@theholocron/cli 5.0.0-alpha.196 → 5.0.0-alpha.197

package/dist/cli.mjs

@@ -24,8 +24,8 @@ import search from "@inquirer/search";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
 import ora from "ora";
 import { findRootSync, isWorkspaceRoot, walkFilesSync } from "@theholocron/fs-utils";
-import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { access, copyFile, mkdir, readFile, readdir, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { stringifyJson } from "@theholocron/json-utils";
 import { generateReadme } from "@theholocron/components-doc/markdown";
 import { getClients, getConfigs, getDocs, getPlugins, getSkills, getThemes, getUtils } from "@theholocron/registry-doc";
@@ -2634,6 +2634,59 @@ function mk(capability, provider, status, message, logMessage) {
 	};
 }
 //#endregion
+//#region src/commands/notifications-channel-add/avatar.ts
+/**
+* Read a webhook avatar named in a layout: a file path (from the directory the CLI runs in) or an
+* `https://` URL. Returns it as a `data:` URI, which is how providers take an image.
+*
+* The type comes from the first bytes, not from the name or the response header, so what is sent is
+* the image it claims to be.
+*/
+/** Providers cap avatars well below this; it only keeps a wrong file from filling memory. */
+const MAX_AVATAR_BYTES = 8388608;
+const FETCH_TIMEOUT_MS$2 = 15e3;
+const SIGNATURES = [
+	["image/png", [
+		137,
+		80,
+		78,
+		71,
+		13,
+		10,
+		26,
+		10
+	]],
+	["image/jpeg", [
+		255,
+		216,
+		255
+	]],
+	["image/gif", [
+		71,
+		73,
+		70,
+		56
+	]]
+];
+const tooBig = () => /* @__PURE__ */ new Error(`it is larger than ${MAX_AVATAR_BYTES / 1024 / 1024} MB`);
+async function loadAvatar(source, baseDir = process.cwd(), fetchImpl = fetch) {
+	let bytes;
+	if (/^https:\/\//i.test(source)) {
+		const res = await fetchImpl(source, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS$2) });
+		if (!res.ok) throw new Error(`fetching it answered ${res.status}`);
+		if (Number(res.headers.get("content-length")) > 8388608) throw tooBig();
+		bytes = Buffer.from(await res.arrayBuffer());
+	} else {
+		const path = resolve(baseDir, source);
+		if ((await stat(path)).size > 8388608) throw tooBig();
+		bytes = await readFile(path);
+	}
+	if (bytes.length > 8388608) throw tooBig();
+	const type = SIGNATURES.find(([, sig]) => sig.every((b, i) => bytes[i] === b))?.[0];
+	if (!type) throw new Error("it is not a PNG, JPEG or GIF image, which are the formats providers accept");
+	return `data:${type};base64,${bytes.toString("base64")}`;
+}
+//#endregion
 //#region src/commands/notifications-channel-add/notifications-channel-add.ts
 /**
 * `holocron notifications channel add` — create one channel (and, with
@@ -2784,8 +2837,10 @@ async function provisionChannel(deps, spec) {
 	const hook = await notifications.ensureWebhook({
 		channel: spec.name,
 		name: webhookName,
-		...spec.category ? { category: spec.category } : {}
+		...spec.category ? { category: spec.category } : {},
+		...webhookCfg.avatar ? { avatar: webhookCfg.avatar } : {}
 	});
+	const avatarSet = hook.updated?.includes("avatar") ?? false;
 	if (hook.url) {
 		try {
 			await secrets.setSecret(scope, secretName, hook.url);
@@ -2798,7 +2853,8 @@ async function provisionChannel(deps, spec) {
 			name: webhookName,
 			created: hook.created,
 			secret: secretName,
-			stored: true
+			stored: true,
+			...avatarSet ? { updated: ["avatar"] } : {}
 		};
 	} else {
 		const note = `webhook ${webhookName} already exists and its URL cannot be read back — delete it in the provider and re-run, or set ${secretName} yourself`;
@@ -2808,9 +2864,15 @@ async function provisionChannel(deps, spec) {
 			created: hook.created,
 			secret: secretName,
 			stored: false,
-			note
+			note,
+			...avatarSet ? { updated: ["avatar"] } : {}
 		};
 	}
+	if (avatarSet) {
+		print(`  ${style.success(`set     avatar on webhook ${webhookName}`)}`);
+		if (tally) tally.ok++;
+	}
+	if (hook.avatarError) throw new Error(`webhook ${webhookName} is ready but setting its avatar failed (${hook.avatarError})`);
 	return outcome;
 }
 async function runNotificationsChannelAdd(input) {
@@ -2898,11 +2960,6 @@ async function runNotificationsChannelAdd(input) {
 */
 /** Features not built yet, in the order of the table in holocron#1098. Move an entry into a real check when it lands. */
 const PLANNED_CHECKS = [
-	{
-		step: 12,
-		id: "webhook-appearance",
-		title: "webhook names and avatars set"
-	},
 	{
 		step: 13,
 		id: "app-settings",
@@ -2942,6 +2999,7 @@ const promptKey = (p) => JSON.stringify([
 const accessText = (v) => v === "everyone" ? "everyone" : v.length === 0 ? "nobody (bots and webhooks only)" : v.join(", ");
 const shown = (s) => sanitizeDetail(s);
 const WELCOME_TITLE = "welcome screen and onboarding set";
+const AVATAR_TITLE = "webhook names and avatars set";
 const SERVER_TITLE = "server verification, notifications and community set";
 const ACCESS_TITLE = "channel and category access set";
 const ROLE_APPEARANCE_TITLE = "role colour, hoist and permissions set";
@@ -3064,7 +3122,8 @@ async function runDoctorNotifications(input) {
 			["role-appearance", ROLE_APPEARANCE_TITLE],
 			["access", ACCESS_TITLE],
 			["server-settings", SERVER_TITLE],
-			["welcome-onboarding", WELCOME_TITLE]
+			["welcome-onboarding", WELCOME_TITLE],
+			["webhook-appearance", AVATAR_TITLE]
 		]) failed(id, title, "not checked: could not read the server");
 	} else {
 		const inspected = found;
@@ -3247,6 +3306,19 @@ async function runDoctorNotifications(input) {
 		const welcomeParts = (wantWelcome ? 1 : 0) + (wantOnboarding ? 1 : 0);
 		add("welcome-onboarding", WELCOME_TITLE, [...welcomeProblems, ...onboardingProblems], welcomeParts === 0 ? "none declared" : `${welcomeParts} of ${welcomeParts} as declared`);
 	}
+	if (found) {
+		const avatarOf = (webhook) => (typeof webhook === "object" && webhook ? webhook.avatar : void 0) ?? layout.webhookAvatar;
+		const wantAvatar = declaredChannels.filter(({ channel }) => channel.webhook && avatarOf(channel.webhook));
+		const avatarProblems = [];
+		for (const { cat, channel } of wantAvatar) {
+			const name = (channel.webhook === true ? {} : channel.webhook).name ?? channel.name;
+			const { match } = pick(channel.name, cat);
+			if (!match) avatarProblems.push(`#${shown(channel.name)}: no channel to hold the webhook`);
+			else if (match.webhooksError) avatarProblems.push(`#${shown(channel.name)}: could not list its webhooks (${shown(match.webhooksError)})`);
+			else if (match.webhookAvatars && !match.webhookAvatars.some((w) => same(w, name))) avatarProblems.push(`#${shown(channel.name)}: webhook ${shown(name)} has no avatar`);
+		}
+		add("webhook-appearance", AVATAR_TITLE, avatarProblems, wantAvatar.length === 0 ? "none declared" : `${wantAvatar.length} of ${wantAvatar.length} set`);
+	}
 	const wanted = [...declaredChannels.filter(({ channel }) => channel.webhook).map(({ channel }) => channel.webhook !== true && channel.webhook && channel.webhook.secret ? channel.webhook.secret : defaultSecretName(channel.name)), ...(layout.roles ?? []).flatMap((r) => r.secret ? [r.secret] : [])];
 	if (wanted.length === 0) checks.push({
 		id: "secrets",
@@ -3907,6 +3979,10 @@ async function runNew(input) {
 * shared preset would apply it from every repo.
 */
 /** A channel's access: its category's, with any field the channel states itself laid over it. */
+/** The picture a channel's webhook should have: its own, else the layout's, else none. */
+function webhookAvatarOf(layout, webhook) {
+	return (typeof webhook === "object" ? webhook.avatar : void 0) ?? layout.webhookAvatar;
+}
 function effectiveAccess(category, channel) {
 	if (!category && !channel) return void 0;
 	return {
@@ -4034,6 +4110,17 @@ async function runNotificationsSetup(input) {
 		name: org
 	} : void 0);
 	if (wantsSecrets && !scope && !dryRun) return refuse("no org to store secrets under — pass --scope or set `org` in holocron.config.ts");
+	const avatars = /* @__PURE__ */ new Map();
+	const read = input.loadAvatar ?? loadAvatar;
+	for (const channel of (layout.categories ?? []).flatMap((c) => c.channels ?? [])) {
+		const source = channel.webhook ? webhookAvatarOf(layout, channel.webhook) : void 0;
+		if (source === void 0 || avatars.has(source)) continue;
+		try {
+			avatars.set(source, await read(source));
+		} catch (err) {
+			return refuse(`webhook avatar \`${source}\`: ${errorMessage(err)}`);
+		}
+	}
 	if (secrets && scope && !dryRun) try {
 		await assertSecretsReachable(secrets, scope);
 	} catch (err) {
@@ -4139,6 +4226,11 @@ async function runNotificationsSetup(input) {
 			continue;
 		}
 		for (const channel of channels) await attempt(`channel ${channel.name}`, async () => {
+			const source = channel.webhook ? webhookAvatarOf(layout, channel.webhook) : void 0;
+			const webhook = channel.webhook ? {
+				...channel.webhook === true ? {} : channel.webhook,
+				...source ? { avatar: avatars.get(source) } : {}
+			} : void 0;
 			const outcome = await provisionChannel({
 				notifications,
 				...secrets ? { secrets } : {},
@@ -4151,7 +4243,7 @@ async function runNotificationsSetup(input) {
 				category: category.name,
 				...channel.topic ? { topic: channel.topic } : {},
 				...effectiveAccess(category.access, channel.access) ? { access: effectiveAccess(category.access, channel.access) } : {},
-				...channel.webhook ? { webhook: channel.webhook === true ? {} : channel.webhook } : {}
+				...webhook ? { webhook } : {}
 			});
 			report.channels.push(outcome);
 			if (outcome.webhook && !outcome.webhook.stored) report.failures.push({