travis-akerl 1.8.9

data/lib/travis/cli/encrypt_file.rb

@@ -0,0 +1,140 @@
+# encoding: utf-8
+require 'travis/cli'
+require 'travis/tools/system'
+
+require 'securerandom'
+require 'openssl'
+require 'digest'
+require 'shellwords'
+
+module Travis
+  module CLI
+    class EncryptFile < RepoCommand
+      attr_accessor :stage
+      description 'encrypts a file and adds decryption steps to .travis.yml'
+      on '-K', '--key KEY', 'encryption key to be used (randomly generated otherwise)'
+      on '--iv IV', 'encryption IV to be used (randomly generated otherwise)'
+      on '-d', '--decrypt', 'decrypt the file instead of encrypting it, requires key and iv'
+      on '-f', '--force', 'override output file if it exists'
+      on '-p', '--print-key', 'print (possibly generated) key and iv'
+      on '-w', '--decrypt-to PATH', 'where to write the decrypted file to on the Travis CI VM'
+      on '-a', '--add [STAGE]', 'automatically add command to .travis.yml (default stage is before_install)' do |c, stage|
+        c.stage = stage || 'before_install'
+      end
+
+      def run(input_path, output_path = nil)
+        self.decrypt_to ||= decrypt_to_for(input_path)
+        output_path     ||= File.basename(output_path_for(input_path))
+        self.output       = $stdout.tty? ? StringIO.new : $stderr if output_path == '-'
+        result            = transcode(input_path)
+
+        if output_path == '-'
+          $stdout.puts result
+        else
+          say "storing result as #{color(output_path, :info)}"
+          write_file(output_path, result, force)
+          return if decrypt?
+
+          error "requires --decrypt-to option when reading from stdin" unless decrypt_to?
+
+          set_env_vars
+
+          command = decrypt_command(output_path)
+          stage ? store_command(command) : print_command(command)
+
+          notes(input_path, output_path)
+        end
+      end
+
+      def setup
+        super
+        self.key        ||= SecureRandom.hex(32) unless decrypt?
+        self.iv         ||= SecureRandom.hex(16) unless decrypt?
+        error "key must be 64 characters long and a valid hex number" unless key =~ /^[a-f0-9]{64}$/
+        error "iv must be 32 characters long and a valid hex number"  unless iv  =~ /^[a-f0-9]{32}$/
+      end
+
+      def print_command(command)
+        empty_line
+        say command, template(__FILE__)
+      end
+
+      def store_command(command)
+        travis_config[stage] = Array(travis_config[stage])
+        travis_config[stage].delete(command)
+        travis_config[stage].unshift(command)
+        save_travis_config
+      end
+
+      def decrypt_command(path)
+        "openssl aes-256-cbc -K $#{env_name(:key)} -iv $#{env_name(:iv)} -in #{escape_path(path)} -out #{escape_path(decrypt_to)} -d"
+      end
+
+      def set_env_vars
+        say "storing secure env variables for decryption"
+        repository.env_vars.upsert env_name(:key), key, :public => false
+        repository.env_vars.upsert env_name(:iv),  iv,  :public => false
+      end
+
+      def env_name(name)
+        @env_prefix ||= "encrypted_#{Digest.hexencode(Digest::SHA1.digest(Dir.pwd)[0..5])}"
+        "#{@env_prefix}_#{name}"
+      end
+
+      def notes(input_path, output_path)
+        say "\nkey: #{color(key, :info)}\niv:  #{color(iv,  :info)}" if print_key?
+        empty_line
+        say "Make sure to add #{color(output_path, :info)} to the git repository."
+        say "Make sure #{color("not", :underline)} to add #{color(input_path, :info)} to the git repository." if input_path != '-'
+        say "Commit all changes to your #{color('.travis.yml', :info)}."
+      end
+
+      def transcode(input_path)
+        description = "stdin#{' (waiting for input)' if $stdin.tty?}" if input_path == '-'
+        say "#{decrypt ? "de" : "en"}crypting #{color(description || input_path, :info)} for #{color(slug, :info)}"
+
+        data     = input_path == '-' ? $stdin.read : File.binread(input_path)
+        aes      = OpenSSL::Cipher.new('AES-256-CBC')
+        decrypt  ? aes.decrypt : aes.encrypt
+        aes.key  = [key].pack('H*')
+        aes.iv   = [iv].pack('H*')
+
+        aes.update(data) + aes.final
+      end
+
+      def decrypt_to_for(input_path)
+        return if input_path == '-'
+        if input_path.start_with? Dir.home
+          input_path.sub(Dir.home, '~')
+        else
+          input_path
+        end
+      end
+
+      def escape_path(path)
+        Shellwords.escape(path).sub(/^\\~\//, '~\/')
+      end
+
+      def output_path_for(input_path)
+        case input_path
+        when '-'           then return '-'
+        when /^(.+)\.enc$/ then return $1 if     decrypt?
+        when /^(.+)\.dec$/ then return $1 unless decrypt?
+        end
+
+        if interactive? and input_path =~ /(\.enc|\.dec)$/
+          exit 1 unless danger_zone? "File extension of input file is #{color($1, :info)}, are you sure that is correct?"
+        end
+
+        "#{input_path}.#{decrypt ? 'dec' : 'enc'}"
+      end
+    end
+  end
+end
+
+__END__
+Please add the following to your build script (<[[ color('before_install', :info) ]]> stage in your <[[ color('.travis.yml', :info) ]]>, for instance):
+
+    %s
+
+Pro Tip: You can add it automatically by running with <[[ color('--add', :info) ]]>.

data/lib/travis/cli/endpoint.rb

@@ -0,0 +1,35 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class Endpoint < ApiCommand
+      description "displays or changes the API endpoint"
+
+      skip :authenticate
+      on '--drop-default', 'delete stored default endpoint'
+      on '--set-default', 'store endpoint as global default'
+      on '--github', 'display github endpoint'
+
+      def run_github
+        error "--github cannot be combined with --drop-default" if drop_default?
+        error "--github cannot be combined with --set-default" if set_default?
+        load_gh
+        say github_endpoint.to_s, "GitHub endpoint: %s"
+      end
+
+      def run_travis
+        if drop_default? and was = config['default_endpoint']
+          config.delete('default_endpoint')
+          say was, "default API endpoint dropped (was %s)"
+        else
+          config['default_endpoint'] = api_endpoint if set_default?
+          say api_endpoint, "API endpoint: %s#{" (stored as default)" if set_default?}"
+        end
+      end
+
+      def run
+        github? ? run_github : run_travis
+      end
+    end
+  end
+end

data/lib/travis/cli/env.rb

@@ -0,0 +1,66 @@
+require 'travis/cli'
+require 'shellwords'
+
+module Travis
+  module CLI
+    class Env < RepoCommand
+      on('-P', '--[no-]public',   'make new values public')
+      on('-p', '--[no-]private',  'make new values private') { |c,v| c.public = !v }
+      on('-u', '--[no-]unescape', 'do not escape values')
+      on('-f', '--force',         'do not ask for confirmation when clearing out all variables')
+
+      description "show or modify build environment variables"
+      subcommands :list, :set, :unset, :copy, :clear
+
+      def setup
+        super
+        authenticate
+        error "not allowed to access environment variables for #{color(repository.slug, :bold)}" unless repository.admin?
+      end
+
+      def set(name, value)
+        options ||= { :public => public } if public != nil
+        say color('[+] ', [:green, :bold]) + "setting environment variable #{color "$#{name}", :info}"
+        value = Shellwords.escape(value) unless unescape?
+        env_vars.upsert(name, value, options || {})
+      end
+
+      def copy(*names)
+        names.each do |name|
+          if ENV.include? name
+            set(name, ENV[name])
+          else
+            warn "missing in current environment: #{color "$#{name}", :bold}"
+          end
+        end
+      end
+
+      def unset(*names)
+        remove_vars { |var| names.include? var.name }
+      end
+
+      def clear
+        exit   if env_vars.empty?
+        exit 1 if interactive? and not force? and not danger_zone? "Clear out all env variables for #{color(repository.slug, :bold)}?"
+        remove_vars
+      end
+
+      def remove_vars
+        env_vars.each do |var|
+          next if block_given? and not yield(var)
+          say color('[x] ', [:red, :bold]) + "removing environment variable #{color "$#{var.name}", :info}"
+          var.delete
+        end
+      end
+
+      def list
+        say color("# environment variables for #{color repository.slug, :bold}", :info)
+        env_vars.each { |v| say "#{v.name}=" << color(v.value || "[secure]", :bold) }
+      end
+
+      def env_vars
+        repository.env_vars
+      end
+    end
+  end
+end

data/lib/travis/cli/help.rb

@@ -0,0 +1,23 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class Help < Command
+      description "helps you out when in dire need of information"
+
+      def run(command = nil)
+        if command
+          say CLI.command(command).new.help
+        else
+          say "Usage: travis COMMAND ...\n\nAvailable commands:\n\n"
+          commands.each { |c| say "\t#{color(c.command_name, :command).ljust(22)} #{color(c.description, :info)}" }
+          say "\nrun `#$0 help COMMAND` for more infos"
+        end
+      end
+
+      def commands
+        CLI.commands.sort_by { |c| c.command_name }
+      end
+    end
+  end
+end

data/lib/travis/cli/history.rb

@@ -0,0 +1,49 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class History < RepoCommand
+      description "displays a projects build history"
+
+      on('-a', '--after BUILD', 'Only show history after a given build number')
+      on('-p', '--pull-request NUMBER', 'Only show history for the given Pull Request')
+      on('-b', '--branch BRANCH', 'Only show history for the given branch')
+      on('-l', '--limit LIMIT', 'Maximum number of history items')
+      on('-d', '--date', 'Include date in output')
+      on('-c', '--committer', 'Include committer in output')
+      on('--[no-]all', 'Display all history items')
+
+      def run
+        countdown = Integer(limit || 10) unless all?
+        params    = { :after_number => after } if after
+        repository.each_build(params) do |build|
+          next unless display? build
+          display(build)
+
+          if countdown
+            countdown -= 1
+            break if countdown < 1
+          end
+        end
+      end
+
+      private
+
+        def display?(build)
+          return build.pr_number   == pull_request if pull_request
+          return build.branch_info == branch       if branch
+          true
+        end
+
+        def display(build)
+          say [
+            date? && color(formatter.time(build.finished_at || build.started_at), build.color),
+            color("##{build.number} #{build.state}:".ljust(16), [build.color, :bold]),
+            color("#{build.branch_info}", :info),
+            committer? && build.commit.author_name.ljust(25),
+            build.commit.subject
+          ].compact.join(" ").strip + "\n"
+        end
+    end
+  end
+end

data/lib/travis/cli/init.rb

@@ -0,0 +1,82 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class Init < Enable
+      LANGUAGE_MAPPING = {
+        "node"         => "node_js",
+        "node.js"      => "node_js",
+        "javascript"   => "node_js",
+        "coffeescript" => "node_js",
+        "c++"          => "cpp",
+        "obj-c"        => "objective-c"
+      }
+
+      description "generates a .travis.yml and enables the project"
+
+      on('-f', '--force', 'override .travis.yml if it already exists')
+      on('-k', '--skip-enable', 'do not enable project, only add .travis.yml')
+      on('-p', '--print-conf', 'print generated config instead of writing to file')
+
+      options = %w[
+        script before_script after_script after_success install before_install
+        compiler otp_release go jdk node_js perl php python rvm scala
+        env gemfile
+      ]
+
+      options.each do |option|
+        on "--#{option.gsub('_', '-')} VALUE", "sets #{option} option in .travis.yml (can be used more than once)" do |c, value|
+          c.custom_config[option] &&= Array(c.custom_config[option]) << value
+          c.custom_config[option] ||= value
+        end
+      end
+
+      attr_writer :travis_config
+
+      def self.languages
+        Dir[asset_path('init/*.yml')].map { |f| File.basename(f, '.yml') }.sort
+      end
+
+      def help
+        super("Available languages: #{self.class.languages.join(", ")}\n\n")
+      end
+
+      def run(language = nil, file = '.travis.yml')
+        error "#{file} already exists, use --force to override" if File.exist?(file) and not force? and not print_conf?
+        language ||= ask('Main programming language used: ') { |q| q.default = detect_language }
+        self.travis_config = template(language).merge(custom_config)
+
+        if print_conf?
+          puts travis_config.to_yaml
+        else
+          save_travis_config(file)
+          say("#{file} file created!")
+        end
+
+        super() unless skip_enable?
+      end
+
+      def custom_config
+        @custom_config ||= {}
+      end
+
+      private
+
+        def template_name(language)
+          asset_path "init/#{language}.yml"
+        end
+
+        def template(language)
+          language = language.to_s.downcase
+          language = LANGUAGE_MAPPING[language] || language
+          file = template_name(language)
+          error "unknown language #{language}" unless File.exist? file
+          YAML.load_file(file)
+        end
+
+        def detect_language
+          repository.github_language || "Ruby"
+        end
+    end
+  end
+end

data/lib/travis/cli/lint.rb

@@ -0,0 +1,49 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class Lint < ApiCommand
+      description 'display warnings for a .travis.yml'
+      on '-q', '--[no-]quiet',     'does not print anything'
+      on '-x', '--[no-]exit-code', 'sets the exit code to 1 if there are warning'
+
+      def run(file = nil)
+        file ||= '.travis.yml' if $stdin.tty? or $stdin.eof?
+
+        if file and file != '-'
+          debug "reading #{file}"
+          error "file does not exist: #{color(file, :bold)}" unless File.exist? file
+          error "cannot read #{color(file, :bold)}"          unless File.readable? file
+          content = File.read(file)
+        else
+          debug "reading stdin"
+          file    = 'STDIN'
+          content = $stdin.read
+        end
+
+        lint = session.lint(content)
+
+        unless quiet?
+          if lint.ok?
+            say "valid", color("Hooray, #{file} looks %s :)", :success)
+          else
+            say "Warnings for #{color(file, :info)}:"
+            lint.warnings.each do |warning|
+              say color('[x]', [:red, :bold]) + " "
+              if warning.key.any?
+                say [
+                  color('in ', :info),
+                  color(warning.key.join('.'), [:info, :bold, :underline]),
+                  color(' section:', :info), ' '
+                ].join
+              end
+              say warning.message.gsub(/"(.*?)"/) { color($1, [:info, :important]) }
+            end
+          end
+        end
+
+        exit 1 if lint.warnings? and exit_code?
+      end
+    end
+  end
+end

data/lib/travis/cli/login.rb

@@ -0,0 +1,76 @@
+require 'travis/cli'
+require 'travis/tools/github'
+require 'json'
+
+module Travis
+  module CLI
+    class Login < ApiCommand
+      skip :authenticate
+
+      description "authenticates against the API and stores the token"
+      on('-g', '--github-token TOKEN', 'identify by GitHub token')
+      on('-T', '--auto-token',         'try to figure out who you are automatically (might send another apps token to Travis, token will not be stored)')
+      on('-p', '--auto-password',      'try to load password from OSX keychain (will not be stored)')
+      on('-a', '--auto',               'shorthand for --auto-token --auto-password') { |c| c.auto_token = c.auto_password = true }
+      on('-u', '--user LOGIN',         'user to log in as') { |c,n| c.user_login = n }
+      on('-M', '--no-manual',          'do not use interactive login')
+      on('--list-github-token',        'instead of actually logging in, list found GitHub tokens')
+      on('--skip-token-check',         'don\'t verify the token with github')
+
+      attr_accessor :user_login
+
+      def list_token
+        github.after_tokens = proc { }
+        github.each_token do |token|
+          say token
+        end
+      end
+
+      def login
+        session.access_token = nil
+        github.with_token do |token|
+          endpoint_config['access_token'] = github_auth(token)
+          error("user mismatch: logged in as %p instead of %p" % [user.login, user_login]) if user_login and user.login != user_login
+          error("#{user.login} has not granted Travis CI the required permissions, please log in via #{session.config['host']}") unless user.correct_scopes?
+          success("Successfully logged in as #{user.login}!")
+        end
+      end
+
+      def run
+        list_github_token ? list_token : login
+      end
+
+      def github
+        @github ||= begin
+          load_gh
+          Tools::Github.new(session.config['github']) do |g|
+            g.note          = "temporary token to identify with the travis command line client against #{api_endpoint}"
+            g.manual_login  = no_manual.nil?
+            g.explode       = explode?
+            g.github_token  = github_token
+            g.auto_token    = auto_token
+            g.auto_password = auto_password
+            g.github_login  = user_login
+            g.check_token   = !skip_token_check?
+            g.drop_token    = true
+            g.ask_login     = proc { ask("Username: ") }
+            g.ask_password  = proc { |user| ask("Password for #{user}: ") { |q| q.echo = "*" } }
+            g.ask_otp       = proc { |user| ask("Two-factor authentication code for #{user}: ") }
+            g.login_header  = proc { login_header }
+            g.debug         = proc { |log| debug(log) }
+            g.after_tokens  = proc { g.explode = true and error("no suitable github token found") }
+          end
+        end
+      end
+
+      def login_header
+        say "We need your #{color("GitHub login", :important)} to identify you."
+        say "This information will #{color("not be sent to Travis CI", :important)}, only to #{color(github_endpoint.host, :info)}."
+        say "The password will not be displayed."
+        empty_line
+        say "Try running with #{color("--github-token", :info)} or #{color("--auto", :info)} if you don't want to enter your password anyway."
+        empty_line
+      end
+    end
+  end
+end

data/lib/travis/cli/logout.rb

@@ -0,0 +1,14 @@
+require 'travis/cli'
+
+module Travis
+  module CLI
+    class Logout < ApiCommand
+      description "deletes the stored API token"
+
+      def run
+        endpoint_config.delete('access_token')
+        success("Successfully logged out!")
+      end
+    end
+  end
+end

data/lib/travis/cli/logs.rb

@@ -0,0 +1,65 @@
+require 'travis/cli'
+require 'travis/tools/safe_string'
+require 'travis/tools/system'
+
+module Travis
+  module CLI
+    class Logs < RepoCommand
+      attr_accessor :delete, :reason
+      description "streams test logs"
+      on('-d', '--delete [REASON]', 'remove logs') { |c, reason| c.delete, c.reason = true, reason }
+      on('-f', '--force', 'do not ask user to confirm deleting the logs')
+      on('--[no-]stream', 'only print current logs, do not stream')
+
+      def setup
+        super
+        check_websocket
+      end
+
+      include Tools::SafeString
+      def run(number = last_build.number)
+        self.stream = true if stream.nil?
+        job ||= job(number) || error("no such job ##{number}")
+        delete ? delete_log(job) : display_log(job)
+      end
+
+      def delete_log(job)
+        unless force?
+          error "not deleting logs without --force" unless interactive?
+          error "aborted" unless danger_zone? "Do you really want to delete the build log for #{color(job.inspect_info, :underline)}?"
+        end
+
+        warn "deleting log for #{color(job.inspect_info, [:bold, :info])}"
+        job.delete_log(reason || {})
+      end
+
+      def display_log(job)
+        info "displaying logs for #{color(job.inspect_info, [:bold, :info])}"
+        return print_log(job.log.body) unless stream?
+        job.log.body { |part| print_log(part) }
+      ensure
+        print "\e[0m" if interactive?
+      end
+
+      def print_log(part)
+        print interactive? ? encoded(part) : clean(part)
+      end
+
+      private
+
+        def job(number)
+          number = last_build.number + number if number.start_with? '.'
+          job    = super(number) || build(number) || branch(number)
+          job    = job.jobs.first if job.respond_to? :jobs
+          job
+        end
+
+        def check_websocket
+          require 'websocket-native' if stream?
+        rescue LoadError => e
+          raise e if e.respond_to?(:path) and e.path != 'websocket-native'
+          info "speed up log streaming by installing the websocket-native gem"
+        end
+    end
+  end
+end