puter/paseo
1
0
Fork 0
mirror of https://github.com/getpaseo/paseo.git synced 2026-11-07 08:54:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/main' into workspace-runtime-poc

Browse Source 
# Conflicts:
#	nix/npm-deps.hash
#	package.json
#	packages/client/src/daemon-client.ts
#	packages/server/src/server/bootstrap.ts
#	packages/server/src/server/websocket-server.ts
This commit is contained in:
Mohamed Boudra
2026-08-14 18:43:58 +02:00
parent cd429339a0 75bbca4a1b
commit 54f0e636b9
150 changed files with 9206 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/check-workspace-runtime-boundaries.mjs
+1
View File
@@ -24,6 +24,7 @@ const migratedOwners = [
];
const hostModules = new Set(["child_process", "fs", "fs/promises", "module", "which"]);
const auditedNonliteralServerLoads = new Set([
"packages/server/src/server/plugins/plugin-process.ts|runtimeRequire|nodeRequire|load",
"packages/server/src/server/workspace-runtime/command/internal/command-runtime.ts|resolveRuntimeCommand|moduleRequire|resolve",
"packages/server/src/server/speech/providers/local/sherpa/sherpa-runtime-env.ts|resolveSherpaLoaderEnv|require|resolve",
"packages/server/src/server/speech/providers/local/sherpa/sherpa-onnx-node-loader.ts|loadWithRequire|requireFn|load",
scripts/workspace-runtime-boundaries.test.mjs
+19
View File
@@ -328,6 +328,18 @@ test("the AST guard follows direct createRequire property calls", async (t) => {
test("audited production loader exceptions are narrow", async (t) => {
const root = await fixtureRoot(t);
await source(
root,
"packages/server/src/server/plugins/plugin-process.ts",
'import { createRequire } from "node:module";\n' +
'const nodeRequire = createRequire("package.json");\n' +
"function runtimeRequire(target) {\n" +
" return nodeRequire(target);\n" +
"}\n" +
"function unreviewedPluginLoad(target) {\n" +
" return nodeRequire(target);\n" +
"}\n",
);
await source(
root,
"packages/server/src/server/workspace-runtime/command/internal/command-runtime.ts",
@@ -359,6 +371,13 @@ test("audited production loader exceptions are narrow", async (t) => {
);
assert.deepEqual(await findWorkspaceBoundaryViolations(root), [
{
file: "packages/server/src/server/plugins/plugin-process.ts",
import: "<computed>",
rule: "nonliteral-module-load",
message:
"packages/server/src/server/plugins/plugin-process.ts: nonliteral-module-load forbids <computed>",
},
{
file: "packages/server/src/server/workspace-runtime/command/internal/command-runtime.ts",
import: "<computed>",