@pajh/buldng 0.0.1

package/dist/buldng-lib.js

@@ -0,0 +1,261 @@
+// tools/build-lib.js
+
+import fs from "node:fs";
+import path from "node:path";
+import esbuild from "esbuild";
+
+// --------------------------------------------------
+// GLOBAL SOURCE & DEST ROOTS
+// --------------------------------------------------
+
+let SRC = null;
+let DEST = null;
+
+// --------------------------------------------------
+// SETTERS WITH SAFETY CHECKS
+// --------------------------------------------------
+
+export function setSource(dir) {
+  const abs = path.resolve(dir);
+  SRC = abs;
+  validateRoots();
+}
+
+export function setDest(dir) {
+  const abs = path.resolve(dir);
+  DEST = abs;
+  validateRoots();
+}
+
+const INPUTS = new Set();
+
+function trackInput(absPath) {
+  if (!SRC || !DEST) return;
+  if (absPath.startsWith(SRC) && !absPath.startsWith(DEST)) {
+    INPUTS.add(absPath);
+  }
+}
+
+function validateRoots() {
+  if (!SRC || !DEST) return;
+
+  // src cannot be inside dest, dest cannot be inside src
+  if (SRC.startsWith(DEST) || DEST.startsWith(SRC)) {
+    throw new Error(`SECURITY: src and dest cannot be nested:
+      src:  ${SRC}
+      dest: ${DEST}`);
+  }
+}
+
+// --------------------------------------------------
+// PATH SAFETY HELPERS
+// --------------------------------------------------
+
+function assertSourceRead(relPath) {
+  if (!SRC) throw new Error("SECURITY: Source root not set");
+  if (relPath.includes("..")) throw new Error("SECURITY: Illegal path traversal in read()");
+  const abs = path.resolve(SRC, relPath);
+  if (!abs.startsWith(SRC)) throw new Error("SECURITY: Read outside src/");
+  trackInput(abs);   // ← NEW
+  return abs;
+}
+
+function assertDestWrite(relPath) {
+  if (!DEST) throw new Error("SECURITY: Dest root not set");
+  if (relPath.includes("..")) throw new Error("SECURITY: Illegal path traversal in save()");
+  const abs = path.resolve(DEST, relPath);
+  if (!abs.startsWith(DEST)) throw new Error("SECURITY: Write outside dest/");
+  return abs;
+}
+
+// --------------------------------------------------
+// File object — fluent API
+// --------------------------------------------------
+
+class File {
+  constructor(content) {
+    this.content = content;
+  }
+
+  // Fluent append: read another file from src and append its contents
+  append(relPath) {
+    const abs = assertSourceRead(relPath);
+    const extra = fs.readFileSync(abs, "utf8");
+    return new File(this.content + "\n" + extra);
+  }
+
+  // Save relative to dest
+  save(relTarget) {
+    const out = assertDestWrite(relTarget);
+    fs.mkdirSync(path.dirname(out), { recursive: true });
+    fs.writeFileSync(out, this.content, "utf8");
+    console.log(`Saved: ${out}`);
+    return out;
+  }
+}
+
+// --------------------------------------------------
+// read("file") → File
+// --------------------------------------------------
+
+export function read(relPath) {
+  const abs = assertSourceRead(relPath);
+  const content = fs.readFileSync(abs, "utf8");
+  return new File(content);
+}
+
+// --------------------------------------------------
+// append(["a.css","b.css"]) → File
+// --------------------------------------------------
+
+export function append(relPaths) {
+  const parts = relPaths.map(p => {
+    const abs = assertSourceRead(p);
+    return fs.readFileSync(abs, "utf8");
+  });
+  return new File(parts.join("\n"));
+}
+
+// --------------------------------------------------
+// stitch({ shell, app, css, js }) → File
+// --------------------------------------------------
+
+export function stitch({ shell, app, css = [], js = [] }) {
+  const shellAbs = assertSourceRead(shell);
+  const appAbs = assertSourceRead(app);
+
+  let html = fs.readFileSync(shellAbs, "utf8");
+  const appHtml = fs.readFileSync(appAbs, "utf8");
+
+  html = html.replace("<!--APP-->", appHtml);
+
+  const cssLinks = css
+    .map(c => `<link rel="stylesheet" href="/${c}">`)
+    .join("\n");
+  html = html.replace("<!--CSS-->", cssLinks);
+
+  const jsScripts = js
+    .map(j => `<script type="module" src="/${j}"></script>`)
+    .join("\n");
+  html = html.replace("<!--SCRIPTS-->", jsScripts);
+
+  return new File(html);
+}
+
+// --------------------------------------------------
+// compile("pages/puzzle.ts") → File
+// --------------------------------------------------
+
+export function compile(relTsPath) {
+  const abs = assertSourceRead(relTsPath);
+
+  const result = esbuild.buildSync({
+    entryPoints: [abs],
+    bundle: true,
+    minify: true,
+    sourcemap: true,
+    format: "esm",
+    target: "esnext",
+    write: false
+  });
+
+  if (result.errors.length > 0) {
+    throw new Error(
+      "Build failed:\n" +
+      result.errors.map(e => e.text).join("\n")
+    );
+  }
+
+  return new File(result.outputFiles[0].text);
+}
+
+// --------------------------------------------------
+// mkdir("puzzle")
+// --------------------------------------------------
+
+export function mkdir(relDir) {
+  const abs = assertDestWrite(relDir);
+  fs.mkdirSync(abs, { recursive: true });
+}
+
+export function deepCopy(from, to) {
+  if (!DEST) throw new Error("SECURITY: Dest root not set");
+  console.log(`deepCopy: ${from} → ${to}`);
+  // from is raw filesystem path, resolve it normally
+  const absFrom = path.resolve(from);
+
+  // to is relative to DEST
+  if (to.includes("..")) {
+    throw new Error("SECURITY: Illegal path traversal in deepCopy()");
+  }
+
+  const absTo = to === "/" ? DEST : path.resolve(DEST, to);
+
+  // Ensure target is inside DEST
+  if (!absTo.startsWith(DEST)) {
+    throw new Error(`SECURITY: deepCopy target escapes dest:
+      dest: ${DEST}
+      target: ${absTo}`);
+  }
+
+  // Ensure source exists
+  if (!fs.existsSync(absFrom)) {
+    throw new Error(`deepCopy: source does not exist: ${absFrom}`);
+  }
+
+  // Recursively copy
+  function copyRecursive(src, dst) {
+    const stat = fs.statSync(src);
+
+    if (stat.isDirectory()) {
+      fs.mkdirSync(dst, { recursive: true });
+      const entries = fs.readdirSync(src);
+      for (const entry of entries) {
+        const srcEntry = path.join(src, entry);
+        const dstEntry = path.join(dst, entry);
+        copyRecursive(srcEntry, dstEntry);
+      }
+    } else {
+      // File
+      fs.mkdirSync(path.dirname(dst), { recursive: true });
+      fs.copyFileSync(src, dst);
+    }
+  }
+
+  copyRecursive(absFrom, absTo);
+}
+
+// --------------------------------------------------
+// rm_dest("dir") — remove a file or directory inside DEST
+// --------------------------------------------------
+
+export function rmDest(relPath) {
+  if (!DEST) throw new Error("SECURITY: Dest root not set");
+  if (relPath.includes("..")) {
+    throw new Error("SECURITY: Illegal path traversal in rmDest()");
+  }
+
+  const abs = path.resolve(DEST, relPath);
+
+  if (!abs.startsWith(DEST)) {
+    throw new Error(`SECURITY: rmDest target escapes dest:
+      dest: ${DEST}
+      target: ${abs}`);
+  }
+
+  if (!fs.existsSync(abs)) {
+    console.log(`rmDest: nothing to remove: ${abs}`);
+    return;
+  }
+
+  fs.rmSync(abs, { recursive: true, force: true });
+  console.log(`rmDest: removed ${abs}`);
+}
+
+
+process.on("exit", () => {
+  if (!DEST) return;
+  const manifest = Array.from(INPUTS);
+  const out = path.join(DEST, "build-inputs.json");
+  fs.writeFileSync(out, JSON.stringify(manifest, null, 2));
+});

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@pajh/buldng",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "dist/buldng-lib.js",
+  "files": ["dist"],
+  "scripts": {
+    "build": "cp src/buldng-lib.js dist/buldng-lib.js"
+  }
+}