@shopify/cli-kit 3.39.0 → 3.40.0

package/assets/cli-ruby/Codespace.dockerfile

@@ -0,0 +1,35 @@
+# This is a Docker image to test the CLI in UNIX environments other than macOS
+# Build the image: docker build . -t shopify-cli
+# Run tests: docker run -t --rm --volume "$(pwd):/usr/src/app" shopify-cli bundle exec rake test
+FROM cimg/ruby:2.7.5
+
+RUN git config --global user.email "development-lifecycle@shopify.com"
+RUN git config --global user.name "Development Lifecycle"
+
+RUN gem update bundler
+
+WORKDIR /usr/src/app
+
+COPY Gemfile Gemfile.lock ./
+COPY shopify-cli.gemspec  shopify-cli.gemspec
+COPY lib/shopify_cli/version.rb  lib/shopify_cli/version.rb
+RUN bundle install
+
+# Update git
+RUN sudo add-apt-repository -y ppa:git-core/ppa
+RUN sudo apt-get update
+RUN sudo apt-get install git -y
+
+# Install the latest version of NodeJS
+RUN sudo apt-get install ca-certificates -y
+RUN curl -fsSL https://deb.nodesource.com/setup_current.x | sudo -E bash -
+RUN sudo apt-get install -y nodejs
+
+# Install the latest version of Yarn
+RUN sudo npm install --global yarn
+
+# Python is necessary to compile NPM packages with native extensions through node-gyp
+RUN sudo apt install python2-minimal -y
+
+# Install sqlite3
+RUN sudo apt-get install libsqlite3-dev -y

package/assets/cli-ruby/Gemfile

@@ -0,0 +1,31 @@
+# NOTE: These are development-only dependencies
+source "https://rubygems.org"
+
+gemspec
+
+# None of these can actually be used in a development copy of dev
+# They are all for CI and tests
+# `dev` uses no gems
+group :development, :test do
+  gem "rake"
+  gem "pry-byebug"
+  gem "byebug"
+  gem "rubocop-shopify", require: false
+  gem "rubocop-minitest", require: false
+  gem "rubocop-rake", require: false
+  gem "iniparse", "~> 1.5"
+  gem "colorize", "~> 0.8.1"
+  gem "octokit", "~> 4.0"
+end
+
+group :test do
+  gem "mocha", require: false
+  gem "minitest", ">= 5.0.0", require: false
+  gem "minitest-reporters", require: false
+  gem "minitest-fail-fast", require: false
+  gem "fakefs", ">= 1.0", require: false
+  gem "webmock", require: false
+  gem "timecop", require: false
+  gem "rack", require: false
+  gem "cucumber", "~> 7.0", require: false
+end

package/assets/cli-ruby/Gemfile.lock

@@ -0,0 +1,190 @@
+PATH
+  remote: .
+  specs:
+    shopify-cli (2.34.0)
+      bugsnag (~> 6.22)
+      listen (~> 3.7.0)
+      theme-check (~> 1.14.0)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    addressable (2.8.0)
+      public_suffix (>= 2.0.2, < 5.0)
+    ansi (1.5.0)
+    ast (2.4.2)
+    bugsnag (6.24.2)
+      concurrent-ruby (~> 1.0)
+    builder (3.2.4)
+    byebug (11.1.3)
+    coderay (1.1.3)
+    colorize (0.8.1)
+    concurrent-ruby (1.1.10)
+    crack (0.4.5)
+      rexml
+    cucumber (7.0.0)
+      builder (~> 3.2, >= 3.2.4)
+      cucumber-core (~> 10.0, >= 10.0.1)
+      cucumber-create-meta (~> 6.0, >= 6.0.1)
+      cucumber-cucumber-expressions (~> 12.1, >= 12.1.1)
+      cucumber-gherkin (~> 20.0, >= 20.0.1)
+      cucumber-html-formatter (~> 16.0, >= 16.0.1)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+      cucumber-wire (~> 6.0, >= 6.0.1)
+      diff-lcs (~> 1.4, >= 1.4.4)
+      mime-types (~> 3.3, >= 3.3.1)
+      multi_test (~> 0.1, >= 0.1.2)
+      sys-uname (~> 1.2, >= 1.2.2)
+    cucumber-core (10.0.1)
+      cucumber-gherkin (~> 20.0, >= 20.0.1)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+      cucumber-tag-expressions (~> 3.0, >= 3.0.1)
+    cucumber-create-meta (6.0.1)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+      sys-uname (~> 1.2, >= 1.2.2)
+    cucumber-cucumber-expressions (12.1.3)
+    cucumber-gherkin (20.0.1)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+    cucumber-html-formatter (16.0.1)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+    cucumber-messages (17.1.1)
+    cucumber-tag-expressions (3.0.1)
+    cucumber-wire (6.1.1)
+      cucumber-core (~> 10.0, >= 10.0.1)
+      cucumber-cucumber-expressions (~> 12.1, >= 12.1.2)
+      cucumber-messages (~> 17.0, >= 17.0.1)
+    diff-lcs (1.4.4)
+    fakefs (1.3.2)
+    faraday (1.10.0)
+      faraday-em_http (~> 1.0)
+      faraday-em_synchrony (~> 1.0)
+      faraday-excon (~> 1.1)
+      faraday-httpclient (~> 1.0)
+      faraday-multipart (~> 1.0)
+      faraday-net_http (~> 1.0)
+      faraday-net_http_persistent (~> 1.0)
+      faraday-patron (~> 1.0)
+      faraday-rack (~> 1.0)
+      faraday-retry (~> 1.0)
+      ruby2_keywords (>= 0.0.4)
+    faraday-em_http (1.0.0)
+    faraday-em_synchrony (1.0.0)
+    faraday-excon (1.1.0)
+    faraday-httpclient (1.0.1)
+    faraday-multipart (1.0.3)
+      multipart-post (>= 1.2, < 3)
+    faraday-net_http (1.0.1)
+    faraday-net_http_persistent (1.2.0)
+    faraday-patron (1.0.0)
+    faraday-rack (1.0.0)
+    faraday-retry (1.0.3)
+    ffi (1.15.4)
+    hashdiff (1.0.1)
+    iniparse (1.5.0)
+    liquid (5.4.0)
+    listen (3.7.1)
+      rb-fsevent (~> 0.10, >= 0.10.3)
+      rb-inotify (~> 0.9, >= 0.9.10)
+    method_source (1.0.0)
+    mime-types (3.3.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2021.0901)
+    mini_portile2 (2.8.1)
+    minitest (5.14.4)
+    minitest-fail-fast (0.1.0)
+      minitest (~> 5)
+    minitest-reporters (1.4.3)
+      ansi
+      builder
+      minitest (>= 5.0)
+      ruby-progressbar
+    mocha (1.13.0)
+    multi_test (0.1.2)
+    multipart-post (2.1.1)
+    nokogiri (1.13.10)
+      mini_portile2 (~> 2.8.0)
+      racc (~> 1.4)
+    octokit (4.22.0)
+      faraday (>= 0.9)
+      sawyer (~> 0.8.0, >= 0.5.3)
+    parallel (1.21.0)
+    parser (3.2.0.0)
+      ast (~> 2.4.1)
+    pry (0.13.1)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    pry-byebug (3.9.0)
+      byebug (~> 11.0)
+      pry (~> 0.13.0)
+    public_suffix (4.0.6)
+    racc (1.6.2)
+    rack (2.2.3.1)
+    rainbow (3.1.1)
+    rake (13.0.6)
+    rb-fsevent (0.11.1)
+    rb-inotify (0.10.1)
+      ffi (~> 1.0)
+    regexp_parser (2.2.0)
+    rexml (3.2.5)
+    rubocop (1.25.1)
+      parallel (~> 1.10)
+      parser (>= 3.1.0.0)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8, < 3.0)
+      rexml
+      rubocop-ast (>= 1.15.1, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 1.4.0, < 3.0)
+    rubocop-ast (1.15.1)
+      parser (>= 3.0.1.1)
+    rubocop-minitest (0.10.1)
+      rubocop (>= 0.87)
+    rubocop-rake (0.5.1)
+      rubocop
+    rubocop-shopify (2.0.1)
+      rubocop (~> 1.11)
+    ruby-progressbar (1.11.0)
+    ruby2_keywords (0.0.5)
+    sawyer (0.8.2)
+      addressable (>= 2.3.5)
+      faraday (> 0.8, < 2.0)
+    sys-uname (1.2.2)
+      ffi (~> 1.1)
+    theme-check (1.14.0)
+      liquid (>= 5.4.0)
+      nokogiri (>= 1.12)
+      parser (~> 3)
+    timecop (0.9.4)
+    unicode-display_width (2.1.0)
+    webmock (3.9.3)
+      addressable (>= 2.3.6)
+      crack (>= 0.3.2)
+      hashdiff (>= 0.4.0, < 2.0.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 2.3.11)
+  byebug
+  colorize (~> 0.8.1)
+  cucumber (~> 7.0)
+  fakefs (>= 1.0)
+  iniparse (~> 1.5)
+  minitest (>= 5.0.0)
+  minitest-fail-fast
+  minitest-reporters
+  mocha
+  octokit (~> 4.0)
+  pry-byebug
+  rack
+  rake
+  rubocop-minitest
+  rubocop-rake
+  rubocop-shopify
+  shopify-cli!
+  timecop
+  webmock
+
+BUNDLED WITH
+   2.3.20

package/{LICENSE → assets/cli-ruby/LICENSE}

@@ -1,5 +1,7 @@
 Copyright 2019-present, Shopify Inc.
 
+Contains code from rack, Copyright (C) 2007-2019 Leah Neukirchen <http://leahneukirchen.org/infopage.html>
+Contains code from rack-proxy, Copyright (c) 2013 Jacek Becela jacek.becela@gmail.com
 ​​
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 ​

package/assets/cli-ruby/README.md

@@ -0,0 +1,30 @@
+# Shopify CLI 2.0
+  
+  <a href="https://github.com/Shopify/shopify-cli/actions/workflows/shopify.yml"><img src="https://github.com/shopify/shopify-cli/actions/workflows/shopify.yml/badge.svg" alt="Shopify"></a>
+  <img src="https://img.shields.io/github/v/release/shopify/shopify-cli?include_prereleases&style=flat-square" alt="Latest Version">
+  <img src="https://img.shields.io/github/forks/shopify/shopify-cli?style=flat-square" alt="GitHub forks">
+  <img src="https://img.shields.io/github/stars/shopify/shopify-cli?style=flat-square" alt="GitHub stars">
+  <img src="https://img.shields.io/github/commit-activity/w/shopify/shopify-cli?style=flat-square" alt="Commit Activity">
+    <img src="https://img.shields.io/github/contributors/shopify/shopify-cli?style=flat-square" alt="Contributors">
+  <img src="https://img.shields.io/github/commits-since/shopify/shopify-cli/latest?style=flat-square" alt="Latest Commits">
+  <a href="http://twitter.com/ShopifyDevs"><img src="https://img.shields.io/twitter/follow/ShopifyDevs?style=flat-square" alt="Twitter Followers"></a>
+  <img src="https://img.shields.io/badge/License-MIT-green.svg" alt="License">
+  <img src="https://img.shields.io/badge/Powered%20by-Ruby-red" alt="Powered by Ruby">
+
+Shopify CLI 2.0 is a command line to help you build on Shopify. It's available as a Ruby gem and can be run and installed on Mac, Linux, and Windows systems.
+
+## CLI Deprecation & Sunset
+
+Note that Shopify 2.0 is deprecated and will be [sunset on May 31, 2023](https://shopify.dev/changelog/cli-2-0-to-be-sunset-on-may-31-2023). We encourage using [Shopify CLI 3.0](https://github.com/Shopify/cli) to develop apps, custom storefronts, and themes. 
+
+## Contributing 👩‍💻
+
+Shopify CLI is an [open source tool](/LICENSE) and everyone is welcome to help the community by [contributing](/docs/README.md) to the project.
+
+## Help 🖐
+
+If you encounter issues using the CLI or have feedback you'd like to share with us, below are some options:
+
+- [Open a GitHub issue](https://github.com/Shopify/shopify-cli/issues) - To report bugs or request new features, open an issue in the Shopify CLI repository.
+
+- [Shopify Community Forums](https://community.shopify.com/) - Visit our forums to connect with the community and learn more about Shopify CLI development.

package/assets/cli-ruby/RELEASING.md

@@ -0,0 +1,72 @@
+## Releasing Shopify CLI
+
+This page contains instructions for CLI 2.0. If you are looking for instructions for CLI 3.0, please visit the [CLI 3.0 documentation](https://github.com/Shopify/cli/blob/main/docs/release.md).
+
+### Automated process
+
+We release the CLI with a series of Rake tasks run locally, interspersed with PR-based checkpoints. The steps are:
+
+1. `export GITHUB_ACCESS_TOKEN=$(dev github print-auth | grep Password | awk '{print $NF}')`
+2. `rake "release:prepare[2.x.x]"` (where 2.x.x is the version being released)
+3. PR to shopify-cli will open in your browser. Sanity-check and merge.
+4. Trigger [Shipit](https://shipit.shopify.io/shopify/shopify-cli/rubygems) on your version commit to release on RubyGems
+5. `rake release:package`
+6. Homebrew PR will open in your browser. Sanity-check and merge.
+7. Release will also be opened in your browser, check that it includes debian and rpm files.
+8. Go through all the [PRs labeled with includes-post-release-steps](https://github.com/Shopify/shopify-cli/issues?q=label%3Aincludes-post-release-steps+is%3Aclosed) and follow the post-release steps described in those PRs. Delete the labels afterward.
+
+In case the automation goes wrong, try with the manual instructions.
+
+### Manual process
+
+1. Check the Semantic Versioning page for info on how to version the new release: http://semver.org
+2. Make sure you're on the most recent `main`
+   ```
+   $ git checkout main
+   $ git pull
+   ```
+3. Create a branch named `release_X_Y_Z` (replacing `X_Y_Z` with the intended release version)
+   ```
+   $ git checkout -b release_X_Y_Z
+   ```
+4. Update the version of Shopify CLI in `lib/shopify_cli/version.rb`
+5. Update the version of Shopify CLI at the top of `Gemfile.lock` (failing to do so causes the CI build to fail)
+6. Add an entry for the new release to `CHANGELOG.md`
+7. Commit the changes with a commit message like "Packaging for release X.Y.Z"
+   ```
+   $ git commit -am "Packaging for release vX.Y.Z"
+   ```
+8. Push out the changes
+   ```
+   $ git push -u origin release_X_Y_Z
+   ```
+
+9. Open a PR for the branch, get necessary approvals from code owners and merge into main branch. Note that the PR title will be the release note in Shipit, so make sure it mentions the release
+10. Deploy to RubyGems using [Shipit](https://shipit.shopify.io/shopify/shopify-cli/rubygems)
+11. Update your `main` branch to the latest version
+   ```
+   $ git checkout main
+   $ git pull
+   ```
+   
+12. On local machine and _AFTER_ gem has been published to https://rubygems.org/gems/shopify-cli, run
+   ```
+   $ rake package
+   ```
+   This will generate the `.deb`, `.rpm` and brew formula files, which will be located in `packaging/builds/X.Y.Z/`.
+
+13. Clone the `Shopify/homebrew-shopify` repository (if not already cloned), and then
+    * update your `master` branch to the latest version: `git checkout master && git pull`
+    * create a new branch: `git checkout -b release_X_Y_Z_of_shopify-cli`
+    * update the brew formula in `shopify-cli.rb` with the generated formula in `packaging/builds/X.Y.Z/` in the `Shopify/shopify-cli` repo (from the `rake package` step above)
+    * commit the change and create a PR on the [Shopify Homebrew repository](https://github.com/Shopify/homebrew-shopify)
+    * when PR is approved, merge into main branch
+  
+14. Go to [releases](https://github.com/Shopify/shopify-cli/releases) page of `Shopify/shopify-cli` repo and create a new release:
+    * use the tag created by Shipit (should be "vX.Y.Z")
+    * release title = "Version X.Y.Z"
+    * description should be the content of the section in the `CHANGELOG.md`
+    * upload the `.deb` and `.rpm` files from `packaging/builds/X.Y.Z/` (generated in step 9)
+    * if it's a pre-release version, select the "This is a pre-release" checkbox
+    * and click "Publish release".
+15. Go through all the PR [labeled with `includes-post-release-steps`](https://github.com/Shopify/shopify-cli/labels/includes-post-release-steps) and follow the post-release steps described in those PRs. Delete the labels afterward.

package/assets/cli-ruby/Rakefile

@@ -0,0 +1,243 @@
+ENV["SHOPIFY_CLI_TEST"] = "1"
+
+require_relative "bin/load_shopify"
+require_relative "utilities/utilities"
+require_relative "lib/shopify_cli/constants"
+require_relative "lib/shopify_cli/version"
+require "rake/testtask"
+require "rubocop/rake_task"
+require "bundler/gem_tasks"
+require "shellwords"
+require "digest"
+require "open3"
+
+Rake::TestTask.new do |t|
+  t.libs += %w(test)
+  t.test_files = FileList["test/**/*_test.rb"]
+  t.verbose = false
+  t.warning = false
+end
+
+desc "A set of tasks that run in Linux environments"
+namespace :linux do
+  desc "Runs the test suite in a Linux Docker environment"
+  task :test do
+    Utilities::Docker.run_and_rm_container("bundle", "exec", "rake", "test")
+  end
+end
+
+RuboCop::RakeTask.new
+
+task(default: [:test, :rubocop])
+
+desc("Start up irb with cli loaded")
+task :console do
+  exec("irb", "-r", "./bin/load_shopify.rb", "-r", "byebug")
+end
+
+desc("Notifies a new version to Bugsnag")
+task :notify_version_to_bugsnag do
+  # This task runs at deployment time to notify
+  # Bugsnag about new versions. Because the deployment
+  # environment has Node, we can run the Bugsnag CLI
+  # through npx.
+  system(
+    { "npm_config_yes" => "true" },
+    "npx", "-q", "bugsnag-build-reporter",
+    "-k", ShopifyCLI::Constants::Bugsnag::API_KEY,
+    "-v", ShopifyCLI::VERSION
+  ) || abort
+end
+
+namespace :rdoc do
+  repo = "https://github.com/Shopify/shopify-cli.wiki.git"
+  intermediate = "markdown_intermediate"
+  file_to_doc = [
+    "lib/shopify_cli/admin_api.rb",
+    "lib/shopify_cli/context.rb",
+    "lib/shopify_cli/db.rb",
+    "lib/shopify_cli/git.rb",
+    "lib/shopify_cli/heroku.rb",
+    "lib/shopify_cli/js_deps.rb",
+    "lib/shopify_cli/lazy_delegator.rb",
+    "lib/shopify_cli/method_object.rb",
+    "lib/shopify_cli/partners_api.rb",
+    "lib/shopify_cli/process_supervision.rb",
+    "lib/shopify_cli/project.rb",
+    "lib/shopify_cli/result.rb",
+    "lib/shopify_cli/transform_data_structure.rb",
+    "lib/shopify_cli/tunnel.rb",
+  ]
+
+  task all: [:markdown, :wiki, :cleanup]
+
+  desc("Generate markdown files from rdoc comments")
+  task :markdown do
+    require "rdoc/rdoc"
+    require "docgen/markdown"
+    options = RDoc::Options.new
+    options.setup_generator("markdown")
+    options.op_dir = intermediate
+    options.files = file_to_doc
+    RDoc::RDoc.new.document(options)
+  end
+
+  desc("Copy markdown documentation to the wiki and commit them")
+  task :wiki do
+    require "tmpdir"
+    Dir.mktmpdir do |temp_dir|
+      system("git clone --depth=1 #{repo} #{temp_dir}")
+      FileUtils.cp(Dir[File.join(intermediate, "*.md")], temp_dir)
+      Dir.chdir(temp_dir) do
+        system("git add --all")
+        system('git commit -am "auto doc update"')
+        system("git push")
+      end
+    end
+  end
+
+  desc("Clean up any documentation related files")
+  task :cleanup do
+    FileUtils.rm_r(intermediate)
+  end
+end
+
+desc("Generate markdown documentation and update the wiki")
+task(rdoc: "rdoc:all")
+
+namespace :package do
+  require "shopify_cli/packager"
+
+  task all: [:debian, :rpm, :homebrew]
+
+  desc("Builds a Debian package of the CLI")
+  task :debian do
+    ShopifyCLI::Packager.new.build_debian
+  end
+
+  desc("Builds an RPM package of the CLI")
+  task :rpm do
+    ShopifyCLI::Packager.new.build_rpm
+  end
+
+  desc("Builds a Homebrew package of the CLI")
+  task :homebrew do
+    ShopifyCLI::Packager.new.build_homebrew
+  end
+end
+
+desc("Builds all distribution packages of the CLI")
+task(package: "package:all")
+
+namespace :changelog do
+  require "shopify_cli/changelog"
+
+  task :update do
+    ShopifyCLI::Changelog.new.update!
+  end
+end
+
+namespace :release do
+  require "shopify_cli/release"
+
+  task :prepare, [:new_version] do |_t, args|
+    new_version = args[:new_version]
+    unless new_version
+      raise <<~NO_NEW_VERSION
+        New version must be provided, e.g.:
+
+        $ GITHUB_ACCESS_TOKEN=abcdef rake "release:prepare[1.2.3]"
+
+      NO_NEW_VERSION
+    end
+    github_access_token = ENV["GITHUB_ACCESS_TOKEN"]
+    unless github_access_token
+      raise <<~NO_GITHUB_ACCESS_TOKEN
+        GitHub access token must be provided, e.g.:
+
+        $ GITHUB_ACCESS_TOKEN=abcdef rake "release:prepare[1.2.3]"
+      NO_GITHUB_ACCESS_TOKEN
+    end
+
+    ShopifyCLI::Release.new(new_version, github_access_token).prepare!
+    puts "Completed!"
+  end
+
+  task :package do
+    github_access_token = ENV["GITHUB_ACCESS_TOKEN"]
+    unless github_access_token
+      raise <<~NO_GITHUB_ACCESS_TOKEN
+        GitHub access token must be provided, e.g.:
+
+        $ GITHUB_ACCESS_TOKEN=abcdef rake release:package
+      NO_GITHUB_ACCESS_TOKEN
+    end
+    ShopifyCLI::Release.new(ShopifyCLI::VERSION, github_access_token).package!
+    puts "Completed!"
+  end
+end
+
+namespace :extensions do
+  task :update do
+    version = ENV.fetch("VERSION").strip
+    error("Invalid version") unless /^v\d+\.\d+\.\d+/.match(version)
+    File.write(Paths.extension("version"), version)
+  end
+
+  task :symlink do
+    source = Paths.root("..", "shopify-cli-extensions", "shopify-extensions")
+    error("Unable to find shopify-extensions executable: #{executable}") unless File.executable?(source)
+    target = Paths.extension("shopify-extensions")
+    File.delete(target) if File.exist?(target)
+    File.symlink(source, target)
+  end
+
+  task :install do
+    target = Paths.extension("shopify-extensions")
+    require_relative Paths.extension("shopify_extensions.rb")
+    File.delete(target) if File.exist?(target)
+    ShopifyExtensions.install(target: target)
+  end
+
+  module Paths
+    def self.extension(*args)
+      root("ext", "shopify-extensions", *args)
+    end
+
+    def self.root(*args)
+      Pathname(File.dirname(__FILE__)).join(*args).to_s
+    end
+  end
+end
+
+namespace :scripts do
+  namespace :javy do
+    task :symlink do
+      source = Paths.root("..", "javy", "target", "release", "javy")
+      error("Unable to find javy executable: #{executable}") unless File.executable?(source)
+      target = Paths.javy("javy")
+      File.delete(target) if File.exist?(target)
+      File.symlink(source, target)
+    end
+
+    task :install do
+      require_relative Paths.javy("javy.rb")
+      Javy.install
+    end
+
+    module Paths
+      def self.javy(*args)
+        root("ext", "javy", *args)
+      end
+
+      def self.root(*args)
+        Pathname(File.dirname(__FILE__)).join(*args).to_s
+      end
+    end
+  end
+end
+
+def error(message, output: STDERR, code: 1)
+  output.puts(message)
+  exit(code)
+end

package/assets/cli-ruby/SECURITY.md

@@ -0,0 +1,59 @@
+# Security Policy
+
+## Supported versions
+
+### New features
+
+New features will only be added to the main branch and will not be made available in point releases.
+
+### Bug fixes
+
+Only the latest release series will receive bug fixes. When enough bugs are fixed and its deemed worthy to release a new gem, this is the branch it happens from.
+
+### Security issues
+
+Only the latest release series will receive patches and new versions in case of a security issue.
+
+### Severe security issues
+
+For severe security issues we will provide new versions as above, and also the last major release series will receive patches and new versions. The classification of the security issue is judged by the core team.
+
+### Unsupported Release Series
+
+When a release series is no longer supported, it's your own responsibility to deal with bugs and security issues. If you are not comfortable maintaining your own versions, you should upgrade to a supported version.
+
+## Reporting a bug
+
+All security bugs in shopify repositories should be reported to [our hackerone program](https://hackerone.com/shopify)
+Shopify's whitehat program is our way to reward security researchers for finding serious security vulnerabilities in the In Scope properties listed at the bottom of this page, including our core application (all functionality associated with a Shopify store, particularly your-store.myshopify.com/admin) and certain ancillary applications.
+
+## Disclosure Policy
+
+We look forward to working with all security researchers and strive to be respectful, always assume the best and treat others as peers. We expect the same in return from all participants. To achieve this, our team strives to:
+
+- Reply to all reports within one business day and triage within two business days (if applicable)
+- Be as transparent as possible, answering all inquires about our report decisions and adding hackers to duplicate HackerOne reports
+- Award bounties within a week of resolution (excluding extenuating circumstances)
+- Only close reports as N/A when the issue reported is included in Known Issues, Ineligible Vulnerabilities Types or lacks evidence of a vulnerability
+
+**The following rules must be followed in order for any rewards to be paid:**
+
+- You may only test against shops you have created which include your HackerOne YOURHANDLE @ wearehackerone.com registered email address.
+- You must not attempt to gain access to, or interact with, any shops other than those created by you.
+- The use of commercial scanners is prohibited (e.g., Nessus).
+- Rules for reporting must be followed.
+- Do not disclose any issues publicly before they have been resolved.
+- Shopify reserves the right to modify the rules for this program or deem any submissions invalid at any time. Shopify may cancel the whitehat program without notice at any time.
+- Contacting Shopify Support over chat, email or phone about your HackerOne report is not allowed. We may disqualify you from receiving a reward, or from participating in the program altogether.
+- You are not an employee of Shopify; employees should report bugs to the internal bug bounty program.
+- You hereby represent, warrant and covenant that any content you submit to Shopify is an original work of authorship and that you are legally entitled to grant the rights and privileges conveyed by these terms. You further represent, warrant and covenant that the consent of no other person or entity is or will be necessary for Shopify to use the submitted content.
+- By submitting content to Shopify, you irrevocably waive all moral rights which you may have in the content.
+- All content submitted by you to Shopify under this program is licensed under the MIT License.
+- You must report any discovered vulnerability to Shopify as soon as you have validated the vulnerability.
+- Failure to follow any of the foregoing rules will disqualify you from participating in this program.
+
+** Please see our [Hackerone Profile](https://hackerone.com/shopify) for full details
+
+## Receiving Security Updates
+
+To recieve all general updates to vulnerabilities, please subscribe to our hackerone [Hacktivity](https://hackerone.com/shopify/hacktivity)