@synoikia/create-plugin 0.1.0

package/dist/repo-root.js

@@ -0,0 +1,47 @@
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/** The plugin repository root: the nearest directory up from `start` with a `pnpm-workspace.yaml`. */
+export function findRepoRoot(start = process.cwd()) {
+    let dir = path.resolve(start);
+    for (;;) {
+        if (existsSync(path.join(dir, 'pnpm-workspace.yaml')))
+            return dir;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            throw new Error(`No plugin repository (pnpm-workspace.yaml) above ${start}`);
+        dir = parent;
+    }
+}
+/** This package's directory. */
+export const PACKAGE_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+export const TEMPLATES_DIR = path.join(PACKAGE_DIR, 'templates');
+function installedVersion(name) {
+    let dir = PACKAGE_DIR;
+    for (;;) {
+        const file = path.join(dir, 'node_modules', ...name.split('/'), 'package.json');
+        if (existsSync(file))
+            return JSON.parse(readFileSync(file, 'utf8')).version;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/**
+ * The range generated packages should use for one of this tool's own dependencies: as published
+ * (`pnpm pack` turns `workspace:` ranges into real ones), else from the installed version.
+ */
+export function dependencyRange(name) {
+    const own = JSON.parse(readFileSync(path.join(PACKAGE_DIR, 'package.json'), 'utf8'));
+    if (name === own.name)
+        return `^${own.version}`;
+    const declared = own.dependencies?.[name] ?? own.peerDependencies?.[name] ?? own.devDependencies?.[name];
+    if (declared && !declared.startsWith('workspace:'))
+        return declared;
+    const version = installedVersion(name);
+    if (!version)
+        throw new Error(`Cannot tell which version of ${name} to use`);
+    return `^${version}`;
+}
+//# sourceMappingURL=repo-root.js.map

package/dist/repo-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-root.js","sourceRoot":"","sources":["../src/repo-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,sGAAsG;AACtG,MAAM,UAAU,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE;IAChD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,KAAK,EAAE,CAAC,CAAC;QACjG,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAEjE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,GAAG,GAAG,WAAW,CAAC;IACtB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QAChF,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC,OAAO,CAAC;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAMlF,CAAC;IACF,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;IACzG,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,SAAS,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,EAAE,CAAC;AACvB,CAAC"}

package/dist/repo.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Builds a signed plugin repository that Synoikia installs plugins from (design §4.2–4.3). Every
+ * plugin version is a GitHub release `<id>-v<version>` holding `<id>-<version>.tgz` and its minisign
+ * signature; `index.json` lists every released version and lives on the fixed `index` release. A
+ * release workflow runs the steps in order, signing between `pack` and `index`:
+ *
+ *   pack     build and pack each plugin whose manifest version isn't in the current index yet
+ *   index    merge the new versions, with their signatures, into the current index
+ *   verify   install the new versions with Synoikia's own repository service, pinned to minisign.pub
+ *   publish  create the version releases, then replace index.json on the `index` release
+ *
+ * Released versions are never rebuilt or removed: to ship a change, bump the plugin's version.
+ */
+export interface RepoOptions {
+    /** The repository root (holding `plugins/` and `minisign.pub`). */
+    root: string;
+    /** `owner/name` on GitHub. Default: root package.json `synoikia.repository`, else the `origin` remote. */
+    repository?: string;
+    /** Output directory, relative to the root. Default `.repo`. */
+    out?: string;
+    /** The currently published index, relative to the root. Default `.repo-current/index.json`. */
+    current?: string;
+    /** Command that builds one plugin (receives the plugin directory). Default `pnpm --filter <dir> run build`. */
+    buildPlugin?: (dir: string) => void;
+    log?: (line: string) => void;
+}
+interface Release {
+    id: string;
+    version: string;
+    tag: string;
+    file: string;
+    sha256: string;
+    name: string;
+    description?: string;
+    sdk: string;
+    minCoreVersion?: string;
+}
+interface IndexVersion {
+    version: string;
+    sdk: string;
+    minCoreVersion?: string;
+    url: string;
+    sha256: string;
+    signature: string;
+}
+interface RepoIndex {
+    schema: number;
+    name: string;
+    homepage: string;
+    publicKey: string;
+    plugins: {
+        id: string;
+        name: string;
+        description?: string;
+        versions: IndexVersion[];
+    }[];
+}
+/** `git@github.com:owner/name.git` or `https://github.com/owner/name(.git)` → `owner/name`. */
+export declare function repositoryFromRemote(remote: string): string | undefined;
+export declare function createRepoTool(opts: RepoOptions): {
+    repository: string;
+    out: string;
+    pack: () => Release[];
+    index: () => RepoIndex;
+    verify: () => Promise<void>;
+    publish: () => void;
+};
+export {};

package/dist/repo.js

@@ -0,0 +1,222 @@
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+const INDEX_TAG = 'index';
+const readJson = (file) => JSON.parse(readFileSync(file, 'utf8'));
+/** `git@github.com:owner/name.git` or `https://github.com/owner/name(.git)` → `owner/name`. */
+export function repositoryFromRemote(remote) {
+    const m = /github\.com[:/]([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/.exec(remote.trim());
+    return m ? `${m[1]}/${m[2]}` : undefined;
+}
+function resolveRepository(root, explicit) {
+    if (explicit)
+        return explicit;
+    const pkg = readJson(path.join(root, 'package.json'));
+    if (pkg.synoikia?.repository)
+        return pkg.synoikia.repository;
+    try {
+        const remote = execFileSync('git', ['remote', 'get-url', 'origin'], { cwd: root, encoding: 'utf8' });
+        const repo = repositoryFromRemote(remote);
+        if (repo)
+            return repo;
+    }
+    catch {
+        // no git remote
+    }
+    throw new Error('Set "synoikia": { "repository": "owner/name" } in package.json, or pass --repository');
+}
+export function createRepoTool(opts) {
+    const root = path.resolve(opts.root);
+    const repository = resolveRepository(root, opts.repository);
+    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository))
+        throw new Error(`Invalid repository ${repository}`);
+    const downloadBase = `https://github.com/${repository}/releases/download`;
+    const out = path.resolve(root, opts.out ?? '.repo');
+    const releasesFile = path.join(out, 'releases.json');
+    const log = opts.log ?? ((line) => console.log(line));
+    const indexName = readJson(path.join(root, 'package.json')).synoikia?.name;
+    const publicKey = () => readFileSync(path.join(root, 'minisign.pub'), 'utf8').trim().split('\n').at(-1).trim();
+    const buildPlugin = opts.buildPlugin ??
+        ((dir) => execFileSync('pnpm', ['--filter', `./${path.relative(root, dir)}`, 'run', 'build'], {
+            cwd: root,
+            stdio: 'inherit',
+        }));
+    function currentIndex() {
+        const file = path.resolve(root, opts.current ?? '.repo-current/index.json');
+        const empty = {
+            schema: 1,
+            name: indexName ?? 'Synoikia plugins',
+            homepage: `https://github.com/${repository}`,
+            publicKey: publicKey(),
+            plugins: [],
+        };
+        if (!existsSync(file))
+            return empty;
+        const index = readJson(file);
+        if (index.publicKey !== empty.publicKey) {
+            throw new Error('The published index has a different public key than minisign.pub; refusing to extend it.');
+        }
+        return index;
+    }
+    const released = (index, id, version) => index.plugins.some((p) => p.id === id && p.versions.some((v) => v.version === version));
+    function pack() {
+        const index = currentIndex();
+        mkdirSync(out, { recursive: true });
+        const releases = [];
+        const pluginsDir = path.join(root, 'plugins');
+        for (const id of readdirSync(pluginsDir).sort()) {
+            const dir = path.join(pluginsDir, id);
+            if (!existsSync(path.join(dir, 'manifest.json')))
+                continue;
+            const manifest = readJson(path.join(dir, 'manifest.json'));
+            const pkg = readJson(path.join(dir, 'package.json'));
+            if (manifest.id !== id)
+                throw new Error(`plugins/${id}: manifest id is ${manifest.id}`);
+            if (pkg.version !== manifest.version) {
+                throw new Error(`plugins/${id}: package.json ${pkg.version} and manifest.json ${manifest.version} differ`);
+            }
+            if (released(index, id, manifest.version))
+                continue;
+            buildPlugin(dir);
+            const file = `${id}-${manifest.version}.tgz`;
+            // Flat layout, what core installs: manifest.json, package.json, dist/. Sorted, with fixed times and
+            // owners, so the same sources give the same bytes.
+            const tarball = execFileSync('tar', [
+                '--sort=name',
+                '--mtime=1970-01-01 00:00:00Z',
+                '--owner=0',
+                '--group=0',
+                '--numeric-owner',
+                '-C',
+                dir,
+                '-cf',
+                '-',
+                'manifest.json',
+                'package.json',
+                'dist',
+            ], { maxBuffer: 256 * 1024 * 1024 });
+            const gz = execFileSync('gzip', ['-n', '-9'], { input: tarball, maxBuffer: 256 * 1024 * 1024 });
+            writeFileSync(path.join(out, file), gz);
+            releases.push({
+                id,
+                version: manifest.version,
+                tag: `${id}-v${manifest.version}`,
+                file,
+                sha256: createHash('sha256').update(gz).digest('hex'),
+                name: manifest.name,
+                description: manifest.description,
+                sdk: manifest.sdk,
+                minCoreVersion: pkg.synoikia?.minCoreVersion,
+            });
+            log(`packed ${file}`);
+        }
+        writeFileSync(releasesFile, JSON.stringify(releases, null, 2) + '\n');
+        log(releases.length ? `${releases.length} new version(s)` : 'nothing new to release');
+        return releases;
+    }
+    function index() {
+        const idx = currentIndex();
+        for (const r of readJson(releasesFile)) {
+            const sigFile = path.join(out, `${r.file}.minisig`);
+            if (!existsSync(sigFile))
+                throw new Error(`${r.file} is not signed`);
+            let plugin = idx.plugins.find((p) => p.id === r.id);
+            if (!plugin)
+                idx.plugins.push((plugin = { id: r.id, name: r.name, versions: [] }));
+            plugin.name = r.name;
+            if (r.description)
+                plugin.description = r.description;
+            plugin.versions.push({
+                version: r.version,
+                sdk: r.sdk,
+                ...(r.minCoreVersion ? { minCoreVersion: r.minCoreVersion } : {}),
+                url: `${downloadBase}/${r.tag}/${r.file}`,
+                sha256: r.sha256,
+                signature: readFileSync(sigFile, 'utf8'),
+            });
+        }
+        idx.plugins.sort((a, b) => a.id.localeCompare(b.id));
+        writeFileSync(path.join(out, 'index.json'), JSON.stringify(idx, null, 2) + '\n');
+        return idx;
+    }
+    async function verify() {
+        const releases = readJson(releasesFile);
+        if (!releases.length)
+            return log('nothing to verify');
+        // Only this run's versions are local; the check installs exactly those, from the index as published.
+        const full = readJson(path.join(out, 'index.json'));
+        const subset = {
+            ...full,
+            plugins: full.plugins
+                .map((p) => ({
+                ...p,
+                versions: p.versions.filter((v) => releases.some((r) => r.id === p.id && r.version === v.version)),
+            }))
+                .filter((p) => p.versions.length),
+        };
+        const file = path.join(out, 'verify-index.json');
+        writeFileSync(file, JSON.stringify(subset));
+        let testing;
+        try {
+            testing = await import('@synoikia/core/testing');
+        }
+        catch {
+            throw new Error('verify needs @synoikia/core installed (a dev dependency of the plugin repository)');
+        }
+        const verified = await testing.verifyPluginRepository({ index: file, assets: out, publicKey: publicKey() });
+        for (const v of verified) {
+            if (!v.signatureVerified)
+                throw new Error(`${v.id}@${v.version}: signature not verified`);
+            log(`verified ${v.id}@${v.version}`);
+        }
+    }
+    function publish() {
+        const releases = readJson(releasesFile);
+        if (!releases.length)
+            return log('nothing to publish');
+        const gh = (...a) => execFileSync('gh', a, { cwd: root, stdio: 'inherit' });
+        const exists = (tag) => {
+            try {
+                execFileSync('gh', ['release', 'view', tag], { cwd: root, stdio: 'ignore' });
+                return true;
+            }
+            catch {
+                return false;
+            }
+        };
+        for (const r of releases) {
+            const tarball = path.join(out, r.file);
+            // Left by a run that stopped before updating the index. Released bytes never change: continue only
+            // if the tarball there is exactly this run's (packing is deterministic), and only then refresh its
+            // signature, which the index about to be published carries.
+            if (exists(r.tag)) {
+                const dir = mkdtempSync(path.join(tmpdir(), 'synoikia-release-'));
+                try {
+                    execFileSync('gh', ['release', 'download', r.tag, '--pattern', r.file, '--dir', dir], {
+                        cwd: root,
+                        stdio: 'ignore',
+                    });
+                    const published = createHash('sha256')
+                        .update(readFileSync(path.join(dir, r.file)))
+                        .digest('hex');
+                    if (published !== r.sha256)
+                        throw new Error(`${r.tag} is already released with different contents; bump the version instead`);
+                }
+                finally {
+                    rmSync(dir, { recursive: true, force: true });
+                }
+                gh('release', 'upload', r.tag, `${tarball}.minisig`, '--clobber');
+                continue;
+            }
+            gh('release', 'create', r.tag, tarball, `${tarball}.minisig`, '--title', `${r.name} ${r.version}`, '--notes', `${r.name} ${r.version}, signed with the key in minisign.pub. Install it from Synoikia's Plugins page.`, '--latest=false');
+        }
+        if (!exists(INDEX_TAG)) {
+            gh('release', 'create', INDEX_TAG, '--title', 'Plugin index', '--notes', 'The index Synoikia reads this repository from. Replaced on every release.', '--latest=false');
+        }
+        gh('release', 'upload', INDEX_TAG, path.join(out, 'index.json'), '--clobber');
+    }
+    return { repository, out, pack, index, verify, publish };
+}
+//# sourceMappingURL=repo.js.map

package/dist/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../src/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AA2D7B,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,MAAM,QAAQ,GAAG,CAA8B,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;AAE5G,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,CAAC,GAAG,oDAAoD,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAiB;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAyC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9F,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;IAChH,MAAM,YAAY,GAAG,sBAAsB,UAAU,oBAAoB,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAmC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC7G,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAChH,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,CAAC,CAAC,GAAW,EAAE,EAAE,CACf,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;YAClF,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC,CAAC;IAER,SAAS,YAAY;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAc;YACvB,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,SAAS,IAAI,kBAAkB;YACrC,QAAQ,EAAE,sBAAsB,UAAU,EAAE;YAC5C,SAAS,EAAE,SAAS,EAAE;YACtB,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAY,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAgB,EAAE,EAAU,EAAE,OAAe,EAAE,EAAE,CACjE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;IAE1F,SAAS,IAAI;QACX,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9C,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;gBAAE,SAAS;YAC3D,MAAM,QAAQ,GAAG,QAAQ,CACvB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAChC,CAAC;YACF,MAAM,GAAG,GAAG,QAAQ,CAA8D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;YAClH,IAAI,QAAQ,CAAC,EAAE,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,oBAAoB,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEpD,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,QAAQ,CAAC,OAAO,MAAM,CAAC;YAC7C,oGAAoG;YACpG,mDAAmD;YACnD,MAAM,OAAO,GAAG,YAAY,CAC1B,KAAK,EACL;gBACE,aAAa;gBACb,8BAA8B;gBAC9B,WAAW;gBACX,WAAW;gBACX,iBAAiB;gBACjB,IAAI;gBACJ,GAAG;gBACH,KAAK;gBACL,GAAG;gBACH,eAAe;gBACf,cAAc;gBACd,MAAM;aACP,EACD,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CACjC,CAAC;YACF,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;YAChG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE;gBACF,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,EAAE,GAAG,EAAE,KAAK,QAAQ,CAAC,OAAO,EAAE;gBACjC,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,cAAc;aAC7C,CAAC,CAAC;YACH,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,SAAS,KAAK;QACZ,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAY,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC;YACrE,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACrB,IAAI,CAAC,CAAC,WAAW;gBAAE,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;YACtD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,EAAE,GAAG,YAAY,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE;gBACzC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACjF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,QAAQ,GAAG,QAAQ,CAAY,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACtD,qGAAqG;QACrG,MAAM,IAAI,GAAG,QAAQ,CAAY,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG;YACb,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;iBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,GAAG,CAAC;gBACJ,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;aACnG,CAAC,CAAC;iBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SACpC,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC;YAC1F,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,SAAS,OAAO;QACd,MAAM,QAAQ,GAAG,QAAQ,CAAY,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAW,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,YAAY,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACvC,mGAAmG;YACnG,mGAAmG;YACnG,4DAA4D;YAC5D,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;gBAClE,IAAI,CAAC;oBACH,YAAY,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;wBACpF,GAAG,EAAE,IAAI;wBACT,KAAK,EAAE,QAAQ;qBAChB,CAAC,CAAC;oBACH,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;yBACnC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;yBAC5C,MAAM,CAAC,KAAK,CAAC,CAAC;oBACjB,IAAI,SAAS,KAAK,CAAC,CAAC,MAAM;wBACxB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,wEAAwE,CAAC,CAAC;gBACtG,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,OAAO,UAAU,EAAE,WAAW,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,EAAE,CACA,SAAS,EACT,QAAQ,EACR,CAAC,CAAC,GAAG,EACL,OAAO,EACP,GAAG,OAAO,UAAU,EACpB,SAAS,EACT,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,EACxB,SAAS,EACT,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,iFAAiF,EACvG,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACvB,EAAE,CACA,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,cAAc,EACd,SAAS,EACT,2EAA2E,EAC3E,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC"}

package/dist/scaffold.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Scaffolding: a new plugin repository (`pnpm create @synoikia/plugin`) and a new plugin inside one
+ * (`pnpm new`). Templates are plain files with `{{name}}` placeholders; only known names are replaced
+ * and nothing in a template runs. Files whose name starts with `_` are written with a leading `.`
+ * (npm drops some dotfiles from published packages). Generated code uses only the published SDK and
+ * core APIs, and the generated manifest already follows the secret rules `synoikia-plugin check`
+ * enforces.
+ */
+export declare const ARCHETYPES: {
+    readonly 'openapi-rest': "REST API that serves an OpenAPI spec: the catalog is the spec, rules lock and describe";
+    readonly 'static-rest': "REST API without a spec: operations are declared in plugin.yaml";
+    readonly 'websocket-rpc': "JSON-RPC 2.0 over WebSocket: methods declared in plugin.yaml";
+    readonly blank: "A minimal plugin to fill in by hand";
+};
+export type Archetype = keyof typeof ARCHETYPES;
+export declare const AUTH_KINDS: {
+    readonly bearer: "Bearer token (Authorization: Bearer …)";
+    readonly 'api-key': "API key header (e.g. X-Api-Key)";
+    readonly basic: "Username and password (HTTP Basic)";
+    readonly none: "No authentication";
+};
+export type AuthKind = keyof typeof AUTH_KINDS;
+export interface NewPluginOptions {
+    /** The plugin repository root. */
+    root: string;
+    id: string;
+    name: string;
+    /** Sandbox namespace; defaults to the id in camelCase. */
+    namespace?: string;
+    description?: string;
+    archetype: Archetype;
+    auth: AuthKind;
+    /** Header for `api-key` auth. Default `X-Api-Key`. */
+    apiKeyHeader?: string;
+    /** Override dependency ranges (tests). */
+    ranges?: Partial<Record<'sdk' | 'core' | 'cli', string>>;
+}
+export declare const ID_PATTERN: RegExp;
+export declare const camelCase: (id: string) => string;
+export declare const pascalCase: (id: string) => string;
+/** Problems with a plugin id or namespace, or undefined. */
+export declare function validateId(id: string, root?: string): string | undefined;
+export declare function validateName(name: string): string | undefined;
+export declare function validateDescription(text: string): string | undefined;
+export declare function validateNamespace(ns: string): string | undefined;
+/** Replaces `{{name}}` for the names in `vars`; anything else (e.g. `{{connection.baseUrl}}`) stays. */
+export declare function fill(text: string, vars: Record<string, string>): string;
+/** Copies a template directory, filling placeholders. Refuses to overwrite an existing file. */
+export declare function renderTemplate(from: string, to: string, vars: Record<string, string>, written?: string[]): string[];
+/** The generated manifest: connection form, secrets, network hosts and binding. */
+export declare function manifestFor(opts: NewPluginOptions, namespace: string): Record<string, unknown>;
+/** Writes `plugins/<id>/` from the archetype's template. Returns the files written. */
+export declare function newPlugin(opts: NewPluginOptions): string[];
+export interface CreateRepoOptions {
+    /** The new repository's directory (must not exist, or be empty). */
+    dir: string;
+    /** `owner/name` on GitHub, for the release index. */
+    repository?: string;
+    /** Add the signed-release workflow. */
+    release?: boolean;
+    /** Add the Claude Code setup (CLAUDE.md, skills, hooks, security reviewer). */
+    claude?: boolean;
+    ranges?: Partial<Record<'core' | 'cli', string>>;
+}
+/** Writes a new plugin repository. Returns the files written. */
+export declare function createRepo(opts: CreateRepoOptions): string[];
+/** `pnpm install` in the repository (links a new plugin, updates the lockfile). */
+export declare function install(root: string): void;