@tenderprompt/cli 0.1.36 → 0.1.37

package/dist/index.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import os from 'node:os';
@@ -164,6 +165,12 @@ class TenderCliChildProcessError extends Error {
         this.stderr = input.stderr;
     }
 }
+class TenderCliDependencyInstallError extends TenderCliChildProcessError {
+    constructor(input) {
+        super(input);
+        this.name = 'TenderCliDependencyInstallError';
+    }
+}
 const DEFAULT_PROFILE_NAME = 'default';
 const DEFAULT_BASE_URL = 'https://app.tenderprompt.com';
 const ARTIFACT_SOURCE_EXPORT_MAX_FILES = 1000;
@@ -12288,6 +12295,85 @@ function redactSensitiveText(value, secrets = []) {
         .replace(/\b(authorization\s*[:=]\s*(?:Bearer\s+)?)([^\s'"]+)/gi, '$1[REDACTED]')
         .replace(/\b(x-shopify-access-token\s*[:=]\s*)([^\s'"]+)/gi, '$1[REDACTED]');
 }
+const SHOPIFY_SOURCE_DEPENDENCY_STATE_VERSION = 1;
+const SHOPIFY_SOURCE_DEPENDENCY_STATE_FILE = '.tender-shopify-dependencies.json';
+function dependencyInstallChildEnv(runtime) {
+    const env = shopifyCliChildEnv(runtime);
+    for (const key of Object.keys(env)) {
+        const normalized = key.toUpperCase();
+        if (/(?:TOKEN|SECRET|PASSWORD|PASSWD|AUTHORIZATION|COOKIE|API_KEY|PRIVATE_KEY|CREDENTIAL)/.test(normalized)) {
+            delete env[key];
+        }
+    }
+    return {
+        ...env,
+        NPM_CONFIG_USERCONFIG: '/dev/null',
+    };
+}
+async function prepareShopifySourceDependencies(input) {
+    const packageJsonPath = path.join(input.dir, 'package.json');
+    if (!(await fileExists(packageJsonPath))) {
+        return {
+            status: 'not_required',
+            packageManager: null,
+            lockfile: null,
+            installed: false,
+        };
+    }
+    const lockfileName = 'package-lock.json';
+    const lockfilePath = path.join(input.dir, lockfileName);
+    if (!(await fileExists(lockfilePath))) {
+        throw new TenderCliUsageError('Missing package-lock.json. Shopify connector source with package.json must commit a lockfile before validation or deployment.');
+    }
+    const dependencyStateHash = createHash('sha256')
+        .update(await readFile(packageJsonPath))
+        .update('\0')
+        .update(await readFile(lockfilePath))
+        .digest('hex');
+    const statePath = path.join(input.dir, 'node_modules', SHOPIFY_SOURCE_DEPENDENCY_STATE_FILE);
+    try {
+        const state = JSON.parse(await readFile(statePath, 'utf8'));
+        if (typeof state === 'object' &&
+            state !== null &&
+            'version' in state &&
+            state.version === SHOPIFY_SOURCE_DEPENDENCY_STATE_VERSION &&
+            'dependencyStateHash' in state &&
+            state.dependencyStateHash === dependencyStateHash) {
+            return {
+                status: 'ready',
+                packageManager: 'npm',
+                lockfile: lockfileName,
+                installed: false,
+            };
+        }
+    }
+    catch {
+        // A missing or stale marker means the locked dependency tree must be rebuilt.
+    }
+    const runner = input.runtime.commandRunner ?? defaultCommandRunner;
+    const args = ['ci', '--ignore-scripts'];
+    const result = await runner('npm', args, {
+        cwd: input.dir,
+        env: dependencyInstallChildEnv(input.runtime),
+    });
+    if (result.exitCode !== 0) {
+        throw new TenderCliDependencyInstallError({
+            command: 'npm',
+            args,
+            exitCode: result.exitCode,
+            stdout: redactSensitiveText(result.stdout),
+            stderr: redactSensitiveText(result.stderr),
+        });
+    }
+    await mkdir(path.dirname(statePath), { recursive: true });
+    await writeFile(statePath, `${JSON.stringify({ version: SHOPIFY_SOURCE_DEPENDENCY_STATE_VERSION, dependencyStateHash })}\n`, 'utf8');
+    return {
+        status: 'ready',
+        packageManager: 'npm',
+        lockfile: lockfileName,
+        installed: true,
+    };
+}
 async function runShopifyCliCommand(input) {
     const runner = input.runtime.commandRunner ?? defaultCommandRunner;
     const invocation = shopifyCliCommand(input.args);
@@ -12534,6 +12620,7 @@ async function runConnectorsShopifySourceValidate(command, io, runtime) {
         ]);
         return 0;
     }
+    const dependencies = await prepareShopifySourceDependencies({ dir, runtime });
     const validationToken = await resolveShopifyCliTokenEnvironment({
         command,
         sourceArtifactId,
@@ -12557,7 +12644,14 @@ async function runConnectorsShopifySourceValidate(command, io, runtime) {
         exitCode: result.exitCode,
         stdout: result.stdout,
         stderr: result.stderr,
-    }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, 'validation: passed']);
+        dependencies,
+    }, [
+        `connector_id: ${command.connectorId}`,
+        `source_artifact_id: ${sourceArtifactId}`,
+        `source_dir: ${dir}`,
+        `dependencies: ${dependencies.status === 'ready' ? (dependencies.installed ? 'installed' : 'cached') : 'not_required'}`,
+        'validation: passed',
+    ]);
     return 0;
 }
 async function runConnectorsShopifySourceDeploy(command, io, runtime) {
@@ -12595,6 +12689,7 @@ async function runConnectorsShopifySourceDeploy(command, io, runtime) {
         ]);
         return 0;
     }
+    const dependencies = await prepareShopifySourceDependencies({ dir, runtime });
     const deployToken = await resolveShopifyCliTokenEnvironment({
         command,
         sourceArtifactId,
@@ -12612,7 +12707,14 @@ async function runConnectorsShopifySourceDeploy(command, io, runtime) {
         exitCode: result.exitCode,
         stdout: result.stdout,
         stderr: result.stderr,
-    }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, 'deploy: completed']);
+        dependencies,
+    }, [
+        `connector_id: ${command.connectorId}`,
+        `source_artifact_id: ${sourceArtifactId}`,
+        `source_dir: ${dir}`,
+        `dependencies: ${dependencies.status === 'ready' ? (dependencies.installed ? 'installed' : 'cached') : 'not_required'}`,
+        'deploy: completed',
+    ]);
     return 0;
 }
 async function runConnectorsShopifyDelete(command, io, runtime) {
@@ -13457,6 +13559,9 @@ function cliErrorMessage(error) {
     return String(error);
 }
 function cliErrorCode(error) {
+    if (error instanceof TenderCliDependencyInstallError) {
+        return 'dependency_install_failed';
+    }
     if (error instanceof TenderCliChildProcessError) {
         return 'child_process_failed';
     }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.36",
+	"version": "0.1.37",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"