@rathnasgala/cli 0.0.22 → 1.1.4

package/src/theme-package.js

@@ -1,128 +0,0 @@
-import { createHash } from 'node:crypto';
-import { copyFile, mkdir, mkdtemp, readFile, rm } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-
-import * as tar from 'tar';
-
-const MAX_COMPRESSED_BYTES = 10 * 1024 * 1024;
-const MAX_ENTRY_BYTES = 10 * 1024 * 1024;
-const MAX_TOTAL_BYTES = 50 * 1024 * 1024;
-const MAX_ENTRIES = 2_048;
-const EXACT_VERSION = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
-
-function registryUrl(name, version) {
-  if (name !== '@rathnasgala/theme' || !EXACT_VERSION.test(version)) {
-    throw new TypeError('theme package name and exact version are required');
-  }
-  return `https://registry.npmjs.org/${encodeURIComponent(name)}/${encodeURIComponent(version)}`;
-}
-
-async function boundedBody(response) {
-  const length = Number(response.headers.get('content-length'));
-  if (Number.isFinite(length) && length > MAX_COMPRESSED_BYTES) throw new Error('Theme archive exceeds compressed-size limit');
-  const reader = response.body.getReader();
-  const chunks = [];
-  let size = 0;
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > MAX_COMPRESSED_BYTES) {
-      await reader.cancel();
-      throw new Error('Theme archive exceeds compressed-size limit');
-    }
-    chunks.push(value);
-  }
-  return Buffer.concat(chunks, size);
-}
-
-function verifyIntegrity(bytes, integrity) {
-  const match = /^(sha512|sha384|sha256)-([A-Za-z0-9+/=]+)$/.exec(integrity ?? '');
-  if (match == null) throw new Error('Theme package has no supported registry integrity value');
-  const actual = createHash(match[1]).update(bytes).digest('base64');
-  if (actual !== match[2]) throw new Error('Theme package integrity verification failed');
-}
-
-async function validateArchive(archive) {
-  let entries = 0;
-  let total = 0;
-  await new Promise((resolve, reject) => {
-    const inspector = tar.t({
-      strict: true,
-      onReadEntry(entry) {
-        entries += 1;
-        total += entry.size;
-        const normalized = entry.path.replaceAll('\\', '/');
-        let error;
-        if (normalized !== 'package/' && !normalized.startsWith('package/')) error = 'Theme archive entry is outside package/';
-        else if (entry.type === 'SymbolicLink' || entry.type === 'Link') error = 'Theme archive links are forbidden';
-        else if (path.posix.isAbsolute(normalized) || normalized.split('/').includes('..')) error = 'Theme archive path is unsafe';
-        else if (entries > MAX_ENTRIES || entry.size > MAX_ENTRY_BYTES || total > MAX_TOTAL_BYTES) {
-          error = 'Theme archive exceeds extraction limits';
-        }
-        entry.resume();
-        if (error) inspector.abort(new Error(error));
-      }
-    });
-    inspector.once('error', reject);
-    inspector.once('close', resolve);
-    inspector.end(archive);
-  });
-}
-
-export async function fetchVerifiedThemePackage({ name, version, fetchImpl = fetch }) {
-  const metadataResponse = await fetchImpl(registryUrl(name, version), { headers: { Accept: 'application/json' } });
-  if (!metadataResponse.ok) throw new Error(`Theme metadata request failed with HTTP ${metadataResponse.status}`);
-  const metadata = await metadataResponse.json();
-  if (metadata.name !== name || metadata.version !== version || typeof metadata.dist?.tarball !== 'string') {
-    throw new Error('Theme registry metadata does not match the requested package');
-  }
-  if (!metadata.dist.integrity) throw new Error('Theme package registry metadata has no integrity value');
-  const archiveResponse = await fetchImpl(metadata.dist.tarball);
-  if (!archiveResponse.ok || archiveResponse.body == null) {
-    throw new Error(`Theme archive request failed with HTTP ${archiveResponse.status}`);
-  }
-  const archive = await boundedBody(archiveResponse);
-  verifyIntegrity(archive, metadata.dist.integrity);
-  await validateArchive(archive);
-
-  const staging = await mkdtemp(path.join(tmpdir(), 'gala-theme-'));
-  try {
-    await mkdir(staging, { recursive: true });
-    await new Promise((resolve, reject) => {
-      const extractor = tar.x({
-        cwd: staging,
-        strip: 1,
-        preservePaths: false,
-        strict: true
-      });
-      extractor.once('error', reject);
-      extractor.once('close', resolve);
-      extractor.end(archive);
-    });
-    const payloadRoot = path.join(staging, 'payload');
-    const manifest = JSON.parse(await readFile(path.join(payloadRoot, '.gala', 'managed-files.json'), 'utf8'));
-    if (manifest.themePackage?.name !== name || manifest.themePackage?.version !== version) {
-      throw new Error('Extracted theme manifest does not match registry identity');
-    }
-    for (const [relative, expected] of Object.entries(manifest.files ?? {})) {
-      const sourceRelative = manifest.artifactSources?.[relative] ?? relative;
-      const source = path.resolve(payloadRoot, sourceRelative);
-      const target = path.resolve(payloadRoot, relative);
-      if (path.relative(payloadRoot, source).startsWith('..') || path.relative(payloadRoot, target).startsWith('..')) {
-        throw new Error('Theme manifest path is unsafe');
-      }
-      const actual = createHash('sha256').update(await readFile(source)).digest('hex');
-      if (actual !== expected) throw new Error(`Theme file hash mismatch: ${relative}`);
-      if (source !== target) {
-        await mkdir(path.dirname(target), { recursive: true });
-        await copyFile(source, target);
-      }
-    }
-    return { staging: payloadRoot, cleanupRoot: staging, manifest };
-  } catch (error) {
-    await rm(staging, { recursive: true, force: true });
-    throw error;
-  }
-}

package/src/topology-client.js

@@ -1,43 +0,0 @@
-const ULID = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
-
-function endpoint(apiBaseUrl, siteId, suffix) {
-  if (!ULID.test(siteId)) throw new TypeError('siteId is invalid');
-  const base = new URL(apiBaseUrl);
-  const loopback = ['localhost', '127.0.0.1', '::1'].includes(base.hostname);
-  if ((base.protocol !== 'https:' && !(loopback && base.protocol === 'http:'))
-      || base.username || base.password || base.search || base.hash) {
-    throw new TypeError('apiBaseUrl must be a credential-free HTTPS URL (or HTTP loopback for testing)');
-  }
-  return new URL(`/v1/sites/${siteId}/topology-changes/${suffix}`, base).href;
-}
-
-async function response(response, operation) {
-  if (response.status === 401) throw new Error('Gala authentication expired; run `gala auth` again');
-  if (response.status === 404) throw new Error('Site is unavailable');
-  if (response.status === 409) throw new Error(`Topology ${operation} conflicts with protected state`);
-  if (!response.ok) throw new Error(`Topology ${operation} failed with HTTP ${response.status}`);
-  const payload = await response.json();
-  if (!ULID.test(payload?.changeId)) throw new TypeError('Topology response is invalid');
-  return Object.freeze(payload);
-}
-
-export async function prepareTopologyChange({
-  apiBaseUrl, accessToken, siteId, canonicalBaseUrl, pathPrefix, fetchImpl = fetch
-}) {
-  const result = await fetchImpl(endpoint(apiBaseUrl, siteId, 'prepare'), {
-    method: 'POST',
-    headers: { accept: 'application/json', authorization: `Bearer ${accessToken}`, 'content-type': 'application/json' },
-    body: JSON.stringify({ canonicalBaseUrl, pathPrefix })
-  });
-  return response(result, 'prepare');
-}
-
-export async function commitTopologyChange({
-  apiBaseUrl, accessToken, siteId, changeId, fetchImpl = fetch
-}) {
-  if (!ULID.test(changeId)) throw new TypeError('changeId is invalid');
-  const result = await fetchImpl(endpoint(apiBaseUrl, siteId, `${changeId}/commit`), {
-    method: 'POST', headers: { accept: 'application/json', authorization: `Bearer ${accessToken}` }
-  });
-  return response(result, 'commit');
-}

package/src/topology-command.js

@@ -1,70 +0,0 @@
-import { readFile, rm, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { parse } from 'yaml';
-import { spawn } from 'node:child_process';
-import { readGalaCredential } from './gala-credential-store.js';
-import { readGithubCredential } from './github-credential-store.js';
-import { writeRegisteredSiteConfiguration } from './site-config-registration.js';
-import { prepareTopologyChange, commitTopologyChange } from './topology-client.js';
-import { provisionGithubPages } from './github-pages-provisioning.js';
-
-function run(root, args, spawnProcess, accepted = [0]) {
-  return new Promise((resolve, reject) => {
-    const child = spawnProcess('git', ['-C', root, ...args], { cwd: root, shell: false, stdio: ['ignore', 'pipe', 'inherit'] });
-    let output = '';
-    child.stdout?.on('data', (chunk) => { output += chunk; });
-    child.once('error', reject);
-    child.once('exit', (code, signal) => {
-      if (signal) reject(new Error(`Git ${args[0]} terminated by signal ${signal}`));
-      else if (!accepted.includes(code)) reject(new Error(`Git ${args[0]} exited with code ${code}`));
-      else resolve({ code, output: output.trim() });
-    });
-  });
-}
-
-export async function switchTopology({
-  root, owner, repository, canonicalBaseUrl, pathPrefix = '/',
-  readGala = readGalaCredential, readGithub = readGithubCredential,
-  prepare = prepareTopologyChange, commit = commitTopologyChange,
-  provisionPages = provisionGithubPages, spawnProcess = spawn
-}) {
-  if (typeof owner !== 'string' || !/^[A-Za-z0-9_.-]+$/.test(owner)
-      || typeof repository !== 'string' || !/^[A-Za-z0-9_.-]+$/.test(repository)) {
-    throw new TypeError('owner and repository are required GitHub path segments');
-  }
-  const siteRoot = path.resolve(root);
-  const config = parse(await readFile(path.join(siteRoot, 'site.config.yml'), 'utf8'));
-  const siteId = config?.site?.id;
-  if (!/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/.test(siteId)) throw new TypeError('site.config.yml has no valid site id');
-  const [gala, github] = await Promise.all([readGala(), readGithub()]);
-  const pending = await prepare({
-    apiBaseUrl: gala.apiBaseUrl, accessToken: gala.accessToken, siteId, canonicalBaseUrl, pathPrefix
-  });
-  // A site served under a path holds no domain of its own — GitHub lends it the one on the
-  // owner's main site — so the absence of a cname no longer means the provider address.
-  const topology = pending.canonicalBaseUrl === `https://${owner.toLowerCase()}.github.io`
-    ? 'provider-default' : (pending.pathPrefix === '/' ? 'domain-root' : 'domain-subpath');
-  await writeRegisteredSiteConfiguration(siteRoot, {
-    siteId, canonicalBaseUrl: pending.canonicalBaseUrl,
-    pathPrefix: pending.pathPrefix, topology
-  });
-  const cnamePath = path.join(siteRoot, 'CNAME');
-  if (pending.cname == null) await rm(cnamePath, { force: true });
-  else await writeFile(cnamePath, `${pending.cname}\n`, { encoding: 'utf8' });
-  await run(siteRoot, ['add', '-A', '--', 'site.config.yml', 'CNAME'], spawnProcess);
-  const unchanged = await run(siteRoot, ['diff', '--cached', '--quiet', '--exit-code'], spawnProcess, [0, 1]);
-  if (unchanged.code === 1) {
-    await run(siteRoot, ['commit', '-m', `chore(gala): switch topology to ${topology}`], spawnProcess);
-  }
-  await run(siteRoot, ['push', 'origin', 'HEAD'], spawnProcess);
-  const { output: commitSha } = await run(siteRoot, ['rev-parse', 'HEAD'], spawnProcess);
-  if (!/^[0-9a-f]{40}$/.test(commitSha)) throw new Error('Git returned an invalid topology commit SHA');
-  await provisionPages({
-    owner, repository, accessToken: github.accessToken, commitSha, customDomain: pending.cname
-  });
-  const committed = await commit({
-    apiBaseUrl: gala.apiBaseUrl, accessToken: gala.accessToken,
-    siteId, changeId: pending.changeId
-  });
-  return Object.freeze({ ...committed, commitSha });
-}

package/src/upgrade-command.js

@@ -1,81 +0,0 @@
-import { lstat, readFile, rm } from 'node:fs/promises';
-import path from 'node:path';
-import { parse, stringify } from 'yaml';
-
-import { repairFramework } from './doctor-command.js';
-import { fetchVerifiedThemePackage } from './theme-package.js';
-
-const NAME = '@rathnasgala/theme';
-const ACTION_WORKFLOW = '.github/workflows/publish.yml';
-const ACTION_REFERENCE = /rathnasgala\/publish\/\.github\/workflows\/publish\.yml@v([1-9][0-9]*)/g;
-const ACTION_TAG = /^v([1-9][0-9]*)(?:\.[0-9]+\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?)?$/;
-
-async function registryMetadata(fetchImpl) {
-  const response = await fetchImpl(`https://registry.npmjs.org/${encodeURIComponent(NAME)}`, {
-    headers: { Accept: 'application/json' }
-  });
-  if (!response.ok) throw new Error(`Theme registry request failed with HTTP ${response.status}`);
-  return response.json();
-}
-
-export async function inspectActionUpgrade({ root, fetchImpl = fetch }) {
-  const workflowPath = path.resolve(root, ACTION_WORKFLOW);
-  const metadata = await lstat(workflowPath);
-  if (!metadata.isFile() || metadata.isSymbolicLink()) {
-    throw new TypeError('Publish workflow must be a regular file');
-  }
-  const workflow = await readFile(workflowPath, 'utf8');
-  const majors = [...workflow.matchAll(ACTION_REFERENCE)].map((match) => Number(match[1]));
-  if (majors.length === 0 || new Set(majors).size !== 1) {
-    throw new Error('Publish workflow must reference exactly one Gala action major');
-  }
-  const response = await fetchImpl('https://api.github.com/repos/rathnasgala/publish/tags?per_page=100', {
-    headers: { Accept: 'application/vnd.github+json', 'X-GitHub-Api-Version': '2026-03-10' }
-  });
-  if (!response.ok) throw new Error(`Action release lookup failed with HTTP ${response.status}`);
-  const tags = await response.json();
-  if (!Array.isArray(tags)) throw new TypeError('Action release response must be an array');
-  const releasedMajors = tags.map((tag) => ACTION_TAG.exec(tag?.name)?.[1])
-    .filter((major) => major != null).map(Number);
-  const currentMajor = majors[0];
-  const latestMajor = releasedMajors.length === 0 ? currentMajor : Math.max(...releasedMajors);
-  return Object.freeze({ currentMajor, latestMajor, newerAvailable: latestMajor > currentMajor });
-}
-
-export async function upgradeTheme({ root, channel, confirm, fetchImpl = fetch }) {
-  const configPath = path.resolve(root, 'site.config.yml');
-  const config = parse(await readFile(configPath, 'utf8'));
-  if (config?.canonicalPolicy != null) {
-    if (config.canonicalPolicy !== 'self' || config.hosting == null || Array.isArray(config.hosting)
-        || (config.hosting.canonicalPolicy != null && config.hosting.canonicalPolicy !== 'self')) {
-      throw new TypeError('Legacy canonicalPolicy cannot be migrated safely');
-    }
-    config.hosting.canonicalPolicy = 'self';
-    delete config.canonicalPolicy;
-  }
-  const installed = config?.framework?.themePackage?.version;
-  const [metadata, action] = await Promise.all([
-    registryMetadata(fetchImpl), inspectActionUpgrade({ root, fetchImpl })
-  ]);
-  const selectedChannel = channel ?? (metadata['dist-tags']?.next === installed ? 'next' : 'latest');
-  if (!['latest', 'next'].includes(selectedChannel)) throw new TypeError('theme channel must be latest or next');
-  const version = metadata['dist-tags']?.[selectedChannel];
-  if (typeof version !== 'string') throw new Error(`Theme channel ${selectedChannel} has no resolved version`);
-  if (version === installed) return { changed: false, channel: selectedChannel, version, repaired: [], action };
-  if (typeof confirm !== 'function' || !await confirm({ name: NAME, installed, channel: selectedChannel, version })) {
-    return { changed: false, cancelled: true, channel: selectedChannel, version, repaired: [], action };
-  }
-  const downloaded = await fetchVerifiedThemePackage({ name: NAME, version, fetchImpl });
-  try {
-    if (!downloaded.manifest.themePackage.availableDesignThemes?.includes(config?.design?.theme)) {
-      throw new Error(`Visual theme ${String(config?.design?.theme)} is unavailable in ${NAME}@${version}`);
-    }
-    config.framework.themePackage = { name: NAME, version };
-    const repaired = await repairFramework(root, downloaded.staging, {
-      siteConfiguration: stringify(config)
-    });
-    return { changed: true, channel: selectedChannel, version, repaired, action };
-  } finally {
-    await rm(downloaded.cleanupRoot, { recursive: true, force: true });
-  }
-}

package/src/validate-command.js

@@ -1,5 +0,0 @@
-export {
-  BUILD_MANIFEST_PATH,
-  regenerateBuildManifest,
-  validateContent
-} from '@rathnasgala/content-validation';

package/src/workflow-command.js

@@ -1,87 +0,0 @@
-import { createHash } from 'node:crypto';
-import { lstat, mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-
-const ACTION_REF = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+\/.github\/workflows\/[A-Za-z0-9_.-]+\.ya?ml@v(?:[1-9][0-9]*|[0-9]+\.[0-9]+\.[0-9]+)$/;
-const BRANCH = /^(?![./])(?!.*\.\.)(?!.*[~^:?*\[\\])[A-Za-z0-9._/-]+(?<![/.])$/;
-
-export function deriveNightlySchedule(siteId) {
-  if (typeof siteId !== 'string' || siteId.trim() === '') throw new TypeError('siteId is required');
-  const digest = createHash('sha256').update(siteId, 'utf8').digest();
-  return { minute: digest.readUInt16BE(0) % 60, hour: digest.readUInt16BE(2) % 24 };
-}
-
-function validateTimezone(timezone) {
-  try {
-    new Intl.DateTimeFormat('en-US', { timeZone: timezone }).format(0);
-  } catch {
-    throw new TypeError(`Invalid IANA timezone: ${timezone}`);
-  }
-}
-
-export async function writePublishWorkflow({
-  root,
-  siteId,
-  timezone,
-  actionRef = 'rathnasgala/publish/.github/workflows/publish.yml@v1',
-  defaultBranch = 'main',
-  buildMode = 'build-and-deploy'
-}) {
-  validateTimezone(timezone);
-  if (!ACTION_REF.test(actionRef)) {
-    throw new TypeError('actionRef must pin a reusable workflow to a major or immutable semver tag');
-  }
-  if (!BRANCH.test(defaultBranch)) throw new TypeError('Invalid default branch');
-  if (!['build-only', 'build-and-deploy'].includes(buildMode)) throw new TypeError('Invalid build mode');
-
-  const resolvedRoot = path.resolve(root);
-  const templatePath = path.join(resolvedRoot, '.gala', 'publish.yml.template');
-  const target = path.join(resolvedRoot, '.github', 'workflows', 'publish.yml');
-  const templateMetadata = await lstat(templatePath);
-  if (!templateMetadata.isFile() || templateMetadata.isSymbolicLink()) {
-    throw new TypeError('Workflow template must be a regular file');
-  }
-  try {
-    const targetMetadata = await lstat(target);
-    if (targetMetadata.isSymbolicLink() || !targetMetadata.isFile()) {
-      throw new TypeError('Workflow target must be a regular file');
-    }
-  } catch (error) {
-    if (error.code !== 'ENOENT') throw error;
-  }
-
-  const { minute, hour } = deriveNightlySchedule(siteId);
-  const workflow = (await readFile(templatePath, 'utf8'))
-    .replaceAll('__DEFAULT_BRANCH__', defaultBranch)
-    .replaceAll('__CRON__', `${minute} ${hour} * * *`)
-    .replaceAll('__TIMEZONE__', timezone)
-    .replaceAll('__SITE_ID__', siteId)
-    .replaceAll('__ACTION_REF__', actionRef)
-    .replaceAll('__BUILD_MODE__', buildMode);
-  if (/__[A-Z_]+__/.test(workflow)) throw new TypeError('Workflow template contains unresolved placeholders');
-
-  await mkdir(path.dirname(target), { recursive: true });
-  const temporary = `${target}.gala-workflow-${process.pid}`;
-  const backup = `${target}.gala-backup-${process.pid}`;
-  let backedUp = false;
-  try {
-    await writeFile(temporary, workflow, { flag: 'wx' });
-    try {
-      await rename(target, backup);
-      backedUp = true;
-    } catch (error) {
-      if (error.code !== 'ENOENT') throw error;
-    }
-    try {
-      await rename(temporary, target);
-    } catch (error) {
-      if (backedUp) await rename(backup, target);
-      throw error;
-    }
-    if (backedUp) await rm(backup);
-  } catch (error) {
-    await rm(temporary, { force: true });
-    throw error;
-  }
-  return { target, minute, hour };
-}