pray-cli 1.9.1 → 1.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/dist/archive/path-safety.d.ts +2 -0
- package/dist/archive/path-safety.d.ts.map +1 -0
- package/dist/archive/path-safety.js +18 -0
- package/dist/archive/path-safety.js.map +1 -0
- package/dist/archive/praypkg.d.ts.map +1 -1
- package/dist/archive/praypkg.js +35 -9
- package/dist/archive/praypkg.js.map +1 -1
- package/dist/archive/tar.d.ts +3 -0
- package/dist/archive/tar.d.ts.map +1 -0
- package/dist/archive/tar.js +157 -0
- package/dist/archive/tar.js.map +1 -0
- package/dist/auth/session.d.ts +1 -1
- package/dist/auth/session.d.ts.map +1 -1
- package/dist/auth/session.js +29 -4
- package/dist/auth/session.js.map +1 -1
- package/dist/http/body.d.ts +2 -0
- package/dist/http/body.d.ts.map +1 -0
- package/dist/http/body.js +32 -0
- package/dist/http/body.js.map +1 -0
- package/dist/http/client.d.ts.map +1 -1
- package/dist/http/client.js +3 -2
- package/dist/http/client.js.map +1 -1
- package/dist/lockfile/types.d.ts +2 -2
- package/dist/lockfile/types.js +1 -1
- package/dist/manifest/index.d.ts.map +1 -1
- package/dist/manifest/index.js +4 -1
- package/dist/manifest/index.js.map +1 -1
- package/dist/manifest/validate.d.ts +4 -0
- package/dist/manifest/validate.d.ts.map +1 -0
- package/dist/manifest/validate.js +37 -0
- package/dist/manifest/validate.js.map +1 -0
- package/dist/registry/cache.d.ts +2 -0
- package/dist/registry/cache.d.ts.map +1 -0
- package/dist/registry/cache.js +16 -0
- package/dist/registry/cache.js.map +1 -0
- package/dist/registry/index.d.ts +2 -2
- package/dist/registry/index.d.ts.map +1 -1
- package/dist/registry/index.js +18 -65
- package/dist/registry/index.js.map +1 -1
- package/dist/registry/install.d.ts +5 -0
- package/dist/registry/install.d.ts.map +1 -0
- package/dist/registry/install.js +55 -0
- package/dist/registry/install.js.map +1 -0
- package/dist/registry/signature.d.ts +4 -0
- package/dist/registry/signature.d.ts.map +1 -0
- package/dist/registry/signature.js +25 -0
- package/dist/registry/signature.js.map +1 -0
- package/dist/render/project.d.ts.map +1 -1
- package/dist/render/project.js +2 -0
- package/dist/render/project.js.map +1 -1
- package/dist/render/provisioned.d.ts.map +1 -1
- package/dist/render/provisioned.js +2 -0
- package/dist/render/provisioned.js.map +1 -1
- package/dist/resource-limits.d.ts +10 -0
- package/dist/resource-limits.d.ts.map +1 -0
- package/dist/resource-limits.js +10 -0
- package/dist/resource-limits.js.map +1 -0
- package/dist/serve/index.d.ts +2 -0
- package/dist/serve/index.d.ts.map +1 -1
- package/dist/serve/index.js +79 -29
- package/dist/serve/index.js.map +1 -1
- package/dist/sync/index.d.ts.map +1 -1
- package/dist/sync/index.js +27 -14
- package/dist/sync/index.js.map +1 -1
- package/dist/sync/path-safety.d.ts +5 -0
- package/dist/sync/path-safety.d.ts.map +1 -0
- package/dist/sync/path-safety.js +48 -0
- package/dist/sync/path-safety.js.map +1 -0
- package/package.json +2 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAQA,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAqBR"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { join } from "node:path";
|
|
2
|
+
import { sha256Hex } from "../hashing.js";
|
|
3
|
+
import { resolveDistributionPath, validatePackageName, validatePathSegment, } from "../sync/path-safety.js";
|
|
4
|
+
export function registryCacheDirectory(projectRoot, sourceKey, packageName, version, artifactHash) {
|
|
5
|
+
validatePackageName(packageName);
|
|
6
|
+
validatePathSegment(version, "package version");
|
|
7
|
+
const identifier = [
|
|
8
|
+
sourceKey,
|
|
9
|
+
packageName,
|
|
10
|
+
version,
|
|
11
|
+
artifactHash ?? "no-artifact-hash",
|
|
12
|
+
].join(":");
|
|
13
|
+
const digest = sha256Hex(identifier).slice(0, 16);
|
|
14
|
+
return resolveDistributionPath(projectRoot, join(".pray", "cache", "registry", packageName.replaceAll("/", "-"), version, digest));
|
|
15
|
+
}
|
|
16
|
+
//# sourceMappingURL=cache.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,SAAiB,EACjB,WAAmB,EACnB,OAAe,EACf,YAAqB;IAErB,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG;QACjB,SAAS;QACT,WAAW;QACX,OAAO;QACP,YAAY,IAAI,kBAAkB;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,uBAAuB,CAC5B,WAAW,EACX,IAAI,CACF,OAAO,EACP,OAAO,EACP,UAAU,EACV,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,OAAO,EACP,MAAM,CACP,CACF,CAAC;AACJ,CAAC"}
|
package/dist/registry/index.d.ts
CHANGED
|
@@ -1,4 +1,6 @@
|
|
|
1
1
|
import type { ManifestPackage } from "../manifest/types.js";
|
|
2
|
+
export { registryCacheDirectory } from "./cache.js";
|
|
3
|
+
export { registryArtifactSignature } from "./signature.js";
|
|
2
4
|
import type { RegistryPackageMetadata, RegistryPackageResolution, RegistryPackageVersion } from "./types.js";
|
|
3
5
|
export declare function resolveRegistryPackageRoot(projectRoot: string, sourceUrl: string, declaration: ManifestPackage, options?: RegistryResolveOptions): Promise<RegistryPackageResolution>;
|
|
4
6
|
export declare function resolveLocalRegistryPackageRoot(projectRoot: string, sourceKey: string, sourceRoot: string, declaration: ManifestPackage, options?: RegistryResolveOptions): Promise<RegistryPackageResolution>;
|
|
@@ -11,7 +13,5 @@ export declare function parseMetadata(text: string): RegistryPackageMetadata;
|
|
|
11
13
|
export declare function versionFromHash(entry: Record<string, unknown>): RegistryPackageVersion;
|
|
12
14
|
export declare function selectPackageVersion(metadata: RegistryPackageMetadata, constraint: string, preferredVersion?: string): RegistryPackageVersion;
|
|
13
15
|
export declare function registryLatestVersionLabel(metadata: RegistryPackageMetadata): string | undefined;
|
|
14
|
-
export declare function registryCacheDirectory(projectRoot: string, sourceKey: string, packageName: string, version: string, artifactHash?: string): string;
|
|
15
|
-
export declare function registryArtifactSignature(artifactBytes: Buffer, treeHash: string, signer: string): string;
|
|
16
16
|
export { joinUrl } from "../http/client.js";
|
|
17
17
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAc5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CAuCpC;AAED,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CAqDpC;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,CAAC,CAclC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CASnE;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,sBAAsB,CAoBxB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,MAAM,GACxB,sBAAsB,CA8BxB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,uBAAuB,GAChC,MAAM,GAAG,SAAS,CAWpB;AAmDD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
|
package/dist/registry/index.js
CHANGED
|
@@ -1,16 +1,20 @@
|
|
|
1
|
-
import { existsSync,
|
|
1
|
+
import { existsSync, readFileSync } from "node:fs";
|
|
2
2
|
import { join } from "node:path";
|
|
3
3
|
import semver from "semver";
|
|
4
|
-
import { unpackPraypkg } from "../archive/praypkg.js";
|
|
5
4
|
import { versionSatisfies } from "../constraint.js";
|
|
6
5
|
import { PrayError } from "../errors.js";
|
|
7
|
-
import { sha256Hex, sha256Prefixed } from "../hashing.js";
|
|
8
6
|
import { httpGet, httpGetText, isLocalSourceUrl, joinUrl, } from "../http/client.js";
|
|
9
7
|
import { findPrayspecFile, parsePackageSpec, treeHashForRoot, } from "../package-spec/index.js";
|
|
8
|
+
import { rejectAbsoluteArtifactPath, resolveDistributionPath, validatePackageName, } from "../sync/path-safety.js";
|
|
9
|
+
import { registryCacheDirectory } from "./cache.js";
|
|
10
|
+
import { installArtifactToCache, requireIntegrityFields } from "./install.js";
|
|
11
|
+
export { registryCacheDirectory } from "./cache.js";
|
|
12
|
+
export { registryArtifactSignature } from "./signature.js";
|
|
10
13
|
export async function resolveRegistryPackageRoot(projectRoot, sourceUrl, declaration, options = {}) {
|
|
11
14
|
const metadata = await fetchPackageMetadata(sourceUrl, declaration.name);
|
|
12
15
|
const registryLatestVersion = registryLatestVersionLabel(metadata);
|
|
13
16
|
const selected = selectPackageVersion(metadata, declaration.constraint, options.preferredVersion);
|
|
17
|
+
requireIntegrityFields(declaration.name, selected);
|
|
14
18
|
const cacheDirectory = registryCacheDirectory(projectRoot, sourceUrl, declaration.name, selected.version, selected.artifactHash);
|
|
15
19
|
if (cacheReady(cacheDirectory, selected)) {
|
|
16
20
|
return {
|
|
@@ -22,12 +26,8 @@ export async function resolveRegistryPackageRoot(projectRoot, sourceUrl, declara
|
|
|
22
26
|
if (options.offline) {
|
|
23
27
|
throw PrayError.resolution(offlinePackageError(declaration.name, selected.version));
|
|
24
28
|
}
|
|
25
|
-
if (existsSync(cacheDirectory)) {
|
|
26
|
-
rmSync(cacheDirectory, { recursive: true, force: true });
|
|
27
|
-
}
|
|
28
|
-
mkdirSync(cacheDirectory, { recursive: true });
|
|
29
29
|
const artifactBytes = await readArtifactBytes(sourceUrl, selected.artifact);
|
|
30
|
-
|
|
30
|
+
installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes);
|
|
31
31
|
return {
|
|
32
32
|
root: cacheDirectory,
|
|
33
33
|
signerFingerprint: selected.signerFingerprint,
|
|
@@ -44,6 +44,7 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
|
|
|
44
44
|
const metadata = parseMetadata(readFileSync(metadataPath, "utf8"));
|
|
45
45
|
const registryLatestVersion = registryLatestVersionLabel(metadata);
|
|
46
46
|
const selected = selectPackageVersion(metadata, declaration.constraint, options.preferredVersion);
|
|
47
|
+
requireIntegrityFields(declaration.name, selected);
|
|
47
48
|
const cacheDirectory = registryCacheDirectory(projectRoot, sourceKey, declaration.name, selected.version, selected.artifactHash);
|
|
48
49
|
if (cacheReady(cacheDirectory, selected)) {
|
|
49
50
|
return {
|
|
@@ -55,12 +56,8 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
|
|
|
55
56
|
if (options.offline) {
|
|
56
57
|
throw PrayError.resolution(offlinePackageError(declaration.name, selected.version));
|
|
57
58
|
}
|
|
58
|
-
if (existsSync(cacheDirectory)) {
|
|
59
|
-
rmSync(cacheDirectory, { recursive: true, force: true });
|
|
60
|
-
}
|
|
61
|
-
mkdirSync(cacheDirectory, { recursive: true });
|
|
62
59
|
const artifactBytes = readLocalArtifactBytes(sourceRoot, selected.artifact);
|
|
63
|
-
|
|
60
|
+
installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes);
|
|
64
61
|
return {
|
|
65
62
|
root: cacheDirectory,
|
|
66
63
|
signerFingerprint: selected.signerFingerprint,
|
|
@@ -68,6 +65,7 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
|
|
|
68
65
|
};
|
|
69
66
|
}
|
|
70
67
|
export async function fetchPackageMetadata(sourceUrl, packageName) {
|
|
68
|
+
validatePackageName(packageName);
|
|
71
69
|
if (isLocalSourceUrl(sourceUrl)) {
|
|
72
70
|
const metadataPath = join(sourceUrl, "v1", "packages", `${packageName}.json`);
|
|
73
71
|
return parseMetadata(readFileSync(metadataPath, "utf8"));
|
|
@@ -138,49 +136,6 @@ export function registryLatestVersionLabel(metadata) {
|
|
|
138
136
|
}
|
|
139
137
|
return highest?.version;
|
|
140
138
|
}
|
|
141
|
-
export function registryCacheDirectory(projectRoot, sourceKey, packageName, version, artifactHash) {
|
|
142
|
-
const identifier = [
|
|
143
|
-
sourceKey,
|
|
144
|
-
packageName,
|
|
145
|
-
version,
|
|
146
|
-
artifactHash ?? "no-artifact-hash",
|
|
147
|
-
].join(":");
|
|
148
|
-
const digest = sha256Hex(identifier).slice(0, 16);
|
|
149
|
-
return join(projectRoot, ".pray", "cache", "registry", packageName.replaceAll("/", "-"), version, digest);
|
|
150
|
-
}
|
|
151
|
-
export function registryArtifactSignature(artifactBytes, treeHash, signer) {
|
|
152
|
-
const payload = Buffer.concat([
|
|
153
|
-
artifactBytes,
|
|
154
|
-
Buffer.from("\0"),
|
|
155
|
-
Buffer.from(treeHash, "utf8"),
|
|
156
|
-
Buffer.from("\0"),
|
|
157
|
-
Buffer.from(signer, "utf8"),
|
|
158
|
-
]);
|
|
159
|
-
return sha256Prefixed(payload);
|
|
160
|
-
}
|
|
161
|
-
function validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes) {
|
|
162
|
-
if (selected.artifactHash) {
|
|
163
|
-
const artifactHash = sha256Prefixed(artifactBytes);
|
|
164
|
-
if (artifactHash !== selected.artifactHash) {
|
|
165
|
-
throw PrayError.integrity(`package artifact hash mismatch for ${declaration.name} ${selected.version}`);
|
|
166
|
-
}
|
|
167
|
-
}
|
|
168
|
-
unpackPraypkg(artifactBytes, cacheDirectory);
|
|
169
|
-
const specPath = findPrayspecFile(cacheDirectory);
|
|
170
|
-
const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
|
|
171
|
-
if (spec.name !== declaration.name) {
|
|
172
|
-
throw PrayError.resolution(`package path ${cacheDirectory} declares ${spec.name}, expected ${declaration.name}`);
|
|
173
|
-
}
|
|
174
|
-
if (spec.version !== selected.version) {
|
|
175
|
-
throw PrayError.resolution(`package ${declaration.name} version ${spec.version} does not match registry version ${selected.version}`);
|
|
176
|
-
}
|
|
177
|
-
if (selected.treeHash) {
|
|
178
|
-
const treeHash = treeHashForRoot(cacheDirectory, spec);
|
|
179
|
-
if (treeHash !== selected.treeHash) {
|
|
180
|
-
throw PrayError.integrity(`package tree hash mismatch for ${declaration.name} ${selected.version}`);
|
|
181
|
-
}
|
|
182
|
-
}
|
|
183
|
-
}
|
|
184
139
|
function cacheReady(cacheDirectory, selected) {
|
|
185
140
|
if (!existsSync(cacheDirectory)) {
|
|
186
141
|
return false;
|
|
@@ -188,7 +143,9 @@ function cacheReady(cacheDirectory, selected) {
|
|
|
188
143
|
try {
|
|
189
144
|
const specPath = findPrayspecFile(cacheDirectory);
|
|
190
145
|
const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
|
|
191
|
-
return spec.version === selected.version
|
|
146
|
+
return (spec.version === selected.version &&
|
|
147
|
+
selected.treeHash !== undefined &&
|
|
148
|
+
treeHashForRoot(cacheDirectory, spec) === selected.treeHash);
|
|
192
149
|
}
|
|
193
150
|
catch {
|
|
194
151
|
return false;
|
|
@@ -198,19 +155,15 @@ async function readArtifactBytes(sourceUrl, artifact) {
|
|
|
198
155
|
if (isLocalSourceUrl(sourceUrl)) {
|
|
199
156
|
return readLocalArtifactBytes(sourceUrl, artifact);
|
|
200
157
|
}
|
|
201
|
-
|
|
202
|
-
return httpGet(artifact);
|
|
203
|
-
}
|
|
158
|
+
rejectAbsoluteArtifactPath(artifact);
|
|
204
159
|
return httpGet(joinUrl(sourceUrl, artifact));
|
|
205
160
|
}
|
|
206
161
|
function readLocalArtifactBytes(sourceRoot, artifact) {
|
|
207
|
-
if (artifact.startsWith("http://") || artifact.startsWith("https://")) {
|
|
208
|
-
throw PrayError.unsupported("remote artifact URLs in local distribution require async fetch");
|
|
209
|
-
}
|
|
210
162
|
if (artifact.startsWith("file://")) {
|
|
211
|
-
return readFileSync(artifact.slice("file://".length));
|
|
163
|
+
return readFileSync(resolveDistributionPath(sourceRoot, artifact.slice("file://".length)));
|
|
212
164
|
}
|
|
213
|
-
|
|
165
|
+
rejectAbsoluteArtifactPath(artifact);
|
|
166
|
+
const path = resolveDistributionPath(sourceRoot, artifact);
|
|
214
167
|
if (!existsSync(path)) {
|
|
215
168
|
throw PrayError.resolution(`package artifact missing at ${path}`);
|
|
216
169
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EACL,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,OAAO,GACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAQ3D,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAiB,EACjB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE7E,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB,EACnB,SAAiB,EACjB,UAAkB,EAClB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,YAAY,GAAG,IAAI,CACvB,UAAU,EACV,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,CAAC,IAAI,OAAO,CAC3B,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,8BAA8B,UAAU,IAAI;YACrE,WAAW,YAAY,kDAAkD,WAAW,CAAC,UAAU,MAAM;YACrG,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE7E,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB;IAEnB,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CACvB,SAAS,EACT,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,OAAO,CACtB,CAAC;QACF,OAAO,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,aAAa,CAClB,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,WAAW,OAAO,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG3B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACvD,iBAAiB,EAAE,KAAK,CAAC,kBAAkB;YACzC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAClC,CAAC,CAAC,SAAS;QACb,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,UAAkB,EAClB,gBAAyB;IAEzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,CAC/D,CAAC;QACF,IAAI,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,QAA4C,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,UAAU,CACxB,2BAA2B,QAAQ,CAAC,IAAI,cAAc,UAAU,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,IAAI,OAA2C,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,EAAE,OAAO,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,cAAsB,EACtB,QAAgC;IAEhC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACjC,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAC/B,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB;IAEhB,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,QAAgB;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,YAAY,CACjB,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,UAAU,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB,EAAE,OAAe;IAC/D,OAAO,WAAW,WAAW,IAAI,OAAO,4CAA4C,CAAC;AACvF,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { ManifestPackage } from "../manifest/types.js";
|
|
2
|
+
import type { RegistryPackageVersion } from "./types.js";
|
|
3
|
+
export declare function installArtifactToCache(cacheDirectory: string, declaration: ManifestPackage, selected: RegistryPackageVersion, artifactBytes: Buffer): void;
|
|
4
|
+
export declare function requireIntegrityFields(packageName: string, selected: RegistryPackageVersion): void;
|
|
5
|
+
//# sourceMappingURL=install.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAO5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,eAAe,EAC5B,QAAQ,EAAE,sBAAsB,EAChC,aAAa,EAAE,MAAM,GACpB,IAAI,CAmBN;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,sBAAsB,GAC/B,IAAI,CAWN"}
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, } from "node:fs";
|
|
2
|
+
import { unpackPraypkg } from "../archive/praypkg.js";
|
|
3
|
+
import { PrayError } from "../errors.js";
|
|
4
|
+
import { sha256Prefixed } from "../hashing.js";
|
|
5
|
+
import { findPrayspecFile, parsePackageSpec, treeHashForRoot, } from "../package-spec/index.js";
|
|
6
|
+
import { verifyRegistrySignature } from "./signature.js";
|
|
7
|
+
export function installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes) {
|
|
8
|
+
requireIntegrityFields(declaration.name, selected);
|
|
9
|
+
const stagingDirectory = `${cacheDirectory}.staging`;
|
|
10
|
+
rmSync(stagingDirectory, { recursive: true, force: true });
|
|
11
|
+
mkdirSync(stagingDirectory, { recursive: true });
|
|
12
|
+
const unpackedDirectory = `${stagingDirectory}/unpacked`;
|
|
13
|
+
mkdirSync(unpackedDirectory, { recursive: true });
|
|
14
|
+
try {
|
|
15
|
+
validateAndUnpack(unpackedDirectory, declaration, selected, artifactBytes);
|
|
16
|
+
if (existsSync(cacheDirectory)) {
|
|
17
|
+
rmSync(cacheDirectory, { recursive: true, force: true });
|
|
18
|
+
}
|
|
19
|
+
renameSync(unpackedDirectory, cacheDirectory);
|
|
20
|
+
}
|
|
21
|
+
catch (error) {
|
|
22
|
+
rmSync(stagingDirectory, { recursive: true, force: true });
|
|
23
|
+
throw error;
|
|
24
|
+
}
|
|
25
|
+
rmSync(stagingDirectory, { recursive: true, force: true });
|
|
26
|
+
}
|
|
27
|
+
export function requireIntegrityFields(packageName, selected) {
|
|
28
|
+
if (!selected.artifactHash) {
|
|
29
|
+
throw PrayError.integrity(`package ${packageName} ${selected.version} is missing artifact_hash`);
|
|
30
|
+
}
|
|
31
|
+
if (!selected.treeHash) {
|
|
32
|
+
throw PrayError.integrity(`package ${packageName} ${selected.version} is missing tree_hash`);
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
function validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes) {
|
|
36
|
+
const artifactHash = sha256Prefixed(artifactBytes);
|
|
37
|
+
if (artifactHash !== selected.artifactHash) {
|
|
38
|
+
throw PrayError.integrity(`package artifact hash mismatch for ${declaration.name} ${selected.version}`);
|
|
39
|
+
}
|
|
40
|
+
verifyRegistrySignature(declaration.name, selected, artifactBytes);
|
|
41
|
+
unpackPraypkg(artifactBytes, cacheDirectory);
|
|
42
|
+
const specPath = findPrayspecFile(cacheDirectory);
|
|
43
|
+
const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
|
|
44
|
+
if (spec.name !== declaration.name) {
|
|
45
|
+
throw PrayError.resolution(`package path ${cacheDirectory} declares ${spec.name}, expected ${declaration.name}`);
|
|
46
|
+
}
|
|
47
|
+
if (spec.version !== selected.version) {
|
|
48
|
+
throw PrayError.resolution(`package ${declaration.name} version ${spec.version} does not match registry version ${selected.version}`);
|
|
49
|
+
}
|
|
50
|
+
const treeHash = treeHashForRoot(cacheDirectory, spec);
|
|
51
|
+
if (treeHash !== selected.treeHash) {
|
|
52
|
+
throw PrayError.integrity(`package tree hash mismatch for ${declaration.name} ${selected.version}`);
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
//# sourceMappingURL=install.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,MAAM,UAAU,sBAAsB,CACpC,cAAsB,EACtB,WAA4B,EAC5B,QAAgC,EAChC,aAAqB;IAErB,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,GAAG,cAAc,UAAU,CAAC;IACrD,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,GAAG,gBAAgB,WAAW,CAAC;IACzD,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,iBAAiB,CAAC,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,UAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAAgC;IAEhC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,CAAC,SAAS,CACvB,WAAW,WAAW,IAAI,QAAQ,CAAC,OAAO,2BAA2B,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,SAAS,CACvB,WAAW,WAAW,IAAI,QAAQ,CAAC,OAAO,uBAAuB,CAClE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAsB,EACtB,WAA4B,EAC5B,QAAgC,EAChC,aAAqB;IAErB,MAAM,YAAY,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,sCAAsC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnE,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,UAAU,CACxB,gBAAgB,cAAc,aAAa,IAAI,CAAC,IAAI,cAAc,WAAW,CAAC,IAAI,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,YAAY,IAAI,CAAC,OAAO,oCAAoC,QAAQ,CAAC,OAAO,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,SAAS,CACvB,kCAAkC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import type { RegistryPackageVersion } from "./types.js";
|
|
2
|
+
export declare function registryArtifactSignature(artifactBytes: Buffer, treeHash: string, signer: string): string;
|
|
3
|
+
export declare function verifyRegistrySignature(packageName: string, selected: RegistryPackageVersion, artifactBytes: Buffer): void;
|
|
4
|
+
//# sourceMappingURL=signature.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/registry/signature.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CASR;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,sBAAsB,EAChC,aAAa,EAAE,MAAM,GACpB,IAAI,CAmBN"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
import { PrayError } from "../errors.js";
|
|
2
|
+
import { sha256Prefixed } from "../hashing.js";
|
|
3
|
+
export function registryArtifactSignature(artifactBytes, treeHash, signer) {
|
|
4
|
+
const payload = Buffer.concat([
|
|
5
|
+
artifactBytes,
|
|
6
|
+
Buffer.from("\0"),
|
|
7
|
+
Buffer.from(treeHash, "utf8"),
|
|
8
|
+
Buffer.from("\0"),
|
|
9
|
+
Buffer.from(signer, "utf8"),
|
|
10
|
+
]);
|
|
11
|
+
return sha256Prefixed(payload);
|
|
12
|
+
}
|
|
13
|
+
export function verifyRegistrySignature(packageName, selected, artifactBytes) {
|
|
14
|
+
if (!selected.signature) {
|
|
15
|
+
return;
|
|
16
|
+
}
|
|
17
|
+
if (!selected.signer || !selected.treeHash) {
|
|
18
|
+
throw PrayError.integrity(`package signature metadata incomplete for ${packageName} ${selected.version}`);
|
|
19
|
+
}
|
|
20
|
+
const expected = registryArtifactSignature(artifactBytes, selected.treeHash, selected.signer);
|
|
21
|
+
if (expected !== selected.signature) {
|
|
22
|
+
throw PrayError.integrity(`package signature mismatch for ${packageName} ${selected.version}`);
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
//# sourceMappingURL=signature.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/registry/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,UAAU,yBAAyB,CACvC,aAAqB,EACrB,QAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,aAAa;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,QAAgC,EAChC,aAAqB;IAErB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,6CAA6C,WAAW,IAAI,QAAQ,CAAC,OAAO,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CACxC,aAAa,EACb,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,SAAS,CAAC,SAAS,CACvB,kCAAkC,WAAW,IAAI,QAAQ,CAAC,OAAO,EAAE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/render/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/render/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,EAAE,CAUxE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EAAE,GACzB,IAAI,CAQN;AAaD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
|
package/dist/render/project.js
CHANGED
|
@@ -2,6 +2,7 @@ import { mkdirSync, writeFileSync } from "node:fs";
|
|
|
2
2
|
import { resolve } from "node:path";
|
|
3
3
|
import { normalizeLineEndings } from "../hashing.js";
|
|
4
4
|
import { targetMode, targetScoped } from "../manifest/destination.js";
|
|
5
|
+
import { validateProjectRelativePath } from "../manifest/validate.js";
|
|
5
6
|
import { renderLegacyCompose } from "./legacy.js";
|
|
6
7
|
import { materializeProvisionedExports } from "./provisioned.js";
|
|
7
8
|
import { renderScopedCompose } from "./scoped.js";
|
|
@@ -18,6 +19,7 @@ export function renderProject(project) {
|
|
|
18
19
|
}
|
|
19
20
|
export function writeRenderedTargets(project, rendered) {
|
|
20
21
|
for (const target of rendered) {
|
|
22
|
+
validateProjectRelativePath(target.path);
|
|
21
23
|
const path = resolve(project.projectRoot, target.path);
|
|
22
24
|
mkdirSync(resolve(path, ".."), { recursive: true });
|
|
23
25
|
writeFileSync(path, target.content, "utf8");
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/render/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;
|
|
1
|
+
{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/render/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAwB,EACxB,QAA0B;IAE1B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,6BAA6B,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CACnB,OAAwB,EACxB,MAAsB,EACtB,MAAc;IAEd,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"provisioned.d.ts","sourceRoot":"","sources":["../../src/render/provisioned.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"provisioned.d.ts","sourceRoot":"","sources":["../../src/render/provisioned.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG5E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,GACvB,sBAAsB,EAAE,CAqC1B;AAcD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAW5E;AACD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAWR"}
|
|
@@ -3,6 +3,7 @@ import { basename, resolve } from "node:path";
|
|
|
3
3
|
import { packageMatchesEnvironment } from "../environment.js";
|
|
4
4
|
import { PrayError } from "../errors.js";
|
|
5
5
|
import { packageBoundToTree } from "../manifest/destination.js";
|
|
6
|
+
import { validateProjectRelativePath } from "../manifest/validate.js";
|
|
6
7
|
import { substitutePraySymbols } from "../substitute.js";
|
|
7
8
|
export function plannedProvisionedFiles(project) {
|
|
8
9
|
const planned = [];
|
|
@@ -37,6 +38,7 @@ function dedupeByPath(files) {
|
|
|
37
38
|
}
|
|
38
39
|
export function materializeProvisionedExports(project) {
|
|
39
40
|
for (const file of plannedProvisionedFiles(project)) {
|
|
41
|
+
validateProjectRelativePath(file.path);
|
|
40
42
|
const destination = resolve(project.projectRoot, file.path);
|
|
41
43
|
mkdirSync(resolve(destination, ".."), { recursive: true });
|
|
42
44
|
writeProvisionedFile(file.source, destination, project.manifest.symbols ?? {});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"provisioned.js","sourceRoot":"","sources":["../../src/render/provisioned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;
|
|
1
|
+
{"version":3,"file":"provisioned.js","sourceRoot":"","sources":["../../src/render/provisioned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAOzD,MAAM,UAAU,uBAAuB,CACrC,OAAwB;IAExB,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACjE,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5C,IACE,CAAC,yBAAyB,CACxB,YAAY,CAAC,WAAW,CAAC,MAAM,EAC/B,OAAO,CAAC,WAAW,CACpB,EACD,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,uBAAuB,CACrB,OAAO,EACP,YAAY,EACZ,eAAe,EACf,OAAO,CACR,CAAC;gBACF,0BAA0B,CACxB,OAAO,EACP,YAAY,EACZ,eAAe,EACf,OAAO,CACR,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC1C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CACnB,KAA+B;IAE/B,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,OAAwB;IACpE,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,oBAAoB,CAClB,IAAI,CAAC,MAAM,EACX,WAAW,EACX,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AACD,MAAM,UAAU,wBAAwB,CACtC,MAAc,EACd,OAA+B;IAE/B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAc,EACd,WAAmB,EACnB,OAA+B;IAE/B,aAAa,CAAC,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAwB,EACxB,OAAiC;IAEjC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IACE,CAAC,yBAAyB,CACxB,YAAY,CAAC,WAAW,CAAC,MAAM,EAC/B,OAAO,CAAC,WAAW,CACpB,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;YACtD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAC,MAAM,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,CAAC,MAAM,CACpB,WAAW,YAAY,CAAC,WAAW,CAAC,IAAI,eAAe,WAAW,+BAA+B,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAwB,EACxB,YAA6B,EAC7B,eAAuB,EACvB,OAAiC;IAEjC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1D,IAAI,0BAA0B,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,SAAS,CAAC,MAAM,CACpB,WAAW,YAAY,CAAC,WAAW,CAAC,IAAI,0CAA0C,SAAS,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,gBAAgB,CACd,OAAO,EACP,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EACtC,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,EACnC,UAAU,EACV,EAAE,EACF,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,YAA6B,EAC7B,SAAiB;IAEjB,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClE,IACE,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjD,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,gBAAgB,EACxD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAwB,EACxB,YAA6B,EAC7B,eAAuB,EACvB,OAAiC;IAEjC,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,SAAS,CAAC,MAAM,CACpB,WAAW,YAAY,CAAC,WAAW,CAAC,IAAI,2CAA2C,UAAU,EAAE,CAChG,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,GAAG,qBAAqB,CAC3C,UAAU,EACV,WAAW,CAAC,IAAI,CACjB,CAAC;YACF,gBAAgB,CACd,OAAO,EACP,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAC5C,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,EACzC,YAAY,EACZ,WAAW,CAAC,IAAI,IAAI,EAAE,EACtB,WAAW,CAAC,MAAM,IAAI,EAAE,EACxB,OAAO,CACR,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAChC,IAAI,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAC,MAAM,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,MAAM,CACpB,sCAAsC,WAAW,CAAC,IAAI,EAAE,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC;gBAC3D,MAAM;aACP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,UAAkB;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAwB,EACxB,UAAkB,EAClB,eAAuB,EACvB,aAAuB,EACvB,IAAc,EACd,MAAgB,EAChB,OAAiC;IAEjC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,CAAC,MAAM,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,CAAC,MAAM,CACpB,2CAA2C,UAAU,EAAE,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,CAAC,MAAM,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC;YAC3D,MAAM;SACP,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,CAAC,MAAM,CACpB,2CAA2C,UAAU,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAmB,EACnB,YAAoB;IAEpB,OAAO,YAAY;SAChB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;SACzB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export declare const MAX_ARCHIVE_ENTRIES = 10000;
|
|
2
|
+
export declare const MAX_ARCHIVE_ENTRY_BYTES: number;
|
|
3
|
+
export declare const MAX_ARCHIVE_TOTAL_BYTES: number;
|
|
4
|
+
export declare const MAX_HTTP_RESPONSE_BYTES: number;
|
|
5
|
+
export declare const MAX_FEDERATION_PEERS = 64;
|
|
6
|
+
export declare const MAX_SERVE_BODY_BYTES: number;
|
|
7
|
+
export declare const MAX_SERVE_HEADER_BYTES: number;
|
|
8
|
+
export declare const MAX_SERVE_CONCURRENT_CONNECTIONS = 32;
|
|
9
|
+
export declare const SERVE_SOCKET_TIMEOUT_MILLISECONDS = 30000;
|
|
10
|
+
//# sourceMappingURL=resource-limits.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resource-limits.d.ts","sourceRoot":"","sources":["../src/resource-limits.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AACxD,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AACxD,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AACxD,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AACrD,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAChD,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,eAAO,MAAM,iCAAiC,QAAS,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export const MAX_ARCHIVE_ENTRIES = 10_000;
|
|
2
|
+
export const MAX_ARCHIVE_ENTRY_BYTES = 32 * 1024 * 1024;
|
|
3
|
+
export const MAX_ARCHIVE_TOTAL_BYTES = 64 * 1024 * 1024;
|
|
4
|
+
export const MAX_HTTP_RESPONSE_BYTES = 64 * 1024 * 1024;
|
|
5
|
+
export const MAX_FEDERATION_PEERS = 64;
|
|
6
|
+
export const MAX_SERVE_BODY_BYTES = 16 * 1024 * 1024;
|
|
7
|
+
export const MAX_SERVE_HEADER_BYTES = 64 * 1024;
|
|
8
|
+
export const MAX_SERVE_CONCURRENT_CONNECTIONS = 32;
|
|
9
|
+
export const SERVE_SOCKET_TIMEOUT_MILLISECONDS = 30_000;
|
|
10
|
+
//# sourceMappingURL=resource-limits.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resource-limits.js","sourceRoot":"","sources":["../src/resource-limits.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AACnD,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC"}
|
package/dist/serve/index.d.ts
CHANGED
|
@@ -1,7 +1,9 @@
|
|
|
1
|
+
import type { Readable } from "node:stream";
|
|
1
2
|
export declare function runServer(options: {
|
|
2
3
|
root: string;
|
|
3
4
|
host?: string;
|
|
4
5
|
port?: number;
|
|
5
6
|
}): Promise<void>;
|
|
7
|
+
export declare function readRequestBody(request: Readable): Promise<Buffer>;
|
|
6
8
|
export declare function runStdioRpc(): never;
|
|
7
9
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAU5C,wBAAgB,SAAS,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ChB;AA2FD,wBAAsB,eAAe,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAcxE;AA0CD,wBAAgB,WAAW,IAAI,KAAK,CAEnC"}
|