@treeseed/sdk 0.5.0 → 0.5.2

package/dist/platform/deploy-config.js

@@ -500,9 +500,9 @@ function parseDeployConfig(raw) {
         buildOutputDir: optionalString(cloudflarePages.buildOutputDir)
       },
       r2: cloudflare.r2 === void 0 ? void 0 : {
-        binding: optionalString(process.env.TREESEED_CONTENT_BUCKET_BINDING),
-        bucketName: optionalString(process.env.TREESEED_CONTENT_BUCKET_NAME),
-        publicBaseUrl: optionalString(process.env.TREESEED_CONTENT_PUBLIC_BASE_URL),
+        binding: optionalString(process.env.TREESEED_CONTENT_BUCKET_BINDING) ?? optionalString(cloudflareR2.binding),
+        bucketName: optionalString(process.env.TREESEED_CONTENT_BUCKET_NAME) ?? optionalString(cloudflareR2.bucketName),
+        publicBaseUrl: optionalString(process.env.TREESEED_CONTENT_PUBLIC_BASE_URL) ?? optionalString(cloudflareR2.publicBaseUrl),
         manifestKeyTemplate: optionalString(cloudflareR2.manifestKeyTemplate) ?? "teams/{teamId}/published/common.json",
         previewRootTemplate: optionalString(cloudflareR2.previewRootTemplate) ?? "teams/{teamId}/previews",
         previewTtlHours: optionalPositiveNumber(cloudflareR2.previewTtlHours, "cloudflare.r2.previewTtlHours") ?? 168

package/dist/scripts/release-verify.js

@@ -1,18 +1,18 @@
-import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { existsSync, mkdtempSync, readFileSync, readdirSync } from 'node:fs';
 import { basename, extname, join, resolve } from 'node:path';
 import { tmpdir } from 'node:os';
 import { spawnSync } from 'node:child_process';
 import { packageRoot } from './package-tools.js';
-const npmCacheDir = resolve(tmpdir(), 'treeseed-npm-cache');
+const npmCacheDir = mkdtempSync(join(tmpdir(), 'treeseed-sdk-npm-cache-'));
 const textExtensions = new Set(['.js', '.ts', '.mjs', '.cjs', '.d.js', '.json', '.md']);
 const forbiddenPatterns = [
     /['"`]workspace:[^'"`\n]+['"`]/,
     /['"`](?:\.\.\/|\.\/)[^'"`\n]*src\/[^'"`\n]*\.(?:[cm]?js|ts|tsx|json|astro|css)['"`]/,
     /['"`][^'"`\n]*\/packages\/[^'"`\n]*\/src\/[^'"`\n]*['"`]/,
 ];
-function run(command, args) {
+function run(command, args, cwd = packageRoot) {
     const result = spawnSync(command, args, {
-        cwd: packageRoot,
+        cwd,
         stdio: 'inherit',
         env: {
             ...process.env,
@@ -24,6 +24,32 @@ function run(command, args) {
         process.exit(result.status ?? 1);
     }
 }
+function assertNoLocalDependencyLinks() {
+    const packageJson = JSON.parse(readFileSync(resolve(packageRoot, 'package.json'), 'utf8'));
+    for (const sectionName of ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies']) {
+        for (const [dependencyName, version] of Object.entries(packageJson[sectionName] ?? {})) {
+            if (version.startsWith('workspace:') || version.startsWith('file:')) {
+                throw new Error(`package.json ${sectionName}.${dependencyName} must not use local dependency specifiers: ${version}`);
+            }
+        }
+    }
+    const lockfile = JSON.parse(readFileSync(resolve(packageRoot, 'package-lock.json'), 'utf8'));
+    for (const [entryKey, entryValue] of Object.entries(lockfile.packages ?? {})) {
+        if (entryKey.startsWith('../') || entryKey.includes('/../')) {
+            throw new Error(`package-lock.json contains forbidden local package entry: ${entryKey}`);
+        }
+        if (entryValue.link) {
+            throw new Error(`package-lock.json contains forbidden linked dependency entry: ${entryKey}`);
+        }
+        const resolved = entryValue.resolved ?? '';
+        if (resolved.startsWith('../')
+            || resolved.startsWith('./')
+            || resolved.startsWith('file:')
+            || resolved.startsWith('workspace:')) {
+            throw new Error(`package-lock.json contains forbidden local resolution for ${entryKey}: ${resolved}`);
+        }
+    }
+}
 function walkFiles(root) {
     const files = [];
     for (const entry of readdirSync(root, { withFileTypes: true })) {
@@ -71,6 +97,7 @@ function assertCleanDistArtifacts() {
         }
     }
 }
+assertNoLocalDependencyLinks();
 run('npm', ['run', 'lint']);
 scanDirectory(resolve(packageRoot, 'dist'));
 assertCleanDistArtifacts();

package/dist/scripts/verify-driver.js

@@ -10,8 +10,12 @@ const packageRoot = resolve(scriptRoot, '..');
 const sourceRunner = resolve(packageRoot, 'scripts', 'run-ts.mjs');
 const sourceEntry = resolve(packageRoot, 'src', 'verification.ts');
 const publishedEntry = resolve(packageRoot, 'dist', 'verification.js');
+const entrypointCheckOnly = process.env.TREESEED_VERIFY_ENTRYPOINT_CHECK === 'true';
 
 if (existsSync(sourceRunner) && existsSync(sourceEntry)) {
+	if (entrypointCheckOnly) {
+		process.exit(0);
+	}
 	const result = spawnSync(process.execPath, [sourceRunner, sourceEntry], {
 		cwd: process.cwd(),
 		env: process.env,
@@ -21,6 +25,9 @@ if (existsSync(sourceRunner) && existsSync(sourceEntry)) {
 }
 
 if (existsSync(publishedEntry)) {
+	if (entrypointCheckOnly) {
+		process.exit(0);
+	}
 	const { runTreeseedVerifyDriver } = await import('../dist/verification.js');
 	process.exit(runTreeseedVerifyDriver({ packageRoot: process.cwd() }));
 }

package/dist/verification.js

@@ -1,6 +1,7 @@
-import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { existsSync, mkdtempSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import * as childProcess from "node:child_process";
-import { basename, resolve } from "node:path";
+import { basename, relative, resolve } from "node:path";
+import { tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
 function defaultWrite(message, stream = "stdout") {
   if (!message) return;
@@ -38,6 +39,84 @@ function readPackageManifest(packageJsonPath) {
     return null;
   }
 }
+function createWorkspaceActWorkflow(options) {
+  const relativePackageRoot = relative(options.workspaceRoot, options.packageRoot).replace(/\\/g, "/");
+  const siblingPreparationCommands = options.localTreeseedSiblingDependencies.map((packageName) => {
+    const packageDir = `packages/${packageName.split("/")[1]}`;
+    const manifest = readPackageManifest(resolve(options.workspaceRoot, packageDir, "package.json"));
+    if (!manifest) {
+      return null;
+    }
+    const commands = [
+      `if test -f ${packageDir}/package-lock.json; then`,
+      `  npm --prefix ${packageDir} ci`,
+      "else",
+      `  npm --prefix ${packageDir} install --no-audit --no-fund`,
+      "fi"
+    ];
+    if (manifest.scripts?.["build:dist"]) {
+      commands.push(`npm --prefix ${packageDir} run build:dist`);
+    }
+    return commands.join("\n");
+  }).filter((command) => Boolean(command)).join("\n");
+  const workflowRoot = mkdtempSync(resolve(tmpdir(), "treeseed-verify-act-"));
+  const workflowPath = resolve(workflowRoot, "verify.yml");
+  writeFileSync(
+    workflowPath,
+    `name: Treeseed Local Verify
+
+on:
+  workflow_dispatch:
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ${relativePackageRoot}
+    env:
+      CI: "true"
+      TREESEED_GITHUB_AUTOMATION_MODE: stub
+      TREESEED_STAGE_WAIT_MODE: skip
+      TREESEED_AGENT_DISABLE_GIT: "true"
+      TREESEED_FIXTURE_ID: treeseed-working-site
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24.12.0
+
+      - name: Assert node:sqlite availability
+        run: node -e "import('node:sqlite').then(() => console.log('node:sqlite available')).catch((error) => { console.error(error); process.exit(1); })"
+
+${siblingPreparationCommands ? `      - name: Prepare sibling packages
+        working-directory: .
+        run: |
+${siblingPreparationCommands.split("\n").map((line) => `          ${line}`).join("\n")}
+
+` : ""}      - name: Install dependencies
+        run: |
+          if test -f package-lock.json; then
+            npm ci
+          else
+            npm install --no-audit --no-fund
+          fi
+
+      - name: Verify package
+        run: npm run verify:direct
+`,
+    "utf8"
+  );
+  return {
+    cwd: options.workspaceRoot,
+    args: ["act", options.eventName, "-W", workflowPath, "-j", "verify"]
+  };
+}
 function findWorkspaceRoot(packageRoot) {
   let current = packageRoot;
   while (true) {
@@ -150,6 +229,15 @@ function runTreeseedVerifyDriver(options = {}) {
       write(detail || "Treeseed verify requires a running Docker daemon when TREESEED_VERIFY_DRIVER=act.", "stderr");
       return 1;
     }
+    if (status.workspaceRoot && status.localTreeseedSiblingDependencies.length > 0) {
+      const workspaceAct = createWorkspaceActWorkflow({
+        workspaceRoot: status.workspaceRoot,
+        packageRoot: status.packageRoot,
+        eventName: status.eventName,
+        localTreeseedSiblingDependencies: status.localTreeseedSiblingDependencies
+      });
+      return runCommand("gh", workspaceAct.args, workspaceAct.cwd);
+    }
     return runCommand("gh", ["act", status.eventName, "-W", ".github/workflows/verify.yml", "-j", "verify"], status.packageRoot);
   }
   if (status.prefersDirectForLocalWorkspace) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -42,8 +42,8 @@
     "fixtures:check": "node ./scripts/run-ts.mjs ./scripts/fixture-tools.ts check",
     "lint": "npm run fixtures:check && npm run build:dist",
     "verify:direct": "npm run release:verify",
-    "verify:local": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='direct'; await import('@treeseed/sdk/scripts/verify-driver')\"",
-    "verify:action": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='act'; await import('@treeseed/sdk/scripts/verify-driver')\"",
+    "verify:local": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='direct'; await import('./scripts/verify-driver.mjs')\"",
+    "verify:action": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='act'; await import('./scripts/verify-driver.mjs')\"",
     "verify": "node ./scripts/verify-driver.mjs",
     "release:setup": "npm run setup:ci",
     "release:check-tag": "node ./scripts/run-ts.mjs ./scripts/assert-release-tag-version.ts",

package/scripts/verify-driver.mjs

@@ -10,8 +10,12 @@ const packageRoot = resolve(scriptRoot, '..');
 const sourceRunner = resolve(packageRoot, 'scripts', 'run-ts.mjs');
 const sourceEntry = resolve(packageRoot, 'src', 'verification.ts');
 const publishedEntry = resolve(packageRoot, 'dist', 'verification.js');
+const entrypointCheckOnly = process.env.TREESEED_VERIFY_ENTRYPOINT_CHECK === 'true';
 
 if (existsSync(sourceRunner) && existsSync(sourceEntry)) {
+	if (entrypointCheckOnly) {
+		process.exit(0);
+	}
 	const result = spawnSync(process.execPath, [sourceRunner, sourceEntry], {
 		cwd: process.cwd(),
 		env: process.env,
@@ -21,6 +25,9 @@ if (existsSync(sourceRunner) && existsSync(sourceEntry)) {
 }
 
 if (existsSync(publishedEntry)) {
+	if (entrypointCheckOnly) {
+		process.exit(0);
+	}
 	const { runTreeseedVerifyDriver } = await import('../dist/verification.js');
 	process.exit(runTreeseedVerifyDriver({ packageRoot: process.cwd() }));
 }