feat: complete TASK-WP5-03 asset allowlist
Dada P0-A isolated Windows CI / validate-and-package (push) Failing after 1m5s

This commit is contained in:
suyx
2026-08-03 18:24:16 +08:00
parent 609c71a3f7
commit 4d1ec8ba7e
27 changed files with 1078 additions and 74 deletions
+8 -6
View File
@@ -8,14 +8,14 @@ function readJson(path) {
return JSON.parse(readFileSync(path, "utf8"));
}
function installedPackageVersion(manifestPath, packageName) {
function installedPackage(manifestPath, packageName) {
const packagePath = resolve(
dirname(manifestPath),
"node_modules",
...packageName.split("/"),
"package.json",
);
return readJson(packagePath).version;
return readJson(packagePath);
}
export function verifyFrozenDependencies() {
@@ -34,10 +34,12 @@ export function verifyFrozenDependencies() {
continue;
}
const installed = installedPackageVersion(manifestPath, name);
packages[manifest.name][name] = installed;
if (installed !== version) {
problems.push(`${manifestPath} ${name}: installed ${installed}, expected ${version}`);
const installed = installedPackage(manifestPath, name);
packages[manifest.name][name] = installed.version;
if (installed.name !== name) {
problems.push(`${manifestPath} ${name}: linked package name is ${installed.name ?? "missing"}`);
} else if (!version.startsWith("workspace:") && installed.version !== version) {
problems.push(`${manifestPath} ${name}: installed ${installed.version}, expected ${version}`);
}
}
}