openship 0.6.0 → 0.6.5

package/dist/chunk-RFWJE7ZN.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  hostRefusal
+} from "./chunk-EZPPTWJQ.js";
+import {
+  elevatedExecutor,
+  resolveEnvironment
+} from "./chunk-WFRXYWK2.js";
+import {
+  answered,
+  refused
+} from "./chunk-LEYSL46B.js";
+
+// ../../packages/adapters/src/system/privilege.ts
+function rootChecked(executor, why) {
+  void why;
+  return executor;
+}
+var REFUSES_HOST = {
+  refuse: true,
+  proceed: false
+};
+async function privilegedExecutor(executor, purpose, opts = {}) {
+  const profile = await resolveEnvironment(executor);
+  const refusal = hostRefusal(profile);
+  if (refusal && REFUSES_HOST[opts.onRefusedHost ?? "refuse"]) return refused(refusal);
+  const grant = (elevation, why, exec = executor) => answered({ executor: rootChecked(exec, why), profile, elevation });
+  if (profile.isRoot) return grant("root", "the login is root");
+  if (profile.canSudo) {
+    return grant("sudo", "non-root login with passwordless sudo", elevatedExecutor(executor));
+  }
+  if (refusal) return grant("none", "caller chose to proceed unprivileged on a refused host");
+  return refused(
+    `${purpose} needs root. Connect this server as root, or as a user with passwordless sudo.`
+  );
+}
+async function rootOrDegrade(executor, opts) {
+  const grant = await privilegedExecutor(executor, opts.purpose, {
+    // A host we won't PROVISION we can still write files on — none of this installs
+    // packages. Refusing here would take a working edge away from an openSUSE box.
+    onRefusedHost: "proceed"
+  }).catch((err) => {
+    opts.report(
+      `${opts.purpose}: could not check this host's privileges (${err instanceof Error ? err.message : String(err)}). ${opts.consequence}`
+    );
+    return null;
+  });
+  if (!grant) return rootChecked(executor, "host unmeasurable; reported and degraded");
+  if (!grant.supported) {
+    opts.report(`${grant.reason} ${opts.consequence}`);
+    return rootChecked(executor, "gate refused the host; reported and degraded");
+  }
+  if (grant.value.elevation === "none") {
+    opts.report(
+      `${opts.purpose} needs root, and this host's login is neither root nor able to sudo. ${opts.consequence}`
+    );
+  }
+  return grant.value.executor;
+}
+
+export {
+  rootChecked,
+  privilegedExecutor,
+  rootOrDegrade
+};

package/dist/{chunk-VDDMADOF.js → chunk-TM2IQPYU.js}

@@ -5,12 +5,12 @@ const require = __ospCreateRequire(import.meta.url);
 import {
   getTarCreateEnv,
   prepareSourceTarArgs
-} from "./chunk-6ODUBKUB.js";
+} from "./chunk-5OUWIPOB.js";
 import {
   TRANSFER_EXCLUDES,
   packageManagerEnsureCommand,
   safeErrorMessage
-} from "./chunk-OTLSJYAC.js";
+} from "./chunk-LEYSL46B.js";
 
 // ../../packages/adapters/src/runtime/git-clone.ts
 function sq(value) {
@@ -193,6 +193,19 @@ var BuildCancelledError = class extends Error {
     this.name = "BuildCancelledError";
   }
 };
+async function killProcessesUnderDir(executor, dir, opts) {
+  const quoted = sq(dir);
+  const roots = opts?.includeSuffixed ? [quoted, `${quoted}-*`] : [quoted];
+  const patterns = roots.flatMap((root) => [
+    root,
+    `${root}/*`,
+    `${root}" (deleted)"`,
+    `${root}/*" (deleted)"`
+  ]);
+  const scan = (sig) => `for p in /proc/[0-9]*; do c=$(readlink "$p/cwd" 2>/dev/null); case "$c" in ${patterns.join("|")}) kill -${sig} "\${p##*/}" 2>/dev/null || true;; esac; done`;
+  await executor.exec(`${scan("TERM")}; sleep 2; ${scan("KILL")}`).catch(() => {
+  });
+}
 async function runBuildPipeline(env, config, logger) {
   let startTime = Date.now();
   let currentStep = "prepare";
@@ -413,6 +426,7 @@ export {
   localGitSshWriter,
   BuildLogger,
   BuildCancelledError,
+  killProcessesUnderDir,
   runBuildPipeline,
   parseLogLevel,
   detectBuildKillHint,