runcastle 0.1.0 → 1.0.0

package/dist/update-NIIUPL2E.js

@@ -1,123 +0,0 @@
-import {
-  downloadFromRegistry,
-  readLockfile,
-  writeLockEntry
-} from "./chunk-UCYVC3H6.js";
-import {
-  mapTarget,
-  resolveInsideRoot,
-  sha256Hex
-} from "./chunk-Y5P5BQWF.js";
-import {
-  RealGitHubClient
-} from "./chunk-OJ356IMJ.js";
-import {
-  RegistryClient,
-  getFetch
-} from "./chunk-5VPKMXSV.js";
-import {
-  resolveRegistry
-} from "./chunk-LP5MV76P.js";
-import "./chunk-AHRTPV2C.js";
-import "./chunk-6CWCR5SO.js";
-import {
-  emitJson,
-  isJsonMode,
-  log,
-  pc
-} from "./chunk-PRNBOQHW.js";
-
-// src/commands/update.ts
-import fs from "fs";
-import path from "path";
-function onDiskSha(projectRoot, target) {
-  const abs = path.join(projectRoot, ...target.split("/"));
-  if (!fs.existsSync(abs)) return null;
-  return sha256Hex(new Uint8Array(fs.readFileSync(abs)));
-}
-async function updateCommand(opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  const fetchImpl = getFetch(opts.fetchImpl);
-  const github = new RealGitHubClient({ fetchImpl });
-  const lock = await readLockfile(cwd);
-  if (lock.installs.length === 0) {
-    if (isJsonMode()) emitJson({ ok: true, reports: [] });
-    else log(pc.dim("No installs recorded in .sandcastle/runcastle.lock.json \u2014 nothing to update."));
-    return;
-  }
-  const reports = [];
-  for (const entry of lock.installs) {
-    if (entry.source.startsWith("github:") || !entry.author) {
-      reports.push({ slug: entry.slug, from: entry.version, to: entry.version, updated: [], skippedModified: [], status: "skipped-github" });
-      continue;
-    }
-    const registry = new RegistryClient({ baseUrl: resolveRegistry(opts.registry ?? entry.registry), fetchImpl });
-    const record = await registry.getWorkflow(entry.author, entry.slug);
-    if (record.version === entry.version) {
-      reports.push({ slug: entry.slug, from: entry.version, to: record.version, updated: [], skippedModified: [], status: "up-to-date" });
-      continue;
-    }
-    const downloaded = await downloadFromRegistry(record, registry, github, fetchImpl);
-    const updated = [];
-    const skippedModified = [];
-    const newFiles = { ...entry.files };
-    for (const d of downloaded) {
-      const target = mapTarget(d.path, entry.dir);
-      const recorded = entry.files[target];
-      const disk = onDiskSha(cwd, target);
-      if (disk !== null && recorded !== void 0 && disk !== recorded) {
-        skippedModified.push(target);
-        continue;
-      }
-      if (disk === d.sha256) {
-        newFiles[target] = d.sha256;
-        continue;
-      }
-      const abs = resolveInsideRoot(cwd, target);
-      fs.mkdirSync(path.dirname(abs), { recursive: true });
-      fs.writeFileSync(abs, d.bytes);
-      updated.push(target);
-      newFiles[target] = d.sha256;
-    }
-    const next = {
-      ...entry,
-      version: record.version,
-      sha: record.commitSha,
-      files: newFiles,
-      installedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    await writeLockEntry(cwd, next);
-    reports.push({
-      slug: entry.slug,
-      from: entry.version,
-      to: record.version,
-      updated,
-      skippedModified,
-      status: "updated"
-    });
-  }
-  if (isJsonMode()) {
-    emitJson({ ok: true, reports });
-    return;
-  }
-  for (const r of reports) {
-    if (r.status === "up-to-date") {
-      log(`${pc.dim("\xB7")} ${r.slug} ${pc.dim(`is up to date (${r.from})`)}`);
-    } else if (r.status === "skipped-github") {
-      log(`${pc.dim("\xB7")} ${r.slug} ${pc.dim("installed from github: \u2014 re-run `runcastle add github:\u2026` to update")}`);
-    } else {
-      log(`${pc.green("\u2191")} ${r.slug} ${pc.dim(`${r.from} \u2192 ${r.to}`)}`);
-      for (const f of r.updated) log(`    ${pc.green("updated")}   ${f}`);
-      for (const f of r.skippedModified) log(`    ${pc.yellow("skipped")}   ${f} ${pc.dim("(locally modified \u2014 resolve manually)")}`);
-    }
-  }
-  const anyModified = reports.some((r) => r.skippedModified.length > 0);
-  if (anyModified) {
-    log("");
-    log(pc.yellow("Some files were locally modified and left untouched. Diff them against the new version and merge by hand."));
-  }
-}
-export {
-  updateCommand
-};
-//# sourceMappingURL=update-NIIUPL2E.js.map

package/dist/update-NIIUPL2E.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/update.ts"],"sourcesContent":["// `runcastle update` (spec §5.6, minimal v1). Read the lockfile, check for newer\n// versions, auto-update files that are UNMODIFIED since install, and REFUSE to\n// touch locally-modified files (telling the user to resolve them manually).\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { emitJson, isJsonMode, log, pc } from \"../lib/output.js\";\nimport { resolveRegistry } from \"../lib/config.js\";\nimport { RegistryClient } from \"../lib/registry.js\";\nimport { RealGitHubClient } from \"../lib/github.js\";\nimport { downloadFromRegistry } from \"../lib/download.js\";\nimport { sha256Hex } from \"../lib/checksum.js\";\nimport { getFetch, type FetchLike } from \"../lib/http.js\";\nimport { readLockfile, writeLockEntry, type LockEntry } from \"../lib/lockfile.js\";\nimport { mapTarget, resolveInsideRoot } from \"../lib/installer.js\";\n\nexport interface UpdateOptions {\n  registry?: string;\n  json?: boolean;\n  fetchImpl?: FetchLike;\n  cwd?: string;\n}\n\ninterface UpdateReport {\n  slug: string;\n  from: string;\n  to: string;\n  updated: string[];\n  skippedModified: string[];\n  status: \"updated\" | \"up-to-date\" | \"skipped-github\" | \"no-op\";\n}\n\nfunction onDiskSha(projectRoot: string, target: string): string | null {\n  const abs = path.join(projectRoot, ...target.split(\"/\"));\n  if (!fs.existsSync(abs)) return null;\n  return sha256Hex(new Uint8Array(fs.readFileSync(abs)));\n}\n\nexport async function updateCommand(opts: UpdateOptions): Promise<void> {\n  const cwd = opts.cwd ?? process.cwd();\n  const fetchImpl = getFetch(opts.fetchImpl);\n  const github = new RealGitHubClient({ fetchImpl });\n  const lock = await readLockfile(cwd);\n\n  if (lock.installs.length === 0) {\n    if (isJsonMode()) emitJson({ ok: true, reports: [] });\n    else log(pc.dim(\"No installs recorded in .sandcastle/runcastle.lock.json — nothing to update.\"));\n    return;\n  }\n\n  const reports: UpdateReport[] = [];\n\n  for (const entry of lock.installs) {\n    if (entry.source.startsWith(\"github:\") || !entry.author) {\n      reports.push({ slug: entry.slug, from: entry.version, to: entry.version, updated: [], skippedModified: [], status: \"skipped-github\" });\n      continue;\n    }\n    const registry = new RegistryClient({ baseUrl: resolveRegistry(opts.registry ?? entry.registry), fetchImpl });\n    const record = await registry.getWorkflow(entry.author, entry.slug);\n    if (record.version === entry.version) {\n      reports.push({ slug: entry.slug, from: entry.version, to: record.version, updated: [], skippedModified: [], status: \"up-to-date\" });\n      continue;\n    }\n\n    const downloaded = await downloadFromRegistry(record, registry, github, fetchImpl);\n    const updated: string[] = [];\n    const skippedModified: string[] = [];\n    const newFiles: Record<string, string> = { ...entry.files };\n\n    for (const d of downloaded) {\n      const target = mapTarget(d.path, entry.dir);\n      const recorded = entry.files[target];\n      const disk = onDiskSha(cwd, target);\n      // Locally modified: on-disk differs from what we installed last time.\n      if (disk !== null && recorded !== undefined && disk !== recorded) {\n        skippedModified.push(target);\n        continue;\n      }\n      if (disk === d.sha256) {\n        // already identical to the new bytes\n        newFiles[target] = d.sha256;\n        continue;\n      }\n      // Defense-in-depth: never write outside the project (§8 / C1).\n      const abs = resolveInsideRoot(cwd, target);\n      fs.mkdirSync(path.dirname(abs), { recursive: true });\n      fs.writeFileSync(abs, d.bytes);\n      updated.push(target);\n      newFiles[target] = d.sha256;\n    }\n\n    // Persist the new version/sha; skipped files retain their recorded checksum.\n    const next: LockEntry = {\n      ...entry,\n      version: record.version,\n      sha: record.commitSha,\n      files: newFiles,\n      installedAt: new Date().toISOString(),\n    };\n    await writeLockEntry(cwd, next);\n\n    reports.push({\n      slug: entry.slug,\n      from: entry.version,\n      to: record.version,\n      updated,\n      skippedModified,\n      status: \"updated\",\n    });\n  }\n\n  if (isJsonMode()) {\n    emitJson({ ok: true, reports });\n    return;\n  }\n\n  for (const r of reports) {\n    if (r.status === \"up-to-date\") {\n      log(`${pc.dim(\"·\")} ${r.slug} ${pc.dim(`is up to date (${r.from})`)}`);\n    } else if (r.status === \"skipped-github\") {\n      log(`${pc.dim(\"·\")} ${r.slug} ${pc.dim(\"installed from github: — re-run `runcastle add github:…` to update\")}`);\n    } else {\n      log(`${pc.green(\"↑\")} ${r.slug} ${pc.dim(`${r.from} → ${r.to}`)}`);\n      for (const f of r.updated) log(`    ${pc.green(\"updated\")}   ${f}`);\n      for (const f of r.skippedModified) log(`    ${pc.yellow(\"skipped\")}   ${f} ${pc.dim(\"(locally modified — resolve manually)\")}`);\n    }\n  }\n  const anyModified = reports.some((r) => r.skippedModified.length > 0);\n  if (anyModified) {\n    log(\"\");\n    log(pc.yellow(\"Some files were locally modified and left untouched. Diff them against the new version and merge by hand.\"));\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,OAAO,QAAQ;AACf,OAAO,UAAU;AA2BjB,SAAS,UAAU,aAAqB,QAA+B;AACrE,QAAM,MAAM,KAAK,KAAK,aAAa,GAAG,OAAO,MAAM,GAAG,CAAC;AACvD,MAAI,CAAC,GAAG,WAAW,GAAG,EAAG,QAAO;AAChC,SAAO,UAAU,IAAI,WAAW,GAAG,aAAa,GAAG,CAAC,CAAC;AACvD;AAEA,eAAsB,cAAc,MAAoC;AACtE,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,YAAY,SAAS,KAAK,SAAS;AACzC,QAAM,SAAS,IAAI,iBAAiB,EAAE,UAAU,CAAC;AACjD,QAAM,OAAO,MAAM,aAAa,GAAG;AAEnC,MAAI,KAAK,SAAS,WAAW,GAAG;AAC9B,QAAI,WAAW,EAAG,UAAS,EAAE,IAAI,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,QAC/C,KAAI,GAAG,IAAI,mFAA8E,CAAC;AAC/F;AAAA,EACF;AAEA,QAAM,UAA0B,CAAC;AAEjC,aAAW,SAAS,KAAK,UAAU;AACjC,QAAI,MAAM,OAAO,WAAW,SAAS,KAAK,CAAC,MAAM,QAAQ;AACvD,cAAQ,KAAK,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,IAAI,MAAM,SAAS,SAAS,CAAC,GAAG,iBAAiB,CAAC,GAAG,QAAQ,iBAAiB,CAAC;AACrI;AAAA,IACF;AACA,UAAM,WAAW,IAAI,eAAe,EAAE,SAAS,gBAAgB,KAAK,YAAY,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5G,UAAM,SAAS,MAAM,SAAS,YAAY,MAAM,QAAQ,MAAM,IAAI;AAClE,QAAI,OAAO,YAAY,MAAM,SAAS;AACpC,cAAQ,KAAK,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,IAAI,OAAO,SAAS,SAAS,CAAC,GAAG,iBAAiB,CAAC,GAAG,QAAQ,aAAa,CAAC;AAClI;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,qBAAqB,QAAQ,UAAU,QAAQ,SAAS;AACjF,UAAM,UAAoB,CAAC;AAC3B,UAAM,kBAA4B,CAAC;AACnC,UAAM,WAAmC,EAAE,GAAG,MAAM,MAAM;AAE1D,eAAW,KAAK,YAAY;AAC1B,YAAM,SAAS,UAAU,EAAE,MAAM,MAAM,GAAG;AAC1C,YAAM,WAAW,MAAM,MAAM,MAAM;AACnC,YAAM,OAAO,UAAU,KAAK,MAAM;AAElC,UAAI,SAAS,QAAQ,aAAa,UAAa,SAAS,UAAU;AAChE,wBAAgB,KAAK,MAAM;AAC3B;AAAA,MACF;AACA,UAAI,SAAS,EAAE,QAAQ;AAErB,iBAAS,MAAM,IAAI,EAAE;AACrB;AAAA,MACF;AAEA,YAAM,MAAM,kBAAkB,KAAK,MAAM;AACzC,SAAG,UAAU,KAAK,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,SAAG,cAAc,KAAK,EAAE,KAAK;AAC7B,cAAQ,KAAK,MAAM;AACnB,eAAS,MAAM,IAAI,EAAE;AAAA,IACvB;AAGA,UAAM,OAAkB;AAAA,MACtB,GAAG;AAAA,MACH,SAAS,OAAO;AAAA,MAChB,KAAK,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC;AACA,UAAM,eAAe,KAAK,IAAI;AAE9B,YAAQ,KAAK;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,IAAI,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,MAAI,WAAW,GAAG;AAChB,aAAS,EAAE,IAAI,MAAM,QAAQ,CAAC;AAC9B;AAAA,EACF;AAEA,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,WAAW,cAAc;AAC7B,UAAI,GAAG,GAAG,IAAI,MAAG,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,IAAI,kBAAkB,EAAE,IAAI,GAAG,CAAC,EAAE;AAAA,IACvE,WAAW,EAAE,WAAW,kBAAkB;AACxC,UAAI,GAAG,GAAG,IAAI,MAAG,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,IAAI,8EAAoE,CAAC,EAAE;AAAA,IAChH,OAAO;AACL,UAAI,GAAG,GAAG,MAAM,QAAG,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,IAAI,GAAG,EAAE,IAAI,WAAM,EAAE,EAAE,EAAE,CAAC,EAAE;AACjE,iBAAW,KAAK,EAAE,QAAS,KAAI,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE;AAClE,iBAAW,KAAK,EAAE,gBAAiB,KAAI,OAAO,GAAG,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,4CAAuC,CAAC,EAAE;AAAA,IAChI;AAAA,EACF;AACA,QAAM,cAAc,QAAQ,KAAK,CAAC,MAAM,EAAE,gBAAgB,SAAS,CAAC;AACpE,MAAI,aAAa;AACf,QAAI,EAAE;AACN,QAAI,GAAG,OAAO,2GAA2G,CAAC;AAAA,EAC5H;AACF;","names":[]}

package/dist/validate-GFDSEVPV.js

@@ -1,12 +0,0 @@
-import {
-  runValidation,
-  validateCommand
-} from "./chunk-SNUH2UT6.js";
-import "./chunk-AHRTPV2C.js";
-import "./chunk-6CWCR5SO.js";
-import "./chunk-PRNBOQHW.js";
-export {
-  runValidation,
-  validateCommand
-};
-//# sourceMappingURL=validate-GFDSEVPV.js.map

package/dist/validate-GFDSEVPV.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}