@servicetitan/install 36.2.0 → 36.3.0

package/dist/package-manager/utils/resolve-allow-scripts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-allow-scripts.d.ts","sourceRoot":"","sources":["../../../src/package-manager/utils/resolve-allow-scripts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,eAAO,MAAM,uBAAuB,UAAoD,CAAC;AAEzF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAKrE"}
+{"version":3,"file":"resolve-allow-scripts.d.ts","sourceRoot":"","sources":["../../../src/package-manager/utils/resolve-allow-scripts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,eAAO,MAAM,uBAAuB,UAMnC,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAKrE"}

package/dist/package-manager/utils/resolve-allow-scripts.js

@@ -21,7 +21,8 @@ const DEFAULT_ALLOWED_SCRIPTS = [
     '@servicetitan/startup',
     'cypress',
     'msw',
-    'nx'
+    'nx',
+    'tree-sitter'
 ];
 function resolveAllowScripts(value) {
     if (value === true || value === false) {

package/dist/package-manager/utils/resolve-allow-scripts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/package-manager/utils/resolve-allow-scripts.ts"],"sourcesContent":["import type { AllowScripts } from '../package-manager';\nimport { parseAllowScripts } from './parse-allow-scripts';\n\nexport const DEFAULT_ALLOWED_SCRIPTS = ['@servicetitan/startup', 'cypress', 'msw', 'nx'];\n\nexport function resolveAllowScripts(value: AllowScripts): AllowScripts {\n    if (value === true || value === false) {\n        return value;\n    }\n    return [...DEFAULT_ALLOWED_SCRIPTS, ...parseAllowScripts(value)];\n}\n"],"names":["DEFAULT_ALLOWED_SCRIPTS","resolveAllowScripts","value","parseAllowScripts"],"mappings":";;;;;;;;;;;QAGaA;eAAAA;;QAEGC;eAAAA;;;mCAJkB;AAE3B,MAAMD,0BAA0B;IAAC;IAAyB;IAAW;IAAO;CAAK;AAEjF,SAASC,oBAAoBC,KAAmB;IACnD,IAAIA,UAAU,QAAQA,UAAU,OAAO;QACnC,OAAOA;IACX;IACA,OAAO;WAAIF;WAA4BG,IAAAA,oCAAiB,EAACD;KAAO;AACpE"}
+{"version":3,"sources":["../../../src/package-manager/utils/resolve-allow-scripts.ts"],"sourcesContent":["import type { AllowScripts } from '../package-manager';\nimport { parseAllowScripts } from './parse-allow-scripts';\n\nexport const DEFAULT_ALLOWED_SCRIPTS = [\n    '@servicetitan/startup',\n    'cypress',\n    'msw',\n    'nx',\n    'tree-sitter',\n];\n\nexport function resolveAllowScripts(value: AllowScripts): AllowScripts {\n    if (value === true || value === false) {\n        return value;\n    }\n    return [...DEFAULT_ALLOWED_SCRIPTS, ...parseAllowScripts(value)];\n}\n"],"names":["DEFAULT_ALLOWED_SCRIPTS","resolveAllowScripts","value","parseAllowScripts"],"mappings":";;;;;;;;;;;QAGaA;eAAAA;;QAQGC;eAAAA;;;mCAVkB;AAE3B,MAAMD,0BAA0B;IACnC;IACA;IACA;IACA;IACA;CACH;AAEM,SAASC,oBAAoBC,KAAmB;IACnD,IAAIA,UAAU,QAAQA,UAAU,OAAO;QACnC,OAAOA;IACX;IACA,OAAO;WAAIF;WAA4BG,IAAAA,oCAAiB,EAACD;KAAO;AACpE"}

package/dist/utils/warn-untrusted-install-scripts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"warn-untrusted-install-scripts.d.ts","sourceRoot":"","sources":["../../src/utils/warn-untrusted-install-scripts.ts"],"names":[],"mappings":"AAqBA,UAAU,OAAO;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,2BAA2B,CACvC,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EACpB,EAAE,KAAK,EAAE,GAAE,OAAY,QAyB1B"}
+{"version":3,"file":"warn-untrusted-install-scripts.d.ts","sourceRoot":"","sources":["../../src/utils/warn-untrusted-install-scripts.ts"],"names":[],"mappings":"AAuBA,UAAU,OAAO;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,2BAA2B,CACvC,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EACpB,EAAE,KAAK,EAAE,GAAE,OAAY,QAyB1B"}

package/dist/utils/warn-untrusted-install-scripts.js

@@ -16,6 +16,7 @@ const IGNORE = [
     '@progress/kendo-licensing',
     '@scarf/scarf',
     '@swc/core',
+    '@tree-sitter-grammars/tree-sitter-yaml',
     '@vaadin/vaadin-usage-statistics',
     'contentful',
     'core-js-pure',
@@ -23,6 +24,7 @@ const IGNORE = [
     'es5-ext',
     'esbuild',
     'less',
+    'tree-sitter-json',
     'unrs-resolver'
 ];
 function warnUntrustedInstallScripts(allowedScripts, lockFileName, { force } = {}) {

package/dist/utils/warn-untrusted-install-scripts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/warn-untrusted-install-scripts.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport { getPackagesWithInstallScripts } from './get-packages-with-install-scripts';\nimport { hasLockfileChanged } from './has-lockfile-changed';\n\n// These packages have scripts, but don't need them to function correctly.\n\nconst IGNORE = [\n    '@parcel/watcher', // Installs platform-specific binary via optionalDependencies, install script is a legacy fallback\n    '@progress/kendo-licensing', // Validates Kendo UI license key, not needed for functionality\n    '@scarf/scarf', // Sends anonymous analytics/telemetry to Scarf, usage-tracking mechanism with no functional purpose\n    '@swc/core', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n    '@vaadin/vaadin-usage-statistics', // Toggles Vaadin's development-time telemetry, no effect on functionality\n    'contentful', // v9 printed a message announcing that v10 was available, no functional purpose\n    'core-js-pure', // Prints a donation/sponsorship banner to the console, no functional purpose\n    'core-js', // Prints a donation/sponsorship banner to the console, no functional purpose\n    'es5-ext', // Displays politically motivated message targeted at Russian developers, no effect on functionality\n    'esbuild', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n    'less', // Installs Playwright browsers for Less's own test suite\n    'unrs-resolver', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n];\n\ninterface Options {\n    force?: boolean;\n}\n\nexport function warnUntrustedInstallScripts(\n    allowedScripts: string[],\n    lockFileName: string,\n    { force }: Options = {}\n) {\n    if (!force && !hasLockfileChanged(lockFileName)) {\n        return;\n    }\n\n    const packages = getPackagesWithInstallScripts();\n    const trustedOrIgnored = new Set([...allowedScripts, ...IGNORE]);\n    const untrusted = packages.filter(({ location, name }) => {\n        return !!location && !trustedOrIgnored.has(name);\n    });\n\n    if (untrusted.length === 0) {\n        return;\n    }\n\n    const list = untrusted.map(({ name, version }) => `  - ${name}@${version}`).join('\\n');\n    console.warn(\n        [\n            'WARNING: The following packages have untrusted install scripts.',\n            'A future release will block them by default.',\n            'Review and add trusted packages to --allow-scripts:',\n            list,\n        ].join('\\n')\n    );\n}\n"],"names":["warnUntrustedInstallScripts","IGNORE","allowedScripts","lockFileName","force","hasLockfileChanged","packages","getPackagesWithInstallScripts","trustedOrIgnored","Set","untrusted","filter","location","name","has","length","list","map","version","join","console","warn"],"mappings":"AAAA,6BAA6B;;;;+BAyBbA;;;eAAAA;;;+CAxB8B;oCACX;AAEnC,0EAA0E;AAE1E,MAAMC,SAAS;IACX;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACH;AAMM,SAASD,4BACZE,cAAwB,EACxBC,YAAoB,EACpB,EAAEC,KAAK,EAAW,GAAG,CAAC,CAAC;IAEvB,IAAI,CAACA,SAAS,CAACC,IAAAA,sCAAkB,EAACF,eAAe;QAC7C;IACJ;IAEA,MAAMG,WAAWC,IAAAA,4DAA6B;IAC9C,MAAMC,mBAAmB,IAAIC,IAAI;WAAIP;WAAmBD;KAAO;IAC/D,MAAMS,YAAYJ,SAASK,MAAM,CAAC,CAAC,EAAEC,QAAQ,EAAEC,IAAI,EAAE;QACjD,OAAO,CAAC,CAACD,YAAY,CAACJ,iBAAiBM,GAAG,CAACD;IAC/C;IAEA,IAAIH,UAAUK,MAAM,KAAK,GAAG;QACxB;IACJ;IAEA,MAAMC,OAAON,UAAUO,GAAG,CAAC,CAAC,EAAEJ,IAAI,EAAEK,OAAO,EAAE,GAAK,CAAC,IAAI,EAAEL,KAAK,CAAC,EAAEK,SAAS,EAAEC,IAAI,CAAC;IACjFC,QAAQC,IAAI,CACR;QACI;QACA;QACA;QACAL;KACH,CAACG,IAAI,CAAC;AAEf"}
+{"version":3,"sources":["../../src/utils/warn-untrusted-install-scripts.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport { getPackagesWithInstallScripts } from './get-packages-with-install-scripts';\nimport { hasLockfileChanged } from './has-lockfile-changed';\n\n// These packages have scripts, but don't need them to function correctly.\n\nconst IGNORE = [\n    '@parcel/watcher', // Installs platform-specific binary via optionalDependencies, install script is a legacy fallback\n    '@progress/kendo-licensing', // Validates Kendo UI license key, not needed for functionality\n    '@scarf/scarf', // Sends anonymous analytics/telemetry to Scarf, usage-tracking mechanism with no functional purpose\n    '@swc/core', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n    '@tree-sitter-grammars/tree-sitter-yaml', // Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback\n    '@vaadin/vaadin-usage-statistics', // Toggles Vaadin's development-time telemetry, no effect on functionality\n    'contentful', // v9 printed a message announcing that v10 was available, no functional purpose\n    'core-js-pure', // Prints a donation/sponsorship banner to the console, no functional purpose\n    'core-js', // Prints a donation/sponsorship banner to the console, no functional purpose\n    'es5-ext', // Displays politically motivated message targeted at Russian developers, no effect on functionality\n    'esbuild', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n    'less', // Installs Playwright browsers for Less's own test suite\n    'tree-sitter-json', // Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback\n    'unrs-resolver', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback\n];\n\ninterface Options {\n    force?: boolean;\n}\n\nexport function warnUntrustedInstallScripts(\n    allowedScripts: string[],\n    lockFileName: string,\n    { force }: Options = {}\n) {\n    if (!force && !hasLockfileChanged(lockFileName)) {\n        return;\n    }\n\n    const packages = getPackagesWithInstallScripts();\n    const trustedOrIgnored = new Set([...allowedScripts, ...IGNORE]);\n    const untrusted = packages.filter(({ location, name }) => {\n        return !!location && !trustedOrIgnored.has(name);\n    });\n\n    if (untrusted.length === 0) {\n        return;\n    }\n\n    const list = untrusted.map(({ name, version }) => `  - ${name}@${version}`).join('\\n');\n    console.warn(\n        [\n            'WARNING: The following packages have untrusted install scripts.',\n            'A future release will block them by default.',\n            'Review and add trusted packages to --allow-scripts:',\n            list,\n        ].join('\\n')\n    );\n}\n"],"names":["warnUntrustedInstallScripts","IGNORE","allowedScripts","lockFileName","force","hasLockfileChanged","packages","getPackagesWithInstallScripts","trustedOrIgnored","Set","untrusted","filter","location","name","has","length","list","map","version","join","console","warn"],"mappings":"AAAA,6BAA6B;;;;+BA2BbA;;;eAAAA;;;+CA1B8B;oCACX;AAEnC,0EAA0E;AAE1E,MAAMC,SAAS;IACX;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACH;AAMM,SAASD,4BACZE,cAAwB,EACxBC,YAAoB,EACpB,EAAEC,KAAK,EAAW,GAAG,CAAC,CAAC;IAEvB,IAAI,CAACA,SAAS,CAACC,IAAAA,sCAAkB,EAACF,eAAe;QAC7C;IACJ;IAEA,MAAMG,WAAWC,IAAAA,4DAA6B;IAC9C,MAAMC,mBAAmB,IAAIC,IAAI;WAAIP;WAAmBD;KAAO;IAC/D,MAAMS,YAAYJ,SAASK,MAAM,CAAC,CAAC,EAAEC,QAAQ,EAAEC,IAAI,EAAE;QACjD,OAAO,CAAC,CAACD,YAAY,CAACJ,iBAAiBM,GAAG,CAACD;IAC/C;IAEA,IAAIH,UAAUK,MAAM,KAAK,GAAG;QACxB;IACJ;IAEA,MAAMC,OAAON,UAAUO,GAAG,CAAC,CAAC,EAAEJ,IAAI,EAAEK,OAAO,EAAE,GAAK,CAAC,IAAI,EAAEL,KAAK,CAAC,EAAEK,SAAS,EAAEC,IAAI,CAAC;IACjFC,QAAQC,IAAI,CACR;QACI;QACA;QACA;QACAL;KACH,CAACG,IAAI,CAAC;AAEf"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@servicetitan/install",
-    "version": "36.2.0",
+    "version": "36.3.0",
     "description": "Lightweight wrapper around npm install that configures access to private packages",
     "homepage": "https://docs.st.dev/docs/frontend/uikit/install",
     "repository": {
@@ -40,5 +40,5 @@
     "devDependencies": {
         "ts-node": "~10.9.2"
     },
-    "gitHead": "87254b2caf60b20eb46c33b40ffb4dd05ad3e0f7"
+    "gitHead": "5c664540fe1fa530da3b311b28941e2fb26c6cff"
 }

package/src/package-manager/utils/resolve-allow-scripts.ts

@@ -1,7 +1,13 @@
 import type { AllowScripts } from '../package-manager';
 import { parseAllowScripts } from './parse-allow-scripts';
 
-export const DEFAULT_ALLOWED_SCRIPTS = ['@servicetitan/startup', 'cypress', 'msw', 'nx'];
+export const DEFAULT_ALLOWED_SCRIPTS = [
+    '@servicetitan/startup',
+    'cypress',
+    'msw',
+    'nx',
+    'tree-sitter',
+];
 
 export function resolveAllowScripts(value: AllowScripts): AllowScripts {
     if (value === true || value === false) {

package/src/utils/warn-untrusted-install-scripts.ts

@@ -9,6 +9,7 @@ const IGNORE = [
     '@progress/kendo-licensing', // Validates Kendo UI license key, not needed for functionality
     '@scarf/scarf', // Sends anonymous analytics/telemetry to Scarf, usage-tracking mechanism with no functional purpose
     '@swc/core', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback
+    '@tree-sitter-grammars/tree-sitter-yaml', // Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback
     '@vaadin/vaadin-usage-statistics', // Toggles Vaadin's development-time telemetry, no effect on functionality
     'contentful', // v9 printed a message announcing that v10 was available, no functional purpose
     'core-js-pure', // Prints a donation/sponsorship banner to the console, no functional purpose
@@ -16,6 +17,7 @@ const IGNORE = [
     'es5-ext', // Displays politically motivated message targeted at Russian developers, no effect on functionality
     'esbuild', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback
     'less', // Installs Playwright browsers for Less's own test suite
+    'tree-sitter-json', // Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback
     'unrs-resolver', // Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback
 ];