qalita 2.3.2__py3-none-any.whl → 2.5.3__py3-none-any.whl

qalita/_frontend/node_modules/typescript/lib/typingsInstaller.js

@@ -0,0 +1,8 @@
+// This file is a shim which defers loading the real module until the compile cache is enabled.
+try {
+  const { enableCompileCache } = require("node:module");
+  if (enableCompileCache) {
+    enableCompileCache();
+  }
+} catch {}
+module.exports = require("./_typingsInstaller.js");

qalita/_frontend/node_modules/typescript/lib/watchGuard.js

@@ -0,0 +1,53 @@
+/*! *****************************************************************************
+Copyright (c) Microsoft Corporation. All rights reserved.
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License. You may obtain a copy of the
+License at http://www.apache.org/licenses/LICENSE-2.0
+
+THIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED
+WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,
+MERCHANTABLITY OR NON-INFRINGEMENT.
+
+See the Apache Version 2.0 License for specific language governing permissions
+and limitations under the License.
+***************************************************************************** */
+
+
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/watchGuard/watchGuard.ts
+var fs = __toESM(require("fs"));
+if (process.argv.length < 3) {
+  process.exit(1);
+}
+var directoryName = process.argv[2];
+try {
+  const watcher = fs.watch(directoryName, { recursive: true }, () => ({}));
+  watcher.close();
+} catch {
+}
+process.exit(0);
+//# sourceMappingURL=watchGuard.js.map

qalita/_frontend/node_modules/typescript/package.json

@@ -0,0 +1,120 @@
+{
+    "name": "typescript",
+    "author": "Microsoft Corp.",
+    "homepage": "https://www.typescriptlang.org/",
+    "version": "5.9.3",
+    "license": "Apache-2.0",
+    "description": "TypeScript is a language for application scale JavaScript development",
+    "keywords": [
+        "TypeScript",
+        "Microsoft",
+        "compiler",
+        "language",
+        "javascript"
+    ],
+    "bugs": {
+        "url": "https://github.com/microsoft/TypeScript/issues"
+    },
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/microsoft/TypeScript.git"
+    },
+    "main": "./lib/typescript.js",
+    "typings": "./lib/typescript.d.ts",
+    "bin": {
+        "tsc": "./bin/tsc",
+        "tsserver": "./bin/tsserver"
+    },
+    "engines": {
+        "node": ">=14.17"
+    },
+    "files": [
+        "bin",
+        "lib",
+        "!lib/enu",
+        "LICENSE.txt",
+        "README.md",
+        "SECURITY.md",
+        "ThirdPartyNoticeText.txt",
+        "!**/.gitattributes"
+    ],
+    "devDependencies": {
+        "@dprint/formatter": "^0.4.1",
+        "@dprint/typescript": "0.93.4",
+        "@esfx/canceltoken": "^1.0.0",
+        "@eslint/js": "^9.20.0",
+        "@octokit/rest": "^21.1.1",
+        "@types/chai": "^4.3.20",
+        "@types/diff": "^7.0.1",
+        "@types/minimist": "^1.2.5",
+        "@types/mocha": "^10.0.10",
+        "@types/ms": "^0.7.34",
+        "@types/node": "latest",
+        "@types/source-map-support": "^0.5.10",
+        "@types/which": "^3.0.4",
+        "@typescript-eslint/rule-tester": "^8.24.1",
+        "@typescript-eslint/type-utils": "^8.24.1",
+        "@typescript-eslint/utils": "^8.24.1",
+        "azure-devops-node-api": "^14.1.0",
+        "c8": "^10.1.3",
+        "chai": "^4.5.0",
+        "chokidar": "^4.0.3",
+        "diff": "^7.0.0",
+        "dprint": "^0.49.0",
+        "esbuild": "^0.25.0",
+        "eslint": "^9.20.1",
+        "eslint-formatter-autolinkable-stylish": "^1.4.0",
+        "eslint-plugin-regexp": "^2.7.0",
+        "fast-xml-parser": "^4.5.2",
+        "glob": "^10.4.5",
+        "globals": "^15.15.0",
+        "hereby": "^1.10.0",
+        "jsonc-parser": "^3.3.1",
+        "knip": "^5.44.4",
+        "minimist": "^1.2.8",
+        "mocha": "^10.8.2",
+        "mocha-fivemat-progress-reporter": "^0.1.0",
+        "monocart-coverage-reports": "^2.12.1",
+        "ms": "^2.1.3",
+        "picocolors": "^1.1.1",
+        "playwright": "^1.50.1",
+        "source-map-support": "^0.5.21",
+        "tslib": "^2.8.1",
+        "typescript": "^5.7.3",
+        "typescript-eslint": "^8.24.1",
+        "which": "^3.0.1"
+    },
+    "overrides": {
+        "typescript@*": "$typescript"
+    },
+    "scripts": {
+        "test": "hereby runtests-parallel --light=false",
+        "test:eslint-rules": "hereby run-eslint-rules-tests",
+        "build": "npm run build:compiler && npm run build:tests",
+        "build:compiler": "hereby local",
+        "build:tests": "hereby tests",
+        "build:tests:notypecheck": "hereby tests --no-typecheck",
+        "clean": "hereby clean",
+        "gulp": "hereby",
+        "lint": "hereby lint",
+        "knip": "hereby knip",
+        "format": "dprint fmt",
+        "setup-hooks": "node scripts/link-hooks.mjs"
+    },
+    "browser": {
+        "fs": false,
+        "os": false,
+        "path": false,
+        "crypto": false,
+        "buffer": false,
+        "source-map-support": false,
+        "inspector": false,
+        "perf_hooks": false
+    },
+    "packageManager": "npm@8.19.4",
+    "volta": {
+        "node": "20.1.0",
+        "npm": "8.19.4"
+    },
+    "gitHead": "c63de15a992d37f0d6cec03ac7631872838602cb"
+}

qalita/_frontend/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "qalita-cli-frontend",
+  "version": "0.0.0-dev",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "next lint"
+  },
+  "dependencies": {
+    "next": "16.0.10",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "react-markdown": "^9.0.1",
+    "remark-gfm": "^4.0.0",
+    "socket.io-client": "^4.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "@types/react": "^18.3.3",
+    "@types/react-dom": "^18.3.0",
+    "autoprefixer": "^10.4.22",
+    "postcss": "^8.5.6",
+    "tailwindcss": "^3.4.18",
+    "typescript": "^5.5.0"
+  }
+}

qalita/_frontend/server.js

@@ -0,0 +1,38 @@
+const path = require('path')
+
+const dir = path.join(__dirname)
+
+process.env.NODE_ENV = 'production'
+process.chdir(__dirname)
+
+const currentPort = parseInt(process.env.PORT, 10) || 3000
+const hostname = process.env.HOSTNAME || '0.0.0.0'
+
+let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
+const nextConfig = {"env":{},"webpack":null,"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.js","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":true,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/qalita-cli/qalita-cli/frontend","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"serverSourceMaps":false,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"dynamicOnHover":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":1,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":false,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":false,"lockDistDir":true,"isolatedDevBuild":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.js","turbopack":{"root":"/home/runner/work/qalita-cli/qalita-cli/frontend"},"distDirRoot":".next"}
+
+process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
+
+require('next')
+const { startServer } = require('next/dist/server/lib/start-server')
+
+if (
+  Number.isNaN(keepAliveTimeout) ||
+  !Number.isFinite(keepAliveTimeout) ||
+  keepAliveTimeout < 0
+) {
+  keepAliveTimeout = undefined
+}
+
+startServer({
+  dir,
+  isDev: false,
+  config: nextConfig,
+  hostname,
+  port: currentPort,
+  allowRetry: false,
+  keepAliveTimeout,
+}).catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

qalita/commands/pack.py

@@ -17,7 +17,7 @@ from threading import Thread
 from tabulate import tabulate
 from qalita.internal.error_patterns import ERROR_PATTERNS
 from qalita.__main__ import pass_config
-from qalita.internal.utils import logger, make_tarfile, ask_confirmation
+from qalita.internal.utils import logger, make_tarfile, ask_confirmation, safe_path_join
 from qalita.internal.request import send_request
 
 loggerPack = logging.getLogger(__name__)
@@ -360,6 +360,9 @@ def validate_pack_directory(pack_directory: str) -> int:
     """
     logger.info("------------- Pack Validation (directory) -------------")
     error_count = 0
+    
+    # Normalize and validate the pack directory path
+    pack_directory = os.path.abspath(pack_directory)
     if not os.path.isdir(pack_directory):
         logger.error(f"Pack folder '{pack_directory}' does not exist.")
         return 1
@@ -367,7 +370,14 @@ def validate_pack_directory(pack_directory: str) -> int:
     mandatory_files = ["run.sh", "properties.yaml", "README.md"]
     properties = None
     for file in mandatory_files:
-        file_path = os.path.join(pack_directory, file)
+        # Use safe_path_join to prevent path traversal
+        try:
+            file_path = safe_path_join(pack_directory, file)
+        except ValueError as e:
+            logger.error(f"Invalid file path: {e}")
+            error_count += 1
+            continue
+            
         if not os.path.exists(file_path):
             logger.error(f"Mandatory file '{file}' does not exist in the pack.")
             error_count += 1
@@ -399,7 +409,8 @@ def validate_pack_directory(pack_directory: str) -> int:
     # Try to persist potential visibility default if we could parse properties
     if properties is not None:
         try:
-            with open(os.path.join(pack_directory, "properties.yaml"), "w", encoding="utf-8") as f:
+            props_path = safe_path_join(pack_directory, "properties.yaml")
+            with open(props_path, "w", encoding="utf-8") as f:
                 yaml.dump(properties, f)
         except Exception:
             # non-fatal
@@ -461,7 +472,14 @@ def push_pack(api_url, registry_id, pack_name, pack_version, source_dir=None, co
 
 def load_pack_properties(pack_directory):
     """Loads the properties.yaml file from the specified pack directory."""
-    properties_file = f"{pack_directory}/properties.yaml"
+    # Normalize the pack directory path
+    pack_directory = os.path.abspath(pack_directory)
+    try:
+        properties_file = safe_path_join(pack_directory, "properties.yaml")
+    except ValueError as e:
+        logger.error(f"Invalid pack directory path: {e}")
+        return None
+        
     if not os.path.exists(properties_file):
         logger.error(f"Pack properties file '{properties_file}' not found.")
         return None
@@ -473,8 +491,19 @@ def load_pack_properties(pack_directory):
         return None
 
 
-def load_base64_encoded_image(file_path):
-    """Loads an image file and returns its content as a base64-encoded string."""
+def load_base64_encoded_image(base_dir, filename):
+    """Loads an image file and returns its content as a base64-encoded string.
+    
+    Args:
+        base_dir: The base directory containing the file.
+        filename: The name of the file to load.
+    """
+    try:
+        file_path = safe_path_join(base_dir, filename)
+    except ValueError as e:
+        logger.error(f"Invalid file path: {e}")
+        return ""
+        
     if os.path.exists(file_path):
         try:
             with open(file_path, "rb") as file:
@@ -485,8 +514,19 @@ def load_base64_encoded_image(file_path):
     return ""
 
 
-def load_base64_encoded_text(file_path):
-    """Loads a text file (e.g., README.md) and returns its content as a base64-encoded string."""
+def load_base64_encoded_text(base_dir, filename):
+    """Loads a text file (e.g., README.md) and returns its content as a base64-encoded string.
+    
+    Args:
+        base_dir: The base directory containing the file.
+        filename: The name of the file to load.
+    """
+    try:
+        file_path = safe_path_join(base_dir, filename)
+    except ValueError as e:
+        logger.error(f"Invalid file path: {e}")
+        return ""
+        
     if os.path.exists(file_path):
         try:
             with open(file_path, "rb") as file:
@@ -497,8 +537,19 @@ def load_base64_encoded_text(file_path):
     return ""
 
 
-def load_json_config(file_path):
-    """Loads a JSON configuration file from the specified path."""
+def load_json_config(base_dir, filename):
+    """Loads a JSON configuration file from the specified path.
+    
+    Args:
+        base_dir: The base directory containing the file.
+        filename: The name of the file to load.
+    """
+    try:
+        file_path = safe_path_join(base_dir, filename)
+    except ValueError as e:
+        logger.error(f"Invalid file path: {e}")
+        return {}
+        
     if os.path.exists(file_path):
         try:
             with open(file_path, "r", encoding="utf-8") as file:
@@ -589,11 +640,11 @@ def publish_new_pack_version(api_url, pack_id, pack_version, registry_id, pack_n
     # Best-effort: also update metadata (avatar, description, url, visibility, config, readme)
     # and compatibility if provided in properties.yaml so the new version push also refreshes pack details.
     try:
-        pack_dir = source_dir or f"./{pack_name}_pack"
+        pack_dir = os.path.abspath(source_dir or f"./{pack_name}_pack")
         props = load_pack_properties(pack_dir) or {}
-        pack_icon = load_base64_encoded_image(os.path.join(pack_dir, "icon.png"))
-        readme = load_base64_encoded_text(os.path.join(pack_dir, "README.md"))
-        pack_config = load_json_config(os.path.join(pack_dir, "pack_conf.json"))
+        pack_icon = load_base64_encoded_image(pack_dir, "icon.png")
+        readme = load_base64_encoded_text(pack_dir, "README.md")
+        pack_config = load_json_config(pack_dir, "pack_conf.json")
         pack_type = props.get("type", "")
         pack_description = props.get("description", "")
         pack_url = props.get("url", "")
@@ -662,7 +713,7 @@ def create_new_pack(
     }
     # Optionally add compatible_sources from properties.yaml if provided
     try:
-        pack_dir = source_dir or f"./{pack_name}_pack"
+        pack_dir = os.path.abspath(source_dir or f"./{pack_name}_pack")
         props = load_pack_properties(pack_dir) or {}
         compat = props.get("compatible_sources")
         if isinstance(compat, builtins.list) and all(isinstance(x, str) for x in compat):
@@ -720,9 +771,9 @@ def _push_with_context(agent_conf, pack_properties, pack_directory, config):
     pack_visibility = pack_properties.get("visibility", "private")
 
     # Handle pack icon and README/config
-    pack_icon = load_base64_encoded_image(os.path.join(pack_directory, "icon.png"))
-    readme = load_base64_encoded_text(os.path.join(pack_directory, "README.md"))
-    pack_config = load_json_config(os.path.join(pack_directory, "pack_conf.json"))
+    pack_icon = load_base64_encoded_image(pack_directory, "icon.png")
+    readme = load_base64_encoded_text(pack_directory, "README.md")
+    pack_config = load_json_config(pack_directory, "pack_conf.json")
 
     # Check existing packs and versions
     pack_id, existing_versions = find_existing_pack(
@@ -846,7 +897,10 @@ def push_from_directory(config, pack_directory):
             logger.error(msg)
             return False, msg
 
-        pack_directory = os.path.abspath(pack_directory)
+        # Normalize and validate the path
+        pack_directory = os.path.normpath(os.path.abspath(pack_directory))
+        
+        # Ensure the directory exists and is actually a directory
         if not os.path.isdir(pack_directory):
             msg = f"Pack directory '{pack_directory}' does not exist."
             logger.error(msg)

qalita/commands/source.py

@@ -7,7 +7,7 @@ import click
 from tabulate import tabulate
 
 from qalita.__main__ import pass_config
-from qalita.internal.utils import logger, ask_confirmation, test_connection
+from qalita.internal.utils import logger, ask_confirmation, test_connection, safe_path_check
 from qalita.internal.request import send_api_request
 
 
@@ -164,11 +164,15 @@ def validate_source(config):
                     is_source_valid = False
                 else:
                     # check for read access to path
-                    path = source["config"]["path"]
-                    if not os.access(path, os.R_OK):
-                        logger.error(
-                            f"Source [{source['name']}] has a path in config, but it cannot be accessed"
-                        )
+                    try:
+                        path = safe_path_check(source["config"]["path"])
+                        if not os.access(path, os.R_OK):
+                            logger.error(
+                                f"Source [{source['name']}] has a path in config, but it cannot be accessed"
+                            )
+                            is_source_valid = False
+                    except ValueError as e:
+                        logger.error(f"Source [{source['name']}] has an invalid path: {e}")
                         is_source_valid = False
 
         # If all checks pass, mark the source as valid