@volter/twin-standard 1.0.155 → 1.0.156

package/dist/src/consumer.js

@@ -3,7 +3,7 @@ import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
-import { spawn } from 'node:child_process';
+import { spawn, spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { standardPackageFile } from "./package-file.js";
 import { dependencyLock } from "./dependency-lock.js";
@@ -91,7 +91,7 @@ export function prepareConsumerApp(packDir, appDir, installation) {
             throw new Error(`${name}: customer SDK dependencies require exact registry versions`);
     }
     const files = Object.entries(recipe.files).map(([path, content]) => {
-        if (isAbsolute(path) || path.includes('\\') || path.split('/').some((part) => !part || part === '.' || part === '..') || path.split('/').includes('node_modules') || ['.env', '.npmrc', '.volter/world.json'].includes(path))
+        if (isAbsolute(path) || path.includes('\\') || path.split('/').some((part) => !part || part === '.' || part === '..' || part === '.git') || path.split('/').includes('node_modules') || ['.env', '.npmrc', '.volter/world.json'].includes(path))
             throw new Error(`Invalid consumer file: ${path}`);
         if (typeof content !== 'string')
             throw new Error('Consumer files must contain text');
@@ -113,6 +113,17 @@ export function prepareConsumerApp(packDir, appDir, installation) {
         mkdirSync(dirname(join(appDir, path)), { recursive: true });
         writeFileSync(join(appDir, path), content);
     }
+    // World init reads committed example values. The recipe is this new application's source.
+    const gitEnv = Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.startsWith('GIT_')));
+    for (const args of [
+        ['init', '--quiet', '--template='],
+        ['add', '--force', '--', ...files.map(([path]) => path)],
+        ['-c', 'user.name=World consumer', '-c', 'user.email=consumer@world.test', '-c', 'commit.gpgsign=false', '-c', `core.hooksPath=${join(appDir, '.git/hooks')}`, 'commit', '--quiet', '-m', 'Materialize customer application'],
+    ]) {
+        const result = spawnSync('git', ['-C', appDir, ...args], { env: gitEnv, encoding: 'utf8' });
+        if (result.error || result.status !== 0)
+            throw new Error(`Consumer source ${args[0]} failed: ${result.error?.message ?? result.stderr.trim()}`);
+    }
     return { recipeSha256: createHash('sha256').update(JSON.stringify(recipe)).digest('hex'), dependencies: app.dependencies ?? {} };
 }
 export async function runConsumerWorkflow(packDir, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-standard",
-  "version": "1.0.155",
+  "version": "1.0.156",
   "description": "The Protocol 3 standard for Volter twin packs: the criteria a pack is graded by, the grader, the gate a pack repository and the twin catalog run on every change and submission, and the spec derivation the grade checks against. Pin a version: every place a pack is judged judges by that standard.",
   "keywords": [
     "twin",

package/src/consumer.ts

@@ -3,7 +3,7 @@ import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
-import { spawn } from 'node:child_process';
+import { spawn, spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { standardPackageFile } from './package-file.ts';
 import { dependencyLock } from './dependency-lock.ts';
@@ -87,7 +87,7 @@ export function prepareConsumerApp(packDir: string, appDir: string, installation
     if (typeof version !== 'string' || !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) throw new Error(`${name}: customer SDK dependencies require exact registry versions`);
   }
   const files = Object.entries(recipe.files).map(([path, content]) => {
-    if (isAbsolute(path) || path.includes('\\') || path.split('/').some((part) => !part || part === '.' || part === '..') || path.split('/').includes('node_modules') || ['.env', '.npmrc', '.volter/world.json'].includes(path)) throw new Error(`Invalid consumer file: ${path}`);
+    if (isAbsolute(path) || path.includes('\\') || path.split('/').some((part) => !part || part === '.' || part === '..' || part === '.git') || path.split('/').includes('node_modules') || ['.env', '.npmrc', '.volter/world.json'].includes(path)) throw new Error(`Invalid consumer file: ${path}`);
     if (typeof content !== 'string') throw new Error('Consumer files must contain text');
     return [path, content] as [string, string];
   });
@@ -105,6 +105,16 @@ export function prepareConsumerApp(packDir: string, appDir: string, installation
     mkdirSync(dirname(join(appDir, path)), { recursive: true });
     writeFileSync(join(appDir, path), content);
   }
+  // World init reads committed example values. The recipe is this new application's source.
+  const gitEnv = Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.startsWith('GIT_')));
+  for (const args of [
+    ['init', '--quiet', '--template='],
+    ['add', '--force', '--', ...files.map(([path]) => path)],
+    ['-c', 'user.name=World consumer', '-c', 'user.email=consumer@world.test', '-c', 'commit.gpgsign=false', '-c', `core.hooksPath=${join(appDir, '.git/hooks')}`, 'commit', '--quiet', '-m', 'Materialize customer application'],
+  ]) {
+    const result = spawnSync('git', ['-C', appDir, ...args], { env: gitEnv, encoding: 'utf8' });
+    if (result.error || result.status !== 0) throw new Error(`Consumer source ${args[0]} failed: ${result.error?.message ?? result.stderr.trim()}`);
+  }
   return { recipeSha256: createHash('sha256').update(JSON.stringify(recipe)).digest('hex'), dependencies: app.dependencies ?? {} };
 }