sporades 0.1.0

package/dist/cli/cli-help.js

@@ -0,0 +1,202 @@
+const HELP_TEXT = {
+    create: `Usage: sporades create <name> [options]
+
+Scaffold a new Capsule.
+
+Options:
+  --framework <name>  Client framework: react or preact
+  --template <name>   Template: blank, todo, guestbook, or photo-library
+  --no-install        Skip npm install
+  --no-git            Skip git initialization
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    dev: `Usage: sporades dev [status|stop|reset] [options]
+
+Start and manage a local Dev session.
+
+Commands:
+  dev                 Start a Dev session
+  dev status          Print Dev session status
+  dev stop            Stop the running Dev session
+  dev reset           Stop the Dev session and remove local Dev state
+
+Options:
+  --port <number>     Dev session port when starting
+  --public            Allow non-localhost access when starting
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    auth: `Usage: sporades auth <command> [options]
+
+Manage local auth configuration and identity simulation.
+
+Commands:
+  status              Print auth provider status
+  clients             List connected Dev session clients
+  set google          Configure Google OAuth credentials
+  as email            Simulate a local email identity
+
+Options:
+  --client-id <id>        Google OAuth client ID
+  --client-secret <secret> Google OAuth client secret
+  --client-json <path>    Read Google OAuth credentials JSON
+  --email <address>       Simulated email identity
+  --display-name <name>   Simulated display name
+  --picture <url>         Simulated profile picture URL
+  --port <number>         Target Dev session port
+  --client <target>       Delivery target: current, all, or a client ID
+  --json                  Write JSON output
+  --help, -h              Show this help
+`,
+    security: `Usage: sporades security [options]
+
+Inspect effective Capsule security policy.
+
+Options:
+  --session <name>    Session: dev, public-dev, container, or hosted
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    env: `Usage: sporades env <command> [options]
+
+Manage Sealed Server env.
+
+Commands:
+  init                Create local Sealed Server env key material
+  import              Import Server env values from a file
+  status              Print Sealed Server env status
+  export              Export Sealed Server env for a Host profile
+  reencrypt           Re-encrypt local Sealed Server env material
+
+Options:
+  --file <path>       Input file for import or export
+  --host <alias>      Host profile alias
+  --subname <name>    Hosted Capsule subname
+  --output <path>     Export output path
+  --sealed            Treat input as an already sealed export
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    deploy: `Usage: sporades deploy [status|stop|restart|remove|reset] [options]
+
+Start and manage a local Container session.
+
+Commands:
+  deploy              Start a local Container session
+  deploy status       Print Container session status
+  deploy stop         Stop the running Container session
+  deploy restart      Restart the running Container session
+  deploy remove       Remove the Container session
+  deploy reset        Remove the Container session and local container state
+
+Options:
+  --port <number>     Published local port when starting
+  --force             Replace stale or conflicting container state when starting
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    host: `Usage: sporades host <command> [options]
+
+Manage Host profiles and Hosted Capsules.
+
+Profile commands:
+  add <alias>         Add a Host profile
+  use <alias>         Set the default Host profile
+  current             Print the selected Host profile
+  bootstrap           Provision the remote Host server
+  health [subname]    Check Host server or Hosted Capsule health
+
+Capsule commands:
+  bind <subname>      Bind this project to a Hosted Capsule
+  register <subname>  Register a Hosted Capsule
+  push                Push and install a Hosted Capsule release
+  start <subname>     Start a Hosted Capsule
+  stop <subname>      Stop a Hosted Capsule
+  restart <subname>   Restart a Hosted Capsule
+  stats [subname]     Print Host server or Hosted Capsule stats
+  logs [source]       Print Hosted Capsule logs
+  releases <subname>  List Hosted Capsule releases
+  rollback <subname> <release-id>
+                      Roll back to a previous release
+  rotate-key <subname>
+                      Rotate Hosted Capsule Sealed Server env keys
+  unregister <subname>
+                      Unregister a Hosted Capsule
+  delete <subname>    Delete Hosted Capsule storage
+
+Other commands:
+  list                List Hosted Capsules
+  github workflow write
+                      Write a GitHub Actions deploy workflow
+  invoke <action>     Invoke a low-level remote Host helper action
+
+Options:
+  --host <alias>      Host profile alias
+  --server <target>   SSH target for host add
+  --domain <domain>   Hosted domain for host add
+  --remote-root <path>
+                      Remote root path for host add
+  --tls <mode>        TLS mode: automatic or cloudflare-origin
+  --subname <name>    Hosted Capsule subname
+  --lines <n>, -n <n> Log line count
+  --restart           Restart after host push
+  --verify            Verify release health after host push
+  --fallback-to-previous-release
+                      Roll back when verified push fails
+  --branch <name>     GitHub workflow branch
+  --file <path>       GitHub workflow output path
+  --dry-run           Print workflow without writing it
+  --force             Overwrite workflow output when writing it
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    logs: `Usage: sporades logs [tail] [options]
+
+Print Dev session logs.
+
+Commands:
+  logs                Print recent Dev session logs
+  logs tail           Follow Dev session logs
+
+Options:
+  --port <number>     Target Dev session or local Container port
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    db: `Usage: sporades db <command> [options]
+
+Inspect the Dev session database.
+
+Commands:
+  list                List database tables
+  dump                Dump database contents
+  query <sql>         Run a read-only SQL query
+
+Options:
+  --port <number>     Target Dev session or local Container port
+  --json              Write JSON output
+  --help, -h          Show this help
+`,
+    default: `Usage: sporades <command> [options]
+    
+    Commands:
+      create <name>  Scaffold a new Capsule
+      dev            Start a local Dev session
+      auth           Manage local auth configuration and simulation
+      security       Inspect effective Capsule security policy
+      env            Manage Sealed Server env
+      deploy         Start a local Container session
+      host           Manage Host profiles and Hosted Capsules
+      logs           Print Dev session logs
+      db             Inspect the Dev session database
+    
+    Options:
+      --help, -h     Show help for command
+      --json         Write JSON output when supported by the command
+    `,
+};
+export function renderCliHelp(command) {
+    return HELP_TEXT[command] ?? HELP_TEXT.default;
+}
+//# sourceMappingURL=cli-help.js.map

package/dist/cli/cli-help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-help.js","sourceRoot":"","sources":["../../src/cli/cli-help.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG;IAChB,MAAM,EAAE;;;;;;;;;;;CAWT;IACC,GAAG,EAAE;;;;;;;;;;;;;;;CAeN;IACC,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBP;IACC,QAAQ,EAAE;;;;;;;;CAQX;IACC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;CAmBN;IACC,MAAM,EAAE;;;;;;;;;;;;;;;;;CAiBT;IACC,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDP;IACC,IAAI,EAAE;;;;;;;;;;;;CAYP;IACC,EAAE,EAAE;;;;;;;;;;;;;CAaL;IACC,OAAO,EAAE;;;;;;;;;;;;;;;;KAgBN;CACK,CAAC;AAIX,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,OAAO,SAAS,CAAC,OAAyB,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC;AACnE,CAAC"}

package/dist/cli/cli-support.d.ts

@@ -0,0 +1,17 @@
+export type LooseRecord = Record<string, any>;
+export type CommandError = Error & {
+    hint?: string;
+    diagnostics?: unknown;
+};
+export type HelperError = Error & {
+    hint?: string;
+    diagnostics?: unknown;
+};
+export declare function errorDetails(error: unknown): LooseRecord;
+export declare function commandError(message: string, hint: string, diagnostics?: unknown): CommandError;
+export declare function helperError(message: string, hint: string, diagnostics?: unknown): HelperError;
+export declare function readStdin(): Promise<string>;
+export declare function delay(ms: number): Promise<void>;
+export declare function writeResult(result: LooseRecord, failed?: boolean): void;
+export declare function writeEnvelope(result: LooseRecord, failed?: boolean): void;
+//# sourceMappingURL=cli-support.d.ts.map

package/dist/cli/cli-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-support.d.ts","sourceRoot":"","sources":["../../src/cli/cli-support.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE9C,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAKxD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,GAAE,OAAc,GAAG,YAAY,CAOrG;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,GAAE,OAAc,GAAG,WAAW,CAOnG;AAED,wBAAgB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAU3C;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,iBAE/B;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,UAAQ,QAK9D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,UAAQ,QAEhE"}

package/dist/cli/cli-support.js

@@ -0,0 +1,46 @@
+export function errorDetails(error) {
+    if (error === null || error === undefined) {
+        return {};
+    }
+    return typeof error === "object" ? error : { message: String(error) };
+}
+export function commandError(message, hint, diagnostics = null) {
+    const error = new Error(message);
+    error.hint = hint;
+    if (diagnostics) {
+        error.diagnostics = diagnostics;
+    }
+    return error;
+}
+export function helperError(message, hint, diagnostics = null) {
+    const error = new Error(message);
+    error.hint = hint;
+    if (diagnostics) {
+        error.diagnostics = diagnostics;
+    }
+    return error;
+}
+export function readStdin() {
+    return new Promise((resolve, reject) => {
+        let stdin = "";
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (chunk) => {
+            stdin += chunk;
+        });
+        process.stdin.on("end", () => resolve(stdin));
+        process.stdin.on("error", reject);
+    });
+}
+export function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function writeResult(result, failed = false) {
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+    if (failed) {
+        process.exitCode = 1;
+    }
+}
+export function writeEnvelope(result, failed = false) {
+    writeResult(result, failed);
+}
+//# sourceMappingURL=cli-support.js.map

package/dist/cli/cli-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-support.js","sourceRoot":"","sources":["../../src/cli/cli-support.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAqB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,cAAuB,IAAI;IACrF,MAAM,KAAK,GAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,cAAuB,IAAI;IACpF,MAAM,KAAK,GAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAmB,EAAE,MAAM,GAAG,KAAK;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,MAAM,GAAG,KAAK;IAC/D,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC"}

package/dist/cli/github-autodeploy-workflow.d.ts

@@ -0,0 +1,7 @@
+export type GithubAutodeployWorkflowOptions = {
+    hostAlias: string;
+    subname: string;
+    branch: string;
+};
+export declare function createGithubAutodeployWorkflow({ hostAlias, subname, branch }: GithubAutodeployWorkflowOptions): string;
+//# sourceMappingURL=github-autodeploy-workflow.d.ts.map

package/dist/cli/github-autodeploy-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-autodeploy-workflow.d.ts","sourceRoot":"","sources":["../../src/cli/github-autodeploy-workflow.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,8BAA8B,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,+BAA+B,UAuL7G"}

package/dist/cli/github-autodeploy-workflow.js

@@ -0,0 +1,185 @@
+export function createGithubAutodeployWorkflow({ hostAlias, subname, branch }) {
+    return `name: Sporades Autodeploy
+
+on:
+  push:
+    branches: [${JSON.stringify(branch)}]
+  pull_request:
+    branches: [${JSON.stringify(branch)}]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+env:
+  SPORADES_HOST_ALIAS: ${hostAlias}
+  SPORADES_HOST_SUBNAME: ${subname}
+  SPORADES_HOST_SERVER: \${{ vars.SPORADES_HOST_SERVER }}
+  SPORADES_HOST_DOMAIN: \${{ vars.SPORADES_HOST_DOMAIN }}
+  SPORADES_HOST_REMOTE_ROOT: \${{ vars.SPORADES_HOST_REMOTE_ROOT }}
+  SPORADES_AUTODEPLOY_SUMMARY: \${{ runner.temp }}/sporades-autodeploy-summary.md
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install dependencies
+        run: |
+          if [ -f package-lock.json ]; then
+            npm ci
+          else
+            npm install
+          fi
+
+      - name: Run project tests
+        run: |
+          if node -e "const p = require('./package.json'); process.exit(p.scripts && p.scripts.test ? 0 : 1)"; then
+            npm test
+          else
+            echo "No npm test script declared; skipping project tests."
+          fi
+
+      - name: Configure Host SSH key
+        run: |
+          mkdir -p ~/.ssh
+          printf '%s\\n' "\${{ secrets.SPORADES_HOST_SSH_PRIVATE_KEY }}" > ~/.ssh/sporades_host_key
+          chmod 600 ~/.ssh/sporades_host_key
+          cat >> ~/.ssh/config <<'SSH_CONFIG'
+          Host *
+            IdentityFile ~/.ssh/sporades_host_key
+            IdentitiesOnly yes
+            StrictHostKeyChecking accept-new
+          SSH_CONFIG
+
+      - name: Configure Sporades Host profile
+        run: |
+          npx sporades host add "$SPORADES_HOST_ALIAS" \\
+            --server "$SPORADES_HOST_SERVER" \\
+            --domain "$SPORADES_HOST_DOMAIN" \\
+            --remote-root "$SPORADES_HOST_REMOTE_ROOT" \\
+            --json
+
+      - name: Sporades release preflight
+        run: |
+          npx sporades host current --host "$SPORADES_HOST_ALIAS" --json
+          npx sporades host health --host "$SPORADES_HOST_ALIAS" --json
+
+      - name: Push verified Hosted Capsule release
+        id: sporades_deploy
+        shell: bash
+        run: |
+          set +e
+          npx sporades host push --host "$SPORADES_HOST_ALIAS" --subname "$SPORADES_HOST_SUBNAME" --verify --json > "$RUNNER_TEMP/sporades-host-push.json"
+          deploy_exit=$?
+          set -e
+          node <<'NODE'
+          const fs = require("node:fs");
+
+          const outputPath = process.env.RUNNER_TEMP + "/sporades-host-push.json";
+          const raw = fs.existsSync(outputPath) ? fs.readFileSync(outputPath, "utf8") : "";
+          let envelope = null;
+          try {
+            envelope = JSON.parse(raw);
+          } catch {
+            envelope = null;
+          }
+
+          const data = envelope?.data ?? {};
+          const verification = data.verification ?? {};
+          const hostedUrl =
+            data.capsule?.hostedUrl ??
+            data.release?.hostedUrl ??
+            "https://" + process.env.SPORADES_HOST_SUBNAME + "." + process.env.SPORADES_HOST_DOMAIN;
+          const releaseId = data.release?.id ?? data.currentAttemptedRelease?.id ?? "unknown";
+          const verificationState =
+            verification?.state ??
+            (data.verified === true ? "verified" : data.verified === false ? "failed" : envelope?.ok ? "not reported" : "command failed");
+          const resultLabel = verificationState === "failed" ? "Verification failed" : envelope?.ok ? "Successful deploy" : "Command failed";
+          const previousReleaseId = data.previousCurrentRelease?.id ?? data.rollbackGuidance?.previousReleaseId ?? null;
+          const rollbackCommand =
+            data.rollbackGuidance?.command ??
+            (verificationState === "failed" && previousReleaseId
+              ? "sporades host rollback " + process.env.SPORADES_HOST_SUBNAME + " " + previousReleaseId + " --host " + process.env.SPORADES_HOST_ALIAS
+              : null);
+
+          function escapeCell(value) {
+            return String(value ?? "unknown").replace(/\\|/g, "\\\\|").replace(/\\r?\\n/g, " ");
+          }
+
+          function hostedCell(url) {
+            if (/^https?:\\/\\//.test(url)) {
+              return "[" + escapeCell(url) + "](" + url + ")";
+            }
+            return escapeCell(url);
+          }
+
+          const lines = [
+            "## Sporades autodeploy result",
+            "",
+            "| Field | Value |",
+            "| --- | --- |",
+            "| Result | " + escapeCell(resultLabel) + " |",
+            "| Hosted Capsule | " + hostedCell(hostedUrl) + " |",
+            "| Release ID | " + escapeCell(releaseId) + " |",
+            "| Verification | " + escapeCell(verificationState) + " |",
+          ];
+
+          if (!envelope) {
+            lines.push("", "No structured Sporades deploy output was available.");
+          } else if (!envelope.ok && envelope.error?.message) {
+            lines.push("", "Failure: " + envelope.error.message);
+          }
+
+          if (rollbackCommand) {
+            lines.push(
+              "",
+              "### Rollback guidance",
+              "",
+              "Sporades did not roll back automatically. To roll back manually, run:",
+              "",
+              "    " + rollbackCommand,
+            );
+          } else if (verificationState === "failed") {
+            lines.push(
+              "",
+              "### Rollback guidance",
+              "",
+              "No previous release was reported, so no rollback command is available.",
+            );
+          }
+
+          const summary = lines.join("\\n") + "\\n";
+          fs.writeFileSync(process.env.SPORADES_AUTODEPLOY_SUMMARY, summary);
+          fs.appendFileSync(process.env.GITHUB_STEP_SUMMARY, summary);
+          NODE
+          exit "$deploy_exit"
+
+      - name: Publish pull request deploy result
+        if: always() && github.event_name == 'pull_request'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('node:fs');
+            const summaryPath = process.env.SPORADES_AUTODEPLOY_SUMMARY;
+            const body = fs.existsSync(summaryPath)
+              ? fs.readFileSync(summaryPath, 'utf8')
+              : '## Sporades autodeploy result\\n\\nDeploy result summary was unavailable.\\n';
+            await github.rest.pulls.createReview({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              event: 'COMMENT',
+              body
+            });
+`;
+}
+//# sourceMappingURL=github-autodeploy-workflow.js.map

package/dist/cli/github-autodeploy-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-autodeploy-workflow.js","sourceRoot":"","sources":["../../src/cli/github-autodeploy-workflow.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,8BAA8B,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAmC;IAC5G,OAAO;;;;iBAIQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;iBAEtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;;;;;;;yBAQd,SAAS;2BACP,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsKjC,CAAC;AACF,CAAC"}

package/dist/cli/host-helper-archive.d.ts

@@ -0,0 +1,9 @@
+import type { HostHelperRelease, HostHelperRequest as HostHelperContractRequest, HostHelperCapsuleTarget } from "./host-helper-contract.js";
+type HostHelperRequest = HostHelperContractRequest & {
+    capsule: HostHelperCapsuleTarget;
+    release: HostHelperRelease;
+};
+export declare function validateReleaseArchive(request: HostHelperRequest): void;
+export declare function removeDiscardedArchiveMetadata(directory: string): Promise<void>;
+export {};
+//# sourceMappingURL=host-helper-archive.d.ts.map

package/dist/cli/host-helper-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-helper-archive.d.ts","sourceRoot":"","sources":["../../src/cli/host-helper-archive.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,IAAI,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAG5I,KAAK,iBAAiB,GAAG,yBAAyB,GAAG;IACnD,OAAO,EAAE,uBAAuB,CAAC;IACjC,OAAO,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,QA6BhE;AAED,wBAAsB,8BAA8B,CAAC,SAAS,EAAE,MAAM,iBAWrE"}

package/dist/cli/host-helper-archive.js

@@ -0,0 +1,74 @@
+import { spawnSync } from "node:child_process";
+import { readdir, rm } from "node:fs/promises";
+import path from "node:path";
+import { helperError } from "./cli-support.js";
+import { expectedReleaseFiles } from "./host-helper-release-files.js";
+export function validateReleaseArchive(request) {
+    const release = request.release;
+    const entries = listArchiveEntries(release.remoteArchive);
+    const expectedFiles = expectedReleaseFiles(release);
+    const allNames = entries.map((entry) => normaliseArchiveEntryName(entry.name));
+    const runtimeEntries = entries.filter((entry) => !isDiscardableArchiveMetadata(entry.name));
+    const actualNames = runtimeEntries.map((entry) => normaliseArchiveEntryName(entry.name));
+    if (entries.some((entry) => !isSafeArchiveEntryType(entry))) {
+        throw helperError("Hosted Capsule release archive contains unsafe entries.", "Push again so Sporades can package regular runtime files only.");
+    }
+    if (allNames.some((name) => !isSafeArchiveEntryName(name))) {
+        throw helperError("Hosted Capsule release archive contains unsafe paths.", "Push again so Sporades can package runtime files without absolute or parent-relative paths.");
+    }
+    const actual = [...actualNames].sort();
+    const expected = [...expectedFiles].sort();
+    if (actual.length !== expected.length || actual.some((name, index) => name !== expected[index])) {
+        throw helperError("Hosted Capsule release archive contains unexpected files.", "Push again so Sporades can package only runtime files.");
+    }
+}
+export async function removeDiscardedArchiveMetadata(directory) {
+    for (const entry of await readdir(directory, { withFileTypes: true })) {
+        const entryPath = path.join(directory, entry.name);
+        if (entry.name === "__MACOSX" || entry.name.startsWith("._")) {
+            await rm(entryPath, { recursive: entry.isDirectory(), force: true });
+            continue;
+        }
+        if (entry.isDirectory()) {
+            await removeDiscardedArchiveMetadata(entryPath);
+        }
+    }
+}
+function listArchiveEntries(archivePath) {
+    const namesResult = spawnSync("tar", ["-tzf", archivePath], { encoding: "utf8" });
+    const verboseResult = spawnSync("tar", ["-tvzf", archivePath], { encoding: "utf8" });
+    if (namesResult.error || namesResult.status !== 0 || verboseResult.error || verboseResult.status !== 0) {
+        throw helperError("Failed to inspect Hosted Capsule release archive.", "Upload the release again with `sporades host push` and check that tar is installed on the Host server.");
+    }
+    const names = namesResult.stdout.trim().split("\n").filter(Boolean);
+    const verboseLines = verboseResult.stdout.trim().split("\n").filter(Boolean);
+    if (names.length !== verboseLines.length) {
+        throw helperError("Hosted Capsule release archive could not be validated.", "Push again so Sporades can package a clean runtime archive.");
+    }
+    return names.map((name, index) => ({
+        name,
+        type: verboseLines[index]?.[0],
+    }));
+}
+function normaliseArchiveEntryName(name) {
+    return String(name).replace(/^\.\//, "").replace(/\/+$/, "");
+}
+function isDiscardableArchiveMetadata(name) {
+    const normalisedName = normaliseArchiveEntryName(name);
+    return (normalisedName === "__MACOSX" ||
+        normalisedName.startsWith("__MACOSX/") ||
+        normalisedName.split("/").some((segment) => segment.startsWith("._")));
+}
+function isSafeArchiveEntryType(entry) {
+    if (entry.type === "-") {
+        return true;
+    }
+    return entry.type === "d" && isDiscardableArchiveMetadata(entry.name);
+}
+function isSafeArchiveEntryName(name) {
+    if (!name || name.startsWith("/") || name.includes("\0")) {
+        return false;
+    }
+    return name.split("/").every((segment) => segment && segment !== "." && segment !== "..");
+}
+//# sourceMappingURL=host-helper-archive.js.map

package/dist/cli/host-helper-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-helper-archive.js","sourceRoot":"","sources":["../../src/cli/host-helper-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAOtE,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,WAAW,CACf,yDAAyD,EACzD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,CACf,uDAAuD,EACvD,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,WAAW,CACf,2DAA2D,EAC3D,wDAAwD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,SAAiB;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,IAAI,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvG,MAAM,WAAW,CACf,mDAAmD,EACnD,wGAAwG,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,WAAW,CACf,wDAAwD,EACxD,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI;QACJ,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAa;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAa;IACjD,MAAM,cAAc,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO,CACL,cAAc,KAAK,UAAU;QAC7B,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC;QACtC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAsC;IACpE,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAC5F,CAAC"}

package/dist/cli/host-helper-config.d.ts

@@ -0,0 +1,15 @@
+import type { HostHelperRequest } from "./host-helper-contract.js";
+export type HostHelperConfig = {
+    hostedCapsule: {
+        dockerImage: string;
+        dockerNetwork: string;
+        graceCheckMs: number;
+    };
+    logs: {
+        defaultLines: number;
+        maxLines: number;
+    };
+};
+export declare function defaultHostHelperConfig(): HostHelperConfig;
+export declare function loadHostHelperConfig(request: HostHelperRequest): Promise<HostHelperConfig>;
+//# sourceMappingURL=host-helper-config.d.ts.map

package/dist/cli/host-helper-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-helper-config.d.ts","sourceRoot":"","sources":["../../src/cli/host-helper-config.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AASnE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,IAAI,EAAE;QACJ,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,gBAAgB,CAY1D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+BhG"}