@opencodehub/cli 0.1.0

package/dist/scip-downloader.js

@@ -0,0 +1,372 @@
+/**
+ * SHA256-pinned downloader for external SCIP adapter binaries.
+ *
+ * Mirrors the shape of `embedder-downloader.ts` but is scoped per-tool rather
+ * than per-variant. Each call installs one tool into `~/.codehub/bin/`:
+ *
+ *   1. Detect the running platform (`process.platform` + `process.arch`).
+ *      Unsupported combinations throw a clear "unsupported platform" error.
+ *   2. Resolve the per-platform pin from `SCIP_PINS`.
+ *   3. If the target path already exists and its SHA256 matches the pin, skip.
+ *   4. Otherwise stream-download to `<target>.tmp`, hash during write, verify,
+ *      `chmod +x`, and atomic-rename into place.
+ *
+ * `scip-dotnet` is a special case: upstream does NOT ship a self-contained
+ * binary — it is installed via `dotnet tool install --global scip-dotnet` and
+ * needs .NET SDK 8+. The downloader probes `dotnet --version` first; if the
+ * SDK is missing or too old, it surfaces the specific install hint instead of
+ * attempting a binary download.
+ *
+ * Concurrency: concurrent calls for the same tool on the same process are
+ * serialized via an in-memory promise map keyed by `(tool, destDir)`. This
+ * avoids two parallel `installScipTool("clang")` invocations each writing the
+ * same `<target>.tmp` and corrupting each other's output. Cross-process
+ * concurrent setup is out of scope — the atomic-rename still means no half-
+ * written binary ever appears at the final path.
+ *
+ * Placeholder SHA256 handling: some pins ship with all-zero placeholder
+ * hashes in `scip-pins.ts`. We refuse to verify against placeholder hashes
+ * at runtime. Each adapter's first-install smoke test passes
+ * `allowPlaceholder: true` so it can compute the real hash and substitute
+ * it back into the pin file.
+ */
+import { execFile as execFileCb } from "node:child_process";
+import { createHash } from "node:crypto";
+import { createReadStream, createWriteStream } from "node:fs";
+import { chmod, mkdir, rename, stat, unlink } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { Readable, Writable } from "node:stream";
+import { pipeline as streamPipeline } from "node:stream/promises";
+import { promisify } from "node:util";
+import { SCIP_PINS, SCIP_TOOL_ORDER, } from "./scip-pins.js";
+export { isScipTool, SCIP_PINS, SCIP_TOOL_ORDER } from "./scip-pins.js";
+const execFile = promisify(execFileCb);
+/**
+ * Thrown when a downloaded file's SHA256 doesn't match the pinned value.
+ * The temp file is deleted before this throws so partial payloads never
+ * linger on disk.
+ */
+export class ScipSha256MismatchError extends Error {
+    code = "SCIP_SHA256_MISMATCH";
+    tool;
+    expected;
+    actual;
+    constructor(tool, expected, actual) {
+        super(`SHA256 mismatch for scip-${tool}: expected ${expected}, got ${actual}`);
+        this.name = "ScipSha256MismatchError";
+        this.tool = tool;
+        this.expected = expected;
+        this.actual = actual;
+    }
+}
+/** Thrown for all non-hash download failures (404, network, etc.). */
+export class ScipDownloadError extends Error {
+    code = "SCIP_DOWNLOAD_FAILED";
+    url;
+    constructor(url, message, options) {
+        super(`Download failed for ${url}: ${message}`, options);
+        this.name = "ScipDownloadError";
+        this.url = url;
+    }
+}
+/** Thrown when the current platform is not covered by a pin. */
+export class UnsupportedPlatformError extends Error {
+    code = "SCIP_UNSUPPORTED_PLATFORM";
+    os;
+    arch;
+    constructor(os, arch, toolHint) {
+        super(`Unsupported platform for ${toolHint ?? "scip tool"}: ${os}-${arch}. ` +
+            `Supported: linux-x64, linux-arm64, darwin-x64, darwin-arm64.`);
+        this.name = "UnsupportedPlatformError";
+        this.os = os;
+        this.arch = arch;
+    }
+}
+/** Thrown when a pin still has placeholder SHA256 digests. */
+export class PlaceholderHashError extends Error {
+    code = "SCIP_PLACEHOLDER_HASH";
+    tool;
+    constructor(tool) {
+        super(`scip-${tool} pin still carries placeholder SHA256 digests. ` +
+            `The real hash is computed at adapter first-install time. ` +
+            `Pass allowPlaceholder: true from a smoke test, or wait for the adapter to land.`);
+        this.name = "PlaceholderHashError";
+        this.tool = tool;
+    }
+}
+/** Thrown when `scip-dotnet` requires `dotnet` SDK >= N and it is missing or older. */
+export class DotnetSdkMissingError extends Error {
+    code = "SCIP_DOTNET_SDK_MISSING";
+    minMajor;
+    detectedVersion;
+    constructor(minMajor, detectedVersion) {
+        const detected = detectedVersion === undefined
+            ? "dotnet is not on PATH"
+            : `detected dotnet --version: ${detectedVersion}`;
+        super(`scip-dotnet requires .NET SDK ${minMajor}.0+ on PATH (${detected}). ` +
+            `Install from https://dotnet.microsoft.com/download, then retry ` +
+            `\`codehub setup --scip=dotnet\` (which runs ` +
+            `\`dotnet tool install --global scip-dotnet\`).`);
+        this.name = "DotnetSdkMissingError";
+        this.minMajor = minMajor;
+        this.detectedVersion = detectedVersion;
+    }
+}
+/**
+ * Detect the running platform. Normalizes `process.arch` values into the
+ * `x64` / `arm64` discriminator the pin file uses.
+ */
+export function detectPlatform(platform = process.platform, arch = process.arch) {
+    let normalizedArch;
+    if (arch === "x64") {
+        normalizedArch = "x64";
+    }
+    else if (arch === "arm64") {
+        normalizedArch = "arm64";
+    }
+    else {
+        throw new UnsupportedPlatformError(platform, arch);
+    }
+    if (platform === "linux") {
+        return { os: "linux", arch: normalizedArch };
+    }
+    if (platform === "darwin") {
+        return { os: "darwin", arch: normalizedArch };
+    }
+    throw new UnsupportedPlatformError(platform, arch);
+}
+/** Resolve the default install dir: `~/.codehub/bin`. */
+export function defaultScipBinDir(home = homedir()) {
+    return join(home, ".codehub", "bin");
+}
+/**
+ * Default `dotnet --version` probe. Returns the version string on success or
+ * undefined when the binary isn't on PATH / fails to execute.
+ */
+const defaultDotnetProbe = async () => {
+    try {
+        const { stdout } = await execFile("dotnet", ["--version"], { timeout: 5000 });
+        return stdout.trim();
+    }
+    catch {
+        return undefined;
+    }
+};
+/** Parse `dotnet --version` output and extract the major version number. */
+function parseDotnetMajor(version) {
+    if (version === undefined)
+        return undefined;
+    const match = version.match(/^(\d+)\./);
+    if (match === null)
+        return undefined;
+    const parsed = Number.parseInt(match[1] ?? "", 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/** Lookup the platform-specific pin for a tool. Throws on unsupported combos. */
+function resolvePlatformPin(pin, platform) {
+    const hit = pin.platforms.find((p) => p.os === platform.os && p.arch === platform.arch);
+    if (hit === undefined) {
+        throw new UnsupportedPlatformError(platform.os, platform.arch, `scip-${pin.tool}`);
+    }
+    if (hit.platformUnavailable === true) {
+        throw new UnsupportedPlatformError(platform.os, platform.arch, `scip-${pin.tool} v${pin.version} (upstream does not ship a release asset for this platform)`);
+    }
+    return hit;
+}
+/**
+ * Hash an existing file in streaming fashion. Returns `undefined` if the file
+ * does not exist — callers use that as the "not yet downloaded" signal.
+ */
+async function hashFileIfExists(path) {
+    try {
+        await stat(path);
+    }
+    catch {
+        return undefined;
+    }
+    const hasher = createHash("sha256");
+    const rs = createReadStream(path);
+    await streamPipeline(rs, new Writable({
+        write(chunk, _enc, cb) {
+            hasher.update(new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength));
+            cb();
+        },
+    }));
+    return hasher.digest("hex");
+}
+/**
+ * Stream one binary to disk: hash-as-we-write, verify, chmod +x, atomic
+ * rename. Does NOT retry — the embedder downloader's retry ladder is
+ * overkill for a single-binary install; a failed download surfaces directly.
+ */
+async function downloadBinary(tool, platformPin, targetPath, fetchImpl) {
+    const tmpPath = `${targetPath}.tmp`;
+    try {
+        await unlink(tmpPath);
+    }
+    catch {
+        // Doesn't exist — fine.
+    }
+    let res;
+    try {
+        res = await fetchImpl(platformPin.url, { redirect: "follow" });
+    }
+    catch (err) {
+        throw new ScipDownloadError(platformPin.url, err instanceof Error ? err.message : String(err), err instanceof Error ? { cause: err } : undefined);
+    }
+    if (!res.ok) {
+        throw new ScipDownloadError(platformPin.url, `HTTP ${res.status} ${res.statusText}`);
+    }
+    if (res.body === null) {
+        throw new ScipDownloadError(platformPin.url, "response body is null");
+    }
+    const hasher = createHash("sha256");
+    let bytesWritten = 0;
+    const writeStream = createWriteStream(tmpPath);
+    const bodyAsNode = Readable.fromWeb(res.body);
+    try {
+        await streamPipeline(bodyAsNode, new Writable({
+            write(chunk, _enc, cb) {
+                const view = new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
+                hasher.update(view);
+                bytesWritten += chunk.byteLength;
+                if (!writeStream.write(chunk)) {
+                    writeStream.once("drain", () => cb());
+                }
+                else {
+                    cb();
+                }
+            },
+            final(cb) {
+                writeStream.end(() => cb());
+            },
+        }));
+    }
+    catch (err) {
+        try {
+            await unlink(tmpPath);
+        }
+        catch {
+            // Nothing to do.
+        }
+        throw new ScipDownloadError(platformPin.url, err instanceof Error ? err.message : String(err), err instanceof Error ? { cause: err } : undefined);
+    }
+    const actual = hasher.digest("hex");
+    if (actual !== platformPin.sha256) {
+        try {
+            await unlink(tmpPath);
+        }
+        catch {
+            // Nothing to do.
+        }
+        throw new ScipSha256MismatchError(tool, platformPin.sha256, actual);
+    }
+    // 0o755 — owner rwx, everyone rx. Matches what a release tarball extraction
+    // would produce.
+    await chmod(tmpPath, 0o755);
+    await rename(tmpPath, targetPath);
+    return bytesWritten;
+}
+/**
+ * In-memory guard against concurrent installs of the same tool in the same
+ * process. Keyed by `${tool}:${destDir}` so parallel tests with distinct
+ * temp dirs don't serialize against each other.
+ */
+const inFlight = new Map();
+/**
+ * Install one SCIP tool. Returns immediately with `skipped: true` when the
+ * on-disk binary already matches the pin; downloads otherwise.
+ */
+export async function installScipTool(tool, opts = {}) {
+    const destDir = opts.destDir ?? defaultScipBinDir();
+    const key = `${tool}:${destDir}`;
+    const existing = inFlight.get(key);
+    if (existing !== undefined) {
+        return existing;
+    }
+    const task = installScipToolInner(tool, destDir, opts).finally(() => {
+        inFlight.delete(key);
+    });
+    inFlight.set(key, task);
+    return task;
+}
+async function installScipToolInner(tool, destDir, opts) {
+    const pin = SCIP_PINS[tool];
+    const log = opts.log ?? (() => undefined);
+    if (pin.installerKind === "dotnet-tool") {
+        const probe = opts.dotnetProbe ?? defaultDotnetProbe;
+        const version = await probe();
+        const major = parseDotnetMajor(version);
+        const minMajor = pin.minDotnetMajor ?? 8;
+        if (major === undefined || major < minMajor) {
+            throw new DotnetSdkMissingError(minMajor, version);
+        }
+        // We do NOT actually run `dotnet tool install` here — that is a
+        // side-effectful system install the user should run explicitly. We
+        // return the hint string so the setup command can print it.
+        const hint = `dotnet tool install --global scip-${tool}`;
+        log(`codehub setup --scip=${tool}: SDK ${major} detected; run \`${hint}\` to install`);
+        return {
+            tool,
+            installed: false,
+            skipped: true,
+            version: pin.version,
+            path: hint,
+            dotnetToolHint: hint,
+        };
+    }
+    if (pin.placeholder && opts.allowPlaceholder !== true) {
+        throw new PlaceholderHashError(tool);
+    }
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    if (typeof fetchImpl !== "function") {
+        throw new Error("Global fetch is not available. Node >= 18 required; supply opts.fetchImpl otherwise.");
+    }
+    const platform = opts.platform ?? detectPlatform();
+    const platformPin = resolvePlatformPin(pin, platform);
+    const targetPath = join(destDir, pin.binName);
+    await mkdir(dirname(targetPath), { recursive: true });
+    if (opts.force !== true) {
+        const existingHash = await hashFileIfExists(targetPath);
+        if (existingHash !== undefined && existingHash === platformPin.sha256) {
+            log(`codehub setup --scip=${tool}: already installed at ${targetPath} (version ${pin.version})`);
+            return {
+                tool,
+                installed: false,
+                skipped: true,
+                version: pin.version,
+                path: targetPath,
+            };
+        }
+    }
+    log(`codehub setup --scip=${tool}: downloading ${platformPin.url}`);
+    const bytes = await downloadBinary(tool, platformPin, targetPath, fetchImpl);
+    log(`codehub setup --scip=${tool}: installed ${bytes} bytes → ${targetPath}`);
+    return {
+        tool,
+        installed: true,
+        skipped: false,
+        version: pin.version,
+        path: targetPath,
+    };
+}
+/**
+ * Install every known SCIP tool in declaration order. Collects successes and
+ * failures without short-circuiting — `scip-dotnet` missing `dotnet` on PATH
+ * must not prevent the clang/ruby/kotlin installs from running. Returns the
+ * per-tool result array; caller decides how to surface errors.
+ */
+export async function installAllScipTools(opts = {}) {
+    const results = [];
+    for (const tool of SCIP_TOOL_ORDER) {
+        try {
+            results.push(await installScipTool(tool, opts));
+        }
+        catch (err) {
+            results.push({ tool, error: err instanceof Error ? err : new Error(String(err)) });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=scip-downloader.js.map

package/dist/scip-downloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scip-downloader.js","sourceRoot":"","sources":["../src/scip-downloader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EACL,SAAS,EACT,eAAe,GAMhB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAiDvC;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAA+B,CAAC;IACvC,IAAI,CAAW;IACf,QAAQ,CAAS;IACjB,MAAM,CAAS;IAExB,YAAY,IAAc,EAAE,QAAgB,EAAE,MAAc;QAC1D,KAAK,CAAC,4BAA4B,IAAI,cAAc,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,sBAA+B,CAAC;IACvC,GAAG,CAAS;IAErB,YAAY,GAAW,EAAE,OAAe,EAAE,OAAsB;QAC9D,KAAK,CAAC,uBAAuB,GAAG,KAAK,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,2BAAoC,CAAC;IAC5C,EAAE,CAAS;IACX,IAAI,CAAS;IAEtB,YAAY,EAAU,EAAE,IAAY,EAAE,QAAiB;QACrD,KAAK,CACH,4BAA4B,QAAQ,IAAI,WAAW,KAAK,EAAE,IAAI,IAAI,IAAI;YACpE,8DAA8D,CACjE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,uBAAgC,CAAC;IACxC,IAAI,CAAW;IAExB,YAAY,IAAc;QACxB,KAAK,CACH,QAAQ,IAAI,iDAAiD;YAC3D,2DAA2D;YAC3D,iFAAiF,CACpF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,yBAAkC,CAAC;IAC1C,QAAQ,CAAS;IACjB,eAAe,CAAqB;IAE7C,YAAY,QAAgB,EAAE,eAAmC;QAC/D,MAAM,QAAQ,GACZ,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,8BAA8B,eAAe,EAAE,CAAC;QACtD,KAAK,CACH,iCAAiC,QAAQ,gBAAgB,QAAQ,KAAK;YACpE,iEAAiE;YACjE,8CAA8C;YAC9C,gDAAgD,CACnD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,IAAI,cAAwB,CAAC;IAC7B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,OAAe,OAAO,EAAE;IACxD,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,kBAAkB,GAAgB,KAAK,IAAI,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,GAAgB,EAAE,QAA0B;IACtE,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,wBAAwB,CAChC,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,IAAI,EACb,QAAQ,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,6DAA6D,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,cAAc,CAClB,EAAE,EACF,IAAI,QAAQ,CAAC;QACX,KAAK,CAAC,KAAa,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAChF,EAAE,EAAE,CAAC;QACP,CAAC;KACF,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAc,EACd,WAA4B,EAC5B,UAAkB,EAClB,SAAkB;IAElB,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,WAAW,CAAC,GAAG,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAiD,CAAC,CAAC;IAE3F,IAAI,CAAC;QACH,MAAM,cAAc,CAClB,UAAU,EACV,IAAI,QAAQ,CAAC;YACX,KAAK,CAAC,KAAa,EAAE,IAAI,EAAE,EAAE;gBAC3B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpB,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;gBACjC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,EAAE,EAAE,CAAC;gBACP,CAAC;YACH,CAAC;YACD,KAAK,CAAC,EAAE;gBACN,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,WAAW,CAAC,GAAG,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;IACjB,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAc,EACd,OAA2B,EAAE;IAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAClE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAc,EACd,OAAe,EACf,IAAwB;IAExB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,GAAG,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,gEAAgE;QAChE,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,qCAAqC,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,wBAAwB,IAAI,SAAS,KAAK,oBAAoB,IAAI,eAAe,CAAC,CAAC;QACvF,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAAiB,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACtE,GAAG,CACD,wBAAwB,IAAI,0BAA0B,UAAU,aAAa,GAAG,CAAC,OAAO,GAAG,CAC5F,CAAC;YACF,OAAO;gBACL,IAAI;gBACJ,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,wBAAwB,IAAI,iBAAiB,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7E,GAAG,CAAC,wBAAwB,IAAI,eAAe,KAAK,YAAY,UAAU,EAAE,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,UAAU;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA2B,EAAE;IAE7B,MAAM,OAAO,GAA6D,EAAE,CAAC;IAC7E,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/scip-pins.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Pinned external SCIP adapter binaries.
+ *
+ * This is the single source of truth for every downloadable SCIP indexer we
+ * ship via `codehub setup --scip=<tool>`. Each entry carries:
+ *
+ *   - `tool`:        the indexer family.
+ *   - `version`:     upstream release tag (no `v` prefix).
+ *   - `platforms[]`: per-platform download metadata. Each lists the target
+ *                    `{os, arch}`, the direct release URL, the expected SHA256
+ *                    digest, and (optionally) the binary's executable name on
+ *                    disk.
+ *
+ * Some pins ship PLACEHOLDER SHA256 hashes (64 zeros) for standalone
+ * binaries until each adapter's first-install smoke test computes and
+ * substitutes the real digest against the upstream release asset. The
+ * `placeholder: true` flag is the canonical "do NOT trust this hash at
+ * runtime" marker — `installScipTool()` refuses to run when the selected pin
+ * has `placeholder: true` unless the caller sets `opts.allowPlaceholder`
+ * (reserved for adapter first-install smoke tests).
+ *
+ * `scip-kotlin` ships a real SHA256 computed against Maven Central: upstream
+ * publishes the plugin as a Maven Central JAR
+ * (`com.sourcegraph:semanticdb-kotlinc:0.6.0`) whose SHA256 is stable and
+ * publicly verifiable — no first-install smoke test needed.
+ *
+ * `scip-dotnet` is the odd one out: upstream does NOT ship a self-contained
+ * release binary, so its install path goes through
+ * `dotnet tool install --global scip-dotnet`. Its entry therefore carries an
+ * empty `platforms` array and a sentinel `installerKind: "dotnet-tool"`. The
+ * downloader dispatches on that kind and skips the fetch/verify path entirely.
+ */
+/** Platform = `${os}-${arch}`. Matches what we read from `process.platform` + `process.arch`. */
+export type ScipOs = "linux" | "darwin";
+export type ScipArch = "x64" | "arm64";
+/** The four binary-backed SCIP tools plus the .NET tool-sourced adapter. */
+export type ScipTool = "clang" | "ruby" | "dotnet" | "kotlin";
+/** Per-platform download descriptor. */
+export interface ScipPlatformPin {
+    readonly os: ScipOs;
+    readonly arch: ScipArch;
+    readonly url: string;
+    /** Hex-encoded SHA256 (64 chars). PLACEHOLDER when `placeholder` is true. */
+    readonly sha256: string;
+    /**
+     * Optional: name of the archive entry that contains the binary. When absent
+     * the downloader treats the URL's payload as the binary itself.
+     *
+     * We currently download raw binaries (the Sourcegraph release artifacts are
+     * standalone executables), so this stays undefined for now. Reserved for
+     * future tools that publish tarballs or zips.
+     */
+    readonly archiveEntry?: string;
+    /**
+     * True when upstream does NOT publish a release asset for this `{os, arch}`
+     * pair. The entry is retained so the pin documents the gap explicitly
+     * (vs. silently omitting the row, which would leave callers guessing).
+     * The downloader refuses to install against an unavailable platform and
+     * surfaces a specific "upstream does not ship this platform" error. The
+     * `sha256` and `url` stay for traceability but must never be fetched.
+     */
+    readonly platformUnavailable?: boolean;
+}
+/** Canonical pin shape shared by every tool. */
+export interface ScipToolPin {
+    readonly tool: ScipTool;
+    readonly version: string;
+    /** How the installer should source the binary. */
+    readonly installerKind: "download" | "dotnet-tool";
+    /**
+     * True while the per-platform SHA256 digests are placeholders (all zeros).
+     * Downloader refuses to verify against placeholder hashes unless the caller
+     * opts in with `allowPlaceholder: true` (used by the first-install smoke
+     * test in each adapter PR).
+     */
+    readonly placeholder: boolean;
+    /**
+     * Platforms covered by this tool. Empty for `installerKind === "dotnet-tool"`.
+     */
+    readonly platforms: readonly ScipPlatformPin[];
+    /**
+     * Name the binary is installed under inside `~/.codehub/bin/`. Usually
+     * `scip-<tool>`. Set explicitly so each pin is self-describing.
+     */
+    readonly binName: string;
+    /**
+     * `dotnet tool install --global scip-dotnet` runtime requirement — minimum
+     * .NET SDK major version (probed via `dotnet --version`). Only consulted
+     * when `installerKind === "dotnet-tool"`.
+     */
+    readonly minDotnetMajor?: number;
+}
+/** Single source of truth. Keep insertion order stable for `--scip=all`. */
+export declare const SCIP_PINS: Readonly<Record<ScipTool, ScipToolPin>>;
+/** Ordered list used by `--scip=all`. */
+export declare const SCIP_TOOL_ORDER: readonly ScipTool[];
+/** True when `value` is a known SCIP tool name. Used to validate CLI input. */
+export declare function isScipTool(value: string): value is ScipTool;
+//# sourceMappingURL=scip-pins.d.ts.map

package/dist/scip-pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scip-pins.d.ts","sourceRoot":"","sources":["../src/scip-pins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,iGAAiG;AACjG,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AACxC,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;AAEvC,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9D,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,gDAAgD;AAChD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,aAAa,CAAC;IACnD;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AA8JD,4EAA4E;AAC5E,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAK7D,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAA0C,CAAC;AAE1F,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,QAAQ,CAE3D"}