@vercel/python-analysis 0.8.0 → 0.8.1

package/dist/index.cjs

@@ -66,9 +66,10 @@ __export(src_exports, {
   containsAppOrHandler: () => containsAppOrHandler,
   createMinimalManifest: () => createMinimalManifest,
   discoverPythonPackage: () => discoverPythonPackage,
+  extendDistRecord: () => extendDistRecord,
   getStringConstant: () => getStringConstant,
   isPrivatePackageSource: () => isPrivatePackageSource,
-  normalizePackageName: () => normalizePackageName,
+  normalizePackageName: () => normalizePackageName2,
   parseDjangoSettingsModule: () => parseDjangoSettingsModule,
   parseUvLock: () => parseUvLock,
   scanDistributions: () => scanDistributions,
@@ -139,8 +140,51 @@ async function parseDjangoSettingsModule(content) {
 }
 
 // src/manifest/dist-metadata.ts
+var import_node_crypto = require("crypto");
+var import_node_fs = require("fs");
 var import_promises2 = require("fs/promises");
 var import_node_path2 = require("path");
+
+// src/manifest/pep508.ts
+var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
+function splitExtras(spec) {
+  const match = EXTRAS_REGEX.exec(spec);
+  if (!match) {
+    return [spec, void 0];
+  }
+  const extras = match[2].split(",").map((e) => e.trim());
+  return [match[1], extras];
+}
+function normalizePackageName(name) {
+  return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+function formatPep508(req) {
+  let result = req.name;
+  if (req.extras && req.extras.length > 0) {
+    result += `[${req.extras.join(",")}]`;
+  }
+  if (req.url) {
+    result += ` @ ${req.url}`;
+  } else if (req.version && req.version !== "*") {
+    result += req.version;
+  }
+  if (req.markers) {
+    result += ` ; ${req.markers}`;
+  }
+  return result;
+}
+function mergeExtras(existing, additional) {
+  const result = new Set(existing || []);
+  if (additional) {
+    const additionalArray = Array.isArray(additional) ? additional : [additional];
+    for (const extra of additionalArray) {
+      result.add(extra);
+    }
+  }
+  return result.size > 0 ? Array.from(result) : void 0;
+}
+
+// src/manifest/dist-metadata.ts
 async function readDistInfoFile(distInfoDir, filename) {
   try {
     return await (0, import_promises2.readFile)((0, import_node_path2.join)(distInfoDir, filename), "utf-8");
@@ -227,6 +271,62 @@ async function scanDistributions(sitePackagesDir) {
   }
   return index;
 }
+function hashFile(filePath) {
+  return new Promise((resolve, reject) => {
+    const h = (0, import_node_crypto.createHash)("sha256");
+    let size = 0;
+    const stream = (0, import_node_fs.createReadStream)(filePath);
+    stream.on("data", (chunk) => {
+      size += chunk.length;
+      h.update(chunk);
+    });
+    stream.on("error", reject);
+    stream.on("end", () => {
+      resolve({ hash: h.digest("base64url"), size });
+    });
+  });
+}
+async function extendDistRecord(sitePackagesDir, packageName, paths) {
+  const normalizedTarget = normalizePackageName(packageName);
+  const entries = await (0, import_promises2.readdir)(sitePackagesDir);
+  const distInfoDirName = entries.find((e) => {
+    if (!e.endsWith(".dist-info"))
+      return false;
+    const withoutSuffix = e.slice(0, -".dist-info".length);
+    const lastHyphen = withoutSuffix.lastIndexOf("-");
+    if (lastHyphen === -1)
+      return false;
+    const dirName = withoutSuffix.slice(0, lastHyphen);
+    return normalizePackageName(dirName) === normalizedTarget;
+  });
+  if (!distInfoDirName) {
+    throw new Error(
+      `No .dist-info directory found for package "${packageName}" in ${sitePackagesDir}`
+    );
+  }
+  const recordPath = (0, import_node_path2.join)(sitePackagesDir, distInfoDirName, "RECORD");
+  let existingRecord;
+  try {
+    existingRecord = await (0, import_promises2.readFile)(recordPath, "utf-8");
+  } catch {
+    throw new Error(`RECORD file not found in ${distInfoDirName}`);
+  }
+  const existingPaths = new Set(
+    existingRecord.split("\n").filter((line) => line.length > 0).map((line) => line.split(",")[0])
+  );
+  const newEntries = paths.filter((p) => !existingPaths.has(p));
+  if (newEntries.length > 0) {
+    const prefix = existingRecord.length > 0 && !existingRecord.endsWith("\n") ? "\n" : "";
+    const lines = [];
+    for (const p of newEntries) {
+      const fullPath = (0, import_node_path2.join)(sitePackagesDir, p);
+      const { hash, size } = await hashFile(fullPath);
+      lines.push(`${p},sha256=${hash},${size}`);
+    }
+    await (0, import_promises2.appendFile)(recordPath, prefix + lines.join("\n") + "\n");
+  }
+  return newEntries.length;
+}
 
 // src/manifest/package.ts
 var import_node_path6 = __toESM(require("path"), 1);
@@ -447,42 +547,6 @@ var PipfileLikeSchema = pipfileLikeSchema;
 var PipfileLockMetaSchema = pipfileLockMetaSchema.passthrough();
 var PipfileLockLikeSchema = pipfileLockLikeSchema;
 
-// src/manifest/pep508.ts
-var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
-function splitExtras(spec) {
-  const match = EXTRAS_REGEX.exec(spec);
-  if (!match) {
-    return [spec, void 0];
-  }
-  const extras = match[2].split(",").map((e) => e.trim());
-  return [match[1], extras];
-}
-function formatPep508(req) {
-  let result = req.name;
-  if (req.extras && req.extras.length > 0) {
-    result += `[${req.extras.join(",")}]`;
-  }
-  if (req.url) {
-    result += ` @ ${req.url}`;
-  } else if (req.version && req.version !== "*") {
-    result += req.version;
-  }
-  if (req.markers) {
-    result += ` ; ${req.markers}`;
-  }
-  return result;
-}
-function mergeExtras(existing, additional) {
-  const result = new Set(existing || []);
-  if (additional) {
-    const additionalArray = Array.isArray(additional) ? additional : [additional];
-    for (const extra of additionalArray) {
-      result.add(extra);
-    }
-  }
-  return result.size > 0 ? Array.from(result) : void 0;
-}
-
 // src/util/type.ts
 function isPlainObject(value) {
   return value != null && typeof value === "object" && !Array.isArray(value);
@@ -2280,7 +2344,7 @@ function isPrivatePackageSource(source) {
   }
   return false;
 }
-function normalizePackageName(name) {
+function normalizePackageName2(name) {
   return name.toLowerCase().replace(/[-_.]+/g, "-");
 }
 function classifyPackages(options) {
@@ -2288,9 +2352,9 @@ function classifyPackages(options) {
   const privatePackages = [];
   const publicPackages = [];
   const packageVersions = {};
-  const excludeSet = new Set(excludePackages.map(normalizePackageName));
+  const excludeSet = new Set(excludePackages.map(normalizePackageName2));
   for (const pkg of lockFile.packages) {
-    if (excludeSet.has(normalizePackageName(pkg.name))) {
+    if (excludeSet.has(normalizePackageName2(pkg.name))) {
       continue;
     }
     packageVersions[pkg.name] = pkg.version;
@@ -2490,6 +2554,7 @@ var HashDigestSchema = hashDigestSchema;
   containsAppOrHandler,
   createMinimalManifest,
   discoverPythonPackage,
+  extendDistRecord,
   getStringConstant,
   isPrivatePackageSource,
   normalizePackageName,

package/dist/index.d.ts

@@ -8,7 +8,7 @@
  */
 export { containsAppOrHandler, getStringConstant, parseDjangoSettingsModule, } from './semantic/entrypoints';
 export type { Distribution, DistributionIndex, PackagePath, DirectUrlInfo, } from './manifest/dist-metadata';
-export { scanDistributions } from './manifest/dist-metadata';
+export { extendDistRecord, scanDistributions } from './manifest/dist-metadata';
 export type { PythonConfig, PythonConfigs, PythonLockFile, PythonManifest, PythonManifestOrigin, PythonPackage, PythonVersionConfig, } from './manifest/package';
 export { discoverPythonPackage, PythonConfigKind, PythonLockFileKind, PythonManifestConvertedKind, PythonManifestKind, } from './manifest/package';
 export { createMinimalManifest, stringifyManifest, type CreateMinimalManifestOptions, } from './manifest/serialize';

package/dist/index.js

@@ -60,8 +60,51 @@ async function parseDjangoSettingsModule(content) {
 }
 
 // src/manifest/dist-metadata.ts
-import { readdir, readFile as readFile2 } from "fs/promises";
+import { createHash } from "crypto";
+import { createReadStream } from "fs";
+import { appendFile, readdir, readFile as readFile2 } from "fs/promises";
 import { join as join2 } from "path";
+
+// src/manifest/pep508.ts
+var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
+function splitExtras(spec) {
+  const match = EXTRAS_REGEX.exec(spec);
+  if (!match) {
+    return [spec, void 0];
+  }
+  const extras = match[2].split(",").map((e) => e.trim());
+  return [match[1], extras];
+}
+function normalizePackageName(name) {
+  return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+function formatPep508(req) {
+  let result = req.name;
+  if (req.extras && req.extras.length > 0) {
+    result += `[${req.extras.join(",")}]`;
+  }
+  if (req.url) {
+    result += ` @ ${req.url}`;
+  } else if (req.version && req.version !== "*") {
+    result += req.version;
+  }
+  if (req.markers) {
+    result += ` ; ${req.markers}`;
+  }
+  return result;
+}
+function mergeExtras(existing, additional) {
+  const result = new Set(existing || []);
+  if (additional) {
+    const additionalArray = Array.isArray(additional) ? additional : [additional];
+    for (const extra of additionalArray) {
+      result.add(extra);
+    }
+  }
+  return result.size > 0 ? Array.from(result) : void 0;
+}
+
+// src/manifest/dist-metadata.ts
 async function readDistInfoFile(distInfoDir, filename) {
   try {
     return await readFile2(join2(distInfoDir, filename), "utf-8");
@@ -148,6 +191,62 @@ async function scanDistributions(sitePackagesDir) {
   }
   return index;
 }
+function hashFile(filePath) {
+  return new Promise((resolve, reject) => {
+    const h = createHash("sha256");
+    let size = 0;
+    const stream = createReadStream(filePath);
+    stream.on("data", (chunk) => {
+      size += chunk.length;
+      h.update(chunk);
+    });
+    stream.on("error", reject);
+    stream.on("end", () => {
+      resolve({ hash: h.digest("base64url"), size });
+    });
+  });
+}
+async function extendDistRecord(sitePackagesDir, packageName, paths) {
+  const normalizedTarget = normalizePackageName(packageName);
+  const entries = await readdir(sitePackagesDir);
+  const distInfoDirName = entries.find((e) => {
+    if (!e.endsWith(".dist-info"))
+      return false;
+    const withoutSuffix = e.slice(0, -".dist-info".length);
+    const lastHyphen = withoutSuffix.lastIndexOf("-");
+    if (lastHyphen === -1)
+      return false;
+    const dirName = withoutSuffix.slice(0, lastHyphen);
+    return normalizePackageName(dirName) === normalizedTarget;
+  });
+  if (!distInfoDirName) {
+    throw new Error(
+      `No .dist-info directory found for package "${packageName}" in ${sitePackagesDir}`
+    );
+  }
+  const recordPath = join2(sitePackagesDir, distInfoDirName, "RECORD");
+  let existingRecord;
+  try {
+    existingRecord = await readFile2(recordPath, "utf-8");
+  } catch {
+    throw new Error(`RECORD file not found in ${distInfoDirName}`);
+  }
+  const existingPaths = new Set(
+    existingRecord.split("\n").filter((line) => line.length > 0).map((line) => line.split(",")[0])
+  );
+  const newEntries = paths.filter((p) => !existingPaths.has(p));
+  if (newEntries.length > 0) {
+    const prefix = existingRecord.length > 0 && !existingRecord.endsWith("\n") ? "\n" : "";
+    const lines = [];
+    for (const p of newEntries) {
+      const fullPath = join2(sitePackagesDir, p);
+      const { hash, size } = await hashFile(fullPath);
+      lines.push(`${p},sha256=${hash},${size}`);
+    }
+    await appendFile(recordPath, prefix + lines.join("\n") + "\n");
+  }
+  return newEntries.length;
+}
 
 // src/manifest/package.ts
 import path3 from "path";
@@ -371,42 +470,6 @@ var PipfileLikeSchema = pipfileLikeSchema;
 var PipfileLockMetaSchema = pipfileLockMetaSchema.passthrough();
 var PipfileLockLikeSchema = pipfileLockLikeSchema;
 
-// src/manifest/pep508.ts
-var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
-function splitExtras(spec) {
-  const match = EXTRAS_REGEX.exec(spec);
-  if (!match) {
-    return [spec, void 0];
-  }
-  const extras = match[2].split(",").map((e) => e.trim());
-  return [match[1], extras];
-}
-function formatPep508(req) {
-  let result = req.name;
-  if (req.extras && req.extras.length > 0) {
-    result += `[${req.extras.join(",")}]`;
-  }
-  if (req.url) {
-    result += ` @ ${req.url}`;
-  } else if (req.version && req.version !== "*") {
-    result += req.version;
-  }
-  if (req.markers) {
-    result += ` ; ${req.markers}`;
-  }
-  return result;
-}
-function mergeExtras(existing, additional) {
-  const result = new Set(existing || []);
-  if (additional) {
-    const additionalArray = Array.isArray(additional) ? additional : [additional];
-    for (const extra of additionalArray) {
-      result.add(extra);
-    }
-  }
-  return result.size > 0 ? Array.from(result) : void 0;
-}
-
 // src/util/type.ts
 function isPlainObject(value) {
   return value != null && typeof value === "object" && !Array.isArray(value);
@@ -2204,7 +2267,7 @@ function isPrivatePackageSource(source) {
   }
   return false;
 }
-function normalizePackageName(name) {
+function normalizePackageName2(name) {
   return name.toLowerCase().replace(/[-_.]+/g, "-");
 }
 function classifyPackages(options) {
@@ -2212,9 +2275,9 @@ function classifyPackages(options) {
   const privatePackages = [];
   const publicPackages = [];
   const packageVersions = {};
-  const excludeSet = new Set(excludePackages.map(normalizePackageName));
+  const excludeSet = new Set(excludePackages.map(normalizePackageName2));
   for (const pkg of lockFile.packages) {
-    if (excludeSet.has(normalizePackageName(pkg.name))) {
+    if (excludeSet.has(normalizePackageName2(pkg.name))) {
       continue;
     }
     packageVersions[pkg.name] = pkg.version;
@@ -2413,9 +2476,10 @@ export {
   containsAppOrHandler,
   createMinimalManifest,
   discoverPythonPackage,
+  extendDistRecord,
   getStringConstant,
   isPrivatePackageSource,
-  normalizePackageName,
+  normalizePackageName2 as normalizePackageName,
   parseDjangoSettingsModule,
   parseUvLock,
   scanDistributions,

package/dist/manifest/dist-metadata.d.ts

@@ -101,3 +101,17 @@ export type DistributionIndex = Map<string, Distribution>;
  * @returns Map of normalized package name to distribution info
  */
 export declare function scanDistributions(sitePackagesDir: string): Promise<DistributionIndex>;
+/**
+ * Append new file entries to a distribution's RECORD file.
+ *
+ * Finds the `.dist-info` directory for the given package, reads its RECORD,
+ * and appends any paths not already tracked. The caller is responsible for
+ * scanning directories and building the path list.
+ *
+ * @param sitePackagesDir - Absolute path to a site-packages directory
+ * @param packageName - Distribution name (matched via PEP 503 normalization)
+ * @param paths - File paths relative to site-packages to add
+ * @returns Count of new entries appended (skips paths already in RECORD)
+ * @throws If the dist-info directory or RECORD file is not found
+ */
+export declare function extendDistRecord(sitePackagesDir: string, packageName: string, paths: string[]): Promise<number>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/python-analysis",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",