@socketsecurity/cli 0.14.94 → 0.14.96

package/dist/require/shadow-bin.d.ts

@@ -0,0 +1,5 @@
+declare function shadowBin(
+  binName: 'npm' | 'npx',
+  args?: string[]
+): Promise<void>
+export { shadowBin as default }

package/dist/require/shadow-bin.js

@@ -1,3 +1,106 @@
 'use strict'
 
-module.exports = require('../module-sync/shadow-bin.js')
+const process = require('node:process')
+const debug = require('@socketsecurity/registry/lib/debug')
+const npm = require('@socketsecurity/registry/lib/npm')
+const spawn = require('@socketsecurity/registry/lib/spawn')
+const path = require('node:path')
+const vendor = require('./vendor.js')
+const shadowNpmPaths = require('./shadow-npm-paths.js')
+const constants = require('./constants.js')
+
+const { CLI, NPX } = constants
+async function installLinks(realBinPath, binName) {
+  const isNpx = binName === NPX
+  // Find package manager being shadowed by this process.
+  const binPath = isNpx
+    ? shadowNpmPaths.getNpxBinPath()
+    : shadowNpmPaths.getNpmBinPath()
+  // Lazily access constants.WIN32.
+  const { WIN32 } = constants
+  // TODO: Is this early exit needed?
+  if (WIN32 && binPath) {
+    return binPath
+  }
+  const shadowed = isNpx
+    ? shadowNpmPaths.isNpxBinPathShadowed()
+    : shadowNpmPaths.isNpmBinPathShadowed()
+  // Move our bin directory to front of PATH so its found first.
+  if (!shadowed) {
+    if (WIN32) {
+      await vendor.libExports(
+        // Lazily access constants.rootDistPath.
+        path.join(constants.rootDistPath, `${binName}-${CLI}.js`),
+        path.join(realBinPath, binName)
+      )
+    }
+    const { env } = process
+    env['PATH'] = `${realBinPath}${path.delimiter}${env['PATH']}`
+  }
+  return binPath
+}
+
+const { SOCKET_CLI_SAFE_BIN, SOCKET_CLI_SAFE_PROGRESS, SOCKET_IPC_HANDSHAKE } =
+  constants
+async function shadowBin(binName, args = process.argv.slice(2)) {
+  process.exitCode = 1
+  const useDebug = debug.isDebug()
+  const terminatorPos = args.indexOf('--')
+  const rawBinArgs = terminatorPos === -1 ? args : args.slice(0, terminatorPos)
+  const progressArg =
+    rawBinArgs.findLast(npm.isProgressFlag) !== '--no-progress'
+  const binArgs = rawBinArgs.filter(a => !npm.isProgressFlag(a))
+  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
+  const isSilent = !useDebug && !binArgs.some(npm.isLoglevelFlag)
+  // The default value of loglevel is "notice". We default to "error" which is
+  // two levels quieter.
+  const logLevelArgs = isSilent ? ['--loglevel', 'error'] : []
+  const spawnPromise = spawn.spawn(
+    // Lazily access constants.execPath.
+    constants.execPath,
+    [
+      // Lazily access constants.nodeHardenFlags.
+      ...constants.nodeHardenFlags,
+      // Lazily access constants.nodeNoWarningsFlags.
+      ...constants.nodeNoWarningsFlags,
+      // Lazily access false.
+      ...[],
+      '--require',
+      // Lazily access constants.distShadowNpmInjectPath.
+      constants.distShadowNpmInjectPath,
+      // Lazily access constants.shadowBinPath.
+      await installLinks(constants.shadowBinPath, binName),
+      // Add '--no-progress' to fix input being swallowed by the npm spinner.
+      '--no-progress',
+      // Add '--loglevel=error' if a loglevel flag is not provided and the
+      // SOCKET_CLI_DEBUG environment variable is not truthy.
+      ...logLevelArgs,
+      ...binArgs,
+      ...otherArgs
+    ],
+    {
+      // 'inherit' + 'ipc'
+      stdio: [0, 1, 2, 'ipc']
+    }
+  )
+  // See https://nodejs.org/api/all.html#all_child_process_event-exit.
+  spawnPromise.process.on('exit', (code, signalName) => {
+    if (signalName) {
+      process.kill(process.pid, signalName)
+    } else if (code !== null) {
+      // eslint-disable-next-line n/no-process-exit
+      process.exit(code)
+    }
+  })
+  spawnPromise.process.send({
+    [SOCKET_IPC_HANDSHAKE]: {
+      [SOCKET_CLI_SAFE_BIN]: binName,
+      [SOCKET_CLI_SAFE_PROGRESS]: progressArg
+    }
+  })
+  await spawnPromise
+}
+
+module.exports = shadowBin
+//# debugId=c07c77d4-8583-4c6b-9a6a-0361d5c81ac7
+//# sourceMappingURL=shadow-bin.js.map

package/dist/require/shadow-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-bin.js","sources":["../../src/shadow/npm/link.ts","../../src/shadow/npm/bin.ts"],"sourcesContent":["import path from 'node:path'\nimport process from 'node:process'\n\nimport cmdShim from 'cmd-shim'\n\nimport {\n  getNpmBinPath,\n  getNpxBinPath,\n  isNpmBinPathShadowed,\n  isNpxBinPathShadowed\n} from './paths'\nimport constants from '../../constants'\n\nconst { CLI, NPX } = constants\n\nexport async function installLinks(\n  realBinPath: string,\n  binName: 'npm' | 'npx'\n): Promise<string> {\n  const isNpx = binName === NPX\n  // Find package manager being shadowed by this process.\n  const binPath = isNpx ? getNpxBinPath() : getNpmBinPath()\n  // Lazily access constants.WIN32.\n  const { WIN32 } = constants\n  // TODO: Is this early exit needed?\n  if (WIN32 && binPath) {\n    return binPath\n  }\n  const shadowed = isNpx ? isNpxBinPathShadowed() : isNpmBinPathShadowed()\n  // Move our bin directory to front of PATH so its found first.\n  if (!shadowed) {\n    if (WIN32) {\n      await cmdShim(\n        // Lazily access constants.rootDistPath.\n        path.join(constants.rootDistPath, `${binName}-${CLI}.js`),\n        path.join(realBinPath, binName)\n      )\n    }\n    const { env } = process\n    env['PATH'] = `${realBinPath}${path.delimiter}${env['PATH']}`\n  }\n  return binPath\n}\n","import process from 'node:process'\n\nimport { isDebug } from '@socketsecurity/registry/lib/debug'\nimport {\n  isLoglevelFlag,\n  isProgressFlag\n} from '@socketsecurity/registry/lib/npm'\nimport { spawn } from '@socketsecurity/registry/lib/spawn'\n\nimport { installLinks } from './link'\nimport constants from '../../constants'\n\nconst { SOCKET_CLI_SAFE_BIN, SOCKET_CLI_SAFE_PROGRESS, SOCKET_IPC_HANDSHAKE } =\n  constants\n\nexport default async function shadowBin(\n  binName: 'npm' | 'npx',\n  args = process.argv.slice(2)\n) {\n  process.exitCode = 1\n  const useDebug = isDebug()\n  const terminatorPos = args.indexOf('--')\n  const rawBinArgs = terminatorPos === -1 ? args : args.slice(0, terminatorPos)\n  const progressArg = rawBinArgs.findLast(isProgressFlag) !== '--no-progress'\n  const binArgs = rawBinArgs.filter(a => !isProgressFlag(a))\n  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)\n  const isSilent = !useDebug && !binArgs.some(isLoglevelFlag)\n  // The default value of loglevel is \"notice\". We default to \"error\" which is\n  // two levels quieter.\n  const logLevelArgs = isSilent ? ['--loglevel', 'error'] : []\n  const spawnPromise = spawn(\n    // Lazily access constants.execPath.\n    constants.execPath,\n    [\n      // Lazily access constants.nodeHardenFlags.\n      ...constants.nodeHardenFlags,\n      // Lazily access constants.nodeNoWarningsFlags.\n      ...constants.nodeNoWarningsFlags,\n      // Lazily access process.env['INLINED_SOCKET_CLI_SENTRY_BUILD'].\n      ...(process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']\n        ? [\n            '--require',\n            // Lazily access constants.distInstrumentWithSentryPath.\n            constants.distInstrumentWithSentryPath\n          ]\n        : []),\n      '--require',\n      // Lazily access constants.distShadowNpmInjectPath.\n      constants.distShadowNpmInjectPath,\n      // Lazily access constants.shadowBinPath.\n      await installLinks(constants.shadowBinPath, binName),\n      // Add '--no-progress' to fix input being swallowed by the npm spinner.\n      '--no-progress',\n      // Add '--loglevel=error' if a loglevel flag is not provided and the\n      // SOCKET_CLI_DEBUG environment variable is not truthy.\n      ...logLevelArgs,\n      ...binArgs,\n      ...otherArgs\n    ],\n    {\n      // 'inherit' + 'ipc'\n      stdio: [0, 1, 2, 'ipc']\n    }\n  )\n  // See https://nodejs.org/api/all.html#all_child_process_event-exit.\n  spawnPromise.process.on('exit', (code, signalName) => {\n    if (signalName) {\n      process.kill(process.pid, signalName)\n    } else if (code !== null) {\n      // eslint-disable-next-line n/no-process-exit\n      process.exit(code)\n    }\n  })\n  spawnPromise.process.send({\n    [SOCKET_IPC_HANDSHAKE]: {\n      [SOCKET_CLI_SAFE_BIN]: binName,\n      [SOCKET_CLI_SAFE_PROGRESS]: progressArg\n    }\n  })\n  await spawnPromise\n}\n"],"names":["NPX","WIN32","env","SOCKET_IPC_HANDSHAKE","constants","process","spawnPromise"],"mappings":";;;;;;;;;;;AAaA;;AAAaA;AAAI;AAEV;AAIL;AACA;;AAEA;;AACQC;AAAM;AACd;;AAEE;AACF;;AAEA;;AAEE;AACE;AACE;;AAIJ;;AACQC;AAAI;AACZA;AACF;AACA;AACF;;AC9BA;;;AAAuDC;AAAqB;AAG7D;;AAKb;AACA;AACA;;AAEA;AACA;;AAEA;AACA;;;AAGE;;AAGE;;AAEA;;AAEA;;AASA;AACAC;AACA;AACA;AACA;;AAEA;AACA;;AAMA;;AAEF;AAEF;;AAEE;;AAEA;AACE;AACAC;AACF;AACF;AACAC;AACE;;AAEE;AACF;AACF;AACA;AACF;;","debugId":"c07c77d4-8583-4c6b-9a6a-0361d5c81ac7"}

package/dist/require/shadow-npm-inject.d.ts

@@ -0,0 +1 @@
+export {}