@rathnasgala/cli 0.0.21 → 1.0.0

package/src/scaffold-site.js

@@ -1,162 +0,0 @@
-import { createHash } from 'node:crypto';
-import path from 'node:path';
-
-import { configureSite } from './configure-site.js';
-import { readGalaCredential } from './gala-credential-store.js';
-import { readGithubCredential } from './github-credential-store.js';
-import { awaitRepositoryContent, cloneRepository } from './github-template-repository.js';
-import { createPublication } from './publication-creation-client.js';
-import { installRepositoryVariable } from './github-repository-variable.js';
-import { provisionGithubPages } from './github-pages-provisioning.js';
-import { registerSite } from './site-registration-client.js';
-import { writeRegisteredSiteConfiguration } from './site-config-registration.js';
-import { writePublishWorkflow } from './workflow-command.js';
-import { commitScaffold } from './scaffold-git.js';
-import {
-  setRepositoryOrigin, verifyEmptyRepository, verifyRepositoryOrigin
-} from './github-empty-repository.js';
-
-function segment(value, field) {
-  if (typeof value !== 'string' || !/^[A-Za-z0-9_.-]+$/.test(value)) throw new TypeError(`${field} is invalid`);
-  return value;
-}
-
-function providerDefaultBase(owner) {
-  return `https://${owner.toLowerCase()}.github.io`;
-}
-
-function registrationLocation(owner, topology, canonicalBaseUrl) {
-  if (topology === 'provider-default') {
-    if (canonicalBaseUrl != null) {
-      throw new TypeError('--canonical-base-url is valid only with --topology custom-domain');
-    }
-    return { topology: 'PROVIDER_DEFAULT', canonicalBaseUrl: providerDefaultBase(owner) };
-  }
-  if (topology !== 'custom-domain') {
-    throw new TypeError('topology must be provider-default or custom-domain');
-  }
-  if (typeof canonicalBaseUrl !== 'string') {
-    throw new TypeError('--canonical-base-url is required with --topology custom-domain');
-  }
-  const canonical = new URL(canonicalBaseUrl);
-  if (canonical.protocol !== 'https:' || canonical.username || canonical.password
-      || canonical.port || canonical.search || canonical.hash || canonical.pathname !== '/') {
-    throw new TypeError('canonicalBaseUrl must be a credential-free HTTPS origin');
-  }
-  return { topology: 'CUSTOM_DOMAIN', canonicalBaseUrl: canonical.origin };
-}
-
-export async function scaffoldSite({
-  owner, repository, target, githubInstallationId, siteOptions, emptyExistingRepository = false,
-  notify = (message) => process.stdout.write(`${message}\n`), ask, openUrl,
-  resumeExistingCheckout = false, topology = 'provider-default', canonicalBaseUrl, actionRef,
-  buildMode = 'build-and-deploy', templateOwner = 'rathnasgala',
-  templateRepository = 'site-template',
-  readGithub = readGithubCredential, readGala = readGalaCredential,
-  createRepository = createPublication, awaitContent = awaitRepositoryContent, clone = cloneRepository,
-  configure = configureSite, register = registerSite, finalize = writeRegisteredSiteConfiguration,
-  writeWorkflow = writePublishWorkflow,
-  installVariable = installRepositoryVariable,
-  provisionPages = provisionGithubPages,
-  commit = commitScaffold, verifyEmpty = verifyEmptyRepository, setOrigin = setRepositoryOrigin,
-  verifyCheckout = verifyRepositoryOrigin
-}) {
-  const requestedOwner = segment(owner, 'owner');
-  const requestedName = segment(repository, 'repository');
-  // Validated now so a bad --topology/--canonical-base-url combination fails before a repository
-  // exists. The value used later is recomputed once the server says who actually owns it.
-  registrationLocation(requestedOwner, topology, canonicalBaseUrl);
-  // Optional: the server resolves the installation from the owner when none is supplied. An
-  // explicit value is still validated, because a wrong one fails much later and less clearly.
-  if (githubInstallationId != null
-      && (!Number.isSafeInteger(githubInstallationId) || githubInstallationId <= 0)) {
-    throw new TypeError('githubInstallationId must be a positive integer');
-  }
-  if (target == null || path.resolve(target) === path.parse(path.resolve(target)).root) {
-    throw new TypeError('target must be a non-root local path');
-  }
-  const [github, gala] = await Promise.all([readGithub(), readGala()]);
-  // Creation reports which installation owns the new repository, so registration cannot disagree.
-  let resolvedInstallationId = githubInstallationId ?? null;
-  if (emptyExistingRepository && resumeExistingCheckout) {
-    throw new TypeError('emptyExistingRepository and resumeExistingCheckout are mutually exclusive');
-  }
-  /*
-   * The server decides the owner, not this process. It creates under the account the Gala App
-   * installation belongs to, which is not always the account behind the writer's OAuth token — an
-   * installation on an organisation they belong to gives a different owner entirely. Deriving the
-   * canonical URL, the idempotency key, the registration and the Pages target from the local guess
-   * would register a publication against a repository that does not exist.
-   */
-  let repositoryOwner = requestedOwner;
-  let repositoryName = requestedName;
-  let generated;
-  let root;
-  if (resumeExistingCheckout) {
-    root = await verifyCheckout({
-      root: path.resolve(target), owner: repositoryOwner, repository: repositoryName
-    });
-    generated = { fullName: `${repositoryOwner}/${repositoryName}` };
-  } else if (emptyExistingRepository) {
-    await verifyEmpty({ owner: repositoryOwner, repository: repositoryName, accessToken: github.accessToken });
-    generated = {
-      fullName: `${repositoryOwner}/${repositoryName}`,
-      cloneUrl: `https://github.com/${templateOwner}/${templateRepository}.git`
-    };
-  } else {
-    /*
-     * Created through the API, the same call the browser editor makes. Doing it here meant a second
-     * implementation with no fallback and no wait for the App installation to reach the result,
-     * which is why CLI-created repositories never appeared in the web UI.
-     */
-    const created = await createRepository({
-      apiBaseUrl: gala.apiBaseUrl, galaAccessToken: gala.accessToken,
-      githubAccessToken: github.accessToken, name: repositoryName,
-      notify, ask, openUrl, selfLogin: requestedOwner
-    });
-    repositoryOwner = segment(created.owner, 'owner');
-    repositoryName = segment(created.repository, 'repository');
-    resolvedInstallationId = created.installationId;
-    generated = { fullName: created.fullName, cloneUrl: created.cloneUrl };
-    // Creation is asynchronous: GitHub answers before the template content lands, and cloning into
-    // that window produces an empty checkout and a missing site.config.yml.
-    await awaitContent({
-      accessToken: github.accessToken, owner: created.owner, repository: created.repository
-    });
-  }
-  if (!resumeExistingCheckout) {
-    root = await clone({ cloneUrl: generated.cloneUrl, target });
-    if (emptyExistingRepository) await setOrigin({ root, owner: repositoryOwner, repository: repositoryName });
-  }
-  const location = registrationLocation(repositoryOwner, topology, canonicalBaseUrl);
-  const configured = await configure(root, siteOptions ?? {});
-  const idempotencyKey = `scaffold-${createHash('sha256').update(`${repositoryOwner.toLowerCase()}/${repositoryName.toLowerCase()}`).digest('hex')}`;
-  const registration = await register({
-    apiBaseUrl: gala.apiBaseUrl, galaAccessToken: gala.accessToken,
-    githubAccessToken: github.accessToken, idempotencyKey,
-    githubInstallationId: resolvedInstallationId, repositoryOwner, repositoryName,
-    topology: location.topology, canonicalBaseUrl: location.canonicalBaseUrl
-  });
-  await finalize(root, {
-    siteId: registration.siteId,
-    canonicalBaseUrl: registration.canonicalBaseUrl,
-    pathPrefix: registration.pathPrefix,
-    topology
-  });
-  await writeWorkflow({
-    root, siteId: registration.siteId, timezone: configured.site.timezone, buildMode,
-    ...(actionRef == null ? {} : { actionRef })
-  });
-  await installVariable({
-    owner: repositoryOwner, repository: repositoryName, accessToken: github.accessToken,
-    variableName: 'GALA_API_BASE_URL', variableValue: gala.apiBaseUrl
-  });
-  const commitSha = await commit(root);
-  const pages = buildMode === 'build-and-deploy' ? await provisionPages({
-    owner: repositoryOwner, repository: repositoryName, accessToken: github.accessToken, commitSha,
-    customDomain: location.topology === 'CUSTOM_DOMAIN' ? new URL(location.canonicalBaseUrl).hostname : null
-  }) : null;
-  return Object.freeze({
-    root, fullName: generated.fullName, siteId: registration.siteId, commitSha, pages
-  });
-}

package/src/site-config-registration.js

@@ -1,47 +0,0 @@
-import { lstat, readFile, rename, rm, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { parse, stringify } from 'yaml';
-
-export async function writeRegisteredSiteConfiguration(root, {
-  siteId, canonicalBaseUrl, pathPrefix, topology
-}) {
-  if (!/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/.test(siteId)) throw new TypeError('siteId is invalid');
-  if (!['provider-default', 'custom-domain', 'domain-root', 'domain-subpath'].includes(topology)) {
-    throw new TypeError('topology is invalid');
-  }
-  const canonical = new URL(canonicalBaseUrl);
-  if (canonical.protocol !== 'https:' || canonical.username || canonical.password || canonical.search
-      || canonical.hash || canonical.pathname !== '/') {
-    throw new TypeError('canonicalBaseUrl must be a credential-free HTTPS origin; put the URL path in pathPrefix');
-  }
-  const normalizedPrefix = pathPrefix === '' ? '/' : pathPrefix;
-  if (typeof normalizedPrefix !== 'string'
-      || !/^\/(?:[^/?#]+(?:\/[^/?#]+)*)?$/.test(normalizedPrefix)) {
-    throw new TypeError('pathPrefix must be a normalized URL path');
-  }
-  const target = path.resolve(root, 'site.config.yml');
-  const metadata = await lstat(target);
-  if (!metadata.isFile() || metadata.isSymbolicLink()) throw new TypeError('site.config.yml must be a regular file');
-  const config = parse(await readFile(target, 'utf8'));
-  if (config?.schemaVersion !== 1 || config.site == null || config.hosting == null) {
-    throw new TypeError('Unsupported site configuration schema');
-  }
-  config.site.id = siteId;
-  config.hosting.provider = 'github-pages';
-  config.hosting.topology = topology;
-  config.hosting.canonicalBaseUrl = canonical.origin;
-  config.hosting.pathPrefix = normalizedPrefix;
-  const temporary = `${target}.gala-register-${process.pid}`;
-  const backup = `${target}.gala-backup-${process.pid}`;
-  try {
-    await writeFile(temporary, stringify(config), { flag: 'wx' });
-    await rename(target, backup);
-    try { await rename(temporary, target); }
-    catch (error) { await rename(backup, target); throw error; }
-    await rm(backup);
-  } catch (error) {
-    await rm(temporary, { force: true });
-    throw error;
-  }
-  return config;
-}

package/src/site-registration-client.js

@@ -1,138 +0,0 @@
-import { describeHttpFailure } from './http-failure.js';
-const ULID = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
-const REPOSITORY_PART = /^[A-Za-z0-9_.-]+$/;
-const IDEMPOTENCY_KEY = /^[A-Za-z0-9._:-]{16,128}$/;
-
-function required(value, field, pattern) {
-  if (typeof value !== 'string' || !pattern.test(value)) throw new TypeError(`${field} is invalid`);
-  return value;
-}
-
-function apiUrl(apiBaseUrl) {
-  const base = new URL(apiBaseUrl);
-  const loopback = ['localhost', '127.0.0.1', '::1'].includes(base.hostname);
-  if ((base.protocol !== 'https:' && !(loopback && base.protocol === 'http:'))
-      || base.username || base.password || base.search || base.hash) {
-    throw new TypeError('apiBaseUrl must be a credential-free HTTPS URL (or HTTP loopback for testing)');
-  }
-  return new URL('/v1/sites', base).href;
-}
-
-/**
- * Exchanges the stored GitHub token for the short-lived capability the API's GitHub-scoped
- * endpoints require. Exported because publication creation needs the same capability, and two
- * copies of an auth exchange is how they drift.
- */
-export async function exchangeGithubAuthorization({
-  apiBaseUrl, galaAccessToken, githubAccessToken, fetchImpl
-}) {
-  if (typeof githubAccessToken !== 'string' || githubAccessToken === '') {
-    throw new Error('GitHub authentication is missing; run `gala auth`');
-  }
-  const response = await fetchImpl(new URL('/v1/auth/github/device-authorizations', apiBaseUrl), {
-    method: 'POST',
-    headers: {
-      accept: 'application/json',
-      authorization: `Bearer ${galaAccessToken}`,
-      'content-type': 'application/json'
-    },
-    body: JSON.stringify({ accessToken: githubAccessToken })
-  });
-  if (response.status === 401) {
-    throw new Error('GitHub or Gala authentication expired; run `gala auth` again');
-  }
-  if (response.status !== 200) {
-    throw new Error(await describeHttpFailure(response, 'GitHub repository authorization'));
-  }
-  const payload = await response.json();
-  return required(payload?.authorization, 'GitHub authorization', /^[A-Za-z0-9_-]{43}$/);
-}
-
-export async function registerSite({
-  apiBaseUrl = 'https://api.gala67.com',
-  galaAccessToken,
-  githubAccessToken,
-  idempotencyKey,
-  githubInstallationId,
-  repositoryOwner,
-  repositoryName,
-  topology,
-  canonicalBaseUrl,
-  fetchImpl = fetch
-}) {
-  if (typeof galaAccessToken !== 'string' || galaAccessToken === '') {
-    throw new Error('Gala authentication is missing; run `gala auth`');
-  }
-  const githubAuthorization = await exchangeGithubAuthorization({
-    apiBaseUrl, galaAccessToken, githubAccessToken, fetchImpl
-  });
-  required(idempotencyKey, 'idempotencyKey', IDEMPOTENCY_KEY);
-  required(repositoryOwner, 'repositoryOwner', REPOSITORY_PART);
-  required(repositoryName, 'repositoryName', REPOSITORY_PART);
-  if (githubInstallationId != null
-      && (!Number.isSafeInteger(githubInstallationId) || githubInstallationId <= 0)) {
-    throw new TypeError('githubInstallationId must be a positive integer');
-  }
-  if (!['PROVIDER_DEFAULT', 'CUSTOM_DOMAIN'].includes(topology)) {
-    throw new TypeError('topology is invalid');
-  }
-  const response = await fetchImpl(apiUrl(apiBaseUrl), {
-    method: 'POST',
-    headers: {
-      accept: 'application/json',
-      authorization: `Bearer ${galaAccessToken}`,
-      'content-type': 'application/json',
-      'github-authorization': githubAuthorization,
-      'idempotency-key': idempotencyKey
-    },
-    body: JSON.stringify({
-      // Omitted rather than sent as null: the server resolves it from the owner.
-      ...(githubInstallationId == null ? {} : { githubInstallationId }),
-      repositoryOwner,
-      repositoryName,
-      topology,
-      canonicalBaseUrl
-    })
-  });
-  if (response.status === 401) {
-    throw new Error('Gala authentication expired; run `gala auth` again');
-  }
-  if (response.status === 404) {
-    throw new Error(`GitHub App installation does not cover ${repositoryOwner}/${repositoryName}`);
-  }
-  if (response.status === 409) {
-    const failure = await response.clone().json().catch(() => null);
-    if (failure?.code === 'GITHUB_APP_NOT_INSTALLED') {
-      throw new Error(
-        `The Gala GitHub App is not installed on ${repositoryOwner}. Install it at `
-        + 'https://github.com/apps/gala67-app/installations/new for that account, then run scaffold '
-        + 'again.'
-      );
-    }
-    throw new Error('Site registration conflicts with existing protected state; use the recovery command');
-  }
-  if (response.status !== 201) throw new Error(await describeHttpFailure(response, 'Gala site registration'));
-  const payload = await response.json();
-  if (!ULID.test(payload?.siteId) || typeof payload.siteSecret !== 'string' || payload.siteSecret === '') {
-    throw new TypeError('Gala site registration response is invalid');
-  }
-  const canonical = new URL(payload.canonicalBaseUrl);
-  if (canonical.protocol !== 'https:' || canonical.username || canonical.password
-      || canonical.search || canonical.hash || canonical.pathname !== '/') {
-    throw new TypeError('Gala site registration returned an invalid canonicalBaseUrl');
-  }
-  if (typeof payload.pathPrefix !== 'string'
-      || !/^\/(?:[^/?#]+(?:\/[^/?#]+)*)?$/.test(payload.pathPrefix)) {
-    throw new TypeError('Gala site registration returned an invalid pathPrefix');
-  }
-  const location = response.headers?.get?.('location');
-  if (location !== `/v1/sites/${payload.siteId}`) {
-    throw new TypeError('Gala site registration returned an invalid Location header');
-  }
-  return Object.freeze({
-    siteId: payload.siteId,
-    siteSecret: payload.siteSecret,
-    canonicalBaseUrl: canonical.origin,
-    pathPrefix: payload.pathPrefix === '' ? '/' : payload.pathPrefix
-  });
-}

package/src/theme-package.js

@@ -1,128 +0,0 @@
-import { createHash } from 'node:crypto';
-import { copyFile, mkdir, mkdtemp, readFile, rm } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-
-import * as tar from 'tar';
-
-const MAX_COMPRESSED_BYTES = 10 * 1024 * 1024;
-const MAX_ENTRY_BYTES = 10 * 1024 * 1024;
-const MAX_TOTAL_BYTES = 50 * 1024 * 1024;
-const MAX_ENTRIES = 2_048;
-const EXACT_VERSION = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
-
-function registryUrl(name, version) {
-  if (name !== '@rathnasgala/theme' || !EXACT_VERSION.test(version)) {
-    throw new TypeError('theme package name and exact version are required');
-  }
-  return `https://registry.npmjs.org/${encodeURIComponent(name)}/${encodeURIComponent(version)}`;
-}
-
-async function boundedBody(response) {
-  const length = Number(response.headers.get('content-length'));
-  if (Number.isFinite(length) && length > MAX_COMPRESSED_BYTES) throw new Error('Theme archive exceeds compressed-size limit');
-  const reader = response.body.getReader();
-  const chunks = [];
-  let size = 0;
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > MAX_COMPRESSED_BYTES) {
-      await reader.cancel();
-      throw new Error('Theme archive exceeds compressed-size limit');
-    }
-    chunks.push(value);
-  }
-  return Buffer.concat(chunks, size);
-}
-
-function verifyIntegrity(bytes, integrity) {
-  const match = /^(sha512|sha384|sha256)-([A-Za-z0-9+/=]+)$/.exec(integrity ?? '');
-  if (match == null) throw new Error('Theme package has no supported registry integrity value');
-  const actual = createHash(match[1]).update(bytes).digest('base64');
-  if (actual !== match[2]) throw new Error('Theme package integrity verification failed');
-}
-
-async function validateArchive(archive) {
-  let entries = 0;
-  let total = 0;
-  await new Promise((resolve, reject) => {
-    const inspector = tar.t({
-      strict: true,
-      onReadEntry(entry) {
-        entries += 1;
-        total += entry.size;
-        const normalized = entry.path.replaceAll('\\', '/');
-        let error;
-        if (normalized !== 'package/' && !normalized.startsWith('package/')) error = 'Theme archive entry is outside package/';
-        else if (entry.type === 'SymbolicLink' || entry.type === 'Link') error = 'Theme archive links are forbidden';
-        else if (path.posix.isAbsolute(normalized) || normalized.split('/').includes('..')) error = 'Theme archive path is unsafe';
-        else if (entries > MAX_ENTRIES || entry.size > MAX_ENTRY_BYTES || total > MAX_TOTAL_BYTES) {
-          error = 'Theme archive exceeds extraction limits';
-        }
-        entry.resume();
-        if (error) inspector.abort(new Error(error));
-      }
-    });
-    inspector.once('error', reject);
-    inspector.once('close', resolve);
-    inspector.end(archive);
-  });
-}
-
-export async function fetchVerifiedThemePackage({ name, version, fetchImpl = fetch }) {
-  const metadataResponse = await fetchImpl(registryUrl(name, version), { headers: { Accept: 'application/json' } });
-  if (!metadataResponse.ok) throw new Error(`Theme metadata request failed with HTTP ${metadataResponse.status}`);
-  const metadata = await metadataResponse.json();
-  if (metadata.name !== name || metadata.version !== version || typeof metadata.dist?.tarball !== 'string') {
-    throw new Error('Theme registry metadata does not match the requested package');
-  }
-  if (!metadata.dist.integrity) throw new Error('Theme package registry metadata has no integrity value');
-  const archiveResponse = await fetchImpl(metadata.dist.tarball);
-  if (!archiveResponse.ok || archiveResponse.body == null) {
-    throw new Error(`Theme archive request failed with HTTP ${archiveResponse.status}`);
-  }
-  const archive = await boundedBody(archiveResponse);
-  verifyIntegrity(archive, metadata.dist.integrity);
-  await validateArchive(archive);
-
-  const staging = await mkdtemp(path.join(tmpdir(), 'gala-theme-'));
-  try {
-    await mkdir(staging, { recursive: true });
-    await new Promise((resolve, reject) => {
-      const extractor = tar.x({
-        cwd: staging,
-        strip: 1,
-        preservePaths: false,
-        strict: true
-      });
-      extractor.once('error', reject);
-      extractor.once('close', resolve);
-      extractor.end(archive);
-    });
-    const payloadRoot = path.join(staging, 'payload');
-    const manifest = JSON.parse(await readFile(path.join(payloadRoot, '.gala', 'managed-files.json'), 'utf8'));
-    if (manifest.themePackage?.name !== name || manifest.themePackage?.version !== version) {
-      throw new Error('Extracted theme manifest does not match registry identity');
-    }
-    for (const [relative, expected] of Object.entries(manifest.files ?? {})) {
-      const sourceRelative = manifest.artifactSources?.[relative] ?? relative;
-      const source = path.resolve(payloadRoot, sourceRelative);
-      const target = path.resolve(payloadRoot, relative);
-      if (path.relative(payloadRoot, source).startsWith('..') || path.relative(payloadRoot, target).startsWith('..')) {
-        throw new Error('Theme manifest path is unsafe');
-      }
-      const actual = createHash('sha256').update(await readFile(source)).digest('hex');
-      if (actual !== expected) throw new Error(`Theme file hash mismatch: ${relative}`);
-      if (source !== target) {
-        await mkdir(path.dirname(target), { recursive: true });
-        await copyFile(source, target);
-      }
-    }
-    return { staging: payloadRoot, cleanupRoot: staging, manifest };
-  } catch (error) {
-    await rm(staging, { recursive: true, force: true });
-    throw error;
-  }
-}

package/src/topology-client.js

@@ -1,43 +0,0 @@
-const ULID = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
-
-function endpoint(apiBaseUrl, siteId, suffix) {
-  if (!ULID.test(siteId)) throw new TypeError('siteId is invalid');
-  const base = new URL(apiBaseUrl);
-  const loopback = ['localhost', '127.0.0.1', '::1'].includes(base.hostname);
-  if ((base.protocol !== 'https:' && !(loopback && base.protocol === 'http:'))
-      || base.username || base.password || base.search || base.hash) {
-    throw new TypeError('apiBaseUrl must be a credential-free HTTPS URL (or HTTP loopback for testing)');
-  }
-  return new URL(`/v1/sites/${siteId}/topology-changes/${suffix}`, base).href;
-}
-
-async function response(response, operation) {
-  if (response.status === 401) throw new Error('Gala authentication expired; run `gala auth` again');
-  if (response.status === 404) throw new Error('Site is unavailable');
-  if (response.status === 409) throw new Error(`Topology ${operation} conflicts with protected state`);
-  if (!response.ok) throw new Error(`Topology ${operation} failed with HTTP ${response.status}`);
-  const payload = await response.json();
-  if (!ULID.test(payload?.changeId)) throw new TypeError('Topology response is invalid');
-  return Object.freeze(payload);
-}
-
-export async function prepareTopologyChange({
-  apiBaseUrl, accessToken, siteId, canonicalBaseUrl, pathPrefix, fetchImpl = fetch
-}) {
-  const result = await fetchImpl(endpoint(apiBaseUrl, siteId, 'prepare'), {
-    method: 'POST',
-    headers: { accept: 'application/json', authorization: `Bearer ${accessToken}`, 'content-type': 'application/json' },
-    body: JSON.stringify({ canonicalBaseUrl, pathPrefix })
-  });
-  return response(result, 'prepare');
-}
-
-export async function commitTopologyChange({
-  apiBaseUrl, accessToken, siteId, changeId, fetchImpl = fetch
-}) {
-  if (!ULID.test(changeId)) throw new TypeError('changeId is invalid');
-  const result = await fetchImpl(endpoint(apiBaseUrl, siteId, `${changeId}/commit`), {
-    method: 'POST', headers: { accept: 'application/json', authorization: `Bearer ${accessToken}` }
-  });
-  return response(result, 'commit');
-}

package/src/topology-command.js

@@ -1,70 +0,0 @@
-import { readFile, rm, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { parse } from 'yaml';
-import { spawn } from 'node:child_process';
-import { readGalaCredential } from './gala-credential-store.js';
-import { readGithubCredential } from './github-credential-store.js';
-import { writeRegisteredSiteConfiguration } from './site-config-registration.js';
-import { prepareTopologyChange, commitTopologyChange } from './topology-client.js';
-import { provisionGithubPages } from './github-pages-provisioning.js';
-
-function run(root, args, spawnProcess, accepted = [0]) {
-  return new Promise((resolve, reject) => {
-    const child = spawnProcess('git', ['-C', root, ...args], { cwd: root, shell: false, stdio: ['ignore', 'pipe', 'inherit'] });
-    let output = '';
-    child.stdout?.on('data', (chunk) => { output += chunk; });
-    child.once('error', reject);
-    child.once('exit', (code, signal) => {
-      if (signal) reject(new Error(`Git ${args[0]} terminated by signal ${signal}`));
-      else if (!accepted.includes(code)) reject(new Error(`Git ${args[0]} exited with code ${code}`));
-      else resolve({ code, output: output.trim() });
-    });
-  });
-}
-
-export async function switchTopology({
-  root, owner, repository, canonicalBaseUrl, pathPrefix = '/',
-  readGala = readGalaCredential, readGithub = readGithubCredential,
-  prepare = prepareTopologyChange, commit = commitTopologyChange,
-  provisionPages = provisionGithubPages, spawnProcess = spawn
-}) {
-  if (typeof owner !== 'string' || !/^[A-Za-z0-9_.-]+$/.test(owner)
-      || typeof repository !== 'string' || !/^[A-Za-z0-9_.-]+$/.test(repository)) {
-    throw new TypeError('owner and repository are required GitHub path segments');
-  }
-  const siteRoot = path.resolve(root);
-  const config = parse(await readFile(path.join(siteRoot, 'site.config.yml'), 'utf8'));
-  const siteId = config?.site?.id;
-  if (!/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/.test(siteId)) throw new TypeError('site.config.yml has no valid site id');
-  const [gala, github] = await Promise.all([readGala(), readGithub()]);
-  const pending = await prepare({
-    apiBaseUrl: gala.apiBaseUrl, accessToken: gala.accessToken, siteId, canonicalBaseUrl, pathPrefix
-  });
-  // A site served under a path holds no domain of its own — GitHub lends it the one on the
-  // owner's main site — so the absence of a cname no longer means the provider address.
-  const topology = pending.canonicalBaseUrl === `https://${owner.toLowerCase()}.github.io`
-    ? 'provider-default' : (pending.pathPrefix === '/' ? 'domain-root' : 'domain-subpath');
-  await writeRegisteredSiteConfiguration(siteRoot, {
-    siteId, canonicalBaseUrl: pending.canonicalBaseUrl,
-    pathPrefix: pending.pathPrefix, topology
-  });
-  const cnamePath = path.join(siteRoot, 'CNAME');
-  if (pending.cname == null) await rm(cnamePath, { force: true });
-  else await writeFile(cnamePath, `${pending.cname}\n`, { encoding: 'utf8' });
-  await run(siteRoot, ['add', '-A', '--', 'site.config.yml', 'CNAME'], spawnProcess);
-  const unchanged = await run(siteRoot, ['diff', '--cached', '--quiet', '--exit-code'], spawnProcess, [0, 1]);
-  if (unchanged.code === 1) {
-    await run(siteRoot, ['commit', '-m', `chore(gala): switch topology to ${topology}`], spawnProcess);
-  }
-  await run(siteRoot, ['push', 'origin', 'HEAD'], spawnProcess);
-  const { output: commitSha } = await run(siteRoot, ['rev-parse', 'HEAD'], spawnProcess);
-  if (!/^[0-9a-f]{40}$/.test(commitSha)) throw new Error('Git returned an invalid topology commit SHA');
-  await provisionPages({
-    owner, repository, accessToken: github.accessToken, commitSha, customDomain: pending.cname
-  });
-  const committed = await commit({
-    apiBaseUrl: gala.apiBaseUrl, accessToken: gala.accessToken,
-    siteId, changeId: pending.changeId
-  });
-  return Object.freeze({ ...committed, commitSha });
-}