dwellentix-installer 0.1.0

package/README.md

@@ -0,0 +1,76 @@
+# @dwellentix/installer
+
+Script executor and maintainer for Dwellentix private install workflows.
+
+It is not a package manager. It keeps package-server auth out of npm's remote fetch path, then lets npm install from a local tarball:
+
+1. Reads `.env`.
+2. Reads `dwellentix.json`.
+3. Downloads protected `.tgz` files with configured auth.
+4. Executes `npm install --no-save <downloaded.tgz>`.
+
+## Scope
+
+This repo owns the install workflow script:
+
+- config parsing
+- `.env` loading
+- private tarball download
+- auth header construction
+- optional checksum validation
+- execution of npm with local tarballs
+
+It does not manually copy files into `node_modules`, resolve dependency graphs, or replace npm.
+
+## Config
+
+Create `dwellentix.json` in the consuming project:
+
+```json
+{
+  "cacheDir": ".dwellentix-cache",
+  "npmArgs": ["install", "--no-save"],
+  "packages": [
+    {
+      "name": "@dwellentix/lib",
+      "version": "2.1.1",
+      "url": "https://dwellentix-lib-artifactory.onrender.com/packages/dwellentix-lib-2.1.1.tgz",
+      "tokenEnv": "DWELLENTIX_LIB_TOKEN"
+    }
+  ]
+}
+```
+
+The default auth mode is:
+
+```txt
+Authorization: Bearer <tokenEnv value>
+```
+
+## Usage
+
+From a consuming project:
+
+```powershell
+node ..\dwellentix-installer\bin\dwellentix-install.js install
+```
+
+Or add a package script:
+
+```json
+{
+  "scripts": {
+    "install:private": "node ../dwellentix-installer/bin/dwellentix-install.js install"
+  }
+}
+```
+
+Then run:
+
+```powershell
+npm.cmd run install:private
+```
+
+## Notes
+
+Do not manually copy files into `node_modules`. This executor only handles the authenticated download and command orchestration; npm still handles package extraction and linking from the local tarball.

package/bin/dwellentix-install.js

@@ -0,0 +1,208 @@
+#!/usr/bin/env node
+import { createHash } from 'node:crypto'
+import { createWriteStream, existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs'
+import { request } from 'node:http'
+import { request as requestHttps } from 'node:https'
+import { basename, resolve } from 'node:path'
+import { spawnSync } from 'node:child_process'
+
+const command = process.argv[2]
+const flags = parseFlags(process.argv.slice(3))
+const cwd = process.cwd()
+const configPath = resolve(cwd, flags.config || 'dwellentix.json')
+const envPath = resolve(cwd, flags.env || '.env')
+
+if (command !== 'install') {
+  console.error('Usage: dwellentix-install install [--config dwellentix.json] [--env .env]')
+  process.exit(1)
+}
+
+loadEnv(envPath)
+
+const config = readJson(configPath)
+const packages = Array.isArray(config.packages) ? config.packages : []
+
+if (packages.length === 0) {
+  console.error(`No packages configured in ${configPath}`)
+  process.exit(1)
+}
+
+const cacheDir = resolve(cwd, config.cacheDir || '.dwellentix-cache')
+mkdirSync(cacheDir, { recursive: true })
+
+try {
+  const downloaded = []
+
+  for (const pkg of packages) {
+    downloaded.push(await downloadPackage(pkg, cacheDir))
+  }
+
+  installTarballs(downloaded, config)
+} catch (error) {
+  console.error(`[dwellentix-install] ${(error && error.message) || error}`)
+  process.exit(1)
+}
+
+function parseFlags(args) {
+  const result = {}
+
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index]
+    if (!arg.startsWith('--')) continue
+
+    const [rawKey, inlineValue] = arg.slice(2).split('=', 2)
+    result[rawKey] = inlineValue ?? args[index + 1]
+    if (inlineValue === undefined) index += 1
+  }
+
+  return result
+}
+
+function readJson(filePath) {
+  try {
+    return JSON.parse(readFileSync(filePath, 'utf8'))
+  } catch (error) {
+    console.error(`Unable to read ${filePath}: ${(error && error.message) || error}`)
+    process.exit(1)
+  }
+}
+
+function loadEnv(filePath) {
+  if (!existsSync(filePath)) return
+
+  const lines = readFileSync(filePath, 'utf8').split(/\r?\n/)
+
+  for (const line of lines) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex === -1) continue
+
+    const key = trimmed.slice(0, separatorIndex).trim()
+    const value = unquote(trimmed.slice(separatorIndex + 1))
+
+    if (key && process.env[key] === undefined) {
+      process.env[key] = value
+    }
+  }
+}
+
+function unquote(value) {
+  const trimmed = value.trim()
+  const quote = trimmed[0]
+  return (quote === '"' || quote === "'") && trimmed.endsWith(quote)
+    ? trimmed.slice(1, -1)
+    : trimmed
+}
+
+async function downloadPackage(pkg, cacheDir) {
+  if (!pkg || typeof pkg !== 'object') {
+    throw new Error('Package entries must be objects')
+  }
+
+  if (!pkg.name || !pkg.url) {
+    throw new Error('Package entries require name and url')
+  }
+
+  const url = new URL(pkg.url)
+  const fileName = pkg.fileName || basename(url.pathname)
+  const destination = resolve(cacheDir, fileName)
+  const headers = buildHeaders(pkg)
+
+  console.log(`[dwellentix-install] Downloading ${pkg.name}@${pkg.version || fileName}`)
+  await download(url, destination, headers)
+
+  if (pkg.sha512) {
+    verifySha512(destination, pkg.sha512, pkg.name)
+  }
+
+  return destination
+}
+
+function buildHeaders(pkg) {
+  const headers = { ...(pkg.headers || {}) }
+  const token = pkg.tokenEnv ? process.env[pkg.tokenEnv] : undefined
+
+  if (pkg.auth === false) return headers
+
+  if (pkg.auth?.type === 'basic') {
+    const username = valueFromEnvOrLiteral(pkg.auth.usernameEnv, pkg.auth.username)
+    const password = valueFromEnvOrLiteral(pkg.auth.passwordEnv, pkg.auth.password)
+    if (!username || !password) throw new Error(`Missing basic auth credentials for ${pkg.name}`)
+    headers.authorization = `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`
+    return headers
+  }
+
+  if (pkg.auth?.type === 'header') {
+    const value = valueFromEnvOrLiteral(pkg.auth.valueEnv, pkg.auth.value)
+    if (!pkg.auth.name || !value) throw new Error(`Missing header auth config for ${pkg.name}`)
+    headers[pkg.auth.name] = value
+    return headers
+  }
+
+  if (!token) throw new Error(`Missing ${pkg.tokenEnv || 'tokenEnv'} for ${pkg.name}`)
+  headers.authorization = `Bearer ${token}`
+  return headers
+}
+
+function valueFromEnvOrLiteral(envName, literal) {
+  return envName ? process.env[envName] : literal
+}
+
+function download(url, destination, headers) {
+  return new Promise((resolveDownload, rejectDownload) => {
+    const client = url.protocol === 'https:' ? requestHttps : request
+    const req = client(url, { headers }, (res) => {
+      if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+        const redirectedUrl = new URL(res.headers.location, url)
+        res.resume()
+        download(redirectedUrl, destination, headers).then(resolveDownload, rejectDownload)
+        return
+      }
+
+      if (res.statusCode !== 200) {
+        let body = ''
+        res.setEncoding('utf8')
+        res.on('data', (chunk) => { body += chunk })
+        res.on('end', () => rejectDownload(new Error(`Download failed with HTTP ${res.statusCode}: ${body}`)))
+        return
+      }
+
+      const file = createWriteStream(destination)
+      res.pipe(file)
+      file.on('finish', () => file.close(resolveDownload))
+      file.on('error', (error) => {
+        rmSync(destination, { force: true })
+        rejectDownload(error)
+      })
+    })
+
+    req.on('error', rejectDownload)
+    req.end()
+  })
+}
+
+function verifySha512(filePath, expected, packageName) {
+  const hash = createHash('sha512').update(readFileSync(filePath)).digest('base64')
+  const normalizedExpected = expected.startsWith('sha512-') ? expected.slice('sha512-'.length) : expected
+
+  if (hash !== normalizedExpected) {
+    throw new Error(`sha512 mismatch for ${packageName}`)
+  }
+}
+
+function installTarballs(tarballs, config) {
+  const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm'
+  const installArgs = Array.isArray(config.npmArgs) ? config.npmArgs : ['install', '--no-save']
+  const args = [...installArgs, ...tarballs]
+
+  console.log(`[dwellentix-install] Running ${npmCommand} ${args.join(' ')}`)
+  const result = spawnSync(npmCommand, args, {
+    cwd,
+    env: process.env,
+    stdio: 'inherit',
+  })
+
+  process.exit(result.status ?? 1)
+}

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "dwellentix-installer",
+  "version": "0.1.0",
+  "description": "Script executor for Dwellentix private package install workflows.",
+  "type": "module",
+  "bin": {
+    "dwellentix-install": "./bin/dwellentix-install.js"
+  },
+  "scripts": {
+    "install:private": "node bin/dwellentix-install.js install",
+    "update:private": "node bin/dwellentix-install.js update"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "license": "UNLICENSED"
+}