@servicetitan/install 39.0.0 → 39.1.0

package/dist/package-manager/npm-package-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/npm-package-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,UAAU,EAA+B,MAAM,UAAU,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQnD,UAAU,gBAAgB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C;AAED,qBAAa,iBAAkB,SAAQ,cAAc,CAAC,WAAW,CAAC;IAC9D,QAAQ,CAAC,OAAO,SAAS;IACzB,QAAQ,CAAC,YAAY,uBAAuB;IAE5C,UAAU;IAIV,kBAAkB,CAAC,EACf,gBAAgB,EAChB,UAAU,EACV,UAAU,GACb,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAK5C,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAI9F,eAAe,CAAC,IAAI,GAAE,WAAgB,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAwDlF,SAAS,CAAC,aAAa,IAAI,WAAW,GAAG,SAAS;IAYlD;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IAiBjB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,qBAAqB;CAOhC"}
+{"version":3,"file":"npm-package-manager.d.ts","sourceRoot":"","sources":["../../src/package-manager/npm-package-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,UAAU,EAA+B,MAAM,UAAU,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AASnD,UAAU,gBAAgB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C;AAED,qBAAa,iBAAkB,SAAQ,cAAc,CAAC,WAAW,CAAC;IAC9D,QAAQ,CAAC,OAAO,SAAS;IACzB,QAAQ,CAAC,YAAY,uBAAuB;IAE5C,UAAU;IAIV,kBAAkB,CAAC,EACf,gBAAgB,EAChB,UAAU,EACV,UAAU,GACb,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAK5C,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAI9F,eAAe,CAAC,IAAI,GAAE,WAAgB,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAwDlF,SAAS,CAAC,aAAa,IAAI,WAAW,GAAG,SAAS;IAYlD;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IAiBjB,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,qBAAqB;CAOhC"}

package/dist/package-manager/npm-package-manager.js

@@ -81,7 +81,7 @@ class NpmPackageManager extends _packagemanager.PackageManager {
              * `true` means npm install already ran every script, `false`
              * means the user opted out.
              */ if (Array.isArray(allowScripts) && allowScripts.length > 0) {
-                this.runRebuild(allowScripts);
+                (0, _utils1.withProjectAllowScripts)(allowScripts, ()=>this.runRebuild(allowScripts));
             }
             /*
              * Warn against the effective allowlist so teams can see which
@@ -134,8 +134,15 @@ class NpmPackageManager extends _packagemanager.PackageManager {
             (0, _utils.runCommand)(this.command, [
                 'rebuild',
                 ...scripts
-            ]);
-        } catch (unused) {
+            ], {
+                stdio: [
+                    'inherit',
+                    'inherit',
+                    'pipe'
+                ]
+            });
+        } catch (error) {
+            console.error(String(error));
             console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);
             process.exitCode = 1;
         }

package/dist/package-manager/npm-package-manager.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/package-manager/npm-package-manager.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport fs from 'fs';\nimport { isCI, runCommand, warnUntrustedInstallScripts } from '../utils';\nimport type { DeclaredVersionQuery, InstallArgs, ResolvedVersionQuery } from './package-manager';\nimport { PackageManager } from './package-manager';\nimport {\n    DEFAULT_ALLOWED_SCRIPTS,\n    logAllowedScripts,\n    resolveAllowScripts,\n    usesStartup,\n} from './utils';\n\ninterface NpmLockFileEntry {\n    version?: string;\n    resolved?: string;\n    link?: boolean;\n    dependencies?: Record<string, string>;\n    peerDependencies?: Record<string, string>;\n}\n\nexport interface NpmLockFile {\n    packages?: Record<string, NpmLockFileEntry>;\n}\n\nexport class NpmPackageManager extends PackageManager<NpmLockFile> {\n    readonly command = 'npm';\n    readonly lockFileName = 'package-lock.json';\n\n    clearCache() {\n        runCommand(this.command, ['cache', 'clear', '--force']);\n    }\n\n    getDeclaredVersion({\n        workspacePackage,\n        declaredBy,\n        dependency,\n    }: DeclaredVersionQuery): string | undefined {\n        const entry = this.findEntry({ workspacePackage, package: declaredBy });\n        return entry?.dependencies?.[dependency] ?? entry?.peerDependencies?.[dependency];\n    }\n\n    getResolvedVersion({ workspacePackage, dependency }: ResolvedVersionQuery): string | undefined {\n        return this.findEntry({ workspacePackage, package: dependency })?.version;\n    }\n\n    installPackages(args: InstallArgs = {}, options?: Parameters<typeof runCommand>[2]) {\n        const builtInAllowlist = usesStartup() ? DEFAULT_ALLOWED_SCRIPTS : [];\n        const allowScripts = resolveAllowScripts(args.allowScripts ?? [], builtInAllowlist);\n\n        if (!args.quiet) {\n            logAllowedScripts(allowScripts, builtInAllowlist);\n        }\n\n        runCommand(\n            this.command,\n            [\n                isCI() ? 'ci' : 'i',\n                '--audit=false',\n                '--fund=false',\n                '--legacy-peer-deps',\n                ...(allowScripts !== true ? ['--ignore-scripts'] : []),\n                ...(args.fix ? ['--package-lock-only', '--prefer-dedupe'] : []),\n            ],\n            options\n        );\n\n        try {\n            if (args.fix) {\n                return;\n            }\n            /*\n             * Rebuild applies when allowScripts is a non-empty explicit list:\n             * `true` means npm install already ran every script, `false`\n             * means the user opted out.\n             */\n            if (Array.isArray(allowScripts) && allowScripts.length > 0) {\n                this.runRebuild(allowScripts);\n            }\n            /*\n             * Warn against the effective allowlist so teams can see which\n             * scripts they should add to --allow-scripts. Skip when the user\n             * explicitly opted out (`false`); they made an informed choice.\n             */\n            if (allowScripts !== false) {\n                warnUntrustedInstallScripts(\n                    Array.isArray(allowScripts) ? allowScripts : builtInAllowlist\n                );\n            }\n            /*\n             * When allowScripts is `true`, npm already ran project postinstall.\n             * In other cases, we run it manually. Note, `false` only ignores\n             * package scripts, the project postinstall is always trusted.\n             */\n            if (allowScripts !== true) {\n                this.runProjectPostinstall(options);\n            }\n        } finally {\n            this.reset();\n        }\n    }\n\n    protected parseLockFile(): NpmLockFile | undefined {\n        const lockFilePath = this.getLockFilePath();\n        if (!lockFilePath) {\n            return undefined;\n        }\n        try {\n            return JSON.parse(fs.readFileSync(lockFilePath, 'utf-8'));\n        } catch {\n            return undefined;\n        }\n    }\n\n    /**\n     * Looks up a lockfile entry for the given workspace package, falling back\n     * to the hoisted root entry. `workspacePackage` is the package's relative\n     * path from the repo root; the empty string `''` denotes the root\n     * workspace package itself, matching npm's own lockfile key convention.\n     * Follows link entries to the resolved workspace package, so callers see\n     * the workspace package's own metadata rather than the symlink stub.\n     */\n    private findEntry({\n        workspacePackage,\n        package: packageName,\n    }: {\n        workspacePackage: string;\n        package: string;\n    }): NpmLockFileEntry | undefined {\n        const packages = this.getLockFile()?.packages;\n        const entry =\n            packages?.[`${workspacePackage}/node_modules/${packageName}`] ??\n            packages?.[`node_modules/${packageName}`];\n        if (entry?.link && entry.resolved) {\n            return packages?.[entry.resolved];\n        }\n        return entry;\n    }\n\n    private runRebuild(scripts: string[]) {\n        try {\n            runCommand(this.command, ['rebuild', ...scripts]);\n        } catch {\n            console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);\n            process.exitCode = 1;\n        }\n    }\n\n    private runProjectPostinstall(options?: Parameters<typeof runCommand>[2]) {\n        try {\n            runCommand(this.command, ['run', 'postinstall', '--if-present'], options);\n        } catch {\n            process.exitCode = 1;\n        }\n    }\n}\n"],"names":["NpmPackageManager","PackageManager","clearCache","runCommand","command","getDeclaredVersion","workspacePackage","declaredBy","dependency","entry","findEntry","package","dependencies","peerDependencies","getResolvedVersion","version","installPackages","args","options","builtInAllowlist","usesStartup","DEFAULT_ALLOWED_SCRIPTS","allowScripts","resolveAllowScripts","quiet","logAllowedScripts","isCI","fix","Array","isArray","length","runRebuild","warnUntrustedInstallScripts","runProjectPostinstall","reset","parseLockFile","lockFilePath","getLockFilePath","undefined","JSON","parse","fs","readFileSync","packageName","packages","getLockFile","link","resolved","scripts","console","error","join","process","exitCode","lockFileName"],"mappings":"AAAA,6BAA6B;;;;+BAwBhBA;;;eAAAA;;;2DAvBE;uBAC+C;gCAE/B;wBAMxB;;;;;;;;;;;;;;;;;AAcA,MAAMA,0BAA0BC,8BAAc;IAIjDC,aAAa;QACTC,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;YAAC;YAAS;YAAS;SAAU;IAC1D;IAEAC,mBAAmB,EACfC,gBAAgB,EAChBC,UAAU,EACVC,UAAU,EACS,EAAsB;;YAElCC,qBAAqCA;QAD5C,MAAMA,QAAQ,IAAI,CAACC,SAAS,CAAC;YAAEJ;YAAkBK,SAASJ;QAAW;QACrE,eAAOE,kBAAAA,6BAAAA,sBAAAA,MAAOG,YAAY,cAAnBH,0CAAAA,mBAAqB,CAACD,WAAW,uCAAIC,kBAAAA,6BAAAA,0BAAAA,MAAOI,gBAAgB,cAAvBJ,8CAAAA,uBAAyB,CAACD,WAAW;IACrF;IAEAM,mBAAmB,EAAER,gBAAgB,EAAEE,UAAU,EAAwB,EAAsB;YACpF;QAAP,QAAO,kBAAA,IAAI,CAACE,SAAS,CAAC;YAAEJ;YAAkBK,SAASH;QAAW,gBAAvD,sCAAA,gBAA2DO,OAAO;IAC7E;IAEAC,gBAAgBC,OAAoB,CAAC,CAAC,EAAEC,OAA0C,EAAE;YAEvCD;QADzC,MAAME,mBAAmBC,IAAAA,mBAAW,MAAKC,+BAAuB,GAAG,EAAE;QACrE,MAAMC,eAAeC,IAAAA,2BAAmB,GAACN,qBAAAA,KAAKK,YAAY,cAAjBL,gCAAAA,qBAAqB,EAAE,EAAEE;QAElE,IAAI,CAACF,KAAKO,KAAK,EAAE;YACbC,IAAAA,yBAAiB,EAACH,cAAcH;QACpC;QAEAhB,IAAAA,iBAAU,EACN,IAAI,CAACC,OAAO,EACZ;YACIsB,IAAAA,WAAI,MAAK,OAAO;YAChB;YACA;YACA;eACIJ,iBAAiB,OAAO;gBAAC;aAAmB,GAAG,EAAE;eACjDL,KAAKU,GAAG,GAAG;gBAAC;gBAAuB;aAAkB,GAAG,EAAE;SACjE,EACDT;QAGJ,IAAI;YACA,IAAID,KAAKU,GAAG,EAAE;gBACV;YACJ;YACA;;;;aAIC,GACD,IAAIC,MAAMC,OAAO,CAACP,iBAAiBA,aAAaQ,MAAM,GAAG,GAAG;gBACxD,IAAI,CAACC,UAAU,CAACT;YACpB;YACA;;;;aAIC,GACD,IAAIA,iBAAiB,OAAO;gBACxBU,IAAAA,kCAA2B,EACvBJ,MAAMC,OAAO,CAACP,gBAAgBA,eAAeH;YAErD;YACA;;;;aAIC,GACD,IAAIG,iBAAiB,MAAM;gBACvB,IAAI,CAACW,qBAAqB,CAACf;YAC/B;QACJ,SAAU;YACN,IAAI,CAACgB,KAAK;QACd;IACJ;IAEUC,gBAAyC;QAC/C,MAAMC,eAAe,IAAI,CAACC,eAAe;QACzC,IAAI,CAACD,cAAc;YACf,OAAOE;QACX;QACA,IAAI;YACA,OAAOC,KAAKC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,cAAc;QACpD,EAAE,eAAM;YACJ,OAAOE;QACX;IACJ;IAEA;;;;;;;KAOC,GACD,AAAQ5B,UAAU,EACdJ,gBAAgB,EAChBK,SAASgC,WAAW,EAIvB,EAAgC;;YACZ;QAAjB,MAAMC,YAAW,oBAAA,IAAI,CAACC,WAAW,gBAAhB,wCAAA,kBAAoBD,QAAQ;QAC7C,MAAMnC,gBACFmC,qBAAAA,+BAAAA,QAAU,CAAC,GAAGtC,iBAAiB,cAAc,EAAEqC,aAAa,CAAC,uCAC7DC,qBAAAA,+BAAAA,QAAU,CAAC,CAAC,aAAa,EAAED,aAAa,CAAC;QAC7C,IAAIlC,CAAAA,kBAAAA,4BAAAA,MAAOqC,IAAI,KAAIrC,MAAMsC,QAAQ,EAAE;YAC/B,OAAOH,qBAAAA,+BAAAA,QAAU,CAACnC,MAAMsC,QAAQ,CAAC;QACrC;QACA,OAAOtC;IACX;IAEQsB,WAAWiB,OAAiB,EAAE;QAClC,IAAI;YACA7C,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;gBAAC;mBAAc4C;aAAQ;QACpD,EAAE,eAAM;YACJC,QAAQC,KAAK,CAAC,CAAC,+BAA+B,EAAEF,QAAQG,IAAI,CAAC,OAAO;YACpEC,QAAQC,QAAQ,GAAG;QACvB;IACJ;IAEQpB,sBAAsBf,OAA0C,EAAE;QACtE,IAAI;YACAf,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;gBAAC;gBAAO;gBAAe;aAAe,EAAEc;QACrE,EAAE,eAAM;YACJkC,QAAQC,QAAQ,GAAG;QACvB;IACJ;;QAjIG,gBACH,uBAASjD,WAAU,QACnB,uBAASkD,gBAAe;;AAgI5B"}
+{"version":3,"sources":["../../src/package-manager/npm-package-manager.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport fs from 'fs';\nimport { isCI, runCommand, warnUntrustedInstallScripts } from '../utils';\nimport type { DeclaredVersionQuery, InstallArgs, ResolvedVersionQuery } from './package-manager';\nimport { PackageManager } from './package-manager';\nimport {\n    DEFAULT_ALLOWED_SCRIPTS,\n    logAllowedScripts,\n    resolveAllowScripts,\n    usesStartup,\n    withProjectAllowScripts,\n} from './utils';\n\ninterface NpmLockFileEntry {\n    version?: string;\n    resolved?: string;\n    link?: boolean;\n    dependencies?: Record<string, string>;\n    peerDependencies?: Record<string, string>;\n}\n\nexport interface NpmLockFile {\n    packages?: Record<string, NpmLockFileEntry>;\n}\n\nexport class NpmPackageManager extends PackageManager<NpmLockFile> {\n    readonly command = 'npm';\n    readonly lockFileName = 'package-lock.json';\n\n    clearCache() {\n        runCommand(this.command, ['cache', 'clear', '--force']);\n    }\n\n    getDeclaredVersion({\n        workspacePackage,\n        declaredBy,\n        dependency,\n    }: DeclaredVersionQuery): string | undefined {\n        const entry = this.findEntry({ workspacePackage, package: declaredBy });\n        return entry?.dependencies?.[dependency] ?? entry?.peerDependencies?.[dependency];\n    }\n\n    getResolvedVersion({ workspacePackage, dependency }: ResolvedVersionQuery): string | undefined {\n        return this.findEntry({ workspacePackage, package: dependency })?.version;\n    }\n\n    installPackages(args: InstallArgs = {}, options?: Parameters<typeof runCommand>[2]) {\n        const builtInAllowlist = usesStartup() ? DEFAULT_ALLOWED_SCRIPTS : [];\n        const allowScripts = resolveAllowScripts(args.allowScripts ?? [], builtInAllowlist);\n\n        if (!args.quiet) {\n            logAllowedScripts(allowScripts, builtInAllowlist);\n        }\n\n        runCommand(\n            this.command,\n            [\n                isCI() ? 'ci' : 'i',\n                '--audit=false',\n                '--fund=false',\n                '--legacy-peer-deps',\n                ...(allowScripts !== true ? ['--ignore-scripts'] : []),\n                ...(args.fix ? ['--package-lock-only', '--prefer-dedupe'] : []),\n            ],\n            options\n        );\n\n        try {\n            if (args.fix) {\n                return;\n            }\n            /*\n             * Rebuild applies when allowScripts is a non-empty explicit list:\n             * `true` means npm install already ran every script, `false`\n             * means the user opted out.\n             */\n            if (Array.isArray(allowScripts) && allowScripts.length > 0) {\n                withProjectAllowScripts(allowScripts, () => this.runRebuild(allowScripts));\n            }\n            /*\n             * Warn against the effective allowlist so teams can see which\n             * scripts they should add to --allow-scripts. Skip when the user\n             * explicitly opted out (`false`); they made an informed choice.\n             */\n            if (allowScripts !== false) {\n                warnUntrustedInstallScripts(\n                    Array.isArray(allowScripts) ? allowScripts : builtInAllowlist\n                );\n            }\n            /*\n             * When allowScripts is `true`, npm already ran project postinstall.\n             * In other cases, we run it manually. Note, `false` only ignores\n             * package scripts, the project postinstall is always trusted.\n             */\n            if (allowScripts !== true) {\n                this.runProjectPostinstall(options);\n            }\n        } finally {\n            this.reset();\n        }\n    }\n\n    protected parseLockFile(): NpmLockFile | undefined {\n        const lockFilePath = this.getLockFilePath();\n        if (!lockFilePath) {\n            return undefined;\n        }\n        try {\n            return JSON.parse(fs.readFileSync(lockFilePath, 'utf-8'));\n        } catch {\n            return undefined;\n        }\n    }\n\n    /**\n     * Looks up a lockfile entry for the given workspace package, falling back\n     * to the hoisted root entry. `workspacePackage` is the package's relative\n     * path from the repo root; the empty string `''` denotes the root\n     * workspace package itself, matching npm's own lockfile key convention.\n     * Follows link entries to the resolved workspace package, so callers see\n     * the workspace package's own metadata rather than the symlink stub.\n     */\n    private findEntry({\n        workspacePackage,\n        package: packageName,\n    }: {\n        workspacePackage: string;\n        package: string;\n    }): NpmLockFileEntry | undefined {\n        const packages = this.getLockFile()?.packages;\n        const entry =\n            packages?.[`${workspacePackage}/node_modules/${packageName}`] ??\n            packages?.[`node_modules/${packageName}`];\n        if (entry?.link && entry.resolved) {\n            return packages?.[entry.resolved];\n        }\n        return entry;\n    }\n\n    private runRebuild(scripts: string[]) {\n        try {\n            runCommand(this.command, ['rebuild', ...scripts], {\n                stdio: ['inherit', 'inherit', 'pipe'],\n            });\n        } catch (error) {\n            console.error(String(error));\n            console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);\n            process.exitCode = 1;\n        }\n    }\n\n    private runProjectPostinstall(options?: Parameters<typeof runCommand>[2]) {\n        try {\n            runCommand(this.command, ['run', 'postinstall', '--if-present'], options);\n        } catch {\n            process.exitCode = 1;\n        }\n    }\n}\n"],"names":["NpmPackageManager","PackageManager","clearCache","runCommand","command","getDeclaredVersion","workspacePackage","declaredBy","dependency","entry","findEntry","package","dependencies","peerDependencies","getResolvedVersion","version","installPackages","args","options","builtInAllowlist","usesStartup","DEFAULT_ALLOWED_SCRIPTS","allowScripts","resolveAllowScripts","quiet","logAllowedScripts","isCI","fix","Array","isArray","length","withProjectAllowScripts","runRebuild","warnUntrustedInstallScripts","runProjectPostinstall","reset","parseLockFile","lockFilePath","getLockFilePath","undefined","JSON","parse","fs","readFileSync","packageName","packages","getLockFile","link","resolved","scripts","stdio","error","console","String","join","process","exitCode","lockFileName"],"mappings":"AAAA,6BAA6B;;;;+BAyBhBA;;;eAAAA;;;2DAxBE;uBAC+C;gCAE/B;wBAOxB;;;;;;;;;;;;;;;;;AAcA,MAAMA,0BAA0BC,8BAAc;IAIjDC,aAAa;QACTC,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;YAAC;YAAS;YAAS;SAAU;IAC1D;IAEAC,mBAAmB,EACfC,gBAAgB,EAChBC,UAAU,EACVC,UAAU,EACS,EAAsB;;YAElCC,qBAAqCA;QAD5C,MAAMA,QAAQ,IAAI,CAACC,SAAS,CAAC;YAAEJ;YAAkBK,SAASJ;QAAW;QACrE,eAAOE,kBAAAA,6BAAAA,sBAAAA,MAAOG,YAAY,cAAnBH,0CAAAA,mBAAqB,CAACD,WAAW,uCAAIC,kBAAAA,6BAAAA,0BAAAA,MAAOI,gBAAgB,cAAvBJ,8CAAAA,uBAAyB,CAACD,WAAW;IACrF;IAEAM,mBAAmB,EAAER,gBAAgB,EAAEE,UAAU,EAAwB,EAAsB;YACpF;QAAP,QAAO,kBAAA,IAAI,CAACE,SAAS,CAAC;YAAEJ;YAAkBK,SAASH;QAAW,gBAAvD,sCAAA,gBAA2DO,OAAO;IAC7E;IAEAC,gBAAgBC,OAAoB,CAAC,CAAC,EAAEC,OAA0C,EAAE;YAEvCD;QADzC,MAAME,mBAAmBC,IAAAA,mBAAW,MAAKC,+BAAuB,GAAG,EAAE;QACrE,MAAMC,eAAeC,IAAAA,2BAAmB,GAACN,qBAAAA,KAAKK,YAAY,cAAjBL,gCAAAA,qBAAqB,EAAE,EAAEE;QAElE,IAAI,CAACF,KAAKO,KAAK,EAAE;YACbC,IAAAA,yBAAiB,EAACH,cAAcH;QACpC;QAEAhB,IAAAA,iBAAU,EACN,IAAI,CAACC,OAAO,EACZ;YACIsB,IAAAA,WAAI,MAAK,OAAO;YAChB;YACA;YACA;eACIJ,iBAAiB,OAAO;gBAAC;aAAmB,GAAG,EAAE;eACjDL,KAAKU,GAAG,GAAG;gBAAC;gBAAuB;aAAkB,GAAG,EAAE;SACjE,EACDT;QAGJ,IAAI;YACA,IAAID,KAAKU,GAAG,EAAE;gBACV;YACJ;YACA;;;;aAIC,GACD,IAAIC,MAAMC,OAAO,CAACP,iBAAiBA,aAAaQ,MAAM,GAAG,GAAG;gBACxDC,IAAAA,+BAAuB,EAACT,cAAc,IAAM,IAAI,CAACU,UAAU,CAACV;YAChE;YACA;;;;aAIC,GACD,IAAIA,iBAAiB,OAAO;gBACxBW,IAAAA,kCAA2B,EACvBL,MAAMC,OAAO,CAACP,gBAAgBA,eAAeH;YAErD;YACA;;;;aAIC,GACD,IAAIG,iBAAiB,MAAM;gBACvB,IAAI,CAACY,qBAAqB,CAAChB;YAC/B;QACJ,SAAU;YACN,IAAI,CAACiB,KAAK;QACd;IACJ;IAEUC,gBAAyC;QAC/C,MAAMC,eAAe,IAAI,CAACC,eAAe;QACzC,IAAI,CAACD,cAAc;YACf,OAAOE;QACX;QACA,IAAI;YACA,OAAOC,KAAKC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,cAAc;QACpD,EAAE,eAAM;YACJ,OAAOE;QACX;IACJ;IAEA;;;;;;;KAOC,GACD,AAAQ7B,UAAU,EACdJ,gBAAgB,EAChBK,SAASiC,WAAW,EAIvB,EAAgC;;YACZ;QAAjB,MAAMC,YAAW,oBAAA,IAAI,CAACC,WAAW,gBAAhB,wCAAA,kBAAoBD,QAAQ;QAC7C,MAAMpC,gBACFoC,qBAAAA,+BAAAA,QAAU,CAAC,GAAGvC,iBAAiB,cAAc,EAAEsC,aAAa,CAAC,uCAC7DC,qBAAAA,+BAAAA,QAAU,CAAC,CAAC,aAAa,EAAED,aAAa,CAAC;QAC7C,IAAInC,CAAAA,kBAAAA,4BAAAA,MAAOsC,IAAI,KAAItC,MAAMuC,QAAQ,EAAE;YAC/B,OAAOH,qBAAAA,+BAAAA,QAAU,CAACpC,MAAMuC,QAAQ,CAAC;QACrC;QACA,OAAOvC;IACX;IAEQuB,WAAWiB,OAAiB,EAAE;QAClC,IAAI;YACA9C,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;gBAAC;mBAAc6C;aAAQ,EAAE;gBAC9CC,OAAO;oBAAC;oBAAW;oBAAW;iBAAO;YACzC;QACJ,EAAE,OAAOC,OAAO;YACZC,QAAQD,KAAK,CAACE,OAAOF;YACrBC,QAAQD,KAAK,CAAC,CAAC,+BAA+B,EAAEF,QAAQK,IAAI,CAAC,OAAO;YACpEC,QAAQC,QAAQ,GAAG;QACvB;IACJ;IAEQtB,sBAAsBhB,OAA0C,EAAE;QACtE,IAAI;YACAf,IAAAA,iBAAU,EAAC,IAAI,CAACC,OAAO,EAAE;gBAAC;gBAAO;gBAAe;aAAe,EAAEc;QACrE,EAAE,eAAM;YACJqC,QAAQC,QAAQ,GAAG;QACvB;IACJ;;QApIG,gBACH,uBAASpD,WAAU,QACnB,uBAASqD,gBAAe;;AAmI5B"}

package/dist/package-manager/utils/index.d.ts

@@ -2,4 +2,5 @@ export * from './log-allowed-scripts';
 export * from './parse-allow-scripts';
 export * from './resolve-allow-scripts';
 export * from './uses-startup';
+export * from './with-project-allow-scripts';
 //# sourceMappingURL=index.d.ts.map

package/dist/package-manager/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/package-manager/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/package-manager/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC"}

package/dist/package-manager/utils/index.js

@@ -6,6 +6,7 @@ _export_star(require("./log-allowed-scripts"), exports);
 _export_star(require("./parse-allow-scripts"), exports);
 _export_star(require("./resolve-allow-scripts"), exports);
 _export_star(require("./uses-startup"), exports);
+_export_star(require("./with-project-allow-scripts"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {
         if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {

package/dist/package-manager/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/package-manager/utils/index.ts"],"sourcesContent":["export * from './log-allowed-scripts';\nexport * from './parse-allow-scripts';\nexport * from './resolve-allow-scripts';\nexport * from './uses-startup';\n"],"names":[],"mappings":";;;;qBAAc;qBACA;qBACA;qBACA"}
+{"version":3,"sources":["../../../src/package-manager/utils/index.ts"],"sourcesContent":["export * from './log-allowed-scripts';\nexport * from './parse-allow-scripts';\nexport * from './resolve-allow-scripts';\nexport * from './uses-startup';\nexport * from './with-project-allow-scripts';\n"],"names":[],"mappings":";;;;qBAAc;qBACA;qBACA;qBACA;qBACA"}

package/dist/package-manager/utils/with-project-allow-scripts.d.ts

@@ -0,0 +1,2 @@
+export declare function withProjectAllowScripts<T>(scripts: string[], fn: () => T): T;
+//# sourceMappingURL=with-project-allow-scripts.d.ts.map

package/dist/package-manager/utils/with-project-allow-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-project-allow-scripts.d.ts","sourceRoot":"","sources":["../../../src/package-manager/utils/with-project-allow-scripts.ts"],"names":[],"mappings":"AAMA,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAiB5E"}

package/dist/package-manager/utils/with-project-allow-scripts.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "withProjectAllowScripts", {
+    enumerable: true,
+    get: function() {
+        return withProjectAllowScripts;
+    }
+});
+const _fs = /*#__PURE__*/ _interop_require_default(require("fs"));
+const _path = /*#__PURE__*/ _interop_require_default(require("path"));
+const _utils = require("../../utils");
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+const NPM = 'npm';
+function withProjectAllowScripts(scripts, fn) {
+    if (!supportsProjectAllowScriptsConfig(getNpmVersion())) {
+        return fn();
+    }
+    const packageJsonPath = _path.default.join(getNpmPrefix(), 'package.json');
+    const backupPath = `${packageJsonPath}.bak`;
+    const original = _fs.default.readFileSync(packageJsonPath, 'utf-8');
+    _fs.default.copyFileSync(packageJsonPath, backupPath);
+    try {
+        _fs.default.writeFileSync(packageJsonPath, buildPackageJsonWithAllowScripts(original, scripts));
+        return fn();
+    } finally{
+        _fs.default.copyFileSync(backupPath, packageJsonPath);
+        _fs.default.rmSync(backupPath);
+    }
+}
+function getNpmVersion() {
+    return (0, _utils.runCommand)(NPM, [
+        '--version'
+    ]).trim();
+}
+function getNpmPrefix() {
+    return (0, _utils.runCommand)(NPM, [
+        'prefix'
+    ]).trim();
+}
+function buildPackageJsonWithAllowScripts(original, scripts) {
+    const packageJson = JSON.parse(original);
+    const allowed = Object.fromEntries(scripts.map((name)=>[
+            name,
+            true
+        ]));
+    return JSON.stringify({
+        ...packageJson,
+        allowScripts: {
+            ...allowed,
+            ...packageJson.allowScripts
+        }
+    }, null, 2);
+}
+function supportsProjectAllowScriptsConfig(npmVersion) {
+    const [major, minor] = npmVersion.split('.').map((part)=>Number.parseInt(part, 10));
+    if (!Number.isFinite(major)) {
+        return false;
+    }
+    return major > 11 || major === 11 && minor >= 16;
+}
+
+//# sourceMappingURL=with-project-allow-scripts.js.map

package/dist/package-manager/utils/with-project-allow-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/package-manager/utils/with-project-allow-scripts.ts"],"sourcesContent":["import fs from 'fs';\nimport path from 'path';\nimport { runCommand } from '../../utils';\n\nconst NPM = 'npm';\n\nexport function withProjectAllowScripts<T>(scripts: string[], fn: () => T): T {\n    if (!supportsProjectAllowScriptsConfig(getNpmVersion())) {\n        return fn();\n    }\n\n    const packageJsonPath = path.join(getNpmPrefix(), 'package.json');\n    const backupPath = `${packageJsonPath}.bak`;\n    const original = fs.readFileSync(packageJsonPath, 'utf-8');\n    fs.copyFileSync(packageJsonPath, backupPath);\n\n    try {\n        fs.writeFileSync(packageJsonPath, buildPackageJsonWithAllowScripts(original, scripts));\n        return fn();\n    } finally {\n        fs.copyFileSync(backupPath, packageJsonPath);\n        fs.rmSync(backupPath);\n    }\n}\n\nfunction getNpmVersion(): string {\n    return runCommand(NPM, ['--version']).trim();\n}\n\nfunction getNpmPrefix(): string {\n    return runCommand(NPM, ['prefix']).trim();\n}\n\nfunction buildPackageJsonWithAllowScripts(original: string, scripts: string[]): string {\n    const packageJson = JSON.parse(original);\n    const allowed = Object.fromEntries(scripts.map(name => [name, true]));\n\n    return JSON.stringify(\n        { ...packageJson, allowScripts: { ...allowed, ...packageJson.allowScripts } },\n        null,\n        2\n    );\n}\n\nfunction supportsProjectAllowScriptsConfig(npmVersion: string): boolean {\n    const [major, minor] = npmVersion.split('.').map(part => Number.parseInt(part, 10));\n    if (!Number.isFinite(major)) {\n        return false;\n    }\n    return major > 11 || (major === 11 && minor >= 16);\n}\n"],"names":["withProjectAllowScripts","NPM","scripts","fn","supportsProjectAllowScriptsConfig","getNpmVersion","packageJsonPath","path","join","getNpmPrefix","backupPath","original","fs","readFileSync","copyFileSync","writeFileSync","buildPackageJsonWithAllowScripts","rmSync","runCommand","trim","packageJson","JSON","parse","allowed","Object","fromEntries","map","name","stringify","allowScripts","npmVersion","major","minor","split","part","Number","parseInt","isFinite"],"mappings":";;;;+BAMgBA;;;eAAAA;;;2DAND;6DACE;uBACU;;;;;;AAE3B,MAAMC,MAAM;AAEL,SAASD,wBAA2BE,OAAiB,EAAEC,EAAW;IACrE,IAAI,CAACC,kCAAkCC,kBAAkB;QACrD,OAAOF;IACX;IAEA,MAAMG,kBAAkBC,aAAI,CAACC,IAAI,CAACC,gBAAgB;IAClD,MAAMC,aAAa,GAAGJ,gBAAgB,IAAI,CAAC;IAC3C,MAAMK,WAAWC,WAAE,CAACC,YAAY,CAACP,iBAAiB;IAClDM,WAAE,CAACE,YAAY,CAACR,iBAAiBI;IAEjC,IAAI;QACAE,WAAE,CAACG,aAAa,CAACT,iBAAiBU,iCAAiCL,UAAUT;QAC7E,OAAOC;IACX,SAAU;QACNS,WAAE,CAACE,YAAY,CAACJ,YAAYJ;QAC5BM,WAAE,CAACK,MAAM,CAACP;IACd;AACJ;AAEA,SAASL;IACL,OAAOa,IAAAA,iBAAU,EAACjB,KAAK;QAAC;KAAY,EAAEkB,IAAI;AAC9C;AAEA,SAASV;IACL,OAAOS,IAAAA,iBAAU,EAACjB,KAAK;QAAC;KAAS,EAAEkB,IAAI;AAC3C;AAEA,SAASH,iCAAiCL,QAAgB,EAAET,OAAiB;IACzE,MAAMkB,cAAcC,KAAKC,KAAK,CAACX;IAC/B,MAAMY,UAAUC,OAAOC,WAAW,CAACvB,QAAQwB,GAAG,CAACC,CAAAA,OAAQ;YAACA;YAAM;SAAK;IAEnE,OAAON,KAAKO,SAAS,CACjB;QAAE,GAAGR,WAAW;QAAES,cAAc;YAAE,GAAGN,OAAO;YAAE,GAAGH,YAAYS,YAAY;QAAC;IAAE,GAC5E,MACA;AAER;AAEA,SAASzB,kCAAkC0B,UAAkB;IACzD,MAAM,CAACC,OAAOC,MAAM,GAAGF,WAAWG,KAAK,CAAC,KAAKP,GAAG,CAACQ,CAAAA,OAAQC,OAAOC,QAAQ,CAACF,MAAM;IAC/E,IAAI,CAACC,OAAOE,QAAQ,CAACN,QAAQ;QACzB,OAAO;IACX;IACA,OAAOA,QAAQ,MAAOA,UAAU,MAAMC,SAAS;AACnD"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@servicetitan/install",
-    "version": "39.0.0",
+    "version": "39.1.0",
     "description": "Lightweight wrapper around npm install that configures access to private packages",
     "homepage": "https://docs.st.dev/docs/frontend/uikit/install",
     "repository": {
@@ -30,7 +30,7 @@
         "webpack": false
     },
     "peerDependencies": {
-        "js-yaml": "~5.2.2"
+        "js-yaml": "~5.3.0"
     },
     "peerDependenciesMeta": {
         "js-yaml": {
@@ -40,5 +40,5 @@
     "devDependencies": {
         "ts-node": "~10.9.2"
     },
-    "gitHead": "9138e3fcda061941b89620b9004426f5c13a89ae"
+    "gitHead": "a2471578a506e8c40e90956a5c70cc1638bbe9c1"
 }

package/src/package-manager/npm-package-manager.ts

@@ -8,6 +8,7 @@ import {
     logAllowedScripts,
     resolveAllowScripts,
     usesStartup,
+    withProjectAllowScripts,
 } from './utils';
 
 interface NpmLockFileEntry {
@@ -74,7 +75,7 @@ export class NpmPackageManager extends PackageManager<NpmLockFile> {
              * means the user opted out.
              */
             if (Array.isArray(allowScripts) && allowScripts.length > 0) {
-                this.runRebuild(allowScripts);
+                withProjectAllowScripts(allowScripts, () => this.runRebuild(allowScripts));
             }
             /*
              * Warn against the effective allowlist so teams can see which
@@ -138,8 +139,11 @@ export class NpmPackageManager extends PackageManager<NpmLockFile> {
 
     private runRebuild(scripts: string[]) {
         try {
-            runCommand(this.command, ['rebuild', ...scripts]);
-        } catch {
+            runCommand(this.command, ['rebuild', ...scripts], {
+                stdio: ['inherit', 'inherit', 'pipe'],
+            });
+        } catch (error) {
+            console.error(String(error));
             console.error(`Failed to run allowed scripts: ${scripts.join(', ')}`);
             process.exitCode = 1;
         }

package/src/package-manager/utils/index.ts

@@ -2,3 +2,4 @@ export * from './log-allowed-scripts';
 export * from './parse-allow-scripts';
 export * from './resolve-allow-scripts';
 export * from './uses-startup';
+export * from './with-project-allow-scripts';

package/src/package-manager/utils/with-project-allow-scripts.ts

@@ -0,0 +1,51 @@
+import fs from 'fs';
+import path from 'path';
+import { runCommand } from '../../utils';
+
+const NPM = 'npm';
+
+export function withProjectAllowScripts<T>(scripts: string[], fn: () => T): T {
+    if (!supportsProjectAllowScriptsConfig(getNpmVersion())) {
+        return fn();
+    }
+
+    const packageJsonPath = path.join(getNpmPrefix(), 'package.json');
+    const backupPath = `${packageJsonPath}.bak`;
+    const original = fs.readFileSync(packageJsonPath, 'utf-8');
+    fs.copyFileSync(packageJsonPath, backupPath);
+
+    try {
+        fs.writeFileSync(packageJsonPath, buildPackageJsonWithAllowScripts(original, scripts));
+        return fn();
+    } finally {
+        fs.copyFileSync(backupPath, packageJsonPath);
+        fs.rmSync(backupPath);
+    }
+}
+
+function getNpmVersion(): string {
+    return runCommand(NPM, ['--version']).trim();
+}
+
+function getNpmPrefix(): string {
+    return runCommand(NPM, ['prefix']).trim();
+}
+
+function buildPackageJsonWithAllowScripts(original: string, scripts: string[]): string {
+    const packageJson = JSON.parse(original);
+    const allowed = Object.fromEntries(scripts.map(name => [name, true]));
+
+    return JSON.stringify(
+        { ...packageJson, allowScripts: { ...allowed, ...packageJson.allowScripts } },
+        null,
+        2
+    );
+}
+
+function supportsProjectAllowScriptsConfig(npmVersion: string): boolean {
+    const [major, minor] = npmVersion.split('.').map(part => Number.parseInt(part, 10));
+    if (!Number.isFinite(major)) {
+        return false;
+    }
+    return major > 11 || (major === 11 && minor >= 16);
+}