@automattic/vip 4.1.2 → 4.1.4

package/packaging/macos/verify-pkg.py

@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+"""Verify a built PKG's payload without installing it (including signed PKGs)."""
+import argparse
+from pathlib import Path
+import subprocess
+import tempfile
+import xml.etree.ElementTree as ET
+
+
+def verify(package, numeric_version, arch, cli, helper):
+    repo = Path(__file__).resolve().parents[2]
+    with tempfile.TemporaryDirectory() as tmp:
+        expanded = Path(tmp) / "expanded"
+        subprocess.run(["pkgutil", "--expand-full", str(package), str(expanded)], check=True)
+        distribution = ET.parse(expanded / "Distribution")
+        expected_arch = {"arm64": "arm64", "amd64": "x86_64"}[arch]
+        if distribution.find("options").get("hostArchitectures") != expected_arch:
+            raise ValueError("Incorrect installer architecture restriction")
+        domains = distribution.find("domains")
+        if domains is None or domains.attrib != {"enable_anywhere": "false", "enable_currentUserHome": "false", "enable_localSystem": "true"}:
+            raise ValueError("Installer must target the local system volume only")
+        component = expanded / "vip-cli.pkg"
+        info = ET.parse(component / "PackageInfo").getroot()
+        if (info.get("identifier"), info.get("version"), info.get("install-location")) != ("com.automattic.vip-cli", numeric_version, "/"):
+            raise ValueError("Incorrect package identity/version/install location")
+        prefix = "usr/local/lib/vip-cli/"
+        expected = {
+            prefix + "bin/vip-next": Path(cli).read_bytes(),
+            prefix + "bin/go-search-replace": Path(helper).read_bytes(),
+            prefix + "bin/.vip-next-installer.json": b'{"schema":1,"manager":"pkg"}\n',
+            prefix + "package-version": (numeric_version + "\n").encode(),
+            prefix + "LICENSE": (repo / "LICENSE").read_bytes(),
+            prefix + "uninstall.sh": (repo / "packaging/macos/uninstall.sh").read_bytes(),
+            "etc/paths.d/vip-cli": b"/usr/local/lib/vip-cli/bin\n",
+        }
+        payload = component / "Payload"
+        files = {}
+        for entry in payload.rglob("*"):
+            if entry.is_symlink():
+                raise ValueError("Unexpected symlink in installer payload")
+            if entry.is_file():
+                files[entry.relative_to(payload).as_posix()] = entry.read_bytes()
+        if files != expected:
+            raise ValueError("Installer payload differs from the signed inputs or expected files")
+        for executable in ["bin/vip-next", "bin/go-search-replace", "uninstall.sh"]:
+            if not (payload / prefix / executable).stat().st_mode & 0o111:
+                raise ValueError("Installer payload is missing executable permissions")
+        preinstall = (repo / "packaging/macos/preinstall").read_text().replace("@PACKAGE_VERSION@", numeric_version)
+        if (component / "Scripts/preinstall").read_text() != preinstall:
+            raise ValueError("Installer preinstall script differs from expected version")
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("package")
+    parser.add_argument("numeric_version")
+    parser.add_argument("arch", choices=["amd64", "arm64"])
+    parser.add_argument("cli")
+    parser.add_argument("helper")
+    args = parser.parse_args()
+    verify(args.package, args.numeric_version, args.arch, args.cli, args.helper)

package/packaging/windows/build-msi.ps1

@@ -0,0 +1,153 @@
+#Requires -Version 5.1
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$Version,
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$CLI,
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$Helper,
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$Output
+)
+
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version Latest
+
+$wixVersion = '5.0.2'
+$uiExtension = "WixToolset.UI.wixext/$wixVersion"
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$wixSource = Join-Path $PSScriptRoot 'vip-next.wxs'
+$licenseSource = Join-Path $repoRoot 'LICENSE'
+$tempRoot = Join-Path ([IO.Path]::GetTempPath()) ("vip-cli-msi-build-{0}" -f [Guid]::NewGuid().ToString('N'))
+$stageDir = Join-Path $tempRoot 'stage'
+$toolDir = Join-Path $tempRoot 'tools'
+$originalDotnetRollForward = [Environment]::GetEnvironmentVariable('DOTNET_ROLL_FORWARD', 'Process')
+
+function Resolve-InputFile([string]$Path, [string]$Label) {
+  if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) {
+    throw "$Label does not exist or is not a file: $Path"
+  }
+  return (Resolve-Path -LiteralPath $Path).ProviderPath
+}
+
+function Invoke-External([string]$Command, [string[]]$Arguments, [string]$Failure) {
+  & $Command @Arguments
+  if ($LASTEXITCODE -ne 0) { throw "$Failure (exit $LASTEXITCODE)" }
+}
+
+function Convert-LicenseToRtf([string]$Source, [string]$Destination) {
+  $body = [IO.File]::ReadAllText($Source)
+  $body = $body.Replace('\', '\\').Replace('{', '\{').Replace('}', '\}')
+  $body = $body.Replace("`r`n", "`n").Replace("`r", "`n").Replace("`n", "\par`r`n")
+  $rtf = '{\rtf1\ansi\deff0{\fonttbl{\f0\fnil\fcharset0 Segoe UI;}}\viewkind4\uc1\pard\f0\fs18 ' + $body + '}'
+  [IO.File]::WriteAllText($Destination, $rtf, (New-Object Text.ASCIIEncoding))
+}
+
+function Get-ProductCode([string]$NumericVersion) {
+  $seed = "vip-cli-msi:{9D089A27-73D9-4A31-91E1-A21A37ED94F1}:$NumericVersion"
+  $sha256 = [Security.Cryptography.SHA256]::Create()
+  try {
+    $hash = $sha256.ComputeHash([Text.Encoding]::UTF8.GetBytes($seed))
+  } finally {
+    $sha256.Dispose()
+  }
+  $hash[6] = ($hash[6] -band 0x0f) -bor 0x50
+  $hash[8] = ($hash[8] -band 0x3f) -bor 0x80
+  $hex = ([BitConverter]::ToString($hash, 0, 16)).Replace('-', '')
+  return '{' + $hex.Substring(0, 8) + '-' + $hex.Substring(8, 4) + '-' +
+    $hex.Substring(12, 4) + '-' + $hex.Substring(16, 4) + '-' + $hex.Substring(20, 12) + '}'
+}
+
+$cliPath = Resolve-InputFile $CLI 'CLI executable'
+$helperPath = Resolve-InputFile $Helper 'Helper executable'
+$licensePath = Resolve-InputFile $licenseSource 'Repository license'
+$wixSourcePath = Resolve-InputFile $wixSource 'WiX source'
+
+$outputFullPath = [IO.Path]::GetFullPath($Output)
+$outputDirectory = Split-Path -Parent $outputFullPath
+if (-not $outputDirectory) { $outputDirectory = (Get-Location).ProviderPath }
+New-Item -ItemType Directory -Force -Path $outputDirectory | Out-Null
+$outputDirectory = (Resolve-Path -LiteralPath $outputDirectory).ProviderPath
+$outputFullPath = Join-Path $outputDirectory (Split-Path -Leaf $outputFullPath)
+
+$dotnet = Get-Command dotnet -ErrorAction SilentlyContinue
+if (-not $dotnet) {
+  throw 'Building the MSI requires the .NET 8 SDK or newer. Install it and rerun packaging/windows/build-msi.ps1.'
+}
+$dotnetVersion = (& $dotnet.Source --version | Out-String).Trim()
+if ($LASTEXITCODE -ne 0 -or $dotnetVersion -notmatch '^(\d+)\.') {
+  throw 'Unable to determine the installed .NET SDK version.'
+}
+if ([int]$Matches[1] -lt 8) {
+  throw "Building the MSI requires the .NET 8 SDK or newer; found $dotnetVersion."
+}
+
+$go = Get-Command go -ErrorAction SilentlyContinue
+if (-not $go) { throw 'Building the MSI requires Go to resolve the shared numeric installer version.' }
+
+New-Item -ItemType Directory -Force -Path $stageDir, $toolDir | Out-Null
+try {
+  Push-Location $repoRoot
+  try {
+    $numericVersion = (& $go.Source run -mod=mod ./cmd/installer-version $Version | Out-String).Trim()
+    if ($LASTEXITCODE -ne 0 -or -not $numericVersion) {
+      throw "installer-version failed for $Version"
+    }
+  } finally {
+    Pop-Location
+  }
+
+  $stagedCli = Join-Path $stageDir 'vip-next.exe'
+  $stagedHelper = Join-Path $stageDir 'go-search-replace.exe'
+  Copy-Item -LiteralPath $cliPath -Destination $stagedCli
+  Copy-Item -LiteralPath $helperPath -Destination $stagedHelper
+  if ((Get-FileHash -LiteralPath $cliPath -Algorithm SHA256).Hash -ne
+      (Get-FileHash -LiteralPath $stagedCli -Algorithm SHA256).Hash) {
+    throw 'Staging modified the CLI executable bytes.'
+  }
+  if ((Get-FileHash -LiteralPath $helperPath -Algorithm SHA256).Hash -ne
+      (Get-FileHash -LiteralPath $stagedHelper -Algorithm SHA256).Hash) {
+    throw 'Staging modified the helper executable bytes.'
+  }
+
+  Copy-Item -LiteralPath $licensePath -Destination (Join-Path $stageDir 'LICENSE.txt')
+  [IO.File]::WriteAllText(
+    (Join-Path $stageDir '.vip-next-installer.json'),
+    '{"schema":1,"manager":"msi"}',
+    (New-Object Text.UTF8Encoding($false))
+  )
+  $licenseRtf = Join-Path $stageDir 'LICENSE.rtf'
+  Convert-LicenseToRtf $licensePath $licenseRtf
+
+  $env:DOTNET_ROLL_FORWARD = 'Major'
+  Invoke-External $dotnet.Source @(
+    'tool', 'install', 'wix', '--tool-path', $toolDir, '--version', $wixVersion
+  ) 'Installing the pinned WiX tool failed'
+  $wix = Join-Path $toolDir 'wix.exe'
+  if (-not (Test-Path -LiteralPath $wix -PathType Leaf)) {
+    throw "Pinned WiX executable was not installed at $wix"
+  }
+
+  Push-Location $tempRoot
+  try {
+    Invoke-External $wix @('extension', 'add', $uiExtension) 'Installing the pinned WiX UI extension failed'
+    Invoke-External $wix @(
+      'build', $wixSourcePath,
+      '-arch', 'x64',
+      '-ext', $uiExtension,
+      '-d', "NumericVersion=$numericVersion",
+      '-d', "ProductCode=$(Get-ProductCode $numericVersion)",
+      '-d', "StageDir=$stageDir",
+      '-d', "LicenseRtf=$licenseRtf",
+      '-out', $outputFullPath
+    ) 'WiX MSI build failed'
+  } finally {
+    Pop-Location
+  }
+
+  if (-not (Test-Path -LiteralPath $outputFullPath -PathType Leaf)) {
+    throw "WiX reported success but did not create $outputFullPath"
+  }
+} finally {
+  [Environment]::SetEnvironmentVariable('DOTNET_ROLL_FORWARD', $originalDotnetRollForward, 'Process')
+  if (Test-Path -LiteralPath $tempRoot) {
+    Remove-Item -LiteralPath $tempRoot -Recurse -Force
+  }
+}

package/packaging/windows/test-msi.ps1

@@ -0,0 +1,225 @@
+#Requires -Version 5.1
+[CmdletBinding()]
+param()
+
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version Latest
+
+if ([Environment]::OSVersion.Platform -ne [PlatformID]::Win32NT) {
+  throw 'The MSI lifecycle test must run on a disposable Windows CI runner.'
+}
+if ($env:VIP_INSTALLER_E2E -ne '1' -or
+    $env:GITHUB_ACTIONS -notmatch '^(?i:true)$' -or
+    $env:RUNNER_ENVIRONMENT -notmatch '^(?i:github-hosted)$') {
+  throw 'Refusing to modify the host. This test requires VIP_INSTALLER_E2E=1 on a GitHub-hosted Actions runner.'
+}
+
+$identity = [Security.Principal.WindowsIdentity]::GetCurrent()
+$principal = New-Object Security.Principal.WindowsPrincipal($identity)
+if (-not $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {
+  throw 'The MSI lifecycle test requires an elevated disposable Windows CI runner.'
+}
+
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$buildScript = Join-Path $PSScriptRoot 'build-msi.ps1'
+$verifyScript = Join-Path $PSScriptRoot 'verify-msi.ps1'
+$installDir = Join-Path $env:ProgramFiles 'Automattic\VIP CLI'
+$markerPath = Join-Path $installDir '.vip-next-installer.json'
+$pathTarget = $installDir.TrimEnd('\')
+$initialMachinePath = [Environment]::GetEnvironmentVariable('Path', 'Machine')
+$tempRoot = Join-Path ([IO.Path]::GetTempPath()) ("vip-cli-msi-e2e-{0}" -f [Guid]::NewGuid().ToString('N'))
+$logsDir = Join-Path $tempRoot 'logs'
+$testInstalledProduct = $false
+
+function Test-PathContainsTarget([AllowNull()][string]$PathValue) {
+  if ($null -eq $PathValue) { return $false }
+  foreach ($entry in $PathValue.Split(';', [StringSplitOptions]::RemoveEmptyEntries)) {
+    if ([StringComparer]::OrdinalIgnoreCase.Equals($entry.Trim().TrimEnd('\'), $pathTarget)) {
+      return $true
+    }
+  }
+  return $false
+}
+
+function Get-VipCliUninstallEntries {
+  $roots = @(
+    'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
+    'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*'
+  )
+  return @(Get-ItemProperty -Path $roots -ErrorAction SilentlyContinue | Where-Object {
+    $displayName = $_.PSObject.Properties['DisplayName']
+    $installLocation = $_.PSObject.Properties['InstallLocation']
+    ($displayName -and $displayName.Value -eq 'VIP CLI') -or
+    ($installLocation -and $installLocation.Value -and
+      [StringComparer]::OrdinalIgnoreCase.Equals($installLocation.Value.TrimEnd('\'), $pathTarget))
+  })
+}
+
+function Invoke-MsiExec {
+  param(
+    [Parameter(Mandatory = $true)][ValidateSet('install', 'uninstall')][string]$Action,
+    [Parameter(Mandatory = $true)][string]$Target,
+    [Parameter(Mandatory = $true)][string]$Log,
+    [int[]]$ExpectedExitCodes = @(0)
+  )
+
+  $verb = if ($Action -eq 'install') { '/i' } else { '/x' }
+  $arguments = @($verb, "`"$Target`"", '/qn', '/norestart', '/l*v', "`"$Log`"")
+  $process = Start-Process -FilePath "$env:SystemRoot\System32\msiexec.exe" `
+    -ArgumentList $arguments `
+    -Wait -PassThru
+  if ($ExpectedExitCodes -notcontains $process.ExitCode) {
+    if (Test-Path -LiteralPath $Log) { Get-Content -LiteralPath $Log | Write-Host }
+    throw "msiexec $Action exited $($process.ExitCode); expected $($ExpectedExitCodes -join ', '). Log: $Log"
+  }
+  return $process.ExitCode
+}
+
+function New-FixtureExecutable {
+  param(
+    [Parameter(Mandatory = $true)][string]$Name,
+    [Parameter(Mandatory = $true)][string]$Version,
+    [Parameter(Mandatory = $true)][string]$Output
+  )
+
+  Push-Location $repoRoot
+  try {
+    $env:CGO_ENABLED = '0'
+    $env:GOOS = 'windows'
+    $env:GOARCH = 'amd64'
+    & go build -buildvcs=false -trimpath `
+      -ldflags "-s -w -X main.fixtureVersion=$Version" `
+      -o $Output ./testdata/installer-fixture
+    if ($LASTEXITCODE -ne 0) { throw "go build failed for $Name $Version" }
+  } finally {
+    Pop-Location
+  }
+}
+
+function Assert-InstalledPayload {
+  param(
+    [Parameter(Mandatory = $true)][string]$Version,
+    [Parameter(Mandatory = $true)][string]$ExpectedCli,
+    [Parameter(Mandatory = $true)][string]$ExpectedHelper
+  )
+
+  $installedCli = Join-Path $installDir 'vip-next.exe'
+  $installedHelper = Join-Path $installDir 'go-search-replace.exe'
+  foreach ($pair in @(@($installedCli, $ExpectedCli), @($installedHelper, $ExpectedHelper))) {
+    if (-not (Test-Path -LiteralPath $pair[0] -PathType Leaf)) { throw "Missing installed file: $($pair[0])" }
+    $actualHash = (Get-FileHash -LiteralPath $pair[0] -Algorithm SHA256).Hash
+    $expectedHash = (Get-FileHash -LiteralPath $pair[1] -Algorithm SHA256).Hash
+    if ($actualHash -ne $expectedHash) { throw "Installed bytes differ for $($pair[0])" }
+  }
+
+  $cliVersion = (& $installedCli --version | Out-String).Trim()
+  if ($LASTEXITCODE -ne 0 -or $cliVersion -ne $Version) {
+    throw "Unexpected vip-next version output: $cliVersion"
+  }
+  $helperVersion = (& $installedHelper --version | Out-String).Trim()
+  if ($LASTEXITCODE -ne 0 -or $helperVersion -ne "${Version}-helper") {
+    throw "Unexpected go-search-replace version output: $helperVersion"
+  }
+
+  if ((Get-Content -LiteralPath $markerPath -Raw) -ne '{"schema":1,"manager":"msi"}') {
+    throw 'Installer marker contents do not match the ownership contract.'
+  }
+  $installedLicense = Join-Path $installDir 'LICENSE.txt'
+  if (-not (Test-Path -LiteralPath $installedLicense -PathType Leaf) -or
+      (Get-FileHash -LiteralPath $installedLicense -Algorithm SHA256).Hash -ne
+      (Get-FileHash -LiteralPath (Join-Path $repoRoot 'LICENSE') -Algorithm SHA256).Hash) {
+    throw 'Installed license does not match the repository license.'
+  }
+  if (-not (Test-PathContainsTarget ([Environment]::GetEnvironmentVariable('Path', 'Machine')))) {
+    throw "The system PATH does not contain $installDir"
+  }
+  $owner = (& $installedCli --installer-owner | Out-String).Trim()
+  if ($LASTEXITCODE -ne 0 -or $owner -notmatch '(?i)\.msi') {
+    throw "Installed fixture did not report MSI ownership instructions: $owner"
+  }
+}
+
+if (Get-VipCliUninstallEntries) { throw 'Refusing to run with an existing VIP CLI MSI installation.' }
+if (Test-Path -LiteralPath $installDir) { throw "Refusing to run because $installDir already exists." }
+if (Test-Path -LiteralPath $markerPath) { throw "Refusing to run because $markerPath already exists." }
+if (Test-PathContainsTarget $initialMachinePath) { throw "Refusing to run because system PATH already contains $installDir." }
+if (-not (Get-Command go -ErrorAction SilentlyContinue)) { throw 'Go is required to build the lifecycle fixture executables.' }
+
+New-Item -ItemType Directory -Force -Path $logsDir | Out-Null
+
+try {
+  $versions = @('5.0.0-alpha.0', '5.0.0-alpha.1')
+  $artifacts = @{}
+  foreach ($version in $versions) {
+    $versionDir = Join-Path $tempRoot ($version -replace '[^A-Za-z0-9.-]', '-')
+    New-Item -ItemType Directory -Force -Path $versionDir | Out-Null
+    $cli = Join-Path $versionDir 'vip-next.exe'
+    $helper = Join-Path $versionDir 'go-search-replace.exe'
+    $msi = Join-Path $versionDir 'vip-next-windows-amd64.msi'
+    New-FixtureExecutable -Name 'vip-next' -Version $version -Output $cli
+    New-FixtureExecutable -Name 'go-search-replace' -Version "${version}-helper" -Output $helper
+    & $buildScript -Version $version -CLI $cli -Helper $helper -Output $msi
+    if ($LASTEXITCODE -ne 0) { throw "build-msi.ps1 failed for $version" }
+    & $verifyScript -MSI $msi -CLI $cli -Helper $helper
+    if ($LASTEXITCODE -ne 0) { throw "verify-msi.ps1 failed for $version" }
+    $artifacts[$version] = @{ CLI = $cli; Helper = $helper; MSI = $msi }
+  }
+
+  $alpha0 = $artifacts['5.0.0-alpha.0']
+  $alpha1 = $artifacts['5.0.0-alpha.1']
+  Invoke-MsiExec -Action install -Target $alpha0.MSI -Log (Join-Path $logsDir 'install-alpha.0.log')
+  $testInstalledProduct = $true
+  Assert-InstalledPayload -Version '5.0.0-alpha.0' -ExpectedCli $alpha0.CLI -ExpectedHelper $alpha0.Helper
+
+  Invoke-MsiExec -Action install -Target $alpha1.MSI -Log (Join-Path $logsDir 'upgrade-alpha.1.log')
+  Assert-InstalledPayload -Version '5.0.0-alpha.1' -ExpectedCli $alpha1.CLI -ExpectedHelper $alpha1.Helper
+
+  $downgradeExit = Invoke-MsiExec -Action install -Target $alpha0.MSI `
+    -Log (Join-Path $logsDir 'downgrade-alpha.0.log') -ExpectedExitCodes @(1603, 1638)
+  if ($downgradeExit -eq 0) { throw 'Downgrade unexpectedly succeeded.' }
+  Assert-InstalledPayload -Version '5.0.0-alpha.1' -ExpectedCli $alpha1.CLI -ExpectedHelper $alpha1.Helper
+
+  $entry = @(Get-VipCliUninstallEntries)
+  if ($entry.Count -ne 1 -or $entry[0].PSChildName -notmatch '^\{[0-9A-Fa-f-]{36}\}$') {
+    throw "Expected one uninstall registry entry, found $($entry.Count)."
+  }
+  Invoke-MsiExec -Action uninstall -Target $entry[0].PSChildName -Log (Join-Path $logsDir 'uninstall.log')
+  $testInstalledProduct = $false
+
+  foreach ($path in @(
+    (Join-Path $installDir 'vip-next.exe'),
+    (Join-Path $installDir 'go-search-replace.exe'),
+    (Join-Path $installDir 'LICENSE.txt'),
+    $markerPath
+  )) {
+    if (Test-Path -LiteralPath $path) { throw "Uninstall left managed file behind: $path" }
+  }
+  $finalMachinePath = [Environment]::GetEnvironmentVariable('Path', 'Machine')
+  if ($finalMachinePath -ne $initialMachinePath) {
+    throw 'Uninstall did not restore the exact initial system PATH.'
+  }
+  if (Get-VipCliUninstallEntries) { throw 'Uninstall registry entry remains after uninstall.' }
+} catch {
+  Get-ChildItem -LiteralPath $logsDir -Filter '*.log' -ErrorAction SilentlyContinue | ForEach-Object {
+    Write-Host "--- MSI log: $($_.FullName)"
+    Get-Content -LiteralPath $_.FullName | Write-Host
+  }
+  throw
+} finally {
+  if ($testInstalledProduct) {
+    $entries = @(Get-VipCliUninstallEntries)
+    foreach ($entry in $entries) {
+      if ($entry.PSChildName -match '^\{[0-9A-Fa-f-]{36}\}$') {
+        try {
+          Invoke-MsiExec -Action uninstall -Target $entry.PSChildName `
+            -Log (Join-Path $logsDir 'cleanup-uninstall.log') -ExpectedExitCodes @(0, 1605, 3010)
+        } catch {
+          Write-Warning "Cleanup uninstall failed: $_"
+        }
+      }
+    }
+  }
+  if (Test-Path -LiteralPath $tempRoot) {
+    Remove-Item -LiteralPath $tempRoot -Recurse -Force
+  }
+}

package/packaging/windows/verify-msi.ps1

@@ -0,0 +1,74 @@
+#Requires -Version 5.1
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$MSI,
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$CLI,
+  [Parameter(Mandatory = $true)][ValidateNotNullOrEmpty()][string]$Helper
+)
+
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version Latest
+
+if ([Environment]::OSVersion.Platform -ne [PlatformID]::Win32NT) {
+  throw 'MSI payload verification requires Windows and msiexec.'
+}
+
+function Resolve-InputFile([string]$Path, [string]$Label) {
+  if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) {
+    throw "$Label does not exist or is not a file: $Path"
+  }
+  return (Resolve-Path -LiteralPath $Path).ProviderPath
+}
+
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$msiPath = Resolve-InputFile $MSI 'MSI package'
+$cliPath = Resolve-InputFile $CLI 'CLI executable'
+$helperPath = Resolve-InputFile $Helper 'Helper executable'
+$licensePath = Resolve-InputFile (Join-Path $repoRoot 'LICENSE') 'Repository license'
+$initialMsiHash = (Get-FileHash -LiteralPath $msiPath -Algorithm SHA256).Hash
+$verifyRoot = Join-Path ([IO.Path]::GetTempPath()) ("vip-cli-msi-verify-{0}" -f [Guid]::NewGuid().ToString('N'))
+$extractRoot = Join-Path $verifyRoot 'image'
+$log = Join-Path $verifyRoot 'admin-extract.log'
+
+New-Item -ItemType Directory -Force -Path $extractRoot | Out-Null
+try {
+  $arguments = @('/a', "`"$msiPath`"", "TARGETDIR=`"$extractRoot`"", '/qn', '/l*v', "`"$log`"")
+  $process = Start-Process -FilePath "$env:SystemRoot\System32\msiexec.exe" `
+    -ArgumentList $arguments -Wait -PassThru
+  if ($process.ExitCode -ne 0) {
+    throw "MSI administrative extraction failed with exit $($process.ExitCode)"
+  }
+
+  $payloads = @(
+    @{ Name = 'vip-next.exe'; Expected = $cliPath },
+    @{ Name = 'go-search-replace.exe'; Expected = $helperPath },
+    @{ Name = 'LICENSE.txt'; Expected = $licensePath }
+  )
+  foreach ($payload in $payloads) {
+    $payloadFiles = @(Get-ChildItem -LiteralPath $extractRoot -Filter $payload.Name -File -Recurse)
+    if ($payloadFiles.Count -ne 1) {
+      throw "Expected one $($payload.Name) in MSI, found $($payloadFiles.Count)"
+    }
+    $actualHash = (Get-FileHash -LiteralPath $payloadFiles[0].FullName -Algorithm SHA256).Hash
+    $expectedHash = (Get-FileHash -LiteralPath $payload.Expected -Algorithm SHA256).Hash
+    if ($actualHash -ne $expectedHash) { throw "MSI payload bytes differ for $($payload.Name)" }
+  }
+
+  $markers = @(Get-ChildItem -LiteralPath $extractRoot -Filter '.vip-next-installer.json' -File -Recurse)
+  if ($markers.Count -ne 1 -or
+      (Get-Content -LiteralPath $markers[0].FullName -Raw) -ne '{"schema":1,"manager":"msi"}') {
+    throw 'MSI ownership marker is missing, duplicated, or invalid.'
+  }
+
+  $finalMsiHash = (Get-FileHash -LiteralPath $msiPath -Algorithm SHA256).Hash
+  if ($finalMsiHash -ne $initialMsiHash) {
+    throw 'MSI administrative extraction modified the source package.'
+  }
+} catch {
+  if (Test-Path -LiteralPath $log) { Get-Content -LiteralPath $log | Write-Host }
+  throw
+} finally {
+  if (Test-Path -LiteralPath $verifyRoot) {
+    Remove-Item -LiteralPath $verifyRoot -Recurse -Force
+  }
+}

package/packaging/windows/vip-next.wxs

@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs"
+     xmlns:ui="http://wixtoolset.org/schemas/v4/wxs/ui"
+     RequiredVersion="5.0.2">
+  <Package Name="VIP CLI"
+           Manufacturer="Automattic"
+           Version="$(NumericVersion)"
+           ProductCode="$(ProductCode)"
+           UpgradeCode="{9D089A27-73D9-4A31-91E1-A21A37ED94F1}"
+           Language="1033"
+           Scope="perMachine"
+           InstallerVersion="500"
+           Compressed="yes">
+    <SummaryInformation Description="WordPress VIP command-line interface"
+                        Manufacturer="Automattic" />
+    <MajorUpgrade AllowDowngrades="no"
+                  AllowSameVersionUpgrades="no"
+                  DowngradeErrorMessage="A newer version of VIP CLI is already installed."
+                  Schedule="afterInstallInitialize" />
+    <MediaTemplate EmbedCab="yes" CompressionLevel="high" />
+
+    <StandardDirectory Id="ProgramFiles64Folder">
+      <Directory Id="AutomatticFolder" Name="Automattic">
+        <Directory Id="INSTALLFOLDER" Name="VIP CLI">
+          <Component Id="VipNextExecutable" Bitness="always64">
+            <File Id="VipNextExecutableFile"
+                  Name="vip-next.exe"
+                  Source="$(StageDir)\vip-next.exe"
+                  KeyPath="yes" />
+          </Component>
+          <Component Id="SearchReplaceExecutable" Bitness="always64">
+            <File Id="SearchReplaceExecutableFile"
+                  Name="go-search-replace.exe"
+                  Source="$(StageDir)\go-search-replace.exe"
+                  KeyPath="yes" />
+          </Component>
+          <Component Id="InstallerMarker" Bitness="always64">
+            <File Id="InstallerMarkerFile"
+                  Name=".vip-next-installer.json"
+                  Source="$(StageDir)\.vip-next-installer.json"
+                  KeyPath="yes" />
+          </Component>
+          <Component Id="LicenseFile" Bitness="always64">
+            <File Id="LicenseTextFile"
+                  Name="LICENSE.txt"
+                  Source="$(StageDir)\LICENSE.txt"
+                  KeyPath="yes" />
+          </Component>
+          <Component Id="SystemPathEntry" Bitness="always64">
+            <Environment Id="VipCliSystemPath"
+                         Name="PATH"
+                         Value="[INSTALLFOLDER]"
+                         Action="set"
+                         Part="last"
+                         System="yes"
+                         Permanent="no" />
+            <RegistryValue Root="HKLM"
+                           Key="Software\Automattic\VIP CLI"
+                           Name="InstallLocation"
+                           Type="string"
+                           Value="[INSTALLFOLDER]"
+                           KeyPath="yes" />
+          </Component>
+        </Directory>
+      </Directory>
+    </StandardDirectory>
+
+    <Feature Id="Complete" Title="VIP CLI" Level="1">
+      <ComponentRef Id="VipNextExecutable" />
+      <ComponentRef Id="SearchReplaceExecutable" />
+      <ComponentRef Id="InstallerMarker" />
+      <ComponentRef Id="LicenseFile" />
+      <ComponentRef Id="SystemPathEntry" />
+    </Feature>
+
+    <ui:WixUI Id="WixUI_Minimal" />
+    <WixVariable Id="WixUILicenseRtf" Value="$(LicenseRtf)" />
+  </Package>
+</Wix>

package/testdata/installer-fixture/main.go

@@ -0,0 +1,40 @@
+// Tiny runnable payload for disposable native installer lifecycle tests.
+package main
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"path/filepath"
+	"runtime"
+
+	"github.com/Automattic/vip/internal/update"
+)
+
+var fixtureVersion = "fixture"
+
+func main() {
+	if len(os.Args) == 2 && os.Args[1] == "--version" {
+		fmt.Println(fixtureVersion)
+		return
+	}
+	if len(os.Args) == 2 && os.Args[1] == "--installer-owner" {
+		exe, err := os.Executable()
+		if err != nil {
+			panic(err)
+		}
+		helper := "go-search-replace"
+		if runtime.GOOS == "windows" {
+			helper += ".exe"
+		}
+		owner, err := update.InspectOwnership(context.Background(), update.Layout{CLI: exe, Helper: filepath.Join(filepath.Dir(exe), helper)})
+		if err != nil || !owner.Managed {
+			fmt.Fprintln(os.Stderr, "installer ownership missing:", err)
+			os.Exit(1)
+		}
+		fmt.Println(owner.Instructions)
+		return
+	}
+	fmt.Fprintln(os.Stderr, "expected --version or --installer-owner")
+	os.Exit(1)
+}

package/node_modules/@apollo/client/__cjs/utilities/internal/types/NoInfer.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"NoInfer.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}

package/node_modules/@apollo/client/__cjs/utilities/internal/types/NoInfer.d.cts

@@ -1,35 +0,0 @@
-/**
- * Helper type that allows using a type in a way that cannot be "widened" by inference on the value it is used on.
- *
- * This type was first suggested [in this Github discussion](https://github.com/microsoft/TypeScript/issues/14829#issuecomment-504042546).
- *
- * Example usage:
- *
- * ```ts
- * export function useQuery<
- *   TData = unknown,
- *   TVariables extends OperationVariables = OperationVariables,
- * >(
- *   query: DocumentNode | TypedDocumentNode<TData, TVariables>,
- *   options: QueryHookOptions<NoInfer<TData>, NoInfer<TVariables>> = {}
- * );
- * ```
- *
- * In this case, `TData` and `TVariables` should be inferred from `query`, but never widened from something in `options`.
- *
- * So, in this code example:
- *
- * ```ts
- * declare const typedNode: TypedDocumentNode<{ foo: string }, { bar: number }>;
- * const { variables } = useQuery(typedNode, {
- *   variables: { bar: 4, nonExistingVariable: "string" },
- * });
- * ```
- *
- * Without the use of `NoInfer`, `variables` would now be of the type `{ bar: number, nonExistingVariable: "string" }`.
- * With `NoInfer`, it will instead give an error on `nonExistingVariable`.
- *
- * @deprecated use the official `NoInfer` type instead.
- */
-export type NoInfer<T> = [T][T extends any ? 0 : never];
-//# sourceMappingURL=NoInfer.d.cts.map