@trungtamcongnghedigital/vsaf 1.0.0

package/packages/cli/dist/commands/install/resolve-inputs.js

@@ -0,0 +1,297 @@
+"use strict";
+/**
+ * Sort out what someone pasted when asked for the project's code repos.
+ *
+ * The question takes one box, and people paste into it whatever their browser or their
+ * terminal already had: a directory beside the project, a clone url, the page of a repo,
+ * or the page of a whole project. The last one is the reason this file exists — a
+ * project of twenty repos used to mean pasting twenty urls, read off twenty pages.
+ *
+ * Classifying is a decision about a string, and stays that way: no network, no disk. The
+ * one read that does happen — the repo list of a project — is in `resolveInputs` at the
+ * bottom, so everything above it can be tested exhaustively without either.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.browseUrlToClone = browseUrlToClone;
+exports.classifyInput = classifyInput;
+exports.resolveInputs = resolveInputs;
+const promises_1 = require("node:readline/promises");
+const bitbucket_js_1 = require("./bitbucket.js");
+const credentials_js_1 = require("./credentials.js");
+const pick_repos_js_1 = require("./pick-repos.js");
+const PROJECT_SEGMENT = '/projects/';
+/** Bitbucket Server's default ssh port, used only when guessing from a page url. */
+const DEFAULT_SSH_PORT = 7999;
+/** Drop the anchor, the query string and any trailing slashes a browser left behind. */
+function clean(url) {
+    return url.trim().split('#')[0].split('?')[0].replace(/\/+$/, '');
+}
+/**
+ * Cut a Bitbucket page url in two at `/projects/`.
+ *
+ * Cutting at the host instead would lose the path prefix of a server published under
+ * one — `http://host/bitbucket/projects/IDP` — and every api call after that would be
+ * aimed at a url nobody serves.
+ *
+ * Returns null when the string is not a url, or holds no `/projects/` segment: a
+ * directory really named `/srv/projects/IDP` is a path, not a page.
+ */
+function splitAtProjects(entry) {
+    const url = clean(entry);
+    const at = url.indexOf(PROJECT_SEGMENT);
+    if (at < 0)
+        return null;
+    const base = url.slice(0, at);
+    if (!base.includes('://'))
+        return null;
+    const rest = url.slice(at + PROJECT_SEGMENT.length);
+    return rest ? { base, rest } : null;
+}
+/** The repo a page url points at: `<key>/repos/<slug>/…` — the tail is browser state. */
+function repoOnPage(rest) {
+    const [key, marker, slug] = rest.split('/');
+    if (!key || marker !== 'repos' || !slug)
+        return null;
+    return { key, slug: slug.replace(/\.git$/, '') };
+}
+/**
+ * Turn the page url of one repo into a url git can clone.
+ *
+ * The key is lowercased for the path — Bitbucket displays it upper-case and serves it
+ * lower-case — but only here: the api is addressed with the key exactly as written.
+ *
+ * Http by default, because it is built entirely from the url the user pasted and so
+ * points at a host and port already known to answer. The ssh form has to guess the port,
+ * and the guess is wrong more often than not: bitbucket.digital.vn refuses 7999 and
+ * advertises 8081, which then hangs. Ssh stays available for a caller that knows better.
+ */
+function browseUrlToClone(url, protocol = 'http') {
+    const split = splitAtProjects(url);
+    const repo = split && repoOnPage(split.rest);
+    if (!split || !repo)
+        throw new Error(`Not the page of a repo: ${url}`);
+    const path = `${repo.key.toLowerCase()}/${repo.slug}.git`;
+    if (protocol === 'http')
+        return `${split.base}/scm/${path}`;
+    return `ssh://git@${new URL(split.base).hostname}:${DEFAULT_SSH_PORT}/${path}`;
+}
+/**
+ * Decide which of the three things an entry is.
+ *
+ * Order matters: a repo page and a project page differ only by what follows the key, and
+ * both look like plain urls. Anything left over is read as a path — the safest reading,
+ * because the layer that adopts paths already refuses one that is not a directory, and
+ * it refuses it by name. Throwing here instead would take down an install over a
+ * mistyped entry that the user could have fixed on the next line.
+ */
+function classifyInput(entry) {
+    const value = entry.trim();
+    const split = splitAtProjects(value);
+    if (split) {
+        try {
+            // A url malformed enough that it cannot be parsed falls through to a path, where
+            // it gets reported by name rather than ending the install.
+            if (repoOnPage(split.rest))
+                return { kind: 'clone', url: browseUrlToClone(value) };
+            const [key] = split.rest.split('/');
+            if (key)
+                return { kind: 'project', base: new URL(split.base).toString().replace(/\/$/, ''), key };
+        }
+        catch {
+            return { kind: 'adopt', path: value };
+        }
+    }
+    // Anything carrying a scheme is a url to fetch from, not a directory: `https://…` and
+    // `file://…` name repos too, and a project page is the only url form already handled
+    // above. Dropping this rule for a list of known shapes silently turned a github url
+    // without a `.git` suffix into a path that does not exist.
+    if (value.includes('://') || value.startsWith('git@') || value.endsWith('.git')) {
+        return { kind: 'clone', url: value };
+    }
+    return { kind: 'adopt', path: value };
+}
+/**
+ * True when nothing came back at all, as opposed to a refusal that came back quickly.
+ *
+ * The difference decides what to tell the person: silence is worth another go, while a
+ * 401 or a 404 is an answer and asking again cannot change it.
+ */
+function silentServer(message) {
+    return /Quá hạn|Không kết nối được/.test(message);
+}
+/**
+ * Why this link could not be read. One line, no advice.
+ *
+ * What to do about it is not repeated here because the summary at the end of the install
+ * already carries it — entry by entry, with the command to finish the job — and that is
+ * the line still on screen when the install stops. This one is a hundred lines above it.
+ */
+function tokenGuidance(host) {
+    return `[vsaf] ⚠ Chưa có credential cho ${host} — bỏ qua link nhóm này.`;
+}
+/**
+ * Expand what the user pasted into the two lists the installer works from.
+ *
+ * A project link becomes the repos it holds — the read that saves twenty page visits.
+ * Everything else keeps the meaning it already had.
+ *
+ * A project that cannot be read costs that entry and nothing else: the rest of the
+ * install is still worth having, and an install that stops on a missing credential
+ * teaches people to avoid the feature rather than to fix the credential.
+ *
+ * Lives here rather than in `index.ts` (where the spec put it) because `index.ts` parses
+ * the command line as it loads and so cannot be imported by a test.
+ */
+async function resolveInputs(entries, options = {}) {
+    // A caller that names a credential means that one and no lookup — including a caller
+    // that names `undefined` to say "pretend this machine has none". Everyone else gets the
+    // chain: environment, then git's store, then the person at the terminal.
+    const named = 'token' in options;
+    const looked = new Map();
+    const approved = new Set();
+    const credentialFor = async (base) => {
+        if (named) {
+            const given = options.token;
+            return typeof given === 'string' ? { secret: given, source: 'env' } : given;
+        }
+        // One lookup per host: twelve links to one server must not become twelve prompts.
+        if (!looked.has(base)) {
+            looked.set(base, (0, credentials_js_1.credentialForHost)(base, {
+                env: options.env, run: options.run, isTTY: options.isTTY,
+            }));
+        }
+        return looked.get(base);
+    };
+    const clone = [];
+    const adopt = [];
+    const unresolved = [];
+    let toldAboutToken = false;
+    for (const entry of entries) {
+        if (!entry.trim())
+            continue;
+        const input = classifyInput(entry);
+        if (input.kind === 'adopt') {
+            adopt.push(input.path);
+            continue;
+        }
+        if (input.kind === 'clone') {
+            clone.push(input.url);
+            continue;
+        }
+        const credential = await credentialFor(input.base);
+        if (!credential) {
+            // Once per run: repeating it for every link buries the instruction in itself.
+            if (!toldAboutToken)
+                console.log(tokenGuidance(new URL(input.base).host));
+            toldAboutToken = true;
+            unresolved.push({ entry, reason: 'không có credential cho máy chủ này' });
+            continue;
+        }
+        try {
+            const repos = await readGroupWithRetryOffer(input, credential, options);
+            // It worked, so tell git to keep it — the step git takes after any successful command
+            // of its own, and the one nothing takes here, because reading a repo list is a
+            // `fetch`. Without it the password someone typed into their editor's popup was gone
+            // by the next run, every run. Once per host: the second link to the same server has
+            // nothing left to say.
+            if (!approved.has(input.base)) {
+                approved.add(input.base);
+                (0, credentials_js_1.approveInGit)(input.base, credential, options.run);
+            }
+            if (repos.length === 0) {
+                console.log(`[vsaf] ⚠ Nhóm dự án ${input.key} không có repo nào đọc được — bỏ qua link này.`);
+                unresolved.push({ entry, reason: 'nhóm không có repo nào đọc được' });
+                continue;
+            }
+            // Http before ssh: it is the same host the user just had open in a browser, so it
+            // is reachable by definition and their credential helper already answers for it.
+            // Ssh needs a key on the server and a port that is open — measured on
+            // bitbucket.digital.vn, the ssh url the api advertises (port 8081) hangs, and the
+            // port a page url would suggest (7999) refuses outright.
+            const offered = repos
+                .map(repo => ({ slug: repo.slug, url: repo.http ?? repo.ssh ?? '' }))
+                .filter(repo => repo.url !== '');
+            // A group of sixty repos is rarely a request for sixty repos. Asked per project, so
+            // the numbers belong to one group and cannot be crossed with another's — and the
+            // picker prints the numbered list itself, which is why nothing is listed above it.
+            const chosen = await (0, pick_repos_js_1.askWhichRepos)(input.key, offered, {
+                parent: options.beside,
+                run: options.pickRun,
+                isTTY: options.isTTY,
+                ask: options.ask,
+            });
+            // Nothing chosen is a decision, not a failure: pressing Enter to skip a group must
+            // not come back as a warning at the end of the install.
+            for (const repo of chosen)
+                clone.push(repo.url);
+        }
+        catch (error) {
+            const why = error.message;
+            console.log(`[vsaf] ⚠ Không đọc được nhóm dự án ${input.key} — ${why}`);
+            // A timeout names no action on its own, and the one that fits is not the one a
+            // person guesses. Measured against bitbucket.digital.vn while the account was
+            // NOT locked: two reads in a row stalled for the full budget and the third
+            // answered in 122 ms. So the fix is to ask again — not to hunt for a credential,
+            // which is where the bare line "Quá hạn 15s" sends people.
+            if (silentServer(why)) {
+                console.log('[vsaf]   Đã chờ 45s — máy chủ này sinh danh sách ở lần hỏi đầu (đo được 20s),');
+                console.log('[vsaf]   nên quá 45s là nó đang hỏng thật, không phải chậm.');
+                console.log('[vsaf]   Đây KHÔNG phải lỗi token: token sai thì máy chủ trả lời ngay và báo 401.');
+                console.log('[vsaf]   Dán thẳng url clone của từng repo thay cho link nhóm là đi tiếp được.');
+            }
+            console.log('[vsaf]   Bỏ qua link này, phần còn lại vẫn được cài.');
+            unresolved.push({ entry, reason: why });
+        }
+    }
+    return { clone: [...new Set(clone)], adopt: [...new Set(adopt)], unresolved };
+}
+/**
+ * Read a project's repo list, and when the server stalls, offer to ask again here.
+ *
+ * The stall outlasts the retry window: measured on bitbucket.digital.vn, every attempt in
+ * one run timed out and the identical link typed seconds later answered at once. What the
+ * person then does is re-run the whole install and paste the link again — so the offer is
+ * to spare them that, not to add patience the machine already spent. Only at a terminal:
+ * a script has nobody to ask, and there it fails as before.
+ */
+async function readGroupWithRetryOffer(input, credential, options) {
+    for (;;) {
+        try {
+            return await (0, bitbucket_js_1.listProjectRepos)(input.base, input.key, credential, options.fetchImpl ?? fetch);
+        }
+        catch (error) {
+            const why = error.message;
+            if (!silentServer(why) || !process.stdin.isTTY)
+                throw error;
+            console.log(`[vsaf] ⚠ ${input.key}: máy chủ nhận kết nối nhưng không trả lời.`);
+            if (!(await askToAskAgain()))
+                throw error;
+        }
+    }
+}
+/**
+ * Wait at the prompt for permission to ask the server again.
+ *
+ * Through `readline`, not a raw read of fd 0: the repo question earlier in the same run
+ * opens a readline interface over stdin and closes it, and after that a `readSync(0, …)`
+ * comes back with zero bytes at once rather than blocking. The first version of this
+ * offer did exactly that — it printed "Bấm Enter" and fell straight through to the
+ * failure, which is worse than not offering, since the person is told they have a choice
+ * they do not have. Measured against bitbucket.digital.vn on the run that found it.
+ */
+async function askToAskAgain() {
+    if (!process.stdin.isTTY)
+        return false;
+    const rl = (0, promises_1.createInterface)({ input: process.stdin, output: process.stdout });
+    try {
+        await rl.question('[vsaf]   Enter để hỏi lại (khỏi chạy lại cả lệnh), Ctrl-C để bỏ qua link này: ');
+        return true;
+    }
+    catch {
+        return false; // Ctrl-D at the prompt reads as "give up on this link".
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=resolve-inputs.js.map

package/packages/cli/dist/commands/install/resolve-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-inputs.js","sourceRoot":"","sources":["../../../src/commands/install/resolve-inputs.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AA8DH,4CASC;AAWD,sCA0BC;AAkDD,sCAgIC;AA5RD,qDAAyD;AACzD,iDAAkD;AAClD,qDAAoG;AACpG,mDAA8E;AAE9E,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAO9B,wFAAwF;AACxF,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,GAAW,EAAE,WAA2B,MAAM;IAC7E,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;IAC1D,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAC;IAE5D,OAAO,aAAa,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,iFAAiF;YACjF,2DAA2D;YAC3D,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAEnF,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,qFAAqF;IACrF,oFAAoF;IACpF,2DAA2D;IAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAgBD;;;;;GAKG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,mCAAmC,IAAI,0BAA0B,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,aAAa,CACjC,OAAiB,EACjB,UAeI,EAAE;IAEN,qFAAqF;IACrF,wFAAwF;IACxF,yEAAyE;IACzE,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAmC,EAAE;QAC5E,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9E,CAAC;QACD,kFAAkF;QAClF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAA,kCAAiB,EAAC,IAAI,EAAE;gBACvC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;aACzD,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,8EAA8E;YAC9E,IAAI,CAAC,cAAc;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,cAAc,GAAG,IAAI,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAExE,sFAAsF;YACtF,+EAA+E;YAC/E,oFAAoF;YACpF,oFAAoF;YACpF,uBAAuB;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAA,6BAAY,EAAC,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,GAAG,gDAAgD,CAAC,CAAC;gBAC9F,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,kFAAkF;YAClF,iFAAiF;YACjF,sEAAsE;YACtE,kFAAkF;YAClF,yDAAyD;YACzD,MAAM,OAAO,GAAG,KAAK;iBAClB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;iBACpE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YAEnC,oFAAoF;YACpF,iFAAiF;YACjF,mFAAmF;YACnF,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAa,EAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;gBACrD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAC;YAEH,mFAAmF;YACnF,wDAAwD;YACxD,KAAK,MAAM,IAAI,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAI,KAAe,CAAC,OAAO,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;YAExE,+EAA+E;YAC/E,8EAA8E;YAC9E,2EAA2E;YAC3E,iFAAiF;YACjF,2DAA2D;YAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;gBAC7F,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;gBACjG,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;YAChG,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,uBAAuB,CACpC,KAAoC,EACpC,UAAsB,EACtB,OAAqC;IAErC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,+BAAgB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAI,KAAe,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,KAAK,CAAC;YAE5D,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,GAAG,6CAA6C,CAAC,CAAC;YAChF,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC,CAAC;QACpG,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,wDAAwD;IACxE,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/packages/cli/dist/commands/install/rules.d.ts

@@ -0,0 +1,22 @@
+/** Rule sets are chosen per stack, not per project — a monorepo can need both. */
+export type Stack = 'fe' | 'be';
+/**
+ * Work out what kind of code a repo holds, from its dependency manifests.
+ *
+ * An empty result is a normal answer, not a failure: a docs-only repo gets no
+ * coding rules, which keeps its sessions free of irrelevant context.
+ */
+export declare function detectStack(projectPath: string): Stack[];
+/**
+ * Pull the managed import block back out of `CLAUDE.md`, leaving the prose the
+ * user wrote around it. Returns the file path, or null when there was no block.
+ */
+export declare function removeRulesImport(projectPath: string): string | null;
+/**
+ * Install the pack's rule files for the stacks a repo actually uses, and point
+ * `CLAUDE.md` at them through a marker block that a reinstall rewrites in place.
+ *
+ * Returns every path written, all of them inside the project.
+ */
+export declare function deployRules(packDir: string, projectPath: string, stack: Stack[]): string[];
+//# sourceMappingURL=rules.d.ts.map

package/packages/cli/dist/commands/install/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/commands/install/rules.ts"],"names":[],"mappings":"AAUA,kFAAkF;AAClF,MAAM,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;AAShC;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,KAAK,EAAE,CAoBxD;AAuCD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYpE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CA8B1F"}

package/packages/cli/dist/commands/install/rules.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectStack = detectStack;
+exports.removeRulesImport = removeRulesImport;
+exports.deployRules = deployRules;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const backup_js_1 = require("./backup.js");
+/** Which rule file a pack wants applied to which kind of repo. */
+const MAPPING_FILE = 'rules.json';
+const BLOCK_BEGIN = '<!-- >>> vsaf coding rules import (auto-managed, do not edit) >>>';
+const BLOCK_END = '<!-- <<< vsaf coding rules import <<< -->';
+const FE_DEPS = /"(react|next|vue|svelte|@angular\/core|nuxt|remix|astro|solid-js|preact|qwik)"/;
+const BE_DEPS = /"(express|fastify|@nestjs\/core|koa|hapi|hono|@hapi\/hapi|restify)"/;
+const BE_MANIFESTS = [
+    'pom.xml', 'build.gradle', 'build.gradle.kts',
+    'go.mod', 'Cargo.toml', 'pyproject.toml', 'requirements.txt',
+];
+/**
+ * Work out what kind of code a repo holds, from its dependency manifests.
+ *
+ * An empty result is a normal answer, not a failure: a docs-only repo gets no
+ * coding rules, which keeps its sessions free of irrelevant context.
+ */
+function detectStack(projectPath) {
+    const stack = [];
+    const packageJson = (0, path_1.join)(projectPath, 'package.json');
+    if ((0, fs_1.existsSync)(packageJson)) {
+        let manifest = '';
+        try {
+            manifest = (0, fs_1.readFileSync)(packageJson, 'utf-8');
+        }
+        catch {
+            manifest = ''; // unreadable manifest tells us nothing; fall through to the file probes
+        }
+        if (FE_DEPS.test(manifest))
+            stack.push('fe');
+        if (BE_DEPS.test(manifest))
+            stack.push('be');
+    }
+    if (!stack.includes('be') && BE_MANIFESTS.some(m => (0, fs_1.existsSync)((0, path_1.join)(projectPath, m)))) {
+        stack.push('be');
+    }
+    return stack;
+}
+function readMapping(rulesDir) {
+    const path = (0, path_1.join)(rulesDir, MAPPING_FILE);
+    if (!(0, fs_1.existsSync)(path))
+        return {};
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(path, 'utf-8'));
+    }
+    catch (error) {
+        throw new Error(`Invalid rule mapping in ${path}: ${error.message}`);
+    }
+}
+/** The managed block is rewritten wholesale, so a stack change cannot leave stale imports. */
+function renderBlock(files) {
+    const imports = files.map(f => `@rules/${f}`).join('\n');
+    return [
+        BLOCK_BEGIN,
+        '## Coding rules',
+        '',
+        'Rule chi tiết theo stack của repo, do pack cài vào `rules/`.',
+        '',
+        imports,
+        BLOCK_END,
+    ].join('\n');
+}
+/** Replace an existing managed block, or append one, leaving the user's prose alone. */
+function upsertBlock(current, block) {
+    const start = current.indexOf(BLOCK_BEGIN);
+    const end = current.indexOf(BLOCK_END);
+    if (start !== -1 && end > start) {
+        return current.slice(0, start) + block + current.slice(end + BLOCK_END.length);
+    }
+    const base = current.length === 0 || current.endsWith('\n') ? current : `${current}\n`;
+    return `${base}${base.length > 0 ? '\n' : ''}${block}\n`;
+}
+/**
+ * Pull the managed import block back out of `CLAUDE.md`, leaving the prose the
+ * user wrote around it. Returns the file path, or null when there was no block.
+ */
+function removeRulesImport(projectPath) {
+    const claudeMd = (0, path_1.join)(projectPath, 'CLAUDE.md');
+    if (!(0, fs_1.existsSync)(claudeMd))
+        return null;
+    const current = (0, fs_1.readFileSync)(claudeMd, 'utf-8');
+    const start = current.indexOf(BLOCK_BEGIN);
+    const end = current.indexOf(BLOCK_END);
+    if (start === -1 || end <= start)
+        return null;
+    const next = (current.slice(0, start) + current.slice(end + BLOCK_END.length)).replace(/\n{3,}$/, '\n');
+    (0, fs_1.writeFileSync)(claudeMd, next, 'utf-8');
+    return claudeMd;
+}
+/**
+ * Install the pack's rule files for the stacks a repo actually uses, and point
+ * `CLAUDE.md` at them through a marker block that a reinstall rewrites in place.
+ *
+ * Returns every path written, all of them inside the project.
+ */
+function deployRules(packDir, projectPath, stack) {
+    const source = (0, path_1.join)(packDir, 'rules');
+    if (!(0, fs_1.existsSync)(source) || stack.length === 0)
+        return [];
+    const mapping = readMapping(source);
+    const files = stack
+        .map(kind => mapping[kind])
+        .filter((f) => !!f && (0, fs_1.existsSync)((0, path_1.join)(source, f)));
+    if (files.length === 0)
+        return [];
+    const written = [];
+    // At the repo root, not under `.claude/`: these are the team's coding rules, meant
+    // to be read and committed like any other document in the repo.
+    const targetDir = (0, path_1.join)(projectPath, 'rules');
+    (0, fs_1.mkdirSync)(targetDir, { recursive: true });
+    for (const file of files) {
+        const target = (0, path_1.join)(targetDir, file);
+        (0, fs_1.copyFileSync)((0, path_1.join)(source, file), target);
+        written.push(target);
+    }
+    const claudeMd = (0, path_1.join)(projectPath, 'CLAUDE.md');
+    const current = (0, fs_1.existsSync)(claudeMd) ? (0, fs_1.readFileSync)(claudeMd, 'utf-8') : '';
+    const next = upsertBlock(current, renderBlock(files));
+    (0, backup_js_1.backupIfModified)(claudeMd, next);
+    (0, fs_1.writeFileSync)(claudeMd, next, 'utf-8');
+    written.push(claudeMd);
+    return written;
+}
+//# sourceMappingURL=rules.js.map

package/packages/cli/dist/commands/install/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../src/commands/install/rules.ts"],"names":[],"mappings":";;AA0BA,kCAoBC;AA2CD,8CAYC;AAQD,kCA8BC;AA3ID,2BAAsF;AACtF,+BAA4B;AAC5B,2CAA+C;AAE/C,kEAAkE;AAClE,MAAM,YAAY,GAAG,YAAY,CAAC;AAElC,MAAM,WAAW,GAAG,mEAAmE,CAAC;AACxF,MAAM,SAAS,GAAG,2CAA2C,CAAC;AAK9D,MAAM,OAAO,GAAG,gFAAgF,CAAC;AACjG,MAAM,OAAO,GAAG,qEAAqE,CAAC;AACtF,MAAM,YAAY,GAAG;IACnB,SAAS,EAAE,cAAc,EAAE,kBAAkB;IAC7C,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,WAAmB;IAC7C,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAEtD,IAAI,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,iBAAY,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC,CAAC,wEAAwE;QACzF,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAmC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO;QACL,WAAW;QACX,iBAAiB;QACjB,EAAE;QACF,8DAA8D;QAC9D,EAAE;QACF,OAAO;QACP,SAAS;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC;IACvF,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,WAAmB;IACnD,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxG,IAAA,kBAAa,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,OAAe,EAAE,WAAmB,EAAE,KAAc;IAC9E,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAA,eAAU,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzD,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,mFAAmF;IACnF,gEAAgE;IAChE,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAA,eAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtD,IAAA,4BAAgB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,IAAA,kBAAa,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/packages/cli/dist/commands/install/selftest.d.ts

@@ -0,0 +1,14 @@
+import type { InstallRecord } from './manifest.js';
+/**
+ * Check that what the install claims to have written is really usable.
+ *
+ * Every check is against the install record, so it verifies the promise actually
+ * made rather than a fixed expectation. Catching this here matters because the
+ * failures are all silent ones: a hook missing its execute bit never runs, a link
+ * resolving nowhere fails only when a skill reads through it, and a missing
+ * workflow directory shows up as "no workflows" long after installing.
+ *
+ * Returns one line per problem found; empty means the install is sound.
+ */
+export declare function selfTest(projectPath: string, record: InstallRecord): string[];
+//# sourceMappingURL=selftest.d.ts.map

package/packages/cli/dist/commands/install/selftest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selftest.d.ts","sourceRoot":"","sources":["../../../src/commands/install/selftest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAsF7E"}

package/packages/cli/dist/commands/install/selftest.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.selfTest = selfTest;
+const js_yaml_1 = require("js-yaml");
+const fs_1 = require("fs");
+const path_1 = require("path");
+/**
+ * Check that what the install claims to have written is really usable.
+ *
+ * Every check is against the install record, so it verifies the promise actually
+ * made rather than a fixed expectation. Catching this here matters because the
+ * failures are all silent ones: a hook missing its execute bit never runs, a link
+ * resolving nowhere fails only when a skill reads through it, and a missing
+ * workflow directory shows up as "no workflows" long after installing.
+ *
+ * Returns one line per problem found; empty means the install is sound.
+ */
+function selfTest(projectPath, record) {
+    const problems = [];
+    for (const skill of record.skills) {
+        const dir = (0, path_1.join)(projectPath, record.canonicalDir, skill);
+        if (!(0, fs_1.existsSync)((0, path_1.join)(dir, 'SKILL.md'))) {
+            problems.push(`skill ${skill}: no SKILL.md at ${record.canonicalDir}/${skill}`);
+        }
+    }
+    for (const hook of record.hooks) {
+        const path = (0, path_1.join)(projectPath, '.claude', 'hooks', hook);
+        if (!(0, fs_1.existsSync)(path)) {
+            problems.push(`hook ${hook}: not installed`);
+            continue;
+        }
+        // Only scripts need the bit; a README in the same directory does not.
+        if (!/\.(sh|py)$/.test(hook))
+            continue;
+        if (((0, fs_1.statSync)(path).mode & 0o111) === 0) {
+            problems.push(`hook ${hook}: not executable, so it will never run`);
+        }
+    }
+    if (record.hooks.length > 0) {
+        const settings = (0, path_1.join)(projectPath, '.claude', 'settings.json');
+        if (!(0, fs_1.existsSync)(settings)) {
+            problems.push('settings.json: missing, so no hook is wired to any event');
+        }
+        else {
+            try {
+                JSON.parse((0, fs_1.readFileSync)(settings, 'utf-8'));
+            }
+            catch (error) {
+                problems.push(`settings.json: cannot be parsed — ${error.message}`);
+            }
+        }
+    }
+    // `hasWorkflows` records what the pack ships, not what this run wrote — uninstall
+    // needs it that way. Scaffolding is skipped outright on a project with no `.vsaf/`,
+    // and the install says so on screen, so checking for the directory there flags a
+    // promise that was never made and fails an install that went exactly to plan.
+    if (record.hasWorkflows && (0, fs_1.existsSync)((0, path_1.join)(projectPath, '.vsaf'))) {
+        const dir = (0, path_1.join)(projectPath, '.vsaf', 'workflows', record.pack);
+        const count = (0, fs_1.existsSync)(dir) ? (0, fs_1.readdirSync)(dir).filter(f => f.endsWith('.yaml')).length : 0;
+        if (count === 0) {
+            problems.push(`workflow directory .vsaf/workflows/${record.pack}: empty or missing`);
+        }
+    }
+    for (const command of record.commands) {
+        if (!(0, fs_1.existsSync)((0, path_1.join)(projectPath, '.vsaf', 'commands', command))) {
+            problems.push(`slash command ${command}: missing`);
+        }
+    }
+    // The check that matters most for a spec repo: the config 28 of the pack's skills
+    // read. A missing or unparsable one leaves every skill resolving paths to nowhere,
+    // and nothing else in this list would have noticed.
+    if (record.specConfig) {
+        const path = (0, path_1.join)(projectPath, record.specConfig);
+        if (!(0, fs_1.existsSync)(path)) {
+            problems.push(`${record.specConfig}: missing, so skills cannot resolve their paths`);
+        }
+        else {
+            try {
+                const config = (0, js_yaml_1.load)((0, fs_1.readFileSync)(path, 'utf-8'));
+                const bmad = (config?.bmad ?? {});
+                for (const key of ['spec_repo_root', 'code_repo_root', 'design_system_root']) {
+                    if (!bmad[key])
+                        problems.push(`${record.specConfig}: missing bmad.${key}`);
+                }
+                if (!config?.project_name)
+                    problems.push(`${record.specConfig}: missing project_name`);
+            }
+            catch (error) {
+                problems.push(`${record.specConfig}: not valid YAML — ${error.message}`);
+            }
+        }
+    }
+    for (const entry of record.wired ?? []) {
+        const path = (0, path_1.resolve)(projectPath, entry);
+        const stat = (0, fs_1.lstatSync)(path, { throwIfNoEntry: false });
+        if (!stat) {
+            problems.push(`wired path ${entry}: missing`);
+        }
+        else if (stat.isSymbolicLink() && !(0, fs_1.existsSync)(path)) {
+            problems.push(`wired path ${entry}: link resolves to nothing`);
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=selftest.js.map

package/packages/cli/dist/commands/install/selftest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selftest.js","sourceRoot":"","sources":["../../../src/commands/install/selftest.ts"],"names":[],"mappings":";;AAgBA,4BAsFC;AAtGD,qCAA+B;AAC/B,2BAAgF;AAChF,+BAAqC;AAGrC;;;;;;;;;;GAUG;AACH,SAAgB,QAAQ,CAAC,WAAmB,EAAE,MAAqB;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,oBAAoB,MAAM,CAAC,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,sEAAsE;QACtE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,wCAAwC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,qCAAsC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,iFAAiF;IACjF,8EAA8E;IAC9E,IAAI,MAAM,CAAC,YAAY,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,eAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,IAAI,oBAAoB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,OAAO,WAAW,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,mFAAmF;IACnF,oDAAoD;IACpD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,iDAAiD,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAA,cAAI,EAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAmC,CAAC;gBACnF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAA4B,CAAC;gBAC7D,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,CAAU,EAAE,CAAC;oBACtF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,YAAY;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,wBAAwB,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,cAAS,EAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,cAAc,KAAK,4BAA4B,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/packages/cli/dist/commands/install/session-hook.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Hook `SessionStart` của vsaf: ghi session id của Claude Code ra `.vsaf/.claude-session`.
+ *
+ * That id is the join key for telemetry — the vsaf trace carries it as the `session.id`
+ * span attribute, which is what groups a vsaf run and the gateway's own traces into one
+ * session. Without the hook the file is never written, every run reports no session, and
+ * nothing anywhere errors.
+ */
+export declare const SESSION_HOOK_COMMAND = "node -e \"let d='';process.stdin.on('data',c=>d+=c).on('end',()=>{try{const j=JSON.parse(d);require('fs').mkdirSync('.vsaf',{recursive:true});require('fs').writeFileSync('.vsaf/.claude-session',j.session_id||'')}catch{}})\"";
+/**
+ * Đảm bảo `.claude/settings.json` còn hook `SessionStart` của vsaf.
+ *
+ * Separate from `init` and callable again, because something else keeps removing it. The
+ * NTAPP pack's wiring script merges its own event hooks with one assignment —
+ * `data["hooks"] = manifest["hooks"]` — which replaces the whole object rather than the
+ * three keys it owns, so every key it does not know about goes with it. That is the pack's
+ * script, and this does not touch it.
+ *
+ * Measured: `--new` ends up with the hook because `init` runs after the wiring and puts it
+ * back, while `--refresh`, `--clone` and `--upgrade` skip `init` — so from the second run
+ * onward, and on every teammate's machine, the hook was simply gone. Nothing reported it:
+ * telemetry just stopped carrying a session.
+ *
+ * Only ever adds. An existing `SessionStart` — the user's own, or a newer form of this one
+ * — is left exactly as it is, and a settings file that does not parse is left alone rather
+ * than rewritten from scratch.
+ */
+export declare function ensureSessionHook(projectPath: string): 'added' | 'kept' | 'unreadable';
+//# sourceMappingURL=session-hook.d.ts.map

package/packages/cli/dist/commands/install/session-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-hook.d.ts","sourceRoot":"","sources":["../../../src/commands/install/session-hook.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,oOACgM,CAAC;AAElO;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,YAAY,CAwBtF"}