@devdogsuga/devtools 0.1.16 → 0.1.18

package/dist/ci.js

@@ -47,6 +47,7 @@ import { loadRegistry } from "./env/discovery.js";
 import { positionals } from "./args.js";
 import { findCiCommand, subcommandCiNames } from "./commands.js";
 import { isWorkerApp, workerApps } from "./workers.js";
+import { ignoreClosedPipes } from "./pipes.js";
 import { captureDevtoolsError, initDevtoolsTelemetry, reportDevtoolsError, reportDevtoolsFailure, } from "./telemetry.js";
 function flagValue(rest, flag) {
     const index = rest.indexOf(flag);
@@ -288,6 +289,7 @@ export async function main(argv) {
     // any dispatch below. `[first, rest[0]]` names the step (`deploy
     // secrets-file`, `deploy platform`, …) as the `command` tag rather than just
     // "deploy", which every invocation here would otherwise share.
+    ignoreClosedPipes();
     initDevtoolsTelemetry([first, rest[0]].filter(Boolean).join(" ") || "help");
     if (!first || first === "--help" || first === "-h") {
         const steps = subcommandCiNames(["deploy"]);

package/dist/launch-ci.js

@@ -32,10 +32,12 @@ import { findRepoRoot } from "./repo/root.js";
 import { loadEnvLoad, loadEnvSession } from "./repo/peers.js";
 import { stripTierFlag } from "./launch.js";
 import { captureDevtoolsError, initDevtoolsTelemetry } from "./telemetry.js";
+import { ignoreClosedPipes } from "./pipes.js";
 export async function launchCi(argv) {
     const { explicit, rest } = stripTierFlag(argv);
     // See `launch.ts`'s matching call: early, so tier resolution and env entry
     // are covered too. Same tag `ci.ts`'s `main()` would compute.
+    ignoreClosedPipes();
     initDevtoolsTelemetry(rest.slice(0, 2).join(" ") || "help");
     const envLoad = await loadEnvLoad();
     const envSession = await loadEnvSession();

package/dist/launch.js

@@ -55,6 +55,7 @@ import { bareGroupStartPath } from "./menu.js";
 import { discoverRepoRoot, findRepoRoot, RepoNotFoundError } from "./repo/root.js";
 import { loadEnvLoad, loadEnvSession } from "./repo/peers.js";
 import { captureDevtoolsError, initDevtoolsTelemetry } from "./telemetry.js";
+import { ignoreClosedPipes } from "./pipes.js";
 import { errorMessage, unwrap } from "./ui.js";
 /**
  * Pulls a global `--tier <t>` out of `argv`, wherever it sits, leaving every
@@ -144,6 +145,7 @@ export async function launch(argv) {
     // resolving or entering the tier below is reported too. `main()`'s own
     // call is then a no-op (`initDevtoolsTelemetry` is idempotent) and this
     // tag, computed from the same argv `main()` receives, stands.
+    ignoreClosedPipes();
     initDevtoolsTelemetry(rest[0] ?? "menu");
     // Same test `cli.ts`'s own `main()` uses to decide whether a bare command
     // group resumes the wizard instead of dispatching — computed here too so

package/dist/pipes.d.ts

@@ -0,0 +1 @@
+export declare function ignoreClosedPipes(): void;

package/dist/pipes.js

@@ -0,0 +1,25 @@
+/**
+ * Keeps a closed stdout/stderr from crashing devtools.
+ *
+ * When whatever reads devtools' output goes away first (`devtools … | head`,
+ * or a wrapper that stopped listening), the next write fails with EPIPE. The
+ * stream emits that as an `'error'` event nobody handles, so Node throws it as
+ * an uncaught exception and Sentry files it as a fatal. Nobody is left to read
+ * the output, so dropping it is the right outcome. Any other stream error is
+ * rethrown and crashes as it did before.
+ *
+ * Idempotent, because `launch`, `launchCi` and `ci.ts`'s `main` can all run in
+ * one process.
+ */
+let installed = false;
+export function ignoreClosedPipes() {
+    if (installed)
+        return;
+    installed = true;
+    for (const stream of [process.stdout, process.stderr]) {
+        stream.on("error", (err) => {
+            if (err.code !== "EPIPE")
+                throw err;
+        });
+    }
+}

package/dist/telemetry.d.ts

@@ -13,6 +13,16 @@ export declare function devtoolsEnvironment(): "ci" | "local";
  * or between two invocations in the same process, still works).
  */
 export declare function devtoolsTelemetryEnabled(): boolean;
+/**
+ * Whether anyone is actually using devtools in this process. Package-registry
+ * scanners install every published version within minutes and run it in a
+ * throwaway sandbox (random `DESKTOP-xxxxxx` hosts, Firecracker VMs, a fuzzer
+ * that turns `process.exit` into a throw). Left unfiltered, each release filed
+ * the same two issues from them. They run with no DevDogsUGA checkout and no
+ * terminal. A person has at least one of the two (`setup` runs outside a
+ * checkout, but in a terminal), and CI always has a checkout.
+ */
+export declare function hasRealCaller(inRepo: boolean, isTTY: boolean): boolean;
 /**
  * Initializes `@sentry/node` for this CLI process. Safe to call more than
  * once (idempotent) and safe to call with no DSN configured (no-ops via

package/dist/telemetry.js

@@ -29,6 +29,7 @@
 import { readFileSync } from "node:fs";
 import * as Sentry from "@sentry/node";
 import { buildSentryOptions } from "@devdogsuga/telemetry";
+import { discoverRepoRoot } from "./repo/root.js";
 import { ownVersion } from "./version.js";
 /** The DSN baked into this build, or "" if there is none (a source run under
  * tsx, or a build made without `DEVTOOLS_SENTRY_DSN`). */
@@ -63,6 +64,18 @@ export function devtoolsEnvironment() {
 export function devtoolsTelemetryEnabled() {
     return process.env.DEVTOOLS_TELEMETRY !== "0";
 }
+/**
+ * Whether anyone is actually using devtools in this process. Package-registry
+ * scanners install every published version within minutes and run it in a
+ * throwaway sandbox (random `DESKTOP-xxxxxx` hosts, Firecracker VMs, a fuzzer
+ * that turns `process.exit` into a throw). Left unfiltered, each release filed
+ * the same two issues from them. They run with no DevDogsUGA checkout and no
+ * terminal. A person has at least one of the two (`setup` runs outside a
+ * checkout, but in a terminal), and CI always has a checkout.
+ */
+export function hasRealCaller(inRepo, isTTY) {
+    return inRepo || isTTY;
+}
 /**
  * Initializes `@sentry/node` for this CLI process. Safe to call more than
  * once (idempotent) and safe to call with no DSN configured (no-ops via
@@ -78,6 +91,9 @@ export function initDevtoolsTelemetry(command) {
     initialized = true;
     if (!devtoolsTelemetryEnabled())
         return;
+    if (!hasRealCaller(discoverRepoRoot() !== null, process.stdin.isTTY === true)) {
+        return;
+    }
     const options = buildSentryOptions({
         service: "devtools",
         environment: devtoolsEnvironment(),

package/env.ts

@@ -88,6 +88,27 @@ declare({
         example: "61d185ff419ef7bd5bd4b3d314081a49",
       },
     ),
+    // Read only by the deploy workflow's Sentry release step and the deploy
+    // smoke test, never by an app. Without the token, deploys skip the release
+    // and its source-map upload with a warning. With it, a failed upload fails
+    // the deploy.
+    SENTRY_AUTH_TOKEN: define(z.string().min(1).optional(), {
+      doc:
+        "A Sentry organization auth token. Deploys use it to create each " +
+        "release and upload its source maps, and the smoke test uses it to " +
+        "read cron check-ins. One token serves every environment.",
+      scope: "environment",
+      secrecy: "secret",
+      commented: true,
+    }),
+    SENTRY_ORG: define(z.string().min(1).optional(), {
+      doc:
+        "The Sentry organization slug the release step and smoke test " +
+        "address. Identifies, does not authorize.",
+      scope: "default",
+      secrecy: "public",
+      example: "devdogsuga",
+    }),
     // Developer-scoped even though the VALUE is org-wide: only operators
     // running `env pull/push/audit` on their own machines read it, no app and
     // no CI job does, and developer scope is what keeps a purely local input

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devdogsuga/devtools",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "private": false,
   "type": "module",
   "description": "Contributor CLI for a DevDogsUGA checkout: database, env, images, emails, cron, deploy. Ships built JS; run via `pnpm dlx @devdogsuga/devtools` (or the `devtools`/`devtools-ci` bins once installed) from inside a DevDogsUGA clone.",
@@ -66,9 +66,9 @@
     "@vitest/coverage-v8": "^4.1.11",
     "react": "^19.2.8",
     "vitest": "^4.1.11",
+    "@devdogsuga/db": "0.1.1",
     "@devdogsuga/brand": "0.1.2",
     "@devdogsuga/config": "0.1.1",
-    "@devdogsuga/db": "0.1.1",
     "@devdogsuga/env": "0.1.2",
     "@devdogsuga/events": "0.1.3"
   },