suitescript-verify 0.0.0-stage → 0.1.0

package/package.json

@@ -1,6 +1,77 @@
 {
   "name": "suitescript-verify",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Run probes in a NetSuite sandbox to verify what SuiteScript modules do, with guardrails for agents.",
+  "keywords": [
+    "suitescript",
+    "netsuite",
+    "verification",
+    "probe",
+    "suitecloud"
+  ],
+  "homepage": "https://github.com/nemchik/suitescript-verify#readme",
+  "bugs": "https://github.com/nemchik/suitescript-verify/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nemchik/suitescript-verify.git"
+  },
+  "license": "MIT",
+  "author": "Eric Nemchik",
+  "type": "module",
+  "bin": {
+    "suitescript-verify": "./dist/bin/suitescript-verify.js"
+  },
+  "files": [
+    "dist",
+    "templates",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "prebuild": "node -e \"require(\\\"node:fs\\\").rmSync(\\\"dist\\\",{recursive:true,force:true})\"",
+    "build": "tsc -p tsconfig.build.json",
+    "check": "biome check",
+    "preformat": "npm run typecheck",
+    "format": "biome check --write",
+    "lint": "biome lint",
+    "prepack": "npm run build",
+    "skills": "node scripts/skills.ts",
+    "skills:add": "node scripts/skills.ts add --skill \"*\" --agent universal --agent claude-code --yes",
+    "skills:check": "node scripts/skills.ts check",
+    "skills:install": "node scripts/skills.ts experimental_install && node scripts/link-claude-skills.ts",
+    "skills:list": "node scripts/skills.ts list",
+    "skills:update": "node scripts/skills.ts update --project --yes && node scripts/link-claude-skills.ts",
+    "pretest": "npm run build",
+    "test": "node --test test/*.test.ts",
+    "typecheck": "tsc"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.6.6",
+    "@types/node": "24.19.2",
+    "git-pull-run": "2.1.0",
+    "lefthook": "2.2.2",
+    "skills": "1.7.6",
+    "typescript": "7.0.2"
+  },
+  "peerDependencies": {
+    "@oracle/suitecloud-cli": "^4.1.1"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "devEngines": {
+    "runtime": {
+      "name": "node",
+      "version": "24.22.3",
+      "onFail": "error"
+    },
+    "packageManager": {
+      "name": "npm",
+      "version": "12.2.2",
+      "onFail": "warn"
+    }
+  },
+  "allowScripts": {
+    "lefthook": true
+  }
+}

package/templates/runner.template.js

@@ -0,0 +1,64 @@
+/**
+ * The verification runner: a RESTlet that runs one probe by name and returns
+ * what it found. It never runs code from the request: the probes below are
+ * the only code it can run, and they are generated from the probes folder
+ * into this file's dependency list by `suitescript-verify deploy`.
+ *
+ * It refuses to run unless the account is a sandbox.
+ *
+ * @NApiVersion 2.1
+ * @NScriptType Restlet
+ */
+define(["N/runtime" /*PROBE_PATHS*/], (runtime /*PROBE_NAMES*/) => {
+  const probes = new Map([
+    /*PROBE_ENTRIES*/
+  ]);
+
+  return {
+    post(body) {
+      if (runtime.envType !== runtime.EnvType.SANDBOX) {
+        return { error: "refused: the runner only runs in a sandbox" };
+      }
+      const name = body && typeof body.probe === "string" ? body.probe : "";
+      const entry = probes.get(name);
+      if (!entry) {
+        return { error: "unknown probe", known: [...probes.keys()] };
+      }
+      const [probe, declared] = entry;
+      // Parameters are data: only declared names, only strings that match the
+      // declared pattern in full, and never evaluated.
+      const sent = body.params === undefined ? {} : body.params;
+      if (!sent || typeof sent !== "object" || Array.isArray(sent)) {
+        return { error: "invalid params: expected an object" };
+      }
+      const params = {};
+      for (const key of Object.keys(sent)) {
+        if (!declared.some((param) => param.name === key)) {
+          return { error: `undeclared param: ${key}` };
+        }
+      }
+      for (const { name: key, pattern } of declared) {
+        const value = sent[key];
+        if (typeof value !== "string") {
+          return { error: `missing or non-string param: ${key}` };
+        }
+        if (!new RegExp(`^(?:${pattern})$`, "u").test(value)) {
+          return { error: `param does not match its pattern: ${key}` };
+        }
+        params[key] = value;
+      }
+      let result;
+      try {
+        result = probe.run(params);
+      } catch (e) {
+        result = `THROWS: ${e.name}: ${e.message}`;
+      }
+      return {
+        probe: name,
+        result,
+        scriptType: "RESTlet",
+        version: String(runtime.version),
+      };
+    },
+  };
+});

package/templates/sdf/deploy.xml

@@ -0,0 +1,8 @@
+<deploy>
+  <files>
+    <path>~/FileCabinet/SuiteScripts/suitescript-verify/*</path>
+  </files>
+  <objects>
+    <path>~/Objects/*</path>
+  </objects>
+</deploy>

package/templates/sdf/manifest.xml

@@ -0,0 +1,12 @@
+<manifest projecttype="ACCOUNTCUSTOMIZATION">
+  <projectname>suitescript-verify</projectname>
+  <frameworkversion>1.0</frameworkversion>
+  <dependencies>
+    <features>
+      <feature required="true">SERVERSIDESCRIPTING</feature>
+    </features>
+    <objects>
+      <object>customrole_suitescript_verify</object>
+    </objects>
+  </dependencies>
+</manifest>

package/templates/sdf/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "suitescript-verify-sdf",
+  "private": true,
+  "type": "commonjs"
+}

package/templates/sdf/runner.xml

@@ -0,0 +1,17 @@
+<restlet scriptid="customscript_suitescript_verify_runner">
+  <description>Runs one version-controlled probe by name in a sandbox. Source: the project's verification folder, through suitescript-verify.</description>
+  <isinactive>F</isinactive>
+  <name>suitescript-verify runner</name>
+  <notifyowner>F</notifyowner>
+  <scriptfile>[/SuiteScripts/suitescript-verify/runner.js]</scriptfile>
+  <scriptdeployments>
+    <scriptdeployment scriptid="customdeploy_suitescript_verify_runner">
+      <allroles>F</allroles>
+      <audslctrole>[customrole_suitescript_verify]</audslctrole>
+      <isdeployed>%%DEPLOYED%%</isdeployed>
+      <loglevel>DEBUG</loglevel>
+      <status>RELEASED</status>
+      <title>suitescript-verify runner</title>
+    </scriptdeployment>
+  </scriptdeployments>
+</restlet>

package/templates/sdf/suitecloud.config.js

@@ -0,0 +1,4 @@
+module.exports = {
+  commands: {},
+  defaultProjectFolder: "src",
+};