boxdown 1.0.0

package/assets/devcontainer/hooks/post-create.sh

@@ -0,0 +1,67 @@
+#!/bin/bash
+set -e
+
+HOOKS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DEVCONTAINER_DIR="$(cd "${HOOKS_DIR}/.." && pwd)"
+
+main() {
+  configure_local_git
+  install_openssh_server
+  install_apm
+  install_or_update_coding_agent_clis
+  install_1password_cli
+  install_snyk_cli
+  run_deps_install
+}
+
+configure_local_git() {
+  # Local git prefs only apply inside a repository; skip when there is no .git (avoids postCreate failure).
+  if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    git config --local commit.gpgsign false
+    git config --local core.pager 'less -R'
+    git config --local credential.https://github.com.helper '!gh auth git-credential'
+  fi
+}
+
+install_apm() {
+  # Agent Package Manager: https://github.com/microsoft/apm
+  curl -sSL https://aka.ms/apm-unix | sh
+}
+
+install_or_update_coding_agent_clis() {
+  bash "${DEVCONTAINER_DIR}/utils/coding-agent-cli-update.sh" install ||
+    echo "post-create: warning: one or more coding-agent CLI refreshes failed." >&2
+}
+
+install_openssh_server() {
+  bash "${DEVCONTAINER_DIR}/utils/ssh-bootstrap.sh" install
+}
+
+install_snyk_cli() {
+  # https://docs.snyk.io/snyk-cli/install-the-snyk-cli
+  local url
+  case "$(uname -m)" in
+    aarch64 | arm64) url="https://static.snyk.io/cli/latest/snyk-linux-arm64" ;;
+    x86_64 | amd64) url="https://static.snyk.io/cli/latest/snyk-linux" ;;
+    *)
+      echo "post-create: skipping Snyk CLI (unsupported arch: $(uname -m))" >&2
+      return 0
+      ;;
+  esac
+  curl --compressed -fsSL "${url}" -o /tmp/snyk
+  chmod +x /tmp/snyk
+  sudo mv -f /tmp/snyk /usr/local/bin/snyk
+}
+
+install_1password_cli() {
+  local op_version="2.32.1"
+  curl -fsSL "https://cache.agilebits.com/dist/1P/op2/pkg/v${op_version}/op_linux_arm64_v${op_version}.zip" -o /tmp/op.zip
+  python3 -c "import zipfile; zipfile.ZipFile('/tmp/op.zip').extract('op', '/tmp')"
+  sudo mv /tmp/op /usr/local/bin/op && chmod +x /usr/local/bin/op && rm /tmp/op.zip
+}
+
+run_deps_install() {
+  bash "${DEVCONTAINER_DIR}/utils/deps-install.sh"
+}
+
+main "$@"

package/assets/devcontainer/hooks/post-start.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# post-start: runs after each container start (postStartCommand in devcontainer.json).
+# Naming matches post-create.sh; extend with more steps as needed (e.g. source scripts from .devcontainer/utils/).
+
+set -euo pipefail
+
+HOOKS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DEVCONTAINER_DIR="$(cd "${HOOKS_DIR}/.." && pwd)"
+
+main() {
+  configure_sshd_runtime
+  refresh_coding_agent_clis
+  remove_ephemeral_env_file_if_present
+}
+
+configure_sshd_runtime() {
+  bash "${DEVCONTAINER_DIR}/utils/ssh-bootstrap.sh" runtime
+}
+
+refresh_coding_agent_clis() {
+  bash "${DEVCONTAINER_DIR}/utils/coding-agent-cli-update.sh" maybe-update ||
+    echo "post-start: warning: one or more coding-agent CLI refreshes failed." >&2
+}
+
+# When initializeCommand + runArgs inject secrets via .env.development, remove the file
+# after start so it is not left on disk and tooling that assumes absence does not break.
+remove_ephemeral_env_file_if_present() {
+  local env_file=".env.development"
+  if [[ -f "$env_file" ]]; then
+    rm -f "$env_file"
+  fi
+}
+
+main "$@"

package/assets/devcontainer/ssh-config-install.sh

@@ -0,0 +1,172 @@
+#!/usr/bin/env bash
+#
+# Install/update a host SSH config alias for this repo's portless devcontainer SSH flow.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORKSPACE_FOLDER="$(cd "${SCRIPT_DIR}/.." && pwd -P)"
+REPO_NAME="$(basename "${WORKSPACE_FOLDER}")"
+HOST_ALIAS="${DEVCONTAINER_SSH_HOST_ALIAS:-${REPO_NAME}-devcontainer}"
+SSH_CONFIG="${DEVCONTAINER_SSH_CONFIG:-${HOME}/.ssh/config}"
+SSH_KEY_DIR="${DEVCONTAINER_SSH_KEY_DIR:-${SCRIPT_DIR}/.ssh}"
+SSH_KEY_PATH="${DEVCONTAINER_SSH_KEY_PATH:-${SSH_KEY_DIR}/id_ed25519}"
+START_SCRIPT="${SCRIPT_DIR}/start.sh"
+BEGIN_MARKER="# BEGIN ${HOST_ALIAS} devcontainer ssh"
+END_MARKER="# END ${HOST_ALIAS} devcontainer ssh"
+QUIET=false
+
+usage() {
+  cat <<EOF
+Usage: $(basename "$0") [options]
+
+Install or update a host SSH config alias for this repo's devcontainer.
+
+Options:
+  --alias <name>       SSH host alias to write (default: ${HOST_ALIAS})
+  --config <path>      SSH config file to update (default: ${SSH_CONFIG})
+  --quiet              Only print errors.
+  --help, -h           Show this help and exit.
+
+Environment overrides:
+  DEVCONTAINER_SSH_HOST_ALIAS
+  DEVCONTAINER_SSH_CONFIG
+  DEVCONTAINER_SSH_KEY_DIR
+  DEVCONTAINER_SSH_KEY_PATH
+EOF
+}
+
+die() {
+  printf '%s\n' "$*" >&2
+  exit 1
+}
+
+log() {
+  if [ "$QUIET" != true ]; then
+    printf '%s\n' "$*"
+  fi
+}
+
+ssh_config_quote() {
+  local value="$1"
+  value="${value//\\/\\\\}"
+  value="${value//\"/\\\"}"
+  printf '"%s"' "$value"
+}
+
+ensure_host_ssh_key() {
+  if ! command -v ssh-keygen >/dev/null 2>&1; then
+    die "ssh-keygen is required for devcontainer SSH setup."
+  fi
+
+  mkdir -p "$SSH_KEY_DIR"
+  chmod 0700 "$SSH_KEY_DIR"
+
+  if [ ! -f "$SSH_KEY_PATH" ]; then
+    log "Generating devcontainer SSH identity: $SSH_KEY_PATH"
+    ssh-keygen -t ed25519 -f "$SSH_KEY_PATH" -N "" -C "${REPO_NAME}-devcontainer" >/dev/null
+  fi
+
+  if [ ! -f "${SSH_KEY_PATH}.pub" ]; then
+    ssh-keygen -y -f "$SSH_KEY_PATH" > "${SSH_KEY_PATH}.pub"
+  fi
+
+  chmod 0600 "$SSH_KEY_PATH"
+  chmod 0644 "${SSH_KEY_PATH}.pub"
+}
+
+write_ssh_config_block() {
+  local ssh_dir
+  local tmp_file
+  local start_script_quoted
+  local key_path_quoted
+  local host_alias_quoted
+
+  ssh_dir="$(dirname "$SSH_CONFIG")"
+  mkdir -p "$ssh_dir"
+  chmod 0700 "$ssh_dir"
+  touch "$SSH_CONFIG"
+  chmod 0600 "$SSH_CONFIG"
+
+  tmp_file="$(mktemp)"
+  awk -v begin="$BEGIN_MARKER" -v end="$END_MARKER" '
+    $0 == begin { skip = 1; next }
+    $0 == end { skip = 0; next }
+    !skip { print }
+  ' "$SSH_CONFIG" > "$tmp_file"
+
+  start_script_quoted="$(ssh_config_quote "$START_SCRIPT")"
+  key_path_quoted="$(ssh_config_quote "$SSH_KEY_PATH")"
+  host_alias_quoted="$(ssh_config_quote "$HOST_ALIAS")"
+
+  {
+    sed -e '${/^$/d;}' "$tmp_file"
+    printf '\n%s\n' "$BEGIN_MARKER"
+    printf 'Host %s\n' "$HOST_ALIAS"
+    printf '  HostName %s\n' "$HOST_ALIAS"
+    printf '  User node\n'
+    printf '  IdentityFile none\n'
+    printf '  IdentityFile %s\n' "$key_path_quoted"
+    printf '  IdentitiesOnly yes\n'
+    printf '  ProxyCommand env DEVCONTAINER_SSH_HOST_ALIAS=%s /bin/bash %s --ssh-proxy\n' "$host_alias_quoted" "$start_script_quoted"
+    printf '  StrictHostKeyChecking no\n'
+    printf '  UserKnownHostsFile /dev/null\n'
+    printf '  LogLevel ERROR\n'
+    printf '%s\n' "$END_MARKER"
+  } > "${tmp_file}.next"
+
+  if cmp -s "$SSH_CONFIG" "${tmp_file}.next"; then
+    log "SSH alias already up to date: ${HOST_ALIAS}"
+    rm -f "${tmp_file}.next"
+  else
+    mv "${tmp_file}.next" "$SSH_CONFIG"
+    log "Installed SSH alias: ${HOST_ALIAS}"
+  fi
+
+  rm -f "$tmp_file"
+  chmod 0600 "$SSH_CONFIG"
+}
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --help | -h)
+      usage
+      exit 0
+      ;;
+    --alias)
+      [ $# -ge 2 ] || die "--alias requires a value."
+      HOST_ALIAS="$2"
+      BEGIN_MARKER="# BEGIN ${HOST_ALIAS} devcontainer ssh"
+      END_MARKER="# END ${HOST_ALIAS} devcontainer ssh"
+      shift 2
+      ;;
+    --config)
+      [ $# -ge 2 ] || die "--config requires a value."
+      SSH_CONFIG="$2"
+      shift 2
+      ;;
+    --quiet)
+      QUIET=true
+      shift
+      ;;
+    *)
+      die "Unknown option: $1"
+      ;;
+  esac
+done
+
+ensure_host_ssh_key
+write_ssh_config_block
+
+if [ "$QUIET" != true ]; then
+  cat <<EOF
+SSH config: ${SSH_CONFIG}
+Identity file: ${SSH_KEY_PATH}
+
+Validate with:
+  ssh ${HOST_ALIAS} 'whoami && pwd'
+
+Use this host alias in Cursor, Claude, or any other SSH client:
+  ${HOST_ALIAS}
+EOF
+fi