@wocker/core 1.1.4 → 1.1.5-beta.1

package/lib/env.d.ts

@@ -1,4 +1,4 @@
-export declare const WOCKER_VERSION = "1.1.2";
+export declare const WOCKER_VERSION = "1.1.5";
 export declare const WOCKER_VERSION_KEY = "__WOCKER_VERSION__";
 export declare const WOCKER_DATA_DIR: string;
 export declare const WOCKER_DATA_DIR_KEY = "__WOCKER_DATA_DIR__";

package/lib/env.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MODULE_METADATA = exports.PLUGIN_NAME_METADATA = exports.INJECT_TOKEN_METADATA = exports.SELF_DECLARED_DEPS_METADATA = exports.PARAMTYPES_METADATA = exports.ALIAS_METADATA = exports.ARGS_OLD_METADATA = exports.ARGS_METADATA = exports.LISTENER_METADATA = exports.COMPLETION_METADATA = exports.COMMAND_METADATA = exports.DESCRIPTION_METADATA = exports.INJECTABLE_WATERMARK = exports.IS_MODULE_METADATA = exports.IS_GLOBAL_METADATA = exports.IS_CONTROLLER_METADATA = exports.PLUGIN_DIR_KEY = exports.FILE_SYSTEM_DRIVER_KEY = exports.WOCKER_DATA_DIR_KEY = exports.WOCKER_DATA_DIR = exports.WOCKER_VERSION_KEY = exports.WOCKER_VERSION = void 0;
 const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
-exports.WOCKER_VERSION = "1.1.2";
+exports.WOCKER_VERSION = "1.1.5";
 exports.WOCKER_VERSION_KEY = "__WOCKER_VERSION__";
 exports.WOCKER_DATA_DIR = process.env.WS_DIR || path_1.default.join(os_1.default.homedir(), ".workspace");
 exports.WOCKER_DATA_DIR_KEY = "__WOCKER_DATA_DIR__";

package/lib/index.d.ts

@@ -14,4 +14,5 @@ export {
  */
 EventService as AppEventsService } from "./services";
 export * from "./types";
+export { isSensitivePath } from "./utils/isSensitivePath";
 export { IS_MODULE_METADATA, MODULE_METADATA, FILE_SYSTEM_DRIVER_KEY, PLUGIN_NAME_METADATA, PLUGIN_DIR_KEY, WOCKER_VERSION_KEY, WOCKER_VERSION, WOCKER_DATA_DIR_KEY } from "./env";

package/lib/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WOCKER_DATA_DIR_KEY = exports.WOCKER_VERSION = exports.WOCKER_VERSION_KEY = exports.PLUGIN_DIR_KEY = exports.PLUGIN_NAME_METADATA = exports.FILE_SYSTEM_DRIVER_KEY = exports.MODULE_METADATA = exports.IS_MODULE_METADATA = exports.AppEventsService = exports.CommandNotFoundError = exports.Cli = void 0;
+exports.WOCKER_DATA_DIR_KEY = exports.WOCKER_VERSION = exports.WOCKER_VERSION_KEY = exports.PLUGIN_DIR_KEY = exports.PLUGIN_NAME_METADATA = exports.FILE_SYSTEM_DRIVER_KEY = exports.MODULE_METADATA = exports.IS_MODULE_METADATA = exports.isSensitivePath = exports.AppEventsService = exports.CommandNotFoundError = exports.Cli = void 0;
 require("reflect-metadata");
 var cli_1 = require("@kearisp/cli");
 Object.defineProperty(exports, "Cli", { enumerable: true, get: function () { return cli_1.Cli; } });
@@ -33,6 +33,8 @@ var services_1 = require("./services");
  */
 Object.defineProperty(exports, "AppEventsService", { enumerable: true, get: function () { return services_1.EventService; } });
 __exportStar(require("./types"), exports);
+var isSensitivePath_1 = require("./utils/isSensitivePath");
+Object.defineProperty(exports, "isSensitivePath", { enumerable: true, get: function () { return isSensitivePath_1.isSensitivePath; } });
 var env_1 = require("./env");
 Object.defineProperty(exports, "IS_MODULE_METADATA", { enumerable: true, get: function () { return env_1.IS_MODULE_METADATA; } });
 Object.defineProperty(exports, "MODULE_METADATA", { enumerable: true, get: function () { return env_1.MODULE_METADATA; } });

package/lib/makes/AppConfig.d.ts

@@ -1,5 +1,5 @@
 import { FileSystem } from "./FileSystem";
-import { EnvConfig, PackageManagerType, PluginRef, PresetRef, ProjectRef, ProjectOldRef } from "../types";
+import { EnvConfig, PackageManagerType, Permissions, PluginRef, PresetRef, ProjectRef, ProjectOldRef } from "../types";
 export declare abstract class AppConfig {
     debug?: boolean;
     pm?: PackageManagerType;
@@ -9,6 +9,7 @@ export declare abstract class AppConfig {
     projects: ProjectRef[];
     meta?: EnvConfig;
     env?: EnvConfig;
+    permissions?: Permissions;
     constructor(data: AppConfig.Data);
     addPlugin(name: string, env?: PluginRef["env"]): void;
     removePlugin(name: string): void;
@@ -27,6 +28,12 @@ export declare abstract class AppConfig {
     getEnv(key: string, byDefault: string): string;
     setEnv(name: string, value: string): void;
     unsetEnv(name: string): void;
+    isMountAllowed(path: string): boolean;
+    addMountAllow(path: string): void;
+    removeMountAllow(path: string): void;
+    addMountDeny(path: string): void;
+    removeMountDeny(path: string): void;
+    protected prunePermissions(): void;
     abstract save(): void;
     toObject(): AppConfig.Data;
     toJsString(): string;
@@ -42,5 +49,6 @@ export declare namespace AppConfig {
         projects?: ProjectOldRef[];
         meta?: EnvConfig;
         env?: EnvConfig;
+        permissions?: Permissions;
     };
 }

package/lib/makes/AppConfig.js

@@ -12,6 +12,7 @@ var __rest = (this && this.__rest) || function (s, e) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppConfig = void 0;
+const isPathAllowed_1 = require("../utils/isPathAllowed");
 class AppConfig {
     constructor(data) {
         const { plugins = [], presets = [], projects = [] } = data, rest = __rest(data, ["plugins", "presets", "projects"]);
@@ -159,6 +160,74 @@ class AppConfig {
             delete this.env;
         }
     }
+    isMountAllowed(path) {
+        var _a, _b, _c, _d;
+        return (0, isPathAllowed_1.isPathAllowed)(path, (_b = (_a = this.permissions) === null || _a === void 0 ? void 0 : _a.mounts) === null || _b === void 0 ? void 0 : _b.allow, (_d = (_c = this.permissions) === null || _c === void 0 ? void 0 : _c.mounts) === null || _d === void 0 ? void 0 : _d.deny);
+    }
+    addMountAllow(path) {
+        if (!this.permissions) {
+            this.permissions = {};
+        }
+        if (!this.permissions.mounts) {
+            this.permissions.mounts = {};
+        }
+        if (!this.permissions.mounts.allow) {
+            this.permissions.mounts.allow = [];
+        }
+        if (!this.permissions.mounts.allow.includes(path)) {
+            this.permissions.mounts.allow.push(path);
+        }
+        this.removeMountDeny(path);
+    }
+    removeMountAllow(path) {
+        var _a, _b;
+        if (!((_b = (_a = this.permissions) === null || _a === void 0 ? void 0 : _a.mounts) === null || _b === void 0 ? void 0 : _b.allow)) {
+            return;
+        }
+        this.permissions.mounts.allow = this.permissions.mounts.allow.filter((entry) => entry !== path);
+        this.prunePermissions();
+    }
+    addMountDeny(path) {
+        if (!this.permissions) {
+            this.permissions = {};
+        }
+        if (!this.permissions.mounts) {
+            this.permissions.mounts = {};
+        }
+        if (!this.permissions.mounts.deny) {
+            this.permissions.mounts.deny = [];
+        }
+        if (!this.permissions.mounts.deny.includes(path)) {
+            this.permissions.mounts.deny.push(path);
+        }
+        this.removeMountAllow(path);
+    }
+    removeMountDeny(path) {
+        var _a, _b;
+        if (!((_b = (_a = this.permissions) === null || _a === void 0 ? void 0 : _a.mounts) === null || _b === void 0 ? void 0 : _b.deny)) {
+            return;
+        }
+        this.permissions.mounts.deny = this.permissions.mounts.deny.filter((entry) => entry !== path);
+        this.prunePermissions();
+    }
+    prunePermissions() {
+        var _a, _b, _c;
+        if (!((_a = this.permissions) === null || _a === void 0 ? void 0 : _a.mounts)) {
+            return;
+        }
+        if (((_b = this.permissions.mounts.allow) === null || _b === void 0 ? void 0 : _b.length) === 0) {
+            delete this.permissions.mounts.allow;
+        }
+        if (((_c = this.permissions.mounts.deny) === null || _c === void 0 ? void 0 : _c.length) === 0) {
+            delete this.permissions.mounts.deny;
+        }
+        if (Object.keys(this.permissions.mounts).length === 0) {
+            delete this.permissions.mounts;
+        }
+        if (Object.keys(this.permissions).length === 0) {
+            delete this.permissions;
+        }
+    }
     toObject() {
         return {
             debug: this.debug,
@@ -168,7 +237,8 @@ class AppConfig {
             presets: this.presets.length > 0 ? this.presets : undefined,
             projects: this.projects.length > 0 ? this.projects : undefined,
             env: this.env,
-            meta: this.meta
+            meta: this.meta,
+            permissions: this.permissions
         };
     }
     toJsString() {

package/lib/services/AppService.d.ts

@@ -40,6 +40,7 @@ export declare class AppService {
     unsetMeta(key: string): void;
     get experimentalFeatures(): string[];
     isExperimentalEnabled(key: string): boolean;
+    isAllowedPath(path: string): boolean;
     save(): void;
 }
 export {};

package/lib/services/AppService.js

@@ -126,6 +126,9 @@ let AppService = class AppService {
     isExperimentalEnabled(key) {
         return this.config.getMeta(`experimental.${key}`) === "enabled";
     }
+    isAllowedPath(path) {
+        return this.config.isMountAllowed(path);
+    }
     save() {
         this.config.save();
     }

package/lib/types/Permissions.d.ts

@@ -0,0 +1,6 @@
+export type Permissions = {
+    mounts?: {
+        allow?: string[];
+        deny?: string[];
+    };
+};

package/lib/types/Permissions.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/types/index.d.ts

@@ -7,6 +7,7 @@ export * from "./LogLevel";
 export * from "./ModuleMetadata";
 export * from "./PackageManagerType";
 export * from "./PickProperties";
+export * from "./Permissions";
 export * from "./PluginMetadata";
 export * from "./ProjectConfigScope";
 export * from "./PluginRef";

package/lib/types/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./LogLevel"), exports);
 __exportStar(require("./ModuleMetadata"), exports);
 __exportStar(require("./PackageManagerType"), exports);
 __exportStar(require("./PickProperties"), exports);
+__exportStar(require("./Permissions"), exports);
 __exportStar(require("./PluginMetadata"), exports);
 __exportStar(require("./ProjectConfigScope"), exports);
 __exportStar(require("./PluginRef"), exports);

package/lib/utils/isPathAllowed.d.ts

@@ -0,0 +1 @@
+export declare const isPathAllowed: (target: string, allow?: string[], deny?: string[]) => boolean;

package/lib/utils/isPathAllowed.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPathAllowed = void 0;
+const path_1 = __importDefault(require("path"));
+const isPathAllowed = (target, allow = [], deny = []) => {
+    const matches = (list) => list.some((entry) => {
+        const normalized = path_1.default.resolve(entry);
+        return target === normalized || target.startsWith(normalized + path_1.default.sep);
+    });
+    if (matches(deny)) {
+        return false;
+    }
+    return matches(allow);
+};
+exports.isPathAllowed = isPathAllowed;

package/lib/utils/isSensitivePath.d.ts

@@ -0,0 +1 @@
+export declare const isSensitivePath: (path: string) => boolean;

package/lib/utils/isSensitivePath.js

@@ -0,0 +1,20 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSensitivePath = void 0;
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const isSensitivePath = (path) => {
+    const resolved = path_1.default.resolve(path);
+    const root = path_1.default.parse(resolved).root;
+    if (resolved === root) {
+        return true;
+    }
+    if (path_1.default.dirname(resolved) === root) {
+        return true;
+    }
+    return resolved === path_1.default.resolve(os_1.default.homedir());
+};
+exports.isSensitivePath = isSensitivePath;

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@wocker/core",
     "type": "commonjs",
-    "version": "1.1.4",
+    "version": "1.1.5-beta.1",
     "author": "Kris Papercut <krispcut@gmail.com>",
     "description": "Core of the Wocker",
     "license": "MIT",