@prestack/thread 0.0.3 → 0.1.0

package/dist/derivation/makers/release.js

@@ -1,107 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { argv, exit, stdout } from 'node:process';
-import { pathToFileURL } from 'node:url';
-import { RECEIPT, answer, answering, asking, given, guidance, issue, named, only, prompted, refuse, slug, spend, wordsIn } from "../../core/asking.js";
-import { listBounds, withRow } from "../../core/rows.js";
-import { named as packageOf } from "../../core/scope.js";
-import { findTree, inTree } from "../../core/tree.js";
-import { CHECKED_BY, KINDS, PREFIXES, SAID, WRITES, WRITTEN_BY } from "../release.js";
-const TREE = findTree();
-const SHEET = 'derivation.ts';
-const KEBAB = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
-const NAME = { at: 'name', guide: 'lowercase words joined by dashes' };
-const KIND = { at: 'kind', guide: `one of ${KINDS.join(', ')} — the prefix on the id says which` };
-const ASKS = [NAME, KIND];
-const at = inTree(TREE, SHEET);
-if (!existsSync(at)) {
-    refuse(`there is no ${SHEET} here, so a release has nowhere to go. Run \`npx thread attach ${packageOf('derivation')}\` — ` +
-        "the sheet is the package's to write, not yours.");
-}
-const held = (await import(__rewriteRelativeImportExtension(pathToFileURL(at).href)));
-const already = held.DERIVATION?.derives ?? [];
-const listing = [
-    already.length === 0
-        ? 'no releases yet, so this app declares nowhere to go.'
-        : `${String(already.length)} release(s):`,
-    ...already.map((one) => `  ${String(one.id)} — writes ${String(one.at)} — ${String(one.describes)}`),
-    '',
-    'what a release is:',
-    '',
-    ...KINDS.map((one) => `  ${one} → ${PREFIXES[one]}<name>, writing ${WRITES[one].join(' and ')}`),
-    ...KINDS.flatMap((one) => ['', `  ${SAID[one]}`]),
-].join('\n');
-const words = wordsIn(['new']);
-const piped = given();
-only(piped, named(ASKS), 'a release');
-const { ask, shut } = asking(piped);
-const nonce = issue(TREE.at, listing);
-if (words[0] !== 'new') {
-    stdout.write(`${listing}\n\n`);
-    stdout.write(`  npx thread create release new <name> ${RECEIPT} ${nonce}\n\n`);
-    stdout.write(`${answering('release').join('\n')}\n\n`);
-    stdout.write(`${guidance(ASKS).join('\n')}\n\n`);
-    stdout.write(`  ${RECEIPT} is spent by one run and refused if ${SHEET} changed after it was issued — what is\n` +
-        '  listed above is what you are writing against, and handing one back says you read it.\n');
-    exit(1);
-}
-spend(TREE.at, listing, argv[argv.indexOf(RECEIPT) + 1], SHEET);
-const name = slug(piped.length > 0 ? (answer(piped, NAME.at) ?? '') : await ask(NAME.at, prompted(NAME)));
-if (name === '' || !KEBAB.test(name)) {
-    shut();
-    refuse(`"${name}" cannot be the name of a release — it is written in kebab-case, so main or blue-green.`);
-}
-const said = piped.length > 0 ? (answer(piped, KIND.at) ?? '') : await ask(KIND.at, prompted(KIND));
-const kind = KINDS.find((one) => one === said);
-if (kind === undefined) {
-    shut();
-    refuse(`"${said}" is not something this can release to. It is one of ${KINDS.join(', ')}.`);
-}
-shut();
-const id = `${PREFIXES[kind]}${name.replace(/-/g, '_')}`;
-if (already.some((one) => one.id === id))
-    refuse(`\`${id}\` is already declared in ${SHEET}.`);
-const text = readFileSync(at, 'utf8');
-const bounds = listBounds(text, 'derives');
-if (bounds === undefined) {
-    refuse(`${SHEET} states no \`derives\` list on its node, so this app was attached before releases existed. ` +
-        `Run \`npx thread attach ${packageOf('derivation')}\` again — it adds the list without touching what is in the sheet.`);
-}
-const [first, ...rest] = WRITES[kind];
-const row = [
-    '  {',
-    `    id: '${id}',`,
-    `    at: '${String(first)}',`,
-    `    describes: '${SAID[kind].replace(/\\/g, '\\\\').replace(/'/g, "\\'")}',`,
-    '    version: 1,',
-    `    by: '${WRITTEN_BY}',`,
-    `    runs: '${CHECKED_BY}',`,
-    ...(rest.length === 0
-        ? []
-        : [
-            '    derives: [',
-            ...rest.flatMap((one) => [
-                '      {',
-                `        id: '${id}_${one.split('.')[0] ?? one}',`,
-                `        at: '${one}',`,
-                `        describes: 'What runs the image this release builds, named beside it because one row states one address.',`,
-                '        version: 1,',
-                `        by: '${WRITTEN_BY}',`,
-                `        runs: '${CHECKED_BY}',`,
-                '      },',
-            ]),
-            '    ],',
-        ]),
-    '  },',
-].join('\n');
-writeFileSync(at, withRow(text, bounds, row), 'utf8');
-stdout.write(`create: declared ${id} in ${SHEET} — it writes ${WRITES[kind].join(' and ')}.\n`);
-stdout.write(`create: run \`${WRITTEN_BY}\`, and the gate checks it from here on without a line written for it.\n`);
-exit(0);

package/dist/derivation/makers/release.ts

@@ -1,135 +0,0 @@
-import { existsSync, readFileSync, writeFileSync } from 'node:fs'
-import { argv, exit, stdout } from 'node:process'
-import { pathToFileURL } from 'node:url'
-
-import { RECEIPT, answer, answering, asking, given, guidance, issue, named, only, prompted, refuse, slug, spend, wordsIn, type Asked } from '../../core/asking.ts'
-import { listBounds, withRow } from '../../core/rows.ts'
-import { named as packageOf } from '../../core/scope.ts'
-import { findTree, inTree } from '../../core/tree.ts'
-
-import { CHECKED_BY, KINDS, PREFIXES, SAID, WRITES, WRITTEN_BY } from '../release.ts'
-
-const TREE = findTree()
-
-const SHEET = 'derivation.ts'
-
-const KEBAB = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/
-
-const NAME: Asked = { at: 'name', guide: 'lowercase words joined by dashes' }
-
-const KIND: Asked = { at: 'kind', guide: `one of ${KINDS.join(', ')} — the prefix on the id says which` }
-
-const ASKS: readonly Asked[] = [NAME, KIND]
-
-interface Row {
-  readonly id?: string
-  readonly at?: string
-  readonly describes?: string
-}
-
-const at = inTree(TREE, SHEET)
-
-if (!existsSync(at)) {
-  refuse(
-    `there is no ${SHEET} here, so a release has nowhere to go. Run \`npx thread attach ${packageOf('derivation')}\` — ` +
-      "the sheet is the package's to write, not yours.",
-  )
-}
-
-const held = (await import(pathToFileURL(at).href)) as { DERIVATION?: { readonly derives?: readonly Row[] } }
-const already = held.DERIVATION?.derives ?? []
-
-const listing = [
-  already.length === 0
-    ? 'no releases yet, so this app declares nowhere to go.'
-    : `${String(already.length)} release(s):`,
-  ...already.map((one) => `  ${String(one.id)} — writes ${String(one.at)} — ${String(one.describes)}`),
-  '',
-  'what a release is:',
-  '',
-  ...KINDS.map((one) => `  ${one} → ${PREFIXES[one]}<name>, writing ${WRITES[one].join(' and ')}`),
-  ...KINDS.flatMap((one) => ['', `  ${SAID[one]}`]),
-].join('\n')
-
-const words = wordsIn(['new'])
-
-const piped = given()
-only(piped, named(ASKS), 'a release')
-const { ask, shut } = asking(piped)
-
-const nonce = issue(TREE.at, listing)
-
-if (words[0] !== 'new') {
-  stdout.write(`${listing}\n\n`)
-  stdout.write(`  npx thread create release new <name> ${RECEIPT} ${nonce}\n\n`)
-  stdout.write(`${answering('release').join('\n')}\n\n`)
-  stdout.write(`${guidance(ASKS).join('\n')}\n\n`)
-  stdout.write(
-    `  ${RECEIPT} is spent by one run and refused if ${SHEET} changed after it was issued — what is\n` +
-      '  listed above is what you are writing against, and handing one back says you read it.\n',
-  )
-  exit(1)
-}
-
-spend(TREE.at, listing, argv[argv.indexOf(RECEIPT) + 1], SHEET)
-
-const name = slug(piped.length > 0 ? (answer(piped, NAME.at) ?? '') : await ask(NAME.at, prompted(NAME)))
-if (name === '' || !KEBAB.test(name)) {
-  shut()
-  refuse(`"${name}" cannot be the name of a release — it is written in kebab-case, so main or blue-green.`)
-}
-
-const said = piped.length > 0 ? (answer(piped, KIND.at) ?? '') : await ask(KIND.at, prompted(KIND))
-const kind = KINDS.find((one) => one === said)
-if (kind === undefined) {
-  shut()
-  refuse(`"${said}" is not something this can release to. It is one of ${KINDS.join(', ')}.`)
-}
-shut()
-
-const id = `${PREFIXES[kind]}${name.replace(/-/g, '_')}`
-if (already.some((one) => one.id === id)) refuse(`\`${id}\` is already declared in ${SHEET}.`)
-
-const text = readFileSync(at, 'utf8')
-const bounds = listBounds(text, 'derives')
-if (bounds === undefined) {
-  refuse(
-    `${SHEET} states no \`derives\` list on its node, so this app was attached before releases existed. ` +
-      `Run \`npx thread attach ${packageOf('derivation')}\` again — it adds the list without touching what is in the sheet.`,
-  )
-}
-
-const [first, ...rest] = WRITES[kind]
-
-const row = [
-  '  {',
-  `    id: '${id}',`,
-  `    at: '${String(first)}',`,
-  `    describes: '${SAID[kind].replace(/\\/g, '\\\\').replace(/'/g, "\\'")}',`,
-  '    version: 1,',
-  `    by: '${WRITTEN_BY}',`,
-  `    runs: '${CHECKED_BY}',`,
-  ...(rest.length === 0
-    ? []
-    : [
-        '    derives: [',
-        ...rest.flatMap((one) => [
-          '      {',
-          `        id: '${id}_${one.split('.')[0] ?? one}',`,
-          `        at: '${one}',`,
-          `        describes: 'What runs the image this release builds, named beside it because one row states one address.',`,
-          '        version: 1,',
-          `        by: '${WRITTEN_BY}',`,
-          `        runs: '${CHECKED_BY}',`,
-          '      },',
-        ]),
-        '    ],',
-      ]),
-  '  },',
-].join('\n')
-
-writeFileSync(at, withRow(text, bounds, row), 'utf8')
-
-stdout.write(`create: declared ${id} in ${SHEET} — it writes ${WRITES[kind].join(' and ')}.\n`)
-stdout.write(`create: run \`${WRITTEN_BY}\`, and the gate checks it from here on without a line written for it.\n`)
-exit(0)

package/dist/integrations/generators/secret.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/integrations/generators/secret.js

@@ -1,233 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { spawnSync } from 'node:child_process';
-import { appendFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { join, relative } from 'node:path';
-import { argv, stdin, stdout } from 'node:process';
-import { createInterface } from 'node:readline';
-import { exit } from "../../core/invoked.js";
-import { ELSEWHERE, RECEIPT, answer, asking, asksOf, given, issue, needed, only, ownAnswers, refuse, rowLines, seeding, slug, spend, stating, wordsIn } from "../../core/asking.js";
-import { holdsRow, listBounds, withRow } from "../../core/rows.js";
-import { named as packageOf } from "../../core/scope.js";
-import { findTree, inTree } from "../../core/tree.js";
-import { SAID, SECRECY, secrecyOf } from "../secret.js";
-import { IGNORES, KEY_AT, SEALED_AT, keyOf, seal, sealedIn } from "../vault.js";
-const TREE = findTree();
-const FILE = 'secrets.ts';
-const LIST = 'SECRETS';
-const NAME = /^[a-z][a-z0-9_]*$/;
-const ENVS = ['sandbox', 'production'];
-const WORDS = Object.keys(SECRECY);
-const ASKS = [
-    { key: 'name', says: ['lower_snake_case, and the prefix is added for you'] },
-    { key: 'holder', says: [`who may hold it — ${WORDS.join(', ')}`] },
-    { key: 'describes', says: ['what it is for, in one sentence'], edits: true },
-    { key: 'header', says: ['blank if this value IS the address of what requires it'], edits: true },
-    { key: 'prefix', says: ['what precedes it in that header, trailing space and all'], edits: true },
-];
-const TAKES = ASKS.map((one) => one.key);
-const EDITS = ASKS.filter((one) => one.edits === true).map((one) => one.key);
-const ASKED = ASKS.flatMap((one) => one.says.map((line, at) => `  ${at === 0 ? `${one.key}:`.padEnd(32) : ' '.repeat(32)}${line}`));
-const here = (one) => relative(TREE.at, one).split('\\').join('/');
-const path = inTree(TREE, FILE);
-const at = here(path);
-import { quoted } from "../../core/rows.js";
-let secrets = [];
-try {
-    const taken = (await import(__rewriteRelativeImportExtension(new URL(`file://${path}`).href)));
-    secrets = taken.SECRETS ?? [];
-}
-catch {
-    refuse(`${at} could not be read. Attach \`${packageOf('integrations')}\` first — an app states its secrets there.`);
-}
-const held = new Map(ENVS.map((env) => [env, new Set(sealedIn(TREE.at, env))]));
-const setIn = (id) => {
-    const found = ENVS.filter((env) => held.get(env)?.has(id) === true);
-    return found.length === 0 ? 'no value anywhere yet' : `set for ${found.join(' and ')}`;
-};
-async function sealing(id) {
-    const hidden = async (question) => {
-        stdout.write(question);
-        const rl = createInterface({ input: stdin, output: stdout, terminal: true });
-        rl._writeToOutput = () => { };
-        const value = await new Promise((done) => rl.question('', done));
-        rl.close();
-        stdout.write('\n');
-        return value;
-    };
-    let sealed = 0;
-    for (const env of ENVS) {
-        const value = await hidden(`  ${id} for ${env} (paste it, or press enter to skip): `);
-        if (value.trim() === '')
-            continue;
-        seal(TREE.at, id, env, value);
-        sealed += 1;
-    }
-    if (sealed === 0)
-        return 0;
-    const ignore = join(TREE.at, '.gitignore');
-    const already = existsSync(ignore) ? readFileSync(ignore, 'utf8') : '';
-    const missing = IGNORES.filter((one) => !already.split('\n').some((line) => line.trim() === one));
-    if (missing.length > 0) {
-        appendFileSync(ignore, `${already.endsWith('\n') || already === '' ? '' : '\n'}${missing.join('\n')}\n`);
-        stdout.write(`secret: added ${missing.join(', ')} to .gitignore — the key is never committed.\n`);
-    }
-    stdout.write(`secret: sealed ${id} for ${String(sealed)} environment(s) into ${SEALED_AT}.\n`);
-    return sealed;
-}
-const listing = secrets.length === 0
-    ? 'no secrets yet.'
-    : [
-        `${String(secrets.length)} secret(s):`,
-        ...secrets.flatMap((one) => [
-            `  ${one.id} — ${secrecyOf(one.id) ?? 'wearing no prefix, which is refused'}, ${setIn(one.id)}`,
-            `      ${one.sends === undefined ? 'no `sends`, so it is an address' : `sent as ${one.sends.header}: ${one.sends.prefix ?? ''}<value>`}`,
-        ]),
-    ].join('\n');
-const words = wordsIn(['new', 'set']);
-const verb = words[0];
-stdout.write(`${listing}\n`);
-if (keyOf(TREE.at) === undefined && secrets.length > 0) {
-    stdout.write(`\nthere is no vault key at ${KEY_AT}, so nothing above can be opened here. It is never committed — ` +
-        'whoever set this app up has it.\n');
-}
-const method = (nonce) => [
-    '',
-    'what this makes:',
-    '',
-    `  thread create secret new <name> ${RECEIPT} ${nonce}`,
-    `  thread create secret set <id> ${RECEIPT} ${nonce}`,
-    '',
-    ...ELSEWHERE,
-    '',
-    `  ${RECEIPT} is spent by one run and refused if ${at} moved after it was issued.`,
-    '',
-    'who may hold a value. The word is what you send; the prefix is what the id wears, and the prefix',
-    'IS who may hold it — no field says so:',
-    '',
-    ...WORDS.flatMap((one) => [`  ${one.padEnd(7)} → ${SECRECY[one]}<name>`, `      ${SAID[one]}`, '']),
-    '`new` asks, in this order:',
-    '',
-    ...ASKED,
-    '',
-    'and then, at a terminal only, it asks for the value itself — echo off, sealed as you press enter.',
-    'A piped run declares the row and says so instead, because there is no terminal to read one from.',
-    '',
-    '`edit` asks the same three, and a blank answer keeps what is already there — except that naming',
-    'a DIFFERENT header drops the old prefix unless you give a new one, because a prefix belongs to',
-    'the scheme its header names. `-` as the header removes the header and makes this an address.',
-    '',
-    'It will not change who may hold a value. That is the prefix, the prefix is the id, and an id that',
-    'changes is a different secret — every target requiring the old name would go on requiring a name',
-    'nothing declares. Declare the other one and move what requires it.',
-    '',
-    '`set` is the same prompt on its own, for changing a value later or giving one a `new` run skipped.',
-    'It takes no answers and cannot be piped. The value goes from the keyboard into the sealed store and',
-    `nowhere else — not into a row, not into this output, not into ${SEALED_AT} in any readable form.`,
-    '',
-    'So an agent may declare a secret and may never give it one. That is the point of the split.',
-].join('\n');
-const flagged = argv.indexOf(RECEIPT);
-if (verb === undefined && flagged === -1) {
-    const nonce = issue(TREE.at, listing);
-    stdout.write(`${method(nonce)}\n`);
-    stdout.write(`\nsecret: receipt ${nonce} — spent on use, and stale the moment ${at} changes.\n`);
-    exit(0);
-}
-spend(TREE.at, listing, argv[flagged + 1], at);
-if (verb !== 'new' && verb !== 'set' && verb !== 'edit') {
-    refuse(`there is nothing called "${verb ?? ''}" to do here — say new, edit or set`);
-}
-const text = readFileSync(path, 'utf8');
-const where = listBounds(text, LIST);
-if (where === undefined)
-    refuse(`${at} states no \`${LIST}\` list to declare a secret in`);
-if (verb === 'set') {
-    const id = words[1] ?? refuse('`set` takes the id of a secret this app already declares');
-    const one = secrets.find((each) => each.id === id);
-    if (one === undefined) {
-        refuse(`\`${id}\` is not a secret this app declares. Declare it first with \`thread create secret new\` — a value is ` +
-            'given to something that said it needed it, or not at all.');
-    }
-    if (stdin.isTTY !== true) {
-        refuse('a value is typed by a person at a terminal, and this run is piped. Nothing was written. Run ' +
-            `\`thread create secret set ${id}\` yourself — an agent may declare a secret and may never give it one.`);
-    }
-    if ((await sealing(id)) === 0) {
-        stdout.write('secret: nothing typed, so nothing was sealed.\n');
-        exit(0);
-    }
-    const kept = spawnSync('npx', ['thread', 'vault'], { cwd: TREE.at, encoding: 'utf8' });
-    stdout.write(`${`${kept.stdout ?? ''}${kept.stderr ?? ''}`.trim()}\n`);
-    exit(kept.status === 0 ? 0 : 1);
-}
-const piped = given();
-only(piped, TAKES, 'a secret');
-const { ask, line, shut } = asking(piped);
-const own = ownAnswers(piped);
-const name = slug(words[1] ?? (await ask('name', 'name: ')));
-if (name === '') {
-    shut();
-    refuse('a secret has to be called something');
-}
-if (!NAME.test(name)) {
-    shut();
-    refuse(`"${name}" cannot be the name of a secret — it is written in lower_snake_case`);
-}
-const holder = (piped.length > 0 ? needed(own, 'holder', 'a secret') : await ask('holder', `who may hold it — ${WORDS.join(', ')}: `)).trim();
-if (!WORDS.includes(holder)) {
-    shut();
-    refuse(`there is no such holder as "${holder}". A secret is held by a ${WORDS.join(' or a ')}, and that prefix is the ` +
-        'only thing standing between a server credential and a browser bundle.');
-}
-const word = holder;
-const id = `${SECRECY[word]}${name}`;
-if (secrets.some((one) => one.id === id) || holdsRow(text, where, id)) {
-    shut();
-    refuse(`\`${id}\` is already declared in ${at}`);
-}
-const describes = (piped.length > 0 ? needed(own, 'describes', 'a secret') : await ask('describes', 'what is it for? ')).trim();
-if (describes === '') {
-    shut();
-    refuse('a secret says what it is for — the sentence is what somebody reads before requiring it');
-}
-const header = (piped.length > 0 ? (answer(own, 'header') ?? '') : await ask('header', 'header (blank if this value IS an address): ')).trim();
-const typed = header === '' ? '' : (piped.length > 0 ? (answer(own, 'prefix') ?? '') : await ask('prefix', 'prefix in that header, e.g. "Bearer ": '));
-const { stated, kids } = await stating(asksOf('secret', 'Secret', {}, ['id', 'at', 'describes', 'version', 'sends']), piped, piped.length > 0, ask, line, []);
-shut();
-const prefix = typed === '' || typed.endsWith(' ') ? typed : `${typed} `;
-const row = [
-    '  {',
-    `    id: ${quoted(id)},`,
-    `    at: '_threads/${FILE}',`,
-    `    describes: ${quoted(describes)},`,
-    '    version: 1,',
-    ...(header === ''
-        ? []
-        : [`    sends: { header: ${quoted(header.toLowerCase())}${prefix === '' ? '' : `, prefix: ${quoted(prefix)}`} },`]),
-    ...rowLines('    ', stated, kids),
-    '  },',
-].join('\n');
-writeFileSync(path, withRow(text, where, row), 'utf8');
-for (const told of seeding(kids, TREE.at))
-    stdout.write(`secret: ${told}\n`);
-stdout.write(`secret: declared ${id} in ${at}${header === '' ? ' — it has no `sends`, so it is the address of whatever requires it' : ''}.\n`);
-if (stdin.isTTY === true) {
-    stdout.write(`\n${SAID[word]}\n\nThe value is not echoed and is sealed straight into ${SEALED_AT}.\n`);
-    if ((await sealing(id)) === 0) {
-        stdout.write(`secret: nothing typed, so ${id} has no value yet. Run \`thread create secret set ${id}\` when you have it.\n`);
-    }
-}
-else {
-    stdout.write(`secret: it has no value anywhere yet, and this run is piped — a value is typed by a person at a terminal. ` +
-        `Run \`thread create secret set ${id}\` yourself.\n`);
-}
-const kept = spawnSync('npx', ['thread', 'vault'], { cwd: TREE.at, encoding: 'utf8' });
-stdout.write(`${`${kept.stdout ?? ''}${kept.stderr ?? ''}`.trim()}\n`);
-exit(kept.status === 0 ? 0 : 1);