@zuplo/cli 7.0.2 → 7.1.1

package/node_modules/@zuplo/editor/node_modules/pino-abstract-transport/test/worker.test.js

@@ -0,0 +1,357 @@
+'use strict'
+
+const { once } = require('events')
+const { join } = require('path')
+const ThreadStream = require('thread-stream')
+const { MessageChannel } = require('worker_threads')
+const { test } = require('tap')
+
+workerTest('transport-on-data.js')
+workerTest('transport-async-iteration.js', ' when using async iteration')
+
+function workerTest (filename, description = '') {
+  test(`does not wait for pino to send config by default${description}`, function ({ same, plan }) {
+    plan(4)
+    const { port1, port2 } = new MessageChannel()
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', filename),
+      workerData: { port: port1 },
+      workerOpts: {
+        transferList: [port1]
+      }
+    })
+
+    const expected = [{
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'hello world'
+    }, {
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'another message',
+      prop: 42
+    }]
+
+    const emptyPinoConfig = {
+      levels: undefined,
+      messageKey: undefined,
+      errorKey: undefined
+    }
+
+    port2.on('message', function (message) {
+      same(expected.shift(), message.data)
+      same(emptyPinoConfig, message.pinoConfig)
+    })
+
+    const lines = expected.map(JSON.stringify).join('\n')
+    stream.write(lines)
+    stream.end()
+  })
+
+  test(`does not wait for pino to send config if transport is not expecting it${description}`, function ({ same, plan }) {
+    plan(4)
+    const { port1, port2 } = new MessageChannel()
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', filename),
+      workerData: {
+        port: port1,
+        pinoWillSendConfig: true
+      },
+      workerOpts: {
+        transferList: [port1]
+      }
+    })
+
+    const expected = [{
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'hello world'
+    }, {
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'another message',
+      prop: 42
+    }]
+
+    const emptyPinoConfig = {
+      levels: undefined,
+      messageKey: undefined,
+      errorKey: undefined
+    }
+
+    const pinoConfig = {
+      levels: {
+        labels: { 30: 'info' },
+        values: { info: 30 }
+      },
+      messageKey: 'msg',
+      errorKey: 'err'
+    }
+
+    stream.emit('message', { code: 'PINO_CONFIG', config: pinoConfig })
+
+    port2.on('message', function (message) {
+      same(expected.shift(), message.data)
+      same(emptyPinoConfig, message.pinoConfig)
+    })
+
+    const lines = expected.map(JSON.stringify).join('\n')
+    stream.write(lines)
+    stream.end()
+  })
+
+  test(`waits for the pino config when pino intends to send it and the transport requests it${description}`, function ({ same, plan }) {
+    plan(4)
+    const { port1, port2 } = new MessageChannel()
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', filename),
+      workerData: {
+        port: port1,
+        pinoWillSendConfig: true,
+        opts: {
+          expectPinoConfig: true
+        }
+      },
+      workerOpts: {
+        transferList: [port1]
+      }
+    })
+
+    const expected = [{
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'hello world'
+    }, {
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'another message',
+      prop: 42
+    }]
+
+    const pinoConfig = {
+      levels: {
+        labels: { 30: 'info' },
+        values: { info: 30 }
+      },
+      messageKey: 'msg',
+      errorKey: 'err'
+    }
+
+    port2.on('message', function (message) {
+      same(expected.shift(), message.data)
+      same(pinoConfig, message.pinoConfig)
+    })
+
+    const lines = expected.map(JSON.stringify).join('\n')
+    stream.emit('message', { code: 'PINO_CONFIG', config: pinoConfig })
+    stream.write(lines)
+    stream.end()
+  })
+
+  test(`continues to listen if it receives a message that is not PINO_CONFIG${description}`, function ({ same, plan }) {
+    plan(4)
+    const { port1, port2 } = new MessageChannel()
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', 'transport-on-data.js'),
+      workerData: {
+        port: port1,
+        pinoWillSendConfig: true,
+        opts: {
+          expectPinoConfig: true
+        }
+      },
+      workerOpts: {
+        transferList: [port1]
+      }
+    })
+
+    const expected = [{
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'hello world'
+    }, {
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'another message',
+      prop: 42
+    }]
+
+    const pinoConfig = {
+      levels: {
+        labels: { 30: 'info' },
+        values: { info: 30 }
+      },
+      messageKey: 'msg',
+      errorKey: 'err'
+    }
+
+    port2.on('message', function (message) {
+      same(expected.shift(), message.data)
+      same(pinoConfig, message.pinoConfig)
+    })
+
+    const lines = expected.map(JSON.stringify).join('\n')
+    stream.emit('message', 'not a PINO_CONFIG')
+    stream.emit('message', { code: 'NOT_PINO_CONFIG', config: { levels: 'foo', messageKey: 'bar', errorKey: 'baz' } })
+    stream.emit('message', { code: 'PINO_CONFIG', config: pinoConfig })
+    stream.write(lines)
+    stream.end()
+  })
+
+  test(`waits for the pino config even if it is sent after write${description}`, function ({ same, plan }) {
+    plan(4)
+    const { port1, port2 } = new MessageChannel()
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', filename),
+      workerData: {
+        port: port1,
+        pinoWillSendConfig: true,
+        opts: {
+          expectPinoConfig: true
+        }
+      },
+      workerOpts: {
+        transferList: [port1]
+      }
+    })
+
+    const expected = [{
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'hello world'
+    }, {
+      level: 30,
+      time: 1617955768092,
+      pid: 2942,
+      hostname: 'MacBook-Pro.local',
+      msg: 'another message',
+      prop: 42
+    }]
+
+    const pinoConfig = {
+      levels: {
+        labels: { 30: 'info' },
+        values: { info: 30 }
+      },
+      messageKey: 'msg',
+      errorKey: 'err'
+    }
+
+    port2.on('message', function (message) {
+      same(expected.shift(), message.data)
+      same(pinoConfig, message.pinoConfig)
+    })
+
+    const lines = expected.map(JSON.stringify).join('\n')
+    stream.write(lines)
+    stream.emit('message', { code: 'PINO_CONFIG', config: pinoConfig })
+    stream.end()
+  })
+
+  test(`emits an error if the transport expects pino to send the config, but pino is not going to${description}`, async function ({ plan, same, ok }) {
+    plan(2)
+    const stream = new ThreadStream({
+      filename: join(__dirname, 'fixtures', filename),
+      workerData: {
+        opts: {
+          expectPinoConfig: true
+        }
+      }
+    })
+    const [err] = await once(stream, 'error')
+    same(err.message, 'This transport is not compatible with the current version of pino. Please upgrade pino to the latest version.')
+    ok(stream.destroyed)
+  })
+}
+
+test('waits for the pino config when pipelining', function ({ same, plan }) {
+  plan(2)
+  const { port1, port2 } = new MessageChannel()
+  const stream = new ThreadStream({
+    filename: join(__dirname, 'fixtures', 'worker-pipeline.js'),
+    workerData: {
+      pinoWillSendConfig: true,
+      targets: [{
+        target: './transport-transform.js',
+        options: {
+          opts: { expectPinoConfig: true }
+        }
+      }, {
+        target: './transport-on-data.js',
+        options: {
+          port: port1
+        }
+      }]
+    },
+    workerOpts: {
+      transferList: [port1]
+    }
+  })
+
+  const expected = [{
+    level: 'info(30)',
+    time: 1617955768092,
+    pid: 2942,
+    hostname: 'MacBook-Pro.local',
+    msg: 'HELLO WORLD',
+    service: 'from transform'
+  }, {
+    level: 'info(30)',
+    time: 1617955768092,
+    pid: 2942,
+    hostname: 'MacBook-Pro.local',
+    msg: 'ANOTHER MESSAGE',
+    prop: 42,
+    service: 'from transform'
+  }]
+
+  const lines = [{
+    level: 30,
+    time: 1617955768092,
+    pid: 2942,
+    hostname: 'MacBook-Pro.local',
+    msg: 'hello world'
+  }, {
+    level: 30,
+    time: 1617955768092,
+    pid: 2942,
+    hostname: 'MacBook-Pro.local',
+    msg: 'another message',
+    prop: 42
+  }].map(JSON.stringify).join('\n')
+
+  const pinoConfig = {
+    levels: {
+      labels: { 30: 'info' },
+      values: { info: 30 }
+    },
+    messageKey: 'msg',
+    errorKey: 'err'
+  }
+
+  port2.on('message', function (message) {
+    same(expected.shift(), message.data)
+  })
+
+  stream.emit('message', { code: 'PINO_CONFIG', config: pinoConfig })
+  stream.write(lines)
+  stream.end()
+})

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/.airtap.yml

@@ -0,0 +1,7 @@
+providers:
+  - airtap-playwright
+
+browsers:
+  - name: chromium
+    supports:
+      headless: true

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/.github/stale.yml

@@ -0,0 +1,21 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 15
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 7
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - "discussion"
+  - "feature request"
+  - "bug"
+  - "help wanted"
+  - "plugin suggestion"
+  - "good first issue"
+# Label to use when marking an issue as stale
+staleLabel: stale
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/.github/workflows/ci.yml

@@ -0,0 +1,137 @@
+name: CI
+on:
+  push:
+    paths-ignore:
+      - docs/**
+      - '*.md'
+  pull_request:
+    paths-ignore:
+      - docs/**
+      - '*.md'
+
+jobs:
+  dependency-review:
+    name: Dependency Review
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+
+      - name: Dependency review
+        uses: actions/dependency-review-action@v3
+
+  lint:
+    name: Lint Code
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: lts/*
+
+      - name: Install dependencies
+        run: npm i --ignore-scripts
+
+      - name: Lint code
+        run: npm run lint
+
+  browsers:
+    name: Test Browsers
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: lts/*
+
+      - name: Install dependencies
+        run: npm i
+
+      - name: Run tests
+        run: npm run test:browser
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    strategy:
+      matrix:
+        node-version: [6, 8, 10, 11, 12, 13, 14, 15, 16, 18]
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+
+      - name: Setup Node ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Upgrade npm
+        if: ${{ success() && matrix.node-version == '6' }}
+        run: npm i npm@6.13.4 -g
+
+      - name: Install dependencies
+        run: npm i --ignore-scripts
+        
+      - name: Run tests
+        run: npm run test:unit
+
+  typescript:
+    name: Test TypeScript
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: lts/*
+
+      - name: Install dependencies
+        run: npm i --ignore-scripts
+
+      - name: tsd
+        run: npm run test:typescript
+
+  automerge:
+    name: Automerge Dependabot PRs
+    if: >
+        github.event_name == 'pull_request' &&
+        github.event.pull_request.user.login == 'dependabot[bot]'
+    needs: [browsers, lint, test, typescript]
+    permissions:
+      pull-requests: write
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: fastify/github-action-merge-dependabot@v3
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          target: major

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/README.md

@@ -0,0 +1,126 @@
+# secure-json-parse
+
+![CI](https://github.com/fastify/secure-json-parse/workflows/CI/badge.svg)
+[![NPM version](https://img.shields.io/npm/v/secure-json-parse.svg?style=flat)](https://www.npmjs.com/package/secure-json-parse)
+[![js-standard-style](https://img.shields.io/badge/code%20style-standard-brightgreen.svg?style=flat)](https://standardjs.com/)
+
+`JSON.parse()` drop-in replacement with prototype poisoning protection.
+
+## Introduction
+
+Consider this:
+
+```js
+> const a = '{"__proto__":{ "b":5}}';
+'{"__proto__":{ "b":5}}'
+
+> const b = JSON.parse(a);
+{ __proto__: { b: 5 } }
+
+> b.b;
+undefined
+
+> const c = Object.assign({}, b);
+{}
+
+> c.b
+5
+```
+
+The problem is that `JSON.parse()` retains the `__proto__` property as a plain object key. By
+itself, this is not a security issue. However, as soon as that object is assigned to another or
+iterated on and values copied, the `__proto__` property leaks and becomes the object's prototype.
+
+## Install
+```
+npm i secure-json-parse
+```
+
+## Usage
+
+Pass the option object as a second (or third) parameter for configuring the action to take in case of a bad JSON, if nothing is configured, the default is to throw a `SyntaxError`.<br/>
+You can choose which action to perform in case `__proto__` is present, and in case `constructor.prototype` is present.
+
+```js
+const sjson = require('secure-json-parse')
+
+const goodJson = '{ "a": 5, "b": 6 }'
+const badJson = '{ "a": 5, "b": 6, "__proto__": { "x": 7 }, "constructor": {"prototype": {"bar": "baz"} } }'
+
+console.log(JSON.parse(goodJson), sjson.parse(goodJson, { protoAction: 'remove', constructorAction: 'remove' }))
+console.log(JSON.parse(badJson), sjson.parse(badJson, { protoAction: 'remove', constructorAction: 'remove' }))
+```
+
+## API
+
+### `sjson.parse(text, [reviver], [options])`
+
+Parses a given JSON-formatted text into an object where:
+- `text` - the JSON text string.
+- `reviver` - the `JSON.parse()` optional `reviver` argument.
+- `options` - optional configuration object where:
+    - `protoAction` - optional string with one of:
+        - `'error'` - throw a `SyntaxError` when a `__proto__` key is found. This is the default value.
+        - `'remove'` - deletes any `__proto__` keys from the result object.
+        - `'ignore'` - skips all validation (same as calling `JSON.parse()` directly).
+    - `constructorAction` - optional string with one of:
+        - `'error'` - throw a `SyntaxError` when a `constructor.prototype` key is found. This is the default value.
+        - `'remove'` - deletes any `constructor` keys from the result object.
+        - `'ignore'` - skips all validation (same as calling `JSON.parse()` directly).
+
+### `sjson.scan(obj, [options])`
+
+Scans a given object for prototype properties where:
+- `obj` - the object being scanned.
+- `options` - optional configuration object where:
+    - `protoAction` - optional string with one of:
+        - `'error'` - throw a `SyntaxError` when a `__proto__` key is found. This is the default value.
+        - `'remove'` - deletes any `__proto__` keys from the input `obj`.
+    - `constructorAction` - optional string with one of:
+        - `'error'` - throw a `SyntaxError` when a `constructor.prototype` key is found. This is the default value.
+        - `'remove'` - deletes any `constructor` keys from the input `obj`.
+
+## Benchmarks
+
+Machine: 2,7 GHz Quad-Core Intel Core i7
+
+```
+v14.8.0
+
+> node ignore.js
+
+JSON.parse x 679,376 ops/sec ±1.15% (84 runs sampled)
+secure-json-parse x 649,605 ops/sec ±0.58% (87 runs sampled)
+reviver x 244,414 ops/sec ±1.05% (88 runs sampled)
+Fastest is JSON.parse
+
+> node no__proto__.js
+
+JSON.parse x 652,190 ops/sec ±0.67% (86 runs sampled)
+secure-json-parse x 589,785 ops/sec ±1.01% (88 runs sampled)
+reviver x 218,075 ops/sec ±1.58% (87 runs sampled)
+Fastest is JSON.parse
+
+> node remove.js
+
+JSON.parse x 683,527 ops/sec ±0.62% (88 runs sampled)
+secure-json-parse x 316,926 ops/sec ±0.63% (87 runs sampled)
+reviver x 214,167 ops/sec ±0.63% (86 runs sampled)
+Fastest is JSON.parse
+
+> node throw.js
+
+JSON.parse x 682,548 ops/sec ±0.60% (88 runs sampled)
+JSON.parse error x 170,716 ops/sec ±0.93% (87 runs sampled)
+secure-json-parse x 104,483 ops/sec ±0.62% (87 runs sampled)
+reviver x 114,197 ops/sec ±0.63% (87 runs sampled)
+Fastest is JSON.parse
+```
+
+# Acknowledgements
+This project has been forked from [hapijs/bourne](https://github.com/hapijs/bourne).
+All the credits before the commit [4690682](https://github.com/hapijs/bourne/commit/4690682c6cdaa06590da7b2485d5df91c09da889) goes to the hapijs/bourne project contributors.
+After, the project will be maintained by the Fastify team.
+
+# License
+Licensed under BSD-3-Clause.

package/node_modules/@zuplo/editor/node_modules/secure-json-parse/benchmarks/ignore.js

@@ -0,0 +1,35 @@
+'use strict'
+
+const Benchmark = require('benchmark')
+const sjson = require('..')
+
+const internals = {
+  text: '{ "a": 5, "b": 6, "__proto__": { "x": 7 }, "c": { "d": 0, "e": "text", "__proto__": { "y": 8 }, "f": { "g": 2 } } }'
+}
+
+const suite = new Benchmark.Suite()
+
+suite
+  .add('JSON.parse', () => {
+    JSON.parse(internals.text)
+  })
+  .add('secure-json-parse parse', () => {
+    sjson.parse(internals.text, { protoAction: 'ignore' })
+  })
+  .add('secure-json-parse safeParse', () => {
+    sjson.safeParse(internals.text)
+  })
+  .add('reviver', () => {
+    JSON.parse(internals.text, internals.reviver)
+  })
+  .on('cycle', (event) => {
+    console.log(String(event.target))
+  })
+  .on('complete', function () {
+    console.log('Fastest is ' + this.filter('fastest').map('name'))
+  })
+  .run({ async: true })
+
+internals.reviver = function (key, value) {
+  return value
+}