@vltpkg/query 1.4.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (213) hide show
  1. package/dist/index.d.ts +7 -2
  2. package/dist/index.js +23 -4
  3. package/dist/pseudo/skill.d.ts +7 -0
  4. package/dist/pseudo/skill.js +52 -0
  5. package/dist/pseudo/skills.d.ts +6 -0
  6. package/dist/pseudo/skills.js +26 -0
  7. package/dist/pseudo.js +7 -0
  8. package/dist/types.d.ts +29 -1
  9. package/package.json +10 -12
  10. package/skills/dss-query/REFERENCE.md +0 -123
  11. package/skills/dss-query/SKILL.md +0 -190
  12. package/skills/dss-query/evals/README.md +0 -81
  13. package/skills/dss-query/evals/evals.json +0 -89
  14. package/skills/dss-query/evals/grade.mjs +0 -481
  15. package/src/attribute.ts +0 -190
  16. package/src/combinator.ts +0 -135
  17. package/src/error.ts +0 -78
  18. package/src/id.ts +0 -46
  19. package/src/index.ts +0 -640
  20. package/src/parser.ts +0 -122
  21. package/src/pseudo/abandoned.ts +0 -9
  22. package/src/pseudo/attr.ts +0 -92
  23. package/src/pseudo/built.ts +0 -19
  24. package/src/pseudo/confused.ts +0 -29
  25. package/src/pseudo/cve.ts +0 -93
  26. package/src/pseudo/cwe.ts +0 -97
  27. package/src/pseudo/debug.ts +0 -9
  28. package/src/pseudo/deprecated.ts +0 -9
  29. package/src/pseudo/dev.ts +0 -18
  30. package/src/pseudo/diff.ts +0 -90
  31. package/src/pseudo/dist.ts +0 -148
  32. package/src/pseudo/dynamic.ts +0 -9
  33. package/src/pseudo/empty.ts +0 -15
  34. package/src/pseudo/entropic.ts +0 -9
  35. package/src/pseudo/env.ts +0 -6
  36. package/src/pseudo/eval.ts +0 -9
  37. package/src/pseudo/fs.ts +0 -9
  38. package/src/pseudo/helpers.ts +0 -106
  39. package/src/pseudo/host.ts +0 -111
  40. package/src/pseudo/hostname.ts +0 -156
  41. package/src/pseudo/license.ts +0 -134
  42. package/src/pseudo/link.ts +0 -30
  43. package/src/pseudo/malware.ts +0 -41
  44. package/src/pseudo/minified.ts +0 -9
  45. package/src/pseudo/missing.ts +0 -16
  46. package/src/pseudo/native.ts +0 -9
  47. package/src/pseudo/network.ts +0 -9
  48. package/src/pseudo/obfuscated.ts +0 -9
  49. package/src/pseudo/optional.ts +0 -18
  50. package/src/pseudo/outdated.ts +0 -345
  51. package/src/pseudo/overridden.ts +0 -20
  52. package/src/pseudo/path.ts +0 -146
  53. package/src/pseudo/peer.ts +0 -18
  54. package/src/pseudo/prerelease.ts +0 -47
  55. package/src/pseudo/private.ts +0 -19
  56. package/src/pseudo/prod.ts +0 -18
  57. package/src/pseudo/published.ts +0 -250
  58. package/src/pseudo/registry.ts +0 -29
  59. package/src/pseudo/root.ts +0 -19
  60. package/src/pseudo/scanned.ts +0 -20
  61. package/src/pseudo/score.ts +0 -186
  62. package/src/pseudo/scripts.ts +0 -61
  63. package/src/pseudo/semver.ts +0 -320
  64. package/src/pseudo/severity.ts +0 -231
  65. package/src/pseudo/shell.ts +0 -9
  66. package/src/pseudo/shrinkwrap.ts +0 -9
  67. package/src/pseudo/spec.ts +0 -131
  68. package/src/pseudo/squat.ts +0 -225
  69. package/src/pseudo/suspicious.ts +0 -9
  70. package/src/pseudo/tracker.ts +0 -9
  71. package/src/pseudo/trivial.ts +0 -9
  72. package/src/pseudo/type.ts +0 -26
  73. package/src/pseudo/undesirable.ts +0 -9
  74. package/src/pseudo/unknown.ts +0 -9
  75. package/src/pseudo/unmaintained.ts +0 -9
  76. package/src/pseudo/unpopular.ts +0 -9
  77. package/src/pseudo/unstable.ts +0 -9
  78. package/src/pseudo/vuln.ts +0 -273
  79. package/src/pseudo/workspace.ts +0 -22
  80. package/src/pseudo.ts +0 -433
  81. package/src/types.ts +0 -176
  82. package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
  83. package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
  84. package/tap-snapshots/test/id.ts.test.cjs +0 -118
  85. package/tap-snapshots/test/parser.ts.test.cjs +0 -344
  86. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
  87. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
  88. package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
  89. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
  90. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
  91. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
  92. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
  93. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
  94. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
  95. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
  96. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
  97. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
  98. package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
  99. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
  100. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
  101. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
  102. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
  103. package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
  104. package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
  105. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
  106. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
  107. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
  108. package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
  109. package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
  110. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
  111. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
  112. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
  113. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
  114. package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
  115. package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
  116. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
  117. package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
  118. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
  119. package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
  120. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
  121. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
  122. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
  123. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
  124. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
  125. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
  126. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
  127. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
  128. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
  129. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
  130. package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
  131. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
  132. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
  133. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
  134. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
  135. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
  136. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
  137. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
  138. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
  139. package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
  140. package/test/attribute.ts +0 -273
  141. package/test/combinator.ts +0 -175
  142. package/test/error.ts +0 -60
  143. package/test/fixtures/graph.ts +0 -999
  144. package/test/fixtures/selector.ts +0 -103
  145. package/test/fixtures/types.ts +0 -7
  146. package/test/id.ts +0 -102
  147. package/test/index.ts +0 -1049
  148. package/test/parser.ts +0 -117
  149. package/test/pseudo/abandoned.ts +0 -98
  150. package/test/pseudo/attr.ts +0 -298
  151. package/test/pseudo/built.ts +0 -214
  152. package/test/pseudo/confused.ts +0 -160
  153. package/test/pseudo/cve.ts +0 -249
  154. package/test/pseudo/cwe.ts +0 -255
  155. package/test/pseudo/debug.ts +0 -98
  156. package/test/pseudo/deprecated.ts +0 -98
  157. package/test/pseudo/dev.ts +0 -61
  158. package/test/pseudo/diff.ts +0 -417
  159. package/test/pseudo/dist.ts +0 -215
  160. package/test/pseudo/dynamic.ts +0 -98
  161. package/test/pseudo/empty.ts +0 -108
  162. package/test/pseudo/entropic.ts +0 -101
  163. package/test/pseudo/env.ts +0 -98
  164. package/test/pseudo/eval.ts +0 -98
  165. package/test/pseudo/fs.ts +0 -98
  166. package/test/pseudo/helpers.ts +0 -370
  167. package/test/pseudo/host-context.ts +0 -276
  168. package/test/pseudo/hostname.ts +0 -314
  169. package/test/pseudo/license.ts +0 -265
  170. package/test/pseudo/link.ts +0 -94
  171. package/test/pseudo/malware.ts +0 -184
  172. package/test/pseudo/minified.ts +0 -98
  173. package/test/pseudo/missing.ts +0 -111
  174. package/test/pseudo/native.ts +0 -98
  175. package/test/pseudo/network.ts +0 -98
  176. package/test/pseudo/obfuscated.ts +0 -98
  177. package/test/pseudo/optional.ts +0 -73
  178. package/test/pseudo/outdated.ts +0 -461
  179. package/test/pseudo/overridden.ts +0 -317
  180. package/test/pseudo/path.ts +0 -680
  181. package/test/pseudo/peer.ts +0 -101
  182. package/test/pseudo/prerelease.ts +0 -279
  183. package/test/pseudo/private.ts +0 -108
  184. package/test/pseudo/prod.ts +0 -61
  185. package/test/pseudo/published.ts +0 -557
  186. package/test/pseudo/registry.ts +0 -122
  187. package/test/pseudo/root.ts +0 -66
  188. package/test/pseudo/scanned.ts +0 -144
  189. package/test/pseudo/score.ts +0 -591
  190. package/test/pseudo/scripts.ts +0 -324
  191. package/test/pseudo/semver.ts +0 -822
  192. package/test/pseudo/severity.ts +0 -342
  193. package/test/pseudo/shell.ts +0 -98
  194. package/test/pseudo/shrinkwrap.ts +0 -98
  195. package/test/pseudo/spec.ts +0 -525
  196. package/test/pseudo/squat.ts +0 -565
  197. package/test/pseudo/suspicious.ts +0 -98
  198. package/test/pseudo/tracker.ts +0 -98
  199. package/test/pseudo/trivial.ts +0 -98
  200. package/test/pseudo/type.ts +0 -105
  201. package/test/pseudo/undesirable.ts +0 -98
  202. package/test/pseudo/unknown.ts +0 -98
  203. package/test/pseudo/unmaintained.ts +0 -98
  204. package/test/pseudo/unpopular.ts +0 -98
  205. package/test/pseudo/unstable.ts +0 -98
  206. package/test/pseudo/vuln.ts +0 -625
  207. package/test/pseudo/vulnerable.ts +0 -137
  208. package/test/pseudo/workspace.ts +0 -111
  209. package/test/pseudo.ts +0 -584
  210. package/tsconfig.json +0 -3
  211. package/tsconfig.publish.json +0 -19
  212. package/tsconfig.publish.tsbuildinfo +0 -1
  213. package/typedoc.mjs +0 -2
@@ -1,137 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
- import { getSimpleGraph } from '../fixtures/graph.ts'
5
- import type { ParserState } from '../../src/types.ts'
6
- import { parse } from '../../src/parser.ts'
7
- import { vuln } from '../../src/pseudo/vuln.ts'
8
-
9
- t.test(':vulnerable alias works the same as :vuln', async t => {
10
- const getState = (query: string, graph = getSimpleGraph()) => {
11
- const ast = parse(query)
12
- const current = ast.first.first
13
- const state: ParserState = {
14
- comment: '',
15
- current,
16
- initial: {
17
- edges: new Set(graph.edges.values()),
18
- nodes: new Set(graph.nodes.values()),
19
- },
20
- partial: {
21
- edges: new Set(graph.edges.values()),
22
- nodes: new Set(graph.nodes.values()),
23
- },
24
- collect: {
25
- edges: new Set(),
26
- nodes: new Set(),
27
- },
28
- cancellable: async () => {},
29
- walk: async i => i,
30
- securityArchive: asSecurityArchiveLike(
31
- new Map([
32
- [
33
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
- {
35
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
36
- alerts: [{ type: 'criticalCVE' }],
37
- },
38
- ],
39
- [
40
- joinDepIDTuple(['registry', '', 'a@1.0.0']),
41
- {
42
- id: joinDepIDTuple(['registry', '', 'a@1.0.0']),
43
- alerts: [{ type: 'potentialVulnerability' }],
44
- },
45
- ],
46
- [
47
- joinDepIDTuple(['registry', '', 'c@1.0.0']),
48
- {
49
- id: joinDepIDTuple(['registry', '', 'c@1.0.0']),
50
- alerts: [
51
- {
52
- type: 'deprecated',
53
- severity: 'low' as const,
54
- category: 'maintenance',
55
- key: 'some-key-2',
56
- },
57
- ],
58
- },
59
- ],
60
- ]),
61
- ),
62
- importers: new Set(graph.importers),
63
- retries: 0,
64
- signal: new AbortController().signal,
65
- specificity: { idCounter: 0, commonCounter: 0 },
66
- }
67
- return state
68
- }
69
-
70
- await t.test(
71
- 'parameterless :vulnerable matches severity >= medium',
72
- async t => {
73
- const res = await vuln(getState(':vulnerable'))
74
- t.strictSame(
75
- [...res.partial.nodes].map(n => n.name).sort(),
76
- ['a', 'e'],
77
- 'should select packages with vuln severity >= medium',
78
- )
79
- t.matchSnapshot({
80
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
81
- edges: [...res.partial.edges].map(e => e.name).sort(),
82
- })
83
- },
84
- )
85
-
86
- await t.test(
87
- ':vulnerable(critical) matches same as :vuln(critical)',
88
- async t => {
89
- const resVulnerable = await vuln(
90
- getState(':vulnerable(critical)'),
91
- )
92
- const resVuln = await vuln(getState(':vuln(critical)'))
93
- t.strictSame(
94
- [...resVulnerable.partial.nodes].map(n => n.name).sort(),
95
- [...resVuln.partial.nodes].map(n => n.name).sort(),
96
- 'alias :vulnerable(critical) should produce identical results to :vuln(critical)',
97
- )
98
- },
99
- )
100
- })
101
-
102
- t.test('missing security archive', async t => {
103
- const getState = (query: string) => {
104
- const ast = parse(query)
105
- const current = ast.first.first
106
- const state: ParserState = {
107
- comment: '',
108
- current,
109
- initial: {
110
- edges: new Set(),
111
- nodes: new Set(),
112
- },
113
- partial: {
114
- edges: new Set(),
115
- nodes: new Set(),
116
- },
117
- collect: {
118
- edges: new Set(),
119
- nodes: new Set(),
120
- },
121
- cancellable: async () => {},
122
- walk: async i => i,
123
- securityArchive: undefined,
124
- importers: new Set(),
125
- retries: 0,
126
- signal: new AbortController().signal,
127
- specificity: { idCounter: 0, commonCounter: 0 },
128
- }
129
- return state
130
- }
131
-
132
- await t.rejects(
133
- vuln(getState(':vulnerable')),
134
- { message: /Missing security archive/ },
135
- 'should throw an error',
136
- )
137
- })
@@ -1,111 +0,0 @@
1
- import t from 'tap'
2
- import { pseudo } from '../../src/pseudo.ts'
3
- import {
4
- selectorFixture,
5
- copyGraphSelectionState,
6
- } from '../fixtures/selector.ts'
7
- import {
8
- getSingleWorkspaceGraph,
9
- getMultiWorkspaceGraph,
10
- } from '../fixtures/graph.ts'
11
- import type { TestCase } from '../fixtures/types.ts'
12
- import type { GraphSelectionState } from '../../src/types.ts'
13
-
14
- const testPseudo = selectorFixture(pseudo)
15
-
16
- t.test(':workspace pseudo-selector', async t => {
17
- // Test with a single workspace graph
18
- t.test('with single workspace', async t => {
19
- // Get a graph with a single workspace
20
- const singleWorkspaceGraph = getSingleWorkspaceGraph()
21
-
22
- // Get the full selection state
23
- const all = {
24
- edges: new Set(singleWorkspaceGraph.edges),
25
- nodes: new Set(singleWorkspaceGraph.nodes.values()),
26
- }
27
-
28
- // Create an empty selection state
29
- const empty: GraphSelectionState = {
30
- edges: new Set(),
31
- nodes: new Set(),
32
- }
33
-
34
- // Run tests in the same pattern as the main pseudo.ts tests
35
- const queryToExpected = new Set<TestCase>([
36
- [':workspace', all, ['w']], // Should return only workspace nodes
37
- [':workspace', empty, []], // Empty input should return empty output
38
- ])
39
-
40
- const initial = copyGraphSelectionState(all)
41
- for (const [query, partial, expected] of queryToExpected) {
42
- const result = await testPseudo(
43
- query,
44
- initial,
45
- copyGraphSelectionState(partial),
46
- )
47
-
48
- t.strictSame(
49
- result.nodes.map(i => i.name),
50
- expected,
51
- `query > "${query}"`,
52
- )
53
-
54
- // Verify all nodes are workspace nodes
55
- const nodeArray = [...result.nodes]
56
- if (nodeArray.length > 0) {
57
- for (const node of nodeArray) {
58
- t.equal(
59
- node.importer && !node.mainImporter,
60
- true,
61
- `node ${node.name} should be a workspace node (importer=true, mainImporter=false)`,
62
- )
63
- }
64
- }
65
- }
66
- })
67
-
68
- // Test with multiple workspaces
69
- t.test('with multiple workspaces', async t => {
70
- // Get a graph with multiple workspaces
71
- const multiWorkspaceGraph = getMultiWorkspaceGraph()
72
-
73
- // Get the full selection state
74
- const all = {
75
- edges: new Set(multiWorkspaceGraph.edges),
76
- nodes: new Set(multiWorkspaceGraph.nodes.values()),
77
- }
78
-
79
- // Run the test
80
- const result = await testPseudo(
81
- ':workspace',
82
- copyGraphSelectionState(all),
83
- copyGraphSelectionState(all),
84
- )
85
-
86
- // Should return all workspace nodes (a, b, c)
87
- const nodeNames = [...result.nodes].map(n => n.name).sort()
88
- t.strictSame(
89
- nodeNames,
90
- ['a', 'b', 'c'],
91
- 'should return all workspace nodes in multi-workspace graph',
92
- )
93
-
94
- t.matchSnapshot(
95
- {
96
- nodes: [...result.nodes].map(n => n.name).sort(),
97
- edges: [...result.edges].map(e => e.name).sort(),
98
- },
99
- 'should match snapshot for multi-workspace graph',
100
- )
101
-
102
- // Verify all nodes are workspace nodes
103
- for (const node of result.nodes) {
104
- t.equal(
105
- node.importer && !node.mainImporter,
106
- true,
107
- `node ${node.name} should be a workspace node (importer=true, mainImporter=false)`,
108
- )
109
- }
110
- })
111
- })