dsh-git-badge 0.19.0 → 0.20.1

package/seam/patch.js

@@ -1,181 +0,0 @@
-/**
- * The seam-patch engine — the ONE copy of the mechanics both patch entry
- * points share: seam/apply.js (the shipped CLI) and seam/postinstall.js (the
- * install hook). Locating the install, inspecting its state, and writing the
- * patch each used to exist twice, once per entry point, with the guardrails
- * duplicated between them; now the entry points only decide what to SAY and
- * which exits to take. This module returns facts and never prints.
- *
- * The patch itself is defined once in anchors.js; see its header for the
- * anchor-not-hash design and the safety rails (own-artifact detection, backup
- * of the bytes as found, downgrade-guarded revert).
- */
-import { execSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { appliedSignature, applyPatch, firstFailure, isCurrentRev, isOurs, seamPresent } from "./anchors.js";
-import { dataDir, writeRestartMarker } from "./store.js";
-
-const HERE = dirname(fileURLToPath(import.meta.url));
-
-// sha256 of the upstream build the anchors were last verified against. ADVISORY:
-// status prints it for orientation; apply does NOT require it.
-export const KNOWN_GOOD_HASH = "e784543780fb8ac7c38c853afd26b9b1713c6907eec2b07eff37461e07bd3be9";
-
-/** Locate the installed DSH package root; null when it cannot be found. */
-export function dshRoot() {
-	if (process.env.DSH_INSTALL) return process.env.DSH_INSTALL;
-	try {
-		return join(execSync("npm root -g", { encoding: "utf8" }).trim(), "@deepseek-ai", "dsh");
-	} catch {
-		return null;
-	}
-}
-
-/**
- * The files one patch acts on, resolved against `root` (default: the located
- * DSH install). Null when there is no root — the entry points print their own
- * "cannot locate" advice. Backup paths resolve per call, so SEAM_DATA_DIR (and
- * DSH_INSTALL) are honoured whenever the process environment says so.
- */
-export function installPaths(root = dshRoot()) {
-	if (!root) return null;
-	const pkg = join(root, "node_modules", "@deepseek-ai", "dsh-client-ui-workspace");
-	const store = dataDir();
-	return {
-		root,
-		client: join(pkg, "lib", "client.js"),
-		index: join(pkg, "lib", "index.js"),
-		stub: join(HERE, "stub-index.js"),
-		backupClient: join(store, "backup-client.js"),
-		backupIndex: join(store, "backup-index.js")
-	};
-}
-
-export const sha256 = (text) => createHash("sha256").update(text, "utf8").digest("hex");
-
-const readText = (path) => readFileSync(path, "utf8");
-
-/**
- * Inspect the installed client.js. Returns the key:value report the CLI's
- * `status` prints, with `state` one of: missing | unreadable | ours-current |
- * ours-stale | ours-corrupt | upstream-landed | patchable | drift.
- */
-export function inspect(paths = installPaths()) {
-	const report = {};
-	let text;
-	try {
-		text = readText(paths.client);
-	} catch (error) {
-		if (error.code === "ENOENT") {
-			report.state = "missing";
-			return report;
-		}
-		report.state = "unreadable";
-		report.error = String(error.message ?? error);
-		return report;
-	}
-	report.hash = sha256(text);
-	report.known_good_match = report.hash === KNOWN_GOOD_HASH ? "yes" : "no";
-	report.backup = existsSync(paths.backupClient) ? "yes" : "no";
-	report.marker = isOurs(text) ? "yes" : "no";
-	report.rev_current = isCurrentRev(text) ? "yes" : "no";
-	report.seam_strings = seamPresent(text) ? "yes" : "no";
-
-	const fail = firstFailure(text);
-	if (fail === null) report.anchors = "all-resolve";
-	else {
-		report.anchors = "drift";
-		report.anchor_fail = `${fail.name}:${fail.count}`;
-	}
-
-	if (isOurs(text)) {
-		// A PATCHED file no longer contains the `old` anchor forms — that is the
-		// point — so it is verified by its applied signature instead.
-		report.applied_signature = appliedSignature(text) ? "yes" : "no";
-		if (!isCurrentRev(text)) report.state = "ours-stale";
-		else if (appliedSignature(text)) report.state = "ours-current";
-		else report.state = "ours-corrupt";
-	} else if (seamPresent(text)) report.state = "upstream-landed";
-	else if (fail === null) report.state = "patchable";
-	else report.state = "drift";
-	return report;
-}
-
-/**
- * The backup's own patchability — the upgrade path validates it BEFORE
- * restoring, so re-patching can never overwrite the installed build with an
- * unpatchable older one. Returns "ours" | "upstream-landed" | "patchable" | "drift".
- */
-export function backupState(paths) {
-	const text = readText(paths.backupClient);
-	return isOurs(text)
-		? "ours"
-		: seamPresent(text)
-			? "upstream-landed"
-			: firstFailure(text) === null
-				? "patchable"
-				: "drift";
-}
-
-/**
- * What `revert` WOULD do, without doing it — the ONE decision the `status`
- * report and the revert branch both read, so they cannot drift apart. They did:
- * `revert: would REFUSE` was documented in SEAM.md and never implemented, which
- * is the same shape of bug as the hole this closes.
- *
- * A legitimate backup is the bytes as found before patching, so the CURRENT
- * anchors must still resolve against it (`backupState` is "patchable"). A store
- * whose backup predates a DSH update satisfies neither condition: it holds an
- * OLDER upstream, so restoring it would downgrade the package AND leave a build
- * this patch cannot re-apply.
- *
- * That store is easy to acquire by accident, because `apply` patches whichever
- * store it is pointed at: the shipped patcher defaults to
- * `$DSH_HOME/git-badge-seam` while this repo's wrapper keeps its own under
- * `seam/`. Apply through one and the other's backup stays behind.
- *
- * @returns {{ action: "restore" | "noop" | "refuse", reason: string }}
- */
-export function revertPlan(paths) {
-	if (!existsSync(paths.backupClient))
-		return { action: "refuse", reason: "no backup in this store, so the original bytes are unknown" };
-	const r = inspect(paths);
-	if (r.hash === sha256(readText(paths.backupClient)))
-		return { action: "noop", reason: "installed client.js already matches the backup" };
-	if (r.state !== "ours-current" && r.state !== "ours-stale" && r.state !== "ours-corrupt")
-		return {
-			action: "refuse",
-			reason: `the installed client.js is not this repo's artifact (state: ${r.state})`
-		};
-	const bstate = backupState(paths);
-	if (bstate !== "patchable")
-		return {
-			action: "refuse",
-			reason: `the backup is '${bstate}' — a different upstream generation, not a build this patch targets`
-		};
-	return { action: "restore", reason: "the backup is a build this patch targets" };
-}
-
-/**
- * Backup the bytes AS FOUND, patch client.js in place, install the no-op host
- * half, and record the restart marker (`reason` names the actor: apply |
- * postinstall | revert). Callers gate on inspect() first — this writes
- * unconditionally.
- */
-export function doPatch(paths, reason = "apply") {
-	mkdirSync(dataDir(), { recursive: true });
-	copyFileSync(paths.client, paths.backupClient);
-	copyFileSync(paths.index, paths.backupIndex);
-	writeFileSync(paths.client, applyPatch(readText(paths.client)));
-	copyFileSync(paths.stub, paths.index);
-	writeRestartMarker(reason);
-}
-
-/** Restore the backup over the installed files. The caller has already gated. */
-export function doRestore(paths) {
-	writeFileSync(paths.client, readText(paths.backupClient));
-	copyFileSync(paths.backupIndex, paths.index);
-}

package/seam/postinstall.js

@@ -1,82 +0,0 @@
-#!/usr/bin/env node
-/**
- * postinstall hook — best-effort seam apply at plugin-install time.
- *
- * WHY THIS EXISTS: a market install activates the input chip immediately, but
- * the sidebar session-row badges additionally need the seam patch on the DSH
- * package itself, and nothing in the install flow told the user so. When pnpm
- * allows this script (the user approves it under `allowBuilds` — DSH's plugin
- * installer prints exactly that instruction when pnpm blocks it), the seam is
- * applied right here; otherwise the plugin's boot log and the chip tooltip name
- * the same one manual command.
- *
- * The mechanics live once in patch.js, shared with the apply CLI — the state
- * gate below reads the same inspect() report the CLI acts on, so the hook and
- * the tool cannot disagree about what a file's state is. This file only decides
- * what to print for each state at install time.
- *
- * GUARDRAILS — this script may never break an install:
- *   - it runs ONLY when the installed DSH client.js is pristine upstream AND
- *     every anchor resolves exactly once (`patchable`); any other state —
- *     already patched, drifted, upstream-landed, DSH not found — just prints
- *   - it never throws: every failure path prints the manual command and exits 0
- *   - it cannot restart dsh web; the printed message says to
- *
- * The restart is deliberately manual: the running dsh web process rebuilds its
- * client bundle at boot, and an install script restarting the host that is
- * installing it is not safe to automate.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { firstFailure } from "./anchors.js";
-import { doPatch, installPaths, inspect } from "./patch.js";
-import { installSkill } from "./skill.js";
-
-const HINT = "Sidebar session-row badges need one manual step: `npx dsh-git-badge apply`, then restart dsh web.";
-
-function main() {
-	// The skill does not depend on the DSH install — install it before any
-	// client-shaped early return, so a market install always gets /gh.
-	console.log(`[dsh-git-badge] gh skill: ${installSkill()} — /gh in the input's commands menu.`);
-	const paths = installPaths();
-	if (paths === null || !existsSync(paths.client)) {
-		console.log(`[dsh-git-badge] DSH install not found; skipping seam setup. ${HINT}`);
-		return;
-	}
-	const state = inspect(paths).state;
-	switch (state) {
-		// Already ours (any rev): nothing to do here; apply.js upgrade rules govern.
-		case "ours-current":
-		case "ours-stale":
-		case "ours-corrupt":
-			console.log("[dsh-git-badge] seam already applied — sidebar session-row badges active after restart.");
-			return;
-		// Upstream landed the seam: the patch is retired.
-		case "upstream-landed":
-			console.log("[dsh-git-badge] DSH declares the seam itself — no patch needed.");
-			return;
-		// Pristine, but the anchors no longer resolve: a DSH update moved anchored
-		// code. Never patch half of anything — print, and let a patched anchors.js
-		// do it.
-		case "drift": {
-			const fail = firstFailure(readFileSync(paths.client, "utf8"));
-			console.log(`[dsh-git-badge] DSH build drifted from the patch anchors (${fail?.name}); skipping. ${HINT}`);
-			return;
-		}
-		case "patchable":
-			// The one state we act on: pristine upstream, anchors resolve.
-			doPatch(paths, "postinstall");
-			console.log("[dsh-git-badge] seam applied — RESTART dsh web to get sidebar session-row badges.");
-			return;
-		default:
-			// missing / unreadable / ours-corrupt: nothing this hook can do safely.
-			console.log(`[dsh-git-badge] DSH install state '${state}'; skipping seam setup. ${HINT}`);
-	}
-}
-
-try {
-	main();
-} catch (error) {
-	// An install hook must never fail the install over the seam.
-	console.log(`[dsh-git-badge] seam setup skipped (${String(error && error.message ? error.message : error)}). ${HINT}`);
-}
-process.exit(0);

package/seam/stub-index.js

@@ -1,11 +0,0 @@
-//#region lib/types/index.js
-/**
-* Workspace picker plugin, node half. Pure UI plugin: the empty apply exists
-* so the plugin appears in the host cordis.yml / Loader (load and lifecycle
-* follow the host; the browser half ships via exports["./client"], discovered
-* through the package.json dsh.client declaration).
-*/
-/** Host plugin body — no host-side behavior for the workspace picker plugin. */
-function apply() {}
-//#endregion
-export { apply };