@sealant/mend 0.22.0 → 0.24.0

package/dist/doctor.js

@@ -1,233 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-/**
- * `mend doctor`: one read-only pass over everything a first run depends on, printed
- * as mono status lines (DESIGN.md §4 — a mark plus a word, never a badge). Every
- * line states what was observed; a line that needs an action ends with the single
- * command that takes it. Nothing here writes, launches, or repairs anything.
- *
- * No request waits longer than 3s: a doctor that hangs is worse than a doctor that
- * reports "not checked".
- */
-const TIMEOUT_MS = 3_000;
-const MARKS = { ok: "✓", todo: "○", failed: "✗" };
-const LABEL_WIDTH = 11;
-/** One status line. The mark is painted by the caller so the formatter stays testable. */
-export const formatCheck = (check, paint = (_state, mark) => mark) => `${paint(check.state, MARKS[check.state])} ${check.label.padEnd(LABEL_WIDTH)} ${check.detail}${check.fix === null ? "" : ` → ${check.fix}`}`;
-/** A read that never throws and never blocks: the outcome is a value the checklist can print. */
-const getJson = async (config, route) => {
-    try {
-        const response = await fetch(`${config.url}/api${route}`, {
-            headers: config.token === null ? {} : { authorization: `Bearer ${config.token}` },
-            signal: AbortSignal.timeout(TIMEOUT_MS),
-        });
-        if (!response.ok)
-            return { value: null, status: response.status };
-        return { value: (await response.json()), status: response.status };
-    }
-    catch {
-        return { value: null, status: null };
-    }
-};
-/** Where each provider's own CLI writes the credential Mend forwards (mirrors `mend connect`). */
-const LOGIN_COMMANDS = {
-    claude: "claude setup-token",
-    codex: "codex login",
-    github: "gh auth login",
-};
-const HARNESS_CLIS = [
-    { command: "claude", provider: "claude" },
-    { command: "codex", provider: "codex" },
-    { command: "gh", provider: "github" },
-];
-const notChecked = (label) => ({
-    label,
-    state: "todo",
-    detail: "not checked",
-    fix: null,
-});
-const identityOf = (account) => {
-    const meta = account.metadata;
-    for (const key of ["login", "email", "accountEmail", "accountId"]) {
-        const value = meta[key];
-        if (typeof value === "string" && value !== "")
-            return value;
-    }
-    return null;
-};
-/** Every fact the checklist prints, in the order a first run needs them. */
-export const runChecks = async (config, probes) => {
-    const checks = [];
-    const health = await getJson(config, "/health");
-    checks.push(health.value === null
-        ? {
-            label: "server",
-            state: "failed",
-            detail: `cannot reach ${config.url}`,
-            fix: "start the Mend server",
-        }
-        : {
-            label: "server",
-            state: "ok",
-            detail: `${config.url} · mend ${health.value.version}`,
-            fix: null,
-        });
-    // Projects double as the cheapest authenticated read there is: it proves the token
-    // without asking the platform anything.
-    const projects = health.value !== null && config.token !== null
-        ? await getJson(config, "/projects")
-        : null;
-    if (health.value === null)
-        checks.push(notChecked("signed in"));
-    else if (config.token === null) {
-        checks.push({
-            label: "signed in",
-            state: "failed",
-            detail: "no token saved",
-            fix: "mend login",
-        });
-    }
-    else if (projects !== null && projects.value !== null) {
-        checks.push({ label: "signed in", state: "ok", detail: "token accepted", fix: null });
-    }
-    else {
-        const status = projects === null ? null : projects.status;
-        checks.push(status === 401 || status === 403
-            ? { label: "signed in", state: "failed", detail: "token rejected", fix: "mend login" }
-            : {
-                label: "signed in",
-                state: "failed",
-                detail: `GET /projects → ${status ?? "no answer"}`,
-                fix: null,
-            });
-    }
-    const signedIn = projects !== null && projects.value !== null;
-    const connection = signedIn ? await getJson(config, "/sealant/connection") : null;
-    if (connection === null)
-        checks.push(notChecked("sealant"));
-    else if (connection.value === null) {
-        // 404 is a server older than the endpoint: nothing was observed, so nothing is claimed.
-        checks.push(connection.status === 404
-            ? notChecked("sealant")
-            : {
-                label: "sealant",
-                state: "failed",
-                detail: `GET /sealant/connection → ${connection.status ?? "no answer"}`,
-                fix: null,
-            });
-    }
-    else if (connection.value.status === "connected") {
-        checks.push({
-            label: "sealant",
-            state: "ok",
-            detail: `connected · ${connection.value.baseUrl}`,
-            fix: null,
-        });
-    }
-    else {
-        checks.push({
-            label: "sealant",
-            state: "failed",
-            detail: `${connection.value.status} · ${connection.value.detail ?? connection.value.baseUrl}`,
-            fix: null,
-        });
-    }
-    const identity = signedIn ? await getJson(config, "/me/sealant") : null;
-    const platform = identity === null ? null : identity.value;
-    for (const { provider } of HARNESS_CLIS) {
-        if (platform === null) {
-            checks.push(notChecked(provider));
-            continue;
-        }
-        const account = platform.accounts.find((row) => row.provider === provider && row.name === "default") ??
-            platform.accounts.find((row) => row.provider === provider);
-        if (account === undefined) {
-            checks.push({
-                label: provider,
-                state: "todo",
-                detail: "not connected",
-                fix: `mend connect ${provider}`,
-            });
-            continue;
-        }
-        const who = identityOf(account);
-        checks.push(account.status === "active"
-            ? {
-                label: provider,
-                state: "ok",
-                detail: who === null ? "connected" : `connected · ${who}`,
-                fix: null,
-            }
-            : {
-                label: provider,
-                state: "todo",
-                detail: account.status,
-                fix: `mend connect ${provider}`,
-            });
-    }
-    const adopted = projects === null ? null : projects.value;
-    if (adopted === null)
-        checks.push(notChecked("projects"));
-    else if (adopted.length === 0) {
-        checks.push({ label: "projects", state: "todo", detail: "none adopted", fix: "mend adopt" });
-    }
-    else {
-        checks.push({ label: "projects", state: "ok", detail: `${adopted.length} adopted`, fix: null });
-    }
-    for (const { command, provider } of HARNESS_CLIS) {
-        const label = `${command} cli`;
-        if (!probes.onPath(command)) {
-            checks.push({ label, state: "todo", detail: "not on PATH", fix: null });
-            continue;
-        }
-        const credential = probes.localCredential(provider);
-        checks.push(credential === null
-            ? {
-                label,
-                state: "todo",
-                detail: "on PATH · no credential here",
-                fix: LOGIN_COMMANDS[provider],
-            }
-            : { label, state: "ok", detail: "on PATH · credential present", fix: null });
-    }
-    const machine = signedIn ? await getJson(config, "/machine") : null;
-    const tailnet = machine === null || machine.value === null ? null : machine.value.tailnet;
-    if (tailnet === null)
-        checks.push(notChecked("tailnet"));
-    else if (tailnet.status === "reachable" && tailnet.address !== null) {
-        checks.push({ label: "tailnet", state: "ok", detail: tailnet.address, fix: null });
-    }
-    else {
-        checks.push({ label: "tailnet", state: "todo", detail: "not detected", fix: null });
-    }
-    return checks;
-};
-/** An executable of that name on PATH — the question `command -v` asks, without a subprocess. */
-export const onPath = (command) => {
-    for (const directory of (process.env["PATH"] ?? "").split(path.delimiter)) {
-        if (directory === "")
-            continue;
-        try {
-            fs.accessSync(path.join(directory, command), fs.constants.X_OK);
-            return true;
-        }
-        catch {
-            // keep looking
-        }
-    }
-    return false;
-};
-/** Green observed · amber not started · red a blocker (DESIGN.md §4); plain text on a pipe. */
-const paintMark = (state, mark) => {
-    if (process.stdout.isTTY !== true)
-        return mark;
-    const code = state === "ok" ? "32" : state === "todo" ? "33" : "31";
-    return `[${code}m${mark}`;
-};
-export const doctorCommand = async (config, localCredential) => {
-    const checks = await runChecks(config, { localCredential, onPath });
-    for (const check of checks)
-        process.stdout.write(`${formatCheck(check, paintMark)}\n`);
-    if (checks.some((check) => check.state === "failed"))
-        process.exitCode = 1;
-};

package/dist/dotfiles.js

@@ -1,90 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-/**
- * Local dotfiles scanning for `mend dotfiles sync`. This runs on the machine that HAS the
- * files — the whole point: the Mend server may be a VPS whose home directory is a service
- * account's, so contents are captured here and streamed to the server's per-user dotfiles store.
- *
- * The candidate list mirrors the product's curated set (plain configuration only — never keys,
- * credential stores, or histories). The CLI stays dependency-light by design, so the list is
- * duplicated here rather than imported from a workspace package.
- */
-export const DOTFILE_CANDIDATES = [
-    {
-        group: "shell",
-        paths: [
-            ".zshrc",
-            ".zshenv",
-            ".zprofile",
-            ".bashrc",
-            ".bash_profile",
-            ".profile",
-            ".aliases",
-            ".config/fish/config.fish",
-            ".config/starship.toml",
-        ],
-    },
-    {
-        group: "git",
-        paths: [".gitconfig", ".gitignore_global", ".config/git/config", ".config/git/ignore"],
-    },
-    {
-        group: "editors",
-        paths: [".vimrc", ".ideavimrc", ".editorconfig", ".config/helix/config.toml"],
-    },
-    {
-        group: "terminal",
-        paths: [".tmux.conf", ".config/tmux/tmux.conf", ".inputrc", ".dir_colors"],
-    },
-    {
-        group: "tools",
-        paths: [
-            ".ripgreprc",
-            ".config/bat/config",
-            ".config/lazygit/config.yml",
-            ".config/mise/config.toml",
-            ".config/atuin/config.toml",
-            ".config/zellij/config.kdl",
-        ],
-    },
-];
-/** The per-file cap the server enforces; checked here so a mistake fails before the upload. */
-export const MAX_FILE_BYTES = 1024 * 1024;
-const statFile = (home, relative) => {
-    try {
-        const stat = fs.statSync(path.join(home, relative));
-        return stat.isFile() ? stat : null;
-    }
-    catch {
-        return null;
-    }
-};
-/** Probe the curated candidates under `home`; only existing regular files appear. */
-export const scanDotfileCandidates = (home) => DOTFILE_CANDIDATES.flatMap(({ group, paths }) => paths.flatMap((relative) => {
-    const stat = statFile(home, relative);
-    return stat === null ? [] : [{ path: relative, group, bytes: stat.size }];
-}));
-/**
- * Read the selected paths for upload. Explicitly requested paths must exist (a typo should fail,
- * not silently sync nothing); oversized files fail with the server's own rule. Modes ride along
- * so an executable script stays executable.
- */
-export const readSyncFiles = (home, paths_) => {
-    const files = [];
-    for (const relative of paths_) {
-        const stat = statFile(home, relative);
-        if (stat === null) {
-            return { error: `${relative} is not a file under ${home}` };
-        }
-        if (stat.size > MAX_FILE_BYTES) {
-            return { error: `${relative} is over 1MB — dotfiles are text; trim the selection` };
-        }
-        files.push({
-            path: relative,
-            contentsBase64: fs.readFileSync(path.join(home, relative)).toString("base64"),
-            // eslint-disable-next-line no-bitwise -- permission bits are the point
-            mode: (stat.mode & 0o777).toString(8),
-        });
-    }
-    return { files };
-};

package/dist/env.js

@@ -1,17 +0,0 @@
-/**
- * `mend env`: load a dotenv file into the project's env store, and show what is stored. Parsing
- * AND routing happen SERVER-SIDE (one parser for the CLI and the browser); the CLI ships the file
- * text once and prints the per-name report. Values are never printed.
- */
-/** Render the report as terse status lines — names, lanes, actions, reasons; never a value. */
-export const formatLoadReport = (report, paint) => {
-    const width = Math.max(0, ...report.loaded.map((entry) => entry.name.length), ...report.rejected.map((entry) => entry.name.length));
-    const lines = [];
-    for (const entry of report.loaded) {
-        lines.push(`  ${entry.name.padEnd(width)}  ${entry.lane === "secret" ? "secret" : "configuration"} ${paint.dim(`· ${entry.action}${entry.lane === "configuration" ? " · plaintext" : ""}`)}`);
-    }
-    for (const entry of report.rejected) {
-        lines.push(`  ${entry.name.padEnd(width)}  ${paint.warn("rejected")} ${paint.dim(`· ${entry.reason}`)}`);
-    }
-    return lines;
-};