@vantaloom/cli 0.1.1 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vantaloom/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "private": false,
   "type": "module",
   "description": "Vantaloom local runtime manager.",

package/src/cli.mjs

@@ -19,7 +19,7 @@ import { fileURLToPath } from "node:url"
 const cliRoot = path.resolve(fileURLToPath(import.meta.url), "..", "..")
 const repoCandidate = path.resolve(cliRoot, "..", "..")
 const installedConfigPath = path.join(cliRoot, "config.json")
-const defaultDistBranch = "vantaloom-dist"
+const defaultReleaseTag = "runtime-latest"
 const defaultRepo = "Timefiles404/Vantaloom-next"
 
 const runtimePackages = [
@@ -44,7 +44,7 @@ export async function main(argv) {
       if (options.package) {
         await installFromPackage({ ...options, update: false })
       } else if (shouldUseDistSync(options)) {
-        await syncFromDist(options, "install")
+        await syncFromRelease(options, "install")
       } else {
         await installFromSource(options)
       }
@@ -53,7 +53,7 @@ export async function main(argv) {
       if (options.package) {
         await installFromPackage({ ...options, update: true })
       } else if (shouldUseDistSync(options)) {
-        await syncFromDist(options, "update")
+        await syncFromRelease(options, "update")
       } else {
         await installFromSource({ ...options, update: true })
       }
@@ -219,35 +219,29 @@ async function applyPackage(packageRoot, prefix, options) {
   return version
 }
 
-async function syncFromDist(options, action) {
+async function syncFromRelease(options, action) {
   const prefix = safeDirectory(options.prefix ?? defaultPrefix())
   const installedConfig = readInstalledConfig(prefix)
   const sourceRoot = installedConfig.sourceRoot
     ? tryAssertSourceRoot(installedConfig.sourceRoot)
     : tryFindSourceRoot()
   const sourceRemote = sourceRoot ? gitRemoteUrl(sourceRoot) : ""
-  const remote = options.remote ?? installedConfig.remote ?? sourceRemote
-  const repo = options.repo || installedConfig.repo || inferGitHubRepo(remote) || defaultRepo
-  const distBranch = options.distBranch ?? installedConfig.distBranch ?? defaultDistBranch
-  const cloneUrl = remote || sshRemoteFromRepo(repo)
+  const repo = options.repo || installedConfig.repo || inferGitHubRepo(options.remote ?? installedConfig.remote ?? sourceRemote) || defaultRepo
+  const releaseTag = options.releaseTag || installedConfig.releaseTag || defaultReleaseTag
   const tempRoot = mkdtempSync(path.join(os.tmpdir(), "vantaloom-update-"))
 
   try {
-    const distRoot = path.join(tempRoot, "dist")
     const extractRoot = path.join(tempRoot, "extract")
+    const archive = path.join(tempRoot, `vantaloom-${platformId()}.tar.gz`)
     mkdirSync(extractRoot, { recursive: true })
 
-    run("git", [
-      "clone",
-      "--depth",
-      "1",
-      "--branch",
-      distBranch,
-      cloneUrl,
-      distRoot,
-    ])
-
-    const archive = findPackageArchive(distRoot, platformId())
+    await downloadReleaseAsset({
+      repo,
+      releaseTag,
+      assetName: `vantaloom-${platformId()}.tar.gz`,
+      target: archive,
+      token: options.githubToken,
+    })
     run("tar", ["-xzf", archive, "-C", extractRoot])
 
     const packageRoot = findExtractedPackage(extractRoot, platformId())
@@ -259,13 +253,57 @@ async function syncFromDist(options, action) {
 
     console.log(`${action === "update" ? "updated" : "installed"} Vantaloom: ${prefix}`)
     console.log(`version: ${version}`)
-    console.log(`source: ${repo}#${distBranch}`)
+    console.log(`source: ${repo}@${releaseTag}`)
     console.log(`run: ${displayCommand(prefix)} status`)
   } finally {
     removeKnownPath(tempRoot, os.tmpdir())
   }
 }
 
+async function downloadReleaseAsset({ repo, releaseTag, assetName, target, token }) {
+  const releaseUrl = `https://api.github.com/repos/${repo}/releases/tags/${releaseTag}`
+  const headers = {
+    "User-Agent": "vantaloom-cli",
+  }
+  const githubToken = token || process.env.VANTALOOM_GITHUB_TOKEN || process.env.GITHUB_TOKEN
+  if (githubToken) {
+    headers.Authorization = `Bearer ${githubToken}`
+  }
+
+  const releaseResponse = await fetch(releaseUrl, { headers })
+  if (!releaseResponse.ok) {
+    const detail = await releaseResponse.text().catch(() => "")
+    const authHint = releaseResponse.status === 404 || releaseResponse.status === 403
+      ? " If the repository is private, set VANTALOOM_GITHUB_TOKEN to a GitHub token that can read releases."
+      : ""
+    throw new Error(`failed to inspect ${repo}@${releaseTag}: HTTP ${releaseResponse.status}.${authHint}${detail ? ` ${detail.slice(0, 200)}` : ""}`)
+  }
+
+  const release = await releaseResponse.json()
+  const asset = release.assets?.find((asset) => asset.name === assetName)
+  if (!asset) {
+    const names = release.assets?.map((asset) => asset.name).join(", ") || "none"
+    throw new Error(`missing release asset ${assetName} in ${repo}@${releaseTag}; available assets: ${names}`)
+  }
+
+  const response = await fetch(asset.url, {
+    headers: {
+      ...headers,
+      Accept: "application/octet-stream",
+    },
+  })
+  if (!response.ok) {
+    const detail = await response.text().catch(() => "")
+    const authHint = response.status === 404 || response.status === 403
+      ? " If the repository is private, set VANTALOOM_GITHUB_TOKEN to a GitHub token that can read releases."
+      : ""
+    throw new Error(`failed to download ${assetName} from ${repo}@${releaseTag}: HTTP ${response.status}.${authHint}${detail ? ` ${detail.slice(0, 200)}` : ""}`)
+  }
+
+  const buffer = Buffer.from(await response.arrayBuffer())
+  await writeFile(target, buffer)
+}
+
 function shouldUseDistSync(options) {
   return !options.local && !options.source && !options.buildWeb
 }
@@ -300,7 +338,7 @@ function readJSONIfExists(filePath) {
 
 function mergeRuntimeConfig(packageConfig, existingConfig, overrides) {
   const merged = { ...packageConfig }
-  for (const key of ["sourceRoot", "remote", "repo", "distBranch"]) {
+  for (const key of ["sourceRoot", "remote", "repo", "releaseTag"]) {
     if (!merged[key] && existingConfig[key]) {
       merged[key] = existingConfig[key]
     }
@@ -311,8 +349,8 @@ function mergeRuntimeConfig(packageConfig, existingConfig, overrides) {
   if (!merged.repo) {
     merged.repo = defaultRepo
   }
-  if (!merged.distBranch) {
-    merged.distBranch = defaultDistBranch
+  if (!merged.releaseTag) {
+    merged.releaseTag = defaultReleaseTag
   }
   return merged
 }
@@ -324,21 +362,8 @@ function runtimeConfigFromSource(sourceRoot) {
     ...(process.env.GITHUB_ACTIONS ? {} : { sourceRoot }),
     ...(remote ? { remote } : {}),
     repo,
-    distBranch: defaultDistBranch,
-  }
-}
-
-function findPackageArchive(distRoot, platform) {
-  const candidates = [
-    path.join(distRoot, "packages", `vantaloom-${platform}.tar.gz`),
-    path.join(distRoot, `vantaloom-${platform}.tar.gz`),
-  ]
-  for (const candidate of candidates) {
-    if (existsSync(candidate)) {
-      return candidate
-    }
+    releaseTag: defaultReleaseTag,
   }
-  throw new Error(`missing CI package for ${platform} in ${distRoot}`)
 }
 
 function findExtractedPackage(extractRoot, platform) {
@@ -397,10 +422,6 @@ function inferGitHubRepo(remote) {
   return sshMatch?.[1] ?? ""
 }
 
-function sshRemoteFromRepo(repo) {
-  return `git@github.com:${repo}.git`
-}
-
 async function copyStandaloneWeb(sourceRoot, buildWeb) {
   const standalone = path.join(sourceRoot, "apps", "vantaloom", ".next", "standalone")
   const staticSource = path.join(sourceRoot, "apps", "vantaloom", ".next", "static")
@@ -639,7 +660,8 @@ function parseOptions(args) {
       case "output":
       case "repo":
       case "remote":
-      case "dist-branch":
+      case "release-tag":
+      case "github-token":
         options[toCamel(key)] = inlineValue ?? args[++index]
         if (!options[toCamel(key)]) {
           throw new Error(`missing value for --${key}`)
@@ -746,9 +768,9 @@ function printHelp() {
   console.log(`Vantaloom CLI
 
 Usage:
-  vantaloom install  [--prefix <dir>] [--repo <owner/name>] [--remote <git-url>] [--dist-branch <branch>] [--package <dir>] [--no-start]
+  vantaloom install  [--prefix <dir>] [--repo <owner/name>] [--release-tag <tag>] [--github-token <token>] [--package <dir>] [--no-start]
   vantaloom install  --local [--prefix <dir>] [--source <repo>] [--build-web] [--no-start]
-  vantaloom update   [--prefix <dir>] [--repo <owner/name>] [--remote <git-url>] [--dist-branch <branch>] [--no-start]
+  vantaloom update   [--prefix <dir>] [--repo <owner/name>] [--release-tag <tag>] [--github-token <token>] [--no-start]
   vantaloom update   --local [--prefix <dir>] [--source <repo>] [--build-web] [--no-start]
   vantaloom package  [--source <repo>] [--output <dir>] [--build-web] [--archive]
   vantaloom start    [--prefix <dir>] [--component all|api|agent|web]