superpowers-manager 0.6.0 → 0.7.0

package/dist/snapshot-package.js

@@ -0,0 +1,78 @@
+import { createHash } from "node:crypto";
+import { lstat } from "node:fs/promises";
+import { join } from "node:path";
+import { addArtifactHashField, digestArtifactTree, readArtifactFile, } from "./artifact-tree.js";
+import { classifyPathNoFollow } from "./safe-path.js";
+import { validateSource } from "./selection.js";
+const OFFICIAL_SOURCES = new Set([
+    "https://github.com/obra/superpowers",
+    "https://github.com/obra/superpowers.git",
+    "ssh://git@github.com/obra/superpowers.git",
+    "git@github.com:obra/superpowers.git",
+]);
+export async function observeSnapshot(root, readReceipt) {
+    const kind = await classifyPathNoFollow(root);
+    if (kind === "missing")
+        return { kind: "absent" };
+    if (kind !== "directory")
+        return { kind: "unverified" };
+    try {
+        const receipt = await readReceipt(root);
+        const digest = await digestArtifactTree(root);
+        return receipt.digest === digest
+            ? { kind: "owned", receipt, digest }
+            : { kind: "unverified" };
+    }
+    catch {
+        return { kind: "unverified" };
+    }
+}
+export function isOfficialSnapshotSource(source) {
+    return OFFICIAL_SOURCES.has(source);
+}
+export function sameSnapshotSource(left, right) {
+    validateSource(left);
+    validateSource(right);
+    return (left === right ||
+        (isOfficialSnapshotSource(left) && isOfficialSnapshotSource(right)));
+}
+// A consistency checksum, not authentication. A coherent manual rewrite of
+// both receipt and bytes remains possible; installed comparison must still use
+// an independently validated candidate.
+export function snapshotReceiptBinding(receipt) {
+    const hash = createHash("sha256");
+    for (const field of [
+        String(receipt.schema),
+        receipt.manager,
+        receipt.harness,
+        receipt.source,
+        receipt.commit,
+        receipt.digest,
+    ])
+        addArtifactHashField(hash, Buffer.from(field));
+    return hash.digest("hex");
+}
+export function requireNoSnapshotDependencies(pkg) {
+    for (const key of [
+        "dependencies",
+        "optionalDependencies",
+        "peerDependencies",
+        "bundleDependencies",
+        "bundledDependencies",
+    ]) {
+        const value = pkg[key];
+        if (value !== undefined &&
+            (value === null ||
+                typeof value !== "object" ||
+                Object.keys(value).length !== 0))
+            throw new Error("runtime dependencies");
+    }
+}
+export async function requireSnapshotBootstrap(root, relativePath, expectedSize, expectedDigest) {
+    const bootstrap = join(root, relativePath);
+    const bytes = await readArtifactFile(root, bootstrap, expectedSize);
+    if ((await lstat(bootstrap)).mode & 0o111 ||
+        bytes.length !== expectedSize ||
+        createHash("sha256").update(bytes).digest("hex") !== expectedDigest)
+        throw new Error("bootstrap implementation");
+}

package/dist/snapshot-prepare.js

@@ -0,0 +1,99 @@
+import { writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { failureResult, successResult, } from "./adapter-result.js";
+import { ARTIFACT_RECEIPT, digestArtifactTree } from "./artifact-tree.js";
+import { materializeGitTree } from "./git-tree.js";
+import { classifyPathNoFollow } from "./safe-path.js";
+import { sameSnapshotSource, snapshotReceiptBinding, } from "./snapshot-package.js";
+export function createSnapshotPreparation(b) {
+    const artifactFrom = (root, a) => ({
+        root,
+        commit: a.receipt.commit,
+        identity: a.receipt.digest,
+        compatibility: a.compatibility,
+    });
+    return {
+        async prepareCandidate(input) {
+            try {
+                await materializeGitTree(input.upstreamRoot, input.selection.desiredCommit, input.candidateRoot);
+                const compatibility = await b.assessCompatibility(input.candidateRoot, input.selection);
+                if (compatibility.kind === "unsupported" ||
+                    compatibility.kind === "unknown")
+                    return failureResult("prepare", "unsupported", compatibility.reason, [], []);
+                const digest = await digestArtifactTree(input.candidateRoot);
+                const identity = {
+                    schema: 1,
+                    manager: "superpowers-manager",
+                    harness: b.harness,
+                    source: input.selection.effectiveSource,
+                    commit: input.selection.desiredCommit,
+                    digest,
+                };
+                const receipt = {
+                    ...identity,
+                    binding: snapshotReceiptBinding(identity),
+                    compatibility,
+                };
+                await writeFile(join(input.candidateRoot, ARTIFACT_RECEIPT), JSON.stringify(receipt) + "\n", { flag: "wx" });
+                return successResult("prepare", artifactFrom(input.candidateRoot, { receipt, compatibility }), []);
+            }
+            catch {
+                return failureResult("prepare", "invalid-package", `cannot prepare ${b.label} artifact: ${input.candidateRoot}`, [], []);
+            }
+        },
+        async inspectPrepared(selection, ctx) {
+            const root = b.preparationLocation(ctx).destinationRoot;
+            const unknown = {
+                kind: "unknown",
+                reason: `${b.label} prepared compatibility evidence is missing`,
+            };
+            try {
+                if ((await classifyPathNoFollow(join(root, ARTIFACT_RECEIPT))) ===
+                    "missing")
+                    return successResult("inspect-prepared", {
+                        kind: "needs-prepare",
+                        observedIdentity: "",
+                        compatibility: unknown,
+                    }, []);
+                const assessment = await b.readAssessment(root);
+                const { receipt, compatibility } = assessment;
+                if (receipt.commit !== selection.desiredCommit ||
+                    !sameSnapshotSource(receipt.source, selection.effectiveSource))
+                    return successResult("inspect-prepared", {
+                        kind: "needs-prepare",
+                        observedIdentity: receipt.digest,
+                        compatibility: unknown,
+                    }, []);
+                if (compatibility.kind !== "supported" &&
+                    compatibility.kind !== "experimental")
+                    return successResult("inspect-prepared", {
+                        kind: "needs-prepare",
+                        observedIdentity: receipt.digest,
+                        compatibility,
+                    }, []);
+                return successResult("inspect-prepared", {
+                    kind: "current",
+                    artifact: artifactFrom(root, assessment),
+                    observedIdentity: receipt.digest,
+                    compatibility,
+                }, []);
+            }
+            catch {
+                return failureResult("inspect-prepared", "invalid-package", `cannot inspect ${b.label} prepared artifact: ${root}`, [], []);
+            }
+        },
+        async readPrepared(ctx) {
+            const root = b.preparationLocation(ctx).destinationRoot;
+            try {
+                const assessment = await b.readAssessment(root);
+                if (assessment.compatibility.kind !== "supported" &&
+                    assessment.compatibility.kind !== "experimental")
+                    throw new Error("unsupported profile");
+                return successResult("read-prepared", artifactFrom(root, assessment), []);
+            }
+            catch {
+                return failureResult("read-prepared", "invalid-package", `cannot read ${b.label} prepared artifact: ${root}`, [], []);
+            }
+        },
+    };
+}

package/dist/snapshot-presentation.js

@@ -0,0 +1,44 @@
+export function createSnapshotPresentation(label, renderProbe, wasAbsent) {
+    return {
+        installNotice: "",
+        currentNotice: `The Superpowers ${label} snapshot is current.`,
+        renderProbe,
+        renderInstallVerification(_desired, receipt, inspection) {
+            if (receipt.status !== 0 || !receipt.outcome.ok)
+                return {
+                    stdout: [],
+                    stderr: [
+                        `error: ${label} activation did not return a verified installation receipt`,
+                    ],
+                };
+            if (inspection.status !== 0 || !inspection.outcome.ok)
+                return receipt.outcome.result.missingVerificationOutput;
+            if (inspection.outcome.result.kind === "current")
+                return {
+                    stdout: [
+                        `Installed the frozen Superpowers ${label} snapshot. Restart ${label} to load it.`,
+                    ],
+                    stderr: [],
+                };
+            return inspection.outcome.result.kind === "absent"
+                ? receipt.outcome.result.missingVerificationOutput
+                : receipt.outcome.result.mismatchVerificationOutput;
+        },
+        renderRemovalCompletion(_ownership, input) {
+            return {
+                stdout: [
+                    wasAbsent(input)
+                        ? `No managed Superpowers ${label} installation is present.`
+                        : `Removed the managed Superpowers ${label} installation. Restart ${label} to load the resulting state.`,
+                ],
+                stderr: [],
+            };
+        },
+        callFailure(site) {
+            return {
+                unexpected: `${label} ${site} did not complete`,
+                invalidStatus: `${label} ${site} returned an invalid status`,
+            };
+        },
+    };
+}

package/dist/validator.js

@@ -93,8 +93,11 @@ export function runValidator(argv, policy, env, workspace, cwd) {
         // not an unhandled rejection -- which is what this try/catch prevents.
         let child;
         try {
+            const childEnvironment = policy.inheritEnvironment === false
+                ? { ...env, TMPDIR: workspace }
+                : { ...process.env, ...env, TMPDIR: workspace };
             child = spawn(command, args, {
-                env: { ...process.env, ...env, TMPDIR: workspace },
+                env: childEnvironment,
                 cwd,
                 stdio: ["ignore", "pipe", "pipe"],
                 // The child leads its own process group so a timeout can signal the GROUP --

package/node_modules/jsonc-parser/CHANGELOG.md

@@ -0,0 +1,76 @@
+3.3.0 2022-06-24
+=================
+- `JSONVisitor.onObjectBegin` and `JSONVisitor.onArrayBegin` can now return `false` to instruct the visitor that no children should be visited.
+
+
+3.2.0 2022-08-30
+=================
+- update the version of the bundled Javascript files to `es2020`.
+- include all `const enum` values in the bundled JavaScript files (`ScanError`, `SyntaxKind`, `ParseErrorCode`).
+
+3.1.0 2022-07-07
+==================
+  * added new API `FormattingOptions.keepLines` : It leaves the initial line positions in the formatting.
+
+3.0.0 2020-11-13
+==================
+  * fixed API spec for `parseTree`. Can return `undefine` for empty input.
+  * added new API `FormattingOptions.insertFinalNewline`.
+
+
+2.3.0 2020-07-03
+==================
+  * new API `ModificationOptions.isArrayInsertion`: If `JSONPath` refers to an index of an array and `isArrayInsertion` is `true`, then `modify` will insert a new item at that location instead of overwriting its contents.
+  * `ModificationOptions.formattingOptions` is now optional. If not set, newly inserted content will not be formatted.
+
+
+2.2.0 2019-10-25
+==================
+  * added `ParseOptions.allowEmptyContent`. Default is `false`.
+  * new API `getNodeType`: Returns the type of a value returned by parse.
+  * `parse`: Fix issue with empty property name
+
+2.1.0 2019-03-29
+==================
+ * `JSONScanner` and `JSONVisitor` return lineNumber / character.
+
+2.0.0 2018-04-12
+==================
+  * renamed `Node.columnOffset` to `Node.colonOffset`
+  * new API `getNodePath`: Gets the JSON path of the given JSON DOM node
+  * new API `findNodeAtOffset`: Finds the most inner node at the given offset. If `includeRightBound` is set, also finds nodes that end at the given offset.
+
+1.0.3 2018-03-07
+==================
+  * provide ems modules
+
+1.0.2 2018-03-05
+==================
+  * added the `visit.onComment` API, reported when comments are allowed.
+  * added the `ParseErrorCode.InvalidCommentToken` enum value, reported when comments are disallowed.
+
+1.0.1
+==================
+  * added the `format` API: computes edits to format a JSON document.
+  * added the `modify` API: computes edits to insert, remove or replace a property or value in a JSON document.
+  * added the `allyEdits` API: applies edits to a document
+
+1.0.0
+==================
+ * remove nls dependency (remove `getParseErrorMessage`)
+
+0.4.2 / 2017-05-05
+==================
+ * added `ParseError.offset` & `ParseError.length`
+
+0.4.1 / 2017-04-02
+==================
+ * added `ParseOptions.allowTrailingComma`
+
+0.4.0 / 2017-02-23
+==================
+  * fix for `getLocation`. Now `getLocation` inside an object will always return a property from inside that property. Can be empty string if the object has no properties or if the offset is before a actual property  `{ "a": { | }} will return location ['a', ' ']`
+
+0.3.0 / 2017-01-17
+==================
+  * Updating to typescript 2.0

package/node_modules/jsonc-parser/LICENSE.md

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) Microsoft
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.