pray-cli 1.9.1 → 1.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -0
- package/dist/archive/path-safety.d.ts +2 -0
- package/dist/archive/path-safety.d.ts.map +1 -0
- package/dist/archive/path-safety.js +18 -0
- package/dist/archive/path-safety.js.map +1 -0
- package/dist/archive/praypkg.d.ts.map +1 -1
- package/dist/archive/praypkg.js +35 -9
- package/dist/archive/praypkg.js.map +1 -1
- package/dist/archive/tar.d.ts +3 -0
- package/dist/archive/tar.d.ts.map +1 -0
- package/dist/archive/tar.js +157 -0
- package/dist/archive/tar.js.map +1 -0
- package/dist/auth/session.d.ts +1 -1
- package/dist/auth/session.d.ts.map +1 -1
- package/dist/auth/session.js +29 -4
- package/dist/auth/session.js.map +1 -1
- package/dist/cli/commands/init.js +1 -1
- package/dist/cli/commands/inspect.d.ts.map +1 -1
- package/dist/cli/commands/inspect.js +1 -0
- package/dist/cli/commands/inspect.js.map +1 -1
- package/dist/cli/commands/packages.d.ts.map +1 -1
- package/dist/cli/commands/packages.js +7 -2
- package/dist/cli/commands/packages.js.map +1 -1
- package/dist/cli/commands/plan.d.ts +3 -0
- package/dist/cli/commands/plan.d.ts.map +1 -1
- package/dist/cli/commands/plan.js +9 -0
- package/dist/cli/commands/plan.js.map +1 -1
- package/dist/cli/commands/update-core.d.ts.map +1 -1
- package/dist/cli/commands/update-core.js +4 -1
- package/dist/cli/commands/update-core.js.map +1 -1
- package/dist/cli/materialize.d.ts.map +1 -1
- package/dist/cli/materialize.js +5 -1
- package/dist/cli/materialize.js.map +1 -1
- package/dist/domain/types.d.ts +0 -1
- package/dist/domain/types.d.ts.map +1 -1
- package/dist/http/body.d.ts +2 -0
- package/dist/http/body.d.ts.map +1 -0
- package/dist/http/body.js +32 -0
- package/dist/http/body.js.map +1 -0
- package/dist/http/client.d.ts.map +1 -1
- package/dist/http/client.js +3 -2
- package/dist/http/client.js.map +1 -1
- package/dist/lockfile/index.d.ts +2 -1
- package/dist/lockfile/index.d.ts.map +1 -1
- package/dist/lockfile/index.js +7 -1
- package/dist/lockfile/index.js.map +1 -1
- package/dist/lockfile/parse.d.ts.map +1 -1
- package/dist/lockfile/parse.js +20 -0
- package/dist/lockfile/parse.js.map +1 -1
- package/dist/lockfile/serialize.d.ts.map +1 -1
- package/dist/lockfile/serialize.js +23 -0
- package/dist/lockfile/serialize.js.map +1 -1
- package/dist/lockfile/types.d.ts +9 -2
- package/dist/lockfile/types.d.ts.map +1 -1
- package/dist/lockfile/types.js +3 -1
- package/dist/lockfile/types.js.map +1 -1
- package/dist/manifest/deprecation.d.ts +17 -0
- package/dist/manifest/deprecation.d.ts.map +1 -1
- package/dist/manifest/deprecation.js +32 -0
- package/dist/manifest/deprecation.js.map +1 -1
- package/dist/manifest/destination.d.ts +2 -0
- package/dist/manifest/destination.d.ts.map +1 -1
- package/dist/manifest/destination.js +20 -0
- package/dist/manifest/destination.js.map +1 -1
- package/dist/manifest/format-serialize.d.ts.map +1 -1
- package/dist/manifest/format-serialize.js +7 -4
- package/dist/manifest/format-serialize.js.map +1 -1
- package/dist/manifest/index.d.ts.map +1 -1
- package/dist/manifest/index.js +4 -1
- package/dist/manifest/index.js.map +1 -1
- package/dist/manifest/parse-render-policy.d.ts.map +1 -1
- package/dist/manifest/parse-render-policy.js +20 -12
- package/dist/manifest/parse-render-policy.js.map +1 -1
- package/dist/manifest/parse-statements.d.ts +2 -2
- package/dist/manifest/parse-statements.d.ts.map +1 -1
- package/dist/manifest/parse-statements.js +6 -1
- package/dist/manifest/parse-statements.js.map +1 -1
- package/dist/manifest/parser.d.ts.map +1 -1
- package/dist/manifest/parser.js +14 -25
- package/dist/manifest/parser.js.map +1 -1
- package/dist/manifest/types.d.ts +3 -4
- package/dist/manifest/types.d.ts.map +1 -1
- package/dist/manifest/types.js +1 -4
- package/dist/manifest/types.js.map +1 -1
- package/dist/manifest/validate.d.ts +5 -0
- package/dist/manifest/validate.d.ts.map +1 -0
- package/dist/manifest/validate.js +43 -0
- package/dist/manifest/validate.js.map +1 -0
- package/dist/registry/cache.d.ts +2 -0
- package/dist/registry/cache.d.ts.map +1 -0
- package/dist/registry/cache.js +16 -0
- package/dist/registry/cache.js.map +1 -0
- package/dist/registry/index.d.ts +2 -2
- package/dist/registry/index.d.ts.map +1 -1
- package/dist/registry/index.js +18 -65
- package/dist/registry/index.js.map +1 -1
- package/dist/registry/install.d.ts +5 -0
- package/dist/registry/install.d.ts.map +1 -0
- package/dist/registry/install.js +55 -0
- package/dist/registry/install.js.map +1 -0
- package/dist/registry/signature.d.ts +4 -0
- package/dist/registry/signature.d.ts.map +1 -0
- package/dist/registry/signature.js +25 -0
- package/dist/registry/signature.js.map +1 -0
- package/dist/render/compose-dest.d.ts +5 -0
- package/dist/render/compose-dest.d.ts.map +1 -0
- package/dist/render/compose-dest.js +57 -0
- package/dist/render/compose-dest.js.map +1 -0
- package/dist/render/dest.d.ts +8 -0
- package/dist/render/dest.d.ts.map +1 -0
- package/dist/render/dest.js +120 -0
- package/dist/render/dest.js.map +1 -0
- package/dist/render/destination-io.d.ts +7 -0
- package/dist/render/destination-io.d.ts.map +1 -0
- package/dist/render/destination-io.js +67 -0
- package/dist/render/destination-io.js.map +1 -0
- package/dist/render/header.d.ts +2 -1
- package/dist/render/header.d.ts.map +1 -1
- package/dist/render/header.js +5 -10
- package/dist/render/header.js.map +1 -1
- package/dist/render/legacy.js +1 -1
- package/dist/render/legacy.js.map +1 -1
- package/dist/render/managed-export.d.ts.map +1 -1
- package/dist/render/managed-export.js +8 -2
- package/dist/render/managed-export.js.map +1 -1
- package/dist/render/patch.d.ts +4 -0
- package/dist/render/patch.d.ts.map +1 -0
- package/dist/render/patch.js +101 -0
- package/dist/render/patch.js.map +1 -0
- package/dist/render/path-guard.d.ts +2 -0
- package/dist/render/path-guard.d.ts.map +1 -0
- package/dist/render/path-guard.js +34 -0
- package/dist/render/path-guard.js.map +1 -0
- package/dist/render/project.d.ts +3 -1
- package/dist/render/project.d.ts.map +1 -1
- package/dist/render/project.js +26 -5
- package/dist/render/project.js.map +1 -1
- package/dist/render/provisioned.d.ts +2 -1
- package/dist/render/provisioned.d.ts.map +1 -1
- package/dist/render/provisioned.js +14 -15
- package/dist/render/provisioned.js.map +1 -1
- package/dist/render/rendered-dest.d.ts +3 -0
- package/dist/render/rendered-dest.d.ts.map +1 -0
- package/dist/render/rendered-dest.js +48 -0
- package/dist/render/rendered-dest.js.map +1 -0
- package/dist/render/scoped.js +1 -1
- package/dist/render/scoped.js.map +1 -1
- package/dist/resolve/exports.d.ts +5 -0
- package/dist/resolve/exports.d.ts.map +1 -0
- package/dist/resolve/exports.js +92 -0
- package/dist/resolve/exports.js.map +1 -0
- package/dist/resolve/project.d.ts.map +1 -1
- package/dist/resolve/project.js +4 -59
- package/dist/resolve/project.js.map +1 -1
- package/dist/resource-limits.d.ts +10 -0
- package/dist/resource-limits.d.ts.map +1 -0
- package/dist/resource-limits.js +10 -0
- package/dist/resource-limits.js.map +1 -0
- package/dist/serve/index.d.ts +2 -0
- package/dist/serve/index.d.ts.map +1 -1
- package/dist/serve/index.js +79 -29
- package/dist/serve/index.js.map +1 -1
- package/dist/sync/index.d.ts.map +1 -1
- package/dist/sync/index.js +27 -14
- package/dist/sync/index.js.map +1 -1
- package/dist/sync/path-safety.d.ts +5 -0
- package/dist/sync/path-safety.d.ts.map +1 -0
- package/dist/sync/path-safety.js +48 -0
- package/dist/sync/path-safety.js.map +1 -0
- package/dist/verify/project.d.ts.map +1 -1
- package/dist/verify/project.js +3 -39
- package/dist/verify/project.js.map +1 -1
- package/dist/verify/provisioned.d.ts +10 -0
- package/dist/verify/provisioned.d.ts.map +1 -0
- package/dist/verify/provisioned.js +69 -0
- package/dist/verify/provisioned.js.map +1 -0
- package/package.json +2 -1
package/dist/sync/index.js
CHANGED
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
import { mkdirSync, writeFileSync } from "node:fs";
|
|
2
2
|
import { join } from "node:path";
|
|
3
|
-
import { unpackPraypkg } from "../archive/praypkg.js";
|
|
4
3
|
import { PrayError } from "../errors.js";
|
|
5
4
|
import { sha256Prefixed } from "../hashing.js";
|
|
6
5
|
import { httpGet, joinUrl } from "../http/client.js";
|
|
7
6
|
import { fetchPackageMetadata } from "../registry/index.js";
|
|
7
|
+
import { installArtifactToCache, requireIntegrityFields, } from "../registry/install.js";
|
|
8
|
+
import { MAX_FEDERATION_PEERS } from "../resource-limits.js";
|
|
9
|
+
import { rejectAbsoluteArtifactPath, resolveDistributionPath, validatePackageName, validatePathSegment, } from "./path-safety.js";
|
|
8
10
|
export async function syncDistributionRoot(root, peers) {
|
|
9
11
|
const distributionRoot = root;
|
|
10
12
|
const queue = [...peers];
|
|
@@ -16,37 +18,48 @@ export async function syncDistributionRoot(root, peers) {
|
|
|
16
18
|
continue;
|
|
17
19
|
}
|
|
18
20
|
visited.add(peer);
|
|
21
|
+
if (visited.size > MAX_FEDERATION_PEERS) {
|
|
22
|
+
throw PrayError.resolution(`federation exceeds ${MAX_FEDERATION_PEERS} peers`);
|
|
23
|
+
}
|
|
19
24
|
const metadata = await fetchPackageIndex(peer);
|
|
20
|
-
for (const
|
|
25
|
+
for (const rawPackageName of metadata.packages) {
|
|
26
|
+
const packageName = validatePackageName(rawPackageName);
|
|
21
27
|
const packageMetadata = await fetchPackageMetadata(peer, packageName);
|
|
28
|
+
if (packageMetadata.name !== packageName) {
|
|
29
|
+
throw PrayError.integrity(`metadata name mismatch for ${packageName}`);
|
|
30
|
+
}
|
|
22
31
|
const latest = packageMetadata.versions
|
|
23
32
|
.filter((entry) => !entry.yanked)
|
|
24
33
|
.at(-1);
|
|
25
34
|
if (!latest) {
|
|
26
35
|
continue;
|
|
27
36
|
}
|
|
37
|
+
validatePathSegment(latest.version, "package version");
|
|
38
|
+
requireIntegrityFields(packageName, latest);
|
|
39
|
+
rejectAbsoluteArtifactPath(latest.artifact);
|
|
28
40
|
const artifactBytes = await httpGet(joinUrl(peer, latest.artifact));
|
|
29
|
-
if (latest.artifactHash
|
|
30
|
-
sha256Prefixed(artifactBytes) !== latest.artifactHash) {
|
|
41
|
+
if (sha256Prefixed(artifactBytes) !== latest.artifactHash) {
|
|
31
42
|
throw PrayError.integrity(`artifact hash mismatch for ${packageName}`);
|
|
32
43
|
}
|
|
33
|
-
const cacheDirectory =
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
recursive: true,
|
|
39
|
-
});
|
|
40
|
-
writeFileSync(join(distributionRoot, latest.artifact), artifactBytes);
|
|
44
|
+
const cacheDirectory = resolveDistributionPath(distributionRoot, join(".pray", "sync-staging", packageName.replaceAll("/", "-"), latest.version));
|
|
45
|
+
installArtifactToCache(cacheDirectory, { name: packageName }, latest, artifactBytes);
|
|
46
|
+
writeRegistryPackageMetadataLocal(resolveDistributionPath(distributionRoot, join("v1", "packages", `${packageName}.json`)), packageMetadata);
|
|
47
|
+
const artifactPath = resolveDistributionPath(distributionRoot, latest.artifact);
|
|
48
|
+
writeRegistryBytes(artifactPath, artifactBytes);
|
|
41
49
|
syncedPackages.add(packageName);
|
|
42
50
|
}
|
|
43
51
|
}
|
|
44
|
-
|
|
52
|
+
writeRegistryBytes(resolveDistributionPath(distributionRoot, "v1/index.json"), Buffer.from(`${JSON.stringify({
|
|
45
53
|
spec: "prayfile-distribution-1",
|
|
46
54
|
packages: [...syncedPackages].sort(),
|
|
47
|
-
}, null, 2)}\n`, "utf8");
|
|
55
|
+
}, null, 2)}\n`, "utf8"));
|
|
48
56
|
return { peers: [...visited], packages: [...syncedPackages].sort() };
|
|
49
57
|
}
|
|
58
|
+
function writeRegistryBytes(path, bytes) {
|
|
59
|
+
const parent = join(path, "..");
|
|
60
|
+
mkdirSync(parent, { recursive: true });
|
|
61
|
+
writeFileSync(path, bytes);
|
|
62
|
+
}
|
|
50
63
|
async function fetchPackageIndex(peer) {
|
|
51
64
|
const text = await httpGet(joinUrl(peer, "v1/index.json")).then((buffer) => buffer.toString("utf8"));
|
|
52
65
|
const data = JSON.parse(text);
|
package/dist/sync/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAO1B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,KAAe;IAEf,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YACxC,MAAM,SAAS,CAAC,UAAU,CACxB,sBAAsB,oBAAoB,QAAQ,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,MAAM,cAAc,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACtE,IAAI,eAAe,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzC,MAAM,SAAS,CAAC,SAAS,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ;iBACpC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;iBAChC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YACvD,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5C,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpE,IAAI,cAAc,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1D,MAAM,SAAS,CAAC,SAAS,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,cAAc,GAAG,uBAAuB,CAC5C,gBAAgB,EAChB,IAAI,CACF,OAAO,EACP,cAAc,EACd,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,MAAM,CAAC,OAAO,CACf,CACF,CAAC;YACF,sBAAsB,CACpB,cAAc,EACd,EAAE,IAAI,EAAE,WAAW,EAAqB,EACxC,MAAM,EACN,aAAa,CACd,CAAC;YACF,iCAAiC,CAC/B,uBAAuB,CACrB,gBAAgB,EAChB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,OAAO,CAAC,CAC9C,EACD,eAAe,CAChB,CAAC;YACF,MAAM,YAAY,GAAG,uBAAuB,CAC1C,gBAAgB,EAChB,MAAM,CAAC,QAAQ,CAChB,CAAC;YACF,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAChD,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,kBAAkB,CAChB,uBAAuB,CAAC,gBAAgB,EAAE,eAAe,CAAC,EAC1D,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE;KACrC,EACD,IAAI,EACJ,CAAC,CACF,IAAI,EACL,MAAM,CACP,CACF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACzE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,iCAAiC,CACxC,IAAY,EACZ,QAAiC;IAEjC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CACX,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,IAAI,EACL,MAAM,CACP,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
export declare function resolveDistributionPath(root: string, value: string): string;
|
|
2
|
+
export declare function validatePackageName(value: string): string;
|
|
3
|
+
export declare function rejectAbsoluteArtifactPath(value: string): string;
|
|
4
|
+
export declare function validatePathSegment(value: string, label: string): string;
|
|
5
|
+
//# sourceMappingURL=path-safety.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"path-safety.d.ts","sourceRoot":"","sources":["../../src/sync/path-safety.ts"],"names":[],"mappings":"AAGA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAkB3E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWzD;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQhE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAYxE"}
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
import { isAbsolute, relative, resolve, win32 } from "node:path";
|
|
2
|
+
import { PrayError } from "../errors.js";
|
|
3
|
+
export function resolveDistributionPath(root, value) {
|
|
4
|
+
const path = value.trim().replaceAll("\\", "/");
|
|
5
|
+
if (path.length === 0 ||
|
|
6
|
+
isAbsolute(path) ||
|
|
7
|
+
win32.isAbsolute(value) ||
|
|
8
|
+
path.includes("\0") ||
|
|
9
|
+
path.split("/").includes("..")) {
|
|
10
|
+
throw PrayError.integrity(`unsafe distribution path: ${value}`);
|
|
11
|
+
}
|
|
12
|
+
const absoluteRoot = resolve(root);
|
|
13
|
+
const candidate = resolve(absoluteRoot, path);
|
|
14
|
+
const fromRoot = relative(absoluteRoot, candidate);
|
|
15
|
+
if (fromRoot.startsWith("..") || isAbsolute(fromRoot)) {
|
|
16
|
+
throw PrayError.integrity(`distribution path escapes root: ${value}`);
|
|
17
|
+
}
|
|
18
|
+
return candidate;
|
|
19
|
+
}
|
|
20
|
+
export function validatePackageName(value) {
|
|
21
|
+
const parts = value.split("/");
|
|
22
|
+
if (parts.length === 0 ||
|
|
23
|
+
parts.some((part) => part.length === 0 || part === "." || part === "..") ||
|
|
24
|
+
value.includes("\\") ||
|
|
25
|
+
value.includes("\0")) {
|
|
26
|
+
throw PrayError.integrity(`invalid package name: ${value}`);
|
|
27
|
+
}
|
|
28
|
+
return value;
|
|
29
|
+
}
|
|
30
|
+
export function rejectAbsoluteArtifactPath(value) {
|
|
31
|
+
const path = value.trim();
|
|
32
|
+
if (/^[a-z][a-z0-9+.-]*:/i.test(path)) {
|
|
33
|
+
throw PrayError.integrity(`remote artifact path must be relative: ${value}`);
|
|
34
|
+
}
|
|
35
|
+
return path;
|
|
36
|
+
}
|
|
37
|
+
export function validatePathSegment(value, label) {
|
|
38
|
+
if (value.length === 0 ||
|
|
39
|
+
value === "." ||
|
|
40
|
+
value === ".." ||
|
|
41
|
+
value.includes("/") ||
|
|
42
|
+
value.includes("\\") ||
|
|
43
|
+
value.includes("\0")) {
|
|
44
|
+
throw PrayError.integrity(`invalid ${label}: ${value}`);
|
|
45
|
+
}
|
|
46
|
+
return value;
|
|
47
|
+
}
|
|
48
|
+
//# sourceMappingURL=path-safety.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/sync/path-safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,KAAa;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC;QAChB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC9B,CAAC;QACD,MAAM,SAAS,CAAC,SAAS,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,CAAC,SAAS,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,MAAM,SAAS,CAAC,SAAS,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,SAAS,CAAC,SAAS,CACvB,0CAA0C,KAAK,EAAE,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAa;IAC9D,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,GAAG;QACb,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,MAAM,SAAS,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/verify/project.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/verify/project.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;AAGxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAQ3D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,QAAQ,GACjB,kBAAkB,CAEpB;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,QAAQ,EAClB,MAAM,UAAQ,GACb,kBAAkB,CASpB;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,QAAQ,GACjB,kBAAkB,CA8BpB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAI3E"}
|
package/dist/verify/project.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import { existsSync, readFileSync } from "node:fs";
|
|
2
2
|
import { resolve } from "node:path";
|
|
3
3
|
import { PrayError } from "../errors.js";
|
|
4
|
-
import { normalizeLineEndings
|
|
4
|
+
import { normalizeLineEndings } from "../hashing.js";
|
|
5
5
|
import { renderProject } from "../render/project.js";
|
|
6
|
-
import { expectedProvisionedBytes } from "../render/provisioned.js";
|
|
7
6
|
import { missingLocalEmbedGuidance } from "../resolve/project.js";
|
|
8
7
|
import { markerPositions } from "./markers.js";
|
|
9
8
|
import { formatPositionDriftMessage, summarizePositionDrift, } from "./position.js";
|
|
9
|
+
import { pushProvisionedFindings } from "./provisioned.js";
|
|
10
10
|
export function inspectProject(project, lockfile) {
|
|
11
11
|
return collectVerificationReport(project, lockfile).report;
|
|
12
12
|
}
|
|
@@ -145,9 +145,7 @@ function collectVerificationReport(project, lockfile) {
|
|
|
145
145
|
}
|
|
146
146
|
}
|
|
147
147
|
}
|
|
148
|
-
|
|
149
|
-
verifyExclusiveFileBinding(packageEntry, project, report);
|
|
150
|
-
}
|
|
148
|
+
pushProvisionedFindings(project, report);
|
|
151
149
|
for (const local of project.localFiles) {
|
|
152
150
|
if (local.optional) {
|
|
153
151
|
continue;
|
|
@@ -161,40 +159,6 @@ function collectVerificationReport(project, lockfile) {
|
|
|
161
159
|
}
|
|
162
160
|
return { report, renderedTargets, freshTargets };
|
|
163
161
|
}
|
|
164
|
-
function verifyExclusiveFileBinding(packageEntry, project, report) {
|
|
165
|
-
const destination = packageEntry.declaration.file;
|
|
166
|
-
if (!destination) {
|
|
167
|
-
return;
|
|
168
|
-
}
|
|
169
|
-
const absolute = resolve(project.projectRoot, destination);
|
|
170
|
-
const exportName = packageEntry.selectedExports.find((name) => {
|
|
171
|
-
return packageEntry.spec.exports.get(name)?.kind === "file";
|
|
172
|
-
});
|
|
173
|
-
if (!exportName) {
|
|
174
|
-
report.findings.push({
|
|
175
|
-
kind: "verify_error",
|
|
176
|
-
message: `Package \`${packageEntry.declaration.name}\` declares file: "${destination}" but has no selected file export.`,
|
|
177
|
-
});
|
|
178
|
-
return;
|
|
179
|
-
}
|
|
180
|
-
if (!existsSync(absolute)) {
|
|
181
|
-
report.findings.push({
|
|
182
|
-
kind: "verify_error",
|
|
183
|
-
message: `Exclusive file \`${destination}\` from \`${packageEntry.declaration.name}\` is missing. Run \`pray install\` to materialize it.`,
|
|
184
|
-
});
|
|
185
|
-
return;
|
|
186
|
-
}
|
|
187
|
-
const exportEntry = packageEntry.spec.exports.get(exportName);
|
|
188
|
-
const source = resolve(packageEntry.root, exportEntry?.path ?? "");
|
|
189
|
-
const destinationBytes = readFileSync(absolute);
|
|
190
|
-
const expectedBytes = expectedProvisionedBytes(source, project.manifest.symbols ?? {});
|
|
191
|
-
if (sha256Prefixed(destinationBytes) !== sha256Prefixed(expectedBytes)) {
|
|
192
|
-
report.findings.push({
|
|
193
|
-
kind: "package_integrity",
|
|
194
|
-
message: `Exclusive file \`${destination}\` no longer matches package \`${packageEntry.declaration.name}\`. Run \`pray install\` to restore it.`,
|
|
195
|
-
});
|
|
196
|
-
}
|
|
197
|
-
}
|
|
198
162
|
function isWarning(finding) {
|
|
199
163
|
return finding.kind === "orphan_marker";
|
|
200
164
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/verify/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,
|
|
1
|
+
{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/verify/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAW3D,MAAM,UAAU,cAAc,CAC5B,OAAwB,EACxB,QAAkB;IAElB,OAAO,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAwB,EACxB,QAAkB,EAClB,MAAM,GAAG,KAAK;IAEd,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,SAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAwB,EACxB,QAAkB;IAElB,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,yBAAyB,CACzE,OAAO,EACP,QAAQ,CACT,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CACpD,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,MAAM,eAAe,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,eAAe,EAAE,CAAC;YAChE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,GAAG,IAAI,4BAA4B;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,GAAG,IAAI,6BAA6B;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,MAAM,CAAC,QAAQ;SACnB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA0B;IACnD,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAwB,EACxB,QAAkB;IAMlB,MAAM,MAAM,GAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CACtE,CAAC;IAEF,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,mGAAmG;SACtG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAC1E,CAAC;IACF,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,aAAa,YAAY,CAAC,WAAW,CAAC,IAAI,6GAA6G;aACjK,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,SAAS,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,aAAa,YAAY,CAAC,WAAW,CAAC,IAAI,yFAAyF;aAC7I,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,aAAa,YAAY,CAAC,WAAW,CAAC,IAAI,0BAA0B,YAAY,CAAC,IAAI,CAAC,OAAO,8BAA8B,MAAM,CAAC,OAAO,iDAAiD;aACpM,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,wIAAwI;SAC1K,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,mBAAmB,UAAU,qDAAqD;aAC5F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,KAAK,UAAU,kCAAkC,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,uDAAuD;iBACjK,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,KAAK,UAAU,eAAe,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,qFAAqF;iBACzK,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,sBAAsB,CACpC,UAAU,EACV,KAAK,EACL,OAAO,EACP,KAAK,EACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAClB,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,KAAK,UAAU,wBAAwB,QAAQ,sGAAsG;iBAC/J,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,OAA4B;IAC7C,OAAO,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC;AAC1C,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { ResolvedProject } from "../resolve/types.js";
|
|
2
|
+
interface VerificationReport {
|
|
3
|
+
findings: Array<{
|
|
4
|
+
kind: string;
|
|
5
|
+
message: string;
|
|
6
|
+
}>;
|
|
7
|
+
}
|
|
8
|
+
export declare function pushProvisionedFindings(project: ResolvedProject, report: VerificationReport): void;
|
|
9
|
+
export {};
|
|
10
|
+
//# sourceMappingURL=provisioned.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"provisioned.d.ts","sourceRoot":"","sources":["../../src/verify/provisioned.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,kBAAkB,GACzB,IAAI,CA0CN"}
|
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
import { existsSync, lstatSync, readFileSync } from "node:fs";
|
|
2
|
+
import { resolve } from "node:path";
|
|
3
|
+
import { sha256Prefixed } from "../hashing.js";
|
|
4
|
+
import { expectedProvisionedBytes, plannedProvisionedFiles, } from "../render/provisioned.js";
|
|
5
|
+
export function pushProvisionedFindings(project, report) {
|
|
6
|
+
pushExclusiveFileExportFindings(project, report);
|
|
7
|
+
for (const file of plannedProvisionedFiles(project)) {
|
|
8
|
+
const pathText = file.path.replaceAll("\\", "/");
|
|
9
|
+
const absolute = resolve(project.projectRoot, file.path);
|
|
10
|
+
try {
|
|
11
|
+
if (lstatSync(absolute).isSymbolicLink()) {
|
|
12
|
+
report.findings.push({
|
|
13
|
+
kind: "verify_error",
|
|
14
|
+
message: `Provisioned file \`${pathText}\` is a symbolic link. Remove the link or choose another destination.`,
|
|
15
|
+
});
|
|
16
|
+
continue;
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
catch (error) {
|
|
20
|
+
if (!isNotFound(error)) {
|
|
21
|
+
throw error;
|
|
22
|
+
}
|
|
23
|
+
report.findings.push({
|
|
24
|
+
kind: "verify_error",
|
|
25
|
+
message: `Provisioned file \`${pathText}\` from \`${file.package}\` is missing. Run \`pray install\` to materialize it.`,
|
|
26
|
+
});
|
|
27
|
+
continue;
|
|
28
|
+
}
|
|
29
|
+
if (!existsSync(absolute)) {
|
|
30
|
+
report.findings.push({
|
|
31
|
+
kind: "verify_error",
|
|
32
|
+
message: `Provisioned file \`${pathText}\` from \`${file.package}\` is missing. Run \`pray install\` to materialize it.`,
|
|
33
|
+
});
|
|
34
|
+
continue;
|
|
35
|
+
}
|
|
36
|
+
const destinationBytes = readFileSync(absolute);
|
|
37
|
+
const expectedBytes = expectedProvisionedBytes(file.source, project.manifest.symbols ?? {});
|
|
38
|
+
if (sha256Prefixed(destinationBytes) !== sha256Prefixed(expectedBytes)) {
|
|
39
|
+
report.findings.push({
|
|
40
|
+
kind: "package_integrity",
|
|
41
|
+
message: `Provisioned file \`${pathText}\` no longer matches package \`${file.package}\`. Run \`pray install\` to restore it.`,
|
|
42
|
+
});
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
}
|
|
46
|
+
function pushExclusiveFileExportFindings(project, report) {
|
|
47
|
+
for (const packageEntry of project.packages) {
|
|
48
|
+
const destination = packageEntry.declaration.file;
|
|
49
|
+
if (!destination) {
|
|
50
|
+
continue;
|
|
51
|
+
}
|
|
52
|
+
const hasFileExport = packageEntry.selectedExports.some((name) => {
|
|
53
|
+
return packageEntry.spec.exports.get(name)?.kind === "file";
|
|
54
|
+
});
|
|
55
|
+
if (!hasFileExport) {
|
|
56
|
+
report.findings.push({
|
|
57
|
+
kind: "verify_error",
|
|
58
|
+
message: `Package \`${packageEntry.declaration.name}\` declares file: "${destination}" but has no selected file export.`,
|
|
59
|
+
});
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
function isNotFound(error) {
|
|
64
|
+
return (typeof error === "object" &&
|
|
65
|
+
error !== null &&
|
|
66
|
+
"code" in error &&
|
|
67
|
+
error.code === "ENOENT");
|
|
68
|
+
}
|
|
69
|
+
//# sourceMappingURL=provisioned.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"provisioned.js","sourceRoot":"","sources":["../../src/verify/provisioned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,UAAU,uBAAuB,CACrC,OAAwB,EACxB,MAA0B;IAE1B,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,sBAAsB,QAAQ,uEAAuE;iBAC/G,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,sBAAsB,QAAQ,aAAa,IAAI,CAAC,OAAO,wDAAwD;aACzH,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,sBAAsB,QAAQ,aAAa,IAAI,CAAC,OAAO,wDAAwD;aACzH,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,wBAAwB,CAC5C,IAAI,CAAC,MAAM,EACX,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAC/B,CAAC;QACF,IAAI,cAAc,CAAC,gBAAgB,CAAC,KAAK,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,sBAAsB,QAAQ,kCAAkC,IAAI,CAAC,OAAO,yCAAyC;aAC/H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAwB,EACxB,MAA0B;IAE1B,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/D,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,aAAa,YAAY,CAAC,WAAW,CAAC,IAAI,sBAAsB,WAAW,oCAAoC;aACzH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA0B,CAAC,IAAI,KAAK,QAAQ,CAC9C,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pray-cli",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.10.0",
|
|
4
4
|
"description": "Package manager for the language placed before inference — TypeScript Prayfile CLI and library",
|
|
5
5
|
"author": "Andrei Makarov <contact@kiskolabs.com>",
|
|
6
6
|
"license": "MIT",
|
|
@@ -35,6 +35,7 @@
|
|
|
35
35
|
"build": "rm -rf dist && tsc -p tsconfig.build.json",
|
|
36
36
|
"prepublishOnly": "npm run build",
|
|
37
37
|
"test": "npm run build && tsc -p tsconfig.test.json && node --test 'dist/**/*.test.js'",
|
|
38
|
+
"test:coverage": "npm run build && tsc -p tsconfig.test.json && node --test --experimental-test-coverage --test-coverage-lines=60 --test-coverage-include='dist/**/*.js' --test-coverage-exclude='dist/**/*.test.js' 'dist/**/*.test.js'",
|
|
38
39
|
"typecheck": "tsc -p tsconfig.json --noEmit",
|
|
39
40
|
"lint": "biome check . && npm run lint:cycles",
|
|
40
41
|
"libyears": "libyear --dev --quiet",
|