infra-kit 0.1.128 → 0.1.129

package/src/lib/command-echo/__tests__/command-echo.test.ts

@@ -1,127 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest'
-
-import { logger } from 'src/lib/logger'
-
-import { commandEcho } from '../command-echo'
-
-vi.mock('src/lib/logger', () => {
-  return { logger: { info: vi.fn(), warn: vi.fn(), error: vi.fn() } }
-})
-
-const infoMock = vi.mocked(logger.info)
-
-// The single printed argument, or undefined when print() emitted nothing.
-const printedLine = (): string | undefined => {
-  return infoMock.mock.calls[0]?.[0] as string | undefined
-}
-
-beforeEach(() => {
-  commandEcho.reset()
-  infoMock.mockClear()
-})
-
-describe('commandEcho.print', () => {
-  it('emits nothing when the command was not interactive', () => {
-    commandEcho.start('release-create')
-    commandEcho.addOption('--yes', true)
-
-    commandEcho.print()
-
-    expect(infoMock).not.toHaveBeenCalled()
-  })
-
-  it('emits nothing when interactive but no options were recorded', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-
-    commandEcho.print()
-
-    expect(infoMock).not.toHaveBeenCalled()
-  })
-
-  it('renders a boolean true option as a bare flag and omits boolean false', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--yes', true)
-    commandEcho.addOption('--all', false)
-
-    commandEcho.print()
-
-    const line = printedLine()
-
-    expect(line).toContain('--yes')
-    expect(line).not.toContain('--all')
-  })
-
-  it('quotes a string option value', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--release', 'checkout-redesign:regular:Q3 work')
-
-    commandEcho.print()
-
-    expect(printedLine()).toContain('--release "checkout-redesign:regular:Q3 work"')
-  })
-
-  it('joins and quotes an array option value', () => {
-    commandEcho.start('gh-merge-dev')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--versions', ['1.2.5', '1.3.0'])
-
-    commandEcho.print()
-
-    expect(printedLine()).toContain('--versions "1.2.5, 1.3.0"')
-  })
-
-  it('formats the full equivalent command and round-trips the release description', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--release', 'sponsored-banners-scroll-fix:regular:Fix scroll bug in results pages')
-    commandEcho.addOption('--yes', true)
-
-    commandEcho.print()
-
-    expect(printedLine()).toBe(
-      '📟 Equivalent command: \npnpm exec infra-kit release-create --release "sponsored-banners-scroll-fix:regular:Fix scroll bug in results pages" --yes\n',
-    )
-  })
-
-  it('preserves option order and drops false-valued flags from the middle', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--release', 'one')
-    commandEcho.addOption('--all', false)
-    commandEcho.addOption('--yes', true)
-
-    commandEcho.print()
-
-    expect(printedLine()).toBe('📟 Equivalent command: \npnpm exec infra-kit release-create --release "one" --yes\n')
-  })
-})
-
-describe('commandEcho lifecycle', () => {
-  it('start() clears options and interactive state from a prior command', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--release', 'stale')
-
-    commandEcho.start('worktrees-add')
-    commandEcho.addOption('--versions', ['1.0.0'])
-
-    commandEcho.print()
-
-    // start() reset isInteractive to false, so print() stays silent.
-    expect(infoMock).not.toHaveBeenCalled()
-  })
-
-  it('reset() clears all state so a later print() emits nothing', () => {
-    commandEcho.start('release-create')
-    commandEcho.setInteractive()
-    commandEcho.addOption('--yes', true)
-
-    commandEcho.reset()
-    commandEcho.print()
-
-    expect(infoMock).not.toHaveBeenCalled()
-  })
-})

package/src/lib/command-echo/command-echo.ts

@@ -1,78 +0,0 @@
-import { logger } from 'src/lib/logger'
-
-interface CommandOption {
-  flag: string
-  value: string | string[] | boolean
-}
-
-const createCommandEcho = () => {
-  let commandName = ''
-  let options: CommandOption[] = []
-  let isInteractive = false
-
-  return {
-    /**
-     * Initialize command echo for a new command
-     */
-    start(name: string): void {
-      commandName = name
-      options = []
-      isInteractive = false
-    },
-
-    /**
-     * Mark that the command had interactive input (prompts)
-     * Call this once when ANY prompt happens
-     */
-    setInteractive(): void {
-      isInteractive = true
-    },
-
-    /**
-     * Track an option selection
-     * @param flag The CLI flag (e.g., "--versions")
-     * @param value The selected value
-     */
-    addOption(flag: string, value: string | string[] | boolean): void {
-      options.push({ flag, value })
-    },
-
-    /**
-     * Print the equivalent CLI command if there was interactive input
-     */
-    print(): void {
-      if (!isInteractive || options.length === 0) {
-        return
-      }
-
-      const formattedOptions = options
-        .map((opt) => {
-          if (typeof opt.value === 'boolean') {
-            return opt.value ? opt.flag : ''
-          }
-
-          if (Array.isArray(opt.value)) {
-            return `${opt.flag} "${opt.value.join(', ')}"`
-          }
-
-          return `${opt.flag} "${opt.value}"`
-        })
-        .filter(Boolean)
-        .join(' ')
-
-      logger.info(`📟 Equivalent command: \npnpm exec infra-kit ${commandName} ${formattedOptions}\n`)
-    },
-
-    /**
-     * Reset state (useful for testing)
-     */
-    reset(): void {
-      commandName = ''
-      options = []
-      isInteractive = false
-    },
-  }
-}
-
-// Singleton instance (same pattern as logger)
-export const commandEcho = createCommandEcho()

package/src/lib/command-echo/index.ts

@@ -1 +0,0 @@
-export { commandEcho } from './command-echo'

package/src/lib/constants/__tests__/constants.test.ts

@@ -1,182 +0,0 @@
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import { afterEach, beforeEach, describe, expect, it } from 'vitest'
-
-import {
-  INFRA_KIT_SESSION_VAR,
-  atomicWriteFileSync,
-  getCacheRoot,
-  getSessionCacheDir,
-  parseVarNamesFromEnvFile,
-} from '../constants'
-
-const withTmpDir = (fn: (dir: string) => void): void => {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'infra-kit-test-'))
-
-  try {
-    fn(dir)
-  } finally {
-    fs.rmSync(dir, { recursive: true, force: true })
-  }
-}
-
-describe('parseVarNamesFromEnvFile', () => {
-  it('returns empty array when file does not exist', () => {
-    expect(parseVarNamesFromEnvFile('/nonexistent/path/env.sh')).toEqual([])
-  })
-
-  it('extracts var names from a standard env file', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      fs.writeFileSync(file, 'FOO=bar\nBAZ=qux\n')
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['FOO', 'BAZ'])
-    })
-  })
-
-  it('skips `set -a` / `set +a` shell directives', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      fs.writeFileSync(file, 'set -a\nFOO=bar\nset +a\n')
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['FOO'])
-    })
-  })
-
-  it('handles values that contain = characters', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      fs.writeFileSync(file, 'CONNECTION_STRING=host=db;user=admin\nFOO=bar\n')
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['CONNECTION_STRING', 'FOO'])
-    })
-  })
-
-  it('skips blank lines and lines that do not match KEY= prefix', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      fs.writeFileSync(file, '\n# comment\nFOO=1\n\nunset BAR\nBAZ=2\n')
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['FOO', 'BAZ'])
-    })
-  })
-
-  it('accepts numerics and underscores in the name but rejects names starting with digits', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      fs.writeFileSync(file, 'API_KEY_2=a\n2FOO=b\n_INTERNAL=c\n')
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['API_KEY_2', '_INTERNAL'])
-    })
-  })
-
-  it('does not surface KEY=-looking lines embedded inside a multiline single-quoted value', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      // A multiline secret value (e.g. a PEM key) whose body contains a line that
-      // looks like an assignment must NOT yield a spurious var name to unset.
-      fs.writeFileSync(file, "set -a\nPRIVATE_KEY='line1\nNOT_A_VAR=evil\nline3'\nFOO=bar\nset +a\n")
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['PRIVATE_KEY', 'FOO'])
-    })
-  })
-
-  it('handles a single-quoted value containing the escaped-quote idiom', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'env.sh')
-
-      // shellSingleQuote("it's") => 'it'\''s' — quote state must end balanced so
-      // the following assignment is still detected.
-      fs.writeFileSync(file, "GREETING='it'\\''s'\nNEXT=ok\n")
-      expect(parseVarNamesFromEnvFile(file)).toEqual(['GREETING', 'NEXT'])
-    })
-  })
-})
-
-describe('getSessionCacheDir', () => {
-  let originalSession: string | undefined
-  let originalXdg: string | undefined
-
-  beforeEach(() => {
-    originalSession = process.env[INFRA_KIT_SESSION_VAR]
-    originalXdg = process.env.XDG_CACHE_HOME
-  })
-
-  afterEach(() => {
-    if (originalSession === undefined) {
-      delete process.env[INFRA_KIT_SESSION_VAR]
-    } else {
-      process.env[INFRA_KIT_SESSION_VAR] = originalSession
-    }
-
-    if (originalXdg === undefined) {
-      delete process.env.XDG_CACHE_HOME
-    } else {
-      process.env.XDG_CACHE_HOME = originalXdg
-    }
-  })
-
-  it('throws with actionable message when INFRA_KIT_SESSION is unset', () => {
-    delete process.env[INFRA_KIT_SESSION_VAR]
-    expect(() => {
-      return getSessionCacheDir()
-    }).toThrow(/INFRA_KIT_SESSION/)
-  })
-
-  it('uses XDG_CACHE_HOME when set', () => {
-    process.env[INFRA_KIT_SESSION_VAR] = 'abc123'
-    process.env.XDG_CACHE_HOME = '/custom/cache'
-    expect(getSessionCacheDir()).toBe('/custom/cache/infra-kit/abc123')
-  })
-
-  it('falls back to ~/.cache/infra-kit/<session> when XDG_CACHE_HOME is unset', () => {
-    process.env[INFRA_KIT_SESSION_VAR] = 'xyz'
-    delete process.env.XDG_CACHE_HOME
-    expect(getSessionCacheDir()).toBe(path.join(os.homedir(), '.cache', 'infra-kit', 'xyz'))
-  })
-
-  it('getCacheRoot treats empty XDG_CACHE_HOME as unset', () => {
-    process.env.XDG_CACHE_HOME = ''
-    expect(getCacheRoot()).toBe(path.join(os.homedir(), '.cache', 'infra-kit'))
-  })
-})
-
-describe('atomicWriteFileSync', () => {
-  it('writes content with the requested mode', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'secret.sh')
-
-      atomicWriteFileSync(file, 'HELLO=world\n', 0o600)
-      expect(fs.readFileSync(file, 'utf-8')).toBe('HELLO=world\n')
-
-      const mode = fs.statSync(file).mode & 0o777
-
-      expect(mode).toBe(0o600)
-    })
-  })
-
-  it('leaves no temp file behind after a successful write', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'secret.sh')
-
-      atomicWriteFileSync(file, 'X=1\n', 0o600)
-
-      const leftovers = fs.readdirSync(dir).filter((name) => {
-        return name.includes('.tmp.')
-      })
-
-      expect(leftovers).toEqual([])
-    })
-  })
-
-  it('overwrites an existing file', () => {
-    withTmpDir((dir) => {
-      const file = path.join(dir, 'secret.sh')
-
-      fs.writeFileSync(file, 'OLD=1\n', { mode: 0o600 })
-      atomicWriteFileSync(file, 'NEW=2\n', 0o600)
-      expect(fs.readFileSync(file, 'utf-8')).toBe('NEW=2\n')
-    })
-  })
-})

package/src/lib/constants/constants.ts

@@ -1,167 +0,0 @@
-import crypto from 'node:crypto'
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import process from 'node:process'
-
-export const ENV_LOAD_FILE = 'env-load.sh'
-export const ENV_CLEAR_FILE = 'env-clear.sh'
-
-/** Subdir of the cache root holding the project-scoped WARM caches (one dir per
- *  project, keyed by {@link warmCacheKey}). Kept in sync with the zsh block in
- *  init.ts, which reads `$cache_root/projects/$key/env-load.sh`. */
-export const WARM_CACHE_SUBDIR = 'projects'
-
-/**
- * Default warm-cache TTL in seconds (2h). Governs BOTH the node-side eviction
- * sweep and the zsh-side source gate (`_INFRA_KIT_WARM_TTL` in the shell block);
- * the two MUST stay equal, so this constant is the single source of truth and the
- * shell default is emitted from it. Short by design: a warm file older than this
- * is never sourced (bounds a revoked/rotated secret served at prompt-0) and is
- * deleted on the next write. The background refresh lands in ~1-2s regardless.
- */
-export const DEFAULT_WARM_TTL_SECONDS = 2 * 60 * 60
-
-export const INFRA_KIT_SESSION_VAR = 'INFRA_KIT_SESSION'
-export const INFRA_KIT_ENV_CONFIG_VAR = 'INFRA_KIT_ENV_CONFIG'
-export const INFRA_KIT_ENV_PROJECT_VAR = 'INFRA_KIT_ENV_PROJECT'
-/**
- * Absolute project root (git top-level) the loaded env belongs to. Lets the shell
- * startup gate tell a same-project subshell (skip) from a NEW project (load), so a
- * different project's secrets are never silently kept after `cd`/new shell.
- */
-export const INFRA_KIT_ENV_PROJECT_ROOT_VAR = 'INFRA_KIT_ENV_PROJECT_ROOT'
-export const INFRA_KIT_ENV_LOADED_AT_VAR = 'INFRA_KIT_ENV_LOADED_AT'
-/**
- * Marker exported into env-load.sh ONLY when the load was triggered automatically
- * (see lib/env-autoload). Its presence is the sole signal distinguishing an
- * auto-loaded env from a deliberate manual `env-load`, so auto-load never
- * clobbers a manual choice. A manual load unsets it.
- */
-export const INFRA_KIT_ENV_AUTOLOADED_VAR = 'INFRA_KIT_ENV_AUTOLOADED'
-/**
- * Suppression sentinel exported by env-clear. While set in a shell, cli-invocation
- * auto-load stays silent (a deliberate clear must not be immediately re-loaded).
- * Lifted by a manual `env-load` or a new shell.
- */
-export const INFRA_KIT_ENV_CLEARED_VAR = 'INFRA_KIT_ENV_CLEARED'
-
-/**
- * Matches a line of the form `KEY=...` where KEY is an env-var identifier
- * (letter or underscore, then word chars). Capture group 1 is the name. Shared
- * between env-load (validation, var counting) and parseVarNamesFromEnvFile.
- */
-export const ENV_VAR_LINE_PATTERN = /^([A-Z_]\w*)=/i
-
-/**
- * Track whether a physical line leaves us inside an open single-quoted value,
- * mirroring how `shellSingleQuote` emits values (`'…'`, with literal quotes as
- * `'\''`). Outside a quote a backslash escapes the next char; inside a quote a
- * `'` closes it. Lets the parser skip the continuation lines of a multiline value.
- */
-const advanceSingleQuoteState = (line: string, startInQuote: boolean): boolean => {
-  let inQuote = startInQuote
-
-  for (let i = 0; i < line.length; i++) {
-    if (!inQuote && line[i] === '\\') {
-      i++
-      continue
-    }
-
-    if (line[i] === "'") {
-      inQuote = !inQuote
-    }
-  }
-
-  return inQuote
-}
-
-export const parseVarNamesFromEnvFile = (filePath: string): string[] => {
-  if (!fs.existsSync(filePath)) return []
-
-  const content = fs.readFileSync(filePath, 'utf-8')
-  const names: string[] = []
-  let inQuote = false
-
-  for (const line of content.split('\n')) {
-    // Only a line that starts OUTSIDE a quoted value can be a real assignment;
-    // continuation lines of a multiline secret value are skipped.
-    if (!inQuote) {
-      const match = ENV_VAR_LINE_PATTERN.exec(line)
-
-      if (match) {
-        names.push(match[1]!)
-      }
-    }
-
-    inQuote = advanceSingleQuoteState(line, inQuote)
-  }
-
-  return names
-}
-
-/**
- * Root cache dir for infra-kit across all sessions. Resolved from
- * $XDG_CACHE_HOME when set, falling back to ~/.cache/infra-kit. Keep in sync
- * with the shell block emitted by `infra-kit init` (src/commands/init/init.ts).
- */
-export const getCacheRoot = (): string => {
-  const xdg = process.env.XDG_CACHE_HOME
-  const base = xdg && xdg.length > 0 ? xdg : path.join(os.homedir(), '.cache')
-
-  return path.join(base, 'infra-kit')
-}
-
-export const getSessionCacheDir = (): string => {
-  const session = process.env[INFRA_KIT_SESSION_VAR]
-
-  if (!session) {
-    throw new Error(`${INFRA_KIT_SESSION_VAR} is not set. Run \`infra-kit init\` then \`source ~/.zshrc\`.`)
-  }
-
-  return path.join(getCacheRoot(), session)
-}
-
-/**
- * The warm-cache key for a project: the hex SHA-256 of its CANONICAL (realpath'd)
- * directory. This MUST be byte-identical to the zsh block's
- * `printf %s "$canon" | shasum -a 256 | cut -c1-64` — same input string (no
- * trailing newline), same digest, full 64-hex output — or a warm file written by
- * node is never found by the shell. The shell passes the already-canonicalized
- * dir via `--project-dir`, so node hashes that VERBATIM (it does not re-resolve).
- */
-export const warmCacheKey = (canonicalProjectDir: string): string => {
-  return crypto.createHash('sha256').update(canonicalProjectDir, 'utf8').digest('hex')
-}
-
-/** Root holding all project-scoped warm caches: `$cacheRoot/projects`. */
-export const getWarmCacheRoot = (): string => {
-  return path.join(getCacheRoot(), WARM_CACHE_SUBDIR)
-}
-
-/** This project's warm-cache dir: `$cacheRoot/projects/<warmCacheKey>`. */
-export const getProjectWarmCacheDir = (canonicalProjectDir: string): string => {
-  return path.join(getWarmCacheRoot(), warmCacheKey(canonicalProjectDir))
-}
-
-/**
- * Write content atomically: write to a pid-suffixed temp file in the same
- * directory, then rename. fs.renameSync is atomic on a single filesystem, so
- * concurrent writers can't produce a half-written secret file.
- */
-export const atomicWriteFileSync = (filePath: string, content: string, mode: number): void => {
-  const tmpPath = `${filePath}.tmp.${process.pid}`
-
-  fs.writeFileSync(tmpPath, content, { mode })
-
-  try {
-    fs.renameSync(tmpPath, filePath)
-  } catch (error) {
-    fs.rmSync(tmpPath, { force: true })
-    throw error
-  }
-}
-
-export const WORKTREES_DIR_SUFFIX = '-worktrees'
-// eslint-disable-next-line sonarjs/publicly-writable-directories
-export const LOG_FILE_PATH = '/tmp/mcp-infra-kit.log'

package/src/lib/constants/index.ts

@@ -1,22 +0,0 @@
-export {
-  atomicWriteFileSync,
-  DEFAULT_WARM_TTL_SECONDS,
-  ENV_CLEAR_FILE,
-  ENV_LOAD_FILE,
-  ENV_VAR_LINE_PATTERN,
-  getCacheRoot,
-  getProjectWarmCacheDir,
-  getSessionCacheDir,
-  getWarmCacheRoot,
-  INFRA_KIT_ENV_AUTOLOADED_VAR,
-  INFRA_KIT_ENV_CLEARED_VAR,
-  INFRA_KIT_ENV_CONFIG_VAR,
-  INFRA_KIT_ENV_LOADED_AT_VAR,
-  INFRA_KIT_ENV_PROJECT_ROOT_VAR,
-  INFRA_KIT_ENV_PROJECT_VAR,
-  INFRA_KIT_SESSION_VAR,
-  LOG_FILE_PATH,
-  parseVarNamesFromEnvFile,
-  warmCacheKey,
-  WORKTREES_DIR_SUFFIX,
-} from './constants'