@minionry/minion 0.7.36

package/dist/server/services/apps/install.js

@@ -0,0 +1,101 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+import { lstatSync, mkdirSync, rmSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { executeGitCommand } from '../websocket/git-utils.js';
+import { getAppStatePaths } from './layout.js';
+const FULL_SHA_PATTERN = /^[0-9a-f]{40}$/;
+const CLONE_TIMEOUT_MS = 10 * 60 * 1000;
+const LOCAL_GIT_TIMEOUT_MS = 2 * 60 * 1000;
+const UNATTENDED_GIT_ENV = { GIT_TERMINAL_PROMPT: '0', GIT_ASKPASS: '' };
+const inflightInstalls = new Set();
+function gitTail(result) {
+    const text = (result.stderr || result.stdout).trim();
+    return text.length > 400 ? `…${text.slice(-400)}` : text;
+}
+function isSymlink(path) {
+    try {
+        return lstatSync(path).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+function removeSrcDir(paths) {
+    try {
+        rmSync(paths.srcDir, { recursive: true, force: true });
+    }
+    catch (err) {
+        console.error(`[apps] failed to clean up partial clone at ${paths.srcDir}:`, err);
+    }
+}
+function validateCloneRequest(request) {
+    const sha = request.commitSha.trim().toLowerCase();
+    if (!FULL_SHA_PATTERN.test(sha)) {
+        return { ok: false, code: 'BAD_REQUEST', error: `commitSha must be a full 40-hex commit SHA (never a branch or tag), got '${request.commitSha}'` };
+    }
+    const repoUrl = request.repoUrl.trim();
+    if (repoUrl === '' || repoUrl.startsWith('-')) {
+        return { ok: false, code: 'BAD_REQUEST', error: `repoUrl is not a valid clone source: '${request.repoUrl}'` };
+    }
+    let paths;
+    try {
+        paths = getAppStatePaths(request.workingDir, request.appId);
+    }
+    catch (err) {
+        return { ok: false, code: 'BAD_REQUEST', error: err instanceof Error ? err.message : String(err) };
+    }
+    const appsDir = dirname(paths.root);
+    for (const component of [dirname(appsDir), appsDir, paths.root]) {
+        if (isSymlink(component)) {
+            return { ok: false, code: 'BAD_REQUEST', error: `refusing to install through a symlink: ${component}` };
+        }
+    }
+    return { sha, repoUrl, paths };
+}
+async function runPinnedCloneSteps(paths, repoUrl, sha) {
+    const clone = await executeGitCommand(['-c', 'protocol.ext.allow=never', '-c', 'credential.helper=', 'clone', '--no-checkout', '--', repoUrl, paths.srcDir], paths.root, { timeoutMs: CLONE_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
+    if (clone.exitCode !== 0) {
+        return `failed to clone ${repoUrl}: ${gitTail(clone) || 'git clone failed'}`;
+    }
+    const exists = await executeGitCommand(['cat-file', '-e', `${sha}^{commit}`], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
+    if (exists.exitCode !== 0) {
+        return `commit ${sha} is not reachable from ${repoUrl} — the pinned SHA recorded at listing does not exist in the repository`;
+    }
+    const checkout = await executeGitCommand(['-c', 'advice.detachedHead=false', 'checkout', '--detach', sha], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
+    if (checkout.exitCode !== 0) {
+        return `failed to check out pinned commit ${sha}: ${gitTail(checkout) || 'git checkout failed'}`;
+    }
+    const head = await executeGitCommand(['rev-parse', 'HEAD'], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
+    if (head.exitCode !== 0 || head.stdout.trim() !== sha) {
+        return `post-checkout verification failed: HEAD is '${head.stdout.trim() || 'unknown'}', expected ${sha}`;
+    }
+    return null;
+}
+export async function cloneAppAtPinnedSha(request) {
+    const validated = validateCloneRequest(request);
+    if ('ok' in validated)
+        return validated;
+    const { sha, repoUrl, paths } = validated;
+    if (inflightInstalls.has(paths.root)) {
+        return { ok: false, code: 'INTERNAL', error: `an install for '${request.appId}' is already in progress in this Space — wait for it to finish` };
+    }
+    inflightInstalls.add(paths.root);
+    try {
+        rmSync(paths.srcDir, { recursive: true, force: true });
+        mkdirSync(paths.root, { recursive: true, mode: 0o700 });
+        const failure = await runPinnedCloneSteps(paths, repoUrl, sha);
+        if (failure) {
+            removeSrcDir(paths);
+            return { ok: false, code: 'INTERNAL', error: failure };
+        }
+        return { ok: true, paths, commitSha: sha };
+    }
+    catch (err) {
+        removeSrcDir(paths);
+        return { ok: false, code: 'INTERNAL', error: `install failed: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    finally {
+        inflightInstalls.delete(paths.root);
+    }
+}

package/dist/server/services/apps/layout.js

@@ -0,0 +1,35 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+import { lstatSync } from 'node:fs';
+import { join } from 'node:path';
+import { getAppSandboxPaths } from '../sdk/sandbox.js';
+export const APP_SRC_DIRNAME = 'src';
+export const APP_BUILD_DIRNAME = 'build';
+export const APP_BUILD_STAGING_DIRNAME = 'build.staging';
+export const APP_BUILD_HOME_DIRNAME = 'build-home';
+export const APP_CONSENT_FILENAME = 'consent.json';
+export const APP_SERVE_FILENAME = 'serve.json';
+export function getAppStatePaths(workingDir, appId) {
+    const { root, dataDir } = getAppSandboxPaths(workingDir, appId);
+    return {
+        root,
+        srcDir: join(root, APP_SRC_DIRNAME),
+        buildDir: join(root, APP_BUILD_DIRNAME),
+        buildStagingDir: join(root, APP_BUILD_STAGING_DIRNAME),
+        buildHomeDir: join(root, APP_BUILD_HOME_DIRNAME),
+        consentFile: join(root, APP_CONSENT_FILENAME),
+        serveFile: join(root, APP_SERVE_FILENAME),
+        dataDir,
+    };
+}
+export function isRealDirectory(path) {
+    try {
+        return lstatSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+export function errorText(err) {
+    return err instanceof Error ? err.message : String(err);
+}