aw-spec-cli 0.1.21 → 0.1.23

package/assets/foundations/java/Hexagonal/pack-foundation.sh

@@ -0,0 +1,357 @@
+#!/usr/bin/env bash
+#
+# pack-foundation.sh — Java foundation packer for AW-Spec
+#
+# Packs the Java Hexagonal foundation into a single AW-Spec foundation pack.
+#
+# Source foundation:
+#   foundation/appweaver.hexagonal
+#
+# The packer does NOT rename the Java package.
+# The Java package replacement is performed during unpacking.
+#
+# Java foundation sentinel:
+#   io.appweaver
+#
+# Example:
+#   ./pack-foundation.sh \
+#       --source-dir /path/to/appweaver-java-library/foundation/appweaver.hexagonal \
+#       --out-file ./Hexagonal.pack.txt
+#
+
+set -euo pipefail
+
+# ------------------------------------------------------------------ defaults ---
+
+SENTINEL='io.appweaver'
+FOUNDATION='Hexagonal'
+SOURCE_DIR=''
+OUT_FILE=''
+ALLOW_SECRETS=0
+
+usage() {
+  cat >&2 <<'EOF'
+Usage: pack-foundation.sh --source-dir <dir> [--out-file <file>]
+                          [--sentinel <name>] [--foundation <name>]
+                          [--allow-secrets]
+
+  -s, --source-dir <dir>   Java foundation directory             (required)
+  -o, --out-file <file>    Output pack file                     (default: ./Hexagonal.pack.txt)
+      --sentinel <name>    Java package sentinel                 (default: io.appweaver)
+      --foundation <name>  Foundation name                       (default: Hexagonal)
+      --allow-secrets      Pack even if credential markers exist
+  -h, --help               Show this help
+
+Positional fallback:
+  pack-foundation.sh <source-dir> [out-file]
+EOF
+}
+
+# -------------------------------------------------------------- argument parsing
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    -s|--source-dir)
+      SOURCE_DIR="${2:?--source-dir needs a value}"
+      shift 2
+      ;;
+
+    -o|--out-file)
+      OUT_FILE="${2:?--out-file needs a value}"
+      shift 2
+      ;;
+
+    --sentinel)
+      SENTINEL="${2:?--sentinel needs a value}"
+      shift 2
+      ;;
+
+    --foundation)
+      FOUNDATION="${2:?--foundation needs a value}"
+      shift 2
+      ;;
+
+    --allow-secrets)
+      ALLOW_SECRETS=1
+      shift
+      ;;
+
+    -h|--help)
+      usage
+      exit 0
+      ;;
+
+    --)
+      shift
+      break
+      ;;
+
+    -*)
+      echo "Error: unknown option: $1" >&2
+      usage
+      exit 2
+      ;;
+
+    *)
+      if [ -z "$SOURCE_DIR" ]; then
+        SOURCE_DIR="$1"
+      elif [ -z "$OUT_FILE" ]; then
+        OUT_FILE="$1"
+      else
+        echo "Error: unexpected argument: $1" >&2
+        usage
+        exit 2
+      fi
+      shift
+      ;;
+  esac
+done
+
+[ -n "$SOURCE_DIR" ] || {
+  echo "Error: --source-dir is required." >&2
+  usage
+  exit 2
+}
+
+[ -d "$SOURCE_DIR" ] || {
+  echo "Error: SourceDir is not a folder: $SOURCE_DIR" >&2
+  exit 1
+}
+
+SRC="$(cd "$SOURCE_DIR" && pwd -P)"
+
+[ -n "$OUT_FILE" ] || {
+  OUT_FILE="$(pwd)/$FOUNDATION.pack.txt"
+}
+
+# -------------------------------------------------------------- exclusions ------
+
+# Java/Maven/IDE/build artifacts that should never be included in the foundation.
+EXCLUDE_DIRS=(
+  target
+  .gradle
+  .git
+  .idea
+  .vscode
+  .settings
+  TestResults
+  logs
+  artifacts
+)
+
+EXCLUDE_FILES=(
+  '*.class'
+  '*.log'
+  '*.db'
+  '*.db-shm'
+  '*.db-wal'
+  '*.sqlite'
+  '.env.*'
+  '*.pfx'
+  '*.pem'
+  '*.key'
+  '*.snk'
+  'id_rsa'
+  'id_rsa.pub'
+  'secrets.json'
+  '.DS_Store'
+)
+
+# -------------------------------------------------------------- secret patterns -
+
+SECRET_NAMES=(
+  'Private key block'
+  'AWS access key id'
+  'Azure DevOps PAT-ish'
+  'Generic password assignment'
+)
+
+SECRET_RX=(
+  'BEGIN (RSA |OPENSSH |EC |DSA )?PRIVATE KEY'
+  'AKIA[0-9A-Z]{16}'
+  '[A-Za-z0-9]{52}AZDO[A-Za-z0-9]'
+  'password[[:space:]]*=[[:space:]]*["'\''][^"'\'']+'
+)
+
+is_excluded() {
+  local rel="$1"
+  local seg leaf g
+  local -a segs
+
+  IFS='/' read -ra segs <<< "$rel"
+
+  for seg in "${segs[@]}"; do
+    for g in "${EXCLUDE_DIRS[@]}"; do
+      [ "$seg" = "$g" ] && return 0
+    done
+  done
+
+  leaf="${rel##*/}"
+
+  for g in "${EXCLUDE_FILES[@]}"; do
+    case "$leaf" in
+      $g)
+        return 0
+        ;;
+    esac
+  done
+
+  return 1
+}
+
+is_binary() {
+  local f="$1"
+  local n1 n2
+
+  n1="$(head -c 8000 "$f" | wc -c | tr -d '[:space:]')"
+  n2="$(head -c 8000 "$f" | LC_ALL=C tr -d '\000' | wc -c | tr -d '[:space:]')"
+
+  [ "$n1" != "$n2" ]
+}
+
+# ----------------------------------------------------------- collect + sort -----
+
+picked_files=()
+picked_dirs=()
+
+# Collect files.
+while IFS= read -r full; do
+  rel="${full#"$SRC"}"
+  rel="${rel#/}"
+
+  [ -n "$rel" ] || continue
+
+  is_excluded "$rel" && continue
+
+  picked_files+=("$rel")
+done < <(find "$SRC" -type f | LC_ALL=C sort)
+
+# Collect directories.
+#
+# All non-excluded directories are packed so that empty directories
+# are preserved during unpacking.
+while IFS= read -r full; do
+  rel="${full#"$SRC"}"
+  rel="${rel#/}"
+
+  # Do not include the source root itself.
+  [ -n "$rel" ] || continue
+
+  is_excluded "$rel" && continue
+
+  picked_dirs+=("$rel")
+done < <(find "$SRC" -type d | LC_ALL=C sort)
+
+[ "${#picked_files[@]}" -gt 0 ] || {
+  echo "Error: No files to pack under: $SRC" >&2
+  exit 1
+}
+
+# ----------------------------------------------------------- secret scan --------
+
+findings=()
+
+for rel in "${picked_files[@]}"; do
+  f="$SRC/$rel"
+
+  for i in "${!SECRET_RX[@]}"; do
+    if LC_ALL=C grep -aEq -- "${SECRET_RX[$i]}" "$f" 2>/dev/null; then
+      findings+=("  $rel  ->  ${SECRET_NAMES[$i]}")
+    fi
+  done
+done
+
+if [ "${#findings[@]}" -gt 0 ]; then
+
+  if [ "$ALLOW_SECRETS" -eq 1 ]; then
+    echo "WARNING: Potential secret(s) detected — packing anyway:" >&2
+    printf '%s\n' "${findings[@]}" >&2
+  else
+    echo "Error: Potential secret(s) detected — refusing to pack:" >&2
+    printf '%s\n' "${findings[@]}" >&2
+    echo "Remove the secrets or use --allow-secrets if this is intentional." >&2
+    exit 1
+  fi
+
+fi
+
+# ----------------------------------------------------------- sentinel check ------
+
+hits=0
+
+for rel in "${picked_files[@]}"; do
+  if LC_ALL=C grep -aFq -- "$SENTINEL" "$SRC/$rel" 2>/dev/null; then
+    hits=$((hits + 1))
+  fi
+done
+
+if [ "$hits" -eq 0 ]; then
+  echo "WARNING: Sentinel '$SENTINEL' not found in any file." >&2
+  echo "Expected Java foundation package references such as:" >&2
+  echo "  package io.appweaver...." >&2
+else
+  echo "Sentinel '$SENTINEL' found in $hits file(s)."
+fi
+
+# ----------------------------------------------------------- write the pack ------
+
+outdir="$(dirname "$OUT_FILE")"
+
+[ -d "$outdir" ] || mkdir -p "$outdir"
+
+{
+  printf '%s\n' '# AW-SPEC FOUNDATION PACK'
+  printf '# foundation: %s\n' "$FOUNDATION"
+  printf '# sentinel: %s\n' "$SENTINEL"
+  printf '# generated: %s\n' "$(date -u +%Y-%m-%dT%H:%M:%S.0000000Z)"
+  printf '# files: %s\n' "${#picked_files[@]}"
+  printf '# directories: %s\n' "${#picked_dirs[@]}"
+  printf '%s\n' '# format: aw-spec-pack/v1'
+  printf '%s\n' '# --- Java foundation replacement contract ---'
+  printf '%s\n' '#   Java content: io.appweaver -> <lowercase-app-name>'
+  printf '%s\n' '#   Java path:    io/appweaver -> <lowercase-app-name>'
+  printf '%s\n' '#   Application directory preserves the user-provided name.'
+  printf '%s\n' '# ============================================================'
+  printf '\n'
+} > "$OUT_FILE"
+
+# ----------------------------------------------------------- write directories ---
+
+for rel in "${picked_dirs[@]}"; do
+  {
+    printf '<<<DIR path="%s">>>\n' "$rel"
+    printf '%s\n' '<<<ENDDIR>>>'
+  } >> "$OUT_FILE"
+done
+
+# ----------------------------------------------------------- write files ---------
+
+for rel in "${picked_files[@]}"; do
+
+  f="$SRC/$rel"
+
+  if is_binary "$f"; then
+
+    {
+      printf '<<<FILE path="%s" encoding="base64">>>\n' "$rel"
+      base64 < "$f" | tr -d '\n'
+      printf '\n'
+      printf '%s\n' '<<<ENDFILE>>>'
+    } >> "$OUT_FILE"
+
+  else
+
+    {
+      printf '<<<FILE path="%s">>>\n' "$rel"
+
+      # Normalize CRLF -> LF.
+      awk '{ sub(/\r$/, ""); print }' "$f"
+
+      printf '%s\n' '<<<ENDFILE>>>'
+    } >> "$OUT_FILE"
+
+  fi
+
+done
+
+echo "Packed ${#picked_files[@]} file(s) and ${#picked_dirs[@]} directorie(s) -> $OUT_FILE"