Something went wrong. Try again.
more up to date at codeberg https://codeberg.org/cowie/tau.git
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366#!/usr/bin/env node
import { existsSync, readFileSync, writeFileSync } from "node:fs";import { dirname, join, posix, resolve } from "node:path";import { fileURLToPath } from "node:url";
const scriptDir = dirname(fileURLToPath(import.meta.url));const repoRoot = resolve(scriptDir, "..");const codingAgentDir = join(repoRoot, "packages/coding-agent");const rootLockfilePath = join(repoRoot, "package-lock.json");const shrinkwrapPath = join(codingAgentDir, "npm-shrinkwrap.json");const internalPackagePrefix = "@earendil-works/pi-";const allowedInstallScriptPackages = new Map([ ["@google/genai@1.52.0", "preinstall is a no-op in the published package"], ["protobufjs@7.5.5", "postinstall only warns about protobufjs version scheme mismatches"],]);
const args = new Set(process.argv.slice(2));const checkOnly = args.has("--check");
for (const arg of args) { if (arg !== "--check") { console.error(`Unknown argument: ${arg}`); process.exit(1); }}
function readJson(path) { return JSON.parse(readFileSync(path, "utf8"));}
function packageDependencies(entry) { return { ...(entry.dependencies ?? {}), ...(entry.optionalDependencies ?? {}), };}
function sortedObject(object) { return Object.fromEntries(Object.entries(object).sort(([a], [b]) => a.localeCompare(b)));}
function sortedPackageEntry(entry) { const fieldOrder = [ "name", "version", "resolved", "integrity", "license", "dependencies", "optionalDependencies", "peerDependencies", "peerDependenciesMeta", "bin", "engines", "os", "cpu", "libc", "optional", "hasInstallScript", "deprecated", "funding", ]; const sorted = {};
for (const field of fieldOrder) { if (entry[field] !== undefined) { sorted[field] = entry[field]; } } for (const [field, value] of Object.entries(entry).sort(([a], [b]) => a.localeCompare(b))) { if (sorted[field] === undefined) { sorted[field] = value; } } return sorted;}
function copyLockEntry(entry) { const copied = { ...entry }; delete copied.dev; delete copied.devOptional; delete copied.extraneous; delete copied.link; return sortedPackageEntry(copied);}
function copyPackageJsonEntry(packageJson, options) { const entry = options.includeName ? { name: packageJson.name, version: packageJson.version } : { version: packageJson.version };
for (const field of [ "license", "dependencies", "optionalDependencies", "peerDependencies", "peerDependenciesMeta", "bin", "engines", "os", "cpu", "libc", ]) { if (packageJson[field] !== undefined) { entry[field] = packageJson[field]; } }
return sortedPackageEntry(entry);}
function packageNameFromLockPath(lockPath) { const marker = "node_modules/"; const index = lockPath.lastIndexOf(marker); if (index === -1) { return undefined; }
const parts = lockPath.slice(index + marker.length).split("/"); if (parts[0]?.startsWith("@")) { return `${parts[0]}/${parts[1]}`; } return parts[0];}
function registryTarballUrl(packageName, version) { const tarballName = packageName.startsWith("@") ? packageName.split("/")[1] : packageName; return `https://registry.npmjs.org/${packageName}/-/${tarballName}-${version}.tgz`;}
function getInternalWorkspaces(lockPackages) { const workspaces = new Map();
for (const [lockPath, entry] of Object.entries(lockPackages)) { if (!lockPath.startsWith("packages/") || lockPath.includes("/node_modules/") || !entry.name || !entry.version) { continue; } if (!entry.name.startsWith(internalPackagePrefix)) { continue; }
workspaces.set(entry.name, { lockPath, packageJson: readJson(join(repoRoot, lockPath, "package.json")), }); }
return workspaces;}
function resolveExternalDependency(lockPackages, packageName, fromLockPath) { const candidateDirs = []; let current = fromLockPath;
while (current) { candidateDirs.push(current); const parent = posix.dirname(current); if (parent === "." || parent === current) { break; } current = parent; } candidateDirs.push("");
const tried = new Set(); for (const directory of candidateDirs) { const candidate = directory ? `${directory}/node_modules/${packageName}` : `node_modules/${packageName}`; if (tried.has(candidate)) { continue; } tried.add(candidate);
const entry = lockPackages[candidate]; if (entry && !entry.link) { return candidate; } }
const suffix = `node_modules/${packageName}`; const matches = Object.entries(lockPackages) .filter(([lockPath, entry]) => !entry.link && (lockPath === suffix || lockPath.endsWith(`/${suffix}`))) .map(([lockPath]) => lockPath);
if (matches.length === 1) { return matches[0]; }
throw new Error( `Cannot resolve ${packageName} from ${fromLockPath || "root"}. ` + (matches.length > 1 ? `Matches: ${matches.join(", ")}` : "No matching lockfile entry found."), );}
function addInternalWorkspace(shrinkwrapPackages, addedPaths, queue, name, workspace) { const packageJson = workspace.packageJson; const outputPath = `node_modules/${name}`; const entry = copyPackageJsonEntry(packageJson, { includeName: false }); entry.resolved = registryTarballUrl(name, packageJson.version);
shrinkwrapPackages[outputPath] = sortedPackageEntry(entry); addedPaths.add(outputPath);
for (const dependencyName of Object.keys(packageDependencies(packageJson))) { queue.push({ name: dependencyName, from: outputPath }); }}
function addExternalPackage(lockPackages, shrinkwrapPackages, addedPaths, queue, name, from) { const lockPath = resolveExternalDependency(lockPackages, name, from); if (addedPaths.has(lockPath)) { return; }
const entry = lockPackages[lockPath]; shrinkwrapPackages[lockPath] = copyLockEntry(entry); addedPaths.add(lockPath);
for (const dependencyName of Object.keys(packageDependencies(entry))) { queue.push({ name: dependencyName, from: lockPath }); }}
function validateShrinkwrap(shrinkwrap, internalNames) { const errors = []; const includedPaths = new Set(Object.keys(shrinkwrap.packages)); const includedPackageNames = new Set(); const seenAllowedInstallScriptPackages = new Set();
for (const [lockPath, entry] of Object.entries(shrinkwrap.packages)) { const packageName = packageNameFromLockPath(lockPath); if (packageName) { includedPackageNames.add(packageName); } if (entry.link) { errors.push(`${lockPath} is a link entry`); } if (typeof entry.resolved === "string" && /^(file:|link:|workspace:|\.\.?\/|\/)/.test(entry.resolved)) { errors.push(`${lockPath} has a local resolved value: ${entry.resolved}`); } if (entry.hasInstallScript) { if (!packageName || !entry.version) { errors.push(`${lockPath || "root"} has install scripts but no package name/version`); } else { const packageId = `${packageName}@${entry.version}`; if (allowedInstallScriptPackages.has(packageId)) { seenAllowedInstallScriptPackages.add(packageId); } else { errors.push( `${lockPath} has install scripts (${packageId}). Review it and add it to allowedInstallScriptPackages if intentional.`, ); } } } }
for (const packageId of allowedInstallScriptPackages.keys()) { if (!seenAllowedInstallScriptPackages.has(packageId)) { errors.push(`allowed install-script package ${packageId} is no longer present; remove it from the allowlist`); } }
for (const name of internalNames) { if (!includedPackageNames.has(name)) { errors.push(`internal dependency ${name} is missing`); } }
for (const [lockPath, entry] of Object.entries(shrinkwrap.packages)) { for (const dependencyName of Object.keys(packageDependencies(entry))) { const dependencyIncluded = [...includedPaths].some( (candidate) => candidate === `node_modules/${dependencyName}` || candidate.endsWith(`/node_modules/${dependencyName}`), ); if (!dependencyIncluded) { errors.push(`${lockPath || "root"} dependency ${dependencyName} is missing`); } } }
const platformPackageCount = Object.values(shrinkwrap.packages).filter((entry) => entry.os || entry.cpu || entry.libc).length; if (platformPackageCount === 0) { errors.push("no platform-specific optional dependency entries found"); }
if (errors.length > 0) { throw new Error(`Generated shrinkwrap failed validation:\n${errors.map((error) => ` - ${error}`).join("\n")}`); }}
function generateShrinkwrap() { const rootLock = readJson(rootLockfilePath); if (rootLock.lockfileVersion !== 3 || !rootLock.packages) { throw new Error("package-lock.json must be lockfileVersion 3 and contain a packages map"); }
const lockPackages = rootLock.packages; const codingAgentPackage = readJson(join(codingAgentDir, "package.json")); const internalWorkspaces = getInternalWorkspaces(lockPackages); const shrinkwrapPackages = { "": copyPackageJsonEntry(codingAgentPackage, { includeName: true }), }; const addedPaths = new Set([""]); const internalNames = new Set(); const queue = Object.keys(packageDependencies(codingAgentPackage)).map((name) => ({ name, from: "" }));
while (queue.length > 0) { const item = queue.shift(); if (!item) { break; }
const workspace = internalWorkspaces.get(item.name); if (workspace) { const outputPath = `node_modules/${item.name}`; internalNames.add(item.name); if (!addedPaths.has(outputPath)) { addInternalWorkspace(shrinkwrapPackages, addedPaths, queue, item.name, workspace); } continue; }
addExternalPackage(lockPackages, shrinkwrapPackages, addedPaths, queue, item.name, item.from); }
const shrinkwrap = { name: codingAgentPackage.name, version: codingAgentPackage.version, lockfileVersion: 3, requires: true, packages: sortedObject(shrinkwrapPackages), };
validateShrinkwrap(shrinkwrap, internalNames); return shrinkwrap;}
try { const shrinkwrap = generateShrinkwrap(); const content = `${JSON.stringify(shrinkwrap, null, "\t")}\n`;
if (checkOnly) { if (!existsSync(shrinkwrapPath)) { console.error("packages/coding-agent/npm-shrinkwrap.json is missing."); console.error("Run: npm run shrinkwrap:coding-agent"); process.exit(1); } const current = readFileSync(shrinkwrapPath, "utf8"); if (current !== content) { console.error("packages/coding-agent/npm-shrinkwrap.json is out of date."); console.error("Run: npm run shrinkwrap:coding-agent"); process.exit(1); } console.log("packages/coding-agent/npm-shrinkwrap.json is up to date."); } else { writeFileSync(shrinkwrapPath, content); const packageCount = Object.keys(shrinkwrap.packages).length - 1; const platformPackageCount = Object.values(shrinkwrap.packages).filter((entry) => entry.os || entry.cpu || entry.libc).length; console.log( `Wrote packages/coding-agent/npm-shrinkwrap.json (${packageCount} packages, ${platformPackageCount} platform-specific).`, ); }} catch (error) { console.error(error instanceof Error ? error.message : String(error)); process.exit(1);}