repopo 0.10.0 → 0.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repopo",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Enforce policies on all or some of the files in a git repository.",
   "keywords": [
     "policy",
@@ -39,6 +39,8 @@
     "/bin",
     "/oclif.manifest.json",
     "/esm",
+    "/scripts",
+    "/sidecar",
     "/THIRD-PARTY-LICENSES.txt"
   ],
   "oclif": {
@@ -61,54 +63,64 @@
     "repositoryPrefix": "<%- repo %>/blob/main/packages/repopo/<%- commandPath %>"
   },
   "dependencies": {
-    "@fluid-tools/build-infrastructure": "~0.63.0",
-    "@oclif/core": "^4.8.0",
-    "@oclif/plugin-help": "^6.2.36",
-    "@rushstack/node-core-library": "^5.19.0",
-    "consola": "^3.4.0",
-    "defu": "^6.1.4",
-    "effection": "^4.0.0",
-    "jsonfile": "^6.2.0",
+    "@fluid-tools/build-infrastructure": "~0.65.0",
+    "@oclif/core": "^4.11.14",
+    "@oclif/plugin-help": "^6.2.53",
+    "@rushstack/node-core-library": "^5.23.1",
+    "consola": "^3.4.2",
+    "defu": "^6.1.7",
+    "effection": "^4.0.3",
+    "jsonfile": "^6.2.1",
+    "lilconfig": "^3.1.3",
     "microdiff": "^1.5.0",
     "pathe": "^2.0.3",
     "picocolors": "^1.1.1",
-    "picomatch": "^4.0.3",
-    "resolve-workspace-root": "^2.0.0",
-    "simple-git": "^3.30.0",
-    "tinyglobby": "^0.2.15",
-    "@tylerbu/cli-api": "^0.10.1",
-    "@tylerbu/fundamentals": "^0.3.0"
+    "picomatch": "^4.0.5",
+    "resolve-workspace-root": "^2.0.1",
+    "simple-git": "^3.36.0",
+    "tinyglobby": "^0.2.17",
+    "@tylerbu/cli-api": "^0.11.0",
+    "@tylerbu/fundamentals": "^0.3.0",
+    "@tylerbu/lilconfig-loader-ts": "^0.1.3"
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.8",
-    "@microsoft/api-extractor": "^7.56.0",
-    "@oclif/plugin-command-snapshot": "^5.3.8",
-    "@oclif/test": "^4.1.15",
+    "@microsoft/api-extractor": "^7.58.9",
+    "@oclif/plugin-command-snapshot": "^5.3.30",
+    "@oclif/test": "^4.1.20",
     "@types/jsonfile": "^6.1.4",
-    "@types/node": "^20.19.25",
-    "@types/picomatch": "^4.0.2",
+    "@types/node": "^22.20.1",
+    "@types/picomatch": "^4.0.3",
+    "@types/spdx-correct": "^3.1.3",
     "@types/tmp": "^0.2.6",
-    "@vitest/coverage-v8": "^4.0.17",
-    "generate-license-file": "^4.1.1",
-    "oclif": "^4.22.50",
-    "rimraf": "^6.1.2",
+    "@vitest/coverage-v8": "^4.1.10",
+    "generate-license-file": "^4.2.1",
+    "oclif": "^4.23.27",
+    "rimraf": "^6.1.3",
+    "smol-toml": "^1.7.0",
+    "spdx-correct": "^3.2.0",
     "tmp-promise": "^3.0.3",
     "ts-node": "^10.9.2",
-    "type-fest": "^5.4.1",
-    "typescript": "~5.9.3",
-    "vitest": "^4.0.17"
+    "type-fest": "^5.8.0",
+    "typescript": "~6.0.3",
+    "vitest": "^4.1.10"
   },
   "peerDependencies": {
-    "sort-package-json": "*"
+    "smol-toml": "^1.0.0",
+    "sort-package-json": "*",
+    "spdx-correct": "^3.0.0"
   },
   "peerDependenciesMeta": {
+    "smol-toml": {
+      "optional": true
+    },
     "sort-package-json": {
       "optional": true
+    },
+    "spdx-correct": {
+      "optional": true
     }
   },
-  "engines": {
-    "node": ">=18.0.0"
-  },
   "nx": {
     "targets": {
       "build": {
@@ -123,12 +135,15 @@
     "build:compile": "tsc --project ./tsconfig.json",
     "build:manifest": "oclif manifest",
     "build:readme": "concurrently npm:readme:*",
+    "build:rust": "cargo build --manifest-path crates/core/Cargo.toml",
+    "build:rust:release": "cargo build --release --manifest-path crates/core/Cargo.toml",
     "check": "concurrently npm:check:format",
     "check:format": "biome check . --linter-enabled=false",
     "clean": "concurrently npm:clean:build npm:clean:manifest",
     "clean:build": "rimraf esm *.tsbuildinfo *.done.build.log",
     "clean:manifest": "rimraf oclif.manifest.json",
     "format": "biome check . --linter-enabled=false --write",
+    "postinstall": "node scripts/postinstall.mjs",
     "lint": "biome lint .",
     "lint:fix": "biome lint . --write",
     "readme:docs": "oclif readme --no-aliases --readme-path=../repopo-docs/src/content/docs/cli-reference.md",

package/scripts/postinstall.mjs

@@ -0,0 +1,154 @@
+/**
+ * Postinstall script for repopo - downloads pre-built repopo-core binary.
+ *
+ * This script uses only Node.js built-ins (no workspace dependencies).
+ * It gracefully handles all errors — a missing binary is not fatal since
+ * the Rust engine is optional.
+ */
+
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import {
+	chmodSync,
+	createWriteStream,
+	existsSync,
+	mkdirSync,
+	unlinkSync,
+} from "node:fs";
+import { readFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const packageRoot = join(__dirname, "..");
+
+// Skip in source checkout (development)
+if (existsSync(join(packageRoot, "crates", "core", "Cargo.toml"))) {
+	console.log("repopo: source checkout detected, skipping binary download.");
+	process.exit(0);
+}
+
+// Skip if explicitly disabled
+// biome-ignore lint/style/noProcessEnv: Postinstall environment check
+if (process.env.REPOPO_SKIP_POSTINSTALL === "1") {
+	console.log("repopo: REPOPO_SKIP_POSTINSTALL=1, skipping binary download.");
+	process.exit(0);
+}
+
+const PLATFORM_MAP = {
+	"linux-x64": "repopo-core-linux-x64",
+	"linux-arm64": "repopo-core-linux-arm64",
+	"darwin-x64": "repopo-core-darwin-x64",
+	"darwin-arm64": "repopo-core-darwin-arm64",
+	"win32-x64": "repopo-core-win32-x64",
+};
+
+const platformKey = `${process.platform}-${process.arch}`;
+const assetName = PLATFORM_MAP[platformKey];
+
+if (!assetName) {
+	console.warn(
+		`repopo: unsupported platform ${platformKey}, skipping binary download.`,
+	);
+	process.exit(0);
+}
+
+try {
+	const pkg = JSON.parse(
+		await readFile(join(packageRoot, "package.json"), "utf-8"),
+	);
+	const version = pkg.version;
+	const isWindows = process.platform === "win32";
+	const ext = isWindows ? ".zip" : ".tar.gz";
+	const binaryName = isWindows ? "repopo-core.exe" : "repopo-core";
+	const baseUrl = `https://github.com/tylerbutler/tools-monorepo/releases/download/repopo-core-v${version}`;
+	const archiveUrl = `${baseUrl}/${assetName}${ext}`;
+	const checksumUrl = `${archiveUrl}.sha256`;
+
+	const nativeDir = join(packageRoot, "native");
+	const binaryDest = join(nativeDir, binaryName);
+
+	// Skip if binary already exists
+	if (existsSync(binaryDest)) {
+		console.log("repopo: binary already exists, skipping download.");
+		process.exit(0);
+	}
+
+	mkdirSync(nativeDir, { recursive: true });
+
+	console.log(`repopo: downloading ${assetName}${ext}...`);
+
+	// Download checksum
+	const checksumText = await fetchText(checksumUrl);
+	const expectedHash = checksumText.trim().split(/\s+/)[0];
+
+	// Download archive
+	const archivePath = join(nativeDir, `${assetName}${ext}`);
+	await downloadFile(archiveUrl, archivePath);
+
+	// Verify checksum
+	const fileBuffer = await readFile(archivePath);
+	const actualHash = createHash("sha256").update(fileBuffer).digest("hex");
+
+	if (actualHash !== expectedHash) {
+		unlinkSync(archivePath);
+		throw new Error(
+			`Checksum mismatch: expected ${expectedHash}, got ${actualHash}`,
+		);
+	}
+
+	// Extract — uses execFileSync with explicit argument arrays to avoid shell injection
+	if (isWindows) {
+		execFileSync(
+			"powershell",
+			[
+				"-Command",
+				`Expand-Archive -Path '${archivePath}' -DestinationPath '${nativeDir}' -Force`,
+			],
+			{ stdio: "pipe" },
+		);
+	} else {
+		execFileSync("tar", ["xzf", archivePath, "-C", nativeDir], {
+			stdio: "pipe",
+		});
+	}
+
+	// Clean up archive
+	unlinkSync(archivePath);
+
+	// Set executable permission (non-Windows)
+	if (!isWindows) {
+		chmodSync(binaryDest, 0o755);
+	}
+
+	console.log("repopo: binary installed successfully.");
+} catch (err) {
+	console.warn(
+		`repopo: failed to download binary (${err.message}). The Rust engine will be unavailable.`,
+	);
+	process.exit(0);
+}
+
+/**
+ * Fetch text content from a URL using Node.js built-in fetch.
+ */
+async function fetchText(url) {
+	const res = await fetch(url);
+	if (!res.ok) {
+		throw new Error(`HTTP ${res.status} fetching ${url}`);
+	}
+	return res.text();
+}
+
+/**
+ * Download a file from a URL to a local path using Node.js built-in fetch.
+ */
+async function downloadFile(url, dest) {
+	const res = await fetch(url);
+	if (!res.ok) {
+		throw new Error(`HTTP ${res.status} fetching ${url}`);
+	}
+	const fileStream = createWriteStream(dest);
+	await pipeline(res.body, fileStream);
+}