@imagina-build/ias-cli 0.1.1 → 0.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@imagina-build/ias-cli",
-    "version": "0.1.1",
+    "version": "0.1.2",
     "description": "The command line of Imagina Application Services (IAS): ias.json, OTA updates, internal distribution and the checks of a project.",
     "type": "module",
     "bin": {

package/src/commands/init/index.mjs

@@ -13,15 +13,18 @@ const PROFILE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,49}$/;
 
 /** Why a field of eas.json does not go to ias.json. */
 const LEFT_OUT = {
-  env: 'variables go to ias env (track 1D), sealed when they are secret',
-  credentialsSource: 'credentials go to the vault (ias credentials, track 1D)',
-  ascApiKeyPath: 'credentials go to the vault (ias credentials, track 1D)',
-  ascApiKeyId: 'credentials go to the vault (ias credentials, track 1D)',
-  ascApiKeyIssuerId: 'credentials go to the vault (ias credentials, track 1D)',
-  serviceAccountKeyPath: 'credentials go to the vault (ias credentials, track 1D)',
-  appleId: 'credentials go to the vault (ias credentials, track 1D)',
+  env: 'variables go to ias env, sealed when they are secret: ias migrate eas env brings those of EAS',
+  credentialsSource: 'credentials go to the vault: ias credentials import, or ias migrate eas',
+  ascApiKeyPath: 'credentials go to the vault: ias credentials import, or ias migrate eas',
+  ascApiKeyId: 'credentials go to the vault: ias credentials import, or ias migrate eas',
+  ascApiKeyIssuerId: 'credentials go to the vault: ias credentials import, or ias migrate eas',
+  serviceAccountKeyPath: 'credentials go to the vault: ias credentials import, or ias migrate eas',
+  appleId: 'credentials go to the vault: ias credentials import, or ias migrate eas',
 };
-const leftOutReason = (key) => LEFT_OUT[key] ?? 'ias.json has no field for it yet (phase 2 completes the build and submit profiles)';
+const leftOutReason = (key) => LEFT_OUT[key] ?? 'ias.json has no field for it (schema/ias.schema.json lists what its profiles take)';
+
+/** Why eas.json › cli stays out, and where the build numbers go: IAS keeps them on its server (ias version). */
+const cliReason = (cli) => `it configures eas-cli; IAS keeps the build numbers on its server, and autoIncrement takes the next: ${cli?.appVersionSource === 'remote' ? 'EAS keeps them now (appVersionSource remote), and ias migrate eas version brings them' : 'ias version set --from-app-json brings those of app.json'}`;
 
 /** The code of an application made from a slug: lowercase letters, digits and hyphens, up to 32. */
 const codeFromSlug = (slug) => (typeof slug === 'string' ? slug.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 32) : undefined);
@@ -114,7 +117,7 @@ export function initialConfig(dir, { app: appOption } = {}) {
     config.submit = submit;
     from.submit = 'eas.json';
   }
-  for (const key of Object.keys(eas ?? {}).filter((candidate) => !['build', 'submit'].includes(candidate))) leave(`eas.json › ${key}`, key === 'cli' ? 'it configures eas-cli (and with appVersionSource remote, EAS keeps the build numbers: phase 2 decides where IAS keeps them)' : leftOutReason(key));
+  for (const key of Object.keys(eas ?? {}).filter((candidate) => !['build', 'submit'].includes(candidate))) leave(`eas.json › ${key}`, key === 'cli' ? cliReason(eas.cli) : leftOutReason(key));
 
   const secrets = writtenSecrets(config);
   const errors = validate(config);

package/src/team-vault.mjs

@@ -32,7 +32,15 @@ export function vaultItem(context, project, server) {
   return { reference, vault: match[1], title: match[2] };
 }
 
-const op = (args, { env, input } = {}) => spawnSync('op', args, { encoding: 'utf8', env, input, maxBuffer: 1024 * 1024, stdio: ['pipe', 'pipe', 'pipe'] });
+/**
+ * Runs op. With `input`, through cat: Node gives a child a socket for stdin, not a pipe, and op only reads a template
+ * from a pipe ("provide the item category with '--category' flag" otherwise). The template never touches the disk nor
+ * the arguments.
+ */
+const op = (args, { env, input } = {}) => {
+  const [command, commandArgs] = input === undefined ? ['op', args] : ['/bin/sh', ['-c', 'cat | op "$@"', 'sh', ...args]];
+  return spawnSync(command, commandArgs, { encoding: 'utf8', env, input, maxBuffer: 1024 * 1024, stdio: ['pipe', 'pipe', 'pipe'] });
+};
 
 /** The first line of what op said, which names the reference and never a value. */
 const opReason = (result) => (result.error ? result.error.message : (result.stderr || '').trim().split('\n').at(-1) || `exit ${result.status}`);