Add a document validation script, and sync that also.

design/validate_doc_update.js

@@ -0,0 +1,29 @@
+function (newDoc, oldDoc, user) {
+  var semver = /v?([0-9]+)\.([0-9]+)\.([0-9]+)([a-zA-Z-][a-zA-Z0-9-]*)?/;
+
+  function assert (ok, message) {
+    if (!ok) throw {forbidden:message};
+  }
+
+  // TODO: If the user doesn't have access to update this thing,
+  // then throw an unauthorized error
+
+  // if the newDoc is an {error:"blerg"}, then throw that right out.
+  // something detected in the _updates/package script.
+  if (newDoc.forbidden) throw {forbidden:newDoc.forbidden};
+
+  // make sure all the dist-tags and versions are valid semver
+  assert(newDoc["dist-tags"], "must have dist-tags");
+  assert(newDoc.versions, "must have versions");
+
+  for (var i in newDoc["dist-tags"]) {
+    assert(semver(newDoc["dist-tags"][i]),
+      "dist-tag "+i+" is not a valid version: "+newDoc["dist-tags"][i]);
+    assert(newDoc["dist-tags"][i] in newDoc.versions,
+      "dist-tag "+i+" refers to non-existent version: "+newDoc["dist-tags"][i]);
+  }
+  for (var i in newDoc.versions) {
+    assert(semver(i),
+      "version "+i+" is not a valid version");
+  }
+}

sync.js

@@ -4,7 +4,7 @@ var couchdb = require('./deps/node-couchdb/lib/couchdb'),
   sys = require('sys'),
   url = require('url'),
 
-  ddoc = {_id:"_design/app",shows:{},updates:{}},
+  ddoc = {_id:"_design/app",shows:{},updates:{}, validate_doc_update:""},
 
   dev = false,
   dburl = "http://localhost:5984/jsregistry",
@@ -17,6 +17,9 @@ var couchdb = require('./deps/node-couchdb/lib/couchdb'),
     "design/shows/package.js" : function (data) {
       ddoc.shows.package = data;
     },
+    "design/validate_doc_update.js" : function (data) {
+      ddoc.validate_doc_update = data;
+    },
     "design/updates/package.js" : function (data) {
       ddoc.updates.package = data;
     }