javer-cli 1.0.0

package/lib/zip.js

@@ -0,0 +1,174 @@
+/* JAVER-SIGNATURE-START
+     JAV
+    E  RJ
+   A o VE
+  RJA  VERJ
+  A   V  ERJA
+      V  ER JA
+      V  ER JA
+      VE RJA V
+      ER   JAVE
+       RJ   AVE
+       RJAVERJAV
+        E     RJ
+       AVERJ   AV
+javer.pro — built in-house, not outsourced. signed: lemons
+JAVER-SIGNATURE-END */
+
+// A minimal ZIP writer, so `javer deploy` can send the current folder.
+//
+// Node ships zlib but no archive format, and this CLI has no dependencies and
+// is not getting any — a hosting tool people install globally should not drag a
+// tree of packages onto their machine. Shelling out to `zip` was the other
+// option and it is not installed by default on most systems.
+//
+// So: deflate each file with zlib (ZIP method 8 is raw deflate, which
+// deflateRawSync produces directly) and write the three structures the format
+// needs — a local header per file, a central directory, and an end record.
+const fs = require('fs');
+const path = require('path');
+const zlib = require('zlib');
+
+let TABLE = null;
+const crcTable = () => {
+  if (TABLE) return TABLE;
+  TABLE = new Int32Array(256);
+  for (let n = 0; n < 256; n++) {
+    let c = n;
+    for (let k = 0; k < 8; k++) c = (c & 1) ? (0xEDB88320 ^ (c >>> 1)) : (c >>> 1);
+    TABLE[n] = c;
+  }
+  return TABLE;
+};
+
+const crc32 = (buf) => {
+  const t = crcTable();
+  let c = -1;
+  for (let i = 0; i < buf.length; i++) c = t[(c ^ buf[i]) & 0xFF] ^ (c >>> 8);
+  return (c ^ -1) >>> 0;
+};
+
+// Anything here is either not the customer's source, or actively harmful to
+// upload. node_modules especially: the server runs npm install itself, and
+// including it would blow the upload limit on even a small project.
+const SKIP_DIRS = new Set([
+  'node_modules', '.git', '.svn', '.hg', 'dist', 'build', '.next', '.nuxt',
+  '.cache', 'coverage', '.venv', 'venv', '__pycache__', '.idea', '.vscode',
+  'vendor', 'target', '.terraform'
+]);
+// .env is deliberate: environment variables belong in the panel, not baked
+// into a deployment. Sending one would put live secrets in an upload and then
+// leave them sitting in the app directory on disk.
+const SKIP_FILES = new Set(['.DS_Store', 'Thumbs.db', '.env']);
+const SKIP_EXT = new Set(['.log', '.zip', '.tar', '.gz', '.tgz', '.sqlite', '.db']);
+
+// Walk a directory into a flat list of {name, abs} with POSIX-style names,
+// which is what the ZIP format wants regardless of the host platform.
+const collect = (root) => {
+  const out = [];
+  const walk = (dir, prefix) => {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      const name = entry.name;
+      if (entry.isDirectory()) {
+        if (SKIP_DIRS.has(name) || name.startsWith('.git')) continue;
+        walk(path.join(dir, name), prefix ? `${prefix}/${name}` : name);
+      } else if (entry.isFile()) {
+        if (SKIP_FILES.has(name)) continue;
+        if (name.startsWith('.env.')) continue;
+        if (SKIP_EXT.has(path.extname(name).toLowerCase())) continue;
+        out.push({ name: prefix ? `${prefix}/${name}` : name, abs: path.join(dir, name) });
+      }
+      // Symlinks are skipped on purpose: following one can walk out of the
+      // project entirely, and storing it would be meaningless once extracted.
+    }
+  };
+  walk(root, '');
+  return out.sort((a, b) => a.name.localeCompare(b.name));
+};
+
+// DOS time/date. The epoch is 1980 and there is no timezone; a file older than
+// that clamps rather than writing a negative year the reader would reject.
+const dosStamp = (mtime) => {
+  const d = mtime instanceof Date ? mtime : new Date(mtime);
+  const year = Math.max(1980, d.getFullYear());
+  return {
+    time: ((d.getHours() & 31) << 11) | ((d.getMinutes() & 63) << 5) | ((Math.floor(d.getSeconds() / 2)) & 31),
+    date: (((year - 1980) & 127) << 9) | (((d.getMonth() + 1) & 15) << 5) | (d.getDate() & 31)
+  };
+};
+
+const zipDir = (root) => {
+  const files = collect(root);
+  if (!files.length) throw new Error('nothing to deploy — this folder has no files the platform would accept');
+
+  const locals = [];
+  const central = [];
+  let offset = 0;
+  let rawTotal = 0;
+
+  for (const f of files) {
+    const stat = fs.statSync(f.abs);
+    const data = fs.readFileSync(f.abs);
+    rawTotal += data.length;
+    const comp = zlib.deflateRawSync(data, { level: 9 });
+    const crc = crc32(data);
+    const nameBuf = Buffer.from(f.name, 'utf8');
+    const { time, date } = dosStamp(stat.mtime);
+
+    const lh = Buffer.alloc(30);
+    lh.writeUInt32LE(0x04034b50, 0);
+    lh.writeUInt16LE(20, 4);            // version needed
+    lh.writeUInt16LE(0, 6);             // flags
+    lh.writeUInt16LE(8, 8);             // method: deflate
+    lh.writeUInt16LE(time, 10);
+    lh.writeUInt16LE(date, 12);
+    lh.writeUInt32LE(crc, 14);
+    lh.writeUInt32LE(comp.length, 18);
+    lh.writeUInt32LE(data.length, 22);
+    lh.writeUInt16LE(nameBuf.length, 26);
+    lh.writeUInt16LE(0, 28);            // extra field length
+    locals.push(lh, nameBuf, comp);
+
+    const ch = Buffer.alloc(46);
+    ch.writeUInt32LE(0x02014b50, 0);
+    ch.writeUInt16LE(20, 4);            // version made by
+    ch.writeUInt16LE(20, 6);            // version needed
+    ch.writeUInt16LE(0, 8);
+    ch.writeUInt16LE(8, 10);
+    ch.writeUInt16LE(time, 12);
+    ch.writeUInt16LE(date, 14);
+    ch.writeUInt32LE(crc, 16);
+    ch.writeUInt32LE(comp.length, 20);
+    ch.writeUInt32LE(data.length, 24);
+    ch.writeUInt16LE(nameBuf.length, 28);
+    ch.writeUInt16LE(0, 30);            // extra
+    ch.writeUInt16LE(0, 32);            // comment
+    ch.writeUInt16LE(0, 34);            // disk number
+    ch.writeUInt16LE(0, 36);            // internal attrs
+    ch.writeUInt32LE(0, 38);            // external attrs
+    ch.writeUInt32LE(offset, 42);       // offset of local header
+    central.push(ch, nameBuf);
+
+    offset += lh.length + nameBuf.length + comp.length;
+  }
+
+  const centralBuf = Buffer.concat(central);
+  const eocd = Buffer.alloc(22);
+  eocd.writeUInt32LE(0x06054b50, 0);
+  eocd.writeUInt16LE(0, 4);
+  eocd.writeUInt16LE(0, 6);
+  eocd.writeUInt16LE(files.length, 8);
+  eocd.writeUInt16LE(files.length, 10);
+  eocd.writeUInt32LE(centralBuf.length, 12);
+  eocd.writeUInt32LE(offset, 16);
+  eocd.writeUInt16LE(0, 20);
+
+  return {
+    buffer: Buffer.concat([...locals, centralBuf, eocd]),
+    fileCount: files.length,
+    rawBytes: rawTotal,
+    names: files.map((f) => f.name)
+  };
+};
+
+module.exports = { zipDir, collect, crc32 };

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "javer-cli",
+  "version": "1.0.0",
+  "description": "Javer Webhost from the command line — apps, VMs, databases and domains. No dependencies.",
+  "keywords": [
+    "javer",
+    "hosting",
+    "deploy",
+    "cli",
+    "paas",
+    "webhost",
+    "vps"
+  ],
+  "homepage": "https://javer.pro/docs/cli",
+  "bugs": {
+    "url": "https://javer.pro/support"
+  },
+  "author": "Javer Studios",
+  "license": "MIT",
+  "bin": {
+    "javer": "index.js"
+  },
+  "type": "commonjs",
+  "engines": {
+    "node": ">=18"
+  },
+  "os": [
+    "linux",
+    "darwin",
+    "win32"
+  ],
+  "files": [
+    "index.js",
+    "lib/",
+    "README.md",
+    "LICENSE"
+  ],
+  "private": false
+}