@telorun/cli 0.59.0 → 0.61.0

package/dist/bundle/extract.js

@@ -1,97 +0,0 @@
-import { defaultTransportRegistry, cachePathForCanonical } from "@telorun/kernel";
-import { IntegrityError } from "@telorun/analyzer";
-import { existsSync } from "fs";
-import * as fs from "fs/promises";
-import * as path from "path";
-/** Marker written into a module's cache dir after a successful extraction.
- *  Registry versions are immutable, so its presence means the bundle is
- *  already on disk and the fetch can be skipped (the marker is written last,
- *  so a partial extraction leaves no marker and re-runs). */
-const EXTRACTED_MARKER = ".telo-bundle";
-/** True when the module's owner Application/Library doc declares a non-empty
- *  `files:` list — i.e. it ships a payload worth fetching. Reads the graph's
- *  already-parsed manifest so a payload-less module triggers no network at all. */
-function declaresFiles(module) {
-    const doc = module.owner.manifests.find((m) => m?.kind === "Telo.Application" || m?.kind === "Telo.Library");
-    return Array.isArray(doc?.files) && doc.files.length > 0;
-}
-/** A module fetched from the registry / an HTTP URL — its assets live in a
- *  bundle, not on the local disk. file:// (local dev) and memory:// are
- *  skipped: their assets are already where Http.Static resolves them. */
-function isRemoteSource(source) {
-    if (source.startsWith("file://") || source.startsWith("memory://"))
-        return false;
-    if (source.startsWith("http://") || source.startsWith("https://"))
-        return true;
-    // Registry ref form: namespace/name@version
-    return source.includes("@") && source.includes("/");
-}
-/**
- * For every module in `graph` that ships a `files:` payload from a remote
- * transport, fetch its full artifact through the transport its ref selects and
- * extract the payload into the module's cache directory (next to the cached
- * `telo.yaml`), so a relative `Http.Static` root / bundled controller `path:`
- * resolves on disk exactly as it does in dev.
- *
- * The fetch keys off each module's **pinned** `requestedUrl` (the import ref
- * with its `#sha256-...`), so the transport verifies the manifest against the
- * inline hash and the payload against that manifest's `filesIntegrity` — the
- * Merkle chain stays anchored to the importer's pin.
- *
- * Runs after `writeManifestCache`. Best-effort per module for transient fetch
- * failures (reported and skipped — the manifest itself is still cached), but an
- * integrity failure (`IntegrityError`) or a tar entry escaping the module
- * directory is a hard error (tamper / path-traversal guard).
- *
- * Returns the number of bundles extracted.
- */
-export async function extractModuleBundles(graph, entryDir, registryUrl, manifestsDir, onWarn) {
-    let count = 0;
-    const seen = new Set();
-    const transports = defaultTransportRegistry(registryUrl);
-    for (const [, module] of graph.modules) {
-        const file = module.owner;
-        if (seen.has(file.source))
-            continue;
-        seen.add(file.source);
-        if (!isRemoteSource(file.source))
-            continue;
-        if (!declaresFiles(module))
-            continue;
-        const manifestCachePath = cachePathForCanonical(file.source, entryDir, registryUrl, manifestsDir);
-        if (!manifestCachePath)
-            continue;
-        const moduleDir = path.dirname(manifestCachePath);
-        // Extract-once: a pinned registry version is immutable, so once its bundle
-        // is on disk there is nothing to re-fetch.
-        if (existsSync(path.join(moduleDir, EXTRACTED_MARKER)))
-            continue;
-        let files;
-        try {
-            ({ files } = await transports.fetchArtifact(file.requestedUrl));
-        }
-        catch (err) {
-            // A tamper failure must never be swallowed; a transient fetch failure is
-            // best-effort (the manifest is still cached, runtime surfaces a clear
-            // error if the payload is actually needed).
-            if (err instanceof IntegrityError)
-                throw err;
-            onWarn(`could not fetch bundle for ${file.requestedUrl}: ` +
-                (err instanceof Error ? err.message : String(err)));
-            continue;
-        }
-        const realModuleDir = path.resolve(moduleDir) + path.sep;
-        for (const entry of files) {
-            const dest = path.resolve(moduleDir, entry.name);
-            if (!dest.startsWith(realModuleDir)) {
-                throw new Error(`bundle for ${file.requestedUrl} contains entry '${entry.name}' that resolves outside the module cache directory.`);
-            }
-            await fs.mkdir(path.dirname(dest), { recursive: true });
-            await fs.writeFile(dest, entry.content);
-        }
-        await fs.writeFile(path.join(moduleDir, EXTRACTED_MARKER), "");
-        count++;
-    }
-    return count;
-}
-//# sourceMappingURL=extract.js.map

package/dist/bundle/extract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/bundle/extract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAuC,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;6DAG6D;AAC7D,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC;;mFAEmF;AACnF,SAAS,aAAa,CAAC,MAAoB;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB,IAAI,CAAC,EAAE,IAAI,KAAK,cAAc,CACjC,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;yEAEyE;AACzE,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,4CAA4C;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkB,EAClB,QAAgB,EAChB,WAAmB,EACnB,YAAoB,EACpB,MAAiC;IAEjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAEzD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,SAAS;QAErC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAClG,IAAI,CAAC,iBAAiB;YAAE,SAAS;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAElD,2EAA2E;QAC3E,2CAA2C;QAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAAE,SAAS;QAEjE,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,sEAAsE;YACtE,4CAA4C;YAC5C,IAAI,GAAG,YAAY,cAAc;gBAAE,MAAM,GAAG,CAAC;YAC7C,MAAM,CACJ,8BAA8B,IAAI,CAAC,YAAY,IAAI;gBACjD,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,CAAC,YAAY,oBAAoB,KAAK,CAAC,IAAI,qDAAqD,CACnH,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}