@visulima/task-runner 1.0.0-alpha.7 → 1.0.0-alpha.9

package/dist/packem_shared/RemoteCache-DSU3lc87.js

@@ -1,219 +0,0 @@
-import { createRequire as __cjs_createRequire } from "node:module";
-
-const __cjs_require = __cjs_createRequire(import.meta.url);
-
-const __cjs_getProcess = typeof globalThis !== "undefined" && typeof globalThis.process !== "undefined" ? globalThis.process : process;
-
-const __cjs_getBuiltinModule = (module) => {
-    // Check if we're in Node.js and version supports getBuiltinModule
-    if (typeof __cjs_getProcess !== "undefined" && __cjs_getProcess.versions && __cjs_getProcess.versions.node) {
-        const [major, minor] = __cjs_getProcess.versions.node.split(".").map(Number);
-        // Node.js 20.16.0+ and 22.3.0+
-        if (major > 22 || (major === 22 && minor >= 3) || (major === 20 && minor >= 16)) {
-            return __cjs_getProcess.getBuiltinModule(module);
-        }
-    }
-    // Fallback to createRequire
-    return __cjs_require(module);
-};
-
-const {
-  createHmac,
-  timingSafeEqual
-} = __cjs_getBuiltinModule("node:crypto");
-const {
-  createWriteStream,
-  createReadStream
-} = __cjs_getBuiltinModule("node:fs");
-const {
-  mkdir,
-  rm,
-  stat
-} = __cjs_getBuiltinModule("node:fs/promises");
-const {
-  pipeline
-} = __cjs_getBuiltinModule("node:stream/promises");
-import { join } from '@visulima/path';
-import { e as extractTarBrotli, a as extractTarGz, c as createTarBrotli, b as createTarGz } from './archive-UQHAnZUa.js';
-
-const SIGNATURE_HEADER = "X-Artifact-Signature";
-const MIN_SECRET_LENGTH = 16;
-const computeArtifactSignatureStream = async (secret, hash, archivePath) => {
-  const hmac = createHmac("sha256", secret);
-  hmac.update(hash);
-  const source = createReadStream(archivePath);
-  for await (const chunk of source) {
-    hmac.update(chunk);
-  }
-  return hmac.digest("hex");
-};
-const signaturesMatch = (a, b) => {
-  if (a.length !== b.length) {
-    return false;
-  }
-  try {
-    return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
-  } catch {
-    return false;
-  }
-};
-class RemoteCache {
-  #url;
-  #token;
-  #teamId;
-  #timeout;
-  #read;
-  #write;
-  #onUploadError;
-  #compression;
-  #signingSecret;
-  #verifyOnDownload;
-  constructor(options) {
-    this.#url = options.url.replace(/\/$/, "");
-    this.#token = options.token;
-    this.#teamId = options.teamId;
-    this.#timeout = options.timeout ?? 3e4;
-    this.#read = options.read ?? true;
-    this.#write = options.write ?? true;
-    this.#onUploadError = options.onUploadError;
-    this.#compression = options.compression ?? "gzip";
-    if (options.signing) {
-      if (options.signing.secret.length < MIN_SECRET_LENGTH) {
-        throw new Error(`Remote cache signing secret must be at least ${String(MIN_SECRET_LENGTH)} characters.`);
-      }
-      this.#signingSecret = options.signing.secret;
-      this.#verifyOnDownload = options.signing.verifyOnDownload ?? false;
-    } else {
-      this.#signingSecret = void 0;
-      this.#verifyOnDownload = false;
-    }
-  }
-  /**
-   * Retrieves a cached artifact from the remote cache.
-   * Returns the local path to the extracted cache entry, or undefined if not found.
-   */
-  async retrieve(hash, localCacheDirectory) {
-    if (!this.#read) {
-      return false;
-    }
-    const entryDirectory = join(localCacheDirectory, hash);
-    const archivePath = join(localCacheDirectory, `.remote-${hash}.tar.gz`);
-    try {
-      const artifactUrl = this.#buildUrl(`/v8/artifacts/${hash}`);
-      const response = await fetch(artifactUrl, {
-        headers: this.#buildHeaders(),
-        method: "GET",
-        signal: AbortSignal.timeout(this.#timeout)
-      });
-      if (!response.ok) {
-        return false;
-      }
-      const receivedSignature = this.#signingSecret ? response.headers.get(SIGNATURE_HEADER.toLowerCase()) ?? response.headers.get(SIGNATURE_HEADER) : null;
-      if (this.#signingSecret && !receivedSignature && this.#verifyOnDownload) {
-        return false;
-      }
-      if (!response.body) {
-        return false;
-      }
-      await mkdir(localCacheDirectory, { recursive: true });
-      await pipeline(response.body, createWriteStream(archivePath));
-      if (this.#signingSecret && receivedSignature) {
-        const expected = await computeArtifactSignatureStream(this.#signingSecret, hash, archivePath);
-        if (!signaturesMatch(receivedSignature, expected)) {
-          return false;
-        }
-      }
-      await mkdir(entryDirectory, { recursive: true });
-      await (this.#compression === "brotli" ? extractTarBrotli(archivePath, entryDirectory) : extractTarGz(archivePath, entryDirectory));
-      await rm(archivePath, { force: true });
-      return true;
-    } catch {
-      await rm(archivePath, { force: true }).catch(() => {
-      });
-      await rm(entryDirectory, { force: true, recursive: true }).catch(() => {
-      });
-      return false;
-    }
-  }
-  /**
-   * Stores a cache entry in the remote cache.
-   */
-  async store(hash, localCacheDirectory) {
-    if (!this.#write) {
-      return false;
-    }
-    const entryDirectory = join(localCacheDirectory, hash);
-    const archivePath = join(localCacheDirectory, `.upload-${hash}.tar.gz`);
-    try {
-      await stat(join(entryDirectory, ".commit"));
-      await (this.#compression === "brotli" ? createTarBrotli(entryDirectory, archivePath) : createTarGz(entryDirectory, archivePath));
-      const artifactUrl = this.#buildUrl(`/v8/artifacts/${hash}`);
-      const { size } = await stat(archivePath);
-      const uploadHeaders = {
-        ...this.#buildHeaders(),
-        "Content-Length": String(size),
-        // Advertise the compression format in a custom header so
-        // spec-compatible servers (and the matching download side)
-        // can branch if needed. The body is still an opaque blob
-        // from the server's perspective.
-        "Content-Type": "application/octet-stream",
-        "X-Artifact-Compression": this.#compression
-      };
-      if (this.#signingSecret) {
-        uploadHeaders[SIGNATURE_HEADER] = await computeArtifactSignatureStream(this.#signingSecret, hash, archivePath);
-      }
-      const response = await fetch(artifactUrl, {
-        body: createReadStream(archivePath),
-        // @ts-expect-error — `duplex` is a Node-specific fetch
-        // option required when the body is a stream. The DOM
-        // `RequestInit` type doesn't include it yet.
-        duplex: "half",
-        headers: uploadHeaders,
-        method: "PUT",
-        signal: AbortSignal.timeout(this.#timeout)
-      });
-      await rm(archivePath, { force: true });
-      return response.ok;
-    } catch (error) {
-      await rm(archivePath, { force: true }).catch(() => {
-      });
-      this.#onUploadError?.(hash, error);
-      return false;
-    }
-  }
-  /**
-   * Checks if an artifact exists in the remote cache without downloading it.
-   */
-  async exists(hash) {
-    if (!this.#read) {
-      return false;
-    }
-    try {
-      const artifactUrl = this.#buildUrl(`/v8/artifacts/${hash}`);
-      const response = await fetch(artifactUrl, {
-        headers: this.#buildHeaders(),
-        method: "HEAD",
-        signal: AbortSignal.timeout(this.#timeout)
-      });
-      return response.ok;
-    } catch {
-      return false;
-    }
-  }
-  #buildUrl(path) {
-    const url = `${this.#url}${path}`;
-    if (this.#teamId) {
-      return `${url}?teamId=${encodeURIComponent(this.#teamId)}`;
-    }
-    return url;
-  }
-  #buildHeaders() {
-    const headers = {};
-    if (this.#token) {
-      headers["Authorization"] = `Bearer ${this.#token}`;
-    }
-    return headers;
-  }
-}
-
-export { RemoteCache };

package/dist/packem_shared/archive-UQHAnZUa.js

@@ -1,102 +0,0 @@
-import { createRequire as __cjs_createRequire } from "node:module";
-
-const __cjs_require = __cjs_createRequire(import.meta.url);
-
-const __cjs_getProcess = typeof globalThis !== "undefined" && typeof globalThis.process !== "undefined" ? globalThis.process : process;
-
-const __cjs_getBuiltinModule = (module) => {
-    // Check if we're in Node.js and version supports getBuiltinModule
-    if (typeof __cjs_getProcess !== "undefined" && __cjs_getProcess.versions && __cjs_getProcess.versions.node) {
-        const [major, minor] = __cjs_getProcess.versions.node.split(".").map(Number);
-        // Node.js 20.16.0+ and 22.3.0+
-        if (major > 22 || (major === 22 && minor >= 3) || (major === 20 && minor >= 16)) {
-            return __cjs_getProcess.getBuiltinModule(module);
-        }
-    }
-    // Fallback to createRequire
-    return __cjs_require(module);
-};
-
-const {
-  execFile
-} = __cjs_getBuiltinModule("node:child_process");
-const {
-  createReadStream,
-  createWriteStream
-} = __cjs_getBuiltinModule("node:fs");
-const {
-  rm
-} = __cjs_getBuiltinModule("node:fs/promises");
-const {
-  pipeline
-} = __cjs_getBuiltinModule("node:stream/promises");
-const {
-  createBrotliDecompress,
-  createBrotliCompress,
-  constants
-} = __cjs_getBuiltinModule("node:zlib");
-
-const BROTLI_COMPRESS_OPTIONS = {
-  params: {
-    [constants.BROTLI_PARAM_MODE]: constants.BROTLI_MODE_TEXT,
-    [constants.BROTLI_PARAM_QUALITY]: 4
-  }
-};
-const createTar = (sourceDirectory, outputPath) => new Promise((resolve, reject) => {
-  execFile("tar", ["-cf", outputPath, "-C", sourceDirectory, "."], (error) => {
-    if (error) {
-      reject(error);
-    } else {
-      resolve();
-    }
-  });
-});
-const extractTar = (archivePath, destinationDirectory) => new Promise((resolve, reject) => {
-  execFile("tar", ["-xf", archivePath, "-C", destinationDirectory], (error) => {
-    if (error) {
-      reject(error);
-    } else {
-      resolve();
-    }
-  });
-});
-const createTarGz = (sourceDirectory, outputPath) => new Promise((resolve, reject) => {
-  execFile("tar", ["-czf", outputPath, "-C", sourceDirectory, "."], (error) => {
-    if (error) {
-      reject(error);
-    } else {
-      resolve();
-    }
-  });
-});
-const extractTarGz = (archivePath, destinationDirectory) => new Promise((resolve, reject) => {
-  execFile("tar", ["-xzf", archivePath, "-C", destinationDirectory], (error) => {
-    if (error) {
-      reject(error);
-    } else {
-      resolve();
-    }
-  });
-});
-const createTarBrotli = async (sourceDirectory, outputPath) => {
-  const tarPath = `${outputPath}.tar`;
-  try {
-    await createTar(sourceDirectory, tarPath);
-    await pipeline(createReadStream(tarPath), createBrotliCompress(BROTLI_COMPRESS_OPTIONS), createWriteStream(outputPath));
-  } finally {
-    await rm(tarPath, { force: true }).catch(() => {
-    });
-  }
-};
-const extractTarBrotli = async (archivePath, destinationDirectory) => {
-  const tarPath = `${archivePath}.tar`;
-  try {
-    await pipeline(createReadStream(archivePath), createBrotliDecompress(), createWriteStream(tarPath));
-    await extractTar(tarPath, destinationDirectory);
-  } finally {
-    await rm(tarPath, { force: true }).catch(() => {
-    });
-  }
-};
-
-export { extractTarGz as a, createTarGz as b, createTarBrotli as c, extractTarBrotli as e };

package/dist/project-constraints.d.ts

@@ -1,9 +0,0 @@
-import type { ConstraintsConfig, ConstraintViolation, ProjectGraph } from "./types.d.ts";
-/**
- * Enforces project dependency constraints on a project graph.
- * @param projectGraph The workspace project graph to validate.
- * @param constraints The constraint rules to enforce.
- * @returns Array of violations found. Empty means all constraints pass.
- */
-declare const enforceProjectConstraints: (projectGraph: ProjectGraph, constraints: ConstraintsConfig) => ConstraintViolation[];
-export { enforceProjectConstraints };

package/dist/remote-cache.d.ts

@@ -1,100 +0,0 @@
-/**
- * Compression algorithm used for artifact tarballs on the wire.
- * - `"gzip"` (default): tar+gzip, matches Turborepo's protocol format
- *   and stays interop-safe with existing remote cache servers.
- * - `"brotli"`: tar + Node brotli (BROTLI_MODE_TEXT, quality 4) — a
- *   solid ratio/speed trade-off for source-tree tarballs. Both upload
- *   and download sides must agree; switching invalidates existing
- *   remote entries (they will simply re-populate on next run).
- */
-export type RemoteCacheCompression = "brotli" | "gzip";
-/**
- * HMAC signing configuration for cache integrity.
- *
- * When set, every upload carries an `X-Artifact-Signature` header
- * containing the HMAC-SHA256 digest of `hash | body`. On download,
- * the client recomputes the HMAC and rejects any artifact whose
- * signature doesn't match using a constant-time comparison.
- *
- * Prevents cache poisoning in shared team environments where a
- * compromised cache server (or a MITM) could inject malicious
- * artifacts. Unsigned entries (written before signing was enabled)
- * are accepted only when `verifyOnDownload === false` — the default.
- */
-export interface RemoteCacheSigning {
-    /** Shared secret. Must be at least 16 characters. */
-    secret: string;
-    /**
-     * Reject downloads whose signature doesn't match or is missing.
-     * Set to `true` once every upload on your server is signed.
-     * @default false
-     */
-    verifyOnDownload?: boolean;
-}
-/**
- * Options for the remote cache.
- */
-interface RemoteCacheOptions {
-    /**
-     * Compression format for artifact tarballs. Defaults to `"gzip"`
-     * for Turborepo protocol compatibility.
-     */
-    compression?: RemoteCacheCompression;
-    /**
-     * Called when a fire-and-forget upload fails.
-     * Since uploads are non-blocking, errors are silently swallowed by default.
-     * Provide this callback to log or report upload failures.
-     */
-    onUploadError?: (hash: string, error: unknown) => void;
-    /** Whether to enable remote cache reads */
-    read?: boolean;
-    /**
-     * HMAC-SHA256 signing for upload integrity. When set, every
-     * uploaded artifact carries an `X-Artifact-Signature` header;
-     * downloads with `verifyOnDownload: true` reject unsigned or
-     * tampered payloads.
-     */
-    signing?: RemoteCacheSigning;
-    /** Team ID or namespace for cache isolation */
-    teamId?: string;
-    /** Request timeout in milliseconds (default: 30000) */
-    timeout?: number;
-    /** Authentication token for the remote cache */
-    token?: string;
-    /** Remote cache server URL (e.g., "https://cache.example.com") */
-    url: string;
-    /** Whether to enable remote cache writes */
-    write?: boolean;
-}
-/**
- * HTTP-based remote cache compatible with the Turborepo remote cache protocol.
- *
- * Protocol:
- * - GET  /v8/artifacts/{hash}?teamId={team}  -> retrieve cached artifact (gzipped tar)
- * - PUT  /v8/artifacts/{hash}?teamId={team}  -> store artifact
- * - POST /v8/artifacts/events                -> analytics (optional)
- *
- * Authentication via `Authorization: Bearer {token}` header.
- *
- * The cache entry is a gzipped tarball containing the cache directory contents
- * (code, terminalOutput, fingerprint.json, outputs/, .commit).
- */
-declare class RemoteCache {
-    #private;
-    constructor(options: RemoteCacheOptions);
-    /**
-     * Retrieves a cached artifact from the remote cache.
-     * Returns the local path to the extracted cache entry, or undefined if not found.
-     */
-    retrieve(hash: string, localCacheDirectory: string): Promise<boolean>;
-    /**
-     * Stores a cache entry in the remote cache.
-     */
-    store(hash: string, localCacheDirectory: string): Promise<boolean>;
-    /**
-     * Checks if an artifact exists in the remote cache without downloading it.
-     */
-    exists(hash: string): Promise<boolean>;
-}
-export type { RemoteCacheOptions };
-export { RemoteCache };

package/dist/run-summary.d.ts

@@ -1,111 +0,0 @@
-import type { OutputSpec, TaskGraph, TaskHashDetails, TaskResults } from "./types.d.ts";
-/**
- * Summary of a single task execution.
- */
-interface TaskSummary {
-    /** Whether the task was cacheable */
-    cacheable: boolean;
-    /** Cache status */
-    cacheStatus: "HIT" | "MISS" | "REMOTE_HIT" | "SKIPPED";
-    /** Dependencies on other tasks */
-    dependencies: string[];
-    /** Duration in milliseconds */
-    duration: number | undefined;
-    /** End time (ISO 8601) */
-    endTime: string | undefined;
-    /** Exit code */
-    exitCode: number | undefined;
-    /** The computed cache hash */
-    hash: string | undefined;
-    /** Detailed hash information */
-    hashDetails: TaskHashDetails | undefined;
-    /** The task's declared outputs (glob patterns, literals, or `{ auto: true }`). */
-    outputs: OutputSpec[];
-    /** Start time (ISO 8601) */
-    startTime: string | undefined;
-    /** The task target */
-    target: {
-        configuration?: string;
-        project: string;
-        target: string;
-    };
-    /** The task ID (e.g., "app:build") */
-    taskId: string;
-}
-/**
- * Complete summary of a task runner execution.
- */
-interface RunSummary {
-    /** Total duration in milliseconds */
-    duration: number;
-    /** Run end time (ISO 8601) */
-    endTime: string;
-    /** Environment info */
-    environment: {
-        /** Architecture */
-        arch: string;
-        /** Node.js version */
-        nodeVersion: string;
-        /** Platform */
-        platform: string;
-    };
-    /** Unique run ID */
-    id: string;
-    /** Run start time (ISO 8601) */
-    startTime: string;
-    /** Overall execution statistics */
-    stats: {
-        /** Number of cached tasks (local + remote) */
-        cached: number;
-        /** Number of failed tasks */
-        failed: number;
-        /** Number of skipped tasks */
-        skipped: number;
-        /** Number of successful tasks */
-        succeeded: number;
-        /** Total number of tasks */
-        total: number;
-    };
-    /** The task graph used for this run */
-    taskGraph: {
-        dependencies: Record<string, string[]>;
-        roots: string[];
-    };
-    /** Summary of each task */
-    tasks: TaskSummary[];
-}
-/**
- * Generates a run summary from task results.
- */
-declare const generateRunSummary: (results: TaskResults, taskGraph: TaskGraph, startTime: number) => RunSummary;
-/**
- * Writes the run summary to a JSON file in the `.task-runner/runs/` directory.
- * @param summary The run summary to write
- * @param workspaceRoot The workspace root directory
- * @returns The path to the written summary file
- */
-declare const writeRunSummary: (summary: RunSummary, workspaceRoot: string) => Promise<string>;
-/**
- * Path where the most-recent run summary is persisted.
- * Consumers (e.g. CLIs exposing `--last-details`) read this file
- * to replay or render the previous run without re-executing.
- */
-declare const getLastRunSummaryPath: (workspaceRoot: string) => string;
-/**
- * Persists `summary` as the most-recent run summary at
- * `.task-runner/last-summary.json`, overwriting any previous entry.
- *
- * This is the companion to {@link readLastRunSummary} and powers
- * CLI surfaces that display "last run" details without re-running tasks.
- * @returns The path to the written summary file
- */
-declare const writeLastRunSummary: (summary: RunSummary, workspaceRoot: string) => Promise<string>;
-/**
- * Reads the most-recent run summary written by {@link writeLastRunSummary}.
- * Returns `undefined` when no previous run has been recorded or the file
- * cannot be parsed — callers should render an informational message
- * instead of treating this as an error.
- */
-declare const readLastRunSummary: (workspaceRoot: string) => Promise<RunSummary | undefined>;
-export type { RunSummary, TaskSummary };
-export { generateRunSummary, getLastRunSummaryPath, readLastRunSummary, writeLastRunSummary, writeRunSummary };

package/dist/task-graph-utils.d.ts

@@ -1,39 +0,0 @@
-import type { TaskGraph } from "./types.d.ts";
-/**
- * Finds a single cycle in the task graph, if one exists.
- * Returns the cycle as an array of task IDs, or null if no cycle exists.
- */
-export declare const findCycle: (taskGraph: TaskGraph) => string[] | undefined;
-/**
- * Finds all cycles in the task graph.
- */
-export declare const findCycles: (taskGraph: TaskGraph) => string[][];
-/**
- * Walks the task graph in topological order (dependencies before dependents),
- * calling the callback for each task.
- *
- * Note: If the graph contains cycles, tasks involved in cycles will not be visited.
- * Use `findCycle` to detect cycles before walking if complete traversal is required.
- */
-export declare const walkTaskGraph: (taskGraph: TaskGraph, callback: (taskId: string) => void) => void;
-/**
- * Returns a reversed copy of the task graph (edges point in the opposite direction).
- */
-export declare const reverseTaskGraph: (taskGraph: TaskGraph) => TaskGraph;
-/**
- * Returns the leaf tasks (tasks with no dependencies of their own).
- */
-export declare const getLeafTasks: (taskGraph: TaskGraph) => string[];
-/**
- * Removes edges that form cycles, making the graph acyclic.
- * Returns a new task graph without the cycle-forming edges.
- */
-export declare const makeAcyclic: (taskGraph: TaskGraph) => TaskGraph;
-/**
- * Gets all tasks that depend on the given task (directly or transitively).
- */
-export declare const getDependentTasks: (taskGraph: TaskGraph, taskId: string) => string[];
-/**
- * Gets all tasks that the given task depends on (directly or transitively).
- */
-export declare const getTransitiveDependencies: (taskGraph: TaskGraph, taskId: string) => string[];

package/dist/task-graph.d.ts

@@ -1,22 +0,0 @@
-import type { ProjectGraph, TargetConfiguration, Task, TaskGraph, TaskTarget, WorkspaceConfiguration } from "./types.d.ts";
-interface CreateTaskGraphOptions {
-    /** The project graph */
-    projectGraph: ProjectGraph;
-    /** Target default configurations */
-    targetDefaults?: Record<string, Partial<TargetConfiguration>>;
-    /** The workspace configuration */
-    workspace: WorkspaceConfiguration;
-}
-/**
- * Creates a unique task ID from a target.
- */
-declare const getTaskId: (target: TaskTarget) => string;
-/**
- * Parses a task ID into its component parts.
- */
-declare const parseTaskId: (taskId: string) => TaskTarget;
-/**
- * Creates a task graph from a list of tasks, resolving all dependencies.
- */
-declare const createTaskGraph: (initialTasks: Task[], options: CreateTaskGraphOptions) => TaskGraph;
-export { createTaskGraph, getTaskId, parseTaskId };