScripts)) {
|
|
88
|
+
this.runRebuild(allowScripts);
|
|
89
|
+
}
|
|
90
|
+
/*
|
|
91
|
+
* Warn against the effective allowlist so teams can see which
|
|
92
|
+
* scripts they should add to --allow-scripts. Skip when the user
|
|
93
|
+
* explicitly opted out (`false`); they made an informed choice.
|
|
94
|
+
*/ if (allowScripts !== false) {
|
|
95
|
+
(0, _utils.warnUntrustedInstallScripts)(Array.isArray(allowScripts) ? allowScripts : _utils1.DEFAULT_ALLOWED_SCRIPTS, this.lockFileName, {
|
|
96
|
+
force: true
|
|
97
|
+
});
|
|
98
|
+
}
|
|
99
|
+
/*
|
|
100
|
+
* When allowScripts is `true`, npm already ran project postinstall.
|
|
101
|
+
* In other cases, we run it manually. Note, `false` only ignores
|
|
102
|
+
* package scripts, the project postinstall is always trusted.
|
|
103
|
+
*/ if (allowScripts !== true) {
|
|
104
|
+
this.runProjectPostinstall(options);
|
|
105
|
+
}
|
|
106
|
+
} finally{
|
|
107
|
+
this.reset();
|
|
108
|
+
}
|
|
67
109
|
}
|
|
68
110
|
parseLockFile() {
|
|
69
111
|
try {
|
|
@@ -83,6 +125,28 @@ class NpmPackageManager extends _packagemanager.PackageManager {
|
|
|
83
125
|
const packages = (_this_getLockFile = this.getLockFile()) === null || _this_getLockFile === void 0 ? void 0 : _this_getLockFile.packages;
|
|
84
126
|
return (_ref = packages === null || packages === void 0 ? void 0 : packages[`${workspacePackage}/node_modules/${packageName}`]) !== null && _ref !== void 0 ? _ref : packages === null || packages === void 0 ? void 0 : packages[`node_modules/${packageName}`];
|
|
85
127
|
}
|
|
128
|
+
runRebuild(scripts) {
|
|
129
|
+
try {
|
|
130
|
+
(0, _utils.runCommand)('npm', [
|
|
131
|
+
'rebuild',
|
|
132
|
+
...scripts
|
|
133
|
+
]);
|
|
134
|
+
} catch (unused) {
|
|
135
|
+
console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);
|
|
136
|
+
process.exitCode = 1;
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
runProjectPostinstall(options) {
|
|
140
|
+
try {
|
|
141
|
+
(0, _utils.runCommand)('npm', [
|
|
142
|
+
'run',
|
|
143
|
+
'postinstall',
|
|
144
|
+
'--if-present'
|
|
145
|
+
], options);
|
|
146
|
+
} catch (unused) {
|
|
147
|
+
process.exitCode = 1;
|
|
148
|
+
}
|
|
149
|
+
}
|
|
86
150
|
constructor(...args){
|
|
87
151
|
super(...args), _define_property(this, "command", 'npm'), _define_property(this, "lockFileName", 'package-lock.json');
|
|
88
152
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/package-manager/npm-package-manager.ts"],"sourcesContent":["
|
|
1
|
+
{"version":3,"sources":["../../src/package-manager/npm-package-manager.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport fs from 'fs';\nimport { isCI, runCommand, warnUntrustedInstallScripts } from '../utils';\nimport type { DeclaredVersionQuery, InstallArgs, ResolvedVersionQuery } from './package-manager';\nimport { PackageManager } from './package-manager';\nimport {\n DEFAULT_ALLOWED_SCRIPTS,\n logAllowedScripts,\n resolveAllowScripts,\n shouldIgnoreScripts,\n} from './utils';\n\ninterface NpmLockFileEntry {\n version?: string;\n dependencies?: Record<string, string>;\n peerDependencies?: Record<string, string>;\n}\n\nexport interface NpmLockFile {\n packages?: Record<string, NpmLockFileEntry>;\n}\n\nexport class NpmPackageManager extends PackageManager<NpmLockFile> {\n readonly command = 'npm';\n readonly lockFileName = 'package-lock.json';\n\n clearCache() {\n runCommand('npm', ['cache', 'clear', '--force']);\n }\n\n getDeclaredVersion({\n workspacePackage,\n declaredBy,\n dependency,\n }: DeclaredVersionQuery): string | undefined {\n const entry = this.findEntry({ workspacePackage, package: declaredBy });\n return entry?.dependencies?.[dependency] ?? entry?.peerDependencies?.[dependency];\n }\n\n getResolvedVersion({ workspacePackage, dependency }: ResolvedVersionQuery): string | undefined {\n return this.findEntry({ workspacePackage, package: dependency })?.version;\n }\n\n installPackages(args: InstallArgs = {}, options?: Parameters<typeof runCommand>[2]) {\n /*\n * The `true` fallback allows projects a grace period to identify and\n * allowlist trusted scripts. Remove the fallback when the grace period expires.\n */\n const allowScripts = resolveAllowScripts(args.allowScripts ?? true);\n\n if (!args.quiet) {\n logAllowedScripts(allowScripts);\n }\n\n runCommand(\n 'npm',\n [\n isCI() ? 'ci' : 'i',\n '--audit=false',\n '--fund=false',\n '--legacy-peer-deps',\n ...(shouldIgnoreScripts(allowScripts) ? ['--ignore-scripts'] : []),\n ...(args.fix ? ['--package-lock-only', '--prefer-dedupe'] : []),\n ],\n options\n );\n\n try {\n if (args.fix) {\n return;\n }\n /*\n * Rebuild applies when allowScripts is an explicit list:\n * `true` means npm install already ran every script, `false`\n * means the user opted out.\n */\n if (Array.isArray(allowScripts)) {\n this.runRebuild(allowScripts);\n }\n /*\n * Warn against the effective allowlist so teams can see which\n * scripts they should add to --allow-scripts. Skip when the user\n * explicitly opted out (`false`); they made an informed choice.\n */\n if (allowScripts !== false) {\n warnUntrustedInstallScripts(\n Array.isArray(allowScripts) ? allowScripts : DEFAULT_ALLOWED_SCRIPTS,\n this.lockFileName,\n { force: true }\n );\n }\n /*\n * When allowScripts is `true`, npm already ran project postinstall.\n * In other cases, we run it manually. Note, `false` only ignores\n * package scripts, the project postinstall is always trusted.\n */\n if (allowScripts !== true) {\n this.runProjectPostinstall(options);\n }\n } finally {\n this.reset();\n }\n }\n\n protected parseLockFile(): NpmLockFile | undefined {\n try {\n return JSON.parse(fs.readFileSync(this.lockFileName, 'utf-8'));\n } catch {\n return undefined;\n }\n }\n\n /**\n * Looks up a lockfile entry for the given workspace package, falling back\n * to the hoisted root entry. `workspacePackage` is the package's relative\n * path from the repo root; the empty string `''` denotes the root\n * workspace package itself, matching npm's own lockfile key convention.\n */\n private findEntry({\n workspacePackage,\n package: packageName,\n }: {\n workspacePackage: string;\n package: string;\n }): NpmLockFileEntry | undefined {\n const packages = this.getLockFile()?.packages;\n return (\n packages?.[`${workspacePackage}/node_modules/${packageName}`] ??\n packages?.[`node_modules/${packageName}`]\n );\n }\n\n private runRebuild(scripts: string[]) {\n try {\n runCommand('npm', ['rebuild', ...scripts]);\n } catch {\n console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);\n process.exitCode = 1;\n }\n }\n\n private runProjectPostinstall(options?: Parameters<typeof runCommand>[2]) {\n try {\n runCommand('npm', ['run', 'postinstall', '--if-present'], options);\n } catch {\n process.exitCode = 1;\n }\n }\n}\n"],"names":["NpmPackageManager","PackageManager","clearCache","runCommand","getDeclaredVersion","workspacePackage","declaredBy","dependency","entry","findEntry","package","dependencies","peerDependencies","getResolvedVersion","version","installPackages","args","options","allowScripts","resolveAllowScripts","quiet","logAllowedScripts","isCI","shouldIgnoreScripts","fix","Array","isArray","runRebuild","warnUntrustedInstallScripts","DEFAULT_ALLOWED_SCRIPTS","lockFileName","force","runProjectPostinstall","reset","parseLockFile","JSON","parse","fs","readFileSync","undefined","packageName","packages","getLockFile","scripts","console","error","join","process","exitCode","command"],"mappings":"AAAA,6BAA6B;;;;+BAsBhBA;;;eAAAA;;;2DArBE;uBAC+C;gCAE/B;wBAMxB;;;;;;;;;;;;;;;;;;;AAYA,MAAMA,0BAA0BC,8BAAc;IAIjDC,aAAa;QACTC,IAAAA,iBAAU,EAAC,OAAO;YAAC;YAAS;YAAS;SAAU;IACnD;IAEAC,mBAAmB,EACfC,gBAAgB,EAChBC,UAAU,EACVC,UAAU,EACS,EAAsB;;YAElCC,qBAAqCA;QAD5C,MAAMA,QAAQ,IAAI,CAACC,SAAS,CAAC;YAAEJ;YAAkBK,SAASJ;QAAW;QACrE,eAAOE,kBAAAA,6BAAAA,sBAAAA,MAAOG,YAAY,cAAnBH,0CAAAA,mBAAqB,CAACD,WAAW,uCAAIC,kBAAAA,6BAAAA,0BAAAA,MAAOI,gBAAgB,cAAvBJ,8CAAAA,uBAAyB,CAACD,WAAW;IACrF;IAEAM,mBAAmB,EAAER,gBAAgB,EAAEE,UAAU,EAAwB,EAAsB;YACpF;QAAP,QAAO,kBAAA,IAAI,CAACE,SAAS,CAAC;YAAEJ;YAAkBK,SAASH;QAAW,gBAAvD,sCAAA,gBAA2DO,OAAO;IAC7E;IAEAC,gBAAgBC,OAAoB,CAAC,CAAC,EAAEC,OAA0C,EAAE;YAKvCD;QAJzC;;;SAGC,GACD,MAAME,eAAeC,IAAAA,2BAAmB,GAACH,qBAAAA,KAAKE,YAAY,cAAjBF,gCAAAA,qBAAqB;QAE9D,IAAI,CAACA,KAAKI,KAAK,EAAE;YACbC,IAAAA,yBAAiB,EAACH;QACtB;QAEAf,IAAAA,iBAAU,EACN,OACA;YACImB,IAAAA,WAAI,MAAK,OAAO;YAChB;YACA;YACA;eACIC,IAAAA,2BAAmB,EAACL,gBAAgB;gBAAC;aAAmB,GAAG,EAAE;eAC7DF,KAAKQ,GAAG,GAAG;gBAAC;gBAAuB;aAAkB,GAAG,EAAE;SACjE,EACDP;QAGJ,IAAI;YACA,IAAID,KAAKQ,GAAG,EAAE;gBACV;YACJ;YACA;;;;aAIC,GACD,IAAIC,MAAMC,OAAO,CAACR,eAAe;gBAC7B,IAAI,CAACS,UAAU,CAACT;YACpB;YACA;;;;aAIC,GACD,IAAIA,iBAAiB,OAAO;gBACxBU,IAAAA,kCAA2B,EACvBH,MAAMC,OAAO,CAACR,gBAAgBA,eAAeW,+BAAuB,EACpE,IAAI,CAACC,YAAY,EACjB;oBAAEC,OAAO;gBAAK;YAEtB;YACA;;;;aAIC,GACD,IAAIb,iBAAiB,MAAM;gBACvB,IAAI,CAACc,qBAAqB,CAACf;YAC/B;QACJ,SAAU;YACN,IAAI,CAACgB,KAAK;QACd;IACJ;IAEUC,gBAAyC;QAC/C,IAAI;YACA,OAAOC,KAAKC,KAAK,CAACC,WAAE,CAACC,YAAY,CAAC,IAAI,CAACR,YAAY,EAAE;QACzD,EAAE,eAAM;YACJ,OAAOS;QACX;IACJ;IAEA;;;;;KAKC,GACD,AAAQ9B,UAAU,EACdJ,gBAAgB,EAChBK,SAAS8B,WAAW,EAIvB,EAAgC;;YACZ;QAAjB,MAAMC,YAAW,oBAAA,IAAI,CAACC,WAAW,gBAAhB,wCAAA,kBAAoBD,QAAQ;QAC7C,eACIA,qBAAAA,+BAAAA,QAAU,CAAC,GAAGpC,iBAAiB,cAAc,EAAEmC,aAAa,CAAC,uCAC7DC,qBAAAA,+BAAAA,QAAU,CAAC,CAAC,aAAa,EAAED,aAAa,CAAC;IAEjD;IAEQb,WAAWgB,OAAiB,EAAE;QAClC,IAAI;YACAxC,IAAAA,iBAAU,EAAC,OAAO;gBAAC;mBAAcwC;aAAQ;QAC7C,EAAE,eAAM;YACJC,QAAQC,KAAK,CAAC,CAAC,+BAA+B,EAAEF,QAAQG,IAAI,CAAC,OAAO;YACpEC,QAAQC,QAAQ,GAAG;QACvB;IACJ;IAEQhB,sBAAsBf,OAA0C,EAAE;QACtE,IAAI;YACAd,IAAAA,iBAAU,EAAC,OAAO;gBAAC;gBAAO;gBAAe;aAAe,EAAEc;QAC9D,EAAE,eAAM;YACJ8B,QAAQC,QAAQ,GAAG;QACvB;IACJ;;QA7HG,gBACH,uBAASC,WAAU,QACnB,uBAASnB,gBAAe;;AA4H5B"}
|
|
@@ -1,6 +1,9 @@
|
|
|
1
1
|
import { runCommand } from '../utils';
|
|
2
|
+
export type AllowScripts = true | false | string[];
|
|
2
3
|
export interface InstallArgs {
|
|
4
|
+
allowScripts?: AllowScripts;
|
|
3
5
|
fix?: boolean;
|
|
6
|
+
quiet?: boolean;
|
|
4
7
|
}
|
|
5
8
|
export interface DeclaredVersionQuery {
|
|
6
9
|
workspacePackage: string;
|
|
@@ -15,15 +18,13 @@ export declare abstract class PackageManager<LockFile = unknown> {
|
|
|
15
18
|
#private;
|
|
16
19
|
abstract readonly command: string;
|
|
17
20
|
abstract readonly lockFileName: string;
|
|
18
|
-
get execCommand(): string;
|
|
19
21
|
hasValidLockFile(): boolean;
|
|
20
|
-
installPackages(args?: InstallArgs, options?: Parameters<typeof runCommand>[2]): void;
|
|
21
22
|
protected getLockFile(): LockFile | undefined;
|
|
22
23
|
protected reset(): void;
|
|
23
24
|
abstract clearCache(): void;
|
|
24
25
|
abstract getDeclaredVersion(query: DeclaredVersionQuery): string | undefined;
|
|
25
26
|
abstract getResolvedVersion(query: ResolvedVersionQuery): string | undefined;
|
|
26
|
-
|
|
27
|
+
abstract installPackages(args?: InstallArgs, options?: Parameters<typeof runCommand>[2]): void;
|
|
27
28
|
protected abstract parseLockFile(): LockFile | undefined;
|
|
28
29
|
}
|
|
29
30
|
//# sourceMappingURL=package-manager.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/package-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,WAAW,WAAW;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/package-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;AAEnD,MAAM,WAAW,WAAW;IACxB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,8BAAsB,cAAc,CAAC,QAAQ,GAAG,OAAO;;IACnD,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAKvC,gBAAgB,IAAI,OAAO;IAI3B,SAAS,CAAC,WAAW,IAAI,QAAQ,GAAG,SAAS;IAQ7C,SAAS,CAAC,KAAK;IAKf,QAAQ,CAAC,UAAU,IAAI,IAAI;IAC3B,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAC5E,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAC5E,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAE9F,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,GAAG,SAAS;CAC3D"}
|
|
@@ -8,7 +8,6 @@ Object.defineProperty(exports, "PackageManager", {
|
|
|
8
8
|
return PackageManager;
|
|
9
9
|
}
|
|
10
10
|
});
|
|
11
|
-
const _utils = require("../utils");
|
|
12
11
|
function _check_private_redeclaration(obj, privateCollection) {
|
|
13
12
|
if (privateCollection.has(obj)) {
|
|
14
13
|
throw new TypeError("Cannot initialize the same private elements twice on an object");
|
|
@@ -51,16 +50,9 @@ function _class_private_field_set(receiver, privateMap, value) {
|
|
|
51
50
|
}
|
|
52
51
|
var _lockFile = /*#__PURE__*/ new WeakMap(), _lockFileLoaded = /*#__PURE__*/ new WeakMap();
|
|
53
52
|
class PackageManager {
|
|
54
|
-
get execCommand() {
|
|
55
|
-
return `${this.command} exec`;
|
|
56
|
-
}
|
|
57
53
|
hasValidLockFile() {
|
|
58
54
|
return this.getLockFile() !== undefined;
|
|
59
55
|
}
|
|
60
|
-
installPackages(args = {}, options) {
|
|
61
|
-
(0, _utils.runCommand)(this.command, this.getInstallArgs(args), options);
|
|
62
|
-
this.reset();
|
|
63
|
-
}
|
|
64
56
|
getLockFile() {
|
|
65
57
|
if (!_class_private_field_get(this, _lockFileLoaded)) {
|
|
66
58
|
_class_private_field_set(this, _lockFile, this.parseLockFile());
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/package-manager/package-manager.ts"],"sourcesContent":["import { runCommand } from '../utils';\n\nexport interface InstallArgs {\n fix?: boolean;\n}\n\nexport interface DeclaredVersionQuery {\n workspacePackage: string;\n declaredBy: string;\n dependency: string;\n}\n\nexport interface ResolvedVersionQuery {\n workspacePackage: string;\n dependency: string;\n}\n\nexport abstract class PackageManager<LockFile = unknown> {\n abstract readonly command: string;\n abstract readonly lockFileName: string;\n\n
|
|
1
|
+
{"version":3,"sources":["../../src/package-manager/package-manager.ts"],"sourcesContent":["import { runCommand } from '../utils';\n\nexport type AllowScripts = true | false | string[];\n\nexport interface InstallArgs {\n allowScripts?: AllowScripts;\n fix?: boolean;\n quiet?: boolean;\n}\n\nexport interface DeclaredVersionQuery {\n workspacePackage: string;\n declaredBy: string;\n dependency: string;\n}\n\nexport interface ResolvedVersionQuery {\n workspacePackage: string;\n dependency: string;\n}\n\nexport abstract class PackageManager<LockFile = unknown> {\n abstract readonly command: string;\n abstract readonly lockFileName: string;\n\n #lockFile: LockFile | undefined;\n #lockFileLoaded = false;\n\n hasValidLockFile(): boolean {\n return this.getLockFile() !== undefined;\n }\n\n protected getLockFile(): LockFile | undefined {\n if (!this.#lockFileLoaded) {\n this.#lockFile = this.parseLockFile();\n this.#lockFileLoaded = true;\n }\n return this.#lockFile;\n }\n\n protected reset() {\n this.#lockFile = undefined;\n this.#lockFileLoaded = false;\n }\n\n abstract clearCache(): void;\n abstract getDeclaredVersion(query: DeclaredVersionQuery): string | undefined;\n abstract getResolvedVersion(query: ResolvedVersionQuery): string | undefined;\n abstract installPackages(args?: InstallArgs, options?: Parameters<typeof runCommand>[2]): void;\n\n protected abstract parseLockFile(): LockFile | undefined;\n}\n"],"names":["PackageManager","hasValidLockFile","getLockFile","undefined","parseLockFile","reset"],"mappings":";;;;+BAqBsBA;;;eAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIlB,yCACA;AALG,MAAeA;IAOlBC,mBAA4B;QACxB,OAAO,IAAI,CAACC,WAAW,OAAOC;IAClC;IAEUD,cAAoC;QAC1C,IAAI,0BAAC,IAAI,EAAC,kBAAiB;2CAClB,WAAY,IAAI,CAACE,aAAa;2CAC9B,iBAAkB;QAC3B;QACA,gCAAO,IAAI,EAAC;IAChB;IAEUC,QAAQ;uCACT,WAAYF;uCACZ,iBAAkB;IAC3B;;QAlBA,gCAAA;;mBAAA,KAAA;;QACA,gCAAA;;mBAAkB;;;AAyBtB"}
|