@vltpkg/query 0.0.0-8 → 1.0.0-rc.1

package/dist/esm/pseudo/scanned.js

@@ -1,12 +1,17 @@
-import { error } from '@vltpkg/error-cause';
+import { removeDanglingEdges, removeNode } from "./helpers.js";
 /**
- * Ensures that security report data is available for all packages in the current graph.
- * Throws an error if security data is not available.
+ * :scanned pseudo selector.
+ *
+ * Remove all nodes that do not have available metadata
+ * in the security archive.
  */
 export const scanned = async (state) => {
-    if (!state.securityArchive?.ok) {
-        throw error('Security report data missing');
+    for (const node of state.partial.nodes) {
+        if (!state.securityArchive?.has(node.id)) {
+            removeNode(state, node);
+        }
     }
+    removeDanglingEdges(state);
     return state;
 };
 //# sourceMappingURL=scanned.js.map

package/dist/esm/pseudo/scanned.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanned.js","sourceRoot":"","sources":["../../../src/pseudo/scanned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAG3C;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAClD,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport type { ParserState } from '../types.ts'\n\n/**\n * Ensures that security report data is available for all packages in the current graph.\n * Throws an error if security data is not available.\n */\nexport const scanned = async (state: ParserState) => {\n  if (!state.securityArchive?.ok) {\n    throw error('Security report data missing')\n  }\n  return state\n}\n"]}
+{"version":3,"file":"scanned.js","sourceRoot":"","sources":["../../../src/pseudo/scanned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAG9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { removeDanglingEdges, removeNode } from './helpers.ts'\nimport type { ParserState } from '../types.ts'\n\n/**\n * :scanned pseudo selector.\n *\n * Remove all nodes that do not have available metadata\n * in the security archive.\n */\nexport const scanned = async (state: ParserState) => {\n  for (const node of state.partial.nodes) {\n    if (!state.securityArchive?.has(node.id)) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/score.d.ts

@@ -0,0 +1,16 @@
+import type { PackageScore } from '@vltpkg/security-archive';
+import type { ParserState } from '../types.ts';
+import type { PostcssNode } from '@vltpkg/dss-parser';
+export type ScoreKinds = keyof PackageScore;
+export type ScoreComparator = '>' | '<' | '>=' | '<=' | '=' | undefined;
+export declare const isScoreKind: (value?: string) => value is ScoreKinds;
+export declare const asScoreKind: (value?: string) => ScoreKinds;
+export declare const parseInternals: (nodes: PostcssNode[]) => {
+    comparator: ScoreComparator;
+    rate: number;
+    kind: ScoreKinds;
+};
+export declare const score: (state: ParserState) => Promise<ParserState & {
+    securityArchive: NonNullable<ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=score.d.ts.map

package/dist/esm/pseudo/score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../../src/pseudo/score.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,UAAU,GAAG,MAAM,YAAY,CAAA;AAE3C,MAAM,MAAM,eAAe,GACvB,GAAG,GACH,GAAG,GACH,IAAI,GACJ,IAAI,GACJ,GAAG,GACH,SAAS,CAAA;AAYb,eAAO,MAAM,WAAW,WAAY,MAAM,KAAG,KAAK,IAAI,UACtB,CAAA;AAEhC,eAAO,MAAM,WAAW,WAAY,MAAM,KAAG,UAQ5C,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB;IACD,UAAU,EAAE,eAAe,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,UAAU,CAAA;CAsEjB,CAAA;AAED,eAAO,MAAM,KAAK,UAAiB,WAAW;;EA6D7C,CAAA"}

package/dist/esm/pseudo/score.js

@@ -0,0 +1,133 @@
+import { error } from '@vltpkg/error-cause';
+import { asError } from '@vltpkg/types';
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from '@vltpkg/dss-parser';
+import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
+const kinds = new Set([
+    'overall',
+    'license',
+    'maintenance',
+    'quality',
+    'supplyChain',
+    'vulnerability',
+    undefined,
+]);
+export const isScoreKind = (value) => kinds.has(value);
+export const asScoreKind = (value) => {
+    if (!isScoreKind(value)) {
+        throw error('Expected a valid score kind', {
+            found: value,
+            validOptions: Array.from(kinds),
+        });
+    }
+    return value;
+};
+export const parseInternals = (nodes) => {
+    let rateStr = '';
+    let comparator = '=';
+    let kind = 'overall';
+    // Parse the first parameter (rate with optional comparator)
+    if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        rateStr = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
+    }
+    else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        const tagNode = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]);
+        rateStr = tagNode.value;
+    }
+    // Extract comparator if present
+    if (rateStr.startsWith('>=')) {
+        comparator = '>=';
+        rateStr = rateStr.substring(2);
+    }
+    else if (rateStr.startsWith('<=')) {
+        comparator = '<=';
+        rateStr = rateStr.substring(2);
+    }
+    else if (rateStr.startsWith('>')) {
+        comparator = '>';
+        rateStr = rateStr.substring(1);
+    }
+    else if (rateStr.startsWith('<')) {
+        comparator = '<';
+        rateStr = rateStr.substring(1);
+    }
+    // Parse rate as number
+    let rate = parseFloat(rateStr);
+    // Normalize to 0-1 range if needed
+    if (rate > 1) {
+        rate = rate / 100;
+    }
+    // Validate rate is in acceptable range
+    if (rate < 0 || rate > 1) {
+        throw error('Expected rate to be between 0 and 100', {
+            found: rateStr,
+        });
+    }
+    // Parse the second parameter (kind) if present
+    if (nodes.length > 1) {
+        if (isStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])) {
+            kind = asScoreKind(removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])
+                .value));
+        }
+        else if (isTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])) {
+            kind = asScoreKind(asTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0]).value);
+        }
+    }
+    return { comparator, rate, kind };
+};
+export const score = async (state) => {
+    assertSecurityArchive(state, 'score');
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        if (asError(err).message === 'Expected a query node') {
+            // No parameters provided - pseudo state form: match ANY score (scanned packages)
+            for (const node of state.partial.nodes) {
+                const report = state.securityArchive.get(node.id);
+                if (!report) {
+                    removeNode(state, node);
+                }
+            }
+            removeDanglingEdges(state);
+            return state;
+        }
+        else {
+            throw error('Failed to parse :score selector', { cause: err });
+        }
+    }
+    const { comparator, rate, kind } = internals;
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        if (!report) {
+            removeNode(state, node);
+            continue;
+        }
+        const scoreValue = report.score[kind];
+        let exclude = false;
+        switch (comparator) {
+            case '>':
+                exclude = scoreValue <= rate;
+                break;
+            case '<':
+                exclude = scoreValue >= rate;
+                break;
+            case '>=':
+                exclude = scoreValue < rate;
+                break;
+            case '<=':
+                exclude = scoreValue > rate;
+                break;
+            default: // '='
+                exclude = scoreValue !== rate;
+                break;
+        }
+        if (exclude) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=score.js.map

package/dist/esm/pseudo/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../../../src/pseudo/score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAA;AAerB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAyB;IAC5C,SAAS;IACT,SAAS;IACT,aAAa;IACb,SAAS;IACT,aAAa;IACb,eAAe;IACf,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAuB,EAAE,CACjE,KAAK,CAAC,GAAG,CAAC,KAAmB,CAAC,CAAA;AAEhC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAc,EAAE;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,6BAA6B,EAAE;YACzC,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EAKpB,EAAE;IACF,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,UAAU,GAAoB,GAAG,CAAA;IACrC,IAAI,IAAI,GAAe,SAAS,CAAA;IAEhC,4DAA4D;IAC5D,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,YAAY,CACpB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;SAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CACvB,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAA;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAA;QACjB,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,UAAU,GAAG,IAAI,CAAA;QACjB,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,UAAU,GAAG,GAAG,CAAA;QAChB,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,UAAU,GAAG,GAAG,CAAA;QAChB,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IAE9B,mCAAmC;IACnC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,IAAI,GAAG,IAAI,GAAG,GAAG,CAAA;IACnB,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,uCAAuC,EAAE;YACnD,KAAK,EAAE,OAAO;SACf,CAAC,CAAA;IACJ,CAAC;IAED,+CAA+C;IAC/C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,GAAG,WAAW,CAChB,YAAY,CACV,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;iBACvD,KAAK,CACT,CACF,CAAA;QACH,CAAC;aAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;YACD,IAAI,GAAG,WAAW,CAChB,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAC9D,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAChD,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAErC,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;YACrD,iFAAiF;YACjF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACzB,CAAC;YACH,CAAC;YACD,mBAAmB,CAAC,KAAK,CAAC,CAAA;YAC1B,OAAO,KAAK,CAAA;QACd,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACvB,SAAQ;QACV,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,GAAG;gBACN,OAAO,GAAG,UAAU,IAAI,IAAI,CAAA;gBAC5B,MAAK;YACP,KAAK,GAAG;gBACN,OAAO,GAAG,UAAU,IAAI,IAAI,CAAA;gBAC5B,MAAK;YACP,KAAK,IAAI;gBACP,OAAO,GAAG,UAAU,GAAG,IAAI,CAAA;gBAC3B,MAAK;YACP,KAAK,IAAI;gBACP,OAAO,GAAG,UAAU,GAAG,IAAI,CAAA;gBAC3B,MAAK;YACP,SAAS,MAAM;gBACb,OAAO,GAAG,UAAU,KAAK,IAAI,CAAA;gBAC7B,MAAK;QACT,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport { asError } from '@vltpkg/types'\nimport {\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n  isTagNode,\n} from '@vltpkg/dss-parser'\nimport {\n  assertSecurityArchive,\n  removeDanglingEdges,\n  removeNode,\n  removeQuotes,\n} from './helpers.ts'\nimport type { PackageScore } from '@vltpkg/security-archive'\nimport type { ParserState } from '../types.ts'\nimport type { PostcssNode } from '@vltpkg/dss-parser'\n\nexport type ScoreKinds = keyof PackageScore\n\nexport type ScoreComparator =\n  | '>'\n  | '<'\n  | '>='\n  | '<='\n  | '='\n  | undefined\n\nconst kinds = new Set<ScoreKinds | undefined>([\n  'overall',\n  'license',\n  'maintenance',\n  'quality',\n  'supplyChain',\n  'vulnerability',\n  undefined,\n])\n\nexport const isScoreKind = (value?: string): value is ScoreKinds =>\n  kinds.has(value as ScoreKinds)\n\nexport const asScoreKind = (value?: string): ScoreKinds => {\n  if (!isScoreKind(value)) {\n    throw error('Expected a valid score kind', {\n      found: value,\n      validOptions: Array.from(kinds),\n    })\n  }\n  return value\n}\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): {\n  comparator: ScoreComparator\n  rate: number\n  kind: ScoreKinds\n} => {\n  let rateStr = ''\n  let comparator: ScoreComparator = '='\n  let kind: ScoreKinds = 'overall'\n\n  // Parse the first parameter (rate with optional comparator)\n  if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {\n    rateStr = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } else if (\n    isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n  ) {\n    const tagNode = asTagNode(\n      asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    )\n    rateStr = tagNode.value\n  }\n\n  // Extract comparator if present\n  if (rateStr.startsWith('>=')) {\n    comparator = '>='\n    rateStr = rateStr.substring(2)\n  } else if (rateStr.startsWith('<=')) {\n    comparator = '<='\n    rateStr = rateStr.substring(2)\n  } else if (rateStr.startsWith('>')) {\n    comparator = '>'\n    rateStr = rateStr.substring(1)\n  } else if (rateStr.startsWith('<')) {\n    comparator = '<'\n    rateStr = rateStr.substring(1)\n  }\n\n  // Parse rate as number\n  let rate = parseFloat(rateStr)\n\n  // Normalize to 0-1 range if needed\n  if (rate > 1) {\n    rate = rate / 100\n  }\n\n  // Validate rate is in acceptable range\n  if (rate < 0 || rate > 1) {\n    throw error('Expected rate to be between 0 and 100', {\n      found: rateStr,\n    })\n  }\n\n  // Parse the second parameter (kind) if present\n  if (nodes.length > 1) {\n    if (isStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])) {\n      kind = asScoreKind(\n        removeQuotes(\n          asStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n            .value,\n        ),\n      )\n    } else if (\n      isTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n    ) {\n      kind = asScoreKind(\n        asTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0]).value,\n      )\n    }\n  }\n\n  return { comparator, rate, kind }\n}\n\nexport const score = async (state: ParserState) => {\n  assertSecurityArchive(state, 'score')\n\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    if (asError(err).message === 'Expected a query node') {\n      // No parameters provided - pseudo state form: match ANY score (scanned packages)\n      for (const node of state.partial.nodes) {\n        const report = state.securityArchive.get(node.id)\n        if (!report) {\n          removeNode(state, node)\n        }\n      }\n      removeDanglingEdges(state)\n      return state\n    } else {\n      throw error('Failed to parse :score selector', { cause: err })\n    }\n  }\n\n  const { comparator, rate, kind } = internals\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    if (!report) {\n      removeNode(state, node)\n      continue\n    }\n\n    const scoreValue = report.score[kind]\n\n    let exclude = false\n    switch (comparator) {\n      case '>':\n        exclude = scoreValue <= rate\n        break\n      case '<':\n        exclude = scoreValue >= rate\n        break\n      case '>=':\n        exclude = scoreValue < rate\n        break\n      case '<=':\n        exclude = scoreValue > rate\n        break\n      default: // '='\n        exclude = scoreValue !== rate\n        break\n    }\n\n    if (exclude) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/scripts.d.ts

@@ -1,7 +1,10 @@
+import type { ParserState } from '../types.ts';
 /**
- * Filters out any node that does not have an **installScripts** report alert.
+ * :scripts Pseudo-Selector filters nodes based on whether they need to be built.
+ *
+ * A node needs to be built if it has:
+ * - Install lifecycle scripts (install, preinstall, postinstall)
+ * - Prepare scripts on importers or git dependencies (prepare, preprepare, postprepare)
  */
-export declare const scripts: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
-    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
-}>;
+export declare const scripts: (state: ParserState) => Promise<ParserState>;
 //# sourceMappingURL=scripts.d.ts.map

package/dist/esm/pseudo/scripts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../../../src/pseudo/scripts.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,OAAO;;EAGnB,CAAA"}
+{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../../../src/pseudo/scripts.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAmC9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,UAAiB,WAAW,yBAU/C,CAAA"}

package/dist/esm/pseudo/scripts.js

@@ -1,6 +1,44 @@
-import { createSecuritySelectorFilter } from "./helpers.js";
+import { removeNode, removeDanglingEdges } from "./helpers.js";
 /**
- * Filters out any node that does not have an **installScripts** report alert.
+ * Checks if a node needs to be built based on the conditions from the reify build process:
+ * 1. Has install lifecycle scripts (install, preinstall, postinstall)
+ * 2. Is an importer or git dependency with prepare scripts (prepare, preprepare, postprepare)
  */
-export const scripts = createSecuritySelectorFilter('scripts', 'installScripts');
+const nodeNeedsBuild = (node) => {
+    const { manifest } = node;
+    /* c8 ignore next */
+    if (!manifest)
+        return false;
+    const { scripts = {} } = manifest;
+    // Check for install lifecycle scripts
+    const runInstall = !!(scripts.install ||
+        scripts.preinstall ||
+        scripts.postinstall);
+    if (runInstall)
+        return true;
+    // Check for prepare scripts on importers or git dependencies
+    const prepable = node.id.startsWith('git') || node.importer;
+    const runPrepare = !!((scripts.prepare || scripts.preprepare || scripts.postprepare)
+    /* c8 ignore next 2 */
+    ) && prepable;
+    if (runPrepare)
+        return true;
+    return false;
+};
+/**
+ * :scripts Pseudo-Selector filters nodes based on whether they need to be built.
+ *
+ * A node needs to be built if it has:
+ * - Install lifecycle scripts (install, preinstall, postinstall)
+ * - Prepare scripts on importers or git dependencies (prepare, preprepare, postprepare)
+ */
+export const scripts = async (state) => {
+    for (const node of state.partial.nodes) {
+        if (!nodeNeedsBuild(node)) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
 //# sourceMappingURL=scripts.js.map

package/dist/esm/pseudo/scripts.js.map

@@ -1 +1 @@
-{"version":3,"file":"scripts.js","sourceRoot":"","sources":["../../../src/pseudo/scripts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,4BAA4B,CACjD,SAAS,EACT,gBAAgB,CACjB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have an **installScripts** report alert.\n */\nexport const scripts = createSecuritySelectorFilter(\n  'scripts',\n  'installScripts',\n)\n"]}
+{"version":3,"file":"scripts.js","sourceRoot":"","sources":["../../../src/pseudo/scripts.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAE9D;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,IAAc,EAAW,EAAE;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IACzB,oBAAoB;IACpB,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE3B,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAA;IAEjC,sCAAsC;IACtC,MAAM,UAAU,GAAG,CAAC,CAAC,CACnB,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,WAAW,CACpB,CAAA;IACD,IAAI,UAAU;QAAE,OAAO,IAAI,CAAA;IAE3B,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAA;IAC3D,MAAM,UAAU,GACd,CAAC,CAAC,CACA,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;IAC9D,sBAAsB;KACvB,IAAI,QAAQ,CAAA;IACf,IAAI,UAAU;QAAE,OAAO,IAAI,CAAA;IAE3B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import type { NodeLike } from '@vltpkg/types'\nimport type { ParserState } from '../types.ts'\nimport { removeNode, removeDanglingEdges } from './helpers.ts'\n\n/**\n * Checks if a node needs to be built based on the conditions from the reify build process:\n * 1. Has install lifecycle scripts (install, preinstall, postinstall)\n * 2. Is an importer or git dependency with prepare scripts (prepare, preprepare, postprepare)\n */\nconst nodeNeedsBuild = (node: NodeLike): boolean => {\n  const { manifest } = node\n  /* c8 ignore next */\n  if (!manifest) return false\n\n  const { scripts = {} } = manifest\n\n  // Check for install lifecycle scripts\n  const runInstall = !!(\n    scripts.install ||\n    scripts.preinstall ||\n    scripts.postinstall\n  )\n  if (runInstall) return true\n\n  // Check for prepare scripts on importers or git dependencies\n  const prepable = node.id.startsWith('git') || node.importer\n  const runPrepare =\n    !!(\n      (scripts.prepare || scripts.preprepare || scripts.postprepare)\n      /* c8 ignore next 2 */\n    ) && prepable\n  if (runPrepare) return true\n\n  return false\n}\n\n/**\n * :scripts Pseudo-Selector filters nodes based on whether they need to be built.\n *\n * A node needs to be built if it has:\n * - Install lifecycle scripts (install, preinstall, postinstall)\n * - Prepare scripts on importers or git dependencies (prepare, preprepare, postprepare)\n */\nexport const scripts = async (state: ParserState) => {\n  for (const node of state.partial.nodes) {\n    if (!nodeNeedsBuild(node)) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/semver.d.ts

@@ -1,6 +1,7 @@
 import type { Version } from '@vltpkg/semver';
 import type { AttrInternals } from './attr.ts';
-import type { ParserState, PostcssNode } from '../types.ts';
+import type { ParserState } from '../types.ts';
+import type { PostcssNode } from '@vltpkg/dss-parser';
 export type SemverInternals = {
     semverValue: string;
     semverFunction: SemverComparatorFn;

package/dist/esm/pseudo/semver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../../src/pseudo/semver.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAG7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAc9C,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAG3D,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,kBAAkB,CAAA;IAClC,gBAAgB,EAAE,sBAAsB,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,CAAA;AACT,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,GAAG,MAAM,EACzB,KAAK,EAAE,MAAM,KACV,OAAO,CAAA;AACZ,MAAM,MAAM,sBAAsB,GAC9B,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,YAAY,CAAC,GAC/C,SAAS,CAAA;AAWb,eAAO,MAAM,oBAAoB,SACzB,MAAM,KACX,IAAI,IAAI,mBAAoD,CAAA;AAE/D,eAAO,MAAM,oBAAoB,SACzB,MAAM,KACX,mBAQF,CAAA;AAmBD,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,SACb,OAAO,KACb,eA2GF,CAAA;AAED,eAAO,MAAM,YAAY,UAAiB,WAAW,yBAyDpD,CAAA"}
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../../src/pseudo/semver.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAI7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAc9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,kBAAkB,CAAA;IAClC,gBAAgB,EAAE,sBAAsB,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,CAAA;AACT,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,GAAG,MAAM,EACzB,KAAK,EAAE,MAAM,KACV,OAAO,CAAA;AACZ,MAAM,MAAM,sBAAsB,GAC9B,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,YAAY,CAAC,GAC/C,SAAS,CAAA;AAWb,eAAO,MAAM,oBAAoB,SACzB,MAAM,KACX,IAAI,IAAI,mBAAoD,CAAA;AAE/D,eAAO,MAAM,oBAAoB,SACzB,MAAM,KACX,mBAQF,CAAA;AAeD,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,SACb,OAAO,KACb,eAkGF,CAAA;AAED,eAAO,MAAM,YAAY,UAAiB,WAAW,yBAyDpD,CAAA"}

package/dist/esm/pseudo/semver.js

@@ -1,8 +1,9 @@
 import { satisfies, gt, gte, lt, lte, eq, neq, parse, parseRange, } from '@vltpkg/semver';
 import { error } from '@vltpkg/error-cause';
+import { asError } from '@vltpkg/types';
 import { parseInternals as parseAttrInternals } from "./attr.js";
 import { getManifestPropertyValues } from "../attribute.js";
-import { asAttributeNode, asPostcssNodeWithChildren, asPseudoNode, asStringNode, asTagNode, isAttributeNode, isClassNode, isCombinatorNode, isPseudoNode, isStringNode, } from "../types.js";
+import { asAttributeNode, asPostcssNodeWithChildren, asPseudoNode, asStringNode, asTagNode, isAttributeNode, isPseudoNode, isStringNode, isTagNode, } from '@vltpkg/dss-parser';
 import { removeNode, removeQuotes } from "./helpers.js";
 const semverFunctionNames = new Set([
     'satisfies',
@@ -32,34 +33,21 @@ const semverFunctions = new Map([
     ['eq', eq],
     ['neq', neq],
 ]);
-// list a few css combinators that should never have
-// spaces around when parsing as a semver range
-const unspacedCombinators = new Set([' ', '+']);
 export const parseInternals = (nodes, loose) => {
     // tries to parse the first param as a string node, otherwise defaults
     // to reading all postcss nodes as just strings, since it just means
     // the value was defined as an unquoted string
-    let semverValue;
+    let semverValue = '';
     try {
         semverValue = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
             .value);
     }
-    catch (e) {
-        const err = e;
-        if (err.message === 'Mismatching query node') {
-            semverValue = '';
-            for (const node of asPostcssNodeWithChildren(nodes[0]).nodes) {
-                if (isClassNode(node)) {
-                    semverValue += '.';
-                }
-                else if (isCombinatorNode(node) &&
-                    !unspacedCombinators.has(node.value)) {
-                    semverValue += ' ';
-                }
-                if (node.value) {
-                    semverValue += node.value;
-                }
-            }
+    catch (err) {
+        if (asError(err).message === 'Mismatching query node' &&
+            isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+            // Handle tag node (unquoted values like >=2.0.0)
+            const tagNode = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]);
+            semverValue = tagNode.value;
         }
         else {
             throw err;
@@ -76,9 +64,8 @@ export const parseInternals = (nodes, loose) => {
                 fnName = asSemverFunctionName(removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])
                     .value));
             }
-            catch (e) {
-                const err = e;
-                if (err.message === 'Mismatching query node') {
+            catch (err) {
+                if (asError(err).message === 'Mismatching query node') {
                     fnName = asSemverFunctionName(asTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])
                         .value);
                 }

package/dist/esm/pseudo/semver.js.map

@@ -1 +1 @@
-{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../../src/pseudo/semver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,KAAK,EACL,UAAU,GACX,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAwBvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,WAAW;IACX,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;CACN,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACiB,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAE/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACS,EAAE;IACvB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,8BAA8B,EAAE;YAC1C,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAG7B;IACA,CAAC,WAAW,EAAE,SAAS,CAAC;IACxB,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAA;AAEF,oDAAoD;AACpD,+CAA+C;AAC/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AAEvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EACpB,KAAc,EACG,EAAE;IACnB,sEAAsE;IACtE,oEAAoE;IACpE,8CAA8C;IAC9C,IAAI,WAAW,CAAA;IACf,IAAI,CAAC;QACH,WAAW,GAAG,YAAY,CACxB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAU,CAAA;QACtB,IAAI,GAAG,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;YAC7C,WAAW,GAAG,EAAE,CAAA;YAChB,KAAK,MAAM,IAAI,IAAI,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC7D,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,WAAW,IAAI,GAAG,CAAA;gBACpB,CAAC;qBAAM,IACL,gBAAgB,CAAC,IAAI,CAAC;oBACtB,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;oBACD,WAAW,IAAI,GAAG,CAAA;gBACpB,CAAC;gBAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,WAAW,IAAI,IAAI,CAAC,KAAK,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,MAAM,GAAwB,WAAW,CAAA;IAC7C,IAAI,CAAC;QACH,sEAAsE;QACtE,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,oBAAoB,CAC3B,YAAY,CACV,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;qBACvD,KAAK,CACT,CACF,CAAA;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAU,CAAA;gBACtB,IAAI,GAAG,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;oBAC7C,MAAM,GAAG,oBAAoB,CAC3B,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;yBACpD,KAAK,CACT,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2EAA2E;QAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClD,yEAAyE;IACzE,yDAAyD;IACzD,qBAAqB;IACrB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,8BAA8B,EAAE;YAC1C,KAAK,EAAE,MAAM;YACb,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC;IACD,oBAAoB;IAEpB,4CAA4C;IAC5C,IAAI,gBAAwC,CAAA;IAC5C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC/C,gBAAgB,GAAG;gBACjB,SAAS;gBACT,UAAU,EAAE,CAAC,SAAS,CAAC;aACxB,CAAA;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,gBAAgB,GAAG,kBAAkB,CACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAC7B,CAAA;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAA;YAC5D,gBAAgB,GAAG;gBACjB,SAAS;gBACT,UAAU,EAAE,CAAC,SAAS,CAAC;aACxB,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,cAAc;QACd,gBAAgB;KACjB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IACvD,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAC9C,CAAC,CAAC,KAAK,CAAC,KAAK,CACd,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,GAAG;SACX,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAA;IAEnE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,yBAAyB,CAC7C,IAAI,EACJ,gBAAgB,CAAC,UAAU,EAC3B,gBAAgB,CAAC,SAAS,CAC3B,CAAA;YAED,iEAAiE;YACjE,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YACvC,MAAM,kBAAkB,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;YAC7C,MAAM,iBAAiB,GACrB,YAAY,IAAI,UAAU,CAAC,YAAY,CAAC,CAAA;YAC1C,IACE,cAAc,KAAK,SAAS;gBAC5B,kBAAkB;gBAClB,iBAAiB,EACjB,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBACtD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACzB,CAAC;gBACD,iEAAiE;YACnE,CAAC;iBAAM,IACL,CAAC,YAAY;gBACb,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,EAC1C,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAA;YAC9C,IACE,CAAC,eAAe;gBAChB,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,CAAC,EAC7C,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import {\n  satisfies,\n  gt,\n  gte,\n  lt,\n  lte,\n  eq,\n  neq,\n  parse,\n  parseRange,\n} from '@vltpkg/semver'\nimport type { Version } from '@vltpkg/semver'\nimport { error } from '@vltpkg/error-cause'\nimport { parseInternals as parseAttrInternals } from './attr.ts'\nimport type { AttrInternals } from './attr.ts'\nimport { getManifestPropertyValues } from '../attribute.ts'\nimport {\n  asAttributeNode,\n  asPostcssNodeWithChildren,\n  asPseudoNode,\n  asStringNode,\n  asTagNode,\n  isAttributeNode,\n  isClassNode,\n  isCombinatorNode,\n  isPseudoNode,\n  isStringNode,\n} from '../types.ts'\nimport type { ParserState, PostcssNode } from '../types.ts'\nimport { removeNode, removeQuotes } from './helpers.ts'\n\nexport type SemverInternals = {\n  semverValue: string\n  semverFunction: SemverComparatorFn\n  compareAttribute: SemverCompareAttribute\n}\n\nexport type SemverFunctionNames =\n  | 'satisfies'\n  | 'gt'\n  | 'gte'\n  | 'lt'\n  | 'lte'\n  | 'eq'\n  | 'neq'\nexport type SemverComparatorFn = (\n  version: Version | string,\n  range: string,\n) => boolean\nexport type SemverCompareAttribute =\n  | Pick<AttrInternals, 'attribute' | 'properties'>\n  | undefined\n\nconst semverFunctionNames = new Set([\n  'satisfies',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'eq',\n  'neq',\n])\nexport const isSemverFunctionName = (\n  name: string,\n): name is SemverFunctionNames => semverFunctionNames.has(name)\n\nexport const asSemverFunctionName = (\n  name: string,\n): SemverFunctionNames => {\n  if (!isSemverFunctionName(name)) {\n    throw error('Invalid semver function name', {\n      found: name,\n      validOptions: Array.from(semverFunctionNames),\n    })\n  }\n  return name\n}\n\nconst semverFunctions = new Map<\n  SemverFunctionNames,\n  SemverComparatorFn\n>([\n  ['satisfies', satisfies],\n  ['gt', gt],\n  ['gte', gte],\n  ['lt', lt],\n  ['lte', lte],\n  ['eq', eq],\n  ['neq', neq],\n])\n\n// list a few css combinators that should never have\n// spaces around when parsing as a semver range\nconst unspacedCombinators = new Set<string>([' ', '+'])\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n  loose: boolean,\n): SemverInternals => {\n  // tries to parse the first param as a string node, otherwise defaults\n  // to reading all postcss nodes as just strings, since it just means\n  // the value was defined as an unquoted string\n  let semverValue\n  try {\n    semverValue = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } catch (e) {\n    const err = e as Error\n    if (err.message === 'Mismatching query node') {\n      semverValue = ''\n      for (const node of asPostcssNodeWithChildren(nodes[0]).nodes) {\n        if (isClassNode(node)) {\n          semverValue += '.'\n        } else if (\n          isCombinatorNode(node) &&\n          !unspacedCombinators.has(node.value)\n        ) {\n          semverValue += ' '\n        }\n\n        if (node.value) {\n          semverValue += node.value\n        }\n      }\n    } else {\n      throw err\n    }\n  }\n\n  // second param is the function name\n  let fnName: SemverFunctionNames = 'satisfies'\n  try {\n    // if there is a second node defined, try to parse it as a string node\n    // first and if that fails, then parse it as a tag node which just means\n    // it was defined as an unquoted string\n    if (nodes[1]) {\n      try {\n        fnName = asSemverFunctionName(\n          removeQuotes(\n            asStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n              .value,\n          ),\n        )\n      } catch (e) {\n        const err = e as Error\n        if (err.message === 'Mismatching query node') {\n          fnName = asSemverFunctionName(\n            asTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n              .value,\n          )\n        } else {\n          throw err\n        }\n      }\n    }\n  } catch (e) {\n    // allow invalid semver function names in loose mode, defaults to satisfies\n    if (!loose) {\n      throw e\n    }\n  }\n\n  const semverFunction = semverFunctions.get(fnName)\n  // the following should never happen as long as the semver function names\n  // type and Set are correctly mirroring each other values\n  /* c8 ignore start */\n  if (!semverFunction) {\n    throw error('Invalid semver function name', {\n      found: fnName,\n      validOptions: Array.from(semverFunctions.keys()),\n    })\n  }\n  /* c8 ignore stop */\n\n  // optional third param is the compare value\n  let compareAttribute: SemverCompareAttribute\n  if (nodes[2]) {\n    const parentNode = asPostcssNodeWithChildren(nodes[2])\n    const currNode = parentNode.nodes[0]\n    if (isAttributeNode(currNode)) {\n      const { attribute } = asAttributeNode(currNode)\n      compareAttribute = {\n        attribute,\n        properties: [attribute],\n      }\n    } else if (isPseudoNode(currNode)) {\n      compareAttribute = parseAttrInternals(\n        asPseudoNode(currNode).nodes,\n      )\n    } else if (isStringNode(currNode)) {\n      const attribute = removeQuotes(asStringNode(currNode).value)\n      compareAttribute = {\n        attribute,\n        properties: [attribute],\n      }\n    }\n  }\n\n  return {\n    semverValue,\n    semverFunction,\n    compareAttribute,\n  }\n}\n\nexport const semverParser = async (state: ParserState) => {\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n      !!state.loose,\n    )\n  } catch (err) {\n    throw error('Failed to parse :semver selector', {\n      cause: err,\n    })\n  }\n\n  const { semverValue, semverFunction, compareAttribute } = internals\n\n  for (const node of state.partial.nodes) {\n    if (compareAttribute) {\n      const compareValues = getManifestPropertyValues(\n        node,\n        compareAttribute.properties,\n        compareAttribute.attribute,\n      )\n\n      // if the provided semver value is a fixed semver version and the\n      // compare attribute is resolving to a range value, then we flip the\n      // order of comparison, in case it's a \"satisfies\" function check\n      const compareValue = compareValues?.[0]\n      const semverValueVersion = parse(semverValue)\n      const compareValueRange =\n        compareValue && parseRange(compareValue)\n      if (\n        semverFunction === satisfies &&\n        semverValueVersion &&\n        compareValueRange\n      ) {\n        if (!satisfies(semverValueVersion, compareValueRange)) {\n          removeNode(state, node)\n        }\n        // otherwise just compares the read attribute to the semver value\n      } else if (\n        !compareValue ||\n        !semverFunction(compareValue, semverValue)\n      ) {\n        removeNode(state, node)\n      }\n    } else {\n      const manifestVersion = node.manifest?.version\n      if (\n        !manifestVersion ||\n        !semverFunction(manifestVersion, semverValue)\n      ) {\n        removeNode(state, node)\n      }\n    }\n  }\n\n  return state\n}\n"]}
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../../src/pseudo/semver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,KAAK,EACL,UAAU,GACX,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AA0BvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,WAAW;IACX,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;CACN,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACiB,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAE/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACS,EAAE;IACvB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,8BAA8B,EAAE;YAC1C,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAG7B;IACA,CAAC,WAAW,EAAE,SAAS,CAAC;IACxB,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EACpB,KAAc,EACG,EAAE;IACnB,sEAAsE;IACtE,oEAAoE;IACpE,8CAA8C;IAC9C,IAAI,WAAW,GAAG,EAAE,CAAA;IACpB,IAAI,CAAC;QACH,WAAW,GAAG,YAAY,CACxB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,wBAAwB;YACjD,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;YACD,iDAAiD;YACjD,MAAM,OAAO,GAAG,SAAS,CACvB,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAA;YACD,WAAW,GAAG,OAAO,CAAC,KAAK,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,MAAM,GAAwB,WAAW,CAAA;IAC7C,IAAI,CAAC;QACH,sEAAsE;QACtE,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,oBAAoB,CAC3B,YAAY,CACV,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;qBACvD,KAAK,CACT,CACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;oBACtD,MAAM,GAAG,oBAAoB,CAC3B,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;yBACpD,KAAK,CACT,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2EAA2E;QAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClD,yEAAyE;IACzE,yDAAyD;IACzD,qBAAqB;IACrB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,8BAA8B,EAAE;YAC1C,KAAK,EAAE,MAAM;YACb,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC;IACD,oBAAoB;IAEpB,4CAA4C;IAC5C,IAAI,gBAAwC,CAAA;IAC5C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC/C,gBAAgB,GAAG;gBACjB,SAAS;gBACT,UAAU,EAAE,CAAC,SAAS,CAAC;aACxB,CAAA;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,gBAAgB,GAAG,kBAAkB,CACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAC7B,CAAA;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAA;YAC5D,gBAAgB,GAAG;gBACjB,SAAS;gBACT,UAAU,EAAE,CAAC,SAAS,CAAC;aACxB,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,cAAc;QACd,gBAAgB;KACjB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IACvD,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAC9C,CAAC,CAAC,KAAK,CAAC,KAAK,CACd,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,GAAG;SACX,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAA;IAEnE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,yBAAyB,CAC7C,IAAI,EACJ,gBAAgB,CAAC,UAAU,EAC3B,gBAAgB,CAAC,SAAS,CAC3B,CAAA;YAED,iEAAiE;YACjE,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YACvC,MAAM,kBAAkB,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;YAC7C,MAAM,iBAAiB,GACrB,YAAY,IAAI,UAAU,CAAC,YAAY,CAAC,CAAA;YAC1C,IACE,cAAc,KAAK,SAAS;gBAC5B,kBAAkB;gBAClB,iBAAiB,EACjB,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBACtD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACzB,CAAC;gBACD,iEAAiE;YACnE,CAAC;iBAAM,IACL,CAAC,YAAY;gBACb,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,EAC1C,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAA;YAC9C,IACE,CAAC,eAAe;gBAChB,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,CAAC,EAC7C,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import {\n  satisfies,\n  gt,\n  gte,\n  lt,\n  lte,\n  eq,\n  neq,\n  parse,\n  parseRange,\n} from '@vltpkg/semver'\nimport type { Version } from '@vltpkg/semver'\nimport { error } from '@vltpkg/error-cause'\nimport { asError } from '@vltpkg/types'\nimport { parseInternals as parseAttrInternals } from './attr.ts'\nimport type { AttrInternals } from './attr.ts'\nimport { getManifestPropertyValues } from '../attribute.ts'\nimport {\n  asAttributeNode,\n  asPostcssNodeWithChildren,\n  asPseudoNode,\n  asStringNode,\n  asTagNode,\n  isAttributeNode,\n  isPseudoNode,\n  isStringNode,\n  isTagNode,\n} from '@vltpkg/dss-parser'\nimport { removeNode, removeQuotes } from './helpers.ts'\nimport type { ParserState } from '../types.ts'\nimport type { PostcssNode } from '@vltpkg/dss-parser'\n\nexport type SemverInternals = {\n  semverValue: string\n  semverFunction: SemverComparatorFn\n  compareAttribute: SemverCompareAttribute\n}\n\nexport type SemverFunctionNames =\n  | 'satisfies'\n  | 'gt'\n  | 'gte'\n  | 'lt'\n  | 'lte'\n  | 'eq'\n  | 'neq'\nexport type SemverComparatorFn = (\n  version: Version | string,\n  range: string,\n) => boolean\nexport type SemverCompareAttribute =\n  | Pick<AttrInternals, 'attribute' | 'properties'>\n  | undefined\n\nconst semverFunctionNames = new Set([\n  'satisfies',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'eq',\n  'neq',\n])\nexport const isSemverFunctionName = (\n  name: string,\n): name is SemverFunctionNames => semverFunctionNames.has(name)\n\nexport const asSemverFunctionName = (\n  name: string,\n): SemverFunctionNames => {\n  if (!isSemverFunctionName(name)) {\n    throw error('Invalid semver function name', {\n      found: name,\n      validOptions: Array.from(semverFunctionNames),\n    })\n  }\n  return name\n}\n\nconst semverFunctions = new Map<\n  SemverFunctionNames,\n  SemverComparatorFn\n>([\n  ['satisfies', satisfies],\n  ['gt', gt],\n  ['gte', gte],\n  ['lt', lt],\n  ['lte', lte],\n  ['eq', eq],\n  ['neq', neq],\n])\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n  loose: boolean,\n): SemverInternals => {\n  // tries to parse the first param as a string node, otherwise defaults\n  // to reading all postcss nodes as just strings, since it just means\n  // the value was defined as an unquoted string\n  let semverValue = ''\n  try {\n    semverValue = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } catch (err) {\n    if (\n      asError(err).message === 'Mismatching query node' &&\n      isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n    ) {\n      // Handle tag node (unquoted values like >=2.0.0)\n      const tagNode = asTagNode(\n        asPostcssNodeWithChildren(nodes[0]).nodes[0],\n      )\n      semverValue = tagNode.value\n    } else {\n      throw err\n    }\n  }\n\n  // second param is the function name\n  let fnName: SemverFunctionNames = 'satisfies'\n  try {\n    // if there is a second node defined, try to parse it as a string node\n    // first and if that fails, then parse it as a tag node which just means\n    // it was defined as an unquoted string\n    if (nodes[1]) {\n      try {\n        fnName = asSemverFunctionName(\n          removeQuotes(\n            asStringNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n              .value,\n          ),\n        )\n      } catch (err) {\n        if (asError(err).message === 'Mismatching query node') {\n          fnName = asSemverFunctionName(\n            asTagNode(asPostcssNodeWithChildren(nodes[1]).nodes[0])\n              .value,\n          )\n        } else {\n          throw err\n        }\n      }\n    }\n  } catch (e) {\n    // allow invalid semver function names in loose mode, defaults to satisfies\n    if (!loose) {\n      throw e\n    }\n  }\n\n  const semverFunction = semverFunctions.get(fnName)\n  // the following should never happen as long as the semver function names\n  // type and Set are correctly mirroring each other values\n  /* c8 ignore start */\n  if (!semverFunction) {\n    throw error('Invalid semver function name', {\n      found: fnName,\n      validOptions: Array.from(semverFunctions.keys()),\n    })\n  }\n  /* c8 ignore stop */\n\n  // optional third param is the compare value\n  let compareAttribute: SemverCompareAttribute\n  if (nodes[2]) {\n    const parentNode = asPostcssNodeWithChildren(nodes[2])\n    const currNode = parentNode.nodes[0]\n    if (isAttributeNode(currNode)) {\n      const { attribute } = asAttributeNode(currNode)\n      compareAttribute = {\n        attribute,\n        properties: [attribute],\n      }\n    } else if (isPseudoNode(currNode)) {\n      compareAttribute = parseAttrInternals(\n        asPseudoNode(currNode).nodes,\n      )\n    } else if (isStringNode(currNode)) {\n      const attribute = removeQuotes(asStringNode(currNode).value)\n      compareAttribute = {\n        attribute,\n        properties: [attribute],\n      }\n    }\n  }\n\n  return {\n    semverValue,\n    semverFunction,\n    compareAttribute,\n  }\n}\n\nexport const semverParser = async (state: ParserState) => {\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n      !!state.loose,\n    )\n  } catch (err) {\n    throw error('Failed to parse :semver selector', {\n      cause: err,\n    })\n  }\n\n  const { semverValue, semverFunction, compareAttribute } = internals\n\n  for (const node of state.partial.nodes) {\n    if (compareAttribute) {\n      const compareValues = getManifestPropertyValues(\n        node,\n        compareAttribute.properties,\n        compareAttribute.attribute,\n      )\n\n      // if the provided semver value is a fixed semver version and the\n      // compare attribute is resolving to a range value, then we flip the\n      // order of comparison, in case it's a \"satisfies\" function check\n      const compareValue = compareValues?.[0]\n      const semverValueVersion = parse(semverValue)\n      const compareValueRange =\n        compareValue && parseRange(compareValue)\n      if (\n        semverFunction === satisfies &&\n        semverValueVersion &&\n        compareValueRange\n      ) {\n        if (!satisfies(semverValueVersion, compareValueRange)) {\n          removeNode(state, node)\n        }\n        // otherwise just compares the read attribute to the semver value\n      } else if (\n        !compareValue ||\n        !semverFunction(compareValue, semverValue)\n      ) {\n        removeNode(state, node)\n      }\n    } else {\n      const manifestVersion = node.manifest?.version\n      if (\n        !manifestVersion ||\n        !semverFunction(manifestVersion, semverValue)\n      ) {\n        removeNode(state, node)\n      }\n    }\n  }\n\n  return state\n}\n"]}

package/dist/esm/pseudo/severity.d.ts

@@ -1,10 +1,13 @@
-import type { ParserState, PostcssNode } from '../types.ts';
+import type { ParserState } from '../types.ts';
+import type { PostcssNode } from '@vltpkg/dss-parser';
 export type SeverityKinds = '0' | '1' | '2' | '3' | 'critical' | 'high' | 'medium' | 'low' | undefined;
 export type SeverityAlertTypes = 'criticalCVE' | 'cve' | 'potentialVulnerability' | 'mildCVE' | undefined;
+export type SeverityComparator = '>' | '<' | '>=' | '<=' | undefined;
 export declare const isSeverityKind: (value?: string) => value is SeverityKinds;
 export declare const asSeverityKind: (value?: string) => SeverityKinds;
 export declare const parseInternals: (nodes: PostcssNode[]) => {
     kind: SeverityKinds;
+    comparator: SeverityComparator;
 };
 export declare const severity: (state: ParserState) => Promise<ParserState & {
     securityArchive: NonNullable<ParserState["securityArchive"]>;

package/dist/esm/pseudo/severity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../../../src/pseudo/severity.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQ3D,MAAM,MAAM,aAAa,GACrB,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,SAAS,CAAA;AAEb,MAAM,MAAM,kBAAkB,GAC1B,aAAa,GACb,KAAK,GACL,wBAAwB,GACxB,SAAS,GACT,SAAS,CAAA;AAcb,eAAO,MAAM,cAAc,WACjB,MAAM,KACb,KAAK,IAAI,aAAkD,CAAA;AAE9D,eAAO,MAAM,cAAc,WAAY,MAAM,KAAG,aAQ/C,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB;IAAE,IAAI,EAAE,aAAa,CAAA;CAmBvB,CAAA;AAED,eAAO,MAAM,QAAQ,UAAiB,WAAW;;EA2BhD,CAAA"}
+{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../../../src/pseudo/severity.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,aAAa,GACrB,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,SAAS,CAAA;AAEb,MAAM,MAAM,kBAAkB,GAC1B,aAAa,GACb,KAAK,GACL,wBAAwB,GACxB,SAAS,GACT,SAAS,CAAA;AAEb,MAAM,MAAM,kBAAkB,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,CAAA;AA2BpE,eAAO,MAAM,cAAc,WACjB,MAAM,KACb,KAAK,IAAI,aAAkD,CAAA;AAE9D,eAAO,MAAM,cAAc,WAAY,MAAM,KAAG,aAQ/C,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB;IACD,IAAI,EAAE,aAAa,CAAA;IACnB,UAAU,EAAE,kBAAkB,CAAA;CAqD/B,CAAA;AAED,eAAO,MAAM,QAAQ,UAAiB,WAAW;;EA+FhD,CAAA"}

package/dist/esm/pseudo/severity.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from "../types.js";
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from '@vltpkg/dss-parser';
 import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
 const kindsMap = new Map([
     ['critical', 'criticalCVE'],
@@ -11,6 +11,17 @@ const kindsMap = new Map([
     ['2', 'potentialVulnerability'],
     ['3', 'mildCVE'],
 ]);
+// Map numerical values to their respective kinds for comparison operations
+const kindLevelMap = new Map([
+    ['critical', 0],
+    ['high', 1],
+    ['medium', 2],
+    ['low', 3],
+    ['0', 0],
+    ['1', 1],
+    ['2', 2],
+    ['3', 3],
+]);
 const kinds = new Set(kindsMap.keys());
 export const isSeverityKind = (value) => kinds.has(value);
 export const asSeverityKind = (value) => {
@@ -24,14 +35,47 @@ export const asSeverityKind = (value) => {
 };
 export const parseInternals = (nodes) => {
     let kind;
+    let comparator;
+    if (nodes.length === 0) {
+        throw error('Missing severity kind parameter');
+    }
+    let kindValue = '';
     if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
-        kind = asSeverityKind(removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
-            .value));
+        kindValue = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
     }
     else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
-        kind = asSeverityKind(asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value);
+        kindValue = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value;
+    }
+    // Extract comparator if present
+    if (kindValue.startsWith('>=')) {
+        comparator = '>=';
+        kindValue = kindValue.substring(2);
+    }
+    else if (kindValue.startsWith('<=')) {
+        comparator = '<=';
+        kindValue = kindValue.substring(2);
     }
-    return { kind };
+    else if (kindValue.startsWith('>')) {
+        comparator = '>';
+        kindValue = kindValue.substring(1);
+    }
+    else if (kindValue.startsWith('<')) {
+        comparator = '<';
+        kindValue = kindValue.substring(1);
+    }
+    // Parse kind value
+    if (kindValue) {
+        if (isSeverityKind(kindValue)) {
+            kind = kindValue;
+        }
+        else {
+            throw error('Expected a valid severity kind or number between 0-3', {
+                found: kindValue,
+            });
+        }
+    }
+    return { kind, comparator };
 };
 export const severity = async (state) => {
     assertSecurityArchive(state, 'severity');
@@ -42,11 +86,70 @@ export const severity = async (state) => {
     catch (err) {
         throw error('Failed to parse :severity selector', { cause: err });
     }
-    const { kind } = internals;
-    const alertName = kindsMap.get(kind);
+    const { kind, comparator } = internals;
     for (const node of state.partial.nodes) {
         const report = state.securityArchive.get(node.id);
-        const exclude = !report?.alerts.some(alert => alert.type === alertName);
+        // Always exclude nodes that don't have security data or alerts
+        if (!report?.alerts || report.alerts.length === 0) {
+            removeNode(state, node);
+        }
+    }
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        let exclude = true;
+        if (report) {
+            if (comparator) {
+                // retrieve the value to compare against
+                const kindLevel = kindLevelMap.get(kind);
+                // the kindLevel value has already been validated at this point
+                // and thus can never return an undefined/falsy value but ts doesn't
+                // know about that, so we have the extra check here
+                /* c8 ignore next - impossible */
+                if (!kindLevel)
+                    break;
+                // Check each alert to find any that match our comparison criteria
+                for (const alert of report.alerts) {
+                    // Get the numerical value of the alert type
+                    const alertType = alert.type;
+                    // retrieve a key to the current alert level to be compared against
+                    const currentAlertLevelKey = [...kindsMap.entries()].find(([_, alertValue]) => alertValue === alertType)?.[0];
+                    // perform the comparison based on the user-provided kindLevel
+                    if (currentAlertLevelKey) {
+                        const currentAlertLevel = kindLevelMap.get(currentAlertLevelKey);
+                        /* c8 ignore next - impossible but ts doesn't know */
+                        if (currentAlertLevel == null)
+                            continue;
+                        switch (comparator) {
+                            case '>':
+                                if (currentAlertLevel > kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '<':
+                                if (currentAlertLevel < kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '>=':
+                                if (currentAlertLevel >= kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '<=':
+                                if (currentAlertLevel <= kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                        }
+                    }
+                }
+            }
+            else {
+                // Original exact match behavior
+                const alertName = kindsMap.get(kind);
+                exclude = !report.alerts.some(alert => alert.type === alertName);
+            }
+        }
         if (exclude) {
             removeNode(state, node);
         }