sui-spec 0.1.15

Declarative Lisp-authored specs for CppNix-parity behaviors. Rust types are the hard boundary; Lisp forms are the free-middle authoring surface. Both engines (tree-walker + VM) drive the same spec, so they cannot drift.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

;; Typed store-content transformations.
;;
;; Each (defstore-transform …) declares a pure-Rust mutation
;; applied to a ParsedNar tree.  Three kinds:
;;
;;   FileContents       — regex match-and-replace over file bytes
;;   StorePathReference — graft (replace) hash prefixes everywhere
;;                        (file contents + symlink targets)
;;   EntryName          — rename top-level directory entries
;;
;; Operators reference transforms by name when invoking
;; `sui store transform <slice> <transform>`.

;; ── redact-base64-secrets ─────────────────────────────────────
;;
;; Long base64-ish blobs in file contents are usually accidental
;; secrets (signing keys, tokens).  This transform redacts every
;; ≥40-char base64 run.

(defstore-transform
  :name        "redact-base64-secrets"
  :description "Replace any base64-looking run ≥40 chars with [redacted]"
  :match-kind  FileContents
  :pattern     "[A-Za-z0-9+/=]{40,}"
  :replacement "[redacted]")

;; ── strip-comments ───────────────────────────────────────────
;;
;; Drop shell-style `# …\n` comment lines from file contents.
;; Useful when normalizing scripts for diff.

(defstore-transform
  :name        "strip-shell-comments"
  :description "Strip `# …` comment lines from file contents (line-mode regex)"
  :match-kind  FileContents
  :pattern     "(?m)^#[^\\n]*\\n"
  :replacement "")

;; ── rewrite-store-prefix-aaaaa-to-bbbbb ──────────────────────
;;
;; Example StorePathReference transform — replaces every
;; reference to /nix/store/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-*
;; with /nix/store/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-*.
;; Used by the test suite + as a working template for graft ops.

(defstore-transform
  :name        "graft-example-a-to-b"
  :description "Demonstration graft: rewrite aaaa…-prefixed refs to bbbb…"
  :match-kind  StorePathReference
  :pattern     "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  :replacement "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb")

;; ── lowercase-entry-names ────────────────────────────────────
;;
;; EntryName transform — leaves contents untouched but normalises
;; the directory tree's entry names.  Demonstrates the third
;; transform kind.

(defstore-transform
  :name        "downcase-share-doc"
  :description "Rename `share/Doc` → `share/doc` (case-normalisation)"
  :match-kind  EntryName
  :pattern     "^Doc$"
  :replacement "doc")