pray-cli 1.7.0

Package manager for the language placed before inference — Prayfile CLI (binary: pray)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

use crate::{current_signer, locked_package, lockfile_path, manifest_path, resolve_project};
use pray_core::hashing::sha256_prefixed;
use pray_core::lockfile::read_lockfile;
use pray_core::registry::{submit_confession, ConfessionSubmission};
use pray_core::{PrayError, PrayResult};
use std::time::{SystemTime, UNIX_EPOCH};

pub(crate) fn confess_command(
    package: Option<String>,
    from_lock: Option<String>,
    version: Option<String>,
    accepted: bool,
    rejected: bool,
    note: Option<String>,
    url: Option<String>,
) -> PrayResult<()> {
    if accepted == rejected {
        return Err(PrayError::Unsupported(
            "confess requires exactly one of --accepted or --rejected".to_string(),
        ));
    }

    let project = resolve_project(&manifest_path())?;
    let lockfile = read_lockfile(&lockfile_path()).ok();

    let (package_name, resolved_version, package_resolution) = if let Some(span_id) = from_lock {
        let lockfile = lockfile.as_ref().ok_or_else(|| {
            PrayError::Resolution("confess --from-lock requires an existing lockfile".to_string())
        })?;
        let span = lockfile
            .managed_span
            .iter()
            .find(|record| record.id == span_id)
            .ok_or_else(|| PrayError::Resolution(format!("lockfile span {span_id} not found")))?;
        let package_resolution = project
            .packages
            .iter()
            .find(|resolved_package| resolved_package.declaration.name == span.package)
            .ok_or_else(|| PrayError::Resolution(format!("package {} not found", span.package)))?;
        let locked_package = locked_package(lockfile, package_resolution).ok_or_else(|| {
            PrayError::Resolution(format!("lockfile package {} not found", span.package))
        })?;
        let resolved_version = match version {
            Some(requested_version) if requested_version != locked_package.version => {
                return Err(PrayError::Resolution(format!(
                    "lockfile span {} version {} does not match requested version {}",
                    span_id, locked_package.version, requested_version
                )));
            }
            Some(requested_version) => requested_version,
            None => locked_package.version.clone(),
        };
        (span.package.clone(), resolved_version, package_resolution)
    } else {
        let package_name = package
            .ok_or_else(|| PrayError::Unsupported("confess requires a package name".to_string()))?;
        let package_resolution = project
            .packages
            .iter()
            .find(|resolved_package| resolved_package.declaration.name == package_name)
            .ok_or_else(|| PrayError::Resolution(format!("package {package_name} not found")))?;
        let resolved_version = match version {
            Some(requested_version) if requested_version != package_resolution.spec.version => {
                return Err(PrayError::Resolution(format!(
                    "package {package_name} version {} does not match resolved version {}",
                    requested_version, package_resolution.spec.version
                )));
            }
            Some(requested_version) => requested_version,
            None => package_resolution.spec.version.clone(),
        };
        (package_name, resolved_version, package_resolution)
    };

    let source_name = package_resolution
        .declaration
        .source
        .as_ref()
        .ok_or_else(|| {
            PrayError::Resolution(format!("package {package_name} is missing a source"))
        })?;
    let source_url = if let Some(url) = url {
        url
    } else {
        project
            .manifest
            .sources
            .iter()
            .find(|source| source.name == *source_name)
            .map(|source| source.url.clone())
            .ok_or_else(|| PrayError::Resolution(format!("unknown source: {source_name}")))?
    };

    let lockfile_reference = lockfile
        .as_ref()
        .and_then(|lockfile| lockfile.file_hash().ok());
    let timestamp = SystemTime::now()
        .duration_since(UNIX_EPOCH)
        .map_err(|error| PrayError::Resolution(error.to_string()))?
        .as_secs()
        .to_string();
    let mut confession = ConfessionSubmission {
        package: package_name.clone(),
        version: resolved_version,
        status: if accepted {
            "accepted".to_string()
        } else {
            "rejected".to_string()
        },
        note,
        lockfile: lockfile_reference,
        distribution_point: Some(source_url.clone()),
        signer: Some(current_signer()?),
        timestamp: Some(timestamp),
        signature: None,
    };
    let signature_payload =
        serde_json::to_vec(&confession).map_err(|error| PrayError::Manifest(error.to_string()))?;
    confession.signature = Some(sha256_prefixed(&signature_payload));
    submit_confession(&source_url, &confession)?;
    println!(
        "Confession submitted for {} {}",
        confession.package, confession.version
    );
    Ok(())
}