@quatronic/qore 0.1.9 → 0.2.0-rc.1

package/README.md

@@ -24,6 +24,7 @@ qore version            # CLI + portal version info
 qore env pull           # write this module's local secrets into an env file
 qore run -- <command>   # run a command with those secrets in its environment
 qore roles list         # roles in your code, on local, and yours there
+qore roles sync         # announce your code's roles for local, keep yours
 qore roles use <role…>  # announce your code's roles for local and take these
 
 qore errors --env stag                              # recent unresolved errors
@@ -149,7 +150,9 @@ the portal's own audit trail, which records key names only (see
 
 #### `qore roles`
 
-Run in the app's frontend module. `qore roles use inspector` reads the roles in
+Run in the app's frontend module. `qore roles sync` does the announcing alone:
+local learns every role in `permissions.ts` and your own roles stay as they are.
+`qore roles use inspector` reads the roles in
 `src/lib/permissions.ts`, tells the portal they exist on `local` (only there —
 staging and production learn roles from the code that environment deploys:
 `main` for staging, the `production` branch for production), and makes exactly

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f7b490f6-b0af-5874-9ffa-f8010e3ba137")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1ed12b18-46cb-578f-b1ed-2917841ea3d0")}catch(e){}}();
 import { createRequire as __qoreCreateRequire } from "node:module"; const require = __qoreCreateRequire(import.meta.url);
 import {
   addSecretValues,
@@ -3164,12 +3164,25 @@ async function wholeAppWanted(ctx) {
   const ws = await findWorkspace(ctx.deps.cwd, ctx.deps.home);
   const repo = ws && await findRepoRoot(ctx.deps.cwd);
   if (!ws || !repo || repo === ws.root || !isInside(ws.root, repo)) return null;
+  if (await appModuleCount(ctx, ws) === 1) return null;
   const pick2 = await ctx.io.select("Which data model?", [
     { name: "the whole app", value: "app" },
     { name: `only ${basename3(repo)}`, value: "module" }
   ]);
   return pick2 === "app" ? ws : null;
 }
+async function appModuleCount(ctx, ws) {
+  const g = ctx.opts();
+  try {
+    const portal = await flagPortal(ctx.deps, g.portal, ws);
+    const session = await openSession(ctx.deps, portal, "db erd", g.verbose ? (l) => ctx.io.err(l) : void 0);
+    await ensureCapability(ctx.deps, portal.apiOrigin, "app.modules");
+    return (await workspaceAppModules(session, portal, ws)).modules.length;
+  } catch (e) {
+    if (e instanceof CancelledError) throw e;
+    return null;
+  }
+}
 async function serve(ctx, f, server) {
   try {
     const url = `http://127.0.0.1:${server.port}`;
@@ -6716,6 +6729,11 @@ async function useLocalRoles(deps2, mc, app, roles, use) {
   await ensureCapability(deps2, mc.portal.apiOrigin, CAPABILITY);
   return explained(mc, () => mc.session.api.post(path(mc, app), { roles, use }));
 }
+var ANNOUNCE_CAPABILITY = "module.local-roles-announce";
+async function announceLocalRoles(deps2, mc, app, roles) {
+  await ensureCapability(deps2, mc.portal.apiOrigin, ANNOUNCE_CAPABILITY);
+  return explained(mc, () => mc.session.api.post(path(mc, app), { roles }));
+}
 async function explained(mc, call) {
   try {
     return await call();
@@ -6846,8 +6864,26 @@ function registerRoles(program, ctx) {
     c.io.out(`Known on local   ${[...known].join(", ") || "\u2014"}`);
     c.io.out(`Yours on local   ${local.effective.join(", ") || "\u2014"}`);
     if (fresh.length) {
-      c.io.out(`New in your code: ${fresh.join(", ")} \u2014 \`qore roles use <role...>\` announces them and makes them yours on local.`);
+      c.io.out(`New in your code: ${fresh.join(", ")} \u2014 \`qore roles sync\` makes local know them; \`qore roles use <role...>\` also makes them yours.`);
+    }
+  });
+  withFlags(roles.command("sync").description("Announce your code's roles for local; your own roles stay as they are")).action(async (f) => {
+    const { c, mc, app, code } = await rolesContext(ctx, f, "roles sync");
+    const res = await announceLocalRoles(c.deps, mc, app, code);
+    if (c.opts().json) {
+      renderJson(c.io, {
+        context: contextJson(mc, app),
+        added: res.added,
+        local: res.roles.map((r) => r.slug),
+        direct: res.direct,
+        effective: res.effective
+      });
+      return;
     }
+    c.io.err(contextLine(mc, app));
+    c.io.out(`\u2713 Known on local: ${res.roles.map((r) => r.slug).join(", ")}`);
+    if (res.added.length) c.io.out(`  New on local: ${res.added.join(", ")} \u2014 teammates can pick it in the Access tab too.`);
+    c.io.out(`  Your roles on local: ${res.effective.join(", ") || "\u2014"} (unchanged; \`qore roles use <role...>\` to change them)`);
   });
   withFlags(roles.command("use").description("Announce your code's roles for local and make exactly these yours there").argument("<role...>", "the roles you want on local")).action(async (wanted, f) => {
     const { c, mc, app, code } = await rolesContext(ctx, f, "roles use");
@@ -7530,8 +7566,64 @@ function classifyKeychainError(e, platform) {
     cause: e
   });
 }
-var OsKeychain = class {
-  constructor(platform = process.platform) {
+var MAX_ENTRY_CHARS = 1200;
+var HEAD2 = /^qore-chunked:v1:(\d+):(\d+)$/;
+var ChunkedKeychain = class {
+  constructor(store, maxChars = MAX_ENTRY_CHARS) {
+    this.store = store;
+    this.maxChars = maxChars;
+  }
+  store;
+  maxChars;
+  head(raw) {
+    const m = raw === null ? null : HEAD2.exec(raw);
+    return m ? { gen: Number(m[1]), n: Number(m[2]) } : null;
+  }
+  split(value) {
+    const parts = [];
+    for (let i = 0; i < value.length; ) {
+      let end2 = Math.min(i + this.maxChars, value.length);
+      if (end2 < value.length && /[\uD800-\uDBFF]/.test(value[end2 - 1])) end2--;
+      parts.push(value.slice(i, end2));
+      i = end2;
+    }
+    return parts;
+  }
+  async deleteChunks(account, h) {
+    for (let i = 1; i <= h.n; i++) await this.store.delete(`${account}#${h.gen}.${i}`);
+  }
+  async get(account) {
+    const raw = await this.store.get(account);
+    const h = this.head(raw);
+    if (!h) return raw;
+    let value = "";
+    for (let i = 1; i <= h.n; i++) {
+      const part = await this.store.get(`${account}#${h.gen}.${i}`);
+      if (part === null) return null;
+      value += part;
+    }
+    return value;
+  }
+  async set(account, value) {
+    const old = this.head(await this.store.get(account));
+    if (value.length <= this.maxChars) {
+      await this.store.set(account, value);
+    } else {
+      const gen = (old?.gen ?? 0) + 1;
+      const parts = this.split(value);
+      for (const [i, part] of parts.entries()) await this.store.set(`${account}#${gen}.${i + 1}`, part);
+      await this.store.set(account, `qore-chunked:v1:${gen}:${parts.length}`);
+    }
+    if (old) await this.deleteChunks(account, old);
+  }
+  async delete(account) {
+    const old = this.head(await this.store.get(account));
+    await this.store.delete(account);
+    if (old) await this.deleteChunks(account, old);
+  }
+};
+var EntryKeychain = class {
+  constructor(platform) {
     this.platform = platform;
   }
   platform;
@@ -7556,6 +7648,11 @@ var OsKeychain = class {
     });
   }
 };
+var OsKeychain = class extends ChunkedKeychain {
+  constructor(platform = process.platform) {
+    super(new EntryKeychain(platform));
+  }
+};
 
 // src/platform/lock.ts
 import { mkdir as mkdir5, writeFile as writeFile5 } from "fs/promises";
@@ -7860,7 +7957,7 @@ async function connectPostgres(url, o) {
 
 // src/buildInfo.ts
 var SENTRY_DSN = true ? "https://50b592efb53dbc1a31cb10d3945c6d52@o4512129906049024.ingest.de.sentry.io/4512174341750864" : "";
-var SENTRY_ENVIRONMENT = true ? "production" : "development";
+var SENTRY_ENVIRONMENT = false ? "production" : "development";
 
 // src/platform/proxy.ts
 import { execFile as execFile3 } from "child_process";
@@ -7924,7 +8021,7 @@ function systemProxy(platform = process.platform) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.9" : "0.0.0-dev";
+var VERSION = true ? "0.2.0-rc.1" : "0.0.0-dev";
 
 // src/cli.ts
 if (process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY) setGlobalDispatcher(new EnvHttpProxyAgent());
@@ -8004,4 +8101,4 @@ if (!drained) {
   process.exit();
 }
 //# sourceMappingURL=cli.js.map
-//# debugId=f7b490f6-b0af-5874-9ffa-f8010e3ba137
+//# debugId=1ed12b18-46cb-578f-b1ed-2917841ea3d0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatronic/qore",
-  "version": "0.1.9",
+  "version": "0.2.0-rc.1",
   "description": "Qore developer CLI",
   "type": "module",
   "bin": {