@vltpkg/query 1.5.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (210) hide show
  1. package/package.json +10 -12
  2. package/skills/dss-query/REFERENCE.md +0 -125
  3. package/skills/dss-query/SKILL.md +0 -190
  4. package/skills/dss-query/evals/README.md +0 -81
  5. package/skills/dss-query/evals/evals.json +0 -89
  6. package/skills/dss-query/evals/grade.mjs +0 -481
  7. package/src/attribute.ts +0 -190
  8. package/src/combinator.ts +0 -135
  9. package/src/error.ts +0 -78
  10. package/src/id.ts +0 -46
  11. package/src/index.ts +0 -670
  12. package/src/parser.ts +0 -122
  13. package/src/pseudo/abandoned.ts +0 -9
  14. package/src/pseudo/attr.ts +0 -92
  15. package/src/pseudo/built.ts +0 -19
  16. package/src/pseudo/confused.ts +0 -29
  17. package/src/pseudo/cve.ts +0 -93
  18. package/src/pseudo/cwe.ts +0 -97
  19. package/src/pseudo/debug.ts +0 -9
  20. package/src/pseudo/deprecated.ts +0 -9
  21. package/src/pseudo/dev.ts +0 -18
  22. package/src/pseudo/diff.ts +0 -90
  23. package/src/pseudo/dist.ts +0 -148
  24. package/src/pseudo/dynamic.ts +0 -9
  25. package/src/pseudo/empty.ts +0 -15
  26. package/src/pseudo/entropic.ts +0 -9
  27. package/src/pseudo/env.ts +0 -6
  28. package/src/pseudo/eval.ts +0 -9
  29. package/src/pseudo/fs.ts +0 -9
  30. package/src/pseudo/helpers.ts +0 -106
  31. package/src/pseudo/host.ts +0 -111
  32. package/src/pseudo/hostname.ts +0 -156
  33. package/src/pseudo/license.ts +0 -134
  34. package/src/pseudo/link.ts +0 -30
  35. package/src/pseudo/malware.ts +0 -41
  36. package/src/pseudo/minified.ts +0 -9
  37. package/src/pseudo/missing.ts +0 -16
  38. package/src/pseudo/native.ts +0 -9
  39. package/src/pseudo/network.ts +0 -9
  40. package/src/pseudo/obfuscated.ts +0 -9
  41. package/src/pseudo/optional.ts +0 -18
  42. package/src/pseudo/outdated.ts +0 -345
  43. package/src/pseudo/overridden.ts +0 -20
  44. package/src/pseudo/path.ts +0 -146
  45. package/src/pseudo/peer.ts +0 -18
  46. package/src/pseudo/prerelease.ts +0 -47
  47. package/src/pseudo/private.ts +0 -19
  48. package/src/pseudo/prod.ts +0 -18
  49. package/src/pseudo/published.ts +0 -250
  50. package/src/pseudo/registry.ts +0 -29
  51. package/src/pseudo/root.ts +0 -19
  52. package/src/pseudo/scanned.ts +0 -20
  53. package/src/pseudo/score.ts +0 -186
  54. package/src/pseudo/scripts.ts +0 -61
  55. package/src/pseudo/semver.ts +0 -320
  56. package/src/pseudo/severity.ts +0 -231
  57. package/src/pseudo/shell.ts +0 -9
  58. package/src/pseudo/shrinkwrap.ts +0 -9
  59. package/src/pseudo/skill.ts +0 -59
  60. package/src/pseudo/skills.ts +0 -29
  61. package/src/pseudo/spec.ts +0 -131
  62. package/src/pseudo/squat.ts +0 -225
  63. package/src/pseudo/suspicious.ts +0 -9
  64. package/src/pseudo/tracker.ts +0 -9
  65. package/src/pseudo/trivial.ts +0 -9
  66. package/src/pseudo/type.ts +0 -26
  67. package/src/pseudo/undesirable.ts +0 -9
  68. package/src/pseudo/unknown.ts +0 -9
  69. package/src/pseudo/unmaintained.ts +0 -9
  70. package/src/pseudo/unpopular.ts +0 -9
  71. package/src/pseudo/unstable.ts +0 -9
  72. package/src/pseudo/vuln.ts +0 -273
  73. package/src/pseudo/workspace.ts +0 -22
  74. package/src/pseudo.ts +0 -440
  75. package/src/types.ts +0 -206
  76. package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
  77. package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
  78. package/tap-snapshots/test/id.ts.test.cjs +0 -118
  79. package/tap-snapshots/test/parser.ts.test.cjs +0 -344
  80. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
  81. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
  82. package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
  83. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
  84. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
  85. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
  86. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
  87. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
  88. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
  89. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
  90. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
  91. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
  92. package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
  93. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
  94. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
  95. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
  96. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
  97. package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
  98. package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
  99. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
  100. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
  101. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
  102. package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
  103. package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
  104. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
  105. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
  106. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
  107. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
  108. package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
  109. package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
  110. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
  111. package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
  112. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
  113. package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
  114. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
  115. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
  116. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
  117. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
  118. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
  119. package/tap-snapshots/test/pseudo/skills.ts.test.cjs +0 -19
  120. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
  121. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
  122. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
  123. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
  124. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
  125. package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
  126. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
  127. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
  128. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
  129. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
  130. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
  131. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
  132. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
  133. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
  134. package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
  135. package/test/attribute.ts +0 -273
  136. package/test/combinator.ts +0 -175
  137. package/test/error.ts +0 -60
  138. package/test/fixtures/graph.ts +0 -999
  139. package/test/fixtures/selector.ts +0 -103
  140. package/test/fixtures/types.ts +0 -7
  141. package/test/id.ts +0 -102
  142. package/test/index.ts +0 -1148
  143. package/test/parser.ts +0 -117
  144. package/test/pseudo/abandoned.ts +0 -98
  145. package/test/pseudo/attr.ts +0 -298
  146. package/test/pseudo/built.ts +0 -214
  147. package/test/pseudo/confused.ts +0 -160
  148. package/test/pseudo/cve.ts +0 -249
  149. package/test/pseudo/cwe.ts +0 -255
  150. package/test/pseudo/debug.ts +0 -98
  151. package/test/pseudo/deprecated.ts +0 -98
  152. package/test/pseudo/dev.ts +0 -61
  153. package/test/pseudo/diff.ts +0 -417
  154. package/test/pseudo/dist.ts +0 -215
  155. package/test/pseudo/dynamic.ts +0 -98
  156. package/test/pseudo/empty.ts +0 -108
  157. package/test/pseudo/entropic.ts +0 -101
  158. package/test/pseudo/env.ts +0 -98
  159. package/test/pseudo/eval.ts +0 -98
  160. package/test/pseudo/fs.ts +0 -98
  161. package/test/pseudo/helpers.ts +0 -370
  162. package/test/pseudo/host-context.ts +0 -276
  163. package/test/pseudo/hostname.ts +0 -314
  164. package/test/pseudo/license.ts +0 -265
  165. package/test/pseudo/link.ts +0 -94
  166. package/test/pseudo/malware.ts +0 -184
  167. package/test/pseudo/minified.ts +0 -98
  168. package/test/pseudo/missing.ts +0 -111
  169. package/test/pseudo/native.ts +0 -98
  170. package/test/pseudo/network.ts +0 -98
  171. package/test/pseudo/obfuscated.ts +0 -98
  172. package/test/pseudo/optional.ts +0 -73
  173. package/test/pseudo/outdated.ts +0 -461
  174. package/test/pseudo/overridden.ts +0 -317
  175. package/test/pseudo/path.ts +0 -680
  176. package/test/pseudo/peer.ts +0 -101
  177. package/test/pseudo/prerelease.ts +0 -279
  178. package/test/pseudo/private.ts +0 -108
  179. package/test/pseudo/prod.ts +0 -61
  180. package/test/pseudo/published.ts +0 -557
  181. package/test/pseudo/registry.ts +0 -122
  182. package/test/pseudo/root.ts +0 -66
  183. package/test/pseudo/scanned.ts +0 -144
  184. package/test/pseudo/score.ts +0 -591
  185. package/test/pseudo/scripts.ts +0 -324
  186. package/test/pseudo/semver.ts +0 -822
  187. package/test/pseudo/severity.ts +0 -342
  188. package/test/pseudo/shell.ts +0 -98
  189. package/test/pseudo/shrinkwrap.ts +0 -98
  190. package/test/pseudo/skill.ts +0 -189
  191. package/test/pseudo/skills.ts +0 -90
  192. package/test/pseudo/spec.ts +0 -525
  193. package/test/pseudo/squat.ts +0 -565
  194. package/test/pseudo/suspicious.ts +0 -98
  195. package/test/pseudo/tracker.ts +0 -98
  196. package/test/pseudo/trivial.ts +0 -98
  197. package/test/pseudo/type.ts +0 -105
  198. package/test/pseudo/undesirable.ts +0 -98
  199. package/test/pseudo/unknown.ts +0 -98
  200. package/test/pseudo/unmaintained.ts +0 -98
  201. package/test/pseudo/unpopular.ts +0 -98
  202. package/test/pseudo/unstable.ts +0 -98
  203. package/test/pseudo/vuln.ts +0 -625
  204. package/test/pseudo/vulnerable.ts +0 -137
  205. package/test/pseudo/workspace.ts +0 -111
  206. package/test/pseudo.ts +0 -584
  207. package/tsconfig.json +0 -3
  208. package/tsconfig.publish.json +0 -19
  209. package/tsconfig.publish.tsbuildinfo +0 -1
  210. package/typedoc.mjs +0 -2
@@ -1,137 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
- import { getSimpleGraph } from '../fixtures/graph.ts'
5
- import type { ParserState } from '../../src/types.ts'
6
- import { parse } from '../../src/parser.ts'
7
- import { vuln } from '../../src/pseudo/vuln.ts'
8
-
9
- t.test(':vulnerable alias works the same as :vuln', async t => {
10
- const getState = (query: string, graph = getSimpleGraph()) => {
11
- const ast = parse(query)
12
- const current = ast.first.first
13
- const state: ParserState = {
14
- comment: '',
15
- current,
16
- initial: {
17
- edges: new Set(graph.edges.values()),
18
- nodes: new Set(graph.nodes.values()),
19
- },
20
- partial: {
21
- edges: new Set(graph.edges.values()),
22
- nodes: new Set(graph.nodes.values()),
23
- },
24
- collect: {
25
- edges: new Set(),
26
- nodes: new Set(),
27
- },
28
- cancellable: async () => {},
29
- walk: async i => i,
30
- securityArchive: asSecurityArchiveLike(
31
- new Map([
32
- [
33
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
- {
35
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
36
- alerts: [{ type: 'criticalCVE' }],
37
- },
38
- ],
39
- [
40
- joinDepIDTuple(['registry', '', 'a@1.0.0']),
41
- {
42
- id: joinDepIDTuple(['registry', '', 'a@1.0.0']),
43
- alerts: [{ type: 'potentialVulnerability' }],
44
- },
45
- ],
46
- [
47
- joinDepIDTuple(['registry', '', 'c@1.0.0']),
48
- {
49
- id: joinDepIDTuple(['registry', '', 'c@1.0.0']),
50
- alerts: [
51
- {
52
- type: 'deprecated',
53
- severity: 'low' as const,
54
- category: 'maintenance',
55
- key: 'some-key-2',
56
- },
57
- ],
58
- },
59
- ],
60
- ]),
61
- ),
62
- importers: new Set(graph.importers),
63
- retries: 0,
64
- signal: new AbortController().signal,
65
- specificity: { idCounter: 0, commonCounter: 0 },
66
- }
67
- return state
68
- }
69
-
70
- await t.test(
71
- 'parameterless :vulnerable matches severity >= medium',
72
- async t => {
73
- const res = await vuln(getState(':vulnerable'))
74
- t.strictSame(
75
- [...res.partial.nodes].map(n => n.name).sort(),
76
- ['a', 'e'],
77
- 'should select packages with vuln severity >= medium',
78
- )
79
- t.matchSnapshot({
80
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
81
- edges: [...res.partial.edges].map(e => e.name).sort(),
82
- })
83
- },
84
- )
85
-
86
- await t.test(
87
- ':vulnerable(critical) matches same as :vuln(critical)',
88
- async t => {
89
- const resVulnerable = await vuln(
90
- getState(':vulnerable(critical)'),
91
- )
92
- const resVuln = await vuln(getState(':vuln(critical)'))
93
- t.strictSame(
94
- [...resVulnerable.partial.nodes].map(n => n.name).sort(),
95
- [...resVuln.partial.nodes].map(n => n.name).sort(),
96
- 'alias :vulnerable(critical) should produce identical results to :vuln(critical)',
97
- )
98
- },
99
- )
100
- })
101
-
102
- t.test('missing security archive', async t => {
103
- const getState = (query: string) => {
104
- const ast = parse(query)
105
- const current = ast.first.first
106
- const state: ParserState = {
107
- comment: '',
108
- current,
109
- initial: {
110
- edges: new Set(),
111
- nodes: new Set(),
112
- },
113
- partial: {
114
- edges: new Set(),
115
- nodes: new Set(),
116
- },
117
- collect: {
118
- edges: new Set(),
119
- nodes: new Set(),
120
- },
121
- cancellable: async () => {},
122
- walk: async i => i,
123
- securityArchive: undefined,
124
- importers: new Set(),
125
- retries: 0,
126
- signal: new AbortController().signal,
127
- specificity: { idCounter: 0, commonCounter: 0 },
128
- }
129
- return state
130
- }
131
-
132
- await t.rejects(
133
- vuln(getState(':vulnerable')),
134
- { message: /Missing security archive/ },
135
- 'should throw an error',
136
- )
137
- })
@@ -1,111 +0,0 @@
1
- import t from 'tap'
2
- import { pseudo } from '../../src/pseudo.ts'
3
- import {
4
- selectorFixture,
5
- copyGraphSelectionState,
6
- } from '../fixtures/selector.ts'
7
- import {
8
- getSingleWorkspaceGraph,
9
- getMultiWorkspaceGraph,
10
- } from '../fixtures/graph.ts'
11
- import type { TestCase } from '../fixtures/types.ts'
12
- import type { GraphSelectionState } from '../../src/types.ts'
13
-
14
- const testPseudo = selectorFixture(pseudo)
15
-
16
- t.test(':workspace pseudo-selector', async t => {
17
- // Test with a single workspace graph
18
- t.test('with single workspace', async t => {
19
- // Get a graph with a single workspace
20
- const singleWorkspaceGraph = getSingleWorkspaceGraph()
21
-
22
- // Get the full selection state
23
- const all = {
24
- edges: new Set(singleWorkspaceGraph.edges),
25
- nodes: new Set(singleWorkspaceGraph.nodes.values()),
26
- }
27
-
28
- // Create an empty selection state
29
- const empty: GraphSelectionState = {
30
- edges: new Set(),
31
- nodes: new Set(),
32
- }
33
-
34
- // Run tests in the same pattern as the main pseudo.ts tests
35
- const queryToExpected = new Set<TestCase>([
36
- [':workspace', all, ['w']], // Should return only workspace nodes
37
- [':workspace', empty, []], // Empty input should return empty output
38
- ])
39
-
40
- const initial = copyGraphSelectionState(all)
41
- for (const [query, partial, expected] of queryToExpected) {
42
- const result = await testPseudo(
43
- query,
44
- initial,
45
- copyGraphSelectionState(partial),
46
- )
47
-
48
- t.strictSame(
49
- result.nodes.map(i => i.name),
50
- expected,
51
- `query > "${query}"`,
52
- )
53
-
54
- // Verify all nodes are workspace nodes
55
- const nodeArray = [...result.nodes]
56
- if (nodeArray.length > 0) {
57
- for (const node of nodeArray) {
58
- t.equal(
59
- node.importer && !node.mainImporter,
60
- true,
61
- `node ${node.name} should be a workspace node (importer=true, mainImporter=false)`,
62
- )
63
- }
64
- }
65
- }
66
- })
67
-
68
- // Test with multiple workspaces
69
- t.test('with multiple workspaces', async t => {
70
- // Get a graph with multiple workspaces
71
- const multiWorkspaceGraph = getMultiWorkspaceGraph()
72
-
73
- // Get the full selection state
74
- const all = {
75
- edges: new Set(multiWorkspaceGraph.edges),
76
- nodes: new Set(multiWorkspaceGraph.nodes.values()),
77
- }
78
-
79
- // Run the test
80
- const result = await testPseudo(
81
- ':workspace',
82
- copyGraphSelectionState(all),
83
- copyGraphSelectionState(all),
84
- )
85
-
86
- // Should return all workspace nodes (a, b, c)
87
- const nodeNames = [...result.nodes].map(n => n.name).sort()
88
- t.strictSame(
89
- nodeNames,
90
- ['a', 'b', 'c'],
91
- 'should return all workspace nodes in multi-workspace graph',
92
- )
93
-
94
- t.matchSnapshot(
95
- {
96
- nodes: [...result.nodes].map(n => n.name).sort(),
97
- edges: [...result.edges].map(e => e.name).sort(),
98
- },
99
- 'should match snapshot for multi-workspace graph',
100
- )
101
-
102
- // Verify all nodes are workspace nodes
103
- for (const node of result.nodes) {
104
- t.equal(
105
- node.importer && !node.mainImporter,
106
- true,
107
- `node ${node.name} should be a workspace node (importer=true, mainImporter=false)`,
108
- )
109
- }
110
- })
111
- })