freestyle-sync 0.1.0

package/plugins/auth-env/src/index.ts

@@ -0,0 +1,35 @@
+import { definePlugin } from "../../../src/plugin-api.ts";
+
+export function envAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-env",
+        collectEnvironment({ options }) {
+            if (!options.includeAuth) return {};
+            return collectEnvironment(options.envKeys);
+        },
+    });
+}
+
+function collectEnvironment(extraKeys: string[]): Record<string, string> {
+    const allow = new Set(extraKeys);
+    const env: Record<string, string> = {};
+    const tokenPattern = /(^|_)(TOKEN|SECRET|PASSWORD|PASS|API_KEY|ACCESS_KEY|PRIVATE_KEY|AUTH|CREDENTIALS?)(_|$)/i;
+    const exactNames = new Set([
+        "ANTHROPIC_API_KEY",
+        "CODEX_HOME",
+        "GH_TOKEN",
+        "GITHUB_TOKEN",
+        "GIT_ASKPASS",
+        "NPM_TOKEN",
+        "OPENAI_API_KEY",
+        "FREESTYLE_API_KEY",
+    ]);
+
+    for (const [key, value] of Object.entries(process.env)) {
+        if (!value) continue;
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+        if (allow.has(key) || exactNames.has(key) || tokenPattern.test(key)) env[key] = value;
+    }
+
+    return env;
+}

package/plugins/auth-gcloud/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-gcloud",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-gcloud/src/index.ts

@@ -0,0 +1,23 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function gcloudAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-gcloud",
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            const item: ContextCandidate = { source: path.join(homedir(), ".config", "gcloud"), remoteRoot: "/root/.config/gcloud", label: "Google Cloud auth", sensitive: true, preferenceKey: "context:gcloud", promptLabel: "Google Cloud auth" };
+            return await exists(item.source) ? [item] : [];
+        },
+        async afterContextSync({ vm, changedRemotePaths, utils }) {
+            if (!changedRemotePaths.some((remotePath) => remotePath === "/root/.config/gcloud" || remotePath.startsWith("/root/.config/gcloud/"))) return;
+            await utils.checkedExec(vm, "chown -R root:root /root/.config/gcloud 2>/dev/null || true; chmod 700 /root/.config/gcloud 2>/dev/null || true");
+        },
+    });
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/auth-git/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-git",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-git/src/index.ts

@@ -0,0 +1,43 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function gitAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-git",
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            return existing([
+                candidate(path.join(homedir(), ".gitconfig"), "~/.gitconfig", "git config", "context:git-config"),
+                candidate(path.join(homedir(), ".git-credentials"), "~/.git-credentials", "git credentials", "context:git-credentials"),
+                candidate(path.join(homedir(), ".netrc"), "~/.netrc", "netrc credentials", "context:netrc"),
+                candidate(path.join(homedir(), ".config", "git"), "~/.config/git", "git config directory", "context:git-config-directory"),
+            ]);
+        },
+        async afterContextSync({ vm, changedRemotePaths, utils }) {
+            const files = ["/root/.git-credentials", "/root/.netrc"].filter((file) => changedRemotePaths.includes(file));
+            if (files.length > 0) await utils.checkedExec(vm, files.map((file) => `chmod 600 ${utils.shellQuote(file)} 2>/dev/null || true`).join("; "));
+        },
+    });
+}
+
+function candidate(source: string, remoteRoot: string, label: string, preferenceKey: string): ContextCandidate {
+    return { source, remoteRoot: expandRemoteHome(remoteRoot), label, sensitive: true, preferenceKey, promptLabel: label };
+}
+
+async function existing(candidates: ContextCandidate[]) {
+    const result: ContextCandidate[] = [];
+    for (const item of candidates) if (await exists(item.source)) result.push(item);
+    return result;
+}
+
+function expandRemoteHome(value: string) {
+    if (value === "~") return "/root";
+    if (value.startsWith("~/")) return `/root/${value.slice(2)}`;
+    return value;
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/auth-github-cli/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-github-cli",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-github-cli/src/index.ts

@@ -0,0 +1,33 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function githubCliAuthPlugin() {
+    return singleAuthDirectoryPlugin("@freestyle-sync/auth-github-cli", path.join(homedir(), ".config", "gh"), "~/.config/gh", "GitHub CLI auth", "context:github-cli");
+}
+
+function singleAuthDirectoryPlugin(name: string, source: string, remoteRoot: string, label: string, preferenceKey: string) {
+    return definePlugin({
+        name,
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            const item: ContextCandidate = { source, remoteRoot: expandRemoteHome(remoteRoot), label, sensitive: true, preferenceKey, promptLabel: label };
+            return await exists(source) ? [item] : [];
+        },
+        async afterContextSync({ vm, changedRemotePaths, utils }) {
+            if (!changedRemotePaths.some((remotePath) => remotePath === expandRemoteHome(remoteRoot) || remotePath.startsWith(`${expandRemoteHome(remoteRoot)}/`))) return;
+            await utils.checkedExec(vm, `chown -R root:root ${utils.shellQuote(expandRemoteHome(remoteRoot))} 2>/dev/null || true; chmod 700 ${utils.shellQuote(expandRemoteHome(remoteRoot))} 2>/dev/null || true`);
+        },
+    });
+}
+
+function expandRemoteHome(value: string) {
+    if (value === "~") return "/root";
+    if (value.startsWith("~/")) return `/root/${value.slice(2)}`;
+    return value;
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/auth-npm/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-npm",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-npm/src/index.ts

@@ -0,0 +1,32 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function npmAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-npm",
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            const item = candidate(path.join(homedir(), ".npmrc"), "~/.npmrc", "npm auth", "context:npm-auth");
+            return await exists(item.source) ? [item] : [];
+        },
+        async afterContextSync({ vm, changedRemotePaths, utils }) {
+            if (changedRemotePaths.includes("/root/.npmrc")) await utils.checkedExec(vm, "chmod 600 /root/.npmrc 2>/dev/null || true");
+        },
+    });
+}
+
+function candidate(source: string, remoteRoot: string, label: string, preferenceKey: string): ContextCandidate {
+    return { source, remoteRoot: expandRemoteHome(remoteRoot), label, sensitive: true, preferenceKey, promptLabel: label };
+}
+
+function expandRemoteHome(value: string) {
+    if (value === "~") return "/root";
+    if (value.startsWith("~/")) return `/root/${value.slice(2)}`;
+    return value;
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/auth-ssh/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-ssh",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-ssh/src/index.ts

@@ -0,0 +1,36 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function sshAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-ssh",
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            const item = candidate(path.join(homedir(), ".ssh"), "~/.ssh", "ssh credentials", "context:ssh");
+            return await exists(item.source) ? [item] : [];
+        },
+        isProtectedRemotePath(remotePath) {
+            return remotePath === "/root/.ssh/authorized_keys" || remotePath === "/root/.ssh/authorized_keys2";
+        },
+        async afterContextSync({ vm, changedRemotePaths, utils }) {
+            if (!changedRemotePaths.some((remotePath) => remotePath === "/root/.ssh" || remotePath.startsWith("/root/.ssh/"))) return;
+            await utils.checkedExec(vm, "chown -R root:root /root/.ssh 2>/dev/null || true; chmod 700 /root/.ssh 2>/dev/null || true; find /root/.ssh -type f ! -name authorized_keys ! -name authorized_keys2 -exec chmod 600 {} + 2>/dev/null || true");
+        },
+    });
+}
+
+function candidate(source: string, remoteRoot: string, label: string, preferenceKey: string): ContextCandidate {
+    return { source, remoteRoot: expandRemoteHome(remoteRoot), label, sensitive: true, preferenceKey, promptLabel: label };
+}
+
+function expandRemoteHome(value: string) {
+    if (value === "~") return "/root";
+    if (value.startsWith("~/")) return `/root/${value.slice(2)}`;
+    return value;
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/auth-yarn/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/auth-yarn",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/plugins/auth-yarn/src/index.ts

@@ -0,0 +1,19 @@
+import { stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+import { definePlugin, type ContextCandidate } from "../../../src/plugin-api.ts";
+
+export function yarnAuthPlugin() {
+    return definePlugin({
+        name: "@freestyle-sync/auth-yarn",
+        async discoverContextCandidates({ options }) {
+            if (!options.includeAuth) return [];
+            const item: ContextCandidate = { source: path.join(homedir(), ".yarnrc.yml"), remoteRoot: "/root/.yarnrc.yml", label: "Yarn auth", sensitive: true, preferenceKey: "context:yarn-auth", promptLabel: "Yarn auth" };
+            return await exists(item.source) ? [item] : [];
+        },
+    });
+}
+
+async function exists(filePath: string) {
+    try { await stat(filePath); return true; } catch { return false; }
+}

package/plugins/node-npm/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@freestyle-sync/node-npm",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}