capix-code 2.2.4 → 2.3.0

package/scripts/rebrand.sh

@@ -1,247 +0,0 @@
-#!/usr/bin/env bash
-# rebrand.sh — apply Capix branding.
-# ONLY renames: binary name, config dirs, env var prefixes, install script.
-# Does NOT rename: workspace package name, npm package name, or import paths.
-set -euo pipefail
-
-DIR="$(cd "$(dirname "$0")/.." && pwd)"
-CAPIX_CODE_DIR="${CAPIX_CODE_DIR:-$DIR/upstream}"
-
-if [ ! -d "$CAPIX_CODE_DIR" ]; then
-  echo "✗ No $CAPIX_CODE_DIR. Run ./scripts/bootstrap.sh first."
-  exit 1
-fi
-
-cd "$CAPIX_CODE_DIR"
-
-# 0. Rename the upstream package directory.
-if [ -d "packages/opencode" ]; then
-  mv packages/opencode packages/capix-code
-  echo "  ✓ package directory renamed"
-fi
-
-echo "▸ Rebranding in $CAPIX_CODE_DIR"
-
-# 0a. Patch the script package to use CAPIX_CODE_VERSION env var instead of OPENCODE_VERSION
-SCRIPT_SRC="$CAPIX_CODE_DIR/packages/script/src/index.ts"
-if [ -f "$SCRIPT_SRC" ]; then
-  sed -i.bak 's/env\.OPENCODE_VERSION/env.CAPIX_CODE_VERSION/g' "$SCRIPT_SRC"
-  sed -i.bak 's/env\.OPENCODE_BUMP/env.CAPIX_CODE_BUMP/g' "$SCRIPT_SRC"
-  sed -i.bak 's/env\.OPENCODE_RELEASE/env.CAPIX_CODE_RELEASE/g' "$SCRIPT_SRC"
-  sed -i.bak 's/env\.OPENCODE_CHANNEL/env.CAPIX_CODE_CHANNEL/g' "$SCRIPT_SRC"
-  sed -i.bak 's/OPENCODE_CHANNEL/CAPIX_CODE_CHANNEL/g' "$SCRIPT_SRC"
-  sed -i.bak 's/process\.env\["OPENCODE_CHANNEL"\]/process.env["CAPIX_CODE_CHANNEL"]/g' "$SCRIPT_SRC"
-  rm -f "$SCRIPT_SRC.bak"
-  echo "  ✓ script package env vars rebranded"
-fi
-
-# 0b. Patch the build script to define CAPIX_CODE_VERSION instead of OPENCODE_VERSION
-BUILD_SCRIPT="$CAPIX_CODE_DIR/packages/capix-code/script/build.ts"
-if [ -f "$BUILD_SCRIPT" ]; then
-  sed -i.bak 's/OPENCODE_VERSION/CAPIX_CODE_VERSION/g' "$BUILD_SCRIPT"
-  sed -i.bak 's/OPENCODE_CHANNEL/CAPIX_CODE_CHANNEL/g' "$BUILD_SCRIPT"
-  rm -f "$BUILD_SCRIPT.bak"
-  echo "  ✓ build script defines rebranded"
-fi
-
-# 0c. Patch the version.ts to use CAPIX_CODE_VERSION global
-VERSION_SRC="$CAPIX_CODE_DIR/packages/core/src/installation/version.ts"
-if [ -f "$VERSION_SRC" ]; then
-  sed -i.bak 's/OPENCODE_VERSION/CAPIX_CODE_VERSION/g' "$VERSION_SRC"
-  sed -i.bak 's/OPENCODE_CHANNEL/CAPIX_CODE_CHANNEL/g' "$VERSION_SRC"
-  rm -f "$VERSION_SRC.bak"
-  echo "  ✓ version.ts globals rebranded"
-fi
-
-# 0d. Patch the installation index.ts user-agent string
-INSTALL_SRC="$CAPIX_CODE_DIR/packages/capix-code/src/installation/index.ts"
-if [ -f "$INSTALL_SRC" ]; then
-  sed -i.bak 's|opencode/|capix-code/|g' "$INSTALL_SRC"
-  rm -f "$INSTALL_SRC.bak"
-  echo "  ✓ installation user-agent rebranded"
-fi
-
-# 1. Binary name in packages/capix-code/package.json — ONLY the "bin" field.
-PKG="$CAPIX_CODE_DIR/packages/capix-code/package.json"
-if [ -f "$PKG" ]; then
-  # Change only the binary name, not the package name (workspace deps depend on it).
-  sed -i.bak 's|"bin": {"opencode"|"bin": {"capix-code"|g' "$PKG"
-  rm -f "$PKG.bak"
-  echo "  ✓ binary name renamed"
-fi
-
-# 2. Build script — only the output directory/file naming.
-BUILD="$CAPIX_CODE_DIR/packages/capix-code/script/build.ts"
-if [ -f "$BUILD" ]; then
-  sed -i.bak 's|bin/opencode|bin/capix-code|g' "$BUILD"
-  rm -f "$BUILD.bak"
-  echo "  ✓ build.ts: output binary renamed"
-fi
-
-# 3. Env prefixes in environment accesses only. Never rewrite imported symbols.
-echo "▸ Replacing env var prefixes…"
-find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
-  perl -0pi.bak -e 's/(process[.]env|Bun[.]env)[.]OPENCODE_/$1.CAPIX_CODE_/g' "$f"
-  rm -f "$f.bak"
-done
-echo "  ✓ env prefix replaced"
-
-# 4. Config directory paths in source.
-echo "▸ Replacing config directory paths…"
-find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
-  sed -i.bak \
-    -e 's|\.config/opencode|.config/capix-code|g' \
-    -e 's|\.opencode/|.capix-code/|g' \
-    -e "s|opencode/auth|capix-code/auth|g" \
-    "$f"
-  rm -f "$f.bak"
-done
-echo "  ✓ config dirs updated"
-
-# 5. Config filename: opencode.json → capix-code.json (only in the default config path lookup).
-echo "▸ Replacing config filename…"
-find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' \) -type f 2>/dev/null | while IFS= read -r f; do
-  sed -i.bak "s/opencode\.json/capix-code.json/g" "$f"
-  rm -f "$f.bak"
-done
-echo "  ✓ config filename renamed"
-
-# 6. Display name in source — "OpenCode" → "CapixCode" (display strings only, not imports).
-echo "▸ Replacing display names…"
-find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
-  # Only replace in string literals, not import paths. Conservative: replace "OpenCode" in quotes.
-  sed -i.bak \
-    -e 's/"OpenCode"/"CapixCode"/g' \
-    -e "s/'OpenCode'/'CapixCode'/g" \
-    -e 's/`OpenCode`/`CapixCode`/g' \
-    "$f"
-  rm -f "$f.bak"
-done
-echo "  ✓ display names updated"
-
-# 6b. Replace the terminal identity and customer-visible command copy. These
-# files are an explicit reviewed allowlist: internal package names, protocol
-# identifiers and import contracts remain untouched.
-cp "$DIR/assets/tui-logo.ts" "$CAPIX_CODE_DIR/packages/tui/src/logo.ts"
-CLI_UI="$CAPIX_CODE_DIR/packages/capix-code/src/cli/ui.ts"
-perl -0pi.bak -e 's/const wordmark = \[.*?\]\n/const wordmark = [\n  `  ██████╗ █████╗ ██████╗ ██╗██╗  ██╗     ██████╗ ██████╗ ██████╗ ███████╗`,\n  ` ██╔════╝██╔══██╗██╔══██╗██║╚██╗██╔╝    ██╔════╝██╔═══██╗██╔══██╗██╔════╝`,\n  ` ██║     ███████║██████╔╝██║ ╚███╔╝     ██║     ██║   ██║██║  ██║█████╗  `,\n  ` ██║     ██╔══██║██╔═══╝ ██║ ██╔██╗     ██║     ██║   ██║██║  ██║██╔══╝  `,\n  ` ╚██████╗██║  ██║██║     ██║██╔╝ ██╗    ╚██████╗╚██████╔╝██████╔╝███████╗`,\n  `  ╚═════╝╚═╝  ╚═╝╚═╝     ╚═╝╚═╝  ╚═╝     ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝`,\n  `                                CAPIX CODE`,\n]\n/s' "$CLI_UI"
-rm -f "$CLI_UI.bak"
-TUI_PRESENTATION="$CAPIX_CODE_DIR/packages/tui/src/util/presentation.ts"
-perl -0pi.bak -e 's/const logo = \{.*?\}\n/const logo = {\n  left: [" ██████╗  █████╗ ██████╗ ██╗██╗  ██╗", "██╔════╝ ██╔══██╗██╔══██╗██║╚██╗██╔╝", "██║      ███████║██████╔╝██║ ╚███╔╝ ", "██║      ██╔══██║██╔═══╝ ██║ ██╔██╗ ", "╚██████╗ ██║  ██║██║     ██║██╔╝ ██╗", " ╚═════╝ ╚═╝  ╚═╝╚═╝     ╚═╝╚═╝  ╚═╝"],\n  right: [" ██████╗ ██████╗ ██████╗ ███████╗", "██╔════╝██╔═══██╗██╔══██╗██╔════╝", "██║     ██║   ██║██║  ██║█████╗  ", "██║     ██║   ██║██║  ██║██╔══╝  ", "╚██████╗╚██████╔╝██████╔╝███████╗", " ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝"],\n}\n/s; s/opencode -s/capix-code -s/g' "$TUI_PRESENTATION"
-rm -f "$TUI_PRESENTATION.bak"
-PRESENTATION_FILES=(
-  packages/tui/src/app.tsx
-  packages/tui/src/util/presentation.ts
-  packages/tui/src/feature-plugins/sidebar/footer.tsx
-  packages/tui/src/feature-plugins/home/footer.tsx
-  packages/tui/src/feature-plugins/home/tips-view.tsx
-  packages/tui/src/keymap.tsx
-  packages/capix-code/src/cli/ui.ts
-  packages/capix-code/src/index.ts
-  packages/capix-code/src/cli/error.ts
-  packages/capix-code/src/cli/cmd/run.ts
-  packages/capix-code/src/cli/cmd/run/splash.ts
-  packages/capix-code/src/cli/cmd/run/footer.permission.tsx
-  packages/capix-code/src/cli/cmd/run/footer.prompt.tsx
-  packages/capix-code/src/cli/cmd/run/footer.view.tsx
-  packages/capix-code/src/cli/cmd/run/permission.shared.ts
-  packages/capix-code/src/provider/error.ts
-  packages/capix-code/src/cli/cmd/attach.ts
-  packages/capix-code/src/cli/cmd/upgrade.ts
-  packages/capix-code/src/cli/cmd/uninstall.ts
-  packages/capix-code/src/cli/cmd/serve.ts
-  packages/capix-code/src/cli/cmd/web.ts
-  packages/capix-code/src/cli/cmd/pr.ts
-  packages/capix-code/src/cli/cmd/tui.ts
-  packages/capix-code/src/cli/network.ts
-  packages/capix-code/src/plugin/xai.ts
-  packages/capix-code/src/config/tui-migrate.ts
-  packages/capix-code/src/config/tui.ts
-  packages/capix-code/src/config/config.ts
-  packages/capix-code/src/config/paths.ts
-  packages/capix-code/src/config/managed.ts
-  packages/capix-code/src/temporary.ts
-)
-for relative in "${PRESENTATION_FILES[@]}"; do
-  file="$CAPIX_CODE_DIR/$relative"
-  test -f "$file" || { echo "ERROR: customer presentation source missing: $relative"; exit 1; }
-  perl -0pi.bak -e '
-    s/OpenCode/Capix Code/g;
-    s/OC \|/Capix |/g;
-    s/opencode --mini/capix-code --mini/g;
-    s/run opencode/run Capix Code/g;
-    s/opencode models/capix-code models/g;
-    s/opencode auth login/capix-code login/g;
-    s/opencode server/Capix Code server/g;
-    s/start opencode/start Capix Code/g;
-    s/path to start opencode/path to start Capix Code/g;
-    s/upgrade opencode/upgrade Capix Code/g;
-    s/opencode upgrade/Capix Code upgrade/g;
-    s/opencode session/Capix Code session/g;
-    s/Starting opencode/Starting Capix Code/g;
-    s/uninstall opencode/uninstall Capix Code/g;
-    s/running opencode/running Capix Code/g;
-    s/path to start opencode/path to start Capix Code/g;
-    s/Thank you for using opencode/Thank you for using Capix Code/g;
-    s/[.]scriptName\("opencode"\)/.scriptName("capix-code")/g;
-    s/startsWith\("opencode /startsWith("capix-code /g;
-    s/opencode[.]local/capix.local/g;
-    s/OPENCODE_SERVER/CAPIX_CODE_SERVER/g;
-    s/or '\''opencode'\''/or '\''capix'\''/g;
-    s/opencode does not support/Capix Code does not support/g;
-    s/opencode includes free models/Capix Code includes free models/g;
-    s/public opencode\.ai link/public capix.network link/g;
-    s/opencode\.ai link/capix.network link/g;
-    s/opencode\.json/capix-code.json/g;
-    s/~\/\.config\/opencode/~\/.config\/capix-code/g;
-    s/\.opencode\//.capix-code\//g;
-    s/"opencode"/"capix-code"/g;
-    s/opencode run/capix-code run/g;
-    s/opencode serve/Capix Code serve/g;
-    s/opencode --continue/capix-code --continue/g;
-    s/prevent OpenCode from reading/prevent Capix Code from reading/g;
-    s/to OpenCode/to Capix Code/g;
-    s/opencode\//capix-code\//g;
-    s/ai\.opencode\.managed/ai.capix-code.managed/g;
-    s/Support\/opencode/Support\/capix-code/g;
-    s/sst-dev\.opencode/sst-dev.capix/g;
-    s/\.opencode-version/.capix-code-version/g;
-    s/opencode\.ai\/tui\.json/capix.network\/tui.json/g;
-    s/opencode\.ai\/config\.json/capix.network\/config.json/g;
-    s/opencode status/capix-code status/g;
-    s/opencode debug/capix-code debug/g;
-    s/opencode\.mode/capix-code.mode/g;
-  ' "$file"
-  rm -f "$file.bak"
-done
-echo "  ✓ terminal title, splash, logo and customer command copy replaced"
-
-# 6c. Fix split-span: <b>Open</b><b>Code</b> → <b>Capix Code</b>
-for file in \
-  "$CAPIX_CODE_DIR/packages/tui/src/routes/session/sidebar.tsx" \
-  "$CAPIX_CODE_DIR/packages/tui/src/feature-plugins/sidebar/footer.tsx" \
-  "$CAPIX_CODE_DIR/packages/tui/src/feature-plugins/home/footer.tsx" \
-  "$CAPIX_CODE_DIR/packages/tui/src/feature-plugins/home/tips-view.tsx"; do
-  if [ -f "$file" ]; then
-    perl -0pi.bak -e 's/<b>Open<\/b>\s*\n\s*<b>Code<\/b>/<b>Capix Code<\/b>/gs' "$file"
-    perl -0pi.bak -e 's/OpenCode/Capix Code/g' "$file"
-    rm -f "$file.bak"
-  fi
-done
-echo "  ✓ split-span branding fixed"
-
-# 7. Install script references.
-INSTALL="$CAPIX_CODE_DIR/install"
-if [ -f "$INSTALL" ]; then
-  sed -i.bak \
-    -e 's|anomalyco/opencode|CapIX-Protocol/CapIX-Code|g' \
-    -e 's|opencode-ai|capix-code|g' \
-    "$INSTALL"
-  rm -f "$INSTALL.bak"
-  echo "  ✓ install script updated"
-fi
-
-echo "✓ Rebrand complete. Only the binary name, config dirs, and env vars are rebranded."
-echo "  Runtime plugin/provider are staged by scripts/build.sh and verified fail-closed."
-
-"$DIR/scripts/assert-upstream-brand.sh" "$CAPIX_CODE_DIR"

package/scripts/resolve-version.mjs

@@ -1,126 +0,0 @@
-/**
- * Resolve a requested version ("latest", empty, or an explicit tag) to an
- * immutable vMAJOR.MINOR.PATCH tag.
- *
- * "latest" is permitted ONLY by resolving it to a concrete immutable version
- * before any download — never by blindly trusting mutable content. Resolution
- * sources, in priority order:
- *
- *   1. CAPIX_STABLE_VERSION env (deterministic, offline, release-pinned)
- *   2. a materialized manifest's stableVersion (single source of truth)
- *   3. the GitHub releases API /releases/latest tag_name (--allow-network only)
- *
- * If none resolves, the script fails closed (exit 2) so the installer never
- * proceeds with an unbounded/mutable version.
- *
- * Usage:
- *   node scripts/resolve-version.mjs [latest|<tag>] [--manifest manifest/release-manifest.json] [--allow-network]
- *
- * Prints the resolved immutable tag to stdout.
- */
-import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const SEMVER_TAG = /^v\d+\.\d+\.\d+$/;
-
-/**
- * Resolve a version request. Pure (no IO except the optional fetch passed in)
- * so it is unit-testable without a network.
- *
- * @param {string|null} request   "latest", "" or null
- * @param {object} ctx
- * @param {string|undefined} ctx.envStable  CAPIX_STABLE_VERSION value
- * @param {object|undefined} ctx.manifest   parsed manifest with stableVersion
- * @param {(() => Promise<string|null>)|undefined} ctx.fetchLatestTag  network resolver
- * @returns {{tag:string, source:string}}
- */
-export function resolveVersion(request, ctx) {
-  const requested = (request ?? '').trim();
-  // An explicit immutable tag is always accepted as-is.
-  if (requested && requested !== 'latest') {
-    if (!SEMVER_TAG.test(requested)) {
-      throw new Error(`invalid version '${requested}' (expected vMAJOR.MINOR.PATCH)`);
-    }
-    return { tag: requested, source: 'explicit' };
-  }
-  // latest / empty → resolve to an immutable tag.
-  if (ctx.envStable) {
-    if (!SEMVER_TAG.test(ctx.envStable)) {
-      throw new Error(`CAPIX_STABLE_VERSION is not a vMAJOR.MINOR.PATCH tag: '${ctx.envStable}'`);
-    }
-    return { tag: ctx.envStable, source: 'env' };
-  }
-  if (
-    ctx.manifest &&
-    typeof ctx.manifest.stableVersion === 'string' &&
-    SEMVER_TAG.test(ctx.manifest.stableVersion)
-  ) {
-    return { tag: ctx.manifest.stableVersion, source: 'manifest' };
-  }
-  // Network resolver is invoked lazily by the caller (kept out of the pure
-  // path so tests never touch the network).
-  return null; // signals "caller may try network, else fail closed"
-}
-
-/** Read a manifest file and return its parsed object, or null if unreadable. */
-export function loadManifest(path) {
-  if (!path) return null;
-  try {
-    return JSON.parse(readFileSync(path, 'utf8'));
-  } catch {
-    return null;
-  }
-}
-
-/** GitHub releases API resolver. Returns the latest tag_name or null. */
-async function githubLatest(repo) {
-  try {
-    const res = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
-      headers: { Accept: 'application/vnd.github+json', 'User-Agent': 'capix-code-installer' },
-    });
-    if (!res.ok) return null;
-    const body = await res.json();
-    const tag = body?.tag_name;
-    return typeof tag === 'string' && SEMVER_TAG.test(tag) ? tag : null;
-  } catch {
-    return null;
-  }
-}
-
-async function main() {
-  const argv = process.argv.slice(2);
-  const request = argv.find((a) => !a.startsWith('--')) ?? '';
-  const manifestPath = argv[argv.indexOf('--manifest') + 1];
-  const allowNetwork = argv.includes('--allow-network');
-  const repo = process.env.CAPIX_RELEASE_REPO ?? 'CapIX-Protocol/Capix-Code';
-
-  const ctx = {
-    envStable: process.env.CAPIX_STABLE_VERSION?.trim() || undefined,
-    manifest: loadManifest(manifestPath),
-  };
-  const resolved = resolveVersion(request, ctx);
-  if (resolved) {
-    process.stdout.write(resolved.tag);
-    process.exit(0);
-  }
-  if (allowNetwork) {
-    const tag = await githubLatest(repo);
-    if (tag) {
-      process.stdout.write(tag);
-      process.exit(0);
-    }
-  }
-  console.error(
-    `ERROR: cannot resolve '${request || 'latest'}' to an immutable version. ` +
-      `Set CAPIX_STABLE_VERSION (e.g. v1.2.3) or pass --manifest <path> [--allow-network].`
-  );
-  process.exit(2);
-}
-
-if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
-  main().catch((err) => {
-    console.error(err?.message ? `ERROR: ${err.message}` : String(err));
-    process.exit(2);
-  });
-}

package/scripts/validate-manifest.mjs

@@ -1,167 +0,0 @@
-/**
- * Release manifest validator.
- *
- * Guarantees that a production release-manifest.json cannot ship with
- * unmaterialized TEMPLATE placeholders, zero-size artifacts, non-HTTPS URLs,
- * or missing/invalid checksums. A manifest that fails any check is rejected
- * with a concrete, actionable error — it must never be silently published.
- *
- * Usage:
- *   node scripts/validate-manifest.mjs <manifest.json> [--strict]
- *
- * Exit 0 = valid, 1 = invalid (message on stderr).
- */
-import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const SEMVER_TAG = /^v\d+\.\d+\.\d+$/;
-const SEMVER = /^\d+\.\d+\.\d+$/;
-const SHA256 = /^[0-9a-f]{64}$/;
-const SHA1 = /^[0-9a-f]{40}$/;
-const ISO8601 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/;
-const REQUIRED_PLATFORMS = ['darwin-arm64', 'darwin-x64', 'linux-arm64', 'linux-x64', 'win32-x64'];
-
-/** Deep scan: any string field equal to "TEMPLATE" is a release blocker. */
-export function findTemplatePlaceholders(value, path = '$') {
-  const hits = [];
-  if (typeof value === 'string') {
-    if (value === 'TEMPLATE') hits.push(path);
-  } else if (Array.isArray(value)) {
-    for (let i = 0; i < value.length; i++)
-      hits.push(...findTemplatePlaceholders(value[i], `${path}[${i}]`));
-  } else if (value && typeof value === 'object') {
-    for (const [k, v] of Object.entries(value))
-      hits.push(...findTemplatePlaceholders(v, `${path}.${k}`));
-  }
-  return hits;
-}
-
-/**
- * Validate a parsed manifest object. Returns an array of error strings
- * (empty when valid). Pure function — safe to unit-test without IO.
- */
-export function validateManifest(manifest, { strict = false } = {}) {
-  const errors = [];
-
-  if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest)) {
-    return ['manifest must be a JSON object'];
-  }
-
-  // 1. No unmaterialized TEMPLATE placeholders anywhere.
-  const placeholders = findTemplatePlaceholders(manifest);
-  for (const p of placeholders) errors.push(`${p} is an unmaterialized TEMPLATE placeholder`);
-
-  // 2. Top-level identity.
-  if (typeof manifest.id !== 'string' || !manifest.id)
-    errors.push('$.id must be a non-empty string');
-  if (manifest.immutable !== true)
-    errors.push('$.immutable must be true for a publishable manifest');
-  if (typeof manifest.createdAt !== 'string' || !ISO8601.test(manifest.createdAt)) {
-    errors.push('$.createdAt must be an ISO-8601 timestamp');
-  }
-  if (typeof manifest.stableVersion !== 'string' || !SEMVER_TAG.test(manifest.stableVersion)) {
-    errors.push(
-      '$.stableVersion must be an immutable vMAJOR.MINOR.PATCH tag (single source of truth)'
-    );
-  }
-
-  // 3. Component provenance (launcher/opencode/plugin/provider).
-  for (const comp of ['launcher', 'opencode', 'plugin', 'provider']) {
-    const node = manifest[comp];
-    if (!node || typeof node !== 'object') {
-      errors.push(`$.${comp} must be an object`);
-      continue;
-    }
-    if (typeof node.sourceSha !== 'string' || !SHA1.test(node.sourceSha)) {
-      errors.push(`$.${comp}.sourceSha must be a 40-character lowercase hex commit SHA`);
-    }
-    if (typeof node.version !== 'string' || !SEMVER.test(node.version)) {
-      errors.push(`$.${comp}.version must be MAJOR.MINOR.PATCH`);
-    }
-  }
-
-  // 4. Platforms — every required platform present with a real artifact.
-  if (!manifest.platforms || typeof manifest.platforms !== 'object') {
-    errors.push('$.platforms must be an object');
-  } else {
-    for (const plat of REQUIRED_PLATFORMS) {
-      const entry = manifest.platforms[plat];
-      if (!entry || typeof entry !== 'object') {
-        errors.push(`$.platforms.${plat} is missing`);
-        continue;
-      }
-      if (typeof entry.url !== 'string' || !/^https:\/\//.test(entry.url)) {
-        errors.push(`$.platforms.${plat}.url must be an https URL`);
-      }
-      if (typeof entry.sha256 !== 'string' || !SHA256.test(entry.sha256)) {
-        errors.push(`$.platforms.${plat}.sha256 must be a 64-character lowercase hex SHA-256`);
-      }
-      if (
-        typeof entry.sizeBytes !== 'number' ||
-        !Number.isFinite(entry.sizeBytes) ||
-        entry.sizeBytes <= 0
-      ) {
-        errors.push(`$.platforms.${plat}.sizeBytes must be a positive number`);
-      }
-      // signatureUrl may be null for unsigned artifacts, but must not be TEMPLATE.
-      if (
-        entry.signatureUrl !== null &&
-        (typeof entry.signatureUrl !== 'string' || !/^https:\/\//.test(entry.signatureUrl))
-      ) {
-        errors.push(`$.platforms.${plat}.signatureUrl must be an https URL or null`);
-      }
-    }
-    // Reject unknown platforms that snuck in (keeps the manifest honest).
-    for (const plat of Object.keys(manifest.platforms)) {
-      if (!REQUIRED_PLATFORMS.includes(plat)) {
-        errors.push(`$.platforms.${plat} is not a recognized platform`);
-      }
-    }
-  }
-
-  // 5. Supply-chain refs — must be present and materialized (or explicitly null
-  //    with a documented reason, in non-strict mode).
-  for (const ref of ['sbomRef', 'provenanceRef', 'thirdPartyNoticesRef']) {
-    const v = manifest[ref];
-    if (typeof v !== 'string' || !v) errors.push(`$.${ref} must be a non-empty reference`);
-  }
-  if (strict) {
-    if (typeof manifest.signatureRef !== 'string' || !manifest.signatureRef) {
-      errors.push('$.signatureRef must be present in strict mode (signed releases)');
-    }
-  }
-
-  return errors;
-}
-
-function main() {
-  const [file, ...rest] = process.argv.slice(2);
-  if (!file) {
-    console.error('usage: node scripts/validate-manifest.mjs <manifest.json> [--strict]');
-    process.exit(2);
-  }
-  const strict = rest.includes('--strict');
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(file, 'utf8'));
-  } catch (err) {
-    console.error(`cannot read/parse manifest ${file}: ${err.message}`);
-    process.exit(1);
-  }
-  const errors = validateManifest(parsed, { strict });
-  if (errors.length) {
-    for (const e of errors) console.error(`✗ ${e}`);
-    console.error(
-      `manifest ${file} is not publishable (${errors.length} blocker${errors.length === 1 ? '' : 's'})`
-    );
-    process.exit(1);
-  }
-  console.log(`✓ manifest ${file} is publishable`);
-  process.exit(0);
-}
-
-// Run as CLI only when invoked directly, not when imported by tests.
-if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
-  main();
-}

package/scripts/verify-runtime-provider.ts

@@ -1,9 +0,0 @@
-const runtime = await import('@capix/runtime-provider');
-if (typeof runtime.capix !== 'function') {
-  throw new Error('@capix/runtime-provider does not export the capix provider factory');
-}
-const model = runtime.capix('auto');
-if (model.specificationVersion !== 'v2' || model.provider !== 'capix') {
-  throw new Error('@capix/runtime-provider does not implement the pinned LanguageModelV2 contract');
-}
-console.log('@capix/runtime-provider: bundled provider contract verified');

package/scripts/write-release-entry.mjs

@@ -1,38 +0,0 @@
-import { createHash } from 'node:crypto';
-import { readFileSync, statSync, writeFileSync } from 'node:fs';
-import { basename, dirname, join } from 'node:path';
-import { execFileSync } from 'node:child_process';
-
-const [version, platform, arch, archive] = process.argv.slice(2);
-if (!version || !platform || !arch || !archive) process.exit(2);
-
-const shaPattern = /^[0-9a-f]{40}$/i;
-const githubSha = process.env.GITHUB_SHA?.trim();
-let sourceSha;
-if (githubSha) {
-  if (!shaPattern.test(githubSha)) throw new Error('GITHUB_SHA must be a 40-character hexadecimal commit SHA');
-  sourceSha = githubSha.toLowerCase();
-} else {
-  if (process.env.CI) throw new Error('GITHUB_SHA is required when generating release metadata in CI');
-  sourceSha = execFileSync('git', ['rev-parse', 'HEAD'], {
-    cwd: new URL('..', import.meta.url).pathname,
-    encoding: 'utf8',
-  }).trim();
-  if (!shaPattern.test(sourceSha)) throw new Error('git rev-parse returned an invalid source SHA');
-}
-const entry = {
-  schemaVersion: 1,
-  product: 'capix-code',
-  version,
-  platform: `${platform}-${arch}`,
-  artifact: basename(archive),
-  sha256: createHash('sha256').update(readFileSync(archive)).digest('hex'),
-  sizeBytes: statSync(archive).size,
-  sourceSha,
-  signed: false,
-};
-
-writeFileSync(
-  join(dirname(archive), `capix-code-${version}-${platform}-${arch}.release.json`),
-  `${JSON.stringify(entry, null, 2)}\n`
-);