@vercel/container 8.2.2 → 8.3.0

package/dist/index.js

@@ -1244,6 +1244,28 @@ var LIFECYCLE = {
   url: `${BUILDPACK_DIST_BASE_URL}/lifecycle/${LIFECYCLE_VERSION}/lifecycle-v${LIFECYCLE_VERSION}-linux-x86-64.tgz`,
   sha256: distribution.lifecycle.sha256
 };
+var PRERELEASE_URL_ENV = "VERCEL_BUILDPACK_PRERELEASE_URL";
+var SHA256_RE = /^[0-9a-f]{64}$/;
+var ARTIFACT_PREFIX = "vercel-";
+var ARTIFACT_SUFFIX = ".cnb";
+var ARTIFACT_NAME_RE = /^[A-Za-z0-9_-]+$/;
+var ARTIFACT_VERSION_RE = /^\d+\.\d+\.\d+$/;
+function artifactFileName(name, version2) {
+  return `${ARTIFACT_PREFIX}${name}-${version2}${ARTIFACT_SUFFIX}`;
+}
+function parseArtifactFileName(fileName) {
+  if (!fileName.startsWith(ARTIFACT_PREFIX) || !fileName.endsWith(ARTIFACT_SUFFIX)) {
+    return void 0;
+  }
+  const inner = fileName.slice(ARTIFACT_PREFIX.length, -ARTIFACT_SUFFIX.length);
+  const separator = inner.lastIndexOf("-");
+  const name = separator > 0 ? inner.slice(0, separator) : "";
+  const version2 = separator > 0 ? inner.slice(separator + 1) : "";
+  if (!ARTIFACT_NAME_RE.test(name) || !ARTIFACT_VERSION_RE.test(version2)) {
+    return void 0;
+  }
+  return { name, version: version2 };
+}
 function vercelBuildpack(name) {
   const pinned = distribution.buildpacks[name];
   if (!pinned) {
@@ -1256,10 +1278,69 @@ function vercelBuildpack(name) {
 function vercelBuildpackArtifact(buildpack) {
   const { name, version: version2 } = buildpack;
   return {
-    url: `${BUILDPACK_DIST_BASE_URL}/buildpacks/${name}/${version2}/vercel-${name}-${version2}.cnb`,
+    url: buildpack.url ?? `${BUILDPACK_DIST_BASE_URL}/buildpacks/${name}/${version2}/${artifactFileName(name, version2)}`,
     sha256: buildpack.sha256
   };
 }
+function parseArchiveUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error(`${PRERELEASE_URL_ENV} must be an https .cnb archive URL.`);
+  }
+  const fileName = url.pathname.split("/").at(-1) ?? "";
+  const artifact = parseArtifactFileName(fileName);
+  if (url.protocol !== "https:" || !artifact) {
+    throw new Error(
+      `${PRERELEASE_URL_ENV} must be a plain https URL ending in vercel-<name>-<version>.cnb.`
+    );
+  }
+  return {
+    url: url.href,
+    fileName,
+    name: artifact.name,
+    version: artifact.version
+  };
+}
+function getPrereleaseUrl(env = process.env) {
+  const value = env[PRERELEASE_URL_ENV]?.trim();
+  return value ? parseArchiveUrl(value).url : void 0;
+}
+async function withPrereleaseBuildpack(buildpack, archiveUrl) {
+  const archive = parseArchiveUrl(archiveUrl);
+  const entry = buildpack.buildpacks.find(
+    (candidate) => candidate.name === archive.name && candidate.id === `vercel/${archive.name}`
+  );
+  if (!entry) {
+    throw new Error(
+      `Pre-release archive ${archive.url} does not match a buildpack in the ${buildpack.runtime} runtime.`
+    );
+  }
+  const checksumUrlObj = new URL(archive.url);
+  checksumUrlObj.pathname += ".sha256";
+  const checksumUrl = checksumUrlObj.href;
+  const response = await fetch(checksumUrl);
+  if (!response.ok) {
+    throw new Error(
+      `Failed to fetch pre-release checksum ${checksumUrl}: HTTP ${response.status} ${response.statusText}`
+    );
+  }
+  const fields = (await response.text()).trim().split(/\s+/);
+  const [sha256, fileName] = fields;
+  if (fields.length !== 2 || !SHA256_RE.test(sha256) || fileName !== archive.fileName) {
+    throw new Error(
+      `Invalid pre-release checksum ${checksumUrl}: expected a SHA-256 checksum for ${archive.fileName}.`
+    );
+  }
+  info(`Using pre-release ${entry.id}@${archive.version}: ${archive.url}`);
+  return {
+    ...buildpack,
+    buildpacks: buildpack.buildpacks.map(
+      (candidate) => candidate === entry ? { ...entry, version: archive.version, sha256, url: archive.url } : candidate
+    )
+  };
+}
 
 // src/buildpacks/lifecycle/lifecycle.ts
 var BUILD_USER_ID = 1001;
@@ -1430,22 +1511,6 @@ function cnbRegistryAuth(credentials) {
   const basic = Buffer.from(`${username}:${token}`).toString("base64");
   return JSON.stringify({ [registry]: `Basic ${basic}` });
 }
-function assertPublishedArchive(name, archive) {
-  if (/^0{64}$/.test(archive.sha256)) {
-    throw new Error(
-      `The ${name} archive has not been published. Publish it and update its checksum in distribution.json.`
-    );
-  }
-}
-function assertPublishedDistribution(buildpack) {
-  assertPublishedArchive("CNB lifecycle", LIFECYCLE);
-  for (const entry of buildpack.buildpacks) {
-    assertPublishedArchive(
-      `${entry.id}@${entry.version} buildpack`,
-      vercelBuildpackArtifact(entry)
-    );
-  }
-}
 function distributionUrls(buildpack) {
   return {
     lifecycle: LIFECYCLE.url,
@@ -1615,7 +1680,6 @@ var buildAndPushWithLifecycle = async (buildpack, params, span) => {
       "image.ref": params.imageRef
     },
     async (lifecycleSpan) => {
-      assertPublishedDistribution(buildpack);
       const suffix = `${process.pid}-${(0, import_node_crypto3.randomBytes)(4).toString("hex")}`;
       const buildContainer = `vercel-cnb-${buildpack.runtime}-${suffix}`;
       let cnbDir;
@@ -1809,7 +1873,6 @@ var buildAndPushWithLifecycleDocker = async (buildpack, params, span) => {
       "image.ref": params.imageRef
     },
     async (lifecycleSpan) => {
-      assertPublishedDistribution(buildpack);
       let stageDir;
       const containers = [];
       try {
@@ -2138,7 +2201,9 @@ async function buildAndPushBuildpack(params) {
         `The ${params.buildpack.runtime} buildpack was selected, but no supported project marker was found in the service sources. Add ${params.buildpack.projectMarkers.join(" or ")}, or add a Dockerfile.vercel to control the image build.`
       );
     }
-    const image = await params.buildpack.resolveImage(sourceDir);
+    const prereleaseUrl = getPrereleaseUrl();
+    const buildpack = prereleaseUrl ? await withPrereleaseBuildpack(params.buildpack, prereleaseUrl) : params.buildpack;
+    const image = await buildpack.resolveImage(sourceDir);
     const nodeToolchain = engine.name === "buildah" ? await resolveNodeToolchain(sourceDir, params.config, params.meta) : await resolveLocalNodeToolchain(
       sourceDir,
       params.config,
@@ -2148,9 +2213,10 @@ async function buildAndPushBuildpack(params) {
       params.parentSpan,
       "container.buildpack.build_and_push",
       {
-        "buildpack.runtime": params.buildpack.runtime,
+        "buildpack.runtime": buildpack.runtime,
         "buildpack.runtime_version": image.version,
         "buildpack.node_version": nodeToolchain?.version,
+        "buildpack.prerelease_url": prereleaseUrl,
         "container.engine": engine.name,
         "container.repository": params.repository
       },
@@ -2208,7 +2274,7 @@ async function buildAndPushBuildpack(params) {
           );
           const runLifecycle = engine.name === "buildah" ? buildAndPushWithLifecycle : buildAndPushWithLifecycleDocker;
           const result = await runLifecycle(
-            params.buildpack,
+            buildpack,
             {
               workPath: sourceDir,
               image,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/container",
-  "version": "8.2.2",
+  "version": "8.3.0",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
   "homepage": "https://vercel.com/docs",