boxdown 1.0.0 → 1.2.1

package/assets/devcontainer/utils/python-bootstrap.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+#
+# Container-side Python runtime setup for the repo-local devcontainer workflow.
+
+set -euo pipefail
+
+PYTHON_PACKAGES=(python3 python3-venv python3-pip pipx)
+
+progress() {
+  if [ "${BOXDOWN_PROGRESS:-0}" = "1" ]; then
+    printf 'BOXDOWN_PROGRESS: %s\n' "$*"
+  fi
+}
+
+as_root() {
+  if [ "$(id -u)" -eq 0 ]; then
+    "$@"
+  else
+    sudo "$@"
+  fi
+}
+
+python_runtime_ready() {
+  command -v python3 >/dev/null 2>&1 || return 1
+  python3 -m venv --help >/dev/null 2>&1 || return 1
+  python3 -m pip --version >/dev/null 2>&1 || return 1
+  command -v pipx >/dev/null 2>&1 || return 1
+}
+
+apt_lists_present() {
+  find /var/lib/apt/lists -mindepth 1 -type f -name '*_Packages*' -print -quit 2>/dev/null | grep -q .
+}
+
+install_python_packages() {
+  as_root env DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends "${PYTHON_PACKAGES[@]}"
+}
+
+install_python_runtime() {
+  if python_runtime_ready; then
+    return 0
+  fi
+
+  progress "Installing Python runtime packages"
+  if ! apt_lists_present; then
+    as_root apt-get update
+  fi
+
+  if ! install_python_packages; then
+    as_root apt-get update
+    install_python_packages
+  fi
+
+  as_root rm -rf /var/lib/apt/lists/*
+  python_runtime_ready
+}
+
+main() {
+  case "${1:-install}" in
+    install)
+      install_python_runtime
+      ;;
+    *)
+      echo "Usage: $(basename "$0") [install]" >&2
+      return 1
+      ;;
+  esac
+}
+
+main "$@"

package/assets/devcontainer/utils/secret-env-bootstrap.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+# Shell bootstrap for Boxdown runtime-mounted secret environment files.
+
+SECRET_ENV_DIR="${BOXDOWN_SECRET_ENV_DIR:-/run/boxdown/secrets}"
+
+export_if_present() {
+  local name="$1"
+  local path="${SECRET_ENV_DIR}/${name}"
+  local value
+
+  [[ -r "${path}" ]] || return 0
+  IFS= read -r value < "${path}" || true
+
+  if [[ -n "${value}" ]]; then
+    export "${name}=${value}"
+  fi
+}
+
+export_if_present ANTHROPIC_API_KEY
+export_if_present SNYK_TOKEN
+export_if_present OP_SERVICE_ACCOUNT_TOKEN
+unset value

package/assets/devcontainer/utils/ssh-agent-proxy-bootstrap.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Expose a root-only forwarded SSH-agent socket to the non-root container user.
+
+set -euo pipefail
+
+SOURCE_SOCKET="${BOXDOWN_GIT_SIGNING_SOURCE_SOCKET:-/run/boxdown/ssh-agent.sock}"
+TARGET_SOCKET="${SSH_AUTH_SOCK:-/run/boxdown/ssh-agent-node.sock}"
+PROXY_SCRIPT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/ssh-agent-proxy.mjs"
+
+if ssh-add -L >/dev/null 2>&1; then
+  exit 0
+fi
+
+if ! command -v sudo >/dev/null 2>&1 || ! command -v node >/dev/null 2>&1; then
+  exit 1
+fi
+
+sudo -n node "${PROXY_SCRIPT}" --source "${SOURCE_SOCKET}" --target "${TARGET_SOCKET}" --uid "$(id -u)" --gid "$(id -g)" >/dev/null 2>&1 &
+
+for _ in $(seq 1 20); do
+  if [[ -S "${TARGET_SOCKET}" ]] && ssh-add -L >/dev/null 2>&1; then
+    exit 0
+  fi
+  sleep 0.1
+done
+
+exit 1

package/assets/devcontainer/utils/ssh-agent-proxy.mjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+
+import { chmodSync, chownSync, existsSync, unlinkSync } from 'node:fs'
+import { createConnection, createServer } from 'node:net'
+
+function option (name) {
+  const index = process.argv.indexOf(name)
+  return index === -1 ? undefined : process.argv[index + 1]
+}
+
+const source = option('--source')
+const target = option('--target')
+const uid = Number(option('--uid'))
+const gid = Number(option('--gid'))
+
+if (source === undefined || target === undefined || !Number.isInteger(uid) || !Number.isInteger(gid)) {
+  process.stderr.write('ssh-agent-proxy: expected --source, --target, --uid, and --gid.\n')
+  process.exit(2)
+}
+
+if (existsSync(target)) unlinkSync(target)
+
+const server = createServer((client) => {
+  const upstream = createConnection(source)
+  client.pipe(upstream)
+  upstream.pipe(client)
+  client.on('error', () => upstream.destroy())
+  upstream.on('error', () => client.destroy())
+})
+
+server.on('error', (error) => {
+  process.stderr.write(`ssh-agent-proxy: ${error.message}\n`)
+  process.exit(1)
+})
+
+server.listen(target, () => {
+  chmodSync(target, 0o600)
+  chownSync(target, uid, gid)
+})

package/assets/devcontainer/utils/ssh-bootstrap.sh

@@ -11,6 +11,12 @@ SSH_USER="${DEVCONTAINER_SSH_USER:-node}"
 PUBLIC_KEY_FILE="${DEVCONTAINER_SSH_PUBLIC_KEY_FILE:-${WORKSPACE_FOLDER}/.devcontainer/.ssh/id_ed25519.pub}"
 OPENSSH_CONFIGURE_TIMEOUT_SECONDS="${DEVCONTAINER_OPENSSH_CONFIGURE_TIMEOUT_SECONDS:-180}"
 
+progress() {
+  if [ "${BOXDOWN_PROGRESS:-0}" = "1" ]; then
+    printf 'BOXDOWN_PROGRESS: %s\n' "$*"
+  fi
+}
+
 as_root() {
   if [ "$(id -u)" -eq 0 ]; then
     "$@"
@@ -98,10 +104,12 @@ ensure_openssh_server_configured() {
 
 install_openssh_server() {
   if [ ! -x /usr/sbin/sshd ]; then
+    progress "Installing openssh-server packages"
     as_root apt-get update
     as_root env DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends openssh-server
   fi
 
+  progress "Configuring openssh-server"
   ensure_openssh_server_configured
 }
 
@@ -164,6 +172,7 @@ ensure_runtime_ready() {
     return 1
   fi
 
+  progress "Preparing SSH daemon runtime"
   ensure_openssh_server_configured
   as_root ssh-keygen -A
   as_root install -d -m 0755 /run/sshd

package/dist/bin/cli.cjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const require_main = require('../main-BuEptwlL.cjs');
+const require_main = require('../main-BDgyf2t5.cjs');
 
 //#region src/bin/cli.ts
 require_main.runCli().then((exitCode) => {

package/dist/bin/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as runCli } from "../main-ZFTrSVgt.mjs";
+import { o as runCli } from "../main-J4_2Up3o.mjs";
 
 //#region src/bin/cli.ts
 runCli().then((exitCode) => {