on master help sign in
104 files changed+4792−2408
since splitsnapshots
unifiedsplit
.github/pull_request_template.md+10 .gitignore+1 .hlint.yaml+65 CONTRIBUTING.md+52 ChangeLog.md+107−1 FAQ.md+62−67 LICENSE+30 README.md+107−129 acme.nix+209−176 all-builds.nix+113 all-tests.nix+145 default.nix+227−198 dep/.gitignore−5 dep/gitignore.nix/default.nix+8 dep/gitignore.nix/github.json+8 dep/nixpkgs-19.09/default.nix → dep/hnix/default.nix dep/hnix/github.json+7 dep/nixpkgs-19.09/github.json−7 dep/reflex-platform/default.nix+1−6 dep/reflex-platform/github.json+4−3 dep/reflex-platform/thunk.nix+9 dep/snap-core/default.nix+8 dep/snap-core/github.json+8 docs/obelisk-logo-640.png guides/app-deploy/README.md+324 guides/app-deploy/assets/android-app.jpg guides/app-deploy/assets/android-confirm-usb-debugging.jpg guides/app-deploy/assets/app-deploy-2.png guides/app-deploy/assets/app-deploy.png guides/app-deploy/assets/ios-deploy-example.png guides/app-deploy/assets/ios-deploy-keychain.png guides/app-deploy/assets/ios-obelisk-app-icon.jpg guides/app-deploy/assets/ios-obelisk-app-open.jpg guides/app-deploy/assets/nano-edit-nixos-configuration.png guides/app-deploy/assets/virtualbox-appliance-import-loading.png guides/app-deploy/assets/virtualbox-appliance-import.png guides/app-deploy/assets/virtualbox-dashboard-nixos.png guides/app-deploy/assets/virtualbox-image-settings-network.png guides/app-deploy/assets/virtualbox-nioxs-after-boot.png guides/app-deploy/assets/xcode-devices.png haskell-overlays/ghcide.nix+40 haskell-overlays/misc-deps.nix+26 haskell-overlays/obelisk.nix+48 haskell-overlays/tighten-ob-exes.nix+32 jobsets.nix−71 lib/asset/README.md+17−20 lib/asset/assets.nix+28−5 lib/asset/manifest/obelisk-asset-manifest.cabal+4−2 lib/asset/manifest/src/Obelisk/Asset/Symlink.hs+1−1 lib/asset/serve-snap/obelisk-asset-serve-snap.cabal+4−2 lib/asset/serve-snap/src/Obelisk/Asset/Accept.hs+6−6 lib/asset/serve-snap/src/Obelisk/Asset/Serve/Snap.hs+15−5 lib/backend/obelisk-backend.cabal+2−2 lib/backend/src/Obelisk/Backend.hs+120−36 lib/cliapp/obelisk-cliapp.cabal+6−3 lib/cliapp/src/Obelisk/CliApp.hs+18−6 lib/cliapp/src/Obelisk/CliApp/Demo.hs−53 lib/cliapp/src/Obelisk/CliApp/Logging.hs+13−12 lib/cliapp/src/Obelisk/CliApp/Process.hs+137−51 lib/cliapp/src/Obelisk/CliApp/Spinner.hs−1 lib/command/obelisk-command.cabal+16−14 lib/command/src/Obelisk/Command.hs+190−154 lib/command/src/Obelisk/Command/Deploy.hs+119−101 lib/command/src/Obelisk/Command/Nix.hs+67−27 lib/command/src/Obelisk/Command/Preprocessor.hs+100 lib/command/src/Obelisk/Command/Project.hs+136−51 lib/command/src/Obelisk/Command/Run.hs+490−193 lib/command/src/Obelisk/Command/Thunk.hs+613−357 lib/command/src/Obelisk/Command/Upgrade/Hash.hs−114 lib/command/src/Obelisk/Command/Utils.hs+91−19 lib/command/src/Obelisk/Command/VmBuilder.hs+9−9 lib/executable-config/default.nix+37−19 lib/executable-config/inject/obelisk-executable-config-inject.cabal+1−1 lib/executable-config/lookup/obelisk-executable-config-lookup.cabal+11−8 lib/executable-config/lookup/src-other/Obelisk/ExecutableConfig/Lookup.hs+1−8 lib/executable-config/lookup/src/Obelisk/Configs.hs+31−12 lib/frontend/obelisk-frontend.cabal+1−1 lib/frontend/src/Obelisk/Frontend.hs+9−9 lib/frontend/src/Obelisk/Frontend/Cookie.hs+2−1 lib/route/README.md+6 lib/route/obelisk-route.cabal+2−1 lib/route/src/Obelisk/Route.hs+110−57 lib/route/src/Obelisk/Route/Frontend.hs+121−44 lib/run/obelisk-run.cabal+2−2 lib/run/src/Obelisk/Run.hs+15−10 lib/selftest/obelisk-selftest.cabal+6−3 lib/selftest/src/Obelisk/SelfTest.hs+497−197 lib/snap-extras/obelisk-snap-extras.cabal+2−3 lib/snap-extras/src/Obelisk/Snap/Extras.hs+2−2 lib/tabulation/src/Data/Tabulation.hs+1−1 nixpkgs-overlays/default.nix+15 release.nix+8−95 scripts/ghcid-this-lib−4 skeleton/.gitignore+13−5 skeleton/backend/backend.cabal+2−1 skeleton/backend/src/Backend.hs−3 skeleton/cabal.project+1 skeleton/common/common.cabal+1−3 skeleton/common/src/Common/Route.hs+1 skeleton/default.nix+10−3 skeleton/frontend/frontend.cabal+7−4 skeleton/frontend/src/Frontend.hs+21−3 skeleton/shell.nix−1 skeleton/static/main.css+3
.github/pull_request_template.mdnew file+10
@@ -0,0 +1,10 @@
1+<!-- Provide a clear overview of your changes. -->
2+
3+I have:
4+
5+ - [ ] Based work on latest `develop` branch
6+ - [ ] Followed the [contribution guide](https://github.com/obsidiansystems/obelisk/blob/develop/CONTRIBUTING.md#submitting-changes)
7+ - [ ] Looked for lint in my changes with `hlint .` (lint found code you did not write can be left alone)
8+ - [ ] Run the test suite: `$(nix-build -A selftest --no-out-link)`
9+ - [ ] [Updated the changelog](https://github.com/obsidiansystems/obelisk/blob/develop/CONTRIBUTING.md#in-the-changelog)
10+ - [ ] (Optional) Run CI tests locally: `nix-build release.nix -A build.x86_64-linux --no-out-link` (or `x86_64-darwin` on macOS)
.gitignore+1
@@ -2,6 +2,7 @@
22**/.cabal-sandbox
33**/cabal.sandbox.config
44result
5+result-*
56*.o
67*.hi
78TAGS
.hlint.yamlnew file+65
@@ -0,0 +1,65 @@
1+# HLint configuration file
2+# https://github.com/ndmitchell/hlint
3+##########################
4+
5+# This file contains a template configuration file, which is typically
6+# placed as .hlint.yaml in the root of your project
7+
8+
9+# Specify additional command line arguments
10+#
11+# - arguments: [--color, --cpp-simple, -XQuasiQuotes]
12+
13+
14+# Control which extensions/flags/modules/functions can be used
15+#
16+# - extensions:
17+# - default: false # all extension are banned by default
18+# - name: [PatternGuards, ViewPatterns] # only these listed extensions can be used
19+# - {name: CPP, within: CrossPlatform} # CPP can only be used in a given module
20+#
21+# - flags:
22+# - {name: -w, within: []} # -w is allowed nowhere
23+#
24+# - modules:
25+# - {name: [Data.Set, Data.HashSet], as: Set} # if you import Data.Set qualified, it must be as 'Set'
26+# - {name: Control.Arrow, within: []} # Certain modules are banned entirely
27+#
28+# - functions:
29+# - {name: unsafePerformIO, within: []} # unsafePerformIO can only appear in no modules
30+
31+
32+# Add custom hints for this project
33+#
34+# Will suggest replacing "wibbleMany [myvar]" with "wibbleOne myvar"
35+# - error: {lhs: "wibbleMany [x]", rhs: wibbleOne x}
36+
37+
38+# Turn on hints that are off by default
39+#
40+# Ban "module X(module X) where", to require a real export list
41+# - warn: {name: Use explicit module export list}
42+#
43+# Replace a $ b $ c with a . b $ c
44+# - group: {name: dollar, enabled: true}
45+#
46+# Generalise map to fmap, ++ to <>
47+# - group: {name: generalise, enabled: true}
48+
49+
50+# Ignore some builtin hints
51+- ignore: {name: Redundant do}
52+- ignore: {name: Redundant flip}
53+- ignore: {name: Use <$>}
54+- ignore: {name: Use camelCase}
55+- ignore: {name: Use if}
56+- ignore: {name: Use unless}
57+# - ignore: {name: Use const, within: SpecialModule} # Only within certain modules
58+
59+
60+# Define some custom infix operators
61+# - fixity: infixr 3 ~^#^~
62+
63+
64+# To generate a suitable file for HLint do:
65+# $ hlint --default > .hlint.yaml
CONTRIBUTING.md+52
@@ -8,6 +8,7 @@ Contributions and issue reports are encouraged and appreciated!
88 - [Guidelines for Pull Requests](#guidelines-for-pull-requests)
99 - [Code Quality](#code-quality)
1010 - [Documentation](#documentation)
11+- [Development Environment](#development-environment)
1112
1213## Opening Issues
1314
@@ -39,6 +40,7 @@ For breaking changes, new features, refactors, or other major changes, the body
3940
4041Wherever possible, pull requests should add a single feature or fix a single bug. Pull requests should not bundle several unrelated changes.
4142
43+
4244### Code Quality
4345
4446#### Warnings
@@ -77,3 +79,53 @@ Add an entry to the changelog when your PR:
7779#### In the [Readme](README.md)
7880The readme is the first place a lot of people look for information about the repository. Update any parts of the readme that are affected by your PR.
7981
82+
83+## Development Environment
84+
85+There are two ways to get live compiler feedback while developing Obelisk libraries. For libraries that are dependencies of the `skeleton` application, the easiest way to get feedback is to
86+
87+```bash
88+cd skeleton
89+ob run
90+```
91+
92+This `ob run` session only loads modules that are dependencies of the skeleton and `obelisk-run`. For example, `obelisk-asset` and `obelisk-route` are used by the skeleton.
93+
94+For other libraries like `obelisk-command` you can use `ghcid`. To launch `ghcid` for `lib/command` you can run
95+
96+```bash
97+nix-shell -A obeliskEnvs.obelisk-command --run "cd lib/command && ghcid"
98+```
99+
100+### Building `ob` for testing
101+
102+To re-install `ob` from source globally you can do
103+
104+```bash
105+nix-env -f /path/to/obelisk -iA command
106+```
107+
108+You can also open a shell with the local version of `ob` available on your `$PATH`:
109+
110+```bash
111+nix run -f /path/to/obelisk command
112+```
113+
114+### Hacking on Obelisk from within an Obelisk project
115+
116+`ob` will defer to the version found in your project's `.obelisk/impl` directory. To work on that version specifically:
117+
118+```bash
119+ob thunk unpack ./.obelisk/impl
120+cd ./.obelisk/impl
121+# apply your changes
122+```
123+
124+If you want to commit your changes, first push them to your fork of obelisk and then
125+
126+```bash
127+cd /your/project/root
128+ob thunk pack .obelisk/impl
129+git add .obelisk/impl
130+git commit -m "Bump obelisk"
131+```
ChangeLog.md+107−1
@@ -1,9 +1,115 @@
11# Revision history for obelisk
22
3−This project's release branch is `master`. This log is written from the perspective of the release branch: when changes hit `master`, they are considered released, and the date should reflect that release.
3+This project's release branch is `master`. This log is written from the perspective of the release branch: when changes hit `master`, they are considered released.
4+
5+## v0.9.1.0
6+
7+* [#801](https://github.com/obsidiansystems/obelisk/pull/801): Remove errors and warning for local packages without a library component
8+* [#812](https://github.com/obsidiansystems/obelisk/pull/812): Add support for `NoImplicitPrelude` and other extensions disabled via `No`
9+* Pinned version bumps:
10+ * reflex-platform [0.7.0.0](https://github.com/reflex-frp/reflex-platform/releases/tag/v0.7.0.0)
11+ * hnix 0.8.0
12+* [#787](https://github.com/obsidiansystems/obelisk/pull/787): Set `immutable` cache control directive when serving content-addressed static assets
13+* Use iOS SDK 13.2
14+
15+
16+## v0.9.0.1
17+
18+* ([#810](https://github.com/obsidiansystems/obelisk/pull/810)) Fix loading of `all.js` in fully compiled web apps.
19+
20+## v0.9.0.0
21+
22+* **(Breaking change)** Backport nixpkgs upgrades to ACME/Let's Encrypt handling so that HTTPS deployments continue to work flawlessly. If your deployment is having trouble renewing [Let's Encrypt](https://letsencrypt.org/) certificates, upgrade to this version.
23+ * **IMPORTANT:** In order to use [Let's Encrypt](https://letsencrypt.org/) you must now accept their [terms of service](https://letsencrypt.org/repository/). To do that, add `terms.security.acme.acceptTerms = true;` to the `import ./.obelisk/impl {` section in your `default.nix`. The new skeleton application may serve as an [example](https://github.com/obsidiansystems/obelisk/blob/4759342ab3570888c027d4c58cb5694cb832d624/skeleton/default.nix#L13).
24+* Update reflex-platform dependency to v0.6.0.0
25+* ([#715](https://github.com/obsidiansystems/obelisk/pull/715)) In `Obelisk.Route` deprecate `isoEncoder` and `prismEncoder` in favor of more precisely named `viewEncoder` and `reviewEncoder` (respectively) and improve documentation regarding contravariance of `reviewEncoder`.
26+* ([#739](https://github.com/obsidiansystems/obelisk/pull/739)) Improve `ob shell` by allowing commands to be passed verbatim after a `--` argument. For example, `ob shell 'run command'` can now be written `ob shell -- run command`.
27+* ([#735](https://github.com/obsidiansystems/obelisk/pull/735)) Fix regression causing custom `Prelude`s to break `ob run`/`ob watch`/`ob repl`.
28+* ([#737](https://github.com/obsidiansystems/obelisk/pull/737)) Fix bug causing custom `Prelude`s to break `ob profile`.
29+* ([#752](https://github.com/obsidiansystems/obelisk/pull/752)) Fix the `ob` command-line tool to return non-zero exit code when underlying processes fail.
30+* ([#742](https://github.com/obsidiansystems/obelisk/pull/742), [#57](https://github.com/obsidiansystems/obelisk/pull/57), [#406](https://github.com/obsidiansystems/obelisk/pull/406)) Enable `-dedupe` and `-DGHCJS_BROWSER` in GHCJS builds to make JavaScript output considerably smaller leading to faster load/parse times and faster build times.
31+ * **Migration:** New Obelisk projects will automatically benefit from this change, but existing projects need to apply a change similar to [this one](https://github.com/obsidiansystems/obelisk/blob/371cb3302085601c5ec73e9574d51c8b95e3e493/skeleton/frontend/frontend.cabal#L32-L34).
32+* ([#742](https://github.com/obsidiansystems/obelisk/pull/742)) Update `reflex-platform` which includes:
33+ * A new version of GHCJS where `-dedupe` is fixed.
34+
35+## v0.8.0.0
36+
37+* ([#674](https://github.com/obsidiansystems/obelisk/pull/674), [#711](https://github.com/obsidiansystems/obelisk/pull/711)) Introduce a new thunk format to support accessing the thunk's source directly when packed. When packed, thunks have an additional file called `thunk.nix` and `default.nix` is now a thin wrapper around that.
38+* ([#665](https://github.com/obsidiansystems/obelisk/pull/665)) Add `--interpret` and `--no-interpret` options to `ob run`/`ob watch`/`ob repl`/`ob shell`. These options allow you to pick which paths will be pre-compiled by `nix` when entering the shell/session and which won't. For example `ob run --no-interpret dep` will ensure that any dependencies found in `./dep` will be built by `nix` before loading the rest of the project into the `ghci` session. The same configuration for `ob shell` will ensure that those packages are built and available in the `ghc` package database inside the shell.
39+
40+ **NOTE:** `ob shell`'s default behavior is now different. By default it now behaves like `ob run`/`ob watch`/`ob repl` in that it does *not* pre-build any packages whose `.cabal` or `package.yaml` files are found in the project. To regain the previous behavior, use `ob shell --no-interpret . --interpret backend --interpret common --interpret frontend` from the project root.
41+* ([#695](https://github.com/obsidiansystems/obelisk/pull/695)) `ob deploy init` now requires that your obelisk project be a clean `git` checkout with pushed changes. It has always required that your obelisk project be a `git` repository, but it did not require that your local changes be committed and pushed. This new requirement is added to ensure users don't accidentally create a deployment pointing to an old version of the project.
42+* ([#705](https://github.com/obsidiansystems/obelisk/pull/705)) Add `Obelisk.Route.packTextEncoder` and generalize `Obelisk.Route.unpackTextEncoder` over any `Data.Text.Lens.IsText`.
43+* ([#712](https://github.com/obsidiansystems/obelisk/pull/712)) Update [`reflex-platform`](https://github.com/reflex-frp/reflex-platform) to version 0.5.3.0.
44+* ([#700](https://github.com/obsidiansystems/obelisk/pull/700)) Ensure `ob init` uses the thunk format of the target obelisk rather than the one currently running the init command. If a user had installed a version of obelisk with a new thunk format, a newly initialized skeleton of an older version would not be able to unpack its own `.obelisk/impl`.
45+* ([#693](https://github.com/obsidiansystems/obelisk/pull/693)) Fix a bug where some packages in `.attr-cache` directories would be incorrectly picked up and used instead of the correct ones when using `ob run`/`ob watch`/`ob repl`.
46+* ([#709](https://github.com/obsidiansystems/obelisk/pull/709)) Fix a bug in obelisk's preprocessor causing it to incorrectly skip files in some circumstances.
47+* ([#663](https://github.com/obsidiansystems/obelisk/pull/663)) Add **experimental** support for [`ghcide`](https://github.com/digital-asset/ghcide). See the README for more information.
48+* ([#714](https://github.com/obsidiansystems/obelisk/pull/714)) Miscellaneous improvements to CLI help and logging.
49+
50+## v0.7.0.1
51+
52+* Fix the version number for `ob` the command-line tool. ([#679](https://github.com/obsidiansystems/obelisk/pull/679))
53+
54+## v0.7.0.0
55+
56+* Fully support HTTP [Range](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Range) requests on static assets to support Safari. ([#664](https://github.com/obsidiansystems/obelisk/pull/664))
57+* Support non-EC2 deployments. ([#658](https://github.com/obsidiansystems/obelisk/pull/658))
58+* Fix `ob deploy test android` to work. ([#645](https://github.com/obsidiansystems/obelisk/pull/645))
59+* Fix vulnerability where Android deployments would leave signing keys in the nix store which is world readable. ([#645](https://github.com/obsidiansystems/obelisk/pull/645)) (Thanks to [kmicklas](https://github.com/kmicklas) for the report.)
60+* Add `Obelisk.Backend.runBackendWith` to allow several customizations. ([#668](https://github.com/obsidiansystems/obelisk/pull/668), [#644](https://github.com/obsidiansystems/obelisk/pull/644))
61+* Add `ob profile` command to run Obelisk projects with profiling. `ob profile` works like `ob run`, but instead of using `ghci`, it builds an executable that is built with profiling enabled. ([#654](https://github.com/obsidiansystems/obelisk/pull/654))
62+* Obelisk's `default.nix` now exposes `mkAssets` function which is used to construct the assets served by an Obelisk application. ([#651](https://github.com/obsidiansystems/obelisk/pull/651))
63+* Bump reflex-platform to v0.5.2.0. ([#671](https://github.com/obsidiansystems/obelisk/pull/671))
64+
65+## v0.6.0.0 - 2020-02-21
66+
67+* Fix a bug in `Obelisk.Route.Frontend` where `routeLink`, `routeLinkDynAttr`, and `dynRouteLink` would not behave exactly like `<a href="...">` when run by JavaScript. These functions now scroll to the top of the page when the link is clicked. ([#540](https://github.com/obsidiansystems/obelisk/pull/540))
68+* Fix a bug in `ob run`/`ob watch`/`ob repl` where nested Obelisk projects would also be loaded into the session. These are now ignored. ([#652](https://github.com/obsidiansystems/obelisk/pull/652))
69+* Improve behavior of `ob run`/`ob watch`/`ob repl` when multiple packages with the same name are encountered. Obelisk now issues a warning and tells you which one it will use. ([#653](https://github.com/obsidiansystems/obelisk/pull/653))
70+* Removed `Obelisk.Backend.mkRouteToUrl` since it is easily written in terms of `Obelisk.Route.renderObeliskRoute`:
71+
72+ mkRouteToUrl validFullEncoder (k :/ v) = renderObeliskRoute validFullEncoder (FullRoute_Frontend (ObeliskRoute_App k) :/ v)
73+
74+* Add `Obelisk.Backend.renderAllJsPath` to expose URL path to `ghcjs/all.js`. ([#545](https://github.com/obsidiansystems/obelisk/pull/545))
75+* Add argument to `serveDefaultObeliskApp`, `serveObeliskApp`, and `serveGhcjsApp` to take the path to `all.js` instead of hard-coding it. ([#545](https://github.com/obsidiansystems/obelisk/pull/545))
76+
77+## v0.5.0.0 - 2020-02-07
78+
79+* Add `Obelisk.Route.(?/)`, a convenience function for constructing routes nested in `Maybe`. ([#457](https://github.com/obsidiansystems/obelisk/pull/457))
80+* Add local unpacked packages to the `ob run`, `ob watch`, and `ob repl` sessions. Any `.cabal` or hpack package inside the current obelisk project will be loaded into the session. For `ob run`/`ob watch` this means the session will automatically reload when you save a source file in any of those packages. For `ob repl` it means that `:r` will reload changes to any of those packages. There are some edge cases where this integration is still rough. Report any issues you encounter. ([#489](https://github.com/obsidiansystems/obelisk/pull/489))
81+* Add `ob hoogle` command to start a local [Hoogle](https://hoogle.haskell.org/) server for the project. ([#628](https://github.com/obsidiansystems/obelisk/pull/628))
82+* `ob thunk pack` will now attempt to automatically detect if the thunk is a private or public repo. To avoid this detection, specify `--private` or `--public` manually. ([#607](https://github.com/obsidiansystems/obelisk/pull/607))
83+* Fix a bug in the plain git thunk loader for thunks marked as 'private' when the revision is not in the default branch. ([#648](https://github.com/obsidiansystems/obelisk/pull/648))
84+* Improve handling of runtime nix dependencies. This may fix some issues encountered particularly by users on systems other than NixOS.
85+
86+## v0.4.0.0 - 2020-01-10
87+
88+* Bump reflex-platform which, notably, bumps nixpkgs to 19.09. ([#585](https://github.com/obsidiansystems/obelisk/pull/585))
89+* Add new thunk loader for Git repositories that supports `file://` Git remotes and supports private repositories via `builtins.fetchGit` for private repositories (when the `git.json` file specifies `"private": true`). ([#594](https://github.com/obsidiansystems/obelisk/pull/594))
90+* Add a new thunk loader for GitHub repositories that uses `builtins.fetchTarball` for public repositories to increase loader performance and uses `fetchFromGitHub` for private repositories (when the `github.json` file specifies `"private": true`). Note that `fetchFromGitHub` requires some Nix configuration for the Nix builder to access the repository. If `ob thunk pack` fails in this case, use `-v` to see Nix's helpful message. ([#594](https://github.com/obsidiansystems/obelisk/pull/594))
91+* Add `--public`/`--private` options to `ob thunk pack` to specify if a repository should be treated as a public or private. ([#594](https://github.com/obsidiansystems/obelisk/pull/594))
92+* Improve error messaging when a dependency doesn't have the expected `.cabal` or `package.yaml` file. ([#597](https://github.com/obsidiansystems/obelisk/pull/597))
93+* Improve the skeleton in small ways. ([#593](https://github.com/obsidiansystems/obelisk/pull/593), [#589](https://github.com/obsidiansystems/obelisk/pull/589))
94+* Fix `ob` commands to again support running from any subdirectory of an obelisk project ([#591](https://github.com/obsidiansystems/obelisk/pull/591))
95+* Add `reflex-platform-func` argument to Obelisk's `default.nix`. It defaults to its prior behavior of using the reflex-platform in in `dep`. ([#612](https://github.com/obsidiansystems/obelisk/pull/612))
496
597## v0.3.0.0 - 2019-12-20
698
99+* Change the structure of Obelisk routes to use a designated
100+ `FullRoute` type. This combines frontend and backend routes into one
101+ structure. This is a **breaking** change which requires Obelisk apps
102+ to take specific migrations. They are:
103+ * Rewrite the implementation of `_backend_routeEncoder` in
104+ `Backend` to use `mkFullRouteEncoder` instead of
105+ `handleEncoder`. Specifically, the backend and frontend cases of
106+ the top-level `pathComponentEncoder` become the second and third
107+ arguments of `mkFullRouteEncoder` respectively, while the
108+ missing route becomes the first argument. An example of how to
109+ do this is available in [a reflex-examples
110+ commit](https://github.com/reflex-frp/reflex-examples/commits/28f566c3e7dc615578dc74297b7c620c1f13683e).
111+ * Replace type constructions of `InL` with `FullRoute_Backend` and
112+ `InR` with `FullRoute_Frontend`.
7113* Generalised `pathSegmentEncoder`, added `pathFieldEncoder`.
8114* Added some `Prism`s to the encoder library for manipulating `DSum`s.
9115* Add `ob doc` command, which lists paths to haddock documentation for specified packages.
FAQ.md+62−67
@@ -1,14 +1,70 @@
11# Frequently Asked Questions
22
3−1. [How do I fix invalid entitlements? ](#how-do-i-fix-invalid-entitlements)
3+1. [How do I declare a new Haskell dependency?](#how-do-i-declare-a-new-haskell-dependency)
4+1. [How do I add or override Haskell dependencies in the package set?](#how-do-i-add-or-override-haskell-dependencies-in-the-package-set)
5+1. [How do I extend my Obelisk application with more local packages?](#how-do-i-extend-my-obelisk-application-with-more-local-packages)
6+1. [How do I use `ob run` over HTTPS?](#how-do-i-use-ob-run-over-https)
7+1. [How do I fix invalid entitlements?](#how-do-i-fix-invalid-entitlements)
481. [`ob thunk update` or `ob deploy update` fails](#ob-thunk-update-or-ob-deploy-update-fails)
591. [How do I fix `Ambiguous module name` errors?](#how-do-i-fix-ambiguous-module-name-errors)
6−1. [What does `ob run` actually do?](#what-does-ob-run-actually-do)
10+
11+### How do I declare a new Haskell dependency?
12+
13+Every component of your Obelisk application is a standard [cabal](https://www.haskell.org/cabal/) package. That means declaring new Haskell dependencies simply involves updating the `build-depends` field in the appropriate cabal file (`backend.cabal` for example). By default, Obelisk will use its curated package set to choose which version of each package you get. It's possible that the package you need is not already in the curated set or the curated version isn't the one you want. See [How do I add or override Haskell dependencies in the package set?](#how-do-i-add-or-override-haskell-dependencies-in-the-package-set) for a solution to this.
14+
15+### How do I add or override Haskell dependencies in the package set?
16+
17+To add a Haskell package that doesn't exist in Obelisk's package set or to override the version of a package, use the `overrides` attribute in your project's `default.nix`. For example, to use a specific version of the `aeson` package fetched from GitHub and a specific version of the `waargonaut` package fetched from Hackage, your `default.nix` will look like:
18+
19+```nix
20+# ...
21+project ./. ({ pkgs, ... }: {
22+# ...
23+ overrides = self: super: let
24+ aesonSrc = pkgs.fetchFromGitHub {
25+ owner = "obsidiansystems";
26+ repo = "aeson-gadt-th";
27+ rev = "ed573c2cccf54d72aa6279026752a3fecf9c1383";
28+ sha256 = "08q6rnz7w9pn76jkrafig6f50yd0f77z48rk2z5iyyl2jbhcbhx3";
29+ };
30+ in
31+ {
32+ aeson = self.callCabal2nix "aeson" aesonSrc {};
33+ waargonaut = self.callHackageDirect {
34+ pkg = "waargonaut";
35+ ver = "0.8.0.1";
36+ sha256 = "1zv28np3k3hg378vqm89v802xr0g8cwk7gy3mr77xrzy5jbgpa39";
37+ } {};
38+ };
39+# ...
40+```
41+
42+For further information see [the Haskell section](https://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure) of nixpkgs "Contributors Guide".
43+
44+### How do I extend my Obelisk application with more local packages?
45+
46+If the standard packages (`frontend`, `backend`, and `common`) are not enough, you may add more local packages by defining them with the `packages` attribute in your `default.nix`. The sources of these packages will be automatically loaded by `ob run`/`ob repl`/etc.
47+
48+```nix
49+# ...
50+project ./. ({ pkgs, ... }: {
51+# ...
52+ packages = {
53+ another = ./dep/another;
54+ };
55+# ...
56+```
57+
58+### How do I use `ob run` over HTTPS?
59+
60+To run your app locally over HTTPS, update the protocol in `config/common/route` to `https`, and then use `ob run` as normal.
61+
62+Obelisk generates a self-signed certificate for running HTTPS so the browser will issue a warning about using an invalid certificate. On Chrome, you can go to `chrome://flags/#allow-insecure-localhost` to enable invalid certificates for localhost.
63+
764
865### How do I fix invalid entitlements?
966
10−You probably did not set `ios.bundleIdentifier` correctly in `default.nix`.
11−When this happens you'll see an error something like this:
67+You probably did not set `ios.bundleIdentifier` correctly in `default.nix`. When this happens you'll see an error something like this:
1268
1369```
14702018-11-25 09:34:22.438 ios-deploy[58106:8521046] [ !! ] Error 0xe8008016: The executable was signed with invalid entitlements. AMDeviceSecureInstallApplication(0, device, url, options, install_callback, 0)
@@ -19,7 +75,7 @@ Fixing the value of `ios.bundleIdentifier` should fix the error.
1975### `ob thunk update` or `ob deploy update` fails
2076Whenever an `ob` command fails, try re-running it with `-v`.
2177
22−If you're using a private repo, and you get a failure in nix-prefetch-url, you may need to unpack and repack the thunk. Here's some example output that shows this issue:
78+If you're using a private repo, and you get a failure in `nix-prefetch-url`, you may need to unpack and repack the thunk. Here's some example output that shows this issue:
2379
2480```
2581Starting Obelisk </nix/store/j8wls8a89xr6s1a47lg6g83gnbdrfd0l-obelisk-command-0.1/bin/.ob-wrapped> args=["deploy","update","-v"] logging-level=Debug
@@ -39,7 +95,7 @@ nix-prefetch-url: Failed to determine sha256 hash of URL https://github.com/obsi
3995
4096And here's how you can fix it:
4197
42−```
98+```bash
4399ob thunk unpack $SOME_THUNK
44100ob thunk pack $SOME_THUNK
45101```
@@ -59,64 +115,3 @@ error:
59115```
60116then specify the package you want in the import, e.g:
61117`import "cryptonite" Crypto.Hash`
62−
63−
64−### What does `ob run` actually do?
65−
66−
67−#### Short version:
68−
69−`ob run` starts a [`ghcid`](https://github.com/ndmitchell/ghcid) process which
70−tries to build your project within a carefully crafted `nix-shell` with all the
71−project's dependencies and,
72−
73−* either displays compilation errors/warnings,
74−* or starts the Obelisk server, which serves:
75− * your backend's route handlers,
76− * the static assets,
77− * the [JSaddle](https://github.com/ghcjs/jsaddle) frontend code (while opening its websocket).
78−
79−#### Longer version:
80−
81−Assuming we are in a project created with `ob init`, `ob run` calls (see
82−`lib/command/src/Obelisk/Command.hs`):
83−
84− nix-shell --pure -A shells.ghc --run 'ob --no-handoff internal run-static-io <real-run-function>'
85−
86−where
87−
88−* `shells.ghc` is defined in `./default.nix` by importing `./.obelisk/impl/default.nix` which
89− is `default.nix` in the present (Obelisk) repository,
90−* `run-static-io` is a logging-enabled command wrapper
91− (cf. `runObelisk` in `lib/command/src/Obelisk/App.hs`).
92−
93−In this case, it runs the function `Obelisk.Command.Command.run` (defined in
94−`lib/command/src/Obelisk/Command/Run.hs`).
95−
96−* It creates a GHCi config from a Nix expression which:
97− * loads three packages: `backend`, `common`, `frontend`,
98− * obtains a free port number.
99−* Then runs `ghcid`
100− * with a command that reruns `Obelisk.Run.run` at each restart (option
101− `--test`).
102−
103−It is defined in `lib/run/src/Obelisk/Run.hs`:
104−
105−* It creates a thread which starts the main backend.
106− This runs `runSnapWithCommandLineArgs` and passes routes:
107− * to the backend (result of the `_backend_run` field of your
108− implementation of the `Backend fullRoute frontendRoute` record),
109− * or to `serveDefaultObeliskApp` (`lib/backend/src/Obelisk/Backend.hs`) to
110− serve static assets.
111−* Starts `runWidget`
112− which itself runs
113− [runSettingsSocket](https://hackage.haskell.org/package/warp-3.2.26/docs/Network-Wai-Handler-Warp.html#v:runSettingsSocket)
114− (the *“TCP listen loop”*):
115− * it binds to TCP socket, and
116− * creates the HTTP connection manager
117− ( [`newManager`](https://hackage.haskell.org/package/http-client-0.6.3/docs/Network-HTTP-Client.html#v:newManager))
118− * calls `obeliskApp` which
119− * has a route to serve the [JSaddle](https://github.com/ghcjs/jsaddle) frontend,
120− * runs the frontend (*on* the server), to produce pre-rendered pages,
121− * starts the JSaddle web-socket,
122− * “falls back” to proxying the backend (`fallbackProxy`).
LICENSEnew file+30
@@ -0,0 +1,30 @@
1+Copyright (c) 2020 Obsidian Systems
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Elliot Cameron nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
README.md+107−129
@@ -1,88 +1,75 @@
11# Obelisk
22
3−Obelisk provides an easy way to develop and deploy your [Reflex](https://github.com/reflex-frp/reflex) project as web apps and as mobile apps.
3+[![Haskell Programming Language](https://img.shields.io/badge/language-Haskell-blue.svg)](http://www.haskell.org)
4+[![BSD3 License](http://img.shields.io/badge/license-BSD3-brightgreen.svg)](https://github.com/obsidiansystems/obelisk/blob/master/LICENSE)
45
6+<p align="center"><img src="docs/obelisk-logo-640.png" width="50%" alt="Obelisk Logo"></p>
7+
8+Functional reactive web and mobile applications, with batteries included. Obelisk's goal is to represent a cohesive, highly-curated set of choices that [Obsidian Systems](https://obsidian.systems/) has made for building these types of applications in a way that is extremely fast but does not compromise on production readiness.
9+
10+- [Overview](#overview)
11+ - [Who should consider using it?](#who-should-consider-using-it)
512- [Installing Obelisk](#installing-obelisk)
613- [Developing an Obelisk project](#developing-an-obelisk-project)
7− - [Hoogle](#hoogle)
8− - [Adding Packages](#adding-packages)
9− - [Adding Package Overrides](#adding-package-overrides)
10− - [Running over https](#running-over-https)
14+ - [IDE Support](#ide-support)
1115- [Deploying](#deploying)
16+ - [Default EC2 Deployment](#default-ec2-deployment)
17+ - [Custom Non-EC2 Deployment](#custom-non-ec2-deployment)
18+ - [VirtualBox Deployment](#virtualbox-deployment)
1219 - [Locally](#locally)
13− - [EC2](#ec2)
1420 - [From macOS](#from-macos)
1521 - [Deploying an updated version](#deploying-an-updated-version)
1622- [Mobile](#mobile)
1723 - [iOS](#ios)
1824 - [Android](#android)
25+- [Frequently Asked Questions (FAQ)](#frequently-asked-questions-faq)
26+- [Contributing](#contributing)
27+
28+## Overview
29+
30+Obelisk allows you to build high-quality web and mobile applications very quickly using [Reflex](https://reflex-frp.org/). In minutes you can go from an empty directory to an interactive application that works on web, iOS, and Android, all sharing the same Haskell codebase! Obelisk's development environment also enables extremely rapid development and feedback. You can take advantage of Haskell's type system across the frontend and backend boundary. This means changes to your backend that would break your frontend are immediately detected during development and vice versa. Obelisk uses Haskell's compiler to give you a complete "TODO list" of what needs to be updated.
31+
32+Obelisk is targeted primarily at Haskell developers who want to build high-quality web and/or mobile applications in Haskell, without the distractions of manually choosing and integrating technology for every piece of the system.
33+
34+### Who should consider using it?
35+
36+Obelisk assumes basic knowledge of [Haskell](https://www.haskell.org/) and [Reflex/Reflex-DOM](https://reflex-frp.org/), web technologies like [HTML](https://developer.mozilla.org/en-US/docs/Web/HTML) and [CSS](https://developer.mozilla.org/en-US/docs/Web/CSS), and a terminal shell like [Bash](https://en.wikipedia.org/wiki/Bash_(Unix_shell)). Knowledge of [Nix](https://nixos.org/) helps but is not strictly necessary.
37+
1938
2039## Installing Obelisk
40+
21411. [Install Nix](https://nixos.org/nix/).
2242 If you already have Nix installed, make sure you have version 2.0 or higher. To check your current version, run `nix-env --version`.
23431. Set up nix caches
2444 1. If you are running NixOS, add this to `/etc/nixos/configuration.nix`:
25− ```
45+ ```nix
2646 nix.binaryCaches = [ "https://nixcache.reflex-frp.org" ];
2747 nix.binaryCachePublicKeys = [ "ryantrinkle.com-1:JJiAKaRv9mWgpVAz8dwewnZe0AzzEAzPkagE9SP5NWI=" ];
2848 ```
2949 and rebuild your NixOS configuration (e.g. `sudo nixos-rebuild switch`).
30− 1. If you are using another operating system or linux distribution, ensure that these lines are present in your Nix configuration file (`/etc/nix/nix.conf` on most systems; [see full list](https://nixos.org/nix/manual/#sec-conf-file)):
50+ 1. If you are using another operating system or Linux distribution, ensure that these lines are present in your Nix configuration file (`/etc/nix/nix.conf` on most systems; [see full list](https://nixos.org/nix/manual/#sec-conf-file)):
51+ ```nix
52+ binary-caches = https://cache.nixos.org https://nixcache.reflex-frp.org
53+ binary-cache-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= ryantrinkle.com-1:JJiAKaRv9mWgpVAz8dwewnZe0AzzEAzPkagE9SP5NWI=
54+ binary-caches-parallel-connections = 40
3155 ```
32− binary-caches = https://cache.nixos.org https://nixcache.reflex-frp.org
33− binary-cache-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= ryantrinkle.com-1:JJiAKaRv9mWgpVAz8dwewnZe0AzzEAzPkagE9SP5NWI=
34− binary-caches-parallel-connections = 40
35− ```
36− * other Linux: enable sandboxing (see these [issue172](https://github.com/obsidiansystems/obelisk/issues/172#issuecomment-411507818) or [issue6](https://github.com/obsidiansystems/obelisk/issues/6) if you run into build problems)
37− ```
56+ * If you're on a Linux distribution other than NixOS, enable sandboxing (see these [issue 172](https://github.com/obsidiansystems/obelisk/issues/172#issuecomment-411507818) or [issue 6](https://github.com/obsidiansystems/obelisk/issues/6) if you run into build problems) by adding the following:
57+ ```nix
3858 sandbox = true
3959 ```
40− * MacOS: disable sandboxing (there are still some impure dependencies for now)
41− ```
60+ * If you're on MacOS, disable sandboxing (there are still some impure dependencies for now) by adding the following:
61+ ```nix
4262 sandbox = false
4363 ```
4464 then restart the nix daemon
45− ```
65+ ```bash
4666 sudo launchctl stop org.nixos.nix-daemon
4767 sudo launchctl start org.nixos.nix-daemon
4868 ```
49−1. Install obelisk: `nix-env -f https://github.com/obsidiansystems/obelisk/archive/master.tar.gz -iA command`
50−
51−### Contributing to Obelisk
52−
53−When developing on obelisk itself you may launch `ghcid` for the corresponding project as follows. For example to launch ghcid for `lib/backend` project:
54−
55−```
56−nix-shell -A obeliskEnvs.obelisk-backend --run "cd lib/backend && ghcid -c 'cabal new-repl'"
57−```
58−
59−Or to launch ghcid for `lib/command` project:
60−
61−```
62−nix-shell -A obeliskEnvs.obelisk-command --run "cd lib/command && ghcid -c 'cabal new-repl'"
63−```
64−
65−To re-install `ob` from source do
66−```
67−nix-env -f /path/to/obelisk -iA command
68−```
69−
70−Note that `ob` will defer to the version found in your project's `.obelisk/impl` directory. To update that version specifically:
71−
72−```shell
73−ob thunk unpack ./.obelisk/impl
74−cd ./.obelisk/impl
75−# apply your changes
76−```
77−
78−If you want to commit your changes, first push them to your fork of obelisk and then
79−
80−```shell
81−cd /your/project/root
82−ob thunk pack .obelisk/impl
83−git add .obelisk/impl
84−git commit -m "Bump obelisk"
85−```
69+1. Install obelisk:
70+ ```bash
71+ nix-env -f https://github.com/obsidiansystems/obelisk/archive/master.tar.gz -iA command
72+ ```
8673
8774### Accessing private repositories
8875
@@ -97,13 +84,13 @@ access to:
9784
9885To create a new Obelisk project, go to an empty directory and run:
9986
100−```
87+```bash
10188ob init
10289```
10390
10491Obelisk leverages ghcid to provide a live-reloading server that handles both frontend and backend. To run your Obelisk app and monitor the source for changes:
10592
106−```
93+```bash
10794ob run
10895```
10996
@@ -112,87 +99,29 @@ Firefox will not be able to properly run the development website due to [issue 4
11299
113100Every time you change the Haskell source files in frontend, common or backend, `ob run` will automatically recompile the modified files and reload the server. Furthermore, it will display on screen compilation errors and warnings if any.
114101
115−### Hoogle
116−
117−To enter a nix-shell from which you can run the hoogle command-line client or a hoogle server for your project:
118−
119−`nix-shell -A shells.ghc --arg withHoogle true`
120−
121−### Adding packages
122−
123−In order to add package dependencies, declare them under the build-depends field in the appropriate cabal files (backend, common, and frontend each have their own). The corresponding Nix packages will automatically be selected when building.
102+### IDE Support
124103
125−### Adding package overrides
126−
127−To add a version override to any Haskell package, or to add a Haskell package that doesn't exist in the nixpkgs used by Obelisk, use the `overrides` attribute in your project's `default.nix`. For example, to use a specific version of the `aeson` package fetched from GitHub and a specific version of the `waargonaut` package fetched from Hackage, your `default.nix` will look like:
128−
129−```nix
130−# ...
131−project ./. ({ pkgs, ... }: {
132−# ...
133− overrides = self: super: let
134− aesonSrc = pkgs.fetchFromGitHub {
135− owner = "obsidiansystems";
136− repo = "aeson-gadt-th";
137− rev = "ed573c2cccf54d72aa6279026752a3fecf9c1383";
138− sha256 = "08q6rnz7w9pn76jkrafig6f50yd0f77z48rk2z5iyyl2jbhcbhx3";
139− };
140− in
141− {
142− aeson = self.callCabal2nix "aeson" aesonSrc {};
143− waargonaut = self.callHackageDirect {
144− pkg = "waargonaut";
145− ver = "0.8.0.1";
146− sha256 = "1zv28np3k3hg378vqm89v802xr0g8cwk7gy3mr77xrzy5jbgpa39";
147− } {};
148− };
149−# ...
150−```
151−
152−For further information see [the Haskell section](https://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure) of nixpkgs Contributors Guide.
153−
154−### Running over https
155−
156−To run your app locally over https, update the protocol in `config/common/route` to `https`, and then use `ob run` as normal.
157−
158−Since Obelisk generates a self-signed certificate for running https, the browser will issue a warning about using an invalid certificate. On Chrome, you can go to `chrome://flags/#allow-insecure-localhost` to enable invalid certificates for localhost.
104+Obelisk officially supports terminal-based feedback (akin to [`ghcid`](https://github.com/ndmitchell/ghcid)) in `ob run` and `ob watch`.
159105
160106## Deploying
161107
162−### Locally
163−
164−Build everything:
165−
166−```
167−nix-build -A exe --no-out-link
168−```
169−
170−Copy the result to a new directory, add configuration, and run!
108+### Default EC2 Deployment
171109
172−```
173−mkdir test-app
174−ln -s $(nix-build -A exe --no-out-link)/* test-app/
175−cp -r config test-app
176−(cd test-app && ./backend)
177−```
178−
179−### EC2
180−
181−In this section we will demonstrate how to deploy your Obelisk app to an Amazon EC2 instance.
110+In this section we will demonstrate how to deploy your Obelisk app to an Amazon EC2 instance. Obelisk deployments are configured for EC2 by default (see [Custom Non-EC2 Deployment](#custom-non-ec2-deployment)).
182111
183112First create a new EC2 instance:
184113
185−1. Launch a NixOS 18.09 EC2 instance (we recommend [this AMI](https://console.aws.amazon.com/ec2/v2/home?region=us-east-1#LaunchInstanceWizard:ami=ami-009c9c3f1af480ff3))
114+1. Launch a NixOS 19.09 EC2 instance (we recommend [this AMI](https://console.aws.amazon.com/ec2/v2/home?region=us-east-1#LaunchInstanceWizard:ami=ami-00a8eeaf232a74f84))
1861151. In the instance configuration wizard ensure that your instance has at least 1GB RAM and 10GB disk space.
1871161. When prompted save your AWS private key (`~/myaws.pem`) somewhere safe. We'll need it later during deployment.
188−1. Go to "Security Groups", select your instance's security group and under "Inbound" tab add a new rule for HTTP port 80 and 443.
117+1. Go to "Security Groups", select your instance's security group and under "Inbound" tab add a new rule for HTTP port 80 and HTTPS port 443.
189118
190119At this stage your instance should be booting and become accessible shortly. Note down the hostname of your EC2 instance.
191120
192121Now go to your Obelisk project directory (`~/code/myapp`), and initialize a deployment config (`~/code/myapp-deploy`):
193122Your project directory must be "thunkable", i.e. something on which `ob thunk pack` can be called. Usually it will be a git repository whose current revision has been pushed upstream.
194123
195−```
124+```bash
196125cd ~/code/myapp
197126SERVER=ec2-35-183-22-197.ca-central-1.compute.amazonaws.com
198127ROUTE=https://myapp.com # Publicly accessible route to your app
@@ -205,13 +134,13 @@ ob deploy init \
205134 ~/code/myapp-deploy
206135```
207136
208−HTTPS is enabled by default; to disable https, pass `--disable-https` to the `ob deploy init` command above.
137+HTTPS is enabled by default; to disable HTTPS pass `--disable-https` to the `ob deploy init` command above.
209138
210139This step will also require that you manually verify the authenticity of the host `$SERVER`. Obelisk will save the fingerprint in a deployment-specific configuration. **Obelisk deployments do *not* rely on the `known_hosts` of your local machine.** This is because, in the event that you need to switch from one deploy machine / bastion host to another, you want to be absolutely sure that you're still connecting to the machines you think you are, even if that deploy machine / bastion host has never connected to them before. Obelisk explicitly avoids a workflow that encourages people to accept host keys without checking them, since that could result in leaking production secrets to anyone who manages to MITM you, e.g. via DNS spoofing or cache poisoning. (Note that an active attack is a circumstance where you may need to quickly switch bastion hosts, e.g. because the attacker has taken one down or you have taken it down in case it was compromised. In this circumstance you might need to deploy to production to fix an exploit or rotate keys, etc.) When you run `ob deploy` later it will rely on the saved verification in this step.
211140
212141Next, go to the deployment directory that you just initialized and deploy!
213142
214−```
143+```bash
215144cd ~/code/myapp-deploy
216145ob deploy push
217146```
@@ -220,6 +149,45 @@ ob deploy push
220149
221150At this point you are done. Your app will be accessible at `${ROUTE}`. The currently deployed version - the git commit hash of the source repo - can be found at `${ROUTE}/version`.
222151
152+### Custom Non-EC2 Deployment
153+
154+By default Obelisk deployments are configured for NixOS machines running on AWS EC2. To provide your own configuration, you need to write a custom `module.nix` in the deployment repository. This still requires that your server is running NixOS.
155+
156+`module.nix` must contain a Nix *function* that produces a [NixOS module function](https://nixos.org/nixos/manual/index.html#sec-writing-modules). The top-level function takes deployment configuration as arguments: `hostName`, `adminEmail`, `routeHost`, `enableHttps`, `version`, `exe`, `nixosPkgs`. Most of these are the values you specified during `ob deploy init` and are stored in the deployment repository. `version` is a `git` hash for the app that you're deploying. `exe` is the Linux build of the app (as seen in [Deploying Locally](#locally)). `nixosPkgs` is the package set used to construct the NixOS VM.
157+
158+The [VirtualBox Deployment](#virtualbox-deployment) section provides an example.
159+
160+#### VirtualBox Deployment
161+
162+Here's a `module.nix` that is configured for deployment to a VirtualBox VM (running NixOS):
163+
164+```nix
165+{ nixosPkgs, ... }: {...}: {
166+ imports = [ (nixosPkgs.path + /nixos/modules/virtualisation/virtualbox-image.nix) ];
167+}
168+```
169+
170+The `{...}:` and following is the [NixOS module](https://nixos.org/nixos/manual/index.html#sec-writing-modules) definition.
171+
172+### Locally
173+
174+If you want deploy your application locally or test a production-oriented build you can build and deploy the app as described below.
175+
176+Build the application:
177+
178+```bash
179+nix-build -A exe --no-out-link
180+```
181+
182+Copy the result to a new directory, add configuration, and run!
183+
184+```bash
185+mkdir test-app
186+ln -s $(nix-build -A exe --no-out-link)/* test-app/
187+cp -r config test-app
188+(cd test-app && ./backend)
189+```
190+
223191### From macOS
224192
225193Deploying from macOS requires some extra setup:
@@ -233,7 +201,7 @@ Running `ob deploy push` will give you additional setup instructions.
233201
234202If you'd like to deploy an updated version (with new commits) of your Obelisk app: simply go to the configuration directory, update the source thunk and push:
235203
236−```
204+```bash
237205cd ~/code/myapp-deploy
238206ob deploy update
239207ob deploy push
@@ -253,20 +221,20 @@ Your account must also belong to an Apple Developer Team, if you want to access
2532211. Click accept to authorize on both the computer and the iPhone.
254222
255223##### Xcode
256−Install Xcode 8.2 (contains iOS SDK 10.2) and open it so that it runs its post install tool setup.
224+Install Xcode 11.2 (contains iOS SDK 13.2) and open it so that it runs its post install tool setup.
257225
258226These versions will work out of the box but iOS SDKs prior to 11.3 should also work. You can choose another installed version in `default.nix`
259227
260228More recent Xcodes should also work, as long as one of the SDKs mentioned above has been used.
261229To add another SDK to your current Xcode, [download](https://developer.apple.com/download/more/) the corresponding Xcode, extract it and copy its SDK folder next to the installed one, e.g.
262−```
230+```bash
263231open -W Xcode_9.2.xip
264232sudo cp -R Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS11.2.sdk
265233```
266234
267235
268236You can verify that you have correct versions by running
269−```
237+```bash
270238xcodebuild -showsdks
271239```
272240
@@ -292,7 +260,7 @@ Ensure that `bundleIdentifier` matches the App ID of the development profile, or
2922601. Connect the registered iPhone.
2932611. Find your Apple Team ID in the [developer portal](https://developer.apple.com/account/#/membership).
2942621. Run the deploy command with your Team ID:
295−```
263+```bash
296264result-ios/bin/deploy [TEAM_ID]
297265# or in debug mode via lldb:
298266result-ios/bin/deploy [TEAM_ID] -d
@@ -302,7 +270,7 @@ result-ios/bin/deploy [TEAM_ID] -d
3022701. Go to [developer portal - distribution profiles](https://developer.apple.com/account/ios/profile/production).
303271Create and download a distribution profile.
3042721. Run the package script with your TEAM ID and your distribution profile to create a `.ipa`:
305−```
273+```bash
306274result-ios/bin/package [TEAM_ID] /path/to/output/.ipa /path/to/profile/file
307275```
308276
@@ -346,3 +314,13 @@ This should copy over and install the application on your device (if you see a
346314##### Build a release version
347315
348316After having configured signing for your app, you may proceed to build a release version of the app. This is no different to how you build the non-release version, so consult the section [Android](#android) further above for exact instructions on building and deploying to your device.
317+
318+
319+## Frequently Asked Questions (FAQ)
320+
321+Refer to [FAQ](FAQ.md).
322+
323+
324+## Contributing
325+
326+Contributions and issue reports are encouraged and appreciated! Refer to the [Contributing](CONTRIBUTING.md) guide for information about getting started.
acme.nix+209−176
@@ -1,13 +1,7 @@
1−### COPIED FROM
2−### https://github.com/NixOS/nixpkgs/blob/1d36ad6d16dbf1d3937f899a087a4360332eb141/nixos/modules/security/acme.nix
3−###
4−### to support new plugins in simp_le for ACMEv2 support.
5−### Changed lines are marked with a comment: ### CHANGED
6−
1+# Copied from https://github.com/NixOS/nixpkgs-channels/blob/70717a337f7ae4e486ba71a500367cad697e5f09/nixos/modules/security/acme.nix # MODIFIED
2+# Lines marked '# MODIFIED' have been added or modified from the original. # MODIFIED
73{ config, lib, pkgs, ... }:
8−
94with lib;
10−
115let
126
137 cfg = config.security.acme;
@@ -15,7 +9,8 @@ let
159 certOpts = { name, ... }: {
1610 options = {
1711 webroot = mkOption {
18− type = types.str;
12+ type = types.nullOr types.str;
13+ default = null;
1914 example = "/var/lib/acme/acme-challenges";
2015 description = ''
2116 Where the webroot of the HTTP vhost is located.
@@ -26,6 +21,16 @@ let
2621 '';
2722 };
2823
24+ server = mkOption {
25+ type = types.nullOr types.str;
26+ default = null;
27+ description = ''
28+ ACME Directory Resource URI. Defaults to let's encrypt
29+ production endpoint,
30+ https://acme-v02.api.letsencrypt.org/directory, if unset.
31+ '';
32+ };
33+
2934 domain = mkOption {
3035 type = types.str;
3136 default = name;
@@ -34,7 +39,7 @@ let
3439
3540 email = mkOption {
3641 type = types.nullOr types.str;
37− default = null;
42+ default = cfg.email;
3843 description = "Contact email address for the CA to be able to reach you.";
3944 };
4045
@@ -67,58 +72,69 @@ let
6772 Commands to run after new certificates go live. Typically
6873 the web server and other servers using certificates need to
6974 be reloaded.
70−
7175 Executed in the same directory with the new certificate.
7276 '';
7377 };
7478
75− plugins = mkOption {
76− type = types.listOf (types.enum [
77− "cert.der" "cert.pem" "chain.pem" "external.sh"
78− "fullchain.pem" "full.pem" "key.der" "key.pem" "account_key.json" "account_reg.json" ### CHANGED
79− ]);
80− default = [ "fullchain.pem" "full.pem" "key.pem" "account_key.json" "account_reg.json" ]; ### CHANGED
79+ directory = mkOption {
80+ type = types.str;
81+ readOnly = true;
82+ default = "/var/lib/acme/${name}";
83+ description = "Directory where certificate and other state is stored.";
84+ };
85+
86+ extraDomains = mkOption {
87+ type = types.attrsOf (types.nullOr types.str);
88+ default = {};
89+ example = literalExample ''
90+ {
91+ "example.org" = null;
92+ "mydomain.org" = null;
93+ }
94+ '';
95+ description = ''
96+ A list of extra domain names, which are included in the one certificate to be issued.
97+ Setting a distinct server root is deprecated and not functional in 20.03+
98+ '';
99+ };
100+
101+ keyType = mkOption {
102+ type = types.str;
103+ default = "ec256";
81104 description = ''
82− Plugins to enable. With default settings simp_le will
83− store public certificate bundle in <filename>fullchain.pem</filename>,
84− private key in <filename>key.pem</filename> and those two previous
85− files combined in <filename>full.pem</filename> in its state directory.
105+ Key type to use for private keys.
106+ For an up to date list of supported values check the --key-type option
107+ at https://go-acme.github.io/lego/usage/cli/#usage.
86108 '';
87109 };
88110
89− activationDelay = mkOption {
111+ dnsProvider = mkOption {
90112 type = types.nullOr types.str;
91113 default = null;
114+ example = "route53";
92115 description = ''
93− Systemd time span expression to delay copying new certificates to main
94− state directory. See <citerefentry><refentrytitle>systemd.time</refentrytitle>
95− <manvolnum>7</manvolnum></citerefentry>.
116+ DNS Challenge provider. For a list of supported providers, see the "code"
117+ field of the DNS providers listed at https://go-acme.github.io/lego/dns/.
96118 '';
97119 };
98120
99− preDelay = mkOption {
100− type = types.lines;
101− default = "";
121+ credentialsFile = mkOption {
122+ type = types.path;
102123 description = ''
103− Commands to run after certificates are re-issued but before they are
104− activated. Typically the new certificate is published to DNS.
105−
106− Executed in the same directory with the new certificate.
124+ Path to an EnvironmentFile for the cert's service containing any required and
125+ optional environment variables for your selected dnsProvider.
126+ To find out what values you need to set, consult the documentation at
127+ https://go-acme.github.io/lego/dns/ for the corresponding dnsProvider.
107128 '';
129+ example = "/var/src/secrets/example.org-route53-api-token";
108130 };
109131
110− extraDomains = mkOption {
111− type = types.attrsOf (types.nullOr types.str);
112− default = {};
113− example = literalExample ''
114− {
115− "example.org" = "/srv/http/nginx";
116− "mydomain.org" = null;
117− }
118− '';
132+ dnsPropagationCheck = mkOption {
133+ type = types.bool;
134+ default = true;
119135 description = ''
120− A list of extra domain names, which are included in the one certificate to be issued, with their
121− own server roots if needed.
136+ Toggles lego DNS propagation check, which is used alongside DNS-01
137+ challenge to ensure the DNS entries required are available.
122138 '';
123139 };
124140 };
@@ -129,26 +145,36 @@ in
129145{
130146
131147 ###### interface
132−
148+ imports = [
149+ (mkRemovedOptionModule [ "security" "acme" "production" ] ''
150+ Use security.acme.server to define your staging ACME server URL instead.
151+ To use the let's encrypt staging server, use security.acme.server =
152+ "https://acme-staging-v02.api.letsencrypt.org/directory".
153+ ''
154+ )
155+ # (mkRemovedOptionModule [ "security" "acme" "directory"] "ACME Directory is now hardcoded to /var/lib/acme and its permisisons are managed by systemd. See https://github.com/NixOS/nixpkgs/issues/53852 for more info.") # MODIFIED
156+ # (mkRemovedOptionModule [ "security" "acme" "preDelay"] "This option has been removed. If you want to make sure that something executes before certificates are provisioned, add a RequiredBy=acme-\${cert}.service to the service you want to execute before the cert renewal") # MODIFIED
157+ # (mkRemovedOptionModule [ "security" "acme" "activationDelay"] "This option has been removed. If you want to make sure that something executes before certificates are provisioned, add a RequiredBy=acme-\${cert}.service to the service you want to execute before the cert renewal") # MODIFIED
158+ (mkChangedOptionModule [ "security" "acme" "validMin"] [ "security" "acme" "validMinDays"] (config: config.security.acme.validMin / (24 * 3600)))
159+ ];
133160 options = {
134161 security.acme = {
135− directory = mkOption {
136− default = "/var/lib/acme";
137− type = types.str;
138− description = ''
139− Directory where certs and other state will be stored by default.
140− '';
141− };
142162
143− validMin = mkOption {
163+ validMinDays = mkOption {
144164 type = types.int;
145− default = 30 * 24 * 3600;
146− description = "Minimum remaining validity before renewal in seconds.";
165+ default = 30;
166+ description = "Minimum remaining validity before renewal in days.";
167+ };
168+
169+ email = mkOption {
170+ type = types.nullOr types.str;
171+ default = null;
172+ description = "Contact email address for the CA to be able to reach you.";
147173 };
148174
149175 renewInterval = mkOption {
150176 type = types.str;
151− default = "weekly";
177+ default = "daily";
152178 description = ''
153179 Systemd calendar expression when to check for renewal. See
154180 <citerefentry><refentrytitle>systemd.time</refentrytitle>
@@ -156,6 +182,16 @@ in
156182 '';
157183 };
158184
185+ server = mkOption {
186+ type = types.nullOr types.str;
187+ default = null;
188+ description = ''
189+ ACME Directory Resource URI. Defaults to let's encrypt
190+ production endpoint,
191+ <literal>https://acme-v02.api.letsencrypt.org/directory</literal>, if unset.
192+ '';
193+ };
194+
159195 preliminarySelfsigned = mkOption {
160196 type = types.bool;
161197 default = true;
@@ -163,23 +199,17 @@ in
163199 Whether a preliminary self-signed certificate should be generated before
164200 doing ACME requests. This can be useful when certificates are required in
165201 a webserver, but ACME needs the webserver to make its requests.
166−
167202 With preliminary self-signed certificate the webserver can be started and
168203 can later reload the correct ACME certificates.
169204 '';
170205 };
171206
172− production = mkOption {
207+ acceptTerms = mkOption {
173208 type = types.bool;
174− default = true;
209+ default = false;
175210 description = ''
176− If set to true, use Let's Encrypt's production environment
177− instead of the staging environment. The main benefit of the
178− staging environment is to get much higher rate limits.
179−
180− See
181− <literal>https://letsencrypt.org/docs/staging-environment</literal>
182− for more detail.
211+ Accept the CA's terms of service. The default provier is Let's Encrypt,
212+ you can find their ToS at https://letsencrypt.org/repository/
183213 '';
184214 };
185215
@@ -187,14 +217,18 @@ in
187217 default = { };
188218 type = with types; attrsOf (submodule certOpts);
189219 description = ''
190− Attribute set of certificates to get signed and renewed.
220+ Attribute set of certificates to get signed and renewed. Creates
221+ <literal>acme-''${cert}.{service,timer}</literal> systemd units for
222+ each certificate defined here. Other services can add dependencies
223+ to those units if they rely on the certificates being present,
224+ or trigger restarts of the service if certificates get renewed.
191225 '';
192226 example = literalExample ''
193227 {
194228 "example.com" = {
195229 webroot = "/var/www/challenges/";
196230 email = "foo@example.com";
197− extraDomains = { "www.example.com" = null; "foo.example.com" = "/var/www/foo/"; };
231+ extraDomains = { "www.example.com" = null; "foo.example.com" = null; };
198232 };
199233 "bar.example.com" = {
200234 webroot = "/var/www/challenges/";
@@ -210,110 +244,112 @@ in
210244 config = mkMerge [
211245 (mkIf (cfg.certs != { }) {
212246
247+ assertions = let
248+ certs = (mapAttrsToList (k: v: v) cfg.certs);
249+ in [
250+ {
251+ assertion = all (certOpts: certOpts.dnsProvider == null || certOpts.webroot == null) certs;
252+ message = ''
253+ Options `security.acme.certs.<name>.dnsProvider` and
254+ `security.acme.certs.<name>.webroot` are mutually exclusive.
255+ '';
256+ }
257+ {
258+ assertion = cfg.email != null || all (certOpts: certOpts.email != null) certs;
259+ message = ''
260+ You must define `security.acme.certs.<name>.email` or
261+ `security.acme.email` to register with the CA.
262+ '';
263+ }
264+ {
265+ assertion = cfg.acceptTerms;
266+ message = ''
267+ You must accept the CA's terms of service before using
268+ the ACME module by setting `security.acme.acceptTerms`
269+ to `true`. For Let's Encrypt's ToS see https://letsencrypt.org/repository/
270+ '';
271+ }
272+ ];
273+
213274 systemd.services = let
214275 services = concatLists servicesLists;
215276 servicesLists = mapAttrsToList certToServices cfg.certs;
216277 certToServices = cert: data:
217278 let
218− cpath = lpath + optionalString (data.activationDelay != null) ".staging";
219− lpath = "${cfg.directory}/${cert}";
220− rights = if data.allowKeysForGroup then "750" else "700";
221− cmdline = [ "-v" "-d" data.domain "--default_root" data.webroot "--valid_min" cfg.validMin ]
222− ++ optionals (data.email != null) [ "--email" data.email ]
223− ++ concatMap (p: [ "-f" p ]) data.plugins
224− ++ concatLists (mapAttrsToList (name: root: [ "-d" (if root == null then name else "${name}:${root}")]) data.extraDomains)
225− ++ optionals (!cfg.production) ["--server" "https://acme-staging.api.letsencrypt.org/directory"];
279+ # StateDirectory must be relative, and will be created under /var/lib by systemd
280+ lpath = "acme/${cert}";
281+ apath = "/var/lib/${lpath}";
282+ spath = "/var/lib/acme/.lego/${cert}";
283+ fileMode = if data.allowKeysForGroup then "640" else "600";
284+ globalOpts = [ "-d" data.domain "--email" data.email "--path" "." "--key-type" data.keyType ]
285+ ++ optionals (cfg.acceptTerms) [ "--accept-tos" ]
286+ ++ optionals (data.dnsProvider != null && !data.dnsPropagationCheck) [ "--dns.disable-cp" ]
287+ ++ concatLists (mapAttrsToList (name: root: [ "-d" name ]) data.extraDomains)
288+ ++ (if data.dnsProvider != null then [ "--dns" data.dnsProvider ] else [ "--http" "--http.webroot" data.webroot ])
289+ ++ optionals (cfg.server != null || data.server != null) ["--server" (if data.server == null then cfg.server else data.server)];
290+ runOpts = escapeShellArgs (globalOpts ++ [ "run" ]);
291+ renewOpts = escapeShellArgs (globalOpts ++ [ "renew" "--days" (toString cfg.validMinDays) ]);
226292 acmeService = {
227293 description = "Renew ACME Certificate for ${cert}";
228294 after = [ "network.target" "network-online.target" ];
229295 wants = [ "network-online.target" ];
296+ wantedBy = mkIf (!config.boot.isContainer) [ "multi-user.target" ];
230297 serviceConfig = {
231298 Type = "oneshot";
232− SuccessExitStatus = [ "0" "1" ];
233− PermissionsStartOnly = true;
234299 User = data.user;
235300 Group = data.group;
236301 PrivateTmp = true;
302+ StateDirectory = "acme/.lego/${cert} acme/.lego/accounts ${lpath}";
303+ StateDirectoryMode = if data.allowKeysForGroup then "750" else "700";
304+ WorkingDirectory = spath;
305+ # Only try loading the credentialsFile if the dns challenge is enabled
306+ EnvironmentFile = if data.dnsProvider != null then data.credentialsFile else null;
307+ ExecStart = pkgs.writeScript "acme-start" ''
308+ #!${pkgs.runtimeShell} -e
309+ test -L ${spath}/accounts -o -d ${spath}/accounts || ln -s ../accounts ${spath}/accounts
310+ ${pkgs.lego}/bin/lego ${renewOpts} || ${pkgs.lego}/bin/lego ${runOpts}
311+ '';
312+ ExecStartPost =
313+ let
314+ keyName = builtins.replaceStrings ["*"] ["_"] data.domain;
315+ script = pkgs.writeScript "acme-post-start" ''
316+ #!${pkgs.runtimeShell} -e
317+ cd ${apath}
318+ # Test that existing cert is older than new cert
319+ KEY=${spath}/certificates/${keyName}.key
320+ KEY_CHANGED=no
321+ if [ -e $KEY -a $KEY -nt key.pem ]; then
322+ KEY_CHANGED=yes
323+ cp -p ${spath}/certificates/${keyName}.key key.pem
324+ cp -p ${spath}/certificates/${keyName}.crt fullchain.pem
325+ cp -p ${spath}/certificates/${keyName}.issuer.crt chain.pem
326+ ln -sf fullchain.pem cert.pem
327+ cat key.pem fullchain.pem > full.pem
328+ fi
329+ chmod ${fileMode} *.pem
330+ chown '${data.user}:${data.group}' *.pem
331+ if [ "$KEY_CHANGED" = "yes" ]; then
332+ : # noop in case postRun is empty
333+ ${data.postRun}
334+ fi
335+ '';
336+ in
337+ "+${script}";
237338 };
238− path = with pkgs; [ simp_le systemd ];
239− preStart = ''
240− mkdir -p '${cfg.directory}'
241− chown 'root:root' '${cfg.directory}'
242− chmod 755 '${cfg.directory}'
243− if [ ! -d '${cpath}' ]; then
244− mkdir '${cpath}'
245− fi
246− chmod ${rights} '${cpath}'
247− chown -R '${data.user}:${data.group}' '${cpath}'
248− mkdir -p '${data.webroot}/.well-known/acme-challenge'
249− chown -R '${data.user}:${data.group}' '${data.webroot}/.well-known/acme-challenge'
250− '';
251− script = ''
252− cd '${cpath}'
253− set +e
254− simp_le ${escapeShellArgs cmdline}
255− EXITCODE=$?
256− set -e
257− echo "$EXITCODE" > /tmp/lastExitCode
258− exit "$EXITCODE"
259− '';
260− postStop = ''
261− cd '${cpath}'
262−
263− if [ -e /tmp/lastExitCode ] && [ "$(cat /tmp/lastExitCode)" = "0" ]; then
264− ${if data.activationDelay != null then ''
265−
266− ${data.preDelay}
267−
268− if [ -d '${lpath}' ]; then
269− systemd-run --no-block --on-active='${data.activationDelay}' --unit acme-setlive-${cert}.service
270− else
271− systemctl --wait start acme-setlive-${cert}.service
272− fi
273− '' else data.postRun}
274−
275− # noop ensuring that the "if" block is non-empty even if
276− # activationDelay == null and postRun == ""
277− true
278− fi
279− '';
280−
281− before = [ "acme-certificates.target" ];
282− wantedBy = [ "acme-certificates.target" ];
283− };
284− delayService = {
285− description = "Set certificate for ${cert} live";
286− path = with pkgs; [ rsync ];
287− serviceConfig = {
288− Type = "oneshot";
289− };
290− script = ''
291− rsync -a --delete-after '${cpath}/' '${lpath}'
292− '';
293− postStop = data.postRun;
339+
294340 };
295341 selfsignedService = {
296342 description = "Create preliminary self-signed certificate for ${cert}";
297343 path = [ pkgs.openssl ];
298− preStart = ''
299− if [ ! -d '${cpath}' ]
300− then
301− mkdir -p '${cpath}'
302− chmod ${rights} '${cpath}'
303− chown '${data.user}:${data.group}' '${cpath}'
304− fi
305− '';
306344 script =
307345 ''
308346 workdir="$(mktemp -d)"
309−
310347 # Create CA
311348 openssl genrsa -des3 -passout pass:xxxx -out $workdir/ca.pass.key 2048
312349 openssl rsa -passin pass:xxxx -in $workdir/ca.pass.key -out $workdir/ca.key
313350 openssl req -new -key $workdir/ca.key -out $workdir/ca.csr \
314351 -subj "/C=UK/ST=Warwickshire/L=Leamington/O=OrgName/OU=Security Department/CN=example.com"
315352 openssl x509 -req -days 1 -in $workdir/ca.csr -signkey $workdir/ca.key -out $workdir/ca.crt
316−
317353 # Create key
318354 openssl genrsa -des3 -passout pass:xxxx -out $workdir/server.pass.key 2048
319355 openssl rsa -passin pass:xxxx -in $workdir/server.pass.key -out $workdir/server.key
@@ -322,54 +358,50 @@ in
322358 openssl x509 -req -days 1 -in $workdir/server.csr -CA $workdir/ca.crt \
323359 -CAkey $workdir/ca.key -CAserial $workdir/ca.srl -CAcreateserial \
324360 -out $workdir/server.crt
325−
326361 # Copy key to destination
327− cp $workdir/server.key ${cpath}/key.pem
328−
362+ cp $workdir/server.key ${apath}/key.pem
329363 # Create fullchain.pem (same format as "simp_le ... -f fullchain.pem" creates)
330− cat $workdir/{server.crt,ca.crt} > "${cpath}/fullchain.pem"
331−
364+ cat $workdir/{server.crt,ca.crt} > "${apath}/fullchain.pem"
332365 # Create full.pem for e.g. lighttpd
333− cat $workdir/{server.key,server.crt,ca.crt} > "${cpath}/full.pem"
334−
366+ cat $workdir/{server.key,server.crt,ca.crt} > "${apath}/full.pem"
335367 # Give key acme permissions
336− chown '${data.user}:${data.group}' "${cpath}/"{key,fullchain,full}.pem
337− chmod ${rights} "${cpath}/"{key,fullchain,full}.pem
368+ chown '${data.user}:${data.group}' "${apath}/"{key,fullchain,full}.pem
369+ chmod ${fileMode} "${apath}/"{key,fullchain,full}.pem
338370 '';
339371 serviceConfig = {
340372 Type = "oneshot";
341− PermissionsStartOnly = true;
342373 PrivateTmp = true;
374+ StateDirectory = lpath;
343375 User = data.user;
344376 Group = data.group;
345377 };
346378 unitConfig = {
347379 # Do not create self-signed key when key already exists
348− ConditionPathExists = "!${cpath}/key.pem";
380+ ConditionPathExists = "!${apath}/key.pem";
349381 };
350− before = [
351− "acme-selfsigned-certificates.target"
352− ];
353− wantedBy = [
354− "acme-selfsigned-certificates.target"
355− ];
356382 };
357383 in (
358384 [ { name = "acme-${cert}"; value = acmeService; } ]
359385 ++ optional cfg.preliminarySelfsigned { name = "acme-selfsigned-${cert}"; value = selfsignedService; }
360− ++ optional (data.activationDelay != null) { name = "acme-setlive-${cert}"; value = delayService; }
361386 );
362387 servicesAttr = listToAttrs services;
363− injectServiceDep = {
364− after = [ "acme-selfsigned-certificates.target" ];
365− wants = [ "acme-selfsigned-certificates.target" "acme-certificates.target" ];
366− };
367388 in
368− servicesAttr //
369− (if config.services.nginx.enable then { nginx = injectServiceDep; } else {}) //
370− (if config.services.lighttpd.enable then { lighttpd = injectServiceDep; } else {});
371−
372− systemd.timers = flip mapAttrs' cfg.certs (cert: data: nameValuePair
389+ servicesAttr;
390+
391+ systemd.tmpfiles.rules =
392+ map (data: "d ${data.webroot}/.well-known/acme-challenge - ${data.user} ${data.group}") (filter (data: data.webroot != null) (attrValues cfg.certs));
393+
394+ systemd.timers = let
395+ # Allow systemd to pick a convenient time within the day
396+ # to run the check.
397+ # This allows the coalescing of multiple timer jobs.
398+ # We divide by the number of certificates so that if you
399+ # have many certificates, the renewals are distributed over
400+ # the course of the day to avoid rate limits.
401+ numCerts = length (attrNames cfg.certs);
402+ _24hSecs = 60 * 60 * 24;
403+ AccuracySec = "${toString (_24hSecs / numCerts)}s";
404+ in flip mapAttrs' cfg.certs (cert: data: nameValuePair
373405 ("acme-${cert}")
374406 ({
375407 description = "Renew ACME Certificate for ${cert}";
@@ -378,20 +410,21 @@ in
378410 OnCalendar = cfg.renewInterval;
379411 Unit = "acme-${cert}.service";
380412 Persistent = "yes";
381− AccuracySec = "5m";
382− RandomizedDelaySec = "1h";
413+ inherit AccuracySec;
414+ # Skew randomly within the day, per https://letsencrypt.org/docs/integration-guide/.
415+ RandomizedDelaySec = "24h";
383416 };
384417 })
385418 );
386419
387− systemd.targets."acme-selfsigned-certificates" = mkIf cfg.preliminarySelfsigned {};
388− systemd.targets."acme-certificates" = {};
420+ systemd.targets.acme-selfsigned-certificates = mkIf cfg.preliminarySelfsigned {};
421+ systemd.targets.acme-certificates = {};
389422 })
390423
391424 ];
392425
393426 meta = {
394− maintainers = with lib.maintainers; [ abbradar fpletz globin ];
395− #doc = ./acme.xml; ### CHANGED
427+ maintainers = with lib.maintainers; [ abbradar fpletz globin m1cr0man ];
428+ # doc = ./acme.xml; # MODIFIED
396429 };
397430}
all-builds.nixnew file+113
@@ -0,0 +1,113 @@
1+{ self-args ? {
2+ config.android_sdk.accept_license = true;
3+ iosSdkVersion = "13.2";
4+ }
5+, local-self ? import ./. self-args
6+, supportedSystems ? [ builtins.currentSystem ]
7+}:
8+
9+let
10+ inherit (local-self.nixpkgs) lib runCommand nix;
11+ cacheBuildSystems = supportedSystems;
12+
13+ obeliskPackagesCommon = [
14+ "obelisk-frontend"
15+ "obelisk-route"
16+ "obelisk-executable-config-lookup"
17+ ];
18+
19+ obeliskPackagesBackend = obeliskPackagesCommon ++ [
20+ "obelisk-asset-manifest"
21+ "obelisk-asset-serve-snap"
22+ "obelisk-backend"
23+ "obelisk-cliapp"
24+ "obelisk-command"
25+ "obelisk-executable-config-inject"
26+ "obelisk-frontend"
27+ "obelisk-run"
28+ "obelisk-route"
29+ "obelisk-selftest"
30+ "obelisk-snap-extras"
31+ ];
32+
33+ pnameToAttrs = pkgsSet: pnames:
34+ lib.listToAttrs (map
35+ (name: { inherit name; value = pkgsSet.${name}; })
36+ pnames);
37+
38+ collect = v:
39+ if lib.isDerivation v then [v]
40+ else if lib.isAttrs v then lib.concatMap collect (builtins.attrValues v)
41+ else if lib.isList v then lib.concatMap collect v
42+ else [];
43+
44+ perPlatform = lib.genAttrs cacheBuildSystems (system: let
45+ reflex-platform = import ./dep/reflex-platform { inherit system; };
46+
47+ mkPerProfiling = profiling: let
48+ obelisk = import ./. (self-args // { inherit system profiling; });
49+ ghc = pnameToAttrs
50+ obelisk.haskellPackageSets.ghc
51+ obeliskPackagesBackend;
52+ ghcjs = pnameToAttrs
53+ obelisk.haskellPackageSets.ghcjs
54+ obeliskPackagesCommon;
55+ command = obelisk.command;
56+
57+ withSkeletonOptions = skel: options: (skel.passthru.__unstable__.self.extend (self: super: {
58+ userSettings = super.userSettings // options;
59+ })).project;
60+ rawSkeleton = import ./skeleton { inherit obelisk; };
61+ skeleton = withSkeletonOptions rawSkeleton {
62+ withHoogle = true; # cache the Hoogle database for the skeleton
63+ __withGhcide = true; # cache the ghcide build for the skeleton
64+ };
65+
66+ serverSkeletonExe = rawSkeleton.exe;
67+ # TODO fix nixpkgs so it doesn't try to run the result of haskell shells as setup hooks.
68+ serverSkeletonShell = local-self.nixpkgs.runCommand "shell-safe-for-dep" {} ''
69+ touch "$out"
70+ echo "return" >> "$out"
71+ cat "${skeleton.shells.ghc}" >> "$out"
72+ '';
73+ androidSkeleton = skeleton.android.frontend;
74+ iosSkeleton = skeleton.ios.frontend;
75+ nameSuffix = if profiling then "profiled" else "unprofiled";
76+ packages = {
77+ skeletonProfiledObRun = rawSkeleton.__unstable__.profiledObRun;
78+ inherit
79+ command
80+ serverSkeletonShell
81+ ghc
82+ ;
83+ } // lib.optionalAttrs (!profiling) {
84+ inherit
85+ ghcjs
86+ serverSkeletonExe
87+ ;
88+ } // lib.optionalAttrs reflex-platform.androidSupport {
89+ inherit androidSkeleton;
90+ } // lib.optionalAttrs reflex-platform.iosSupport {
91+ inherit iosSkeleton;
92+ };
93+ in packages // {
94+ cache = reflex-platform.pinBuildInputs
95+ "obelisk-${system}-${nameSuffix}"
96+ (collect packages);
97+ };
98+
99+ perProfiling = {
100+ profiled = mkPerProfiling true;
101+ unprofiled = mkPerProfiling false;
102+ };
103+ in perProfiling // {
104+ cache = reflex-platform.pinBuildInputs
105+ "obelisk-${system}"
106+ (map (p: p.cache) (builtins.attrValues perProfiling));
107+ });
108+
109+ metaCache = local-self.reflex-platform.pinBuildInputs
110+ "obelisk-everywhere"
111+ (map (a: a.cache) (builtins.attrValues perPlatform));
112+
113+in perPlatform // { inherit metaCache; }
all-tests.nixnew file+145
@@ -0,0 +1,145 @@
1+{
2+ supportedSystems ? [ builtins.currentSystem ]
3+}:
4+let
5+ nginxRoot = "/run/nginx";
6+ obelisk = import ./default.nix {};
7+ # Get NixOS a pre-release 20.03 that contains the python based tests and recursive nix
8+ pkgs = import (builtins.fetchTarball https://github.com/nixos/nixpkgs/archive/3de5266.tar.gz) {};
9+ sshKeys = import (pkgs.path + /nixos/tests/ssh-keys.nix) pkgs;
10+ make-test = import (pkgs.path + /nixos/tests/make-test-python.nix);
11+ obelisk-everywhere = (import ./all-builds.nix { inherit supportedSystems; }).x86_64-linux.cache;
12+ snakeOilPrivateKey = sshKeys.snakeOilPrivateKey.text;
13+ snakeOilPublicKey = sshKeys.snakeOilPublicKey;
14+in
15+ make-test ({...}: {
16+ name = "obelisk";
17+ nodes = {
18+ githost = {
19+ networking.firewall.allowedTCPPorts = [ 22 80 ];
20+ services.openssh = {
21+ enable = true;
22+ };
23+ environment.systemPackages = [
24+ pkgs.git
25+ ];
26+ users.users.root.openssh.authorizedKeys.keys = [
27+ snakeOilPublicKey
28+ ];
29+ };
30+
31+ client = {
32+ imports = [
33+ (pkgs.path + /nixos/modules/installer/cd-dvd/channel.nix)
34+ ];
35+ nix.useSandbox = false;
36+ nix.binaryCaches = [];
37+ environment.systemPackages = [
38+ obelisk.command
39+ obelisk.shell
40+ obelisk-everywhere
41+ pkgs.git
42+ ];
43+ };
44+ };
45+
46+ testScript =
47+ let
48+ privateKeyFile = pkgs.writeText "id_rsa" ''${snakeOilPrivateKey}'';
49+ thunkableSample = pkgs.writeText "default.nix" ''
50+ let pkgs = import <nixpkgs> {}; in pkgs.git
51+ '';
52+ invalidThunkableSample = pkgs.writeText "default.nix" ''
53+ let pkgs = import <nixpkgs> {}; in pkgtypo.git
54+ '';
55+ sshConfigFile = pkgs.writeText "ssh_config" ''
56+ Host *
57+ StrictHostKeyChecking no
58+ UserKnownHostsFile=/dev/null
59+ ConnectionAttempts=1
60+ ConnectTimeout=1
61+ IdentityFile=~/.ssh/id_rsa
62+ User=root
63+ '';
64+ in ''
65+ start_all()
66+
67+ with subtest("obelisk is installed and git is configured"):
68+ client.succeed("ob --help")
69+ client.succeed('git config --global user.email "you@example.com"')
70+ client.succeed('git config --global user.name "Your Name"')
71+
72+ githost.wait_for_open_port("22")
73+
74+ with subtest("the client can access the server via ssh"):
75+ client.succeed("mkdir -p ~/.ssh/")
76+ client.succeed(
77+ "cp ${privateKeyFile} ~/.ssh/id_rsa"
78+ )
79+ client.succeed("chmod 600 ~/.ssh/id_rsa")
80+ client.wait_until_succeeds(
81+ "ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa githost true"
82+ )
83+ client.succeed(
84+ "cp ${sshConfigFile} ~/.ssh/config"
85+ )
86+ client.wait_until_succeeds("ssh githost true")
87+
88+ with subtest("a remote bare repo can be started"):
89+ githost.succeed("mkdir -p ~/myorg/myapp.git")
90+ githost.succeed("cd ~/myorg/myapp.git && git init --bare")
91+
92+ with subtest("a git project can be configured with a remote using ssh"):
93+ client.succeed("mkdir -p ~/code/myapp")
94+ client.succeed("cd ~/code/myapp && git init")
95+ client.succeed(
96+ "cp ${thunkableSample} ~/code/myapp/default.nix"
97+ )
98+ client.succeed("cd ~/code/myapp && git add .")
99+
100+ client.succeed('cd ~/code/myapp && git commit -m "Initial"')
101+ client.succeed(
102+ "cd ~/code/myapp && git remote add origin root@githost:/root/myorg/myapp.git"
103+ )
104+
105+
106+ with subtest("pushing code to the remote"):
107+ client.succeed("cd ~/code/myapp && git push -u origin master")
108+ client.succeed("cd ~/code/myapp && git status")
109+
110+ with subtest("obelisk can pack"):
111+ client.succeed("ob -v thunk pack ~/code/myapp")
112+ client.succeed("grep -qF 'git.json' ~/code/myapp/thunk.nix")
113+ client.succeed("grep -qF 'myorg' ~/code/myapp/git.json")
114+ client.succeed("ob -v thunk unpack ~/code/myapp")
115+
116+ with subtest("obelisk can set the public / private flag"):
117+ client.succeed("ob -v thunk pack ~/code/myapp --private")
118+ client.fail("""grep -qF '"private": practice' ~/code/myapp/git.json""")
119+ client.succeed("""grep -qF '"private": true' ~/code/myapp/git.json""")
120+ client.succeed("nix-build ~/code/myapp")
121+ client.succeed("ob -v thunk unpack ~/code/myapp")
122+ client.succeed("ob -v thunk pack ~/code/myapp --public")
123+ client.succeed("""grep -qF '"private": false' ~/code/myapp/git.json""")
124+ client.succeed("nix-build ~/code/myapp")
125+ client.succeed("ob -v thunk unpack ~/code/myapp")
126+
127+ with subtest("building an invalid thunk fails"):
128+ client.succeed("cd ~/code/myapp && git checkout -b bad")
129+ client.succeed(
130+ "cp ${invalidThunkableSample} ~/code/myapp/default.nix"
131+ )
132+ client.succeed("cd ~/code/myapp && git add .")
133+ client.succeed('cd ~/code/myapp && git commit -m "Bad commit"')
134+ client.succeed("cd ~/code/myapp && git push -u origin bad")
135+ client.succeed("ob -v thunk pack ~/code/myapp --public")
136+ client.fail("nix-build ~/code/myapp")
137+ client.succeed("ob -v thunk unpack ~/code/myapp")
138+ client.succeed("cd ~/code/myapp && git checkout master")
139+
140+ with subtest("obelisk can detect private repos"):
141+ client.succeed("ob -v thunk pack ~/code/myapp")
142+ client.succeed("""grep -qF '"private": true' ~/code/myapp/git.json""")
143+ client.succeed("ob -v thunk unpack ~/code/myapp")
144+ '';
145+ }) {}
default.nix+227−198
@@ -1,104 +1,34 @@
11{ system ? builtins.currentSystem
22, profiling ? false
3−, iosSdkVersion ? "10.2"
3+, iosSdkVersion ? "13.2"
44, config ? {}
5+, terms ? { # Accepted terms, conditions, and licenses
6+ security.acme.acceptTerms = false;
7+ }
8+, reflex-platform-func ? import ./dep/reflex-platform
59}:
610let
7− cleanSource = builtins.filterSource (name: _: let baseName = builtins.baseNameOf name; in !(
8− builtins.match "^\\.ghc\\.environment.*" baseName != null ||
9− baseName == "cabal.project.local"
10− ));
11−
12− commandRuntimeDeps = pkgs: with pkgs; [
13− coreutils
14− git
15− nix-prefetch-git
16− openssh
17− ];
18−
19− getReflexPlatform = sys: import ./dep/reflex-platform {
20− inherit iosSdkVersion config;
21− system = sys;
22− enableLibraryProfiling = profiling;
11+ reflex-platform = getReflexPlatform { inherit system; };
12+ inherit (reflex-platform) hackGet nixpkgs;
13+ pkgs = nixpkgs;
14+
15+ inherit (import dep/gitignore.nix { inherit (nixpkgs) lib; }) gitignoreSource;
16+
17+ getReflexPlatform = { system, enableLibraryProfiling ? profiling }: reflex-platform-func {
18+ inherit iosSdkVersion config system enableLibraryProfiling;
2319
2420 nixpkgsOverlays = [
25− (self: super: {
26− obeliskExecutableConfig = import ./lib/executable-config { nixpkgs = pkgs; filterGitSource = cleanSource; };
27− })
21+ (import ./nixpkgs-overlays)
2822 ];
2923
3024 haskellOverlays = [
31−
32− # Fix misc upstream packages
33− (self: super: let
34− pkgs = self.callPackage ({ pkgs }: pkgs) {};
35− haskellLib = pkgs.haskell.lib;
36− in {
37− hnix = haskellLib.overrideCabal (self.callHackage "hnix" "0.6.1" { these = self.these_0_8; }) (_: {
38− jailbreak = true;
39− doCheck = false;
40− });
41− hnix-store-core = self.callHackage "hnix-store-core" "0.1.0.0" {};
42−
43− ghcid = self.callCabal2nix "ghcid" (hackGet ./dep/ghcid) {};
44− })
45−
25+ (import ./haskell-overlays/misc-deps.nix { inherit hackGet; })
4626 pkgs.obeliskExecutableConfig.haskellOverlay
47−
48− # Add obelisk packages
49− (self: super: let
50− pkgs = self.callPackage ({ pkgs }: pkgs) {};
51− onLinux = pkg: f: if pkgs.stdenv.isLinux then f pkg else pkg;
52− in {
53− obelisk-executable-config-inject = pkgs.obeliskExecutableConfig.platforms.web.inject self;
54−
55− obelisk-asset-manifest = self.callCabal2nix "obelisk-asset-manifest" (cleanSource ./lib/asset/manifest) {};
56− obelisk-asset-serve-snap = self.callCabal2nix "obelisk-asset-serve-snap" (cleanSource ./lib/asset/serve-snap) {};
57− obelisk-backend = self.callCabal2nix "obelisk-backend" (cleanSource ./lib/backend) {};
58− obelisk-cliapp = self.callCabal2nix "obelisk-cliapp" (cleanSource ./lib/cliapp) {};
59− obelisk-command = haskellLib.overrideCabal (self.callCabal2nix "obelisk-command" (cleanSource ./lib/command) {}) {
60− librarySystemDepends = [
61− pkgs.nix
62− (haskellLib.justStaticExecutables self.ghcid)
63− ];
64− };
65− obelisk-frontend = self.callCabal2nix "obelisk-frontend" (cleanSource ./lib/frontend) {};
66− obelisk-run = onLinux (self.callCabal2nix "obelisk-run" (cleanSource ./lib/run) {}) (pkg:
67− haskellLib.overrideCabal pkg (drv: { librarySystemDepends = [ pkgs.iproute ]; })
68− );
69− obelisk-route = self.callCabal2nix "obelisk-route" (cleanSource ./lib/route) {};
70− obelisk-selftest = self.callCabal2nix "obelisk-selftest" (cleanSource ./lib/selftest) {};
71− obelisk-snap-extras = self.callCabal2nix "obelisk-snap-extras" (cleanSource ./lib/snap-extras) {};
72− tabulation = self.callCabal2nix "tabulation" (cleanSource ./lib/tabulation) {};
73− })
74−
75− (self: super: let
76− pkgs = self.callPackage ({ pkgs }: pkgs) {};
77− haskellLib = pkgs.haskell.lib;
78− in {
79− # Dynamic linking with split objects dramatically increases startup time (about
80− # 0.5 seconds on a decent machine with SSD), so we do `justStaticExecutables`.
81− obelisk-command = haskellLib.overrideCabal
82− (haskellLib.generateOptparseApplicativeCompletion "ob"
83− (haskellLib.justStaticExecutables super.obelisk-command))
84− (drv: {
85− buildTools = (drv.buildTools or []) ++ [ pkgs.buildPackages.makeWrapper ];
86− postFixup = ''
87− ${drv.postFixup or ""}
88− # Make `ob` reference its runtime dependencies.
89− wrapProgram "$out"/bin/ob --prefix PATH : ${pkgs.lib.makeBinPath (commandRuntimeDeps pkgs)}
90− '';
91− });
92− obelisk-selftest = haskellLib.justStaticExecutables super.obelisk-selftest;
93− })
94−
27+ (import ./haskell-overlays/obelisk.nix)
28+ (import ./haskell-overlays/tighten-ob-exes.nix)
9529 ];
9630 };
9731
98− reflex-platform = getReflexPlatform system;
99− inherit (reflex-platform) hackGet nixpkgs;
100− pkgs = nixpkgs;
101−
10232 # The haskell environment used to build Obelisk itself, e.g. the 'ob' command
10333 ghcObelisk = reflex-platform.ghc;
10434
@@ -116,19 +46,18 @@ in rec {
11646 pathGit = ./.; # Used in CI by the migration graph hash algorithm to correctly ignore files.
11747 path = reflex-platform.filterGit ./.;
11848 obelisk = ghcObelisk;
119− obeliskEnvs = ghcObeliskEnvs;
49+ obeliskEnvs = pkgs.lib.filterAttrs (k: _: k == "tabulation" || pkgs.lib.strings.hasPrefix "obelisk-" k) ghcObeliskEnvs; #TODO: use thunkSet https://github.com/reflex-frp/reflex-platform/pull/671
12050 command = ghcObelisk.obelisk-command;
121− shell = pinBuildInputs "obelisk-shell" ([command] ++ commandRuntimeDeps pkgs);
51+ shell = pinBuildInputs "obelisk-shell" ([command] ++ command.commandRuntimeDeps);
12252
12353 selftest = pkgs.writeScript "selftest" ''
124− #!/usr/bin/env bash
54+ #!${pkgs.runtimeShell}
12555 set -euo pipefail
12656
12757 PATH="${command}/bin:$PATH"
128− export OBELISK_IMPL="${hackGet ./.}"
58+ cd ${./.}
12959 "${ghcObelisk.obelisk-selftest}/bin/obelisk-selftest" +RTS -N -RTS "$@"
13060 '';
131− #TODO: Why can't I build ./skeleton directly as a derivation? `nix-build -E ./.` doesn't work
13261 skeleton = pkgs.runCommand "skeleton" {
13362 dir = builtins.filterSource (path: type: builtins.trace path (baseNameOf path != ".obelisk")) ./skeleton;
13463 } ''
@@ -148,30 +77,47 @@ in rec {
14877 '';
14978
15079 compressedJs = frontend: optimizationLevel: pkgs.runCommand "compressedJs" {} ''
151− mkdir $out
152− cd $out
153− ln -s "${haskellLib.justStaticExecutables frontend}/bin/frontend.jsexe/all.js" all.unminified.js
154− ${if optimizationLevel == null then ''
155− ln -s all.unminified.js all.js
156− '' else ''
157− ${pkgs.closurecompiler}/bin/closure-compiler --externs "${reflex-platform.ghcjsExternsJs}" -O ${optimizationLevel} --jscomp_warning=checkVars --create_source_map="all.js.map" --source_map_format=V3 --js_output_file="all.js" all.unminified.js
158− echo "//# sourceMappingURL=all.js.map" >> all.js
159− ''}
80+ set -euo pipefail
81+ cd '${haskellLib.justStaticExecutables frontend}'
82+ shopt -s globstar
83+ for f in **/all.js; do
84+ dir="$out/$(basename "$(dirname "$f")")"
85+ mkdir -p "$dir"
86+ ln -s "$(realpath "$f")" "$dir/all.unminified.js"
87+ ${if optimizationLevel == null then ''
88+ ln -s "$dir/all.unminified.js" "$dir/all.js"
89+ '' else ''
90+ '${pkgs.closurecompiler}/bin/closure-compiler' --externs '${reflex-platform.ghcjsExternsJs}' -O '${optimizationLevel}' --jscomp_warning=checkVars --create_source_map="$dir/all.js.map" --source_map_format=V3 --js_output_file="$dir/all.js" "$dir/all.unminified.js"
91+ echo '//# sourceMappingURL=all.js.map' >> "$dir/all.js"
92+ ''}
93+ done
16094 '';
16195
16296 serverModules = {
163− mkBaseEc2 = { hostName, routeHost, enableHttps, adminEmail, ... }: {...}: {
97+ mkBaseEc2 = { nixosPkgs, ... }: {...}: {
16498 imports = [
165− (pkgs.path + /nixos/modules/virtualisation/amazon-image.nix)
99+ (nixosPkgs.path + /nixos/modules/virtualisation/amazon-image.nix)
166100 ];
101+ ec2.hvm = true;
102+ };
103+
104+ mkDefaultNetworking = { adminEmail, enableHttps, hostName, routeHost, ... }: {...}: {
167105 networking = {
168106 inherit hostName;
169107 firewall.allowedTCPPorts = if enableHttps then [ 80 443 ] else [ 80 ];
170108 };
109+
110+ # `amazon-image.nix` already sets these but if the user provides their own module then
111+ # forgetting these can cause them to lose access to the server!
112+ # https://github.com/NixOS/nixpkgs/blob/fab05f17d15e4e125def4fd4e708d205b41d8d74/nixos/modules/virtualisation/amazon-image.nix#L133-L136
113+ services.openssh.enable = true;
114+ services.openssh.permitRootLogin = "prohibit-password";
115+
171116 security.acme.certs = if enableHttps then {
172117 "${routeHost}".email = adminEmail;
173118 } else {};
174− ec2.hvm = true;
119+
120+ security.acme.${if enableHttps && (terms.security.acme.acceptTerms or false) then "acceptTerms" else null} = true;
175121 };
176122
177123 mkObeliskApp =
@@ -188,12 +134,16 @@ in rec {
188134 }: {...}: {
189135 services.nginx = {
190136 enable = true;
137+ recommendedProxySettings = true;
191138 virtualHosts."${routeHost}" = {
192139 enableACME = enableHttps;
193140 forceSSL = enableHttps;
194141 locations.${baseUrl} = {
195142 proxyPass = "http://127.0.0.1:" + toString internalPort;
196143 proxyWebsockets = true;
144+ extraConfig = ''
145+ access_log off;
146+ '';
197147 };
198148 };
199149 };
@@ -228,134 +178,213 @@ in rec {
228178 };
229179 };
230180
181+ inherit mkAssets;
182+
231183 serverExe = backend: frontend: assets: optimizationLevel: version:
232184 pkgs.runCommand "serverExe" {} ''
233185 mkdir $out
234186 set -eux
235− ln -s "${haskellLib.justStaticExecutables backend}"/bin/* $out/
236− ln -s "${mkAssets assets}" $out/static.assets
237− ln -s ${mkAssets (compressedJs frontend optimizationLevel)} $out/frontend.jsexe.assets
187+ ln -s '${if profiling then backend else haskellLib.justStaticExecutables backend}'/bin/* $out/
188+ ln -s '${mkAssets assets}' $out/static.assets
189+ for d in '${mkAssets (compressedJs frontend optimizationLevel)}'/*/; do
190+ ln -s "$d" "$out"/"$(basename "$d").assets"
191+ done
238192 echo ${version} > $out/version
239193 '';
240194
241− server = { exe, hostName, adminEmail, routeHost, enableHttps, version }@args:
195+ server = { exe, hostName, adminEmail, routeHost, enableHttps, version, module ? serverModules.mkBaseEc2 }@args:
242196 let
243197 nixos = import (pkgs.path + /nixos);
244198 in nixos {
245199 system = "x86_64-linux";
246200 configuration = {
247201 imports = [
248− (serverModules.mkBaseEc2 args)
202+ (module { inherit exe hostName adminEmail routeHost enableHttps version; nixosPkgs = pkgs; })
203+ (serverModules.mkDefaultNetworking args)
249204 (serverModules.mkObeliskApp args)
250− ./acme.nix
205+ ./acme.nix # Backport of ACME upgrades from 20.03
251206 ];
207+
208+ # Backport of ACME upgrades from 20.03
252209 disabledModules = [
253210 (pkgs.path + /nixos/modules/security/acme.nix)
254211 ];
255212 nixpkgs.overlays = [
256− (self: super: let
257− nixos1909 = import (hackGet ./dep/nixpkgs-19.09) {};
258− in {
259− inherit (nixos1909) simp_le;
213+ (self: super: {
214+ lego = (import (builtins.fetchTarball {
215+ url = https://github.com/NixOS/nixpkgs-channels/archive/70717a337f7ae4e486ba71a500367cad697e5f09.tar.gz;
216+ sha256 = "1sbmqn7yc5iilqnvy9nvhsa9bx6spfq1kndvvis9031723iyymd1";
217+ }) {}).lego;
260218 })
261219 ];
262220 };
263221 };
264222
265−
266223 # An Obelisk project is a reflex-platform project with a predefined layout and role for each component
267− project = base: projectDefinition:
268− let projectOut = sys: (getReflexPlatform sys).project (args@{ nixpkgs, ... }:
269− let mkProject = { android ? null #TODO: Better error when missing
270− , ios ? null #TODO: Better error when missing
271− , packages ? {}
272− , overrides ? _: _: {}
273− , staticFiles ? base + /static
274− , tools ? _: []
275− , shellToolOverrides ? _: _: {}
276− , withHoogle ? false # Setting this to `true` makes shell reloading far slower
277− , __closureCompilerOptimizationLevel ? "ADVANCED" # Set this to `null` to skip the closure-compiler step
278− }:
279− let frontendName = "frontend";
280− backendName = "backend";
281− commonName = "common";
282− staticName = "obelisk-generated-static";
283− staticFilesImpure = if lib.isDerivation staticFiles then staticFiles else toString staticFiles;
284− processedStatic = processAssets { src = staticFiles; };
285− # The packages whose names and roles are defined by this package
286− predefinedPackages = lib.filterAttrs (_: x: x != null) {
287− ${frontendName} = nullIfAbsent (base + "/frontend");
288− ${commonName} = nullIfAbsent (base + "/common");
289− ${backendName} = nullIfAbsent (base + "/backend");
290− };
291− combinedPackages = predefinedPackages // packages;
292− projectOverrides = self: super: {
293− ${staticName} = haskellLib.dontHaddock (self.callCabal2nix staticName processedStatic.haskellManifest {});
294− ${backendName} = haskellLib.addBuildDepend super.${backendName} self.obelisk-run;
295− };
296− totalOverrides = lib.composeExtensions projectOverrides overrides;
297− inherit (lib.strings) hasPrefix;
298− privateConfigDirs = ["config/backend"];
299− injectableConfig = builtins.filterSource (path: _:
300− !(lib.lists.any (x: hasPrefix (toString base + "/" + toString x) (toString path)) privateConfigDirs)
224+ project = base': projectDefinition:
225+ let
226+ projectOut = { system, enableLibraryProfiling ? profiling }: let reflexPlatformProject = (getReflexPlatform { inherit system enableLibraryProfiling; }).project; in reflexPlatformProject (args@{ nixpkgs, ... }:
227+ let
228+ inherit (lib.strings) hasPrefix;
229+ mkProject =
230+ { android ? null #TODO: Better error when missing
231+ , ios ? null #TODO: Better error when missing
232+ , packages ? {}
233+ , overrides ? _: _: {}
234+ , staticFiles ? null
235+ , tools ? _: []
236+ , shellToolOverrides ? _: _: {}
237+ , withHoogle ? false # Setting this to `true` makes shell reloading far slower
238+ , __closureCompilerOptimizationLevel ? "ADVANCED" # Set this to `null` to skip the closure-compiler step
239+ , __withGhcide ? false
240+ }:
241+ let
242+ allConfig = nixpkgs.lib.makeExtensible (self: {
243+ base = base';
244+ inherit args;
245+ userSettings = {
246+ inherit android ios packages overrides tools shellToolOverrides withHoogle __closureCompilerOptimizationLevel __withGhcide;
247+ staticFiles = if staticFiles == null then self.base + /static else staticFiles;
248+ };
249+ frontendName = "frontend";
250+ backendName = "backend";
251+ commonName = "common";
252+ staticName = "obelisk-generated-static";
253+ staticFilesImpure = let fs = self.userSettings.staticFiles; in if lib.isDerivation fs then fs else toString fs;
254+ processedStatic = processAssets { src = self.userSettings.staticFiles; };
255+ # The packages whose names and roles are defined by this package
256+ predefinedPackages = lib.filterAttrs (_: x: x != null) {
257+ ${self.frontendName} = nullIfAbsent (self.base + "/frontend");
258+ ${self.commonName} = nullIfAbsent (self.base + "/common");
259+ ${self.backendName} = nullIfAbsent (self.base + "/backend");
260+ };
261+ shellPackages = {};
262+ combinedPackages = self.predefinedPackages // self.userSettings.packages // self.shellPackages;
263+ projectOverrides = self': super': {
264+ ${self.staticName} = haskellLib.dontHaddock (self'.callCabal2nix self.staticName self.processedStatic.haskellManifest {});
265+ ${self.backendName} = haskellLib.addBuildDepend super'.${self.backendName} self'.obelisk-run;
266+ };
267+ totalOverrides = lib.composeExtensions self.projectOverrides self.userSettings.overrides;
268+ privateConfigDirs = ["config/backend"];
269+ injectableConfig = builtins.filterSource (path: _:
270+ !(lib.lists.any (x: hasPrefix (toString self.base + "/" + toString x) (toString path)) self.privateConfigDirs)
271+ );
272+ __androidWithConfig = configPath: {
273+ ${if self.userSettings.android == null then null else self.frontendName} = {
274+ executableName = "frontend";
275+ ${if builtins.pathExists self.userSettings.staticFiles then "assets" else null} =
276+ nixpkgs.obeliskExecutableConfig.platforms.android.inject
277+ (self.injectableConfig configPath)
278+ self.processedStatic.symlinked;
279+ } // self.userSettings.android;
280+ };
281+ __iosWithConfig = configPath: {
282+ ${if self.userSettings.ios == null then null else self.frontendName} = {
283+ executableName = "frontend";
284+ ${if builtins.pathExists self.userSettings.staticFiles then "staticSrc" else null} =
285+ nixpkgs.obeliskExecutableConfig.platforms.ios.inject
286+ (self.injectableConfig configPath)
287+ self.processedStatic.symlinked;
288+ } // self.userSettings.ios;
289+ };
290+
291+ shells-ghc = builtins.attrNames (self.predefinedPackages // self.shellPackages);
292+
293+ shells-ghcjs = [
294+ self.frontendName
295+ self.commonName
296+ ];
297+
298+ shells-ghcSavedSplices = [
299+ self.commonName
300+ self.frontendName
301+ ];
302+
303+ shellToolOverrides = lib.composeExtensions
304+ self.userSettings.shellToolOverrides
305+ (if self.userSettings.__withGhcide
306+ then (import ./haskell-overlays/ghcide.nix)
307+ else (_: _: {})
301308 );
302− __androidWithConfig = configPath: {
303− ${if android == null then null else frontendName} = {
304− executableName = "frontend";
305− ${if builtins.pathExists staticFiles then "assets" else null} =
306− nixpkgs.obeliskExecutableConfig.platforms.android.inject
307− (injectableConfig configPath)
308− processedStatic.symlinked;
309− } // android;
309+
310+ project = reflexPlatformProject ({...}: self.projectConfig);
311+ projectConfig = {
312+ inherit (self) shellToolOverrides;
313+ inherit (self.userSettings) tools withHoogle;
314+ overrides = self.totalOverrides;
315+ packages = self.combinedPackages;
316+ shells = {
317+ ${if self.userSettings.android == null && self.userSettings.ios == null then null else "ghcSavedSplices"} =
318+ lib.filter (x: lib.hasAttr x self.combinedPackages) self.shells-ghcSavedSplices;
319+ ghc = lib.filter (x: lib.hasAttr x self.combinedPackages) self.shells-ghc;
320+ ghcjs = lib.filter (x: lib.hasAttr x self.combinedPackages) self.shells-ghcjs;
310321 };
311− __iosWithConfig = configPath: {
312− ${if ios == null then null else frontendName} = {
313− executableName = "frontend";
314− ${if builtins.pathExists staticFiles then "staticSrc" else null} =
315− nixpkgs.obeliskExecutableConfig.platforms.ios.inject
316− (injectableConfig configPath)
317− processedStatic.symlinked;
318− } // ios;
322+ android = self.__androidWithConfig (self.base + "/config");
323+ ios = self.__iosWithConfig (self.base + "/config");
324+
325+ passthru = {
326+ __unstable__.self = allConfig;
327+ inherit (self)
328+ staticFilesImpure processedStatic
329+ __iosWithConfig __androidWithConfig
330+ ;
331+ inherit (self.userSettings)
332+ android ios overrides packages shellToolOverrides staticFiles tools withHoogle
333+ __closureCompilerOptimizationLevel
334+ ;
319335 };
320− in {
321− inherit shellToolOverrides tools withHoogle;
322− overrides = totalOverrides;
323− packages = combinedPackages;
324− shells = {
325− ${if android == null && ios == null then null else "ghcSavedSplices"} = (lib.filter (x: lib.hasAttr x combinedPackages) [
326− commonName
327− frontendName
328− ]);
329− ghc = (lib.filter (x: lib.hasAttr x combinedPackages) [
330− backendName
331− commonName
332− frontendName
333− ]);
334− ghcjs = lib.filter (x: lib.hasAttr x combinedPackages) [
335− frontendName
336− commonName
337− ];
338336 };
339− android = __androidWithConfig (base + "/config");
340− ios = __iosWithConfig (base + "/config");
341− passthru = { inherit android ios packages overrides tools shellToolOverrides withHoogle staticFiles staticFilesImpure __closureCompilerOptimizationLevel processedStatic __iosWithConfig __androidWithConfig; };
342− };
343− in mkProject (projectDefinition args));
344− serverOn = sys: version: serverExe
345− (projectOut sys).ghc.backend
346− (projectOut system).ghcjs.frontend
347− (projectOut sys).passthru.staticFiles
348− (projectOut sys).passthru.__closureCompilerOptimizationLevel
337+ });
338+ in allConfig;
339+ in (mkProject (projectDefinition args)).projectConfig);
340+ mainProjectOut = projectOut { inherit system; };
341+ serverOn = projectInst: version: serverExe
342+ projectInst.ghc.backend
343+ mainProjectOut.ghcjs.frontend
344+ projectInst.passthru.staticFiles
345+ projectInst.passthru.__closureCompilerOptimizationLevel
349346 version;
350− linuxExe = serverOn "x86_64-linux";
347+ linuxExe = serverOn (projectOut { system = "x86_64-linux"; });
351348 dummyVersion = "Version number is only available for deployments";
352− in projectOut system // {
349+ in mainProjectOut // {
350+ __unstable__.profiledObRun = let
351+ profiled = projectOut { inherit system; enableLibraryProfiling = true; };
352+ exeSource = builtins.toFile "ob-run.hs" ''
353+ {-# LANGUAGE NoImplicitPrelude #-}
354+ {-# LANGUAGE PackageImports #-}
355+ module Main where
356+
357+ -- Explicitly import Prelude from base lest there be multiple modules called Prelude
358+ import "base" Prelude (IO, (++), read)
359+
360+ import "base" Control.Exception (finally)
361+ import "reflex" Reflex.Profiled (writeProfilingData)
362+ import "base" System.Environment (getArgs)
363+
364+ import qualified "obelisk-run" Obelisk.Run
365+ import qualified Frontend
366+ import qualified Backend
367+
368+ main :: IO ()
369+ main = do
370+ [portStr, assets, profFileName] <- getArgs
371+ Obelisk.Run.run (read portStr) (Obelisk.Run.runServeAsset assets) Backend.backend Frontend.frontend
372+ `finally` writeProfilingData (profFileName ++ ".rprof")
373+ '';
374+ in nixpkgs.runCommand "ob-run" {
375+ buildInputs = [ (profiled.ghc.ghcWithPackages (p: [p.backend p.frontend])) ];
376+ } ''
377+ cp ${exeSource} ob-run.hs
378+ mkdir -p $out/bin
379+ ghc -x hs -prof -fno-prof-auto -threaded ob-run.hs -o $out/bin/ob-run
380+ '';
381+
353382 linuxExeConfigurable = linuxExe;
354383 linuxExe = linuxExe dummyVersion;
355− exe = serverOn system dummyVersion;
356− server = args@{ hostName, adminEmail, routeHost, enableHttps, version }:
384+ exe = serverOn mainProjectOut dummyVersion;
385+ server = args@{ hostName, adminEmail, routeHost, enableHttps, version, module ? serverModules.mkBaseEc2 }:
357386 server (args // { exe = linuxExe version; });
358− obelisk = import (base + "/.obelisk/impl") {};
387+ obelisk = import (base' + "/.obelisk/impl") {};
359388 };
360389 haskellPackageSets = {
361390 inherit (reflex-platform) ghc ghcjs;
dep/.gitignoredeleted−5
@@ -1,5 +0,0 @@
1−*
2−!*/
3−!.gitignore
4−!*/*.json
5−!*/default.nix
dep/gitignore.nix/default.nixnew file+8
@@ -0,0 +1,8 @@
1+# DO NOT HAND-EDIT THIS FILE
2+let fetch = { private ? false, fetchSubmodules ? false, owner, repo, rev, sha256, ... }:
3+ if !fetchSubmodules && !private then builtins.fetchTarball {
4+ url = "https://github.com/${owner}/${repo}/archive/${rev}.tar.gz"; inherit sha256;
5+ } else (import <nixpkgs> {}).fetchFromGitHub {
6+ inherit owner repo rev sha256 fetchSubmodules private;
7+ };
8+in import (fetch (builtins.fromJSON (builtins.readFile ./github.json)))
dep/gitignore.nix/github.jsonnew file+8
@@ -0,0 +1,8 @@
1+{
2+ "owner": "hercules-ci",
3+ "repo": "gitignore.nix",
4+ "branch": "master",
5+ "private": false,
6+ "rev": "7415c4feb127845553943a3856cbc5cb967ee5e0",
7+ "sha256": "1zd1ylgkndbb5szji32ivfhwh04mr1sbgrnvbrqpmfb67g2g3r9i"
8+}
dep/nixpkgs-19.09/default.nix → dep/hnix/default.nixrenamed

The content is the same.

dep/hnix/github.jsonnew file+7
@@ -0,0 +1,7 @@
1+{
2+ "owner": "haskell-nix",
3+ "repo": "hnix",
4+ "branch": "master",
5+ "rev": "6c9c7c310c54372b3db0fdf5a0137b395cde1bdb",
6+ "sha256": "1i5903b7lxqn2s3jarb14h6wdq8bxiik1hp0xy43w5w1hgvvq0g5"
7+}
dep/nixpkgs-19.09/github.jsondeleted−7
@@ -1,7 +0,0 @@
1−{
2− "owner": "nixos",
3− "repo": "nixpkgs-channels",
4− "branch": "nixos-19.09",
5− "rev": "ca9f709fd0b8535261234e6eb5d2020aaf1a2c61",
6− "sha256": "0z1qgmzx9dwbvwxf16f9m30y8lqy4zv4phl0mcyv7grfhj3s1abw"
7−}
dep/reflex-platform/default.nix+1−6
@@ -1,7 +1,2 @@
11# DO NOT HAND-EDIT THIS FILE
2−import ((import <nixpkgs> {}).fetchFromGitHub (
3− let json = builtins.fromJSON (builtins.readFile ./github.json);
4− in { inherit (json) owner repo rev sha256;
5− private = json.private or false;
6− }
7−))
2+import (import ./thunk.nix)
dep/reflex-platform/github.json+4−3
@@ -1,7 +1,8 @@
11{
22 "owner": "reflex-frp",
33 "repo": "reflex-platform",
4− "branch": "develop",
5− "rev": "aa8a9d1ac3d41ad51fbe04e575d4350da65cf3db",
6− "sha256": "0hffy5rcfy6ay06ww3cxykqzp024jfcdg6w1yrmnf0h80sjfgdcm"
4+ "branch": "release/0.7.0.0",
5+ "private": false,
6+ "rev": "27a7851a780ff21472d85f9a02fb84635ef9027a",
7+ "sha256": "1m4zlw91dpjlbdchjyxhvhv3k7lilm0qa17dhhww868xxc27sann"
78}
dep/reflex-platform/thunk.nixnew file+9
@@ -0,0 +1,9 @@
1+# DO NOT HAND-EDIT THIS FILE
2+let fetch = { private ? false, fetchSubmodules ? false, owner, repo, rev, sha256, ... }:
3+ if !fetchSubmodules && !private then builtins.fetchTarball {
4+ url = "https://github.com/${owner}/${repo}/archive/${rev}.tar.gz"; inherit sha256;
5+ } else (import <nixpkgs> {}).fetchFromGitHub {
6+ inherit owner repo rev sha256 fetchSubmodules private;
7+ };
8+ json = builtins.fromJSON (builtins.readFile ./github.json);
9+in fetch json
dep/snap-core/default.nixnew file+8
@@ -0,0 +1,8 @@
1+# DO NOT HAND-EDIT THIS FILE
2+let fetch = { private ? false, fetchSubmodules ? false, owner, repo, rev, sha256, ... }:
3+ if !fetchSubmodules && !private then builtins.fetchTarball {
4+ url = "https://github.com/${owner}/${repo}/archive/${rev}.tar.gz"; inherit sha256;
5+ } else (import <nixpkgs> {}).fetchFromGitHub {
6+ inherit owner repo rev sha256 fetchSubmodules private;
7+ };
8+in import (fetch (builtins.fromJSON (builtins.readFile ./github.json)))
dep/snap-core/github.jsonnew file+8
@@ -0,0 +1,8 @@
1+{
2+ "owner": "obsidiansystems",
3+ "repo": "snap-core",
4+ "branch": "ts-expose-fileserve-internals",
5+ "private": false,
6+ "rev": "e015fc484e38dd9389c58b277b1884395e553bdf",
7+ "sha256": "1793x1h4lw9vnrii5akhfxx1x9yrgxf3052jf6bs8f1mhaic6mxx"
8+}
docs/obelisk-logo-640.pngnew file

Binary file not shown.

guides/app-deploy/README.mdnew file+324
@@ -0,0 +1,324 @@
1+# Obelisk Application Deployment Guide
2+
3+This document serves two purposes, the first one is to guide new users that want to deploy Obelisk/Reflex apps and the second one to provide a walk-through for test driving Obelisk releases.
4+
5+> **Note:** This guide can be completed on a Linux host with Nix installed or a macOS host with Nix installed. Each section is labeled regarding which operating system hosts it supports. When going through the guide, start at the beginning and go through all sections that are supported on your host and merely skip sections that are not supported. The sections for iOS deployments require an iPhone or iPad device and the sections for Android deployments require an Android device. This guide assumes that you have Nix correctly set up and that your system is configured to fetch from binary caches instead of building everything on your machine. If you notice any of the commands below takes more than 5 minutes, then caches are not likely enabled.
6+>
7+> Refer to the [Obelisk Installation Documentation](https://github.com/obsidiansystems/obelisk#installing-obelisk) for instructions on configuring the binary caches for any Nix-compatible setup.
8+
9+## a) Get Obelisk (Linux, Mac)
10+
11+There are several ways to install Obelisk, but the one we are going to use here allows us to test a single version of Obelisk in different ways. The approach is to clone Obelisk from its GitHub repository and start a project that uses that local check out.
12+
13+Open a terminal and run the following:
14+
15+```bash
16+export WORKDIR=~/obelisk-guide
17+mkdir -p "$WORKDIR"
18+```
19+
20+Then let's get Obelisk from GitHub using a specific branch:
21+
22+```bash
23+export OBELISK_BRANCH=develop
24+git clone https://github.com/obsidiansystems/obelisk.git -b "$OBELISK_BRANCH" "$WORKDIR/obelisk"
25+```
26+
27+Once you have an Obelisk check out, you can build it using Nix and make a shortcut (alias) for the rest of the terminal session. With this you will be able to type `ob` anywhere as long as you do not close the terminal.
28+
29+```bash
30+alias ob=$(nix-build "$WORKDIR/obelisk" -A command --no-out-link)/bin/ob
31+```
32+
33+In order to start an Obelisk project, we need initialize it in a new directory. Let's call it `myapp`:
34+
35+```bash
36+mkdir -p "$WORKDIR/myapp"
37+cd "$WORKDIR/myapp"
38+ob init --branch "$OBELISK_BRANCH"
39+```
40+
41+> **Note:** If the `--branch` parameter is not used, then Obelisk sets your project up to look at the `master` branch from GitHub. This is quite handy for real life projects but distracting for our test drive since we want to make sure any changes we do to the Obelisk codebase (like testing a pull request) are immediately picked up.
42+
43+## b) Run the Obelisk app on localhost (Linux, Mac)
44+
45+Let's test that we can run a server on localhost. This is quite easy:
46+
47+```bash
48+cd "$WORKDIR/myapp"
49+ob run
50+```
51+
52+Now open a browser and point it to http://localhost:8000 (or just click on this link). You should see the following:
53+
54+![](assets/app-deploy.png)
55+
56+## c) Prepare a VirtualBox deploy target (Linux, Mac)
57+
58+### Import the NixOS VirtualBox appliance
59+
60+Install [VirtualBox](https://www.virtualbox.org/) on your machine.
61+
62+On NixOS, do this by adding the following line to your `/etc/nixos/configuration.nix` before the last line containing `}`:
63+
64+```nix
65+ virtualisation.virtualbox.host.enable = true;
66+```
67+
68+then `sudo nixos-rebuild switch`.
69+
70+The NixOS [download page](https://nixos.org/nixos/download.html) has a section called "VirtualBox appliances". Download that as the target system. The author used the 19.09 `.ova` file.
71+
72+With the downloaded file, open VirtualBox and import the `.ova` file:
73+
74+![](assets/virtualbox-appliance-import.png)
75+
76+Leave the default settings and finish the import. That will take a few minutes:
77+
78+![](assets/virtualbox-appliance-import-loading.png)
79+
80+You should now see a NixOS machine in the dashboard:
81+
82+![](assets/virtualbox-dashboard-nixos.png)
83+
84+If you are on a network with DHCP on your wireless or network card then right-click on the "NixOS" image and click "Settings". Go to the "Network" section and make "Attached to:" set to "Bridged Adapter".
85+
86+![](assets/virtualbox-image-settings-network.png)
87+
88+Finally, double-click on the "NixOS" machine and wait for it boot up. If it asks for a password, use `demo`.
89+
90+![](assets/virtualbox-nioxs-after-boot.png)
91+
92+### Configure the virtual machine for SSH
93+
94+Inside the virtual machine open up "Konsole" by clicking on the start menu in the bottom left corner and typing in "Konsole" until you see it as an option in the menu. Then click on it to open it.
95+
96+Change the system configuration using `sudo` to enable SSH access:
97+
98+```bash
99+sudo nano /etc/nixos/configuration.nix
100+```
101+
102+This will ask you to enter your password. Enter `demo`.
103+
104+![](assets/nano-edit-nixos-configuration.png)
105+
106+You need to add the following snippet right before the final line containing `}`.
107+
108+```nix
109+ services.openssh.enable = true;
110+ services.openssh.permitRootLogin = "yes";
111+```
112+
113+Save and close the editor by typing <kbd>Ctrl</kbd>+<kbd>O</kbd>, <kbd>Enter</kbd>, and then <kbd>Ctrl</kbd>+<kbd>X</kbd>.
114+
115+Now run `sudo nixos-rebuild switch` (if it asks for a password, again use `demo`) and then set the root password using `sudo passwd root`. Pick a simple password like `root`. You'll need to use it again.
116+
117+To get the virtual machine's IP address go back to the terminal on your *host* machine (not the virtual machine) and run:
118+
119+```bash
120+export VM_ID=$(VBoxManage list runningvms | grep "NixOS" | awk -F'[{}]' '{print $2}')
121+echo "$VM_ID"
122+```
123+
124+You should see a single identifier that looks like `388bbbe5-e0a2-4b20-9c76-bbaa5746682e`. If you see anything else then you likely you have multiple NixOS machines running. Stop any other machines and run this command again. (Of course, if you're a power user, just change the `grep` to pick out right VM.)
125+
126+Now get the IP address for that machine:
127+
128+```bash
129+export VM_IP=$(VBoxManage guestproperty enumerate "$VM_ID" | grep /V4/IP | awk '{print $4}' | sed 's/,//')
130+echo "$VM_IP"
131+```
132+
133+You should see an IP like `192.168.7.86`.
134+
135+With that you will be able to SSH into that machine from a terminal, using the username `root`.
136+
137+```bash
138+ssh root@$VM_IP echo "Access granted"
139+```
140+
141+This may ask if you want to trust the fingerprint for this server. Answer `yes`. It will ask you for a password. Enter the one you specified above. You should see `Access granted` printed after you type your password and hit <kbd>Enter</kbd>.
142+
143+> **Note:** If instead you see an error like this
144+>
145+> ```
146+> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
147+> @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
148+> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
149+> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
150+> Someone could be eavesdropping on you right now (man-in-the-middle attack)!
151+> It is also possible that a host key has just been changed.
152+> ```
153+>
154+> you need to remove the old fingerprint for this IP. Run the following:
155+>
156+> ```bash
157+> sed -i "/^$VM_IP /d" ~/.ssh/known_hosts
158+> ```
159+>
160+> and then try the previous `ssh` command again.
161+
162+Now we'll allow access with an SSH key instead of a password. Create a new SSH key with `ssh-keygen`:
163+
164+```bash
165+ssh-keygen -t ed25519 -f "$WORKDIR/obkey" -P ""
166+```
167+
168+Now copy your local SSH key to the server:
169+
170+```bash
171+ssh-copy-id -i "$WORKDIR/obkey.pub" root@$VM_IP
172+```
173+
174+This will ask you for your password again.
175+
176+Now test login with your key instead:
177+
178+```bash
179+ssh -i "$WORKDIR/obkey" root@$VM_IP echo "Access granted"
180+```
181+
182+This should print `Access granted` *without* asking for a password.
183+
184+### Configure the git remote
185+
186+Before the project can be deployed, it needs to be a valid `git` repository.
187+
188+> **Note:** You need `git` installed and configured. You can do that with:
189+>
190+> ```bash
191+> nix-env -i git
192+> git config --global user.name "John Doe"
193+> git config --global user.email johndoe@example.com
194+> ```
195+
196+```bash
197+git init --bare "$WORKDIR/myapp-git-remote"
198+cd "$WORKDIR/myapp"
199+git init
200+git add --all
201+git commit -m "initial commit"
202+git remote add origin "$WORKDIR/myapp-git-remote"
203+git push -u origin master
204+```
205+
206+### Initialize deployment directory
207+
208+With that, we can come back to the Obelisk app and initialize the deployment:
209+
210+```bash
211+cd "$WORKDIR/myapp"
212+ob deploy init --ssh-key "$WORKDIR/obkey" --admin-email a@a.a --hostname $VM_IP --route https://$VM_IP "$WORKDIR/myappdeploy" --disable-https
213+```
214+
215+Then configure the deployment for VirtualBox:
216+
217+```bash
218+echo '{nixosPkgs, ...}: {...}: { imports = [ (nixosPkgs.path + /nixos/modules/virtualisation/virtualbox-image.nix) ]; }' > "$WORKDIR/myappdeploy/module.nix"
219+```
220+
221+## d) Deploy to VirtualBox target (Linux only)
222+
223+> Deploying requires a Linux host in order to build the Linux binaries.
224+
225+Now we can deploy to the VirtualBox VM.
226+
227+```bash
228+cd "$WORKDIR/myappdeploy"
229+ob deploy push -v
230+```
231+
232+Once that is complete, open the webpage with
233+
234+```bash
235+xdg-open http://$VM_IP
236+```
237+
238+If that fails, just get the URL by running
239+
240+```bash
241+echo http://$VM_IP
242+```
243+
244+and copy/paste that URL into your browser navigation input.
245+
246+It should look like this:
247+
248+![](assets/app-deploy-2.png)
249+
250+Congratulations! You have deployed an Obelisk application to a remote server via SSH.
251+
252+## e) Deploy an Android app (Linux only)
253+
254+> **Note:** This section requires that you be running a Linux *host*.
255+
256+Modify `$WORKDIR/myapp/default.nix` to set `config.android_sdk.accept_license = true;` and then update your app.
257+
258+```bash
259+cd "$WORKDIR/myapp"
260+sed -i 's/# config.android_sdk.accept_license = false;/config.android_sdk.accept_license = true;/g' default.nix
261+git add default.nix
262+git commit -m"Accept license"
263+git push
264+```
265+
266+Make sure *USB debugging* is enabled in your Android device ([instructions here](https://developer.android.com/studio/debug/dev-options)) and connect the device using USB. Be sure to confirm any security prompts on the device.
267+
268+Now update your deployment and deploy to Android:
269+
270+```bash
271+cd "$WORKDIR/myappdeploy"
272+ob deploy update
273+ob deploy test android -v
274+```
275+
276+This deployment will ask you to create a password (at least 6 characters long) and then ask you a series of questions. You can pick arbitrary answers. When you are presented with prompt like:
277+
278+```
279+Is CN=a, OU=b, O=c, L=d, ST=e, C=f correct?
280+ [no]:
281+```
282+
283+You can enter `yes` to continue. If the deployment fails, try using different USB ports on your computer and running `ob deploy test android -v` again. The USB cable you use can also make a difference.
284+
285+When connecting your Android device you may be asked to "Allow USB debugging". You need to allow it.
286+![](assets/android-confirm-usb-debugging.jpg)
287+
288+
289+When the deployment is complete opening the app should look something like
290+
291+![](assets/android-app.jpg)
292+
293+Congratulations! You have deployed an Obelisk Android app via USB.
294+
295+## f) Deploy an iOS app (Mac only)
296+
297+> **Note:** This section requires that you be running a macOS *host*.
298+
299+Verify that you can see the device from XCode and you have installed a Provisioning profile that links your Apple Developer Id and the Device identifier. The workflow depends on whether or not you are an independent developer or part of an organization and is out of scope for this manual.
300+
301+![](assets/xcode-devices.png)
302+
303+Find your `Team ID` at the following URL (Apple Developer Membership details): https://developer.apple.com/account/#/membership/
304+
305+It will be something like `5B445B3WY1`. With that, you can start the deployment workflow after plugging in an iPhone or iPad via USB and setting it to trust the computer:
306+
307+```bash
308+cd "$WORKDIR/myappdeploy"
309+ob deploy test ios <TEAM-ID> # Use your Team ID here
310+```
311+
312+![](assets/ios-deploy-keychain.png)
313+
314+![](assets/ios-deploy-example.png)
315+
316+If there are no errors and the last line says `100% Installed Package` you can open the device and look for the Obelisk app:
317+
318+![](assets/ios-obelisk-app-icon.jpg)
319+
320+![](assets/ios-obelisk-app-open.jpg)
321+
322+Congratulations, you have deployed an Obelisk app on an iOS device.
323+
324+You are now ready to create your own multi-platform application using Obelisk!
guides/app-deploy/assets/android-app.jpgnew file

Binary file not shown.

guides/app-deploy/assets/android-confirm-usb-debugging.jpgnew file

Binary file not shown.

guides/app-deploy/assets/app-deploy-2.pngnew file

Binary file not shown.

guides/app-deploy/assets/app-deploy.pngnew file

Binary file not shown.

guides/app-deploy/assets/ios-deploy-example.pngnew file

Binary file not shown.

guides/app-deploy/assets/ios-deploy-keychain.pngnew file

Binary file not shown.

guides/app-deploy/assets/ios-obelisk-app-icon.jpgnew file

Binary file not shown.

guides/app-deploy/assets/ios-obelisk-app-open.jpgnew file

Binary file not shown.

guides/app-deploy/assets/nano-edit-nixos-configuration.pngnew file

Binary file not shown.

guides/app-deploy/assets/virtualbox-appliance-import-loading.pngnew file

Binary file not shown.

guides/app-deploy/assets/virtualbox-appliance-import.pngnew file

Binary file not shown.

guides/app-deploy/assets/virtualbox-dashboard-nixos.pngnew file

Binary file not shown.

guides/app-deploy/assets/virtualbox-image-settings-network.pngnew file

Binary file not shown.

guides/app-deploy/assets/virtualbox-nioxs-after-boot.pngnew file

Binary file not shown.

guides/app-deploy/assets/xcode-devices.pngnew file

Binary file not shown.

haskell-overlays/ghcide.nixnew file+40
@@ -0,0 +1,40 @@
1+self: super:
2+let
3+ pkgs = self.callPackage ({ pkgs }: pkgs) { };
4+ inherit (pkgs.haskell.lib) dontCheck justStaticExecutables;
5+ inherit (pkgs.haskellPackages) callHackageDirect callHackage;
6+
7+in {
8+ ghcide = justStaticExecutables (dontCheck (callHackageDirect {
9+ pkg = "ghcide";
10+ ver = "0.2.0";
11+ sha256 = "199l4qzrghhz6wbfkgqdl4gll4wvgpr190kinzhv88idnn9pxm96";
12+ } rec {
13+ ghc-check = callHackageDirect {
14+ pkg = "ghc-check";
15+ ver = "0.3.0.1";
16+ sha256 = "1dj909m09m24315x51vxvcl28936ahsw4mavbc53danif3wy09ns";
17+ } { };
18+ lsp-test = dontCheck (callHackage "lsp-test" "0.6.1.0" { });
19+ haddock-library = dontCheck (callHackage "haddock-library" "1.8.0" { });
20+ haskell-lsp = dontCheck (callHackageDirect {
21+ pkg = "haskell-lsp";
22+ ver = "0.22.0.0";
23+ sha256 = "1q3w46qcvzraxgmw75s7bl0qvb2fvff242r5vfx95sqska566b4m";
24+ } { inherit haskell-lsp-types; });
25+ haskell-lsp-types = dontCheck (callHackageDirect {
26+ pkg = "haskell-lsp-types";
27+ ver = "0.22.0.0";
28+ sha256 = "1apjclphi2v6ggrdnbc0azxbb1gkfj3x1vkwpc8qd6lsrbyaf0n8";
29+ } { });
30+ regex-tdfa = dontCheck (callHackage "regex-tdfa" "1.3.1.0" {
31+ regex-base = dontCheck (callHackage "regex-base" "0.94.0.0" { });
32+ });
33+ shake = dontCheck (callHackage "shake" "0.18.4" { });
34+ hie-bios = dontCheck (callHackageDirect {
35+ pkg = "hie-bios";
36+ ver = "0.5.0";
37+ sha256 = "116nmpva5jmlgc2dgy8cm5wv6cinhzmga1l0432p305074w720r2";
38+ } { });
39+ }));
40+}
haskell-overlays/misc-deps.nixnew file+26
@@ -0,0 +1,26 @@
1+{ hackGet }:
2+
3+# Fix misc upstream packages
4+self: super:
5+
6+let
7+ pkgs = self.callPackage ({ pkgs }: pkgs) {};
8+ haskellLib = pkgs.haskell.lib;
9+in
10+
11+{
12+ regex-base = self.callHackage "regex-base" "0.94.0.0" {};
13+ regex-posix = self.callHackage "regex-posix" "0.96.0.0" {};
14+ regex-tdfa = self.callHackage "regex-tdfa" "1.3.1.0" {};
15+ test-framework = haskellLib.dontCheck (self.callHackage "test-framework" "0.8.2.0" {});
16+ hnix = haskellLib.dontCheck (self.callHackage "hnix" "0.8.0" {});
17+ hnix-store-core = self.callHackage "hnix-store-core" "0.2.0.0" {};
18+
19+ aeson-gadt-th = self.callHackage "aeson-gadt-th" "0.2.4" {};
20+
21+ ghcid = self.callCabal2nix "ghcid" (hackGet ../dep/ghcid) {};
22+ # Exports more internals
23+ snap-core = haskellLib.dontCheck (self.callCabal2nix "snap-core" (hackGet ../dep/snap-core) {});
24+
25+ shelly = self.callHackage "shelly" "1.9.0" {};
26+}
haskell-overlays/obelisk.nixnew file+48
@@ -0,0 +1,48 @@
1+# Add obelisk packages
2+
3+self: super:
4+
5+let
6+ pkgs = self.callPackage ({ pkgs }: pkgs) {};
7+ inherit (pkgs) obeliskCleanSource;
8+ haskellLib = pkgs.haskell.lib;
9+ onLinux = pkg: f: if pkgs.stdenv.isLinux then f pkg else pkg;
10+in
11+
12+{
13+ obelisk-executable-config-inject = pkgs.obeliskExecutableConfig.platforms.web.inject self;
14+
15+ obelisk-asset-manifest = self.callCabal2nix "obelisk-asset-manifest" (obeliskCleanSource ../lib/asset/manifest) {};
16+ obelisk-asset-serve-snap = self.callCabal2nix "obelisk-asset-serve-snap" (obeliskCleanSource ../lib/asset/serve-snap) {};
17+ obelisk-backend = self.callCabal2nix "obelisk-backend" (obeliskCleanSource ../lib/backend) {};
18+ obelisk-cliapp = self.callCabal2nix "obelisk-cliapp" (obeliskCleanSource ../lib/cliapp) {};
19+ obelisk-command = haskellLib.overrideCabal (self.callCabal2nix "obelisk-command" (obeliskCleanSource ../lib/command) {}) {
20+ librarySystemDepends = [
21+ pkgs.jre
22+ pkgs.git
23+ pkgs.nix
24+ pkgs.nix-prefetch-git
25+ pkgs.openssh
26+ pkgs.rsync
27+ pkgs.which
28+ (haskellLib.justStaticExecutables self.ghcid)
29+ ];
30+ };
31+ obelisk-frontend = self.callCabal2nix "obelisk-frontend" (obeliskCleanSource ../lib/frontend) {};
32+ obelisk-run = onLinux (self.callCabal2nix "obelisk-run" (obeliskCleanSource ../lib/run) {}) (pkg:
33+ haskellLib.overrideCabal pkg (drv: { librarySystemDepends = [ pkgs.iproute ]; })
34+ );
35+ obelisk-route = self.callCabal2nix "obelisk-route" (obeliskCleanSource ../lib/route) {};
36+ obelisk-selftest = haskellLib.overrideCabal (self.callCabal2nix "obelisk-selftest" (obeliskCleanSource ../lib/selftest) {}) {
37+ librarySystemDepends = [
38+ pkgs.cabal-install
39+ pkgs.coreutils
40+ pkgs.git
41+ pkgs.nix
42+ pkgs.nix-prefetch-git
43+ pkgs.rsync
44+ ];
45+ };
46+ obelisk-snap-extras = self.callCabal2nix "obelisk-snap-extras" (obeliskCleanSource ../lib/snap-extras) {};
47+ tabulation = self.callCabal2nix "tabulation" (obeliskCleanSource ../lib/tabulation) {};
48+}
haskell-overlays/tighten-ob-exes.nixnew file+32
@@ -0,0 +1,32 @@
1+self: super:
2+
3+let
4+ pkgs = self.callPackage ({ pkgs }: pkgs) {};
5+ haskellLib = pkgs.haskell.lib;
6+
7+ commandRuntimeDeps = with pkgs; [
8+ coreutils
9+ git
10+ nix-prefetch-git
11+ openssh
12+ ];
13+in
14+
15+{
16+ # Dynamic linking with split objects dramatically increases startup time (about
17+ # 0.5 seconds on a decent machine with SSD), so we do `justStaticExecutables`.
18+ obelisk-command = haskellLib.overrideCabal
19+ (haskellLib.generateOptparseApplicativeCompletion "ob"
20+ (haskellLib.justStaticExecutables super.obelisk-command))
21+ (drv: {
22+ buildTools = (drv.buildTools or []) ++ [ pkgs.buildPackages.makeWrapper ];
23+ postFixup = ''
24+ ${drv.postFixup or ""}
25+ # Make `ob` reference its runtime dependencies.
26+ wrapProgram "$out"/bin/ob --prefix PATH : ${pkgs.lib.makeBinPath commandRuntimeDeps}
27+ '';
28+ passthru = { inherit commandRuntimeDeps; };
29+ });
30+
31+ obelisk-selftest = haskellLib.justStaticExecutables super.obelisk-selftest;
32+}
jobsets.nixdeleted−71
@@ -1,71 +0,0 @@
1−{ prs }:
2−
3−let
4− self = import ./. {};
5− pkgs = self.nixpkgs;
6− mkFetchGithub = value: {
7− inherit value;
8− type = "git";
9− emailresponsible = false;
10− };
11−in
12−with pkgs.lib;
13−let
14− defaults = jobs: {
15− inherit (jobs) description;
16− enabled = 1;
17− hidden = false;
18− keepnr = 10;
19− schedulingshares = 100;
20− checkinterval = 120;
21− enableemail = false;
22− emailoverride = "";
23− nixexprinput = "obelisk";
24− nixexprpath = "release.nix";
25− inputs = jobs.inputs // {
26− nixpkgs = {
27− type = "git";
28− value = "https://github.com/NixOS/nixpkgs-channels nixos-unstable";
29− emailresponsible = false;
30− };
31− };
32− self-args = {
33− type = "nix";
34− value = "{ config.android_sdk.accept_license = true; }";
35− emailresponsible = false;
36− };
37− };
38− branchJobset = branch: defaults {
39− description = "obelisk-${branch}";
40− inputs = {
41− obelisk = {
42− value = "https://github.com/obsidiansystems/obelisk ${branch}";
43− type = "git";
44− emailresponsible = false;
45− };
46− };
47− };
48− makePr = num: info: {
49− name = "obelisk-pr-${num}";
50− value = defaults {
51− description = "#${num}: ${info.title}";
52− inputs = {
53− obelisk = {
54− #NOTE: This should really use "pull/${num}/merge"; however, GitHub's
55− #status checks only operate on PR heads. This creates a race
56− #condition, which can currently only be solved by requiring PRs to be
57− #up to date before they're merged. See
58− #https://github.com/isaacs/github/issues/1002
59− value = "https://github.com/obsidiansystems/obelisk pull/${num}/head";
60− type = "git";
61− emailresponsible = false;
62− };
63− };
64− };
65− };
66− processedPrs = mapAttrs' makePr (builtins.fromJSON (builtins.readFile prs));
67− jobsetsAttrs = processedPrs //
68− genAttrs ["master"] branchJobset;
69−in {
70− jobsets = pkgs.writeText "spec.json" (builtins.toJSON jobsetsAttrs);
71−}
lib/asset/README.md+17−20
@@ -1,29 +1,26 @@
1−## obelisk-asset
1+# obelisk-asset
22
3−The 'assets.nix' file contains nix expressions that are a mutually
4−recursive set of attributes used to create static asset directories
5−with hashable file encodings. This file should be incorporated within
6−your project's 'default.nix' file. (See ./example/default.nix , line 2)
7−```
8−{assets ? import ./../assets.nix { inherit nixpkgs; }
9−}:
10−```
3+[![Haskell Programming Language](https://img.shields.io/badge/language-Haskell-blue.svg)](http://www.haskell.org)
4+[![BSD3 License](http://img.shields.io/badge/license-BSD3-brightgreen.svg)](https://github.com/obsidiansystems/obelisk/blob/master/LICENSE)
115
12−The 'mkAssets' and 'mkAssetsWith' functions within 'assets.nix' only
13−need to be passed an encoding('zopfliEncodings', 'gzipEncodings',
14−'noEncodings') and a static directory of your choice as arguments.
6+**Efficiently served, aggressively cached static web resources.**
157
16−In this example, 'mkAssets' is used on a directory that has a .png
17−file inside of it. (See ./example/default.nix, line 11)
8+The `assets.nix` file contains nix expressions that are a mutually recursive set of attributes used to create static asset directories with hashable file encodings. This file should be incorporated within your project's `default.nix` file. (See `example/default.nix`, line 2)
9+
10+```nix
11+{ assets ? import ./../assets.nix { inherit nixpkgs; } }:
1812```
19−myAssets = assets.mkAssets ./static;
13+
14+The `mkAssets` and `mkAssetsWith` functions within `assets.nix` only need to be passed an `encoding("zopfliEncodings", "gzipEncodings", "noEncodings")` and a static directory of your choice as arguments.
15+
16+In this example, `mkAssets` is used on a directory that has a `.png` file inside of it. (See `example/default.nix`, line 11)
17+
18+```nix
19+myAssets = assets.mkAssets ./static;
2020```
2121
22−Once you have successfully incorporated 'assets.nix' into your
23−project's nix file(s), use nix-build to generate a symlink of
24−your 'mkAssets' expression. The following command from
25−example/run-example (line 3) will generate an immutable symlink
26−that holds hashed static assets.
22+Once you have successfully incorporated `assets.nix` into your project's nix file(s), use `nix-build` to generate a symlink of your `mkAssets` expression. The following command from `example/run-example` (line 3) will generate an immutable symlink that holds hashed static assets.
23+
2724```bash
2825nix-build -o static.assets -A myAssets
2926```
lib/asset/assets.nix+28−5
@@ -20,7 +20,7 @@ zopfliEncodings = file:
2020 nixpkgs.stdenv.mkDerivation {
2121 name = "encodings";
2222
23− input = file;
23+ input = mkPath file;
2424
2525 builder = builtins.toFile "builder.sh" ''
2626 source "$stdenv/setup"
@@ -46,7 +46,7 @@ gzipEncodings = file:
4646 nixpkgs.stdenv.mkDerivation {
4747 name = "encodings";
4848
49− input = file;
49+ input = mkPath file;
5050
5151 builder = builtins.toFile "builder.sh" ''
5252 source "$stdenv/setup"
@@ -70,7 +70,7 @@ noEncodings = file:
7070 nixpkgs.stdenv.mkDerivation {
7171 name = "encodings";
7272
73− input = file;
73+ input = mkPath file;
7474
7575 builder = builtins.toFile "builder.sh" ''
7676 source "$stdenv/setup"
@@ -203,7 +203,7 @@ hashFile = path:
203203 nixpkgs.nix
204204 ];
205205 preferLocalBuild = true;
206− inherit path;
206+ path = mkPath path;
207207 } ''
208208 nix-hash --flat --base32 --type sha256 "$path" | tr -d '\n' >"$out"
209209 '');
@@ -224,7 +224,30 @@ symlink = path: {
224224 inherit path;
225225};
226226
227−# Given a encoding generation function and a file entry resulting from readDirRecursive in the form { name :: String, value: { path :: String } },
227+# Tests if a given character (string of length 1) is valid for a derivation path name.
228+# Passing a string of length other than 1 is undefined.
229+# :: Char -> Bool
230+isValidDrvNameChar = c: "a" <= c && c <= "z" || "A" <= c && c <= "Z" || "0" <= c && c <= "9" || c == "+" || c == "-" || c == "_" || c == "?" || c == "=" || c == ".";
231+
232+# Convert a string into a string that could be used in a derivation name.
233+# replacement lets you choose how to replace invalid characters. It may be any length.
234+# If it contains invalid characters then the result will also be invalid.
235+# :: { str :: String, replacement :: String } -> String
236+mkValidDrvName = { str, replacement ? "?" }:
237+ let
238+ newName = stringAsChars (c: if isValidDrvNameChar c then c else replacement) str;
239+ in if builtins.substring 0 1 newName == "." then "_" + newName else newName;
240+
241+# Like builtins.path but always ensures the name is valid.
242+mkPath = path:
243+ if builtins.typeOf path == "path" # Don't mess with non-paths
244+ then builtins.path {
245+ inherit path;
246+ name = mkValidDrvName { str = builtins.baseNameOf path; };
247+ }
248+ else path;
249+
250+# Given an encoding generation function and a file entry resulting from readDirRecursive in the form { name :: String, value: { path :: String } },
228251# build a DirEntry for dirToPath with the various encodings of the asset for dirToPath to build into a final directory tree.
229252mkAsset = encodings: {name, value}:
230253 let nameWithHash = "${hashFile value.path}-${name}";
lib/asset/manifest/obelisk-asset-manifest.cabal+4−2
@@ -24,7 +24,7 @@ library
2424 , template-haskell
2525 , text
2626 , transformers
27− , unix
27+ , unix-compat
2828 , vector
2929 exposed-modules:
3030 Obelisk.Asset.Gather
@@ -33,7 +33,9 @@ library
3333 Obelisk.Asset.TH
3434
3535 other-extensions: TemplateHaskell
36− ghc-options: -Wall -Werror -fno-warn-unused-do-bind -fwarn-tabs -funbox-strict-fields -O2 -fprof-auto-calls
36+ ghc-options:
37+ -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O2
38+ -fno-warn-unused-do-bind -funbox-strict-fields -fprof-auto-calls
3739
3840executable obelisk-asset-manifest-generate
3941 hs-source-dirs: src-bin
lib/asset/manifest/src/Obelisk/Asset/Symlink.hs+1−1
@@ -7,7 +7,7 @@ import Data.Map (Map)
77import qualified Data.Map as Map
88import System.Directory
99import System.FilePath.Posix
10−import System.Posix.Files
10+import System.PosixCompat.Files
1111
1212-- | Copy the given hashed files from one location to hashed paths in another
1313-- location, and symlink the unhashed paths to the hashed ones
lib/asset/serve-snap/obelisk-asset-serve-snap.cabal+4−2
@@ -23,10 +23,12 @@ library
2323 , obelisk-snap-extras
2424 , text
2525 , transformers
26− , unix
26+ , unix-compat
2727 exposed-modules:
2828 Obelisk.Asset.Accept
2929 Obelisk.Asset.Serve.Snap
3030
3131 other-extensions: TemplateHaskell
32− ghc-options: -Wall -Werror -fno-warn-unused-do-bind -fwarn-tabs -funbox-strict-fields -O2 -fprof-auto-calls
32+ ghc-options:
33+ -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O2
34+ -fno-warn-unused-do-bind -funbox-strict-fields -fprof-auto-calls
lib/asset/serve-snap/src/Obelisk/Asset/Accept.hs+6−6
@@ -136,16 +136,16 @@ qvalue = do
136136 skipMany lws
137137 q0 <|> q1
138138 where q0 = do
139− char '0'
139+ _ <- char '0'
140140 decimals <- option [] $ do
141− char '.'
141+ _ <- char '.'
142142 starRule (Just 0) (Just numAllowedDigits) digit
143143 return $ QValue $ MkFixed $ fromIntegral $ (read ('0' : decimals) :: Int) * 10 ^ (numAllowedDigits - length decimals)
144144 q1 = do
145− char '1'
145+ _ <- char '1'
146146 option () $ do
147− char '.'
148− starRule (Just 0) (Just numAllowedDigits) $ char '0'
147+ _ <- char '.'
148+ _ <- starRule (Just 0) (Just numAllowedDigits) $ char '0'
149149 return ()
150150 return $ QValue 1
151151 numAllowedDigits :: Int
@@ -232,7 +232,7 @@ hashRule minNum maxNum element = do
232232lws :: Parser ()
233233lws = do
234234 option () $ cr >> lf
235− starRule (Just 1) Nothing $ sp <|> ht
235+ _ <- starRule (Just 1) Nothing $ sp <|> ht
236236 return ()
237237
238238-- | See http://www.w3.org/Protocols/rfc2616/rfc2616-sec2.html#sec2.2
lib/asset/serve-snap/src/Obelisk/Asset/Serve/Snap.hs+15−5
@@ -12,12 +12,13 @@ import Obelisk.Asset.Accept (Encoding (..), acceptEncodingBody, chooseEncoding,
1212import Obelisk.Snap.Extras
1313
1414import Snap
15− (MonadSnap, getHeader, getsRequest, modifyResponse, pass, redirect, sendFile, setContentLength, setContentType, setHeader, setResponseCode)
15+ (MonadSnap, getHeader, getRequest, getsRequest, modifyResponse, pass, redirect, sendFile, setContentLength, setContentType, setHeader, setResponseCode)
1616import Snap.Util.FileServe (defaultMimeTypes, fileType, getSafePath, serveFile)
17+import Snap.Internal.Util.FileServe (checkRangeReq)
1718
1819import Control.Applicative ((<|>))
1920import Control.Exception (handleJust, try, throwIO)
20−import Control.Monad (forM, liftM)
21+import Control.Monad (forM, liftM, unless)
2122import Control.Monad.IO.Class (liftIO)
2223import Control.Monad.Fail (MonadFail)
2324import Data.Attoparsec.ByteString (parseOnly, endOfInput)
@@ -30,7 +31,7 @@ import Data.Text.Encoding (decodeUtf8, encodeUtf8)
3031import System.Directory (getDirectoryContents)
3132import System.FilePath ((</>), splitFileName, takeDirectory)
3233import System.IO.Error (isDoesNotExistError)
33−import System.Posix (getFileStatus, fileSize)
34+import System.PosixCompat.Files (getFileStatus, fileSize)
3435
3536-- | Serve static assets from an asset directory generated via @assets.nix@ or, failing that, from a regular directory.
3637--
@@ -94,8 +95,17 @@ serveAsset' doRedirect base fallback p = do
9495 let finalFilename = base </> p </> "encodings" </> T.unpack (decodeUtf8 e)
9596 stat <- liftIO $ getFileStatus finalFilename
9697 modifyResponse $ setHeader "Last-Modified" "Thu, 1 Jan 1970 00:00:00 GMT"
97− modifyResponse $ setResponseCode 200 . setContentLength (fromIntegral $ fileSize stat) . setContentType (fileType defaultMimeTypes p)
98− sendFile finalFilename
98+ . setHeader "Accept-Ranges" "bytes"
99+ . setContentType (fileType defaultMimeTypes p)
100+ let size = fromIntegral $ fileSize stat
101+ req <- getRequest
102+ -- Despite the name, this function actually does all of the work for
103+ -- responding to range requests. We only need to handle *none* range
104+ -- requests ourselves.
105+ wasRange <- checkRangeReq req finalFilename size
106+ unless wasRange $ do
107+ modifyResponse $ setResponseCode 200 . setContentLength size
108+ sendFile finalFilename
99109 Just _ -> cachePermanently >> modifyResponse (setResponseCode 304)
100110 Right "redirect" -> do
101111 mtarget <- liftIO $ getAssetTarget $ base </> p
lib/backend/obelisk-backend.cabal+2−2
@@ -21,10 +21,10 @@ library
2121 obelisk-frontend,
2222 obelisk-route,
2323 obelisk-snap-extras,
24− reflex-dom,
24+ reflex-dom-core,
2525 snap,
2626 snap-server,
2727 text,
2828 universe
2929 exposed-modules: Obelisk.Backend
30− ghc-options: -Wall
30+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/backend/src/Obelisk/Backend.hs+120−36
@@ -1,3 +1,5 @@
1+{-# LANGUAGE DeriveFunctor #-}
2+{-# LANGUAGE DeriveGeneric #-}
13{-# LANGUAGE FlexibleContexts #-}
24{-# LANGUAGE FlexibleInstances #-}
35{-# LANGUAGE GADTs #-}
@@ -9,25 +11,37 @@
911{-# OPTIONS_GHC -fno-warn-orphans #-}
1012module Obelisk.Backend
1113 ( Backend (..)
14+ , BackendConfig (..)
15+ , defaultBackendConfig
16+ , StaticAssets (..)
17+ , defaultStaticAssets
18+ -- * Running a backend
19+ , runBackend
20+ , runBackendWith
21+ -- * Configuration of backend
22+ , GhcjsWidgets(..)
23+ , defaultGhcjsWidgets
24+ -- * all.js script loading functions
25+ , deferredGhcjsScript
26+ , delayedGhcjsScript
27+ -- * all.js preload functions
28+ , preloadGhcjs
29+ , renderAllJsPath
1230 -- * Re-exports
1331 , Default (def)
1432 , getPageName
1533 , getRouteWith
1634 , runSnapWithCommandLineArgs
35+ , runSnapWithConfig
1736 , serveDefaultObeliskApp
1837 , prettifyOutput
19− , runBackend
2038 , staticRenderContentType
21− , mkRouteToUrl
2239 , getPublicConfigs
2340 ) where
2441
25−import Prelude hiding (id, (.))
26−import Control.Category
2742import Control.Monad
2843import Control.Monad.Except
2944import Control.Monad.Fail (MonadFail)
30−import Control.Categorical.Bifunctor
3145import Data.ByteString (ByteString)
3246import qualified Data.ByteString.Char8 as BSC8
3347import Data.Default (Default (..))
@@ -38,13 +52,13 @@ import qualified Data.Map as Map
3852import Data.Monoid ((<>))
3953import Data.Text (Text)
4054import qualified Data.Text as T
41−import Data.Text.Encoding
55+import GHC.Generics (Generic)
4256import Obelisk.Asset.Serve.Snap (serveAsset)
4357import qualified Obelisk.ExecutableConfig.Lookup as Lookup
4458import Obelisk.Frontend
4559import Obelisk.Route
4660import Obelisk.Snap.Extras (doNotCache, serveFileIfExistsAs)
47−import Reflex.Dom
61+import Reflex.Dom.Core
4862import Snap (MonadSnap, Snap, commandLineConfig, defaultConfig, getsRequest, httpServe, modifyResponse
4963 , rqPathInfo, rqQueryString, setContentType, writeBS, writeText
5064 , rqCookies, Cookie(..) , setHeader)
@@ -54,27 +68,52 @@ import System.IO (BufferMode (..), hSetBuffering, stderr, stdout)
5468data Backend backendRoute frontendRoute = Backend
5569 { _backend_routeEncoder :: Encoder (Either Text) Identity (R (FullRoute backendRoute frontendRoute)) PageName
5670 , _backend_run :: ((R backendRoute -> Snap ()) -> IO ()) -> IO ()
57− }
71+ } deriving (Generic)
72+
73+data BackendConfig frontendRoute = BackendConfig
74+ { _backendConfig_runSnap :: !(Snap () -> IO ()) -- ^ Function to run the snap server
75+ , _backendConfig_staticAssets :: !StaticAssets -- ^ Static assets
76+ , _backendConfig_ghcjsWidgets :: !(GhcjsWidgets (Text -> FrontendWidgetT (R frontendRoute) ()))
77+ -- ^ Given the URL of all.js, return the widgets which are responsible for
78+ -- loading the script.
79+ } deriving (Generic)
5880
5981-- | The static assets provided must contain a compiled GHCJS app that corresponds exactly to the Frontend provided
6082data GhcjsApp route = GhcjsApp
6183 { _ghcjsApp_compiled :: !StaticAssets
6284 , _ghcjsApp_value :: !(Frontend route)
85+ } deriving (Generic)
86+
87+-- | Widgets used to load all.js on the frontend
88+data GhcjsWidgets a = GhcjsWidgets
89+ { _ghcjsWidgets_preload :: a
90+ -- ^ A preload widget, placed in the document head
91+ , _ghcjsWidgets_script :: a
92+ -- ^ A script widget, placed in the document body
93+ } deriving (Functor, Generic)
94+
95+
96+-- | Given the URL of all.js, return the widgets which are responsible for
97+-- loading the script. Defaults to 'preloadGhcjs' and 'deferredGhcjsScript'.
98+defaultGhcjsWidgets :: GhcjsWidgets (Text -> FrontendWidgetT r ())
99+defaultGhcjsWidgets = GhcjsWidgets
100+ { _ghcjsWidgets_preload = preloadGhcjs
101+ , _ghcjsWidgets_script = deferredGhcjsScript
63102 }
64103
65104-- | Serve a frontend, which must be the same frontend that Obelisk has built and placed in the default location
66105--TODO: The frontend should be provided together with the asset paths so that this isn't so easily breakable; that will probably make this function obsolete
67106serveDefaultObeliskApp
68107 :: (MonadSnap m, HasCookies m, MonadFail m)
69− => (R appRoute
70− -> Text)
71− -> ([Text]
72− -> m ())
108+ => (R appRoute -> Text)
109+ -> GhcjsWidgets (FrontendWidgetT (R appRoute) ())
110+ -> ([Text] -> m ())
73111 -> Frontend (R appRoute)
74112 -> Map Text ByteString
75113 -> R (ObeliskRoute appRoute)
76114 -> m ()
77−serveDefaultObeliskApp urlEnc serveStaticAsset frontend configs = serveObeliskApp urlEnc serveStaticAsset frontendApp configs
115+serveDefaultObeliskApp urlEnc ghcjsWidgets serveStaticAsset frontend =
116+ serveObeliskApp urlEnc ghcjsWidgets serveStaticAsset frontendApp
78117 where frontendApp = GhcjsApp
79118 { _ghcjsApp_compiled = defaultFrontendGhcjsAssets
80119 , _ghcjsApp_value = frontend
@@ -99,17 +138,20 @@ defaultFrontendGhcjsAssets = StaticAssets
99138 , _staticAssets_unprocessed = "frontend.jsexe"
100139 }
101140
102−runSnapWithCommandLineArgs :: MonadIO m => Snap () -> m ()
103−runSnapWithCommandLineArgs a = do
104− -- Get the web server configuration from the command line
105− cmdLineConf <- liftIO $ commandLineConfig defaultConfig
106− let httpConf = cmdLineConf
141+runSnapWithConfig :: MonadIO m => Config Snap a -> Snap () -> m ()
142+runSnapWithConfig conf a = do
143+ let httpConf = conf
107144 { accessLog = Just $ ConfigIoLog BSC8.putStrLn
108145 , errorLog = Just $ ConfigIoLog BSC8.putStrLn
109146 }
110147 -- Start the web server
111148 liftIO $ httpServe httpConf a
112149
150+-- Get the web server configuration from the command line
151+runSnapWithCommandLineArgs :: MonadIO m => Snap () -> m ()
152+runSnapWithCommandLineArgs s = liftIO (commandLineConfig defaultConfig) >>= \c ->
153+ runSnapWithConfig c s
154+
113155getPageName :: (MonadSnap m) => m PageName
114156getPageName = do
115157 p <- getsRequest rqPathInfo
@@ -121,19 +163,24 @@ getRouteWith e = do
121163 pageName <- getPageName
122164 return $ tryDecode e pageName
123165
166+renderAllJsPath :: Encoder Identity Identity (R (FullRoute a b)) PageName -> Text
167+renderAllJsPath validFullEncoder =
168+ renderObeliskRoute validFullEncoder $ FullRoute_Frontend (ObeliskRoute_Resource ResourceRoute_Ghcjs) :/ ["all.js"]
169+
124170serveObeliskApp
125171 :: (MonadSnap m, HasCookies m, MonadFail m)
126172 => (R appRoute -> Text)
173+ -> GhcjsWidgets (FrontendWidgetT (R appRoute) ())
127174 -> ([Text] -> m ())
128175 -> GhcjsApp (R appRoute)
129176 -> Map Text ByteString
130177 -> R (ObeliskRoute appRoute)
131178 -> m ()
132−serveObeliskApp urlEnc serveStaticAsset frontendApp config = \case
133− ObeliskRoute_App appRouteComponent :=> Identity appRouteRest -> serveGhcjsApp urlEnc frontendApp config $ GhcjsAppRoute_App appRouteComponent :/ appRouteRest
179+serveObeliskApp urlEnc ghcjsWidgets serveStaticAsset frontendApp config = \case
180+ ObeliskRoute_App appRouteComponent :=> Identity appRouteRest -> serveGhcjsApp urlEnc ghcjsWidgets frontendApp config $ GhcjsAppRoute_App appRouteComponent :/ appRouteRest
134181 ObeliskRoute_Resource resComponent :=> Identity resRest -> case resComponent :=> Identity resRest of
135182 ResourceRoute_Static :=> Identity pathSegments -> serveStaticAsset pathSegments
136− ResourceRoute_Ghcjs :=> Identity pathSegments -> serveGhcjsApp urlEnc frontendApp config $ GhcjsAppRoute_Resource :/ pathSegments
183+ ResourceRoute_Ghcjs :=> Identity pathSegments -> serveGhcjsApp urlEnc ghcjsWidgets frontendApp config $ GhcjsAppRoute_Resource :/ pathSegments
137184 ResourceRoute_JSaddleWarp :=> Identity _ -> do
138185 let msg = "Error: Obelisk.Backend received jsaddle request"
139186 liftIO $ putStrLn $ T.unpack msg
@@ -160,48 +207,85 @@ staticRenderContentType = "text/html; charset=utf-8"
160207serveGhcjsApp
161208 :: (MonadSnap m, HasCookies m, MonadFail m)
162209 => (R appRouteComponent -> Text)
210+ -> GhcjsWidgets (FrontendWidgetT (R appRouteComponent) ())
163211 -> GhcjsApp (R appRouteComponent)
164212 -> Map Text ByteString
165213 -> R (GhcjsAppRoute appRouteComponent)
166214 -> m ()
167−serveGhcjsApp urlEnc app config = \case
215+serveGhcjsApp urlEnc ghcjsWidgets app config = \case
168216 GhcjsAppRoute_App appRouteComponent :=> Identity appRouteRest -> do
169217 modifyResponse $ setContentType staticRenderContentType
170218 modifyResponse $ setHeader "Cache-Control" "no-store private"
171− writeBS <=< renderGhcjsFrontend urlEnc (appRouteComponent :/ appRouteRest) config $ _ghcjsApp_value app
219+ writeBS <=< renderGhcjsFrontend urlEnc ghcjsWidgets (appRouteComponent :/ appRouteRest) config $ _ghcjsApp_value app
172220 GhcjsAppRoute_Resource :=> Identity pathSegments -> serveStaticAssets (_ghcjsApp_compiled app) pathSegments
173221
222+-- | Default obelisk backend configuration.
223+defaultBackendConfig :: BackendConfig frontendRoute
224+defaultBackendConfig = BackendConfig runSnapWithCommandLineArgs defaultStaticAssets defaultGhcjsWidgets
225+
226+-- | Run an obelisk backend with the default configuration.
174227runBackend :: Backend backendRoute frontendRoute -> Frontend (R frontendRoute) -> IO ()
175−runBackend backend frontend = case checkEncoder $ _backend_routeEncoder backend of
228+runBackend = runBackendWith defaultBackendConfig
229+
230+-- | Run an obelisk backend with the given configuration.
231+runBackendWith
232+ :: BackendConfig frontendRoute
233+ -> Backend backendRoute frontendRoute
234+ -> Frontend (R frontendRoute)
235+ -> IO ()
236+runBackendWith (BackendConfig runSnap staticAssets ghcjsWidgets) backend frontend = case checkEncoder $ _backend_routeEncoder backend of
176237 Left e -> fail $ "backend error:\n" <> T.unpack e
177238 Right validFullEncoder -> do
178239 publicConfigs <- getPublicConfigs
179− _backend_run backend $ \serveRoute -> do
180− runSnapWithCommandLineArgs $ do
240+ _backend_run backend $ \serveRoute ->
241+ runSnap $
181242 getRouteWith validFullEncoder >>= \case
182243 Identity r -> case r of
183244 FullRoute_Backend backendRoute :/ a -> serveRoute $ backendRoute :/ a
184245 FullRoute_Frontend obeliskRoute :/ a ->
185− serveDefaultObeliskApp (mkRouteToUrl validFullEncoder) (serveStaticAssets defaultStaticAssets) frontend publicConfigs $
246+ serveDefaultObeliskApp routeToUrl (($ allJsUrl) <$> ghcjsWidgets) (serveStaticAssets staticAssets) frontend publicConfigs $
186247 obeliskRoute :/ a
187−
188−mkRouteToUrl :: Encoder Identity parse (R (FullRoute br fr)) PageName -> R fr -> Text
189−mkRouteToUrl validFullEncoder =
190− let pageNameEncoder' :: Encoder Identity (Either Text) PageName PathQuery = pageNameEncoder
191− in \(k :/ v) -> T.pack . uncurry (<>) . encode pageNameEncoder' . encode validFullEncoder $ (FullRoute_Frontend $ ObeliskRoute_App k) :/ v
248+ where
249+ routeToUrl (k :/ v) = renderObeliskRoute validFullEncoder $ FullRoute_Frontend (ObeliskRoute_App k) :/ v
250+ allJsUrl = renderAllJsPath validFullEncoder
192251
193252renderGhcjsFrontend
194253 :: (MonadSnap m, HasCookies m)
195254 => (route -> Text)
255+ -> GhcjsWidgets (FrontendWidgetT route ())
196256 -> route
197257 -> Map Text ByteString
198258 -> Frontend route
199259 -> m ByteString
200−renderGhcjsFrontend urlEnc route configs f = do
201− let ghcjsPreload = elAttr "link" ("rel" =: "preload" <> "as" =: "script" <> "href" =: "ghcjs/all.js") blank
202− ghcjsScript = elAttr "script" ("language" =: "javascript" <> "src" =: "ghcjs/all.js" <> "defer" =: "defer") blank
260+renderGhcjsFrontend urlEnc ghcjsWidgets route configs f = do
203261 cookies <- askCookies
204− renderFrontendHtml configs cookies urlEnc route f ghcjsPreload ghcjsScript
262+ renderFrontendHtml configs cookies urlEnc route f (_ghcjsWidgets_preload ghcjsWidgets) (_ghcjsWidgets_script ghcjsWidgets)
263+
264+-- | Preload all.js in a link tag.
265+-- This is the default preload method.
266+preloadGhcjs :: Text -> FrontendWidgetT r ()
267+preloadGhcjs allJsUrl = elAttr "link" ("rel" =: "preload" <> "as" =: "script" <> "href" =: allJsUrl) blank
268+
269+-- | Load the script from the given URL in a deferred script tag.
270+-- This is the default method.
271+deferredGhcjsScript :: Text -> FrontendWidgetT r ()
272+deferredGhcjsScript allJsUrl = elAttr "script" ("type" =: "text/javascript" <> "src" =: allJsUrl <> "defer" =: "defer") blank
273+
274+-- | An all.js script which is loaded after waiting for some time to pass. This
275+-- is useful to ensure any CSS animations on the page can play smoothly before
276+-- blocking the UI thread by running all.js.
277+delayedGhcjsScript
278+ :: Int -- ^ The number of milliseconds to delay loading by
279+ -> Text -- ^ URL to GHCJS app JavaScript
280+ -> FrontendWidgetT r ()
281+delayedGhcjsScript n allJsUrl = elAttr "script" ("type" =: "text/javascript") $ text $ T.unlines
282+ [ "setTimeout(function() {"
283+ , " var all_js_script = document.createElement('script');"
284+ , " all_js_script.type = 'text/javascript';"
285+ , " all_js_script.src = '" <> allJsUrl <> "';"
286+ , " document.body.appendChild(all_js_script);"
287+ , "}, " <> T.pack (show n) <> ");"
288+ ]
205289
206290instance HasCookies Snap where
207291 askCookies = map (\c -> (cookieName c, cookieValue c)) <$> getsRequest rqCookies
lib/cliapp/obelisk-cliapp.cabal+6−3
@@ -7,9 +7,11 @@ cabal-version: >=1.2
77library
88 hs-source-dirs: src
99 build-depends:
10− ansi-terminal
10+ aeson
11+ , ansi-terminal
1112 , base
1213 , bytestring
14+ , containers
1315 , exceptions
1416 , io-streams
1517 , lens
@@ -17,13 +19,14 @@ library
1719 , monad-loops
1820 , mtl
1921 , process
22+ , shell-escape
2023 , terminal-size
2124 , text
2225 , time
2326 , transformers
27+ , utf8-string
2428 exposed-modules:
2529 Obelisk.CliApp
26− Obelisk.CliApp.Demo
2730 other-modules:
2831 Obelisk.CliApp.Logging
2932 Obelisk.CliApp.Process
@@ -31,4 +34,4 @@ library
3134 Obelisk.CliApp.TerminalString
3235 Obelisk.CliApp.Theme
3336 Obelisk.CliApp.Types
34− ghc-options: -Wall -fobject-code
37+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/cliapp/src/Obelisk/CliApp.hs+18−6
@@ -33,16 +33,28 @@ module Obelisk.CliApp
3333 , Severity (..)
3434
3535 -- .Process
36− , ProcessFailure (..)
3736 , AsProcessFailure (..)
38− , readProcessAndLogStderr
39− , readProcessAndLogOutput
40− , readCreateProcessWithExitCode
37+ , ProcessFailure (..)
38+ , ProcessSpec (..)
39+ , callCommand
40+ , callProcess
4141 , callProcessAndLogOutput
42+ , createProcess
4243 , createProcess_
43− , callProcess
44− , callCommand
44+ , exitCodeToException
45+ , overCreateProcess
46+ , proc
47+ , readCreateProcessWithExitCode
48+ , readProcessAndLogOutput
49+ , readProcessAndLogStderr
50+ , readProcessJSONAndLogStderr
4551 , reconstructCommand
52+ , runProcess_
53+ , setCwd
54+ , setDelegateCtlc
55+ , setEnvOverride
56+ , shell
57+ , waitForProcess
4658 ) where
4759
4860import Control.Monad.Log (Severity (..))
lib/cliapp/src/Obelisk/CliApp/Demo.hsdeleted−53
@@ -1,53 +0,0 @@
1−{-# LANGUAGE FlexibleContexts #-}
2−{-# LANGUAGE OverloadedStrings #-}
3−{-# LANGUAGE ScopedTypeVariables #-}
4−module Obelisk.CliApp.Demo where
5−
6−import Control.Concurrent (threadDelay)
7−import Control.Monad.Fail
8−import Control.Monad.IO.Class
9−import Data.Semigroup ((<>))
10−import qualified Data.Text as T
11−import System.Process (proc)
12−
13−import Control.Monad.Catch (MonadMask)
14−
15−import Obelisk.CliApp
16−
17−cliDemo
18− :: ( MonadIO m, MonadMask m, MonadFail m
19− , CliLog m, HasCliConfig e m, CliThrow e m, AsProcessFailure e, AsUnstructuredError e)
20− => m ()
21−cliDemo = withSpinner "CLI Demo" $ do
22− putLog Notice "This demo will showcase the CLI library functionality"
23− _ <- withSpinner' "Searching long for something" (Just $ \c -> "Discovered " <> T.pack (show c) <> " objects") $ do
24− delay
25− withSpinner "Nested task" $ do
26− delay
27− putLog Notice "In nested task"
28− -- This is a 'no trail' spinner that won't leave a trail (even its sub spinners)
29− withSpinnerNoTrail "In between, doing something temporary" $ do
30− withSpinner "Runnning something deep inside" $ do
31− delay
32− putLog Notice "You can still log from inside no-trail spinners"
33− delay
34− delay
35− putLog Error "Top nested task finished"
36− delay
37− putLog Error "Some user error while spinning"
38− delay
39− putLog Notice "This is some info mesage"
40− putLog Warning "And now a warning as well"
41− delay
42− return (42 :: Integer)
43− putLog Notice "Now we start a 2nd spinner, run a couple of process, the last of which fails:"
44− withSpinner "Looking around" $ do
45− delay
46− output <- readProcessAndLogStderr Notice $ proc "ls" ["-l", "/"]
47− putLog Notice $ "Output was: " <> output
48− delay
49− callProcessAndLogOutput (Notice, Error) $ proc "ls" ["-l", "/does-not-exist"]
50− delay
51− failWith "Something dangerous happened"
52− where
53− delay = liftIO $ threadDelay 1000000
lib/cliapp/src/Obelisk/CliApp/Logging.hs+13−12
@@ -39,7 +39,6 @@ import Control.Monad.Log (Severity (..), WithSeverity (..), logMessage, runLoggi
3939import Control.Monad.Loops (iterateUntil)
4040import Control.Monad.Reader (MonadIO, ReaderT (..))
4141import Data.IORef (atomicModifyIORef', newIORef, readIORef, writeIORef)
42−import Data.Maybe
4342import Data.Semigroup ((<>))
4443import Data.Text (Text)
4544import qualified Data.Text as T
@@ -67,7 +66,7 @@ newCliConfig sev noColor noSpinner errorLogExitCode = do
6766 tipDisplayed <- newIORef False
6867 stack <- newIORef ([], [])
6968 textEncoding <- hGetEncoding stdout
70− let theme = if fromMaybe False $ supportsUnicode <$> textEncoding
69+ let theme = if maybe False supportsUnicode textEncoding
7170 then unicodeTheme
7271 else noUnicodeTheme
7372 return $ CliConfig level noColor noSpinner lock tipDisplayed stack errorLogExitCode theme
@@ -133,7 +132,7 @@ handleLog' noColor output = do
133132 hFlush stdout
134133 Output_Overwrite ts -> liftIO $ do
135134 width <- TS.getTerminalWidth
136− T.putStr $ "\r" <> (TS.render (not noColor) width ts)
135+ T.putStr $ "\r" <> TS.render (not noColor) width ts
137136 hFlush stdout
138137 Output_ClearLine -> liftIO $ do
139138 -- Go to the first column and clear the whole line
@@ -161,7 +160,7 @@ failWith :: (CliThrow e m, AsUnstructuredError e) => Text -> m a
161160failWith = throwError . review asUnstructuredError
162161
163162errorToWarning
164− :: (HasCliConfig e m, CliThrow e m, CliLog m)
163+ :: (HasCliConfig e m, CliLog m)
165164 => e -> m ()
166165errorToWarning e = do
167166 c <- getCliConfig
@@ -178,15 +177,17 @@ withExitFailMessage msg f = f `catch` \(e :: ExitCode) -> do
178177 throwM e
179178
180179-- | Write log to stdout, with colors (unless `noColor`)
181−writeLog :: (MonadIO m, MonadMask m) => Bool -> Bool -> WithSeverity Text -> m ()
182−writeLog withNewLine noColor (WithSeverity severity s)
183− | noColor && severity <= Warning = liftIO $ putFn $ T.pack (show severity) <> ": " <> s
184− | not noColor && severity <= Error = TS.putStrWithSGR errorColors h withNewLine s
185− | not noColor && severity <= Warning = TS.putStrWithSGR warningColors h withNewLine s
186− | not noColor && severity >= Debug = TS.putStrWithSGR debugColors h withNewLine s
187− | otherwise = liftIO $ putFn s
180+writeLog :: (MonadIO m) => Bool -> Bool -> WithSeverity Text -> m ()
181+writeLog withNewLine noColor (WithSeverity severity s) = if T.null s then pure () else write
188182 where
189− putFn = if withNewLine then (T.hPutStrLn h) else (T.hPutStr h)
183+ write
184+ | noColor && severity <= Warning = liftIO $ putFn $ T.pack (show severity) <> ": " <> s
185+ | not noColor && severity <= Error = TS.putStrWithSGR errorColors h withNewLine s
186+ | not noColor && severity <= Warning = TS.putStrWithSGR warningColors h withNewLine s
187+ | not noColor && severity >= Debug = TS.putStrWithSGR debugColors h withNewLine s
188+ | otherwise = liftIO $ putFn s
189+
190+ putFn = if withNewLine then T.hPutStrLn h else T.hPutStr h
190191 h = if severity <= Error then stderr else stdout
191192 errorColors = [SetColor Foreground Vivid Red]
192193 warningColors = [SetColor Foreground Vivid Yellow]
lib/cliapp/src/Obelisk/CliApp/Process.hs+137−51
@@ -1,7 +1,6 @@
11{-# LANGUAGE FlexibleContexts #-}
22{-# LANGUAGE LambdaCase #-}
33{-# LANGUAGE MultiParamTypeClasses #-}
4−{-# LANGUAGE MultiWayIf #-}
54{-# LANGUAGE OverloadedStrings #-}
65{-# LANGUAGE ScopedTypeVariables #-}
76{-# LANGUAGE TupleSections #-}
@@ -9,45 +8,86 @@
98-- | An extension of `System.Process` that integrates with logging (`Obelisk.CLI.Logging`)
109-- and is thus spinner friendly.
1110module Obelisk.CliApp.Process
12− ( ProcessFailure (..)
13− , AsProcessFailure (..)
14− , readProcessAndLogStderr
15− , readProcessAndLogOutput
16− , readCreateProcessWithExitCode
11+ ( AsProcessFailure (..)
12+ , ProcessFailure (..)
13+ , ProcessSpec (..)
14+ , callCommand
15+ , callProcess
1716 , callProcessAndLogOutput
1817 , createProcess
1918 , createProcess_
20− , callProcess
21− , callCommand
19+ , exitCodeToException
20+ , overCreateProcess
21+ , proc
22+ , readCreateProcessWithExitCode
23+ , readProcessAndLogOutput
24+ , readProcessAndLogStderr
25+ , readProcessJSONAndLogStderr
2226 , reconstructCommand
27+ , runProcess_
28+ , setCwd
29+ , setDelegateCtlc
30+ , setEnvOverride
31+ , shell
32+ , waitForProcess
2333 ) where
2434
2535import Control.Monad ((<=<), join, void)
36+import Control.Monad.Catch (MonadMask, bracketOnError)
2637import Control.Monad.Except (throwError)
2738import Control.Monad.Fail
2839import Control.Monad.IO.Class (MonadIO, liftIO)
2940import Control.Lens (Prism', review)
3041import qualified Data.ByteString as BS
3142import qualified Data.ByteString.Char8 as BSC
43+import qualified Data.ByteString.UTF8 as BSU
3244import Data.Function (fix)
45+import Data.Map (Map)
46+import qualified Data.Map as Map
3347import Data.Monoid ((<>))
3448import Data.Text (Text)
3549import qualified Data.Text as T
3650import qualified Data.Text.Encoding as T
3751import Data.Text.Encoding.Error (lenientDecode)
52+import System.Environment (getEnvironment)
3853import System.Exit (ExitCode (..))
3954import System.IO (Handle)
4055import System.IO.Streams (InputStream, handleToInputStream)
4156import qualified System.IO.Streams as Streams
4257import System.IO.Streams.Concurrent (concurrentMerge)
43−import System.Process (CreateProcess, ProcessHandle, StdStream (CreatePipe), cmdspec, std_err, std_out,
44− waitForProcess)
58+import System.Process (CreateProcess, ProcessHandle, StdStream (CreatePipe), std_err, std_out)
4559import qualified System.Process as Process
60+import Text.ShellEscape (bash, bytes)
61+import qualified Data.Aeson as Aeson
4662
4763import Control.Monad.Log (Severity (..))
4864import Obelisk.CliApp.Logging (putLog, putLogRaw)
4965import Obelisk.CliApp.Types (CliLog, CliThrow)
5066
67+data ProcessSpec = ProcessSpec
68+ { _processSpec_createProcess :: !CreateProcess
69+ , _processSpec_overrideEnv :: !(Maybe (Map String String -> Map String String))
70+ }
71+
72+proc :: FilePath -> [String] -> ProcessSpec
73+proc cmd args = ProcessSpec (Process.proc cmd args) Nothing
74+
75+shell :: String -> ProcessSpec
76+shell cmd = ProcessSpec (Process.shell cmd) Nothing
77+
78+setEnvOverride :: (Map String String -> Map String String) -> ProcessSpec -> ProcessSpec
79+setEnvOverride f p = p { _processSpec_overrideEnv = Just f }
80+
81+overCreateProcess :: (CreateProcess -> CreateProcess) -> ProcessSpec -> ProcessSpec
82+overCreateProcess f (ProcessSpec p x) = ProcessSpec (f p) x
83+
84+setDelegateCtlc :: Bool -> ProcessSpec -> ProcessSpec
85+setDelegateCtlc b = overCreateProcess (\p -> p { Process.delegate_ctlc = b })
86+
87+setCwd :: Maybe FilePath -> ProcessSpec -> ProcessSpec
88+setCwd fp = overCreateProcess (\p -> p { Process.cwd = fp })
89+
90+
5191-- TODO put back in `Obelisk.CliApp.Process` and use prisms for extensible exceptions
5292data ProcessFailure = ProcessFailure Process.CmdSpec Int -- exit code
5393 deriving Show
@@ -61,44 +101,56 @@ instance AsProcessFailure ProcessFailure where
61101 asProcessFailure = id
62102
63103readProcessAndLogStderr
64− :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadFail m)
65− => Severity -> CreateProcess -> m Text
104+ :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadMask m)
105+ => Severity -> ProcessSpec -> m Text
66106readProcessAndLogStderr sev process = do
67107 (out, _err) <- withProcess process $ \_out err -> do
68108 streamToLog =<< liftIO (streamHandle sev err)
69109 liftIO $ T.decodeUtf8With lenientDecode <$> BS.hGetContents out
70110
111+readProcessJSONAndLogStderr
112+ :: (Aeson.FromJSON a, MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadMask m)
113+ => Severity -> ProcessSpec -> m a
114+readProcessJSONAndLogStderr sev process = do
115+ (out, _err) <- withProcess process $ \_out err -> do
116+ streamToLog =<< liftIO (streamHandle sev err)
117+ json <- liftIO $ BS.hGetContents out
118+ case Aeson.eitherDecodeStrict json of
119+ Right a -> pure a
120+ Left err -> do
121+ putLog Error $ "Could not decode process output as JSON: " <> T.pack err
122+ throwError $ review asProcessFailure $ ProcessFailure (Process.cmdspec $ _processSpec_createProcess process) 0
123+
71124readCreateProcessWithExitCode
72− :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e)
73− => CreateProcess -> m (ExitCode, String, String)
74−readCreateProcessWithExitCode process = do
75− putLog Debug $ "Creating process: " <> reconstructCommand (cmdspec process)
125+ :: (MonadIO m, CliLog m)
126+ => ProcessSpec -> m (ExitCode, String, String)
127+readCreateProcessWithExitCode procSpec = do
128+ process <- mkCreateProcess procSpec
129+ putLog Debug $ "Creating process: " <> reconstructProcSpec procSpec
76130 liftIO $ Process.readCreateProcessWithExitCode process ""
77131
78132-- | Like `System.Process.readProcess` but logs the combined output (stdout and stderr)
79133-- with the corresponding severity.
80134--
81−-- Usually this function is called as `callProcessAndLogOutput (Debug, Error)`. However
135+-- Usually this function is called as `readProcessAndLogOutput (Debug, Error)`. However
82136-- some processes are known to spit out diagnostic or informative messages in stderr, in
83137-- which case it is advisable to call it with a non-Error severity for stderr, like
84−-- `callProcessAndLogOutput (Debug, Debug)`.
138+-- `readProcessAndLogOutput (Debug, Debug)`.
85139readProcessAndLogOutput
86140 :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadFail m)
87− => (Severity, Severity) -> CreateProcess -> m Text
141+ => (Severity, Severity) -> ProcessSpec -> m Text
88142readProcessAndLogOutput (sev_out, sev_err) process = do
89− (_, Just out, Just err, p) <- createProcess $ process
90− { std_out = CreatePipe , std_err = CreatePipe }
143+ (_, Just out, Just err, p) <- createProcess $ overCreateProcess
144+ (\p -> p { std_out = CreatePipe , std_err = CreatePipe }) process
91145
92146 -- TODO interleave stdout and stderr in log correctly
93147 streamToLog =<< liftIO (streamHandle sev_err err)
94148 outText <- liftIO $ T.decodeUtf8With lenientDecode <$> BS.hGetContents out
95149 putLogRaw sev_out outText
96150
97− liftIO (waitForProcess p) >>= \case
98− ExitSuccess -> pure outText
99− ExitFailure code -> throwError $ review asProcessFailure $ ProcessFailure (cmdspec process) code
151+ outText <$ (exitCodeToException process =<< waitForProcess p)
100152
101−-- | Like `System.Process.callProcess` but logs the combined output (stdout and stderr)
153+-- | Like 'System.Process.callProcess' but logs the combined output (stdout and stderr)
102154-- with the corresponding severity.
103155--
104156-- Usually this function is called as `callProcessAndLogOutput (Debug, Error)`. However
@@ -106,9 +158,8 @@ readProcessAndLogOutput (sev_out, sev_err) process = do
106158-- which case it is advisable to call it with a non-Error severity for stderr, like
107159-- `callProcessAndLogOutput (Debug, Debug)`.
108160callProcessAndLogOutput
109−
110− :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadFail m)
111− => (Severity, Severity) -> CreateProcess -> m ()
161+ :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadMask m)
162+ => (Severity, Severity) -> ProcessSpec -> m ()
112163callProcessAndLogOutput (sev_out, sev_err) process =
113164 void $ withProcess process $ \out err -> do
114165 stream <- liftIO $ join $ combineStream
@@ -118,21 +169,30 @@ callProcessAndLogOutput (sev_out, sev_err) process =
118169 where
119170 combineStream s1 s2 = concurrentMerge [s1, s2]
120171
121−-- | Like `System.Process.createProcess` but also logs (debug) the process being run
172+-- | Like 'System.Process.createProcess' but also logs (debug) the process being run
122173createProcess
123174 :: (MonadIO m, CliLog m)
124− => CreateProcess -> m (Maybe Handle, Maybe Handle, Maybe Handle, ProcessHandle)
125−createProcess p = do
126− putLog Debug $ "Creating process: " <> reconstructCommand (cmdspec p)
175+ => ProcessSpec -> m (Maybe Handle, Maybe Handle, Maybe Handle, ProcessHandle)
176+createProcess procSpec = do
177+ p <- mkCreateProcess procSpec
178+ putLog Debug $ "Creating process: " <> reconstructProcSpec procSpec
127179 liftIO $ Process.createProcess p
128180
129181-- | Like `System.Process.createProcess_` but also logs (debug) the process being run
130182createProcess_
131183 :: (MonadIO m, CliLog m)
132− => String -> CreateProcess -> m (Maybe Handle, Maybe Handle, Maybe Handle, ProcessHandle)
133−createProcess_ name p = do
134− putLog Debug $ "Creating process " <> T.pack name <> ": " <> reconstructCommand (cmdspec p)
135− liftIO $ Process.createProcess p
184+ => String -> ProcessSpec -> m (Maybe Handle, Maybe Handle, Maybe Handle, ProcessHandle)
185+createProcess_ name procSpec = do
186+ p <- mkCreateProcess procSpec
187+ putLog Debug $ "Creating process " <> T.pack name <> ": " <> reconstructProcSpec procSpec
188+ liftIO $ Process.createProcess_ name p
189+
190+mkCreateProcess :: MonadIO m => ProcessSpec -> m Process.CreateProcess
191+mkCreateProcess (ProcessSpec p override') = case override' of
192+ Nothing -> pure p
193+ Just override -> do
194+ procEnv <- Map.fromList <$> maybe (liftIO getEnvironment) pure (Process.env p)
195+ pure $ p { Process.env = Just $ Map.toAscList (override procEnv) }
136196
137197-- | Like `System.Process.callProcess` but also logs (debug) the process being run
138198callProcess
@@ -151,18 +211,30 @@ callCommand cmd = do
151211 liftIO $ Process.callCommand cmd
152212
153213withProcess
154− :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadFail m)
155− => CreateProcess -> (Handle -> Handle -> m ()) -> m (Handle, Handle)
156−withProcess process f = do -- TODO: Use bracket.
157− -- FIXME: Using `withCreateProcess` here leads to something operating illegally on closed handles.
158− (_, Just out, Just err, p) <- createProcess $ process
159− { std_out = CreatePipe , std_err = CreatePipe }
214+ :: (MonadIO m, CliLog m, CliThrow e m, AsProcessFailure e, MonadMask m)
215+ => ProcessSpec -> (Handle -> Handle -> m ()) -> m (Handle, Handle)
216+withProcess process f =
217+ bracketOnError
218+ (createProcess $ overCreateProcess
219+ (\x -> x { std_out = CreatePipe , std_err = CreatePipe }) process
220+ )
221+ (liftIO . Process.cleanupProcess)
222+ (\case
223+ (_, Just out, Just err, p) -> do
224+ f out err
225+ (out, err) <$ (exitCodeToException process =<< waitForProcess p)
226+ _ -> error "withProcess: createProcess did not provide handles for CreatePipe as expected"
227+ )
160228
161− f out err -- Pass the handles to the passed function
162−
163− liftIO (waitForProcess p) >>= \case
164− ExitSuccess -> return (out, err)
165− ExitFailure code -> throwError $ review asProcessFailure $ ProcessFailure (cmdspec process) code
229+-- | Runs a process to completion failing if it does not exit cleanly.
230+runProcess_
231+ :: (MonadIO m, CliLog m, CliThrow e m, MonadMask m, AsProcessFailure e)
232+ => ProcessSpec -> m ()
233+runProcess_ process =
234+ bracketOnError
235+ (createProcess process)
236+ (liftIO . Process.cleanupProcess)
237+ (\(_, _, _, ph) -> exitCodeToException process =<< waitForProcess ph)
166238
167239-- Create an input stream from the file handle, associating each item with the given severity.
168240streamHandle :: Severity -> Handle -> IO (InputStream (Severity, BSC.ByteString))
@@ -177,10 +249,24 @@ streamToLog stream = fix $ \loop -> do
177249 Nothing -> return ()
178250 Just (sev, line) -> putLogRaw sev (T.decodeUtf8With lenientDecode line) >> loop
179251
252+-- | Wrapper around `System.Process.waitForProcess`
253+waitForProcess :: MonadIO m => ProcessHandle -> m ExitCode
254+waitForProcess = liftIO . Process.waitForProcess
255+
256+-- | Converts an 'ExitCode' to an exception when it's non-zero.
257+exitCodeToException :: (CliThrow e m, AsProcessFailure e) => ProcessSpec -> ExitCode -> m ()
258+exitCodeToException spec = \case
259+ ExitSuccess -> pure ()
260+ ExitFailure code -> throwError $ review asProcessFailure $ ProcessFailure (Process.cmdspec $ _processSpec_createProcess spec) code
261+
180262-- | Pretty print a 'CmdSpec'
181263reconstructCommand :: Process.CmdSpec -> Text
182−reconstructCommand (Process.ShellCommand str) = T.pack str
183−reconstructCommand (Process.RawCommand c as) = processToShellString c as
264+reconstructCommand p = case p of
265+ Process.ShellCommand str -> T.pack str
266+ Process.RawCommand c as -> processToShellString c as
184267 where
185− processToShellString cmd args = T.unwords $ map quoteAndEscape (cmd : args)
186− quoteAndEscape x = "'" <> T.replace "'" "'\''" (T.pack x) <> "'"
268+ processToShellString cmd args = T.pack $ unwords $
269+ map (BSU.toString . bytes . bash . BSU.fromString) (cmd : args)
270+
271+reconstructProcSpec :: ProcessSpec -> Text
272+reconstructProcSpec = reconstructCommand . Process.cmdspec . _processSpec_createProcess
lib/cliapp/src/Obelisk/CliApp/Spinner.hs−1
@@ -3,7 +3,6 @@
33{-# LANGUAGE MultiParamTypeClasses #-}
44{-# LANGUAGE OverloadedStrings #-}
55{-# LANGUAGE ScopedTypeVariables #-}
6−{-# LANGUAGE TupleSections #-}
76-- | Provides a simple CLI spinner that interoperates cleanly with the rest of the logging output.
87module Obelisk.CliApp.Spinner
98 ( withSpinner
lib/command/obelisk-command.cabal+16−14
@@ -1,5 +1,5 @@
11name: obelisk-command
2−version: 0.3
2+version: 0.9.0.1
33cabal-version: >= 1.8
44build-type: Simple
55
@@ -7,45 +7,47 @@ library
77 hs-source-dirs: src
88 build-depends:
99 aeson
10− , ansi-terminal
11− , Cabal
1210 , aeson-pretty
11+ , ansi-terminal
1312 , base
14− , base16-bytestring
15− , binary
1613 , bytestring
17− , obelisk-cliapp
14+ , Cabal
1815 , containers
1916 , data-default
2017 , directory
2118 , either
2219 , errors
20+ , exceptions
21+ , extra
2322 , filepath
23+ , git
2424 , github
2525 , here
26− , git
2726 , hnix
2827 , hpack
2928 , io-streams
30− , exceptions
31− , logging-effect
3229 , lens
30+ , logging-effect
31+ , megaparsec
3332 , modern-uri
3433 , monad-loops
34+ , monoidal-containers
3535 , mtl
36− , megaparsec
3736 , network
3837 , network-uri
38+ , obelisk-cliapp
3939 , optparse-applicative
4040 , placeholders
4141 , process
42+ , shell-escape
4243 , temporary
4344 , terminal-size
4445 , text
4546 , time
4647 , transformers
47− , unix
48+ , unix-compat
4849 , unordered-containers
50+ , utf8-string
4951 , which
5052 , yaml
5153 exposed-modules:
@@ -58,10 +60,10 @@ library
5860 Obelisk.Command.Thunk
5961 Obelisk.Command.Utils
6062 Obelisk.Command.VmBuilder
61− -- -fobject-code is so that the StaticPointers extension can work in ghci
62− ghc-options: -Wall -fobject-code
63+ Obelisk.Command.Preprocessor
64+ ghc-options: -Wall
6365
6466executable ob
6567 main-is: src-bin/ob.hs
6668 build-depends: base, obelisk-command
67− ghc-options: -Wall -O2 -threaded
69+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O -threaded
lib/command/src/Obelisk/Command.hs+190−154
@@ -3,22 +3,18 @@
33{-# LANGUAGE MultiParamTypeClasses #-}
44{-# LANGUAGE OverloadedStrings #-}
55{-# LANGUAGE ScopedTypeVariables #-}
6−{-# LANGUAGE StaticPointers #-}
7−{-# LANGUAGE TypeApplications #-}
6+{-# LANGUAGE TupleSections #-}
87module Obelisk.Command where
98
10−import Control.Monad
11−import Control.Monad.IO.Class (liftIO)
12−import qualified Data.Binary as Binary
9+import Control.Monad.IO.Class (MonadIO, liftIO)
1310import Data.Bool (bool)
14−import qualified Data.ByteString.Base16 as Base16
15−import qualified Data.ByteString.Lazy as LBS
16−import Data.List
17−import Data.Maybe (catMaybes)
11+import Data.Foldable (for_)
12+import Data.List (isInfixOf, isPrefixOf)
13+import Data.List.NonEmpty (NonEmpty, nonEmpty)
14+import qualified Data.List.NonEmpty as NonEmpty
15+import qualified Data.Map as Map
1816import qualified Data.Text as T
19−import Data.Text.Encoding
20−import Data.Text.Encoding.Error (lenientDecode)
21−import GHC.StaticPtr
17+import Data.Traversable (for)
2218import Options.Applicative
2319import Options.Applicative.Help.Pretty (text, (<$$>))
2420import System.Directory
@@ -26,17 +22,16 @@ import System.Environment
2622import System.FilePath
2723import qualified System.Info
2824import System.IO (hIsTerminalDevice, stdout)
29−import System.Posix.Process (executeFile)
25+import System.Process (rawSystem)
3026
3127import Obelisk.App
3228import Obelisk.CliApp
33−import Obelisk.CliApp.Demo (cliDemo)
3429import Obelisk.Command.Deploy
3530import Obelisk.Command.Project
3631import Obelisk.Command.Run
3732import Obelisk.Command.Thunk
38−import Obelisk.Command.Utils
3933import qualified Obelisk.Command.VmBuilder as VmBuilder
34+import qualified Obelisk.Command.Preprocessor as Preprocessor
4035
4136
4237data Args = Args
@@ -79,8 +74,8 @@ argsInfo cfg = info (args cfg <**> helper) $ mconcat
7974initSource :: Parser InitSource
8075initSource = foldl1 (<|>)
8176 [ pure InitSource_Default
82− , InitSource_Branch <$> strOption (long "branch" <> metavar "BRANCH")
83− , InitSource_Symlink <$> strOption (long "symlink" <> action "directory" <> metavar "PATH")
77+ , InitSource_Branch <$> strOption (long "branch" <> metavar "BRANCH" <> help "Initialize the project using the given BRANCH of Obelisk's official repository")
78+ , InitSource_Symlink <$> strOption (long "symlink" <> action "directory" <> metavar "PATH" <> help "(Use with caution) Initialize the project using the copy of Obelisk found at the given PATH")
8479 ]
8580
8681initForce :: Parser Bool
@@ -89,59 +84,53 @@ initForce = switch (long "force" <> help "Allow ob init to overwrite files")
8984data ObCommand
9085 = ObCommand_Init InitSource Bool
9186 | ObCommand_Deploy DeployCommand
92− | ObCommand_Run
93− | ObCommand_Thunk ThunkCommand
94− | ObCommand_Repl
95− | ObCommand_Watch
87+ | ObCommand_Run [(FilePath, Interpret)]
88+ | ObCommand_Profile String [String]
89+ | ObCommand_Thunk ThunkOption
90+ | ObCommand_Repl [(FilePath, Interpret)]
91+ | ObCommand_Watch [(FilePath, Interpret)]
9692 | ObCommand_Shell ShellOpts
9793 | ObCommand_Doc String [String] -- shell and list of packages
94+ | ObCommand_Hoogle String Int -- shell and port
9895 | ObCommand_Internal ObInternal
9996 deriving Show
10097
10198data ObInternal
102− = ObInternal_RunStaticIO StaticKey
103− | ObInternal_CLIDemo
99+ -- the preprocessor argument syntax is also handled outside
100+ -- optparse-applicative, but it shouldn't ever conflict with another syntax
101+ = ObInternal_ApplyPackages String String String [String]
102+ | ObInternal_ExportGhciConfig
103+ [(FilePath, Interpret)]
104+ Bool -- ^ Use relative paths
104105 deriving Show
105106
106−inNixShell' :: MonadObelisk m => StaticPtr (ObeliskT IO ()) -> m ()
107−inNixShell' p = withProjectRoot "." $ \root -> do
108− cmd <- liftIO $ unwords <$> mkCmd -- TODO: shell escape instead of unwords
109− projectShell root True "ghc" (Just cmd)
110− where
111− mkCmd = do
112− argsCfg <- getArgsConfig
113− myArgs <- getArgs
114− obArgs <- parseCLIArgs argsCfg myArgs
115− progName <- getObeliskExe
116− return $ progName : catMaybes
117− [ Just "--no-handoff"
118− , bool Nothing (Just "--verbose") $ _args_verbose obArgs
119− , Just "internal"
120− , Just "run-static-io"
121− , Just $ encodeStaticKey $ staticKey p
122− ]
123−
124107obCommand :: ArgsConfig -> Parser ObCommand
125108obCommand cfg = hsubparser
126− (mconcat
127− [ command "init" $ info (ObCommand_Init <$> initSource <*> initForce) $ progDesc "Initialize an Obelisk project"
128− , command "deploy" $ info (ObCommand_Deploy <$> deployCommand cfg) $ progDesc "Prepare a deployment for an Obelisk project"
129− , command "run" $ info (pure ObCommand_Run) $ progDesc "Run current project in development mode"
130− , command "thunk" $ info (ObCommand_Thunk <$> thunkCommand) $ progDesc "Manipulate thunk directories"
131− , command "repl" $ info (pure ObCommand_Repl) $ progDesc "Open an interactive interpreter"
132− , command "watch" $ info (pure ObCommand_Watch) $ progDesc "Watch current project for errors and warnings"
133− , command "shell" $ info (ObCommand_Shell <$> shellOpts) $ progDesc "Enter a shell with project dependencies"
134− , command "doc" $ info (ObCommand_Doc <$> shellFlags <*> packageNames) $
135− progDesc "List paths to haddock documentation for specified packages"
136− <> footerDoc (Just $
137− text "Hint: To open the documentation you can pipe the output of this command like"
138− <$$> text "ob doc reflex reflex-dom-core | xargs -n1 xdg-open")
139− ])
140− <|> subparser
141− (mconcat
142− [ internal
143− , command "internal" (info (ObCommand_Internal <$> internalCommand) mempty)
144− ])
109+ (mconcat
110+ [ command "init" $ info (ObCommand_Init <$> initSource <*> initForce) $ progDesc "Initialize an Obelisk project"
111+ , command "deploy" $ info (ObCommand_Deploy <$> deployCommand cfg) $ progDesc "Prepare a deployment for an Obelisk project"
112+ , command "run" $ info (ObCommand_Run <$> interpretOpts) $ progDesc "Run current project in development mode"
113+ , command "profile" $ info (uncurry ObCommand_Profile <$> profileCommand) $ progDesc "Run current project with profiling enabled"
114+ , command "thunk" $ info (ObCommand_Thunk <$> thunkOption) $ progDesc "Manipulate thunk directories"
115+ , command "repl" $ info (ObCommand_Repl <$> interpretOpts) $ progDesc "Open an interactive interpreter"
116+ , command "watch" $ info (ObCommand_Watch <$> interpretOpts) $ progDesc "Watch current project for errors and warnings"
117+ , command "shell" $ info (ObCommand_Shell <$> shellOpts) $ progDesc "Enter a shell with project dependencies or run a command in such a shell. E.g. ob shell -- ghc-pkg list"
118+ , command "doc" $ info (ObCommand_Doc <$> shellFlags <*> packageNames) $
119+ progDesc "List paths to haddock documentation for specified packages"
120+ <> footerDoc (Just $
121+ text "Hint: To open the documentation you can pipe the output of this command like"
122+ <$$> text "ob doc reflex reflex-dom-core | xargs -n1 xdg-open")
123+ , command "hoogle" $ info (ObCommand_Hoogle <$> shellFlags <*> portOpt 8080) $ progDesc "Run a hoogle server locally for your project's dependency tree"
124+ , command "internal" $ info (ObCommand_Internal <$> internalCommand) $ progDesc "Internal Obelisk commands with unstable APIs"
125+ ])
126+
127+internalCommand :: Parser ObInternal
128+internalCommand = hsubparser $ mconcat
129+ [ command "export-ghci-configuration" $ info (ObInternal_ExportGhciConfig <$> interpretOpts <*> useRelativePathsFlag)
130+ $ progDesc "Export the GHCi configuration used by ob run, etc.; useful for IDE integration"
131+ ]
132+ where
133+ useRelativePathsFlag = switch (long "use-relative-paths" <> help "Use relative paths")
145134
146135packageNames :: Parser [String]
147136packageNames = some (strArgument (metavar "PACKAGE-NAME..."))
@@ -156,7 +145,7 @@ deployCommand cfg = hsubparser $ mconcat
156145 where
157146 platformP = hsubparser $ mconcat
158147 [ command "android" $ info (pure (Android, [])) mempty
159− , command "ios" $ info ((,) <$> pure IOS <*> (fmap pure $ strArgument (metavar "TEAMID" <> help "Your Team ID - found in the Apple developer portal"))) mempty
148+ , command "ios" $ info ((,) <$> pure IOS <*> fmap pure (strArgument (metavar "TEAMID" <> help "Your Team ID - found in the Apple developer portal"))) mempty
160149 ]
161150
162151 remoteBuilderParser :: Parser (Maybe RemoteBuilder)
@@ -178,8 +167,8 @@ deployCommand cfg = hsubparser $ mconcat
178167
179168deployInitOpts :: Parser DeployInitOpts
180169deployInitOpts = DeployInitOpts
181− <$> strArgument (action "directory" <> metavar "DEPLOYDIR" <> help "Path to a directory that it will create")
182− <*> strOption (long "ssh-key" <> action "file" <> metavar "SSHKEY" <> help "Path to an ssh key that it will symlink to")
170+ <$> strArgument (action "directory" <> metavar "DEPLOYDIR" <> help "Path to a directory where the deployment repository will be initialized")
171+ <*> strOption (long "ssh-key" <> action "file" <> metavar "SSHKEY" <> help "Path to an SSH key that will be *copied* to the deployment repository")
183172 <*> some (strOption (long "hostname" <> metavar "HOSTNAME" <> help "hostname of the deployment target"))
184173 <*> strOption (long "route" <> metavar "PUBLICROUTE" <> help "Publicly accessible URL of your app")
185174 <*> strOption (long "admin-email" <> metavar "ADMINEMAIL" <> help "Email address where administrative alerts will be sent")
@@ -196,49 +185,72 @@ data DeployCommand
196185 | DeployCommand_Update
197186 deriving Show
198187
199−data DeployInitOpts = DeployInitOpts
200− { _deployInitOpts_outputDir :: FilePath
201− , _deployInitOpts_sshKey :: FilePath
202− , _deployInitOpts_hostname :: [String]
203− , _deployInitOpts_route :: String
204− , _deployInitOpts_adminEmail :: String
205− , _deployInitOpts_enableHttps :: Bool
206− }
207− deriving Show
208−
209−internalCommand :: Parser ObInternal
210−internalCommand = subparser $ mconcat
211− [ command "run-static-io" $ info (ObInternal_RunStaticIO <$> argument (eitherReader decodeStaticKey) (action "static-key")) mempty
212− , command "clidemo" $ info (pure ObInternal_CLIDemo) mempty
213− ]
214−
215−--TODO: Result should provide normalised path and also original user input for error reporting.
216−thunkDirectoryParser :: Parser FilePath
217−thunkDirectoryParser = fmap (dropTrailingPathSeparator . normalise) . strArgument $ mconcat
218− [ action "directory"
219− , metavar "THUNKDIR"
220− , help "Path to directory containing thunk data"
221− ]
188+profileCommand :: Parser (String, [String])
189+profileCommand = (,)
190+ <$> strOption
191+ ( long "output"
192+ <> short 'o'
193+ <> help "Base output to use for profiling output. Suffixes are added to this based on the profiling type. Defaults to a timestamped path in the profile/ directory in the project's root."
194+ <> metavar "PATH"
195+ <> value "profile/%Y-%m-%dT%H:%M:%S"
196+ <> showDefault
197+ )
198+ <*> (words <$> strOption
199+ ( long "rts-flags"
200+ <> help "RTS Flags to pass to the executable."
201+ <> value "-p -hc"
202+ <> metavar "FLAGS"
203+ <> showDefault
204+ ))
205+
206+thunkConfig :: Parser ThunkConfig
207+thunkConfig = ThunkConfig
208+ <$>
209+ ( flag' (Just True) (long "private" <> help "Mark thunks as pointing to a private repository")
210+ <|> flag' (Just False) (long "public" <> help "Mark thunks as pointing to a public repository")
211+ <|> pure Nothing
212+ )
213+
214+thunkUpdateConfig :: Parser ThunkUpdateConfig
215+thunkUpdateConfig = ThunkUpdateConfig
216+ <$> optional (strOption (long "branch" <> metavar "BRANCH" <> help "Use the given branch when looking for the latest revision"))
217+ <*> thunkConfig
218+
219+thunkPackConfig :: Parser ThunkPackConfig
220+thunkPackConfig = ThunkPackConfig
221+ <$> switch (long "force" <> short 'f' <> help "Force packing thunks even if there are branches not pushed upstream, uncommitted changes, stashes. This will cause changes that have not been pushed upstream to be lost; use with care.")
222+ <*> thunkConfig
223+
224+data ThunkOption = ThunkOption
225+ { _thunkOption_thunks :: NonEmpty FilePath
226+ , _thunkOption_command :: ThunkCommand
227+ } deriving Show
222228
223229data ThunkCommand
224− = ThunkCommand_Update [FilePath] (Maybe String)
225− | ThunkCommand_Unpack [FilePath]
226− | ThunkCommand_Pack [FilePath] Bool
230+ = ThunkCommand_Update ThunkUpdateConfig
231+ | ThunkCommand_Unpack
232+ | ThunkCommand_Pack ThunkPackConfig
227233 deriving Show
228234
229−forceFlag :: Parser Bool
230−forceFlag = switch $ long "force" <> short 'f' <> help "Force packing thunks even if there are branches not pushed upstream, uncommitted changes, stashes. This will cause changes that have not been pushed upstream to be lost; use with care."
231−
232−thunkCommand :: Parser ThunkCommand
233−thunkCommand = hsubparser $ mconcat
234− [ command "update" $ info (ThunkCommand_Update <$> some thunkDirectoryParser <*> optional (strOption (long "branch" <> metavar "BRANCH"))) $ progDesc "Update thunk to latest revision available"
235− , command "unpack" $ info (ThunkCommand_Unpack <$> some thunkDirectoryParser) $ progDesc "Unpack thunk into git checkout of revision it points to"
236− , command "pack" $ info (ThunkCommand_Pack <$> some thunkDirectoryParser <*> forceFlag) $ progDesc "Pack git checkout into thunk that points at the current branch's upstream"
235+thunkOption :: Parser ThunkOption
236+thunkOption = hsubparser $ mconcat
237+ [ command "update" $ info (thunkOptionWith $ ThunkCommand_Update <$> thunkUpdateConfig) $ progDesc "Update packed thunk to latest revision available on the tracked branch"
238+ , command "unpack" $ info (thunkOptionWith $ pure ThunkCommand_Unpack) $ progDesc "Unpack thunk into git checkout of revision it points to"
239+ , command "pack" $ info (thunkOptionWith $ ThunkCommand_Pack <$> thunkPackConfig) $ progDesc "Pack git checkout or unpacked thunk into thunk that points at the current branch's upstream"
237240 ]
241+ where
242+ thunkOptionWith f = ThunkOption
243+ <$> ((NonEmpty.:|)
244+ <$> thunkDirArg (metavar "THUNKDIRS..." <> help "Paths to directories containing thunk data")
245+ <*> many (thunkDirArg mempty)
246+ )
247+ <*> f
248+ thunkDirArg opts = fmap (dropTrailingPathSeparator . normalise) $ strArgument $ action "directory" <> opts
238249
239250data ShellOpts
240251 = ShellOpts
241252 { _shellOpts_shell :: String
253+ , _shellOpts_interpretPaths :: [(FilePath, Interpret)]
242254 , _shellOpts_command :: Maybe String
243255 }
244256 deriving Show
@@ -249,19 +261,43 @@ shellFlags =
249261 <|> flag "ghc" "ghcjs" (long "ghcjs" <> help "Enter a shell having ghcjs rather than ghc")
250262 <|> strOption (short 'A' <> long "argument" <> metavar "NIXARG" <> help "Use the environment specified by the given nix argument of `shells'")
251263
264+interpretOpts :: Parser [(FilePath, Interpret)]
265+interpretOpts = many
266+ ( (, Interpret_Interpret) <$>
267+ strOption (common <> long "interpret" <> help
268+ "Don't pre-build packages found in DIR when constructing the package database. The default behavior is \
269+ \'--interpret <project-root>', which will load everything which is unpacked into GHCi. \
270+ \ Use --interpret and --no-interpret multiple times to add or remove multiple trees \
271+ \ from the environment. Settings for right-most directories will \
272+ \ override settings for any identical directories given earlier."
273+ )
274+ <|> (, Interpret_NoInterpret) <$>
275+ strOption (common <> long "no-interpret" <> help
276+ "Make packages found in DIR available in the package database (but only when they are used dependencies). \
277+ \ This will build the packages in DIR before loading GHCi. \
278+ \See help for --interpret for how the two options are related."
279+ )
280+ )
281+ where
282+ common = action "directory" <> metavar "DIR"
283+
252284shellOpts :: Parser ShellOpts
253285shellOpts = ShellOpts
254286 <$> shellFlags
255− <*> optional (strArgument (metavar "COMMAND"))
287+ <*> interpretOpts
288+ -- This funny construction is used to support optparse-applicative's @--@ parsing.
289+ -- All arguments after @--@ are left unparsed and instead provided to the last positional parser
290+ -- which must therefore be 'many' in order to consume the rest of the input.
291+ <*> ((\xs -> if null xs then Nothing else Just $ unwords xs) <$> many (strArgument (metavar "COMMAND")))
292+
293+portOpt :: Int -> Parser Int
294+portOpt dfault = option auto (long "port" <> short 'p' <> help "Port number for server" <> showDefault <> value dfault <> metavar "INT")
256295
257296parserPrefs :: ParserPrefs
258297parserPrefs = defaultPrefs
259298 { prefShowHelpOnEmpty = True
260299 }
261300
262−parseCLIArgs :: ArgsConfig -> [String] -> IO Args
263−parseCLIArgs cfg as = pure as >>= handleParseResult . execParserPure parserPrefs (argsInfo cfg)
264−
265301-- | Create an Obelisk config for the current process.
266302mkObeliskConfig :: IO Obelisk
267303mkObeliskConfig = do
@@ -330,9 +366,13 @@ main' argsCfg = do
330366 Just impl -> do
331367 -- Invoke the real implementation, using --no-handoff to prevent infinite recursion
332368 putLog Debug $ "Handing off to " <> T.pack impl
333− liftIO $ executeFile impl False ("--no-handoff" : myArgs) Nothing
369+ _ <- liftIO $ rawSystem impl ("--no-handoff" : myArgs)
370+ return ()
334371 case myArgs of
335372 "--no-handoff" : as -> go as -- If we've been told not to hand off, don't hand off
373+ origPath:inPath:outPath:preprocessorName:packagePaths
374+ | preprocessorName == preprocessorIdentifier && any (\c -> c == '.' || c == pathSeparator) origPath ->
375+ ob $ ObCommand_Internal $ ObInternal_ApplyPackages origPath inPath outPath packagePaths
336376 a:as -- Otherwise bash completion would always hand-off even if the user isn't trying to
337377 | "--bash-completion" `isPrefixOf` a
338378 && "--no-handoff" `elem` as -> go (a:as)
@@ -343,29 +383,7 @@ ob :: MonadObelisk m => ObCommand -> m ()
343383ob = \case
344384 ObCommand_Init source force -> initProject source force
345385 ObCommand_Deploy dc -> case dc of
346− DeployCommand_Init deployOpts -> withProjectRoot "." $ \root -> do
347− let deployDir = _deployInitOpts_outputDir deployOpts
348− r <- liftIO $ canonicalizePath root
349− rootEqualsTarget <- liftIO $ equalFilePath r <$> canonicalizePath deployDir
350− when rootEqualsTarget $
351− failWith $ "Deploy directory " <> T.pack deployDir <> " should not be the same as project root."
352− thunkPtr <- readThunk root >>= \case
353− Left err -> failWith $ case err of
354− ReadThunkError_AmbiguousFiles ->
355− "Project root " <> T.pack r <> " is not a git repository or valid thunk"
356− ReadThunkError_UnrecognizedFiles ->
357− "Project root " <> T.pack r <> " is not a git repository or valid thunk"
358− _ -> "thunk read: " <> T.pack (show err)
359− Right (ThunkData_Packed ptr) -> return ptr
360− Right (ThunkData_Checkout (Just ptr)) -> return ptr
361− Right (ThunkData_Checkout Nothing) ->
362− getThunkPtr False root
363− let sshKeyPath = _deployInitOpts_sshKey deployOpts
364− hostname = _deployInitOpts_hostname deployOpts
365− route = _deployInitOpts_route deployOpts
366− adminEmail = _deployInitOpts_adminEmail deployOpts
367− enableHttps = _deployInitOpts_enableHttps deployOpts
368− deployInit thunkPtr deployDir sshKeyPath hostname route adminEmail enableHttps
386+ DeployCommand_Init deployOpts -> withProjectRoot "." $ \root -> deployInit deployOpts root
369387 DeployCommand_Push remoteBuilder -> do
370388 deployPath <- liftIO $ canonicalizePath "."
371389 deployPush deployPath $ case remoteBuilder of
@@ -373,25 +391,36 @@ ob = \case
373391 Just RemoteBuilder_ObeliskVM -> (:[]) <$> VmBuilder.getNixBuildersArg
374392 DeployCommand_Update -> deployUpdate "."
375393 DeployCommand_Test (platform, extraArgs) -> deployMobile platform extraArgs
376− ObCommand_Run -> inNixShell' $ static run
377− -- inNixShell ($(mkClosure 'ghcidAction) ())
378− ObCommand_Thunk tc -> case tc of
379− ThunkCommand_Update thunks mBranch -> mapM_ ((flip updateThunkToLatest) mBranch) thunks
380− ThunkCommand_Unpack thunks -> mapM_ unpackThunk thunks
381− ThunkCommand_Pack thunks force -> forM_ thunks (packThunk force)
382− ObCommand_Repl -> runRepl
383− ObCommand_Watch -> inNixShell' $ static runWatch
384− ObCommand_Shell so -> withProjectRoot "." $ \root ->
385− projectShell root False (_shellOpts_shell so) (_shellOpts_command so)
386− ObCommand_Doc shell pkgs -> withProjectRoot "." $ \root ->
387− projectShell root False shell (Just $ haddockCommand pkgs)
394+ ObCommand_Run interpretPathsList -> withInterpretPaths interpretPathsList run
395+ ObCommand_Profile basePath rtsFlags -> profile basePath rtsFlags
396+ ObCommand_Thunk to -> case _thunkOption_command to of
397+ ThunkCommand_Update config -> for_ thunks (updateThunkToLatest config)
398+ ThunkCommand_Unpack -> for_ thunks unpackThunk
399+ ThunkCommand_Pack config -> for_ thunks (packThunk config)
400+ where
401+ thunks = _thunkOption_thunks to
402+ ObCommand_Repl interpretPathsList -> withInterpretPaths interpretPathsList runRepl
403+ ObCommand_Watch interpretPathsList -> withInterpretPaths interpretPathsList runWatch
404+ ObCommand_Shell (ShellOpts shellAttr interpretPathsList cmd) -> withInterpretPaths interpretPathsList $ \root interpretPaths ->
405+ nixShellForInterpretPaths False shellAttr root interpretPaths cmd -- N.B. We do NOT bash escape here; we want to run the command as-is
406+ ObCommand_Doc shellAttr pkgs -> withInterpretPaths [] $ \root interpretPaths ->
407+ nixShellForInterpretPaths True shellAttr root interpretPaths $ Just $ haddockCommand pkgs
408+ ObCommand_Hoogle shell' port -> withProjectRoot "." $ \root -> do
409+ nixShellWithHoogle root True shell' $ Just $ "hoogle server -p" <> show port <> " --local"
388410 ObCommand_Internal icmd -> case icmd of
389− ObInternal_RunStaticIO k -> liftIO (unsafeLookupStaticPtr @(ObeliskT IO ()) k) >>= \case
390− Nothing -> failWith $ "ObInternal_RunStaticIO: no such StaticKey: " <> T.pack (show k)
391− Just p -> do
392− c <- getObelisk
393− liftIO $ runObelisk c $ deRefStaticPtr p
394− ObInternal_CLIDemo -> cliDemo
411+ ObInternal_ApplyPackages origPath inPath outPath packagePaths -> do
412+ liftIO $ Preprocessor.applyPackages origPath inPath outPath packagePaths
413+ ObInternal_ExportGhciConfig interpretPathsList useRelativePaths ->
414+ liftIO . putStrLn . unlines =<< withInterpretPaths interpretPathsList (exportGhciConfig useRelativePaths)
415+
416+-- | A helper for the common case that the command you want to run needs the project root and a resolved
417+-- set of interpret paths.
418+withInterpretPaths :: MonadObelisk m => [(FilePath, Interpret)] -> (FilePath -> PathTree Interpret -> m a) -> m a
419+withInterpretPaths interpretPathsList f = withProjectRoot "." $ \root -> do
420+ interpretPaths' <- resolveInterpretPaths $ (root, Interpret_Interpret) : interpretPathsList
421+ case interpretPaths' of
422+ Nothing -> failWith "No paths provided for finding packages"
423+ Just interpretPaths -> f root interpretPaths
395424
396425haddockCommand :: [String] -> String
397426haddockCommand pkgs = unwords
@@ -406,14 +435,21 @@ haddockCommand pkgs = unwords
406435getArgsConfig :: IO ArgsConfig
407436getArgsConfig = pure $ ArgsConfig { _argsConfig_enableVmBuilderByDefault = System.Info.os == "darwin" }
408437
409−encodeStaticKey :: StaticKey -> String
410−encodeStaticKey = T.unpack . decodeUtf8With lenientDecode . Base16.encode . LBS.toStrict . Binary.encode
411−
412−-- TODO: Use failWith in place of fail to be consistent.
413−decodeStaticKey :: String -> Either String StaticKey
414−decodeStaticKey s = case Base16.decode $ encodeUtf8 $ T.pack s of
415− (b, "") -> case Binary.decodeOrFail $ LBS.fromStrict b of
416− Right ("", _, a) -> pure a
417− Right _ -> fail "decodeStaticKey: Binary.decodeOrFail didn't consume all input"
418− Left (_, _, e) -> fail $ "decodeStaticKey: Binary.decodeOrFail failed: " <> show e
419− _ -> fail $ "decodeStaticKey: could not decode hex string: " <> show s
438+-- | Resolves an ordered list of paths for use with @--interpret@/@--no-interpret@ by coalescing
439+-- paths into a non-ambiguous set of paths. Ambiguity is resolved by choosing right-most paths
440+-- over any preceeding identical paths.
441+--
442+-- For example: @a/b=ON a/b/c=OFF@ and @a/b/c=OFF a/b=ON@ are the same.
443+-- @a/b=ON a/b=OFF@ is reduced to @a/b=OFF@. We prefer right-biased choice to increase
444+-- scriptability.
445+--
446+-- N.B. All the paths in the result will be canonicalized. It's impossible to determine path
447+-- overlap otherwise.
448+resolveInterpretPaths :: MonadIO m => [(FilePath, a)] -> m (Maybe (PathTree a))
449+resolveInterpretPaths ps = do
450+ trees <- liftIO $ for ps $ \(p, a) -> pathToTree a <$> canonicalizePath p
451+ pure $ foldr1 mergeTrees <$> nonEmpty trees
452+ where
453+ -- | Merge two 'PathTree's preferring leaves on the right in as much as they overlap with paths on the left.
454+ mergeTrees :: PathTree a -> PathTree a -> PathTree a
455+ mergeTrees (PathTree_Node ax x) (PathTree_Node ay y) = PathTree_Node (ay <|> ax) $ Map.unionWith mergeTrees x y
lib/command/src/Obelisk/Command/Deploy.hs+119−101
@@ -1,63 +1,77 @@
1+{-# LANGUAGE DeriveGeneric #-}
12{-# LANGUAGE FlexibleContexts #-}
23{-# LANGUAGE LambdaCase #-}
34{-# LANGUAGE OverloadedStrings #-}
5+{-# LANGUAGE QuasiQuotes #-}
46{-# LANGUAGE ScopedTypeVariables #-}
57{-# LANGUAGE ViewPatterns #-}
6−{-# LANGUAGE DeriveGeneric #-}
78module Obelisk.Command.Deploy where
89
10+import Control.Applicative (liftA2)
911import Control.Lens
1012import Control.Monad
11−import Control.Monad.Catch (Exception (displayException), MonadThrow, throwM, try, bracket_)
12−import Control.Monad.IO.Class (liftIO)
13+import Control.Monad.Catch (Exception (displayException), MonadThrow, bracket, throwM, try)
14+import Control.Monad.IO.Class (MonadIO, liftIO)
1315import Data.Aeson (FromJSON, ToJSON, encode, eitherDecode)
1416import Data.Bits
1517import qualified Data.ByteString.Lazy as BSL
1618import Data.Default
17−import qualified Data.HashMap.Strict as HM
1819import qualified Data.Map as Map
19−import Data.Text (Text)
2020import qualified Data.Set as Set
21+import Data.String.Here.Interpolated (i)
2122import qualified Data.Text as T
2223import qualified Data.Text.IO as T
2324import GHC.Generics
24−import Nix.Pretty
25−import Nix.String (principledMakeNixStringWithoutContext)
26−import Nix.Value
2725import System.Directory
28−import System.Environment (getEnvironment)
2926import System.FilePath
3027import System.IO
31−import System.Posix.Files
32−import System.Process (delegate_ctlc, env, proc, cwd)
28+import System.PosixCompat.Files
3329import Text.URI (URI)
3430import qualified Text.URI as URI
3531import Text.URI.Lens
3632
3733import Obelisk.App (MonadObelisk)
38−import Obelisk.CliApp (Severity (..), callProcessAndLogOutput, failWith, putLog, withSpinner)
34+import Obelisk.CliApp (
35+ Severity (..), callProcessAndLogOutput, failWith, proc, putLog,
36+ setCwd, setDelegateCtlc, setEnvOverride, withSpinner)
3937import Obelisk.Command.Nix
4038import Obelisk.Command.Project
4139import Obelisk.Command.Thunk
4240import Obelisk.Command.Utils
4341
44−deployInit
42+data DeployInitOpts = DeployInitOpts
43+ { _deployInitOpts_outputDir :: FilePath
44+ , _deployInitOpts_sshKey :: FilePath
45+ , _deployInitOpts_hostname :: [String]
46+ , _deployInitOpts_route :: String
47+ , _deployInitOpts_adminEmail :: String
48+ , _deployInitOpts_enableHttps :: Bool
49+ } deriving Show
50+
51+deployInit :: MonadObelisk m => DeployInitOpts -> FilePath -> m ()
52+deployInit deployOpts root = do
53+ let deployDir = _deployInitOpts_outputDir deployOpts
54+ rootEqualsTarget <- liftIO $ liftA2 equalFilePath (canonicalizePath root) (canonicalizePath deployDir)
55+ when rootEqualsTarget $
56+ failWith [i|Deploy directory ${deployDir} should not be the same as project root.|]
57+ thunkPtr <- readThunk root >>= \case
58+ Right (ThunkData_Packed _ ptr) -> return ptr
59+ _ -> getThunkPtr CheckClean_NotIgnored root Nothing
60+ deployInit' thunkPtr deployOpts
61+
62+deployInit'
4563 :: MonadObelisk m
4664 => ThunkPtr
47− -> FilePath
48− -> FilePath
49− -> [String] -- ^ hostnames
50− -> String -- ^ route
51− -> String -- ^ admin email
52− -> Bool -- ^ enable https
65+ -> DeployInitOpts
5366 -> m ()
54−deployInit thunkPtr deployDir sshKeyPath hostnames route adminEmail enableHttps = do
67+deployInit' thunkPtr (DeployInitOpts deployDir sshKeyPath hostnames route adminEmail enableHttps) = do
68+ liftIO $ createDirectoryIfMissing True deployDir
5569 localKey <- withSpinner ("Preparing " <> T.pack deployDir) $ do
5670 localKey <- liftIO (doesFileExist sshKeyPath) >>= \case
5771 False -> failWith $ T.pack $ "ob deploy init: file does not exist: " <> sshKeyPath
5872 True -> pure $ deployDir </> "ssh_key"
5973 callProcessAndLogOutput (Notice, Error) $
60− proc "cp" [sshKeyPath, localKey]
74+ proc cp [sshKeyPath, localKey]
6175 liftIO $ setFileMode localKey $ ownerReadMode .|. ownerWriteMode
6276 return localKey
6377 withSpinner "Validating configuration" $ do
@@ -71,29 +85,36 @@ deployInit thunkPtr deployDir sshKeyPath hostnames route adminEmail enableHttps
7185 --accidentally create a production deployment that uses development
7286 --credentials to connect to some resources. This could result in, e.g.,
7387 --production data backed up to a dev environment.
74− withSpinner "Creating project configuration directories" $ do
75− callProcessAndLogOutput (Notice, Error) $
76− proc "mkdir" [ "-p"
77− , deployDir </> "config" </> "backend"
78− , deployDir </> "config" </> "common"
79− , deployDir </> "config" </> "frontend"
80− ]
88+ withSpinner "Creating project configuration directories" $ liftIO $ do
89+ mapM_ (createDirectoryIfMissing True)
90+ [ deployDir </> "config" </> "backend"
91+ , deployDir </> "config" </> "common"
92+ , deployDir </> "config" </> "frontend"
93+ ]
94+
95+ let srcDir = deployDir </> "src"
96+ withSpinner ("Creating source thunk (" <> T.pack (makeRelative deployDir srcDir) <> ")") $ do
97+ createThunk srcDir $ Right thunkPtr
98+ setupObeliskImpl deployDir
99+
81100 withSpinner "Writing deployment configuration" $ do
82101 writeDeployConfig deployDir "backend_hosts" $ unlines hostnames
83102 writeDeployConfig deployDir "enable_https" $ show enableHttps
84103 writeDeployConfig deployDir "admin_email" adminEmail
85− writeDeployConfig deployDir ("config" </> "common" </> "route") $ route
86− withSpinner "Creating source thunk (./src)" $ liftIO $ do
87− createThunk (deployDir </> "src") thunkPtr
88− setupObeliskImpl deployDir
104+ writeDeployConfig deployDir ("config" </> "common" </> "route") route
105+ writeDeployConfig deployDir "module.nix" $
106+ "(import " <> toNixPath (makeRelative deployDir srcDir) <> " {}).obelisk.serverModules.mkBaseEc2"
107+
89108 withSpinner ("Initializing git repository (" <> T.pack deployDir <> ")") $
90109 initGit deployDir
91110
92−setupObeliskImpl :: FilePath -> IO ()
93−setupObeliskImpl deployDir = do
94− let implDir = toImplDir deployDir
111+setupObeliskImpl :: MonadIO m => FilePath -> m ()
112+setupObeliskImpl deployDir = liftIO $ do
113+ let
114+ implDir = toImplDir deployDir
115+ goBackUp = foldr (</>) "" $ (".." <$) $ splitPath $ makeRelative deployDir implDir
95116 createDirectoryIfMissing True implDir
96− writeFile (implDir </> "default.nix") "(import ../../src {}).obelisk"
117+ writeFile (implDir </> "default.nix") $ "(import " <> toNixPath (goBackUp </> "src") <> " {}).obelisk"
97118
98119deployPush :: MonadObelisk m => FilePath -> m [String] -> m ()
99120deployPush deployPath getNixBuilders = do
@@ -104,14 +125,16 @@ deployPush deployPath getNixBuilders = do
104125 routeHost <- getHostFromRoute enableHttps route
105126 let srcPath = deployPath </> "src"
106127 thunkPtr <- readThunk srcPath >>= \case
107− Right (ThunkData_Packed ptr) -> return ptr
108− Right (ThunkData_Checkout _) -> do
128+ Right (ThunkData_Packed _ ptr) -> return ptr
129+ Right ThunkData_Checkout -> do
109130 checkGitCleanStatus srcPath True >>= \case
110− True -> packThunk False srcPath
131+ True -> packThunk (ThunkPackConfig False (ThunkConfig Nothing)) srcPath
111132 False -> failWith $ T.pack $ "ob deploy push: ensure " <> srcPath <> " has no pending changes and latest is pushed upstream."
112133 Left err -> failWith $ "ob deploy push: couldn't read src thunk: " <> T.pack (show err)
113134 let version = show . _thunkRev_commit $ _thunkPtr_rev thunkPtr
114135 builders <- getNixBuilders
136+ let moduleFile = deployPath </> "module.nix"
137+ moduleFileExists <- liftIO $ doesFileExist moduleFile
115138 buildOutputByHost <- ifor (Map.fromSet (const ()) hosts) $ \host () -> do
116139 --TODO: What does it mean if this returns more or less than 1 line of output?
117140 [result] <- fmap lines $ nixCmd $ NixCmd_Build $ def
@@ -121,13 +144,13 @@ deployPush deployPath getNixBuilders = do
121144 , _target_expr = Nothing
122145 }
123146 & nixBuildConfig_outLink .~ OutLink_None
124− & nixCmdConfig_args .~
147+ & nixCmdConfig_args .~ (
125148 [ strArg "hostName" host
126149 , strArg "adminEmail" adminEmail
127150 , strArg "routeHost" routeHost
128151 , strArg "version" version
129152 , boolArg "enableHttps" enableHttps
130− ]
153+ ] <> [rawArg "module" ("import " <> toNixPath moduleFile) | moduleFileExists ])
131154 & nixCmdConfig_builders .~ builders
132155 pure result
133156 let knownHostsPath = deployPath </> "backend_known_hosts"
@@ -138,8 +161,8 @@ deployPush deployPath getNixBuilders = do
138161 "nix-copy-closure" ["-v", "--to", "--use-substitutes", "root@" <> host, "--gzip", outputPath]
139162 withSpinner "Uploading config" $ ifor_ buildOutputByHost $ \host _ -> do
140163 callProcessAndLogOutput (Notice, Warning) $
141− proc "rsync"
142− [ "-e ssh " <> unwords sshOpts
164+ proc rsyncPath
165+ [ "-e " <> sshPath <> " " <> unwords sshOpts
143166 , "-qarvz"
144167 , deployPath </> "config"
145168 , "root@" <> host <> ":/var/lib/backend"
@@ -147,9 +170,10 @@ deployPush deployPath getNixBuilders = do
147170 --TODO: Create GC root so we're sure our closure won't go away during this time period
148171 withSpinner "Switching to new configuration" $ ifor_ buildOutputByHost $ \host outputPath -> do
149172 callProcessAndLogOutput (Notice, Warning) $
150− proc "ssh" $ sshOpts <>
173+ proc sshPath $ sshOpts <>
151174 [ "root@" <> host
152175 , unwords
176+ -- Note that we don't want to $(staticWhich "nix-env") here, because this is executing on a remote machine
153177 [ "nix-env -p /nix/var/nix/profiles/system --set " <> outputPath
154178 , "&&"
155179 , "/nix/var/nix/profiles/system/bin/switch-to-configuration switch"
@@ -157,34 +181,19 @@ deployPush deployPath getNixBuilders = do
157181 ]
158182 isClean <- checkGitCleanStatus deployPath True
159183 when (not isClean) $ do
160− withSpinner "Commiting changes to Git" $ do
161− callProcessAndLogOutput (Debug, Error) $ proc "git"
162− ["-C", deployPath, "add", "."]
163− callProcessAndLogOutput (Debug, Error) $ proc "git"
164− ["-C", deployPath, "commit", "-m", "New deployment"]
184+ withSpinner "Committing changes to Git" $ do
185+ callProcessAndLogOutput (Debug, Error) $
186+ gitProc deployPath ["add", "."]
187+ callProcessAndLogOutput (Debug, Error) $
188+ gitProc deployPath ["commit", "-m", "New deployment"]
165189 putLog Notice $ "Deployed => " <> T.pack route
166190 where
167191 callProcess' envMap cmd args = do
168− processEnv <- Map.toList . (envMap <>) . Map.fromList <$> liftIO getEnvironment
169− let p = (proc cmd args) { delegate_ctlc = True, env = Just processEnv }
192+ let p = setEnvOverride (envMap <>) $ setDelegateCtlc True $ proc cmd args
170193 callProcessAndLogOutput (Notice, Notice) p
171194
172195deployUpdate :: MonadObelisk m => FilePath -> m ()
173−deployUpdate deployPath = updateThunkToLatest (deployPath </> "src") Nothing
174−
175−keytoolToAndroidConfig :: KeytoolConfig -> HM.HashMap Text (NValue t Identity m)
176−keytoolToAndroidConfig conf =
177− let path = nvPath $ _keytoolConfig_keystore conf
178− fromStr = nvStr . principledMakeNixStringWithoutContext . T.pack
179− storepass = fromStr $ _keytoolConfig_storepass conf
180− alias = fromStr $ _keytoolConfig_alias conf
181− keypass = fromStr $ _keytoolConfig_keypass conf
182− in HM.fromList
183− [ ("storeFile", path)
184− , ("storePassword", storepass)
185− , ("keyAlias", alias)
186− , ("keyPassword", keypass)
187− ]
196+deployUpdate deployPath = updateThunkToLatest (ThunkUpdateConfig Nothing (ThunkConfig Nothing)) (deployPath </> "src")
188197
189198data PlatformDeployment = Android | IOS
190199 deriving (Show, Eq)
@@ -200,7 +209,7 @@ deployMobile platform mobileArgs = withProjectRoot "." $ \root -> do
200209 configDir = root </> "config"
201210 exists <- liftIO $ doesDirectoryExist srcDir
202211 unless exists $ failWith "ob test should be run inside of a deploy directory"
203− nixBuildTarget <- case platform of
212+ (nixBuildTarget, extraArgs) <- case platform of
204213 Android -> do
205214 let keystorePath = root </> "android_keystore.jks"
206215 keytoolConfPath = root </> "android_keytool_config.json"
@@ -219,48 +228,60 @@ deployMobile platform mobileArgs = withProjectRoot "." $ \root -> do
219228 , _keytoolConfig_storepass = keyStorePassword
220229 , _keytoolConfig_keypass = keyStorePassword
221230 }
222− createKeystore root $ keyToolConf
231+ createKeystore root keyToolConf
223232 liftIO $ BSL.writeFile keytoolConfPath $ encode keyToolConf
224233 checkKeytoolConfExist <- liftIO $ doesFileExist keytoolConfPath
225234 unless checkKeytoolConfExist $ failWith "Missing android KeytoolConfig"
226235 keytoolConfContents <- liftIO $ BSL.readFile keytoolConfPath
227− liftIO $ print keytoolConfContents
228− releaseKey :: String <- case eitherDecode keytoolConfContents :: Either String KeytoolConfig of
236+ keyArgs <- case eitherDecode keytoolConfContents :: Either String KeytoolConfig of
229237 Left err -> failWith $ T.pack err
230− Right conf -> return $
231− (printNix :: MonadObelisk m => NValue t Identity m -> String) $
232− nvSet (keytoolToAndroidConfig conf) HM.empty
238+ Right conf -> pure
239+ [ "--sign"
240+ , "--store-file", _keytoolConfig_keystore conf
241+ , "--store-password", _keytoolConfig_storepass conf
242+ , "--key-alias", _keytoolConfig_alias conf
243+ , "--key-password", _keytoolConfig_keypass conf
244+ ]
233245 let expr = mconcat
234− [ "with (import ", srcDir, " {});"
235− , "android.frontend.override (drv: { "
236− , "releaseKey = (if builtins.isNull drv.releaseKey then {} else drv.releaseKey) // " <> releaseKey <> "; "
246+ [ "with (import ", toNixPath srcDir, " {});"
247+ , "android.frontend.override (drv: {"
248+ , "isRelease = true;"
237249 , "staticSrc = (passthru.__androidWithConfig ", configDir, ").frontend.staticSrc;"
250+ , "assets = (passthru.__androidWithConfig ", configDir, ").frontend.assets;"
238251 , "})"
239252 ]
240− return $ Target
253+ return (Target
241254 { _target_path = Nothing
242255 , _target_attr = Nothing
243256 , _target_expr = Just expr
244− }
257+ }, keyArgs)
245258 IOS -> do
246259 let expr = mconcat
247− [ "with (import ", srcDir, " {});"
248− , "ios.frontend.override (_: { staticSrc = (passthru.__iosWithConfig ", configDir, ").frontend.staticSrc; })"
260+ [ "with (import ", toNixPath srcDir, " {});"
261+ , "ios.frontend.override (_: { staticSrc = (passthru.__iosWithConfig ", toNixPath configDir, ").frontend.staticSrc; })"
249262 ]
250− return $ Target
263+ return (Target
251264 { _target_path = Nothing
252265 , _target_attr = Nothing
253266 , _target_expr = Just expr
254− }
267+ }, [])
255268 result <- nixCmd $ NixCmd_Build $ def
256269 & nixBuildConfig_outLink .~ OutLink_None
257270 & nixCmdConfig_target .~ nixBuildTarget
258− putLog Notice $ T.pack $ "Your recently built android apk can be found at the following path: " <> show result
259− callProcessAndLogOutput (Notice, Error) $ proc (result </> "bin" </> "deploy") mobileArgs
271+ let mobileArtifact = case platform of
272+ IOS -> "iOS App"
273+ Android -> "Android APK"
274+ putLog Notice $ T.pack $ unwords ["Your recently built", mobileArtifact, "can be found at the following path:", show result]
275+ callProcessAndLogOutput (Notice, Error) $ proc (result </> "bin" </> "deploy") (mobileArgs ++ extraArgs)
260276 where
261− withEcho showEcho f = do
262− prevEcho <- hGetEcho stdin
263− bracket_ (hSetEcho stdin showEcho) (hSetEcho stdin prevEcho) f
277+ withEcho showEcho f = bracket
278+ (do
279+ prevEcho <- hGetEcho stdin
280+ hSetEcho stdin showEcho
281+ pure prevEcho
282+ )
283+ (hSetEcho stdin)
284+ (const f)
264285
265286data KeytoolConfig = KeytoolConfig
266287 { _keytoolConfig_keystore :: FilePath
@@ -273,19 +294,16 @@ instance FromJSON KeytoolConfig
273294instance ToJSON KeytoolConfig
274295
275296createKeystore :: MonadObelisk m => FilePath -> KeytoolConfig -> m ()
276−createKeystore root config = do
277− let expr = "with (import " <> toImplDir root <> ").reflex-platform.nixpkgs; pkgs.mkShell { buildInputs = [ pkgs.jdk ]; }"
278− callProcessAndLogOutput (Notice,Notice) $ (proc "nix-shell" ["default.nix", "-E" , expr, "--run" , keytoolCmd]) { cwd = Just root }
279− where
280− keytoolCmd = processToShellString "keytool"
281− [ "-genkeypair", "-noprompt"
282− , "-keystore", _keytoolConfig_keystore config
283− , "-keyalg", "RSA", "-keysize", "2048"
284− , "-validity", "1000000"
285− , "-storepass", _keytoolConfig_storepass config
286− , "-alias", _keytoolConfig_alias config
287− , "-keypass", _keytoolConfig_keypass config
288− ]
297+createKeystore root config =
298+ callProcessAndLogOutput (Notice, Notice) $ setCwd (Just root) $ proc jreKeyToolPath
299+ [ "-genkeypair", "-noprompt"
300+ , "-keystore", _keytoolConfig_keystore config
301+ , "-keyalg", "RSA", "-keysize", "2048"
302+ , "-validity", "1000000"
303+ , "-storepass", _keytoolConfig_storepass config
304+ , "-alias", _keytoolConfig_alias config
305+ , "-keypass", _keytoolConfig_keypass config
306+ ]
289307
290308-- | Simplified deployment configuration mechanism. At one point we may revisit this.
291309writeDeployConfig :: MonadObelisk m => FilePath -> FilePath -> String -> m ()
@@ -297,7 +315,7 @@ readDeployConfig deployDir fname = liftIO $ do
297315
298316verifyHostKey :: MonadObelisk m => FilePath -> FilePath -> String -> m ()
299317verifyHostKey knownHostsPath keyPath hostName =
300− callProcessAndLogOutput (Notice, Warning) $ proc "ssh" $
318+ callProcessAndLogOutput (Notice, Warning) $ proc sshPath $
301319 sshArgs knownHostsPath keyPath True <>
302320 [ "root@" <> hostName
303321 , "-o", "NumberOfPasswordPrompts=0"
lib/command/src/Obelisk/Command/Nix.hs+67−27
@@ -9,22 +9,33 @@
99{-# LANGUAGE TemplateHaskell #-}
1010{-# LANGUAGE TypeApplications #-}
1111module Obelisk.Command.Nix
12− ( nixCmd
13− , NixCmd (..)
14− , nixCmdConfig_target
15− , nixCmdConfig_args
16− , nixCmdConfig_builders
12+ ( Arg (..)
1713 , NixBuildConfig (..)
1814 , nixBuildConfig_common
1915 , nixBuildConfig_outLink
16+ , NixCmd (..)
17+ , nixCmdConfig_args
18+ , nixCmdConfig_builders
19+ , nixCmdConfig_target
20+ , NixCommonConfig (..)
2021 , NixInstantiateConfig (..)
2122 , nixInstantiateConfig_eval
22− , NixCommonConfig (..)
23− , Target (..)
23+ , NixShellConfig (..)
24+ , nixShellConfig_common
25+ , nixShellConfig_pure
26+ , nixShellConfig_run
2427 , OutLink (..)
25− , Arg (..)
28+ , Target (..)
29+ , target_attr
30+ , target_expr
31+ , target_path
32+
2633 , boolArg
34+ , nixCmd
35+ , nixCmdProc
36+ , nixCmdProc'
2737 , rawArg
38+ , runNixShellConfig
2839 , strArg
2940 ) where
3041
@@ -37,7 +48,6 @@ import Data.List (intercalate)
3748import Data.Maybe
3849import Data.Monoid ((<>))
3950import qualified Data.Text as T
40−import System.Process (proc)
4151
4252import Obelisk.App (MonadObelisk)
4353import Obelisk.CliApp
@@ -63,10 +73,10 @@ data Arg
6373 deriving (Eq, Show)
6474
6575strArg :: String -> String -> Arg
66−strArg k = Arg_Str k
76+strArg = Arg_Str
6777
6878rawArg :: String -> String -> Arg
69−rawArg k = Arg_Expr k
79+rawArg = Arg_Expr
7080
7181boolArg :: String -> Bool -> Arg
7282boolArg k = Arg_Expr k . bool "false" "true"
@@ -86,7 +96,7 @@ makeClassy ''NixCommonConfig
8696instance Default NixCommonConfig where
8797 def = NixCommonConfig def mempty mempty
8898
89−runNixCommonConfig :: NixCommonConfig -> [FilePath]
99+runNixCommonConfig :: NixCommonConfig -> [String]
90100runNixCommonConfig cfg = mconcat [maybeToList path, attrArg, exprArg, args, buildersArg]
91101 where
92102 path = _target_path $ _nixCmdConfig_target cfg
@@ -124,7 +134,7 @@ instance HasNixCommonConfig NixBuildConfig where
124134instance Default NixBuildConfig where
125135 def = NixBuildConfig def def
126136
127−runNixBuildConfig :: NixBuildConfig -> [FilePath]
137+runNixBuildConfig :: NixBuildConfig -> [String]
128138runNixBuildConfig cfg = mconcat
129139 [ runNixCommonConfig $ cfg ^. nixCommonConfig
130140 , case _nixBuildConfig_outLink cfg of
@@ -145,12 +155,26 @@ instance HasNixCommonConfig NixInstantiateConfig where
145155instance Default NixInstantiateConfig where
146156 def = NixInstantiateConfig def False
147157
148−runNixInstantiateConfig :: NixInstantiateConfig -> [FilePath]
158+runNixInstantiateConfig :: NixInstantiateConfig -> [String]
149159runNixInstantiateConfig cfg = mconcat
150160 [ runNixCommonConfig $ cfg ^. nixCommonConfig
151161 , "--eval" <$ guard (_nixInstantiateConfig_eval cfg)
152162 ]
153163
164+data NixShellConfig = NixShellConfig
165+ { _nixShellConfig_common :: NixCommonConfig
166+ , _nixShellConfig_pure :: Bool
167+ , _nixShellConfig_run :: Maybe String
168+ }
169+
170+makeLenses ''NixShellConfig
171+
172+instance HasNixCommonConfig NixShellConfig where
173+ nixCommonConfig = nixShellConfig_common
174+
175+instance Default NixShellConfig where
176+ def = NixShellConfig def False Nothing
177+
154178data NixCmd
155179 = NixCmd_Build NixBuildConfig
156180 | NixCmd_Instantiate NixInstantiateConfig
@@ -158,27 +182,43 @@ data NixCmd
158182instance Default NixCmd where
159183 def = NixCmd_Build def
160184
161−nixCmd :: MonadObelisk m => NixCmd -> m FilePath
162−nixCmd cmdCfg = withSpinner' ("Running " <> cmd <> desc) (Just $ const $ "Built " <> desc) $ do
163− output <- readProcessAndLogStderr Debug $ proc (T.unpack cmd) $ options
164− -- Remove final newline that Nix appends
165− Just (outPath, '\n') <- pure $ T.unsnoc output
166− pure $ T.unpack outPath
185+runNixShellConfig :: NixShellConfig -> [String]
186+runNixShellConfig cfg = mconcat
187+ [ runNixCommonConfig $ cfg ^. nixCommonConfig
188+ , [ "--pure" | cfg ^. nixShellConfig_pure ]
189+ ] ++ mconcat [
190+ ["--run", run] | run <- maybeToList $ cfg ^. nixShellConfig_run
191+ ]
192+
193+nixCmdProc :: NixCmd -> ProcessSpec
194+nixCmdProc = fst . nixCmdProc'
195+
196+nixCmdProc' :: NixCmd -> (ProcessSpec, T.Text)
197+nixCmdProc' cmdCfg = (proc (T.unpack cmd) options, cmd)
167198 where
168− (cmd, options, commonCfg) = case cmdCfg of
199+ (cmd, options) = case cmdCfg of
169200 NixCmd_Build cfg' ->
170201 ( "nix-build"
171202 , runNixBuildConfig cfg'
172− , cfg' ^. nixCommonConfig
173203 )
174204 NixCmd_Instantiate cfg' ->
175205 ( "nix-instantiate"
176206 , runNixInstantiateConfig cfg'
177− , cfg' ^. nixCommonConfig
178207 )
208+
209+nixCmd :: MonadObelisk m => NixCmd -> m FilePath
210+nixCmd cmdCfg = withSpinner' (T.unwords $ "Running" : cmd : desc) (Just $ const $ T.unwords $ "Built" : desc) $ do
211+ output <- readProcessAndLogStderr Debug cmdProc
212+ -- Remove final newline that Nix appends
213+ Just (outPath, '\n') <- pure $ T.unsnoc output
214+ pure $ T.unpack outPath
215+ where
216+ (cmdProc, cmd) = nixCmdProc' cmdCfg
217+ commonCfg = case cmdCfg of
218+ NixCmd_Build cfg' -> cfg' ^. nixCommonConfig
219+ NixCmd_Instantiate cfg' -> cfg' ^. nixCommonConfig
179220 path = commonCfg ^. nixCmdConfig_target . target_path
180− desc = T.pack $ mconcat $ catMaybes
181− [ (" on " <>) <$> path
182− , (\a -> " [" <> a <> "]") <$> (commonCfg ^. nixCmdConfig_target . target_attr)
221+ desc = concat $ catMaybes
222+ [ (\x -> ["on", T.pack x]) <$> path
223+ , (\a -> ["[" <> T.pack a <> "]"]) <$> (commonCfg ^. nixCmdConfig_target . target_attr)
183224 ]
184−
lib/command/src/Obelisk/Command/Preprocessor.hsnew file+100
@@ -0,0 +1,100 @@
1+{-# LANGUAGE LambdaCase #-}
2+{-# LANGUAGE OverloadedStrings #-}
3+
4+module Obelisk.Command.Preprocessor where
5+
6+import qualified Data.ByteString.Lazy as BL
7+import qualified Data.ByteString.Lazy.Builder as BU
8+import Data.Foldable (for_)
9+import Data.List (intersperse, isPrefixOf, sortOn)
10+import Data.Maybe (fromMaybe)
11+import qualified Data.Text.Lazy.Builder as TL
12+import qualified Data.Text.Lazy.Encoding as TL
13+import Distribution.Compiler (CompilerFlavor (..))
14+import Language.Haskell.Extension (Extension (..), Language(..))
15+import System.Directory (canonicalizePath)
16+import System.IO (IOMode (..), hPutStrLn, stderr, withFile)
17+import System.FilePath (hasTrailingPathSeparator, joinPath, splitPath)
18+
19+import Obelisk.Command.Run (CabalPackageInfo (..), parseCabalPackage')
20+
21+-- | This code is intended to be executed via ghci's -pgmF preprocessor option.
22+-- The command line arguments are passed in via ghc, which dictates the first three options and meanings
23+-- In order for this code to execute, origPath must contain either a '.' character or a '/' character.
24+-- (This is to avoid the possibility of the command line syntax conflicting with another ob command)
25+-- We do have control over the remaining arguments, but they must be the same for all files.
26+-- Thus, the fourth command line argument must be "apply-packages", which has already been handled.
27+-- We assume all the remaining arguments passed in are paths to cabal or hpack package specifications.
28+-- Thus we must select among the packagePaths for the file we are going to parse.
29+applyPackages :: FilePath -> FilePath -> FilePath -> [FilePath] -> IO ()
30+applyPackages origPath inPath outPath packagePaths' = do
31+ origPathCanonical <- canonicalizePath origPath
32+ packagePaths <- traverse canonicalizePath packagePaths'
33+
34+ let
35+ takeDirs = takeWhile hasTrailingPathSeparator
36+ packageDirs = sortOn (negate . length . takeDirs) $ map splitPath packagePaths
37+ origDir = splitPath origPathCanonical
38+ matches = [ joinPath d | d <- packageDirs, takeDirs d `isPrefixOf` origDir ]
39+
40+ -- The first element of matches is going to be the deepest path to a package spec that contains
41+ -- our file as a subdirectory.
42+ packageInfo' <- case matches of
43+ [] -> do
44+ hPutStrLn stderr $ "Error: Unable to find cabal information for " <> origPath <> "; Skipping preprocessor."
45+ pure Nothing
46+ packagePath:_ -> parseCabalPackage' packagePath >>= \case
47+ Left err -> do
48+ hPutStrLn stderr $ "Error: Unable to parse cabal package " <> packagePath <> "; Skipping preprocessor on " <> origPath <> ". Error: " <> show err
49+ pure Nothing
50+ Right (Just (_, packageInfo)) -> pure $ Just packageInfo
51+ Right Nothing -> pure Nothing
52+
53+ writeOutput packageInfo' inPath outPath
54+
55+writeOutput :: Maybe CabalPackageInfo -> FilePath -> FilePath -> IO ()
56+writeOutput packageInfo' origPath outPath = withFile outPath WriteMode $ \hOut -> do
57+ for_ packageInfo' $ \packageInfo -> hPutTextBuilder hOut (generateHeader origPath packageInfo)
58+ BL.readFile origPath >>= BL.hPut hOut
59+ where
60+ hPutTextBuilder h = BU.hPutBuilder h . TL.encodeUtf8Builder . TL.toLazyText
61+
62+generateHeader :: FilePath -> CabalPackageInfo -> TL.Builder
63+generateHeader origPath packageInfo =
64+ hsExtensions <> ghcOptions <> lineNumberPragma origPath
65+ where
66+ hsExtensions =
67+ if null extList
68+ then mempty
69+ else pragma $ TL.fromText "LANGUAGE " <> mconcat (intersperse (TL.fromText ", ") extList)
70+ extList = addDefaultLanguage $ concatMap showExt $ _cabalPackageInfo_defaultExtensions packageInfo
71+ addDefaultLanguage =
72+ case _cabalPackageInfo_defaultLanguage packageInfo of
73+ Nothing -> id
74+ Just x -> case x of
75+ UnknownLanguage ext -> (TL.fromString ext :)
76+ ext -> (TL.fromString (show ext) :)
77+ showExt = \case
78+ EnableExtension ext -> [TL.fromString (show ext)]
79+ DisableExtension ext -> ["No" <> TL.fromString (show ext)]
80+ UnknownExtension ext -> [TL.fromString ext]
81+
82+ ghcOptions =
83+ if null optList
84+ then mempty
85+ else pragma $
86+ TL.fromText "OPTIONS_GHC " <> mconcat (intersperse (TL.fromText " ") (map TL.fromString optList))
87+ ghcOptList
88+ = filter (not . isPrefixOf "-O")
89+ $ fromMaybe []
90+ $ lookup GHC (_cabalPackageInfo_compilerOptions packageInfo)
91+ optList = _cabalPackageInfo_cppOptions packageInfo <> ghcOptList
92+
93+lineNumberPragma :: FilePath -> TL.Builder
94+lineNumberPragma origPath = pragma $ TL.fromText "LINE 1 " <> quoted '"' (TL.fromString origPath)
95+
96+pragma :: TL.Builder -> TL.Builder
97+pragma x = TL.fromText "{-# " <> x <> TL.fromText " #-}\n"
98+
99+quoted :: Char -> TL.Builder -> TL.Builder
100+quoted char x = TL.singleton char <> x <> TL.singleton char
lib/command/src/Obelisk/Command/Project.hs+136−51
@@ -1,44 +1,57 @@
11{-# LANGUAGE FlexibleContexts #-}
22{-# LANGUAGE LambdaCase #-}
33{-# LANGUAGE OverloadedStrings #-}
4−{-# LANGUAGE TemplateHaskell #-}
54module Obelisk.Command.Project
65 ( InitSource (..)
7− , initProject
86 , findProjectObeliskCommand
97 , findProjectRoot
10− , withProjectRoot
11− , inProjectShell
12− , inImpureProjectShell
13− , projectShell
14−
15− , toObeliskDir
8+ , findProjectAssets
9+ , initProject
10+ , nixShellRunConfig
11+ , nixShellRunProc
12+ , nixShellWithHoogle
13+ , nixShellWithoutPkgs
14+ , obeliskDirName
1615 , toImplDir
16+ , toObeliskDir
17+ , withProjectRoot
18+ , bashEscape
1719 ) where
1820
1921import Control.Concurrent.MVar (MVar, newMVar, withMVarMasked)
22+import Control.Lens ((.~), (?~), (<&>))
2023import Control.Monad
2124import Control.Monad.IO.Class (liftIO)
2225import Control.Monad.State
26+import qualified Data.Aeson as Json
27+import qualified Data.ByteString.UTF8 as BSU
2328import Data.Bits
24−import Data.Function (on)
29+import qualified Data.ByteString.Lazy as BSL
30+import Data.Default (def)
31+import Data.Function ((&), on)
32+import Data.Map (Map)
33+import Data.Text (Text)
2534import qualified Data.Text as T
35+import Data.Text.Encoding (decodeUtf8, encodeUtf8)
36+import Data.Traversable (for)
2637import System.Directory
2738import System.Environment (lookupEnv)
2839import System.FilePath
2940import System.IO.Temp
3041import System.IO.Unsafe (unsafePerformIO)
31−import System.Posix (FileStatus, FileMode, CMode (..), UserID, deviceID, fileID, fileMode, fileOwner, getFileStatus, getRealUserID)
32−import System.Posix.Files
33−import System.Process (CreateProcess, cwd, proc, waitForProcess, delegate_ctlc)
34−import System.Which (staticWhich)
42+import System.PosixCompat.Files
43+import System.PosixCompat.Types
44+import System.PosixCompat.User
45+import Text.ShellEscape (bash, bytes)
3546
3647import GitHub.Data.GitData (Branch)
3748import GitHub.Data.Name (Name)
3849
3950import Obelisk.App (MonadObelisk)
4051import Obelisk.CliApp
52+import Obelisk.Command.Nix
4153import Obelisk.Command.Thunk
54+import Obelisk.Command.Utils (nixBuildExePath, nixExePath, toNixPath, cp, nixShellPath)
4255
4356--TODO: Make this module resilient to random exceptions
4457
@@ -53,6 +66,7 @@ obeliskSourceWithBranch branch = ThunkSource_GitHub $ GitHubSource
5366 { _gitHubSource_owner = "obsidiansystems"
5467 , _gitHubSource_repo = "obelisk"
5568 , _gitHubSource_branch = Just branch
69+ , _gitHubSource_private = False
5670 }
5771
5872data InitSource
@@ -61,9 +75,12 @@ data InitSource
6175 | InitSource_Symlink FilePath
6276 deriving Show
6377
78+obeliskDirName :: FilePath
79+obeliskDirName = ".obelisk"
80+
6481-- | Path to obelisk directory in given path
6582toObeliskDir :: FilePath -> FilePath
66−toObeliskDir p = p </> ".obelisk"
83+toObeliskDir p = p </> obeliskDirName
6784
6885-- | Path to impl file in given path
6986toImplDir :: FilePath -> FilePath
@@ -80,20 +97,26 @@ initProject source force = withSystemTempDirectory "ob-init" $ \tmpDir -> do
8097 | otherwise -> failWith "ob init requires an empty directory. Use the flag --force to init anyway, potentially overwriting files."
8198 skeleton <- withSpinner "Setting up obelisk" $ do
8299 liftIO $ createDirectory obDir
100+ -- Clone the git source and repack it with the init source obelisk
101+ -- The purpose of this is to ensure we use the correct thunk spec.
102+ let cloneAndRepack src = do
103+ putLog Debug $ "Cloning obelisk into " <> T.pack implDir <> " and repacking using itself"
104+ commit <- getLatestRev src
105+ gitCloneForThunkUnpack (thunkSourceToGitSource src) (_thunkRev_commit commit) implDir
106+ callHandoffOb implDir ["thunk", "pack", implDir]
83107 case source of
84− InitSource_Default -> createThunkWithLatest implDir obeliskSource
85− InitSource_Branch branch -> createThunkWithLatest implDir $ obeliskSourceWithBranch branch
108+ InitSource_Default -> cloneAndRepack obeliskSource
109+ InitSource_Branch branch -> cloneAndRepack $ obeliskSourceWithBranch branch
86110 InitSource_Symlink path -> do
87111 let symlinkPath = if isAbsolute path
88112 then path
89113 else ".." </> path
90114 liftIO $ createSymbolicLink symlinkPath implDir
91115 _ <- nixBuildAttrWithCache implDir "command"
92− --TODO: We should probably handoff to the impl here
93116 skel <- nixBuildAttrWithCache implDir "skeleton" --TODO: I don't think there's actually any reason to cache this
94117
95118 callProcessAndLogOutput (Notice, Error) $
96− proc "cp"
119+ proc cp
97120 [ "-r"
98121 , "--preserve=links"
99122 , obDir
@@ -103,7 +126,7 @@ initProject source force = withSystemTempDirectory "ob-init" $ \tmpDir -> do
103126
104127 withSpinner "Copying project skeleton" $ do
105128 callProcessAndLogOutput (Notice, Error) $
106− proc "cp"
129+ proc cp
107130 [ "-r"
108131 , "--no-preserve=mode"
109132 , "-T"
@@ -114,6 +137,30 @@ initProject source force = withSystemTempDirectory "ob-init" $ \tmpDir -> do
114137 let configDir = "config"
115138 createDirectoryIfMissing False configDir
116139 mapM_ (createDirectoryIfMissing False . (configDir </>)) ["backend", "common", "frontend"]
140+ putLog Notice $ T.intercalate "\n"
141+ [ "An obelisk project has been successfully initialized. Next steps:"
142+ , " 'ob run': Start a development server"
143+ , " 'ob watch': Watch for changes without starting a server"
144+ , " 'ob repl': Load your project into GHCi"
145+ ]
146+
147+callHandoffOb
148+ :: MonadObelisk m
149+ => FilePath -- ^ Directory of the obelisk we want to handoff to
150+ -> [String] -- ^ Arguments to pass to ob
151+ -> m ()
152+callHandoffOb dir args = do
153+ obeliskCommandPkg <- nixCmd $ NixCmd_Build $ def
154+ & nixBuildConfig_outLink .~ OutLink_None
155+ & nixCmdConfig_target .~ Target
156+ { _target_path = Just dir
157+ , _target_attr = Just "command"
158+ , _target_expr = Nothing
159+ }
160+ let impl = obeliskCommandPkg </> "bin" </> "ob"
161+ -- Invoke the real implementation, using --no-handoff to prevent infinite recursion
162+ putLog Debug $ "Running '" <> T.pack (unwords args) <> "' with " <> T.pack impl
163+ callProcessAndLogOutput (Debug, Warning) (proc impl ("--no-handoff" : args))
117164
118165--TODO: Allow the user to ignore our security concerns
119166-- | Find the Obelisk implementation for the project at the given path
@@ -168,9 +215,9 @@ findProjectRoot :: MonadObelisk m => FilePath -> m (Maybe FilePath)
168215findProjectRoot target = do
169216 myUid <- liftIO getRealUserID
170217 targetStat <- liftIO $ getFileStatus target
171− umask <- liftIO $ getUmask
218+ umask <- liftIO getUmask
172219 (result, _) <- liftIO $ runStateT (walkToProjectRoot target targetStat umask myUid) []
173− return result
220+ return $ makeRelative "." <$> result
174221
175222withProjectRoot :: MonadObelisk m => FilePath -> (FilePath -> m a) -> m a
176223withProjectRoot target f = findProjectRoot target >>= \case
@@ -233,38 +280,76 @@ filePermissionIsSafe s umask = not fileWorldWritable && fileGroupWritable <= uma
233280 fileGroupWritable = fileMode s .&. 0o020 == 0o020
234281 umaskGroupWritable = umask .&. 0o020 == 0
235282
236−-- | Run a command in the given shell for the current project
237−inProjectShell :: MonadObelisk m => String -> String -> m ()
238−inProjectShell shellName command = withProjectRoot "." $ \root ->
239− projectShell root True shellName (Just command)
283+nixShellRunConfig :: MonadObelisk m => FilePath -> Bool -> Maybe String -> m NixShellConfig
284+nixShellRunConfig root isPure command = do
285+ nixpkgsPath <- fmap T.strip $ readProcessAndLogStderr Debug $ setCwd (Just root) $
286+ proc nixExePath ["eval", "(import .obelisk/impl {}).nixpkgs.path"]
287+ nixRemote <- liftIO $ lookupEnv "NIX_REMOTE"
288+ pure $ def
289+ & nixShellConfig_pure .~ isPure
290+ & nixShellConfig_common . nixCmdConfig_target .~ (def & target_path .~ Nothing)
291+ & nixShellConfig_run .~ (command <&> \cs -> unwords $ concat
292+ [ ["export", BSU.toString . bytes . bash $ "NIX_PATH=nixpkgs=" <> encodeUtf8 nixpkgsPath, ";"]
293+ , maybe [] (\v -> ["export", BSU.toString . bytes . bash $ "NIX_REMOTE=" <> encodeUtf8 (T.pack v), ";"]) nixRemote
294+ , [cs]
295+ ])
296+
297+bashEscape :: String -> String
298+bashEscape = BSU.toString . bytes . bash . BSU.fromString
240299
241−inImpureProjectShell :: MonadObelisk m => String -> String -> m ()
242−inImpureProjectShell shellName command = withProjectRoot "." $ \root ->
243− projectShell root False shellName (Just command)
300+nixShellRunProc :: NixShellConfig -> ProcessSpec
301+nixShellRunProc cfg = setDelegateCtlc True $ proc nixShellPath $ runNixShellConfig cfg
244302
245−projectShell :: MonadObelisk m => FilePath -> Bool -> String -> Maybe String -> m ()
246−projectShell root isPure shellName command = do
247− let nixPath = $(staticWhich "nix")
248− nixpkgsPath <- fmap T.strip $ readProcessAndLogStderr Debug $ proc nixPath ["eval", "(import .obelisk/impl {}).nixpkgs.path"]
249− nixRemote <- liftIO $ lookupEnv "NIX_REMOTE"
250− (_, _, _, ph) <- createProcess_ "runNixShellAttr" $ setCtlc $ setCwd (Just root) $ proc "nix-shell" $
251− [ "default.nix"] <>
252− ["--pure" | isPure] <>
253− [ "-A"
254− , "shells." <> shellName
255− ] <> case command of
256− Nothing -> []
257− Just c ->
258− -- TODO: Escape nixpkgsPath and nixRemote
259− [ "--run"
260− , "export NIX_PATH=nixpkgs=" <> T.unpack nixpkgsPath <> "; " <>
261− maybe "" (\v -> "export NIX_REMOTE=" <> v <> "; ") nixRemote <>
262− c
303+nixShellWithoutPkgs
304+ :: MonadObelisk m
305+ => FilePath -- ^ Path to project root
306+ -> Bool -- ^ Should this be a pure shell?
307+ -> Bool -- ^ Should we chdir to the package root in the shell?
308+ -> Map Text FilePath -- ^ Package names mapped to their paths
309+ -> String -- ^ Shell attribute to use (e.g. @"ghc"@, @"ghcjs"@, etc.)
310+ -> Maybe String -- ^ If 'Just' run the given command; otherwise just open the interactive shell
311+ -> m ()
312+nixShellWithoutPkgs root isPure chdirToRoot packageNamesAndPaths shellAttr command = do
313+ packageNamesAndAbsPaths <- liftIO $ for packageNamesAndPaths makeAbsolute
314+ defShellConfig <- nixShellRunConfig root isPure command
315+ let setCwd_ = if chdirToRoot then setCwd (Just root) else id
316+ runProcess_ $ setCwd_ $ nixShellRunProc $ defShellConfig
317+ & nixShellConfig_common . nixCmdConfig_target . target_expr ?~
318+ "{root, pkgs, shell}: ((import root {}).passthru.__unstable__.self.extend (_: _: {\
319+ \shellPackages = builtins.fromJSON pkgs;\
320+ \})).project.shells.${shell}"
321+ & nixShellConfig_common . nixCmdConfig_args .~
322+ [ rawArg "root" $ toNixPath $ if chdirToRoot then "." else root
323+ , strArg "pkgs" (T.unpack $ decodeUtf8 $ BSL.toStrict $ Json.encode packageNamesAndAbsPaths)
324+ , strArg "shell" shellAttr
263325 ]
264− void $ liftIO $ waitForProcess ph
265326
266−setCtlc :: CreateProcess -> CreateProcess
267−setCtlc cfg = cfg { delegate_ctlc = True }
327+nixShellWithHoogle :: MonadObelisk m => FilePath -> Bool -> String -> Maybe String -> m ()
328+nixShellWithHoogle root isPure shell' command = do
329+ defShellConfig <- nixShellRunConfig root isPure command
330+ runProcess_ $ setCwd (Just root) $ nixShellRunProc $ defShellConfig
331+ & nixShellConfig_common . nixCmdConfig_target . target_expr ?~
332+ "{shell}: ((import ./. {}).passthru.__unstable__.self.extend (_: super: {\
333+ \userSettings = super.userSettings // { withHoogle = true; };\
334+ \})).project.shells.${shell}"
335+ & nixShellConfig_common . nixCmdConfig_args .~ [ strArg "shell" shell' ]
268336
269−setCwd :: Maybe FilePath -> CreateProcess -> CreateProcess
270−setCwd fp cfg = cfg { cwd = fp }
337+findProjectAssets :: MonadObelisk m => FilePath -> m Text
338+findProjectAssets root = do
339+ isDerivation <- readProcessAndLogStderr Debug $ setCwd (Just root) $
340+ proc nixExePath
341+ [ "eval"
342+ , "(let a = import ./. {}; in toString (a.reflex.nixpkgs.lib.isDerivation a.passthru.staticFilesImpure))"
343+ , "--raw"
344+ -- `--raw` is not available with old nix-instantiate. It drops quotation
345+ -- marks and trailing newline, so is very convenient for shelling out.
346+ ]
347+ -- Check whether the impure static files are a derivation (and so must be built)
348+ if isDerivation == "1"
349+ then fmap T.strip $ readProcessAndLogStderr Debug $ setCwd (Just root) $ -- Strip whitespace here because nix-build has no --raw option
350+ proc nixBuildExePath
351+ [ "--no-out-link"
352+ , "-E", "(import ./. {}).passthru.staticFilesImpure"
353+ ]
354+ else readProcessAndLogStderr Debug $ setCwd (Just root) $
355+ proc nixExePath ["eval", "-f", ".", "passthru.staticFilesImpure", "--raw"]
lib/command/src/Obelisk/Command/Run.hs+490−193
@@ -1,50 +1,91 @@
1+{-# LANGUAGE DeriveFoldable #-}
2+{-# LANGUAGE DeriveFunctor #-}
3+{-# LANGUAGE DeriveTraversable #-}
14{-# LANGUAGE FlexibleContexts #-}
25{-# LANGUAGE LambdaCase #-}
36{-# LANGUAGE MultiParamTypeClasses #-}
47{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE QuasiQuotes #-}
59{-# LANGUAGE ScopedTypeVariables #-}
6−{-# LANGUAGE TemplateHaskell #-}
10+{-# LANGUAGE TupleSections #-}
11+{-# LANGUAGE ViewPatterns #-}
712module Obelisk.Command.Run where
813
9−import Control.Exception (bracket)
10−import Control.Monad
14+import Control.Arrow ((&&&))
15+import Control.Exception (Exception, bracket)
16+import Control.Lens (ifor, (.~), (&))
17+import Control.Monad (filterM)
18+import Control.Monad.Except (runExceptT, throwError)
1119import Control.Monad.IO.Class (liftIO)
1220import Control.Monad.Reader (MonadIO)
13−import Data.Either
14−import qualified Data.List as L
21+import Data.Bifoldable (bifoldr1)
22+import Data.Bifunctor (bimap)
23+import Data.Coerce (coerce)
24+import Data.Default (def)
25+import Data.Either (partitionEithers)
26+import Data.Foldable (fold, for_, toList)
27+import Data.Functor.Identity (runIdentity)
28+import Data.List (intercalate)
29+import Data.List.NonEmpty (NonEmpty)
1530import qualified Data.List.NonEmpty as NE
16−import Data.Maybe
31+import Data.Map (Map)
32+import qualified Data.Map as Map
33+import qualified Data.Map.Monoidal as MMap
34+import Data.Maybe (catMaybes, fromMaybe, mapMaybe)
35+import Data.Ord (comparing)
36+import Data.Set (Set)
37+import qualified Data.Set as Set
38+import Data.String.Here.Interpolated (i)
39+import Data.Text (Text)
1740import qualified Data.Text as T
41+import Data.Time.Clock (getCurrentTime)
42+import Data.Time.Format (formatTime, defaultTimeLocale)
43+import Data.Traversable (for)
44+import Debug.Trace (trace)
1845import Distribution.Compiler (CompilerFlavor(..))
1946import Distribution.PackageDescription.Parsec (parseGenericPackageDescription)
2047import Distribution.Parsec.ParseResult (runParseResult)
21−import Distribution.Pretty
22−import Distribution.Types.BuildInfo
23−import Distribution.Types.CondTree
24−import Distribution.Types.GenericPackageDescription
25−import Distribution.Types.Library
26−import Distribution.Utils.Generic
27−import Hpack.Config
28−import Hpack.Render
29−import Hpack.Yaml
30−import Language.Haskell.Extension
31−import Network.Socket hiding (Debug)
48+import qualified Distribution.System as Dist
49+import Distribution.Types.BuildInfo (buildable, cppOptions, defaultExtensions, defaultLanguage, hsSourceDirs, options)
50+import Distribution.Types.CondTree (simplifyCondTree)
51+import Distribution.Types.GenericPackageDescription (ConfVar (Arch, Impl, OS), condLibrary)
52+import Distribution.Types.Library (libBuildInfo)
53+import Distribution.Utils.Generic (toUTF8BS, readUTF8File)
54+import qualified Distribution.Parsec.Common as Dist
55+import qualified Hpack.Config as Hpack
56+import qualified Hpack.Render as Hpack
57+import qualified Hpack.Yaml as Hpack
58+import Language.Haskell.Extension (Extension, Language)
59+import qualified Network.Socket as Socket
3260import System.Directory
61+import System.Environment (getExecutablePath)
3362import System.FilePath
34−import System.Process (proc)
63+import qualified System.Info
3564import System.IO.Temp (withSystemTempDirectory)
36−import System.Which (staticWhich)
37−import Data.ByteString (ByteString)
3865
39−import Obelisk.App (MonadObelisk, ObeliskT)
40−import Obelisk.CliApp
41− ( CliT (..), HasCliConfig, Severity (..)
42− , callCommand, failWith, getCliConfig, putLog
43− , readProcessAndLogStderr, runCli)
44−import Obelisk.Command.Project (inProjectShell, withProjectRoot)
66+import Obelisk.App (MonadObelisk)
67+import Obelisk.CliApp (
68+ Severity (..),
69+ failWith,
70+ proc,
71+ putLog,
72+ readCreateProcessWithExitCode,
73+ readProcessAndLogStderr,
74+ runProcess_,
75+ setCwd,
76+ setDelegateCtlc,
77+ withSpinner,
78+ )
79+import Obelisk.Command.Nix
80+import Obelisk.Command.Project (nixShellWithoutPkgs, withProjectRoot, findProjectAssets, bashEscape)
81+import Obelisk.Command.Thunk (attrCacheFileName)
82+import Obelisk.Command.Utils (findExePath, ghcidExePath)
4583
4684data CabalPackageInfo = CabalPackageInfo
47− { _cabalPackageInfo_packageRoot :: FilePath
85+ { _cabalPackageInfo_packageFile :: FilePath
86+ , _cabalPackageInfo_packageName :: T.Text
87+ , _cabalPackageInfo_packageRoot :: FilePath
88+ , _cabalPackageInfo_buildable :: Bool
4889 , _cabalPackageInfo_sourceDirs :: NE.NonEmpty FilePath
4990 -- ^ List of hs src dirs of the library component
5091 , _cabalPackageInfo_defaultExtensions :: [Extension]
@@ -53,205 +94,461 @@ data CabalPackageInfo = CabalPackageInfo
5394 -- ^ List of globally set languages of the library component
5495 , _cabalPackageInfo_compilerOptions :: [(CompilerFlavor, [String])]
5596 -- ^ List of compiler-specific options (e.g., the "ghc-options" field of the cabal file)
97+ , _cabalPackageInfo_cppOptions :: [String]
98+ -- ^ List of CPP (C Preprocessor) options (e.g. the "cpp-options" field of the cabal file)
5699 }
57100
58−-- NOTE: `run` is not polymorphic like the rest because we use StaticPtr to invoke it.
59−run :: ObeliskT IO ()
60−run = do
61− let nixPath = $(staticWhich "nix")
62− nixBuildPath = $(staticWhich "nix-build")
63− pkgs <- getLocalPkgs
64− withGhciScript pkgs $ \dotGhciPath -> do
65− freePort <- getFreePort
66− assets <- withProjectRoot "." $ \root -> do
67− let importableRoot = if "/" `isInfixOf` root
68− then root
69− else "./" <> root
70− isDerivation <- readProcessAndLogStderr Debug $
71− proc nixPath
72− [ "eval"
73− , "-f"
74− , root
75− , "(let a = import " <> importableRoot <> " {}; in toString (a.reflex.nixpkgs.lib.isDerivation a.passthru.staticFilesImpure))"
76− , "--raw"
77− -- `--raw` is not available with old nix-instantiate. It drops quotation
78− -- marks and trailing newline, so is very convenient for shelling out.
79− ]
80− -- Check whether the impure static files are a derivation (and so must be built)
81− if isDerivation == "1"
82− then fmap T.strip $ readProcessAndLogStderr Debug $ -- Strip whitespace here because nix-build has no --raw option
83− proc nixBuildPath
84− [ "--no-out-link"
85− , "-E", "(import " <> importableRoot <> "{}).passthru.staticFilesImpure"
86− ]
87− else readProcessAndLogStderr Debug $
88− proc nixPath ["eval", "-f", root, "passthru.staticFilesImpure", "--raw"]
89− putLog Debug $ "Assets impurely loaded from: " <> assets
90− runGhcid dotGhciPath $ Just $ unwords
101+-- | 'Bool' with a better name for its purpose.
102+data Interpret = Interpret_Interpret | Interpret_NoInterpret deriving (Eq, Ord, Show)
103+
104+textInterpret :: Interpret -> Text
105+textInterpret = \case
106+ Interpret_Interpret -> "Interpret"
107+ Interpret_NoInterpret -> "NoInterpret"
108+
109+-- | Describe a set of 'FilePath's as a tree to facilitate merging them in a convenient way.
110+data PathTree a = PathTree_Node
111+ (Maybe a) -- An optional leaf at this point in the tree
112+ (Map FilePath (PathTree a)) -- Branches to deeper leaves
113+ deriving (Eq, Ord, Show, Functor, Foldable, Traversable)
114+
115+-- | 2D ASCII drawing of a 'PathTree'. Adapted from Data.Tree.draw.
116+drawPathTree :: (a -> Text) -> PathTree a -> Text
117+drawPathTree showA (PathTree_Node _ ts0) = T.intercalate "\n" $ goForest (Map.toList ts0)
118+ where
119+ annotated ma = maybe id (\a b -> b <> " [" <> showA a <> "]") ma . T.pack
120+ goTree (fp, PathTree_Node ma forest) = annotated ma fp : goForest (Map.toList forest)
121+ goForest [] = []
122+ goForest [tree] = shift "└─ " " " (goTree tree)
123+ goForest (tree:forest) = shift "├─ " "│ " (goTree tree) <> goForest forest
124+ shift first other = zipWith (<>) (first : repeat other)
125+
126+-- | Used to signal to obelisk that it's being invoked as a preprocessor
127+preprocessorIdentifier :: String
128+preprocessorIdentifier = "__preprocessor-apply-packages"
129+
130+profile
131+ :: MonadObelisk m
132+ => String
133+ -> [String]
134+ -> m ()
135+profile profileBasePattern rtsFlags = withProjectRoot "." $ \root -> do
136+ putLog Debug "Using profiled build of project."
137+
138+ outPath <- withSpinner "Building profiled executable" $
139+ fmap (T.unpack . T.strip) $ readProcessAndLogStderr Debug $ setCwd (Just root) $ nixCmdProc $
140+ NixCmd_Build $ def
141+ & nixBuildConfig_outLink .~ OutLink_None
142+ & nixCmdConfig_target .~ Target
143+ { _target_path = Just "."
144+ , _target_attr = Just "__unstable__.profiledObRun"
145+ , _target_expr = Nothing
146+ }
147+ assets <- findProjectAssets root
148+ putLog Debug $ "Assets impurely loaded from: " <> assets
149+ time <- liftIO getCurrentTime
150+ let profileBaseName = formatTime defaultTimeLocale profileBasePattern time
151+ liftIO $ createDirectoryIfMissing True $ takeDirectory $ root </> profileBaseName
152+ putLog Debug $ "Storing profiled data under base name of " <> T.pack (root </> profileBaseName)
153+ freePort <- getFreePort
154+ runProcess_ $ setCwd (Just root) $ setDelegateCtlc True $ proc (outPath </> "bin" </> "ob-run") $
155+ [ show freePort
156+ , T.unpack assets
157+ , profileBaseName
158+ , "+RTS"
159+ , "-po" <> profileBaseName
160+ ] <> rtsFlags
161+ <> [ "-RTS" ]
162+
163+run :: MonadObelisk m => FilePath -> PathTree Interpret -> m ()
164+run root interpretPaths = do
165+ pkgs <- getParsedLocalPkgs root interpretPaths
166+ assets <- findProjectAssets root
167+ putLog Debug $ "Assets impurely loaded from: " <> assets
168+ ghciArgs <- getGhciSessionSettings pkgs root True
169+ freePort <- getFreePort
170+ withGhciScriptArgs pkgs $ \dotGhciArgs -> do
171+ runGhcid root True (ghciArgs <> dotGhciArgs) pkgs $ Just $ unwords
91172 [ "Obelisk.Run.run"
92173 , show freePort
93− , "(runServeAsset " ++ show assets ++ ")"
174+ , "(Obelisk.Run.runServeAsset " ++ show assets ++ ")"
94175 , "Backend.backend"
95176 , "Frontend.frontend"
96177 ]
97178
98−runRepl :: MonadObelisk m => m ()
99−runRepl = do
100− pkgs <- getLocalPkgs
101− withGhciScript pkgs $ \dotGhciPath -> do
102− runGhciRepl dotGhciPath
179+runRepl :: MonadObelisk m => FilePath -> PathTree Interpret -> m ()
180+runRepl root interpretPaths = do
181+ pkgs <- getParsedLocalPkgs root interpretPaths
182+ ghciArgs <- getGhciSessionSettings pkgs "." True
183+ withGhciScriptArgs pkgs $ \dotGhciArgs ->
184+ runGhciRepl root pkgs (ghciArgs <> dotGhciArgs)
185+
186+runWatch :: MonadObelisk m => FilePath -> PathTree Interpret -> m ()
187+runWatch root interpretPaths = do
188+ pkgs <- getParsedLocalPkgs root interpretPaths
189+ ghciArgs <- getGhciSessionSettings pkgs root True
190+ withGhciScriptArgs pkgs $ \dotGhciArgs ->
191+ runGhcid root True (ghciArgs <> dotGhciArgs) pkgs Nothing
192+
193+exportGhciConfig :: MonadObelisk m => Bool -> FilePath -> PathTree Interpret -> m [String]
194+exportGhciConfig useRelativePaths root interpretPaths = do
195+ pkgs <- getParsedLocalPkgs root interpretPaths
196+ getGhciSessionSettings pkgs "." useRelativePaths
197+
198+nixShellForInterpretPaths :: MonadObelisk m => Bool -> String -> FilePath -> PathTree Interpret -> Maybe String -> m ()
199+nixShellForInterpretPaths isPure shell root interpretPaths cmd = do
200+ pkgs <- getParsedLocalPkgs root interpretPaths
201+ nixShellWithoutPkgs root isPure False (packageInfoToNamePathMap pkgs) shell cmd
103202
104−runWatch :: MonadObelisk m => m ()
105−runWatch = do
106− pkgs <- getLocalPkgs
107− withGhciScript pkgs $ \dotGhciPath -> runGhcid dotGhciPath Nothing
203+-- | Like 'getLocalPkgs' but also parses them and fails if any of them can't be parsed.
204+getParsedLocalPkgs :: MonadObelisk m => FilePath -> PathTree Interpret -> m (NonEmpty CabalPackageInfo)
205+getParsedLocalPkgs root interpretPaths = parsePackagesOrFail =<< getLocalPkgs root interpretPaths
108206
109−-- | Relative paths to local packages of an obelisk project
110−-- TODO a way to query this
111−getLocalPkgs :: Applicative f => f [FilePath]
112−getLocalPkgs = pure ["backend", "common", "frontend"]
207+-- | Relative paths to local packages of an obelisk project.
208+--
209+-- These are a combination of the obelisk predefined local packages,
210+-- and any packages that the user has set with the @packages@ argument
211+-- to the Nix @project@ function.
212+getLocalPkgs :: forall m. MonadObelisk m => FilePath -> PathTree Interpret -> m (Set FilePath)
213+getLocalPkgs root interpretPaths = do
214+ putLog Debug $ [i|Finding packages with root ${root} and interpret paths:|] <> "\n" <> drawPathTree textInterpret interpretPaths
215+ obeliskPackagePaths <- runFind ["-L", root, "-name", ".obelisk", "-type", "d"]
113216
217+ -- We do not want to find packages that are embedded inside other obelisk projects, unless that
218+ -- obelisk project is our own.
219+ obeliskPackageExclusions <- liftIO $ fmap Set.fromList $ traverse canonicalizePath $
220+ filter (/= root) $ map takeDirectory obeliskPackagePaths
221+ putLog Debug [i|Excluding obelisk packages: ${T.pack $ unwords $ Set.toList obeliskPackageExclusions}|]
222+ let rootsAndExclusions = calcIntepretFinds "" interpretPaths
223+
224+ fmap fold $ for (MMap.toAscList rootsAndExclusions) $ \(interpretPathRoot, exclusions) ->
225+ let allExclusions = obeliskPackageExclusions <> exclusions <> Set.singleton ("*" </> attrCacheFileName)
226+ in fmap (Set.fromList . map normalise) $ runFind $
227+ ["-L", interpretPathRoot, "(", "-name", "*.cabal", "-o", "-name", Hpack.packageConfig, ")", "-a", "-type", "f"]
228+ <> concat [["-not", "-path", p </> "*"] | p <- toList allExclusions]
229+ where
230+ runFind args = do
231+ (_exitCode, out, err) <- readCreateProcessWithExitCode $ proc findExePath args
232+ putLog Debug $ T.strip $ T.pack err
233+ pure $ map T.unpack $ T.lines $ T.strip $ T.pack out
234+
235+-- | Calculates a set of root 'FilePath's along with each one's corresponding set of exclusions.
236+-- This is used when constructing a set of @find@ commands to run to produce a set of packages
237+-- that matches the user's @--interpret@/@--no-interpret@ settings.
238+calcIntepretFinds :: FilePath -> PathTree Interpret -> MMap.MonoidalMap FilePath (Set FilePath)
239+calcIntepretFinds treeRoot0 tree0 = runIdentity $ go treeRoot0 tree0
240+ where
241+ go treeRoot tree = foldPathTreeFor (== Interpret_Interpret) treeRoot tree $ \parent children -> do
242+ exclusions <- foldPathTreeFor (== Interpret_NoInterpret) parent children $ \parent' children' ->
243+ pure $ Map.singleton parent' children'
244+ deeperFinds <- Map.traverseWithKey go exclusions
245+ pure $ MMap.singleton parent (Map.keysSet exclusions) <> fold (MMap.MonoidalMap deeperFinds)
246+
247+-- | Traverses a 'PathTree' and folds all leaves matching a given predicate.
248+foldPathTreeFor
249+ :: forall m a b. (Applicative m, Monoid b)
250+ => (a -> Bool)
251+ -> FilePath
252+ -> PathTree a
253+ -> (FilePath -> PathTree a -> m b)
254+ -> m b
255+foldPathTreeFor predicate parent children f = case children of
256+ PathTree_Node (Just x) children' | predicate x -> f parent (PathTree_Node Nothing children')
257+ PathTree_Node _ children' -> fmap fold $ flip Map.traverseWithKey children' $ \k children'' ->
258+ foldPathTreeFor predicate (parent </> k) children'' f
259+
260+data GuessPackageFileError = GuessPackageFileError_Ambiguous [FilePath] | GuessPackageFileError_NotFound
261+ deriving (Eq, Ord, Show)
262+instance Exception GuessPackageFileError
263+
264+newtype HPackFilePath = HPackFilePath { unHPackFilePath :: FilePath } deriving (Eq, Ord, Show)
265+newtype CabalFilePath = CabalFilePath { unCabalFilePath :: FilePath } deriving (Eq, Ord, Show)
266+
267+-- | Given a directory, try to guess what the appropriate @.cabal@ or @package.yaml@ file is for the package.
268+guessCabalPackageFile
269+ :: (MonadIO m)
270+ => FilePath -- ^ Directory or path to search for cabal package
271+ -> m (Either GuessPackageFileError (Either CabalFilePath HPackFilePath))
272+guessCabalPackageFile pkg = do
273+ liftIO (doesDirectoryExist pkg) >>= \case
274+ False -> case cabalOrHpackFile pkg of
275+ (Just hpack@(Right _)) -> pure $ Right hpack
276+ (Just cabal@(Left (CabalFilePath cabalFilePath))) -> do
277+ -- If the cabal file has a sibling hpack file, we use that instead
278+ -- since running hpack often generates a sibling cabal file
279+ let possibleHpackSibling = takeDirectory cabalFilePath </> Hpack.packageConfig
280+ hasHpackSibling <- liftIO $ doesFileExist possibleHpackSibling
281+ pure $ Right $ if hasHpackSibling then Right (HPackFilePath possibleHpackSibling) else cabal
282+ Nothing -> pure $ Left GuessPackageFileError_NotFound
283+ True -> do
284+ candidates <- liftIO $
285+ filterM (doesFileExist . either unCabalFilePath unHPackFilePath)
286+ =<< mapMaybe (cabalOrHpackFile . (pkg </>)) <$> listDirectory pkg
287+ pure $ case partitionEithers candidates of
288+ ([hpack], _) -> Right $ Left hpack
289+ ([], [cabal]) -> Right $ Right cabal
290+ ([], []) -> Left GuessPackageFileError_NotFound
291+ (hpacks, cabals) -> Left $ GuessPackageFileError_Ambiguous $ coerce hpacks <> coerce cabals
292+
293+cabalOrHpackFile :: FilePath -> Maybe (Either CabalFilePath HPackFilePath)
294+cabalOrHpackFile = \case
295+ x | takeExtension x == ".cabal" -> Just (Left $ CabalFilePath x)
296+ | takeFileName x == Hpack.packageConfig -> Just (Right $ HPackFilePath x)
297+ | otherwise -> Nothing
298+
299+-- | Parses the cabal package in a given directory.
300+-- This automatically figures out which .cabal file or package.yaml (hpack) file to use in the given directory.
114301parseCabalPackage
115− :: (MonadObelisk m)
116− => FilePath -- ^ package directory
302+ :: MonadObelisk m
303+ => FilePath -- ^ Package directory
117304 -> m (Maybe CabalPackageInfo)
118−parseCabalPackage dir = do
119− let cabalFp = dir </> (takeBaseName dir <> ".cabal")
120− hpackFp = dir </> "package.yaml"
121− hasCabal <- liftIO $ doesFileExist cabalFp
122− hasHpack <- liftIO $ doesFileExist hpackFp
123−
124− mCabalContents <- if hasCabal
125− then Just <$> liftIO (readUTF8File cabalFp)
126− else if hasHpack
127− then do
128− let decodeOptions = DecodeOptions (ProgramName "ob") hpackFp Nothing decodeYaml
129− liftIO (readPackageConfig decodeOptions) >>= \case
130− Left err -> do
131− putLog Error $ T.pack $ "Failed to parse " <> hpackFp <> ": " <> err
132− return Nothing
133− Right (DecodeResult hpackPackage _ _ _) -> do
134− return $ Just $ renderPackage [] hpackPackage
135− else return Nothing
136−
137− fmap join $ forM mCabalContents $ \cabalContents -> do
138− let (warnings, result) = runParseResult $ parseGenericPackageDescription $
139− toUTF8BS $ cabalContents
140− mapM_ (putLog Warning) $ fmap (T.pack . show) warnings
141− case result of
142− Right gpkg -> do
143− return $ do
144− (_, lib) <- simplifyCondTree (const $ pure True) <$> condLibrary gpkg
145− pure $ CabalPackageInfo
146− { _cabalPackageInfo_packageRoot = takeDirectory cabalFp
147− , _cabalPackageInfo_sourceDirs =
148− fromMaybe (pure ".") $ NE.nonEmpty $ hsSourceDirs $ libBuildInfo lib
149− , _cabalPackageInfo_defaultExtensions =
150− defaultExtensions $ libBuildInfo lib
151− , _cabalPackageInfo_defaultLanguage =
152− defaultLanguage $ libBuildInfo lib
153− , _cabalPackageInfo_compilerOptions = options $ libBuildInfo lib
154− }
155− Left (_, errors) -> do
156− putLog Error $ T.pack $ "Failed to parse " <> cabalFp <> ":"
157− mapM_ (putLog Error) $ fmap (T.pack . show) errors
158− return Nothing
159−
160−withUTF8FileContentsM :: (MonadIO m, HasCliConfig e m) => FilePath -> (ByteString -> CliT e IO a) -> m a
161−withUTF8FileContentsM fp f = do
162− c <- getCliConfig
163− liftIO $ withUTF8FileContents fp $ runCli c . f . toUTF8BS
305+parseCabalPackage dir = parseCabalPackage' dir >>= \case
306+ Left err -> Nothing <$ putLog Error err
307+ Right (Just (warnings, pkgInfo)) -> do
308+ for_ warnings $ putLog Warning . T.pack . show
309+ pure $ Just pkgInfo
310+ Right Nothing -> pure Nothing
311+
312+-- | Like 'parseCabalPackage' but returns errors and warnings directly so as to avoid 'MonadObelisk'.
313+parseCabalPackage'
314+ :: (MonadIO m)
315+ => FilePath -- ^ Package directory
316+ -> m (Either T.Text (Maybe ([Dist.PWarning], CabalPackageInfo)))
317+parseCabalPackage' pkg = runExceptT $ do
318+ (cabalContents, packageFile, packageName) <- guessCabalPackageFile pkg >>= \case
319+ Left GuessPackageFileError_NotFound -> throwError $ "No .cabal or package.yaml file found in " <> T.pack pkg
320+ Left (GuessPackageFileError_Ambiguous _) -> throwError $ "Unable to determine which .cabal file to use in " <> T.pack pkg
321+ Right (Left (CabalFilePath file)) -> (, file, takeBaseName file) <$> liftIO (readUTF8File file)
322+ Right (Right (HPackFilePath file)) -> do
323+ let
324+ decodeOptions = Hpack.DecodeOptions (Hpack.ProgramName "ob") file Nothing Hpack.decodeYaml
325+ liftIO (Hpack.readPackageConfig decodeOptions) >>= \case
326+ Left err -> throwError $ T.pack $ "Failed to parse " <> file <> ": " <> err
327+ Right (Hpack.DecodeResult hpackPackage _ _ _) -> pure (Hpack.renderPackage [] hpackPackage, file, Hpack.packageName hpackPackage)
328+
329+ let
330+ (warnings, result) = runParseResult $ parseGenericPackageDescription $ toUTF8BS cabalContents
331+ osConfVar = case System.Info.os of
332+ "linux" -> Just Dist.Linux
333+ "darwin" -> Just Dist.OSX
334+ _ -> trace "Unrecgonized System.Info.os" Nothing
335+ archConfVar = Just Dist.X86_64 -- TODO: Actually infer this
336+ evalConfVar v = Right $ case v of
337+ OS osVar -> Just osVar == osConfVar
338+ Arch archVar -> Just archVar == archConfVar
339+ Impl GHC _ -> True -- TODO: Actually check version range
340+ _ -> False
341+ case condLibrary <$> result of
342+ Right (Just condLib) -> do
343+ let (_, lib) = simplifyCondTree evalConfVar condLib
344+ pure $ Just $ (warnings,) $ CabalPackageInfo
345+ { _cabalPackageInfo_packageName = T.pack packageName
346+ , _cabalPackageInfo_packageFile = packageFile
347+ , _cabalPackageInfo_packageRoot = takeDirectory packageFile
348+ , _cabalPackageInfo_buildable = buildable $ libBuildInfo lib
349+ , _cabalPackageInfo_sourceDirs =
350+ fromMaybe (pure ".") $ NE.nonEmpty $ hsSourceDirs $ libBuildInfo lib
351+ , _cabalPackageInfo_defaultExtensions =
352+ defaultExtensions $ libBuildInfo lib
353+ , _cabalPackageInfo_defaultLanguage =
354+ defaultLanguage $ libBuildInfo lib
355+ , _cabalPackageInfo_compilerOptions = options $ libBuildInfo lib
356+ , _cabalPackageInfo_cppOptions = cppOptions $ libBuildInfo lib
357+ }
358+ Right Nothing -> pure Nothing
359+ Left (_, errors) ->
360+ throwError $ T.pack $ "Failed to parse " <> packageFile <> ":\n" <> unlines (map show errors)
361+
362+parsePackagesOrFail :: (MonadObelisk m, Foldable f) => f FilePath -> m (NE.NonEmpty CabalPackageInfo)
363+parsePackagesOrFail dirs' = do
364+ packageInfos' <- fmap catMaybes $ for dirs $ \dir -> do
365+ flip fmap (parseCabalPackage dir) $ \case
366+ Just packageInfo
367+ | _cabalPackageInfo_buildable packageInfo -> Just packageInfo
368+ _ -> Nothing
369+
370+ -- Sort duplicate packages such that we prefer shorter paths, but fall back to alphabetical ordering.
371+ let packagesByName = Map.map (NE.sortBy $ comparing $ \p -> let n = _cabalPackageInfo_packageFile p in (length n, n))
372+ $ Map.fromListWith (<>) [(_cabalPackageInfo_packageName p, p NE.:| []) | p <- packageInfos']
373+ unambiguous <- ifor packagesByName $ \packageName ps -> case ps of
374+ p NE.:| [] -> pure p -- No ambiguity here
375+ p NE.:| _ -> do
376+ let chosenText = " [Chosen] "
377+ prefix p'
378+ | _cabalPackageInfo_packageFile p' == _cabalPackageInfo_packageFile p = chosenText
379+ | otherwise = T.map (const ' ') chosenText
380+ putLog Warning $ T.unlines $
381+ "Packages named '" <> packageName <> "' appear in " <> T.pack (show $ length ps) <> " different locations: "
382+ : map (\p' -> prefix p' <> T.pack (_cabalPackageInfo_packageFile p')) (toList ps)
383+ pure p
384+
385+ packageInfos <- case NE.nonEmpty $ toList unambiguous of
386+ Nothing -> failWith $ T.pack $
387+ "No valid, buildable packages found" <> (if null dirs then "" else " in " <> intercalate ", " dirs)
388+ Just xs -> pure xs
389+
390+ pure packageInfos
391+ where
392+ dirs = toList dirs'
393+
394+packageInfoToNamePathMap :: Foldable f => f CabalPackageInfo -> Map Text FilePath
395+packageInfoToNamePathMap = Map.fromList . map (_cabalPackageInfo_packageName &&& _cabalPackageInfo_packageRoot) . toList
396+
397+-- Like 'withGhciScript' but provides the precise ghci arguments to add to a ghci session
398+withGhciScriptArgs
399+ :: (MonadObelisk m, Foldable f)
400+ => f CabalPackageInfo -- ^ List of packages to load into ghci
401+ -> ([String] -> m ()) -- ^ Action to run with the extra ghci arguments
402+ -> m ()
403+withGhciScriptArgs packageInfos f = withGhciScript loadPreludeManually packageInfos $ \fp -> f ["-XNoImplicitPrelude", "-ghci-script", fp]
404+ where
405+ -- These lines must be first and allow the session to support a custom Prelude when @-XNoImplicitPrelude@
406+ -- is passed to the ghci session.
407+ loadPreludeManually =
408+ [ ":add Prelude" -- @:add@ is used because it's less noisy when there is no custom Prelude
409+ , ":set -XImplicitPrelude" -- Turn the default setting on
410+ ]
164411
165412-- | Create ghci configuration to load the given packages
166413withGhciScript
167− :: MonadObelisk m
168− => [FilePath] -- ^ List of packages to load into ghci
169− -> (FilePath -> m ()) -- ^ Action to run with the path to generated temporory .ghci
414+ :: (MonadObelisk m, Foldable f)
415+ => [String] -- ^ Commands to prefix to file
416+ -> f CabalPackageInfo -- ^ List of packages to load into ghci
417+ -> (FilePath -> m ()) -- ^ Action to run with the path to generated temporary .ghci
170418 -> m ()
171−withGhciScript pkgs f = do
172− (pkgDirErrs, packageInfos) <- fmap partitionEithers $ forM pkgs $ \pkg -> do
173− flip fmap (parseCabalPackage pkg) $ \case
174− Nothing -> Left pkg
175− Just packageInfo -> Right packageInfo
176−
177− when (null packageInfos) $
178− failWith $ T.pack $ "No valid pkgs found in " <> intercalate ", " pkgs
179− unless (null pkgDirErrs) $
180− putLog Warning $ T.pack $ "Failed to find pkgs in " <> intercalate ", " pkgDirErrs
181−
182− let extensions = packageInfos >>= _cabalPackageInfo_defaultExtensions
183− languageFromPkgs = L.nub $ mapMaybe _cabalPackageInfo_defaultLanguage packageInfos
184− -- NOTE when no default-language is present cabal sets Haskell98
185− language = NE.toList $ fromMaybe (Haskell98 NE.:| []) $ NE.nonEmpty languageFromPkgs
186− extensionsLine = if extensions == mempty
187− then ""
188− else ":set " <> intercalate " " ((("-X" <>) . prettyShow) <$> extensions)
189− ghcOptions = concat $ mapMaybe (\case (GHC, xs) -> Just xs; _ -> Nothing) $
190− packageInfos >>= _cabalPackageInfo_compilerOptions
191− dotGhci = unlines $
192− [ ":set -i" <> intercalate ":" (packageInfos >>= rootedSourceDirs)
193− , case ghcOptions of
194− [] -> ""
195− xs -> ":set " <> intercalate " " xs
196− , extensionsLine
197− , ":set " <> intercalate " " (("-X" <>) . prettyShow <$> language)
198− , ":load Backend Frontend"
199− , "import Obelisk.Run"
200− , "import qualified Frontend"
201− , "import qualified Backend"
202− ]
203− warnDifferentLanguages language
419+withGhciScript preCommands (toList -> packageInfos) f =
204420 withSystemTempDirectory "ob-ghci" $ \fp -> do
205421 let dotGhciPath = fp </> ".ghci"
206422 liftIO $ writeFile dotGhciPath dotGhci
207423 f dotGhciPath
424+ where
425+ packageNames = Set.fromList $ map _cabalPackageInfo_packageName packageInfos
426+ modulesToLoad = mconcat
427+ [ [ "Obelisk.Run" | "obelisk-run" `Set.member` packageNames ]
428+ , [ "Backend" | "backend" `Set.member` packageNames ]
429+ , [ "Frontend" | "frontend" `Set.member` packageNames ]
430+ ]
431+ dotGhci = unlines $
432+ preCommands <>
433+ [ if null modulesToLoad then "" else ":load " <> unwords modulesToLoad
434+ , "import qualified Obelisk.Run"
435+ , "import qualified Frontend"
436+ , "import qualified Backend"
437+ ]
438+
439+-- | Builds a list of options to pass to ghci or set in .ghci file that configures
440+-- the preprocessor and source includes.
441+getGhciSessionSettings
442+ :: (MonadObelisk m, Foldable f)
443+ => f CabalPackageInfo -- ^ List of packages to load into ghci
444+ -> FilePath -- ^ All paths will be relative to this path
445+ -> Bool -- ^ Use relative paths
446+ -> m [String]
447+getGhciSessionSettings (toList -> packageInfos) pathBase useRelativePaths = do
448+ -- N.B. ghci settings do NOT support escaping in any way. To minimize the likelihood that
449+ -- paths-with-spaces ruin our day, we first canonicalize everything, and then relativize
450+ -- all paths to 'pathBase'.
451+ selfExe <- liftIO $ canonicalizePath =<< getExecutablePath
452+ canonicalPathBase <- liftIO $ canonicalizePath pathBase
453+
454+ (pkgFiles, pkgSrcPaths :: [NonEmpty FilePath]) <- fmap unzip $ liftIO $ for packageInfos $ \pkg -> do
455+ canonicalSrcDirs <- traverse canonicalizePath $ (_cabalPackageInfo_packageRoot pkg </>) <$> _cabalPackageInfo_sourceDirs pkg
456+ canonicalPkgFile <- canonicalizePath $ _cabalPackageInfo_packageFile pkg
457+ pure (canonicalPkgFile `relativeTo'` canonicalPathBase, (`relativeTo'` canonicalPathBase) <$> canonicalSrcDirs)
208458
459+ pure
460+ $ baseGhciOptions
461+ <> ["-F", "-pgmF", selfExe, "-optF", preprocessorIdentifier]
462+ <> concatMap (\p -> ["-optF", p]) pkgFiles
463+ <> [ "-i" <> intercalate ":" (concatMap toList pkgSrcPaths) ]
209464 where
210− rootedSourceDirs pkg = NE.toList $
211− (_cabalPackageInfo_packageRoot pkg </>) <$> _cabalPackageInfo_sourceDirs pkg
465+ relativeTo' = if useRelativePaths then relativeTo else const
212466
213−warnDifferentLanguages :: MonadObelisk m => [Language] -> m ()
214−warnDifferentLanguages (_:_:_) = putLog Warning "Different languages detected across packages which may result in errors when loading the repl"
215−warnDifferentLanguages _ = return ()
467+baseGhciOptions :: [String]
468+baseGhciOptions =
469+ [ "-ignore-dot-ghci"
470+ , "-no-user-package-db"
471+ , "-package-env", "-"
472+ ]
216473
217474-- | Run ghci repl
218475runGhciRepl
219− :: MonadObelisk m
220− => FilePath -- ^ Path to .ghci
476+ :: (MonadObelisk m, Foldable f)
477+ => FilePath -- ^ Path to project root
478+ -> f CabalPackageInfo -- ^ Packages to keep unbuilt
479+ -> [String] -- ^ GHCi arguments
221480 -> m ()
222−runGhciRepl dotGhci = inProjectShell "ghc" $ "ghci " <> makeBaseGhciOptions dotGhci
481+runGhciRepl root (toList -> packages) ghciArgs =
482+ -- NOTE: We do *not* want to use $(staticWhich "ghci") here because we need the
483+ -- ghc that is provided by the shell in the user's project.
484+ nixShellWithoutPkgs root True False (packageInfoToNamePathMap packages) "ghc" $
485+ Just $ unwords $ fmap bashEscape $ "ghci" : ghciArgs
223486
224487-- | Run ghcid
225488runGhcid
226− :: MonadObelisk m
227− => FilePath -- ^ Path to .ghci
489+ :: (MonadObelisk m, Foldable f)
490+ => FilePath -- ^ Path to project root
491+ -> Bool -- ^ Should we chdir to root when running this process?
492+ -> [String] -- ^ GHCi arguments
493+ -> f CabalPackageInfo -- ^ Packages to keep unbuilt
228494 -> Maybe String -- ^ Optional command to run at every reload
229495 -> m ()
230−runGhcid dotGhci mcmd = callCommand $ unwords $ $(staticWhich "ghcid") : opts
496+runGhcid root chdirToRoot ghciArgs (toList -> packages) mcmd =
497+ nixShellWithoutPkgs root True chdirToRoot (packageInfoToNamePathMap packages) "ghc" $
498+ Just $ unwords $ fmap bashEscape $ ghcidExePath : opts
231499 where
232− opts =
233− [ "-W"
234− --TODO: The decision of whether to use -fwarn-redundant-constraints should probably be made by the user
235− , "--command='ghci -Wall -ignore-dot-ghci -fwarn-redundant-constraints " <> makeBaseGhciOptions dotGhci <> "' "
236− , "--reload=config"
237− , "--outputfile=ghcid-output.txt"
238− ] <> testCmd
239− testCmd = maybeToList (flip fmap mcmd $ \cmd -> "--test='" <> cmd <> "'")
240−
241−makeBaseGhciOptions :: FilePath -> String
242−makeBaseGhciOptions dotGhci =
243− unwords
244− [ "-no-user-package-db"
245− , "-package-env -"
246− , "-ghci-script " <> dotGhci
247− ]
248−
249−getFreePort :: MonadIO m => m PortNumber
250−getFreePort = liftIO $ withSocketsDo $ do
251− addr:_ <- getAddrInfo (Just defaultHints) (Just "127.0.0.1") (Just "0")
252− bracket (open addr) close socketPort
500+ opts = concat
501+ [ ["-W"]
502+ , ["--outputfile=ghcid-output.txt"]
503+ , map (\x -> "--reload=" <> x) reloadFiles
504+ , map (\x -> "--restart=" <> x) restartFiles
505+ , maybe [] (\cmd -> ["--test=" <> cmd]) mcmd
506+ , ["--command=" <> unwords ("ghci" : ghciArgs)]
507+ ]
508+ adjustRoot x = if chdirToRoot then makeRelative root x else x
509+ reloadFiles = map adjustRoot [root </> "config"]
510+ restartFiles = map (adjustRoot . _cabalPackageInfo_packageFile) packages
511+
512+getFreePort :: MonadIO m => m Socket.PortNumber
513+getFreePort = liftIO $ Socket.withSocketsDo $ do
514+ addr:_ <- Socket.getAddrInfo (Just Socket.defaultHints) (Just "127.0.0.1") (Just "0")
515+ bracket (open addr) Socket.close Socket.socketPort
253516 where
254517 open addr = do
255− sock <- socket (addrFamily addr) (addrSocketType addr) (addrProtocol addr)
256− bind sock (addrAddress addr)
257− return sock
518+ sock <- Socket.socket (Socket.addrFamily addr) (Socket.addrSocketType addr) (Socket.addrProtocol addr)
519+ Socket.bind sock (Socket.addrAddress addr)
520+ return sock
521+
522+
523+-- | Convert a 'FilePath' into a 'PathTree'.
524+pathToTree :: a -> FilePath -> PathTree a
525+pathToTree a p = go $ splitDirectories p
526+ where
527+ go [] = PathTree_Node (Just a) mempty
528+ go (x : xs) = PathTree_Node Nothing $ Map.singleton x $ go xs
529+
530+-- | Like 'zipWith' but pads with a padding value instead of stopping on the shortest list.
531+zipDefaultWith :: a -> b -> (a -> b -> c) -> [a] -> [b] -> [c]
532+zipDefaultWith _da _db _f [] [] = []
533+zipDefaultWith da db f (a:as) [] = f a db : zipDefaultWith da db f as []
534+zipDefaultWith da db f [] (b:bs) = f da b : zipDefaultWith da db f [] bs
535+zipDefaultWith da db f (a:as) (b:bs) = f a b : zipDefaultWith da db f as bs
536+
537+-- | Makes the first absolute path relative to the second absolute path.
538+--
539+-- Both input paths MUST be absolute.
540+--
541+-- Unlike 'makeRelative' this does not merely strip prefixes. It will introduce
542+-- enough @..@ paths to make the resulting path truly relative in virtually every
543+-- case. The only exception is on Windows when the two paths are on different
544+-- drives. In this case the resulting path may be absolute.
545+relativeTo :: FilePath -> FilePath -> FilePath
546+relativeTo dir base
547+ = bifoldr1 (</>)
548+ $ bimap (collapse . (".." <$) . catMaybes) (collapse . catMaybes)
549+ $ unzip
550+ $ dropWhile (\(a,b) -> a == b)
551+ $ zipDefaultWith Nothing Nothing (,)
552+ (map Just $ splitDirectories base)
553+ (map Just $ splitDirectories dir)
554+ where collapse = foldr (</>) ""
lib/command/src/Obelisk/Command/Thunk.hs+613−357
@@ -5,71 +5,59 @@
55{-# LANGUAGE MultiWayIf #-}
66{-# LANGUAGE OverloadedStrings #-}
77{-# LANGUAGE PatternGuards #-}
8+{-# LANGUAGE QuasiQuotes #-}
89{-# LANGUAGE ScopedTypeVariables #-}
910{-# LANGUAGE TypeApplications #-}
10−module Obelisk.Command.Thunk
11− ( ThunkPtr (..)
12− , ThunkRev (..)
13− , ThunkSource (..)
14− , ThunkData (..)
15− , ReadThunkError (..)
16− , GitHubSource (..)
17− , getThunkGitBranch
18− , getLatestRev
19− , updateThunkToLatest
20− , createThunk
21− , createThunkWithLatest
22− , nixBuildAttrWithCache
23− , nixBuildThunkAttrWithCache
24− , unpackThunk
25− , packThunk
26− , readThunk
27− , updateThunk
28− , getThunkPtr
29− , parseGitUri
30− , uriThunkPtr
31− ) where
11+module Obelisk.Command.Thunk where
3212
3313import Control.Applicative
3414import Control.Exception (displayException, try)
35−import qualified Control.Lens as Lens
36−import Control.Lens.Indexed hiding ((<.>))
15+import Control.Lens (ifor, ifor_, (.~))
3716import Control.Monad
38−import Control.Monad.Catch (handle)
17+import Control.Monad.Extra (findM)
18+import Control.Monad.Catch (MonadCatch, handle)
3919import Control.Monad.Except
4020import Data.Aeson ((.=))
4121import qualified Data.Aeson as Aeson
4222import Data.Aeson.Encode.Pretty
4323import qualified Data.Aeson.Types as Aeson
24+import Data.Bifunctor (first)
4425import qualified Data.ByteString.Lazy as LBS
26+import Data.Containers.ListUtils (nubOrd)
4527import Data.Default
4628import Data.Either.Combinators (fromRight', rightToMaybe)
29+import Data.Foldable (toList)
30+import Data.Function ((&))
31+import Data.Functor ((<&>))
4732import Data.Git.Ref (Ref)
4833import qualified Data.Git.Ref as Ref
4934import qualified Data.List as L
50−import Data.List.NonEmpty (NonEmpty (..))
35+import Data.List.NonEmpty (NonEmpty (..), nonEmpty)
5136import qualified Data.List.NonEmpty as NonEmpty
5237import Data.Map (Map)
5338import qualified Data.Map as Map
5439import Data.Maybe
5540import Data.Set (Set)
5641import qualified Data.Set as Set
42+import Data.String.Here.Interpolated (i)
43+import Data.String.Here.Uninterpolated (here)
5744import Data.Text (Text)
5845import qualified Data.Text as T
5946import Data.Text.Encoding
6047import qualified Data.Text.IO as T
6148import Data.Time.Clock.POSIX (posixSecondsToUTCTime)
49+import Data.Traversable (for)
6250import Data.Yaml (parseMaybe)
6351import GitHub
6452import GitHub.Data.Name
6553import Obelisk.Command.Nix
6654import System.Directory
55+import System.Exit
6756import System.FilePath
6857import System.IO.Error
6958import System.IO.Temp
70−import System.Posix (getSymbolicLinkStatus, modificationTime)
71−import System.Process (proc)
72−import Text.URI
59+import System.PosixCompat.Files (getSymbolicLinkStatus, modificationTime)
60+import qualified Text.URI as URI
7361
7462import Obelisk.App (MonadObelisk)
7563import Obelisk.CliApp
@@ -77,11 +65,10 @@ import Obelisk.Command.Utils
7765
7866--TODO: Support symlinked thunk data
7967data ThunkData
80− = ThunkData_Packed ThunkPtr
68+ = ThunkData_Packed ThunkSpec ThunkPtr
8169 -- ^ Packed thunk
82− | ThunkData_Checkout (Maybe ThunkPtr)
70+ | ThunkData_Checkout
8371 -- ^ Checked out thunk that was unpacked from this pointer
84− deriving (Show, Eq, Ord)
8572
8673-- | A reference to the exact data that a thunk should translate into
8774data ThunkPtr = ThunkPtr
@@ -107,41 +94,72 @@ data ThunkSource
10794 | ThunkSource_Git GitSource
10895 deriving (Show, Eq, Ord)
10996
97+thunkSourceToGitSource :: ThunkSource -> GitSource
98+thunkSourceToGitSource = \case
99+ ThunkSource_GitHub s -> forgetGithub False s
100+ ThunkSource_Git s -> s
101+
110102data GitHubSource = GitHubSource
111103 { _gitHubSource_owner :: Name Owner
112104 , _gitHubSource_repo :: Name Repo
113105 , _gitHubSource_branch :: Maybe (Name Branch)
106+ , _gitHubSource_private :: Bool
114107 }
115108 deriving (Show, Eq, Ord)
116109
110+newtype GitUri = GitUri { unGitUri :: URI.URI } deriving (Eq, Ord, Show)
111+
112+gitUriToText :: GitUri -> Text
113+gitUriToText (GitUri uri)
114+ | (T.toLower . URI.unRText <$> URI.uriScheme uri) == Just "file"
115+ , Just (_, path) <- URI.uriPath uri
116+ = "/" <> T.intercalate "/" (map URI.unRText $ NonEmpty.toList path)
117+ | otherwise = URI.render uri
118+
117119data GitSource = GitSource
118− { _gitSource_url :: URI
120+ { _gitSource_url :: GitUri
119121 , _gitSource_branch :: Maybe (Name Branch)
120122 , _gitSource_fetchSubmodules :: Bool
123+ , _gitSource_private :: Bool
121124 }
122125 deriving (Show, Eq, Ord)
123126
127+newtype ThunkConfig = ThunkConfig
128+ { _thunkConfig_private :: Maybe Bool
129+ } deriving Show
130+
131+data ThunkUpdateConfig = ThunkUpdateConfig
132+ { _thunkUpdateConfig_branch :: Maybe String
133+ , _thunkUpdateConfig_config :: ThunkConfig
134+ } deriving Show
135+
136+data ThunkPackConfig = ThunkPackConfig
137+ { _thunkPackConfig_force :: Bool
138+ , _thunkPackConfig_config :: ThunkConfig
139+ } deriving Show
140+
124141-- | Convert a GitHub source to a regular Git source. Assumes no submodules.
125142forgetGithub :: Bool -> GitHubSource -> GitSource
126143forgetGithub useSsh s = GitSource
127− { _gitSource_url = URI
128− { uriScheme = Just $ fromRight' $ mkScheme $ if useSsh then "ssh" else "https"
129− , uriAuthority = Right $ Authority
130− { authUserInfo = UserInfo (fromRight' $ mkUsername "git") Nothing
144+ { _gitSource_url = GitUri $ URI.URI
145+ { URI.uriScheme = Just $ fromRight' $ URI.mkScheme $ if useSsh then "ssh" else "https"
146+ , URI.uriAuthority = Right $ URI.Authority
147+ { URI.authUserInfo = URI.UserInfo (fromRight' $ URI.mkUsername "git") Nothing
131148 <$ guard useSsh
132− , authHost = fromRight' $ mkHost "github.com"
133− , authPort = Nothing
149+ , URI.authHost = fromRight' $ URI.mkHost "github.com"
150+ , URI.authPort = Nothing
134151 }
135− , uriPath = Just ( False
136− , fromRight' . mkPathPiece <$>
152+ , URI.uriPath = Just ( False
153+ , fromRight' . URI.mkPathPiece <$>
137154 untagName (_gitHubSource_owner s)
138155 :| [ untagName (_gitHubSource_repo s) <> ".git" ]
139156 )
140− , uriQuery = []
141− , uriFragment = Nothing
157+ , URI.uriQuery = []
158+ , URI.uriFragment = Nothing
142159 }
143160 , _gitSource_branch = _gitHubSource_branch s
144161 , _gitSource_fetchSubmodules = False
162+ , _gitSource_private = _gitHubSource_private s
145163 }
146164
147165getThunkGitBranch :: ThunkPtr -> Maybe Text
@@ -155,20 +173,20 @@ commitNameToRef (N c) = Ref.fromHex $ encodeUtf8 c
155173-- TODO: Use spinner here.
156174getNixSha256ForUriUnpacked
157175 :: MonadObelisk m
158− => URI
176+ => GitUri
159177 -> m NixSha256
160178getNixSha256ForUriUnpacked uri =
161− withExitFailMessage ("nix-prefetch-url: Failed to determine sha256 hash of URL " <> render uri) $ do
179+ withExitFailMessage ("nix-prefetch-url: Failed to determine sha256 hash of URL " <> gitUriToText uri) $ do
162180 [hash] <- fmap T.lines $ readProcessAndLogOutput (Debug, Debug) $
163− proc "nix-prefetch-url" ["--unpack" , "--type" , "sha256" , T.unpack $ render uri]
181+ proc nixPrefetchUrlPath ["--unpack", "--type", "sha256", T.unpack $ gitUriToText uri]
164182 pure hash
165183
166−nixPrefetchGit :: MonadObelisk m => URI -> Text -> Bool -> m NixSha256
184+nixPrefetchGit :: MonadObelisk m => GitUri -> Text -> Bool -> m NixSha256
167185nixPrefetchGit uri rev fetchSubmodules =
168− withExitFailMessage ("nix-prefetch-git: Failed to determine sha256 hash of Git repo " <> render uri <> " at " <> rev) $ do
186+ withExitFailMessage ("nix-prefetch-git: Failed to determine sha256 hash of Git repo " <> gitUriToText uri <> " at " <> rev) $ do
169187 out <- readProcessAndLogStderr Debug $
170− proc "nix-prefetch-git" $ filter (/="")
171− [ "--url", T.unpack $ render uri
188+ proc nixPrefetchGitPath $ filter (/="")
189+ [ "--url", T.unpack $ gitUriToText uri
172190 , "--rev", T.unpack rev
173191 , if fetchSubmodules then "--fetch-submodules" else ""
174192 , "--quiet"
@@ -180,93 +198,117 @@ nixPrefetchGit uri rev fetchSubmodules =
180198
181199--TODO: Pretty print these
182200data ReadThunkError
183− = ReadThunkError_UnrecognizedFiles
184− | ReadThunkError_AmbiguousFiles
185− | ReadThunkError_UnrecognizedLoader Text
186− | ReadThunkError_UnparseablePtr LBS.ByteString
187− deriving (Show)
188−
189−-- | Read a thunk and validate that it is only a thunk, either packed or unpacked.
190−-- If the thunk is packed and additional data is present, fail.
191−readThunk :: MonadObelisk m => FilePath -> m (Either ReadThunkError ThunkData)
192−readThunk thunkDir = do
193− files <- liftIO $ listDirectory thunkDir
194− case ".git" `elem` files of
195− True -> fmap ThunkData_Checkout <$> do
196− let origThunkPath = thunkDir </> ".git" </> "obelisk" </> "orig-thunk"
197− liftIO $ doesDirectoryExist origThunkPath >>= \case
198− True -> fmap Just <$> readPackedThunk origThunkPath
199− False -> return $ return Nothing
200− False -> liftIO $ fmap ThunkData_Packed <$> readPackedThunk thunkDir
201−
202−data ThunkType = ThunkType
203− { _thunkType_loader :: FilePath
204− , _thunkType_json :: FilePath
205− , _thunkType_optional :: Set FilePath
206− , _thunkType_loaderVersions :: NonEmpty Text
207− , _thunkType_parser :: Aeson.Object -> Aeson.Parser ThunkPtr
208− }
209−
210−gitHubThunkType :: ThunkType
211−gitHubThunkType = ThunkType
212− { _thunkType_loader = "default.nix"
213− , _thunkType_json = "github.json"
214− , _thunkType_optional = Set.fromList [".attr-cache"]
215− , _thunkType_loaderVersions = gitHubStandaloneLoaders
216− , _thunkType_parser = parseThunkPtr $ \v ->
217− ThunkSource_GitHub <$> parseGitHubSource v <|> ThunkSource_Git <$> parseGitSource v
201+ = ReadThunkError_UnrecognizedThunk
202+ | ReadThunkError_UnrecognizedPaths (NonEmpty FilePath)
203+ | ReadThunkError_MissingPaths (NonEmpty FilePath)
204+ | ReadThunkError_UnparseablePtr FilePath String
205+ | ReadThunkError_FileError IOError
206+ | ReadThunkError_FileDoesNotMatch FilePath Text
207+ | ReadThunkError_UnrecognizedState String
208+ | ReadThunkError_AmbiguousPackedState ThunkPtr ThunkPtr
209+ deriving (Show)
210+
211+unpackedDirName :: FilePath
212+unpackedDirName = "."
213+
214+attrCacheFileName :: FilePath
215+attrCacheFileName = ".attr-cache"
216+
217+-- | Specification for how a file in a thunk version works.
218+data ThunkFileSpec
219+ = ThunkFileSpec_Ptr (LBS.ByteString -> Either String ThunkPtr) -- ^ This file specifies 'ThunkPtr' data
220+ | ThunkFileSpec_FileMatches Text -- ^ This file must match the given content exactly
221+ | ThunkFileSpec_CheckoutIndicator -- ^ Existence of this directory indicates that the thunk is unpacked
222+ | ThunkFileSpec_AttrCache -- ^ This directory is an attribute cache
223+
224+-- | Specification for how a set of files in a thunk version work.
225+data ThunkSpec = ThunkSpec
226+ { _thunkSpec_name :: !Text
227+ , _thunkSpec_files :: !(Map FilePath ThunkFileSpec)
218228 }
219229
220−gitThunkType :: ThunkType
221−gitThunkType = ThunkType
222− { _thunkType_loader = "default.nix"
223− , _thunkType_json = "git.json"
224− , _thunkType_optional = Set.fromList [".attr-cache"]
225− , _thunkType_loaderVersions = plainGitStandaloneLoaders
226− , _thunkType_parser = parseThunkPtr $ fmap ThunkSource_Git . parseGitSource
227− }
228−
229−thunkTypes :: [ThunkType]
230−thunkTypes = [gitThunkType, gitHubThunkType]
231−
232−findThunkType :: [ThunkType] -> FilePath -> IO (Either ReadThunkError ThunkType)
233−findThunkType types thunkDir = do
234− matches <- fmap catMaybes $ forM types $ \thunkType -> do
235− let
236− expectedContents = Set.fromList $ (thunkDir </>) <$>
237− [ _thunkType_loader thunkType
238− , _thunkType_json thunkType
239− ]
240− optionalContents = Set.map (thunkDir </>) (_thunkType_optional thunkType)
241−
242− -- Ensure that there aren't any other files in the thunk
243− -- NB: System.Directory.listDirectory returns the contents without the directory path
244− files <- liftIO $ Set.fromList . fmap (thunkDir </>) <$> listDirectory thunkDir
245− let unexpectedContents = files `Set.difference` (expectedContents `Set.union` optionalContents)
246− missingContents = expectedContents `Set.difference` files
247− pure $ if Set.null unexpectedContents && Set.null missingContents
248− then Just thunkType
249− else Nothing
250−
251− pure $ case matches of
252− [singleMatch] -> Right singleMatch
253− [] -> Left ReadThunkError_UnrecognizedFiles
254− _ -> Left ReadThunkError_AmbiguousFiles
230+thunkSpecTypes :: NonEmpty (NonEmpty ThunkSpec)
231+thunkSpecTypes = gitThunkSpecs :| [gitHubThunkSpecs]
232+
233+-- | Attempts to match a 'ThunkSpec' to a given directory.
234+matchThunkSpecToDir
235+ :: (MonadError ReadThunkError m, MonadIO m, MonadCatch m)
236+ => ThunkSpec -- ^ 'ThunkSpec' to match against the given files/directory
237+ -> FilePath -- ^ Path to directory
238+ -> Set FilePath -- ^ Set of file paths relative to the given directory
239+ -> m ThunkData
240+matchThunkSpecToDir thunkSpec dir dirFiles = do
241+ case nonEmpty (toList $ dirFiles `Set.difference` expectedPaths) of
242+ Just fs -> throwError $ ReadThunkError_UnrecognizedPaths $ (dir </>) <$> fs
243+ Nothing -> pure ()
244+ case nonEmpty (toList $ requiredPaths `Set.difference` dirFiles) of
245+ Just fs -> throwError $ ReadThunkError_MissingPaths $ (dir </>) <$> fs
246+ Nothing -> pure ()
247+ datas <- fmap toList $ flip Map.traverseMaybeWithKey (_thunkSpec_files thunkSpec) $ \expectedPath -> \case
248+ ThunkFileSpec_AttrCache -> Nothing <$ dirMayExist expectedPath
249+ ThunkFileSpec_CheckoutIndicator -> liftIO (doesDirectoryExist (dir </> expectedPath)) <&> \case
250+ False -> Nothing
251+ True -> Just ThunkData_Checkout
252+ ThunkFileSpec_FileMatches expectedContents -> handle (\(e :: IOError) -> throwError $ ReadThunkError_FileError e) $ do
253+ actualContents <- liftIO (T.readFile $ dir </> expectedPath)
254+ case T.strip expectedContents == T.strip actualContents of
255+ True -> pure Nothing
256+ False -> throwError $ ReadThunkError_FileDoesNotMatch (dir </> expectedPath) expectedContents
257+ ThunkFileSpec_Ptr parser -> handle (\(e :: IOError) -> throwError $ ReadThunkError_FileError e) $ do
258+ let path = dir </> expectedPath
259+ liftIO (doesFileExist path) >>= \case
260+ False -> pure Nothing
261+ True -> do
262+ actualContents <- liftIO $ LBS.readFile path
263+ case parser actualContents of
264+ Right v -> pure $ Just (ThunkData_Packed thunkSpec v)
265+ Left e -> throwError $ ReadThunkError_UnparseablePtr (dir </> expectedPath) e
266+
267+ case nonEmpty datas of
268+ Nothing -> throwError ReadThunkError_UnrecognizedThunk
269+ Just xs -> fold1WithM xs $ \a b -> either throwError pure (mergeThunkData a b)
270+ where
271+ rootPathsOnly = Set.fromList . mapMaybe takeRootDir . Map.keys
272+ takeRootDir = fmap NonEmpty.head . nonEmpty . splitPath
273+
274+ expectedPaths = rootPathsOnly $ _thunkSpec_files thunkSpec
275+
276+ requiredPaths = rootPathsOnly $ Map.filter isRequiredFileSpec $ _thunkSpec_files thunkSpec
277+ isRequiredFileSpec = \case
278+ ThunkFileSpec_FileMatches _ -> True
279+ _ -> False
280+
281+ dirMayExist expectedPath = liftIO (doesFileExist (dir </> expectedPath)) >>= \case
282+ True -> throwError $ ReadThunkError_UnrecognizedPaths $ expectedPath :| []
283+ False -> pure ()
284+
285+ -- Combine 'ThunkData' from different files, preferring "Checkout" over "Packed"
286+ mergeThunkData ThunkData_Checkout ThunkData_Checkout = Right ThunkData_Checkout
287+ mergeThunkData ThunkData_Checkout ThunkData_Packed{} = Left bothPackedAndUnpacked
288+ mergeThunkData ThunkData_Packed{} ThunkData_Checkout = Left bothPackedAndUnpacked
289+ mergeThunkData a@(ThunkData_Packed _ ptrA) (ThunkData_Packed _ ptrB) =
290+ if ptrA == ptrB then Right a else Left $ ReadThunkError_AmbiguousPackedState ptrA ptrB
291+
292+ bothPackedAndUnpacked = ReadThunkError_UnrecognizedState "Both packed data and checkout present"
293+
294+ fold1WithM (x :| xs) f = foldM f x xs
295+
296+readThunkWith
297+ :: (MonadObelisk m)
298+ => NonEmpty (NonEmpty ThunkSpec) -> FilePath -> m (Either ReadThunkError ThunkData)
299+readThunkWith specTypes dir = do
300+ dirFiles <- Set.fromList <$> liftIO (listDirectory dir)
301+ let specs = concatMap toList $ toList $ NonEmpty.transpose specTypes -- Interleave spec types so we try each one in a "fair" ordering
302+ flip fix specs $ \loop -> \case
303+ [] -> pure $ Left ReadThunkError_UnrecognizedThunk
304+ spec:rest -> runExceptT (matchThunkSpecToDir spec dir dirFiles) >>= \case
305+ Left e -> putLog Debug [i|Thunk specification ${_thunkSpec_name spec} did not match ${dir}: ${e}|] *> loop rest
306+ x@(Right _) -> x <$ putLog Debug [i|Thunk specification ${_thunkSpec_name spec} matched ${dir}|]
255307
256308-- | Read a thunk and validate that it is exactly a packed thunk.
257309-- If additional data is present, fail.
258−readPackedThunk :: FilePath -> IO (Either ReadThunkError ThunkPtr)
259−readPackedThunk thunkDir = runExceptT $ do
260− thunkType <- ExceptT $ findThunkType thunkTypes thunkDir
261− -- Ensure that we recognize the thunk loader
262− loader <- liftIO $ T.readFile $ thunkDir </> _thunkType_loader thunkType
263− unless (loader `elem` _thunkType_loaderVersions thunkType) $ do
264− throwError $ ReadThunkError_UnrecognizedLoader loader
265−
266− txt <- liftIO $ LBS.readFile $ thunkDir </> _thunkType_json thunkType
267− case parseMaybe (_thunkType_parser thunkType) =<< Aeson.decode txt of
268− Nothing -> throwError $ ReadThunkError_UnparseablePtr txt
269− Just ptr -> return ptr
310+readThunk :: (MonadObelisk m) => FilePath -> m (Either ReadThunkError ThunkData)
311+readThunk = readThunkWith thunkSpecTypes
270312
271313parseThunkPtr :: (Aeson.Object -> Aeson.Parser ThunkSource) -> Aeson.Object -> Aeson.Parser ThunkPtr
272314parseThunkPtr parseSrc v = do
@@ -286,10 +328,12 @@ parseGitHubSource v = do
286328 owner <- v Aeson..: "owner"
287329 repo <- v Aeson..: "repo"
288330 branch <- v Aeson..:! "branch"
331+ private <- v Aeson..:? "private"
289332 pure $ GitHubSource
290333 { _gitHubSource_owner = owner
291334 , _gitHubSource_repo = repo
292335 , _gitHubSource_branch = branch
336+ , _gitHubSource_private = fromMaybe False private
293337 }
294338
295339parseGitSource :: Aeson.Object -> Aeson.Parser GitSource
@@ -297,25 +341,29 @@ parseGitSource v = do
297341 Just url <- parseGitUri <$> v Aeson..: "url"
298342 branch <- v Aeson..:! "branch"
299343 fetchSubmodules <- v Aeson..:! "fetchSubmodules"
344+ private <- v Aeson..:? "private"
300345 pure $ GitSource
301346 { _gitSource_url = url
302347 , _gitSource_branch = branch
303348 , _gitSource_fetchSubmodules = fromMaybe False fetchSubmodules
349+ , _gitSource_private = fromMaybe False private
304350 }
305351
306352overwriteThunk :: MonadObelisk m => FilePath -> ThunkPtr -> m ()
307353overwriteThunk target thunk = do
308354 -- Ensure that this directory is a valid thunk (i.e. so we aren't losing any data)
309− Right _ <- readThunk target
355+ readThunk target >>= \case
356+ Left e -> failWith [i|Invalid thunk at ${target}: ${e}|]
357+ Right _ -> pure ()
310358
311359 --TODO: Is there a safer way to do this overwriting?
312− liftIO $ removeDirectoryRecursive target
313− liftIO $ createThunk target thunk
360+ liftIO $ removePathForcibly target
361+ createThunk target $ Right thunk
314362
315−thunkPtrLoader :: ThunkPtr -> Text
316−thunkPtrLoader thunk = case _thunkPtr_source thunk of
317− ThunkSource_GitHub _ -> NonEmpty.head gitHubStandaloneLoaders
318− ThunkSource_Git _ -> NonEmpty.head plainGitStandaloneLoaders
363+thunkPtrToSpec :: ThunkPtr -> ThunkSpec
364+thunkPtrToSpec thunk = case _thunkPtr_source thunk of
365+ ThunkSource_GitHub _ -> NonEmpty.head gitHubThunkSpecs
366+ ThunkSource_Git _ -> NonEmpty.head gitThunkSpecs
319367
320368-- It's important that formatting be very consistent here, because
321369-- otherwise when people update thunks, their patches will be messy
@@ -327,13 +375,15 @@ encodeThunkPtrData (ThunkPtr rev src) = case src of
327375 , ("branch" .=) <$> _gitHubSource_branch s
328376 , Just $ "rev" .= Ref.toHexString (_thunkRev_commit rev)
329377 , Just $ "sha256" .= _thunkRev_nixSha256 rev
378+ , Just $ "private" .= _gitHubSource_private s
330379 ]
331380 ThunkSource_Git s -> encodePretty' plainGitCfg $ Aeson.object $ catMaybes
332− [ Just $ "url" .= render (_gitSource_url s)
381+ [ Just $ "url" .= gitUriToText (_gitSource_url s)
333382 , Just $ "rev" .= Ref.toHexString (_thunkRev_commit rev)
334383 , ("branch" .=) <$> _gitSource_branch s
335384 , Just $ "sha256" .= _thunkRev_nixSha256 rev
336385 , Just $ "fetchSubmodules" .= _gitSource_fetchSubmodules s
386+ , Just $ "private" .= _gitSource_private s
337387 ]
338388 where
339389 githubCfg = defConfig
@@ -354,78 +404,84 @@ encodeThunkPtrData (ThunkPtr rev src) = case src of
354404 [ "url"
355405 , "rev"
356406 , "sha256"
407+ , "private"
357408 , "fetchSubmodules"
358409 ] <> compare
359410 , confTrailingNewline = True
360411 }
361412
362−createThunk :: MonadIO m => FilePath -> ThunkPtr -> m ()
363−createThunk target thunk = liftIO $ do
364− createDirectoryIfMissing True (target </> ".attr-cache")
365− T.writeFile (target </> "default.nix") (thunkPtrLoader thunk)
366− let
367− jsonFileName = case _thunkPtr_source thunk of
368− ThunkSource_GitHub _ -> "github"
369− ThunkSource_Git _ -> "git"
370− LBS.writeFile (target </> jsonFileName <.> "json") (encodeThunkPtrData thunk)
413+createThunk :: MonadObelisk m => FilePath -> Either ThunkSpec ThunkPtr -> m ()
414+createThunk target ptrInfo =
415+ ifor_ (_thunkSpec_files spec) $ \path -> \case
416+ ThunkFileSpec_FileMatches content -> withReadyPath path $ \p -> liftIO $ T.writeFile p content
417+ ThunkFileSpec_Ptr _ -> case ptrInfo of
418+ Left _ -> pure () -- We can't write the ptr without it
419+ Right ptr -> withReadyPath path $ \p -> liftIO $ LBS.writeFile p (encodeThunkPtrData ptr)
420+ _ -> pure ()
421+ where
422+ spec = either id thunkPtrToSpec ptrInfo
423+ withReadyPath path f = do
424+ let fullPath = target </> path
425+ putLog Debug $ "Writing thunk file " <> T.pack fullPath
426+ liftIO $ createDirectoryIfMissing True $ takeDirectory fullPath
427+ f fullPath
371428
372429createThunkWithLatest :: MonadObelisk m => FilePath -> ThunkSource -> m ()
373430createThunkWithLatest target s = do
374431 rev <- getLatestRev s
375− createThunk target $ ThunkPtr
432+ createThunk target $ Right $ ThunkPtr
376433 { _thunkPtr_source = s
377434 , _thunkPtr_rev = rev
378435 }
379436
380−updateThunkToLatest :: MonadObelisk m => FilePath -> Maybe String -> m ()
381−updateThunkToLatest target mBranch = withSpinner' ("Updating thunk " <> T.pack target <> " to latest") (pure $ const $ "Thunk " <> T.pack target <> " updated to latest") $ do
382− checkThunkDirectory "ob thunk update directory cannot be '.'" target
437+updateThunkToLatest :: MonadObelisk m => ThunkUpdateConfig -> FilePath -> m ()
438+updateThunkToLatest (ThunkUpdateConfig mBranch thunkConfig) target = spinner $ do
439+ checkThunkDirectory target
383440 -- check to see if thunk should be updated to a specific branch or just update it's current branch
384441 case mBranch of
385442 Nothing -> do
386443 (overwrite, ptr) <- readThunk target >>= \case
387− Left err -> failWith $ T.pack $ "thunk update: " <> show err
444+ Left err -> failWith [i|Thunk update: ${err}|]
388445 Right c -> case c of
389− ThunkData_Packed t -> return (target, t)
390− ThunkData_Checkout _ -> failWith "cannot update an unpacked thunk"
446+ ThunkData_Packed _ t -> return (target, t)
447+ ThunkData_Checkout -> failWith "cannot update an unpacked thunk"
391448 let src = _thunkPtr_source ptr
392449 rev <- getLatestRev src
393− overwriteThunk overwrite $ ThunkPtr
450+ overwriteThunk overwrite $ modifyThunkPtrByConfig thunkConfig $ ThunkPtr
394451 { _thunkPtr_source = src
395452 , _thunkPtr_rev = rev
396453 }
397454 Just branch -> readThunk target >>= \case
398− Left err -> failWith $ T.pack $ "thunk update: " <> show err
455+ Left err -> failWith [i|Thunk update: ${err}|]
399456 Right c -> case c of
400− ThunkData_Packed t -> case _thunkPtr_source t of
401− ThunkSource_Git tsg -> setThunk target tsg branch
402− ThunkSource_GitHub tsgh -> do
403− let tsg = forgetGithub False tsgh
404− setThunk target tsg branch
405− ThunkData_Checkout _ -> failWith $ T.pack $ "thunk located at " <> (show target) <> " is unpacked. Use ob thunk pack on the desired directory and then try ob thunk update again."
406−
407−setThunk :: MonadObelisk m => FilePath -> GitSource -> String -> m ()
408−setThunk target gs branch = do
409− newThunkPtr <- uriThunkPtr (_gitSource_url gs) (Just $ T.pack branch) Nothing
457+ ThunkData_Packed _ t -> setThunk thunkConfig target (thunkSourceToGitSource $ _thunkPtr_source t) branch
458+ ThunkData_Checkout -> failWith [i|Thunk located at ${target} is unpacked. Use 'ob thunk pack' on the desired directory and then try 'ob thunk update' again.|]
459+ where
460+ spinner = withSpinner' ("Updating thunk " <> T.pack target <> " to latest") (pure $ const $ "Thunk " <> T.pack target <> " updated to latest")
461+
462+setThunk :: MonadObelisk m => ThunkConfig -> FilePath -> GitSource -> String -> m ()
463+setThunk thunkConfig target gs branch = do
464+ newThunkPtr <- uriThunkPtr (_gitSource_url gs) (_thunkConfig_private thunkConfig) (Just $ T.pack branch) Nothing
410465 overwriteThunk target newThunkPtr
411− updateThunkToLatest target Nothing
466+ updateThunkToLatest (ThunkUpdateConfig Nothing thunkConfig) target
412467
413468-- | All recognized github standalone loaders, ordered from newest to oldest.
414469-- This tool will only ever produce the newest one when it writes a thunk.
415−gitHubStandaloneLoaders :: NonEmpty Text
416−gitHubStandaloneLoaders =
417− gitHubStandaloneLoaderV2 :|
418− [ gitHubStandaloneLoaderV3
419− , gitHubStandaloneLoaderV1
470+gitHubThunkSpecs :: NonEmpty ThunkSpec
471+gitHubThunkSpecs =
472+ gitHubThunkSpecV5 :|
473+ [ gitHubThunkSpecV4
474+ , gitHubThunkSpecV3
475+ , gitHubThunkSpecV2
476+ , gitHubThunkSpecV1
420477 ]
421478
422−gitHubStandaloneLoaderV1 :: Text
423−gitHubStandaloneLoaderV1 = T.unlines
424− [ "import ((import <nixpkgs> {}).fetchFromGitHub (builtins.fromJSON (builtins.readFile ./github.json)))"
425− ]
479+gitHubThunkSpecV1 :: ThunkSpec
480+gitHubThunkSpecV1 = legacyGitHubThunkSpec "github-v1"
481+ "import ((import <nixpkgs> {}).fetchFromGitHub (builtins.fromJSON (builtins.readFile ./github.json)))"
426482
427−gitHubStandaloneLoaderV2 :: Text
428−gitHubStandaloneLoaderV2 = T.unlines
483+gitHubThunkSpecV2 :: ThunkSpec
484+gitHubThunkSpecV2 = legacyGitHubThunkSpec "github-v2" $ T.unlines
429485 [ "# DO NOT HAND-EDIT THIS FILE" --TODO: Add something about how to get more info on Obelisk, etc.
430486 , "import ((import <nixpkgs> {}).fetchFromGitHub ("
431487 , " let json = builtins.fromJSON (builtins.readFile ./github.json);"
@@ -435,8 +491,8 @@ gitHubStandaloneLoaderV2 = T.unlines
435491 , "))"
436492 ]
437493
438−gitHubStandaloneLoaderV3 :: Text
439−gitHubStandaloneLoaderV3 = T.unlines
494+gitHubThunkSpecV3 :: ThunkSpec
495+gitHubThunkSpecV3 = legacyGitHubThunkSpec "github-v3" $ T.unlines
440496 [ "# DO NOT HAND-EDIT THIS FILE"
441497 , "let"
442498 , " fetch = { private ? false, ... }@args: if private && builtins.hasAttr \"fetchGit\" builtins"
@@ -455,22 +511,62 @@ gitHubStandaloneLoaderV3 = T.unlines
455511 , "in import (fetch (builtins.fromJSON (builtins.readFile ./github.json)))"
456512 ]
457513
458−plainGitStandaloneLoaders :: NonEmpty Text
459−plainGitStandaloneLoaders =
460− plainGitStandaloneLoaderV1 :|
461− [ plainGitStandaloneLoaderV2
514+gitHubThunkSpecV4 :: ThunkSpec
515+gitHubThunkSpecV4 = legacyGitHubThunkSpec "github-v4" $ T.unlines
516+ [ "# DO NOT HAND-EDIT THIS FILE"
517+ , "let fetch = { private ? false, fetchSubmodules ? false, owner, repo, rev, sha256, ... }:"
518+ , " if !fetchSubmodules && !private then builtins.fetchTarball {"
519+ , " url = \"https://github.com/${owner}/${repo}/archive/${rev}.tar.gz\"; inherit sha256;"
520+ , " } else (import <nixpkgs> {}).fetchFromGitHub {"
521+ , " inherit owner repo rev sha256 fetchSubmodules private;"
522+ , " };"
523+ , "in import (fetch (builtins.fromJSON (builtins.readFile ./github.json)))"
524+ ]
525+
526+legacyGitHubThunkSpec :: Text -> Text -> ThunkSpec
527+legacyGitHubThunkSpec name loader = ThunkSpec name $ Map.fromList
528+ [ ("default.nix", ThunkFileSpec_FileMatches $ T.strip loader)
529+ , ("github.json" , ThunkFileSpec_Ptr parseGitHubJsonBytes)
530+ , (attrCacheFileName, ThunkFileSpec_AttrCache)
531+ , (".git", ThunkFileSpec_CheckoutIndicator)
532+ ]
533+
534+gitHubThunkSpecV5 :: ThunkSpec
535+gitHubThunkSpecV5 = mkThunkSpec "github-v5" "github.json" parseGitHubJsonBytes [here|
536+# DO NOT HAND-EDIT THIS FILE
537+let fetch = { private ? false, fetchSubmodules ? false, owner, repo, rev, sha256, ... }:
538+ if !fetchSubmodules && !private then builtins.fetchTarball {
539+ url = "https://github.com/${owner}/${repo}/archive/${rev}.tar.gz"; inherit sha256;
540+ } else (import <nixpkgs> {}).fetchFromGitHub {
541+ inherit owner repo rev sha256 fetchSubmodules private;
542+ };
543+ json = builtins.fromJSON (builtins.readFile ./github.json);
544+in fetch json
545+|]
546+
547+parseGitHubJsonBytes :: LBS.ByteString -> Either String ThunkPtr
548+parseGitHubJsonBytes = parseJsonObject $ parseThunkPtr $ \v ->
549+ ThunkSource_GitHub <$> parseGitHubSource v <|> ThunkSource_Git <$> parseGitSource v
550+
551+gitThunkSpecs :: NonEmpty ThunkSpec
552+gitThunkSpecs =
553+ gitThunkSpecV5 :|
554+ [ gitThunkSpecV4
555+ , gitThunkSpecV3
556+ , gitThunkSpecV2
557+ , gitThunkSpecV1
462558 ]
463559
464−plainGitStandaloneLoaderV1 :: Text
465−plainGitStandaloneLoaderV1 = T.unlines
560+gitThunkSpecV1 :: ThunkSpec
561+gitThunkSpecV1 = legacyGitThunkSpec "git-v1" $ T.unlines
466562 [ "# DO NOT HAND-EDIT THIS FILE"
467563 , "let fetchGit = {url, rev, ref ? null, branch ? null, sha256 ? null, fetchSubmodules ? null}:"
468564 , " assert !fetchSubmodules; (import <nixpkgs> {}).fetchgit { inherit url rev sha256; };"
469565 , "in import (fetchGit (builtins.fromJSON (builtins.readFile ./git.json)))"
470566 ]
471567
472−plainGitStandaloneLoaderV2 :: Text
473−plainGitStandaloneLoaderV2 = T.unlines
568+gitThunkSpecV2 :: ThunkSpec
569+gitThunkSpecV2 = legacyGitThunkSpec "git-v2" $ T.unlines
474570 [ "# DO NOT HAND-EDIT THIS FILE"
475571 , "let fetchGit = {url, rev, ref ? null, branch ? null, sha256 ? null, fetchSubmodules ? null}:"
476572 , " if builtins.hasAttr \"fetchGit\" builtins"
@@ -479,10 +575,87 @@ plainGitStandaloneLoaderV2 = T.unlines
479575 , "in import (fetchGit (builtins.fromJSON (builtins.readFile ./git.json)))"
480576 ]
481577
482−thunkFileNames :: [FilePath]
483−thunkFileNames = ["default.nix", "github.json", "git.json"]
578+-- This loader has a bug because @builtins.fetchGit@ is not given a @ref@
579+-- and will fail to find commits without this because it does shallow clones.
580+gitThunkSpecV3 :: ThunkSpec
581+gitThunkSpecV3 = legacyGitThunkSpec "git-v3" $ T.unlines
582+ [ "# DO NOT HAND-EDIT THIS FILE"
583+ , "let fetch = {url, rev, ref ? null, sha256 ? null, fetchSubmodules ? false, private ? false, ...}:"
584+ , " let realUrl = let firstChar = builtins.substring 0 1 url; in"
585+ , " if firstChar == \"/\" then /. + url"
586+ , " else if firstChar == \".\" then ./. + url"
587+ , " else url;"
588+ , " in if !fetchSubmodules && private then builtins.fetchGit {"
589+ , " url = realUrl; inherit rev;"
590+ , " } else (import <nixpkgs> {}).fetchgit {"
591+ , " url = realUrl; inherit rev sha256;"
592+ , " };"
593+ , "in import (fetch (builtins.fromJSON (builtins.readFile ./git.json)))"
594+ ]
595+
596+gitThunkSpecV4 :: ThunkSpec
597+gitThunkSpecV4 = legacyGitThunkSpec "git-v4" $ T.unlines
598+ [ "# DO NOT HAND-EDIT THIS FILE"
599+ , "let fetch = {url, rev, branch ? null, sha256 ? null, fetchSubmodules ? false, private ? false, ...}:"
600+ , " let realUrl = let firstChar = builtins.substring 0 1 url; in"
601+ , " if firstChar == \"/\" then /. + url"
602+ , " else if firstChar == \".\" then ./. + url"
603+ , " else url;"
604+ , " in if !fetchSubmodules && private then builtins.fetchGit {"
605+ , " url = realUrl; inherit rev;"
606+ , " ${if branch == null then null else \"ref\"} = branch;"
607+ , " } else (import <nixpkgs> {}).fetchgit {"
608+ , " url = realUrl; inherit rev sha256;"
609+ , " };"
610+ , "in import (fetch (builtins.fromJSON (builtins.readFile ./git.json)))"
611+ ]
484612
485−--TODO: when checking something out, make a shallow clone
613+legacyGitThunkSpec :: Text -> Text -> ThunkSpec
614+legacyGitThunkSpec name loader = ThunkSpec name $ Map.fromList
615+ [ ("default.nix", ThunkFileSpec_FileMatches $ T.strip loader)
616+ , ("git.json" , ThunkFileSpec_Ptr parseGitJsonBytes)
617+ , (attrCacheFileName, ThunkFileSpec_AttrCache)
618+ , (".git", ThunkFileSpec_CheckoutIndicator)
619+ ]
620+
621+gitThunkSpecV5 :: ThunkSpec
622+gitThunkSpecV5 = mkThunkSpec "git-v5" "git.json" parseGitJsonBytes [here|
623+# DO NOT HAND-EDIT THIS FILE
624+let fetch = {url, rev, branch ? null, sha256 ? null, fetchSubmodules ? false, private ? false, ...}:
625+ let realUrl = let firstChar = builtins.substring 0 1 url; in
626+ if firstChar == "/" then /. + url
627+ else if firstChar == "." then ./. + url
628+ else url;
629+ in if !fetchSubmodules && private then builtins.fetchGit {
630+ url = realUrl; inherit rev;
631+ ${if branch == null then null else "ref"} = branch;
632+ } else (import <nixpkgs> {}).fetchgit {
633+ url = realUrl; inherit rev sha256;
634+ };
635+ json = builtins.fromJSON (builtins.readFile ./git.json);
636+in fetch json
637+|]
638+
639+parseGitJsonBytes :: LBS.ByteString -> Either String ThunkPtr
640+parseGitJsonBytes = parseJsonObject $ parseThunkPtr $ fmap ThunkSource_Git . parseGitSource
641+
642+mkThunkSpec :: Text -> FilePath -> (LBS.ByteString -> Either String ThunkPtr) -> Text -> ThunkSpec
643+mkThunkSpec name jsonFileName parser srcNix = ThunkSpec name $ Map.fromList
644+ [ ("default.nix", ThunkFileSpec_FileMatches defaultNixViaSrc)
645+ , ("thunk.nix", ThunkFileSpec_FileMatches srcNix)
646+ , (jsonFileName, ThunkFileSpec_Ptr parser)
647+ , (attrCacheFileName, ThunkFileSpec_AttrCache)
648+ , (normalise $ unpackedDirName </> ".git", ThunkFileSpec_CheckoutIndicator)
649+ ]
650+ where
651+ defaultNixViaSrc = [here|
652+# DO NOT HAND-EDIT THIS FILE
653+import (import ./thunk.nix)
654+|]
655+
656+
657+parseJsonObject :: (Aeson.Object -> Aeson.Parser a) -> LBS.ByteString -> Either String a
658+parseJsonObject p bytes = Aeson.parseEither p =<< Aeson.eitherDecode bytes
486659
487660-- | Checks a cache directory to see if there is a fresh symlink
488661-- to the result of building an attribute of a thunk.
@@ -490,44 +663,49 @@ thunkFileNames = ["default.nix", "github.json", "git.json"]
490663-- and the result is symlinked into the cache.
491664nixBuildThunkAttrWithCache
492665 :: MonadObelisk m
493− => FilePath
666+ => ThunkSpec
667+ -> FilePath
494668 -- ^ Path to directory containing Thunk
495669 -> String
496670 -- ^ Attribute to build
497− -> m FilePath
671+ -> m (Maybe FilePath)
498672 -- ^ Symlink to cached or built nix output
499673-- WARNING: If the thunk uses an impure reference such as '<nixpkgs>'
500674-- the caching mechanism will fail as it merely measures the modification
501675-- time of the cache link and the expression to build.
502−nixBuildThunkAttrWithCache thunkDir attr = do
503− --NB: Expects thunkDir to be normalised with no trailing path separator.
504− --This should be guaranteed by the command argument parser.
505− let cacheErrHandler e
506− | isDoesNotExistError e = return Nothing -- expected from a cache miss
507− | otherwise = putLog Error (T.pack $ displayException e) >> return Nothing
508− cacheDir = thunkDir </> ".attr-cache"
509− cachePath = cacheDir </> attr <.> "out"
676+nixBuildThunkAttrWithCache thunkSpec thunkDir attr = do
510677 latestChange <- liftIO $ do
511− createDirectoryIfMissing False cacheDir
512− let getModificationTimeMaybe = fmap rightToMaybe . try @IOError . getModificationTime
513− maximum . catMaybes <$> mapM (getModificationTimeMaybe . (thunkDir </>)) thunkFileNames
514− cacheHit <- handle cacheErrHandler $ do
515− cacheTime <- liftIO $ posixSecondsToUTCTime . realToFrac . modificationTime <$> getSymbolicLinkStatus cachePath
516− return $ if latestChange <= cacheTime
517− then Just cachePath
518− else Nothing
519− case cacheHit of
520− Just c -> return c
521− Nothing -> do
522− putLog Warning $ T.pack $ mconcat [thunkDir, ": ", attr, " not cached, building ..."]
523− _ <- nixCmd $ NixCmd_Build$ def
524− Lens.& nixBuildConfig_outLink Lens..~ OutLink_IndirectRoot cachePath
525− Lens.& nixCmdConfig_target Lens..~ Target
526− { _target_path = Just thunkDir
527− , _target_attr = Just attr
528− , _target_expr = Nothing
529− }
530− return cachePath
678+ let
679+ getModificationTimeMaybe = fmap rightToMaybe . try @IOError . getModificationTime
680+ thunkFileNames = Map.keys $ _thunkSpec_files thunkSpec
681+ maximum . catMaybes <$> traverse (getModificationTimeMaybe . (thunkDir </>)) thunkFileNames
682+
683+ let cachePaths' = nonEmpty $ Map.keys $ Map.filter (\case ThunkFileSpec_AttrCache -> True; _ -> False) $
684+ _thunkSpec_files thunkSpec
685+ for cachePaths' $ \cachePaths ->
686+ fmap NonEmpty.head $ for cachePaths $ \cacheDir -> do
687+ let
688+ cachePath = thunkDir </> cacheDir </> attr <.> "out"
689+ cacheErrHandler e
690+ | isDoesNotExistError e = pure Nothing -- expected from a cache miss
691+ | otherwise = Nothing <$ putLog Error (T.pack $ displayException e)
692+ cacheHit <- handle cacheErrHandler $ do
693+ cacheTime <- liftIO $ posixSecondsToUTCTime . realToFrac . modificationTime <$> getSymbolicLinkStatus cachePath
694+ pure $ if latestChange <= cacheTime
695+ then Just cachePath
696+ else Nothing
697+ case cacheHit of
698+ Just c -> pure c
699+ Nothing -> do
700+ putLog Warning $ T.pack $ mconcat [thunkDir, ": ", attr, " not cached, building ..."]
701+ liftIO $ createDirectoryIfMissing True (takeDirectory cachePath)
702+ (cachePath <$) $ nixCmd $ NixCmd_Build $ def
703+ & nixBuildConfig_outLink .~ OutLink_IndirectRoot cachePath
704+ & nixCmdConfig_target .~ Target
705+ { _target_path = Just thunkDir
706+ , _target_attr = Just attr
707+ , _target_expr = Nothing
708+ }
531709
532710-- | Build a nix attribute, and cache the result if possible
533711nixBuildAttrWithCache
@@ -538,13 +716,15 @@ nixBuildAttrWithCache
538716 -- ^ Attribute to build
539717 -> m FilePath
540718 -- ^ Symlink to cached or built nix output
541−nixBuildAttrWithCache exprPath attr = do
542− readThunk exprPath >>= \case
543− -- Only packed thunks are cached. in particular, checkouts are not
544− Right (ThunkData_Packed _) -> nixBuildThunkAttrWithCache exprPath attr
545− _ -> nixCmd $ NixCmd_Build $ def
546− Lens.& nixBuildConfig_outLink Lens..~ OutLink_None
547− Lens.& nixCmdConfig_target Lens..~ Target
719+nixBuildAttrWithCache exprPath attr = readThunk exprPath >>= \case
720+ -- Only packed thunks are cached. In particular, checkouts are not.
721+ Right (ThunkData_Packed spec _) ->
722+ maybe build pure =<< nixBuildThunkAttrWithCache spec exprPath attr
723+ _ -> build
724+ where
725+ build = nixCmd $ NixCmd_Build $ def
726+ & nixBuildConfig_outLink .~ OutLink_None
727+ & nixCmdConfig_target .~ Target
548728 { _target_path = Just exprPath
549729 , _target_attr = Just attr
550730 , _target_expr = Nothing
@@ -565,103 +745,144 @@ updateThunk p f = withSystemTempDirectory "obelisk-thunkptr-" $ \tmpDir -> do
565745 where
566746 copyThunkToTmp tmpDir thunkDir = readThunk thunkDir >>= \case
567747 Left err -> failWith $ "withThunkUnpacked: " <> T.pack (show err)
568− Right (ThunkData_Packed _) -> do
748+ Right ThunkData_Packed{} -> do
569749 let tmpThunk = tmpDir </> "thunk"
570750 callProcessAndLogOutput (Notice, Error) $
571− proc "cp" ["-r", "-T", thunkDir, tmpThunk]
751+ proc cp ["-r", "-T", thunkDir, tmpThunk]
572752 return tmpThunk
573− Right _ -> failWith $ "Thunk is not packed"
753+ Right _ -> failWith "Thunk is not packed"
574754 updateThunkFromTmp p' = do
575− _ <- packThunk' True False p'
755+ _ <- packThunk' True (ThunkPackConfig False (ThunkConfig Nothing)) p'
576756 callProcessAndLogOutput (Notice, Error) $
577− proc "cp" ["-r", "-T", p', p]
757+ proc cp ["-r", "-T", p', p]
578758
579759finalMsg :: Bool -> (a -> Text) -> Maybe (a -> Text)
580760finalMsg noTrail s = if noTrail then Nothing else Just s
581761
582−unpackThunk :: MonadObelisk m => FilePath -> m ()
583−unpackThunk = unpackThunk' False
584−
585762-- | Check that we are not somewhere inside the thunk directory
586−checkThunkDirectory :: MonadObelisk m => Text -> FilePath -> m ()
587−checkThunkDirectory msg thunkDir = do
763+checkThunkDirectory :: MonadObelisk m => FilePath -> m ()
764+checkThunkDirectory thunkDir = do
588765 currentDir <- liftIO getCurrentDirectory
589766 thunkDir' <- liftIO $ canonicalizePath thunkDir
590− when (thunkDir' `L.isInfixOf` currentDir) $ failWith msg
767+ when (thunkDir' `L.isInfixOf` currentDir) $
768+ failWith [i|Can't perform thunk operations from within the thunk directory: ${thunkDir}|]
769+
770+ -- Don't let thunk commands work when directly given an unpacked repo
771+ when (takeFileName thunkDir == unpackedDirName) $
772+ readThunk (takeDirectory thunkDir) >>= \case
773+ Right _ -> failWith [i|Refusing to perform thunk operation on ${thunkDir} because it is a thunk's unpacked source|]
774+ Left _ -> pure ()
775+
776+unpackThunk :: MonadObelisk m => FilePath -> m ()
777+unpackThunk = unpackThunk' False
591778
592779unpackThunk' :: MonadObelisk m => Bool -> FilePath -> m ()
593−unpackThunk' noTrail thunkDir = checkThunkDirectory "Can't pack/unpack from within the thunk directory" thunkDir >> readThunk thunkDir >>= \case
594− Left err -> failWith $ "thunk unpack: " <> T.pack (show err)
780+unpackThunk' noTrail thunkDir = checkThunkDirectory thunkDir *> readThunk thunkDir >>= \case
781+ Left err -> failWith [i|Invalid thunk at ${thunkDir}: ${err}|]
595782 --TODO: Overwrite option that rechecks out thunk; force option to do so even if working directory is dirty
596− Right (ThunkData_Checkout _) -> failWith "thunk unpack: thunk is already unpacked"
597− Right (ThunkData_Packed tptr) -> do
783+ Right ThunkData_Checkout -> failWith [i|Thunk at ${thunkDir} is already unpacked|]
784+ Right (ThunkData_Packed _ tptr) -> do
598785 let (thunkParent, thunkName) = splitFileName thunkDir
599− withTempDirectory thunkParent thunkName $ \tmpRepo -> do
600− let obGitDir = tmpRepo </> ".git" </> "obelisk"
601− s = case _thunkPtr_source tptr of
602− ThunkSource_GitHub s' -> forgetGithub False s'
603− ThunkSource_Git s' -> s'
786+ withTempDirectory thunkParent thunkName $ \tmpThunk -> do
787+ let
788+ gitSrc = thunkSourceToGitSource $ _thunkPtr_source tptr
789+ newSpec = case _thunkPtr_source tptr of
790+ ThunkSource_GitHub _ -> NonEmpty.head gitHubThunkSpecs
791+ ThunkSource_Git _ -> NonEmpty.head gitThunkSpecs
604792 withSpinner' ("Fetching thunk " <> T.pack thunkName)
605793 (finalMsg noTrail $ const $ "Fetched thunk " <> T.pack thunkName) $ do
606− let git = callProcessAndLogOutput (Notice, Notice) . gitProc tmpRepo
607− git $ [ "clone" ]
608− ++ ("--recursive" <$ guard (_gitSource_fetchSubmodules s))
609− ++ [ T.unpack $ render $ _gitSource_url s ]
610− ++ do branch <- maybeToList $ _gitSource_branch s
611− [ "--branch", T.unpack $ untagName branch ]
612− git ["reset", "--hard", Ref.toHexString $ _thunkRev_commit $ _thunkPtr_rev tptr]
613− when (_gitSource_fetchSubmodules s) $
614− git ["submodule", "update", "--recursive", "--init"]
615−
616− liftIO $ createDirectory obGitDir
617− callProcessAndLogOutput (Notice, Error) $
618− proc "cp" ["-r", "-T", thunkDir </> ".", obGitDir </> "orig-thunk"]
619− callProcessAndLogOutput (Notice, Error) $
620− proc "rm" ["-r", thunkDir]
621− callProcessAndLogOutput (Notice, Error) $
622− proc "mv" ["-T", tmpRepo, thunkDir]
794+ let unpackedPath = tmpThunk </> unpackedDirName
795+ gitCloneForThunkUnpack gitSrc (_thunkRev_commit $ _thunkPtr_rev tptr) unpackedPath
796+
797+ let normalizeMore = dropTrailingPathSeparator . normalise
798+ when (normalizeMore unpackedPath /= normalizeMore tmpThunk) $ -- Only write meta data if the checkout is not inplace
799+ createThunk tmpThunk $ Left newSpec
800+
801+ liftIO $ do
802+ removePathForcibly thunkDir
803+ renameDirectory tmpThunk thunkDir
804+
805+gitCloneForThunkUnpack
806+ :: MonadObelisk m
807+ => GitSource -- ^ Git source to use
808+ -> Ref hash -- ^ Commit hash to reset to
809+ -> FilePath -- ^ Directory to clone into
810+ -> m ()
811+gitCloneForThunkUnpack gitSrc commit dir = do
812+ let git = callProcessAndLogOutput (Notice, Notice) . gitProc dir
813+ git $ [ "clone" ]
814+ ++ ["--recursive" | _gitSource_fetchSubmodules gitSrc]
815+ ++ [ T.unpack $ gitUriToText $ _gitSource_url gitSrc ]
816+ ++ do branch <- maybeToList $ _gitSource_branch gitSrc
817+ [ "--branch", T.unpack $ untagName branch ]
818+ git ["reset", "--hard", Ref.toHexString commit]
819+ when (_gitSource_fetchSubmodules gitSrc) $
820+ git ["submodule", "update", "--recursive", "--init"]
623821
624822--TODO: add a rollback mode to pack to the original thunk
625−packThunk :: MonadObelisk m => Bool -> FilePath -> m ThunkPtr
823+packThunk :: MonadObelisk m => ThunkPackConfig -> FilePath -> m ThunkPtr
626824packThunk = packThunk' False
627825
628−packThunk' :: MonadObelisk m => Bool -> Bool -> FilePath -> m ThunkPtr
629−packThunk' noTrail force thunkDir = checkThunkDirectory "Can't pack/unpack from within the thunk directory" thunkDir >> readThunk thunkDir >>= \case
630− Left err -> failWith $ T.pack $ "thunk pack: " <> show err
631− Right (ThunkData_Packed _) -> failWith "pack: thunk is already packed"
632− Right (ThunkData_Checkout _) -> do
633− withSpinner' ("Packing thunk " <> T.pack thunkDir)
634− (finalMsg noTrail $ const $ "Packed thunk " <> T.pack thunkDir) $ do
635− thunkPtr <- getThunkPtr (not force) thunkDir
636− callProcessAndLogOutput (Debug, Error) $ proc "rm" ["-rf", thunkDir]
637− liftIO $ createThunk thunkDir thunkPtr
826+packThunk' :: MonadObelisk m => Bool -> ThunkPackConfig -> FilePath -> m ThunkPtr
827+packThunk' noTrail (ThunkPackConfig force thunkConfig) thunkDir = checkThunkDirectory thunkDir *> readThunk thunkDir >>= \case
828+ Right ThunkData_Packed{} -> failWith [i|Thunk at ${thunkDir} is is already packed|]
829+ _ -> withSpinner'
830+ ("Packing thunk " <> T.pack thunkDir)
831+ (finalMsg noTrail $ const $ "Packed thunk " <> T.pack thunkDir) $
832+ do
833+ let checkClean = if force then CheckClean_NoCheck else CheckClean_FullCheck
834+ thunkPtr <- modifyThunkPtrByConfig thunkConfig <$> getThunkPtr checkClean thunkDir (_thunkConfig_private thunkConfig)
835+ liftIO $ removePathForcibly thunkDir
836+ createThunk thunkDir $ Right thunkPtr
638837 pure thunkPtr
639838
640−getThunkPtr :: forall m. MonadObelisk m => Bool -> FilePath -> m ThunkPtr
641−getThunkPtr checkClean thunkDir = do
642− when checkClean $ ensureCleanGitRepo thunkDir True $
839+modifyThunkPtrByConfig :: ThunkConfig -> ThunkPtr -> ThunkPtr
840+modifyThunkPtrByConfig (ThunkConfig markPrivate') ptr = case markPrivate' of
841+ Nothing -> ptr
842+ Just markPrivate -> ptr { _thunkPtr_source = case _thunkPtr_source ptr of
843+ ThunkSource_Git s -> ThunkSource_Git $ s { _gitSource_private = markPrivate }
844+ ThunkSource_GitHub s -> ThunkSource_GitHub $ s { _gitHubSource_private = markPrivate }
845+ }
846+
847+data CheckClean
848+ = CheckClean_FullCheck
849+ -- ^ Check that the repo is clean, including .gitignored files
850+ | CheckClean_NotIgnored
851+ -- ^ Check that the repo is clean, not including .gitignored files
852+ | CheckClean_NoCheck
853+ -- ^ Don't check that the repo is clean
854+
855+getThunkPtr :: forall m. MonadObelisk m => CheckClean -> FilePath -> Maybe Bool -> m ThunkPtr
856+getThunkPtr gitCheckClean dir mPrivate = do
857+ let repoLocations = nubOrd $ map (first normalise)
858+ [(".git", "."), (unpackedDirName </> ".git", unpackedDirName)]
859+ repoLocation' <- liftIO $ flip findM repoLocations $ doesDirectoryExist . (dir </>) . fst
860+ thunkDir <- case repoLocation' of
861+ Nothing -> failWith [i|Can't find an unpacked thunk in ${dir}|]
862+ Just (_, path) -> pure $ normalise $ dir </> path
863+
864+ let (checkClean, checkIgnored) = case gitCheckClean of
865+ CheckClean_FullCheck -> (True, True)
866+ CheckClean_NotIgnored -> (True, False)
867+ CheckClean_NoCheck -> (False, False)
868+ when checkClean $ ensureCleanGitRepo thunkDir checkIgnored
643869 "thunk pack: thunk checkout contains unsaved modifications"
644870
645871 -- Check whether there are any stashes
646− stashOutput <- readGitProcess thunkDir ["stash", "list"]
647− when checkClean $ case T.null stashOutput of
648− False -> do
872+ when checkClean $ do
873+ stashOutput <- readGitProcess thunkDir ["stash", "list"]
874+ unless (T.null stashOutput) $
649875 failWith $ T.unlines $
650876 [ "thunk pack: thunk checkout has stashes"
651877 , "git stash list:"
652878 ] ++ T.lines stashOutput
653− True -> return ()
654879
655− -- Get current branch ``
880+ -- Get current branch
656881 (mCurrentBranch, mCurrentCommit) <- do
657− b <- listToMaybe
658− <$> T.lines
659− <$> readGitProcess thunkDir ["rev-parse", "--abbrev-ref", "HEAD"]
660− c <- listToMaybe
661− <$> T.lines
662− <$> readGitProcess thunkDir ["rev-parse", "HEAD"]
882+ b <- listToMaybe . T.lines <$> readGitProcess thunkDir ["rev-parse", "--abbrev-ref", "HEAD"]
883+ c <- listToMaybe . T.lines <$> readGitProcess thunkDir ["rev-parse", "HEAD"]
663884 case b of
664− (Just "HEAD") -> failWith $ T.unlines $
885+ (Just "HEAD") -> failWith $ T.unlines
665886 [ "thunk pack: You are in 'detached HEAD' state."
666887 , "If you want to pack at the current ref \
667888 \then please create a new branch with 'git checkout -b <new-branch-name>' and push this upstream."
@@ -670,7 +891,7 @@ getThunkPtr checkClean thunkDir = do
670891
671892 -- Get information on all branches and their (optional) designated upstream
672893 -- correspondents
673− (headDump :: [Text]) <- T.lines <$> readGitProcess thunkDir
894+ headDump :: [Text] <- T.lines <$> readGitProcess thunkDir
674895 [ "for-each-ref"
675896 , "--format=%(refname:short) %(upstream:short) %(upstream:remotename)"
676897 , "refs/heads/"
@@ -716,7 +937,7 @@ getThunkPtr checkClean thunkDir = do
716937 ]
717938
718939 -- loosely by https://stackoverflow.com/questions/7773939/show-git-ahead-and-behind-info-for-all-branches-including-remotes
719− stats <- iforM headUpstream $ \branch (upstream, _remote) -> do
940+ stats <- ifor headUpstream $ \branch (upstream, _remote) -> do
720941 (stat :: [Text]) <- T.lines <$> readGitProcess thunkDir
721942 [ "rev-list", "--left-right"
722943 , T.unpack branch <> "..." <> T.unpack upstream
@@ -733,15 +954,16 @@ getThunkPtr checkClean thunkDir = do
733954 [ "thunk pack: Certain branches in the thunk have commits not yet pushed upstream:"
734955 , ""
735956 ] ++
736− (flip map (Map.toList nonGood) $ \(branch, (upstream, (ahead, behind))) -> mconcat
957+ flip map (Map.toList nonGood) (\(branch, (upstream, (ahead, behind))) -> mconcat
737958 [" ", branch, " ahead: ", T.pack (show ahead), " behind: ", T.pack (show behind), " remote branch ", upstream]) ++
738959 [ ""
739960 , "Please push these upstream and try again. (Or just fetch, if they are somehow \
740961 \pushed but this repo's remote tracking branches don't know it.)"
741962 ]
742963
743− -- We assume it's safe to pack the thunk at this point
744− putLog Informational $ "All changes safe in git remotes. OK to pack thunk."
964+ when checkClean $ do
965+ -- We assume it's safe to pack the thunk at this point
966+ putLog Informational "All changes safe in git remotes. OK to pack thunk."
745967
746968 let remote = maybe "origin" snd $ flip Map.lookup headUpstream =<< mCurrentBranch
747969
@@ -754,14 +976,12 @@ getThunkPtr checkClean thunkDir = do
754976 remoteUri <- case parseGitUri remoteUri' of
755977 Nothing -> failWith $ "Could not identify git remote: " <> remoteUri'
756978 Just uri -> pure uri
757− uriThunkPtr remoteUri mCurrentBranch mCurrentCommit
979+ uriThunkPtr remoteUri mPrivate mCurrentBranch mCurrentCommit
758980
759981-- | Get the latest revision available from the given source
760982getLatestRev :: MonadObelisk m => ThunkSource -> m ThunkRev
761983getLatestRev os = do
762− let gitS = case os of
763− ThunkSource_GitHub s -> forgetGithub False s
764− ThunkSource_Git s -> s
984+ let gitS = thunkSourceToGitSource os
765985 (_, commit) <- gitGetCommitBranch (_gitSource_url gitS) (untagName <$> _gitSource_branch gitS)
766986 case os of
767987 ThunkSource_GitHub s -> githubThunkRev s commit
@@ -773,18 +993,18 @@ getLatestRev os = do
773993-- performance. If that doesn't work (e.g. authentication issue), we fall back
774994-- on just doing things the normal way for git repos in general, and save it as
775995-- a regular git thunk.
776−uriThunkPtr :: MonadObelisk m => URI -> Maybe Text -> Maybe Text -> m ThunkPtr
777−uriThunkPtr uri mbranch mcommit = do
996+uriThunkPtr :: MonadObelisk m => GitUri -> Maybe Bool -> Maybe Text -> Maybe Text -> m ThunkPtr
997+uriThunkPtr uri mPrivate mbranch mcommit = do
778998 commit <- case mcommit of
779999 Nothing -> gitGetCommitBranch uri mbranch >>= return . snd
7801000 (Just c) -> return c
781− (src, rev) <- case uriToThunkSource uri mbranch of
1001+ (src, rev) <- uriToThunkSource uri mPrivate mbranch >>= \case
7821002 ThunkSource_GitHub s -> do
7831003 rev <- runExceptT $ githubThunkRev s commit
7841004 case rev of
7851005 Right r -> pure (ThunkSource_GitHub s, r)
7861006 Left e -> do
787− putLog Warning $ "\
1007+ putLog Warning "\
7881008\Failed to fetch archive from GitHub. This is probably a private repo. \
7891009\Falling back on normal fetchgit. Original failure:"
7901010 errorToWarning e
@@ -801,34 +1021,66 @@ uriThunkPtr uri mbranch mcommit = do
8011021-- If the thunk is a GitHub thunk and fails, we do *not* fall back like with
8021022-- `uriThunkPtr`. Unlike a plain URL, a thunk src explicitly states which method
8031023-- should be employed, and so we respect that.
804−uriToThunkSource :: URI -> Maybe Text -> ThunkSource
805−uriToThunkSource u
806− | Right uriAuth <- uriAuthority u
807− , Just scheme <- unRText <$> uriScheme u
1024+uriToThunkSource :: MonadObelisk m => GitUri -> Maybe Bool -> Maybe Text -> m ThunkSource
1025+uriToThunkSource (GitUri u) mPrivate
1026+ | Right uriAuth <- URI.uriAuthority u
1027+ , Just scheme <- URI.unRText <$> URI.uriScheme u
8081028 , case scheme of
809− "ssh" -> uriAuth == Authority
810− { authUserInfo = Just $ UserInfo (fromRight' $ mkUsername "git") Nothing
811− , authHost = fromRight' $ mkHost "github.com"
812− , authPort = Nothing
1029+ "ssh" -> uriAuth == URI.Authority
1030+ { URI.authUserInfo = Just $ URI.UserInfo (fromRight' $ URI.mkUsername "git") Nothing
1031+ , URI.authHost = fromRight' $ URI.mkHost "github.com"
1032+ , URI.authPort = Nothing
8131033 }
8141034 s -> s `L.elem` [ "git", "https", "http" ] -- "http:" just redirects to "https:"
815− && unRText (authHost uriAuth) == "github.com"
816− , Just (_, owner :| [repoish]) <- uriPath u
817− = \mbranch -> ThunkSource_GitHub $ GitHubSource
818− { _gitHubSource_owner = N $ unRText owner
819− , _gitHubSource_repo = N $ let
820− repoish' = unRText repoish
821− in case T.stripSuffix ".git" repoish' of
822− Just repo -> repo
823− Nothing -> repoish'
824− , _gitHubSource_branch = N <$> mbranch
825− }
1035+ && URI.unRText (URI.authHost uriAuth) == "github.com"
1036+ , Just (_, owner :| [repoish]) <- URI.uriPath u
1037+ = \mbranch -> do
1038+ isPrivate <- getIsPrivate
1039+ pure $ ThunkSource_GitHub $ GitHubSource
1040+ { _gitHubSource_owner = N $ URI.unRText owner
1041+ , _gitHubSource_repo = N $ let
1042+ repoish' = URI.unRText repoish
1043+ in fromMaybe repoish' $ T.stripSuffix ".git" repoish'
1044+ , _gitHubSource_branch = N <$> mbranch
1045+ , _gitHubSource_private = isPrivate
1046+ }
8261047
827− | otherwise = \mbranch -> ThunkSource_Git $ GitSource
828− { _gitSource_url = u
829− , _gitSource_branch = N <$> mbranch
830− , _gitSource_fetchSubmodules = False -- TODO: How do we determine if this should be true?
831− }
1048+ | otherwise = \mbranch -> do
1049+ isPrivate <- getIsPrivate
1050+ pure $ ThunkSource_Git $ GitSource
1051+ { _gitSource_url = GitUri u
1052+ , _gitSource_branch = N <$> mbranch
1053+ , _gitSource_fetchSubmodules = False -- TODO: How do we determine if this should be true?
1054+ , _gitSource_private = isPrivate
1055+ }
1056+ where
1057+ getIsPrivate = maybe (guessGitRepoIsPrivate $ GitUri u) pure mPrivate
1058+
1059+guessGitRepoIsPrivate :: MonadObelisk m => GitUri -> m Bool
1060+guessGitRepoIsPrivate uri = flip fix urisToTry $ \loop -> \case
1061+ [] -> pure True
1062+ uriAttempt:xs -> do
1063+ result <- readCreateProcessWithExitCode $
1064+ isolateGitProc $
1065+ gitProcNoRepo
1066+ [ "ls-remote"
1067+ , "--quiet"
1068+ , "--exit-code"
1069+ , "--symref"
1070+ , T.unpack $ gitUriToText uriAttempt
1071+ ]
1072+ case result of
1073+ (ExitSuccess, _, _) -> pure False -- Must be a public repo
1074+ _ -> loop xs
1075+ where
1076+ urisToTry = nubOrd $
1077+ -- Include the original URI if it isn't using SSH because SSH will certainly fail.
1078+ [uri | fmap URI.unRText (URI.uriScheme (unGitUri uri)) /= Just "ssh"] <>
1079+ [changeScheme "https" uri, changeScheme "http" uri]
1080+ changeScheme scheme (GitUri u) = GitUri $ u
1081+ { URI.uriScheme = URI.mkScheme scheme
1082+ , URI.uriAuthority = (\x -> x { URI.authUserInfo = Nothing }) <$> URI.uriAuthority u
1083+ }
8321084
8331085-- Funny signature indicates no effects depend on the optional branch name.
8341086githubThunkRev
@@ -840,19 +1092,19 @@ githubThunkRev
8401092githubThunkRev s commit = do
8411093 owner <- forcePP $ _gitHubSource_owner s
8421094 repo <- forcePP $ _gitHubSource_repo s
843− revTarball <- mkPathPiece $ commit <> ".tar.gz"
844− let archiveUri = URI
845− { uriScheme = Just $ fromRight' $ mkScheme "https"
846− , uriAuthority = Right $ Authority
847− { authUserInfo = Nothing
848− , authHost = fromRight' $ mkHost "github.com"
849− , authPort = Nothing
1095+ revTarball <- URI.mkPathPiece $ commit <> ".tar.gz"
1096+ let archiveUri = GitUri $ URI.URI
1097+ { URI.uriScheme = Just $ fromRight' $ URI.mkScheme "https"
1098+ , URI.uriAuthority = Right $ URI.Authority
1099+ { URI.authUserInfo = Nothing
1100+ , URI.authHost = fromRight' $ URI.mkHost "github.com"
1101+ , URI.authPort = Nothing
8501102 }
851− , uriPath = Just ( False
852− , owner :| [ repo, fromRight' $ mkPathPiece "archive", revTarball ]
1103+ , URI.uriPath = Just ( False
1104+ , owner :| [ repo, fromRight' $ URI.mkPathPiece "archive", revTarball ]
8531105 )
854− , uriQuery = []
855− , uriFragment = Nothing
1106+ , URI.uriQuery = []
1107+ , URI.uriFragment = Nothing
8561108 }
8571109 hash <- getNixSha256ForUriUnpacked archiveUri
8581110 putLog Debug $ "Nix sha256 is " <> hash
@@ -861,8 +1113,8 @@ githubThunkRev s commit = do
8611113 , _thunkRev_nixSha256 = hash
8621114 }
8631115 where
864− forcePP :: Name entity -> m (RText 'PathPiece)
865− forcePP = mkPathPiece . untagName
1116+ forcePP :: Name entity -> m (URI.RText 'URI.PathPiece)
1117+ forcePP = URI.mkPathPiece . untagName
8661118
8671119gitThunkRev
8681120 :: MonadObelisk m
@@ -871,11 +1123,11 @@ gitThunkRev
8711123 -> m ThunkRev
8721124gitThunkRev s commit = do
8731125 let u = _gitSource_url s
874− protocols = ["https", "ssh", "git"]
875− Just scheme <- pure $ unRText <$> uriScheme u
1126+ protocols = ["file", "https", "ssh", "git"]
1127+ scheme = maybe "file" URI.unRText $ URI.uriScheme $ (\(GitUri x) -> x) u
8761128 unless (T.toLower scheme `elem` protocols) $
8771129 failWith $ "obelisk currently only supports "
878− <> T.intercalate ", " protocols <> " protocols for non-GitHub remotes"
1130+ <> T.intercalate ", " protocols <> " protocols for plain Git remotes"
8791131 hash <- nixPrefetchGit u commit $ _gitSource_fetchSubmodules s
8801132 putLog Informational $ "Nix sha256 is " <> hash
8811133 pure $ ThunkRev
@@ -888,11 +1140,12 @@ gitThunkRev s commit = do
8881140--
8891141-- If the branch name is passed in, it is returned exactly as-is. If it is not
8901142-- passed it, the default branch of the repo is used instead.
1143+
8911144gitGetCommitBranch
892− :: MonadObelisk m => URI -> Maybe Text -> m (Text, CommitId)
1145+ :: MonadObelisk m => GitUri -> Maybe Text -> m (Text, CommitId)
8931146gitGetCommitBranch uri mbranch = withExitFailMessage ("Failure for git remote " <> uriMsg) $ do
8941147 (_, bothMaps) <- gitLsRemote
895− (T.unpack $ render uri)
1148+ (T.unpack $ gitUriToText uri)
8961149 (GitRef_Branch <$> mbranch)
8971150 Nothing
8981151 branch <- case mbranch of
@@ -908,18 +1161,21 @@ gitGetCommitBranch uri mbranch = withExitFailMessage ("Failure for git remote "
9081161 pure (branch, commit)
9091162 where
9101163 rethrowE = either failWith pure
911− uriMsg = render uri
1164+ uriMsg = gitUriToText uri
1165+
1166+parseGitUri :: Text -> Maybe GitUri
1167+parseGitUri x = GitUri <$> (parseFileURI x <|> parseAbsoluteURI x <|> parseSshShorthand x)
9121168
913−parseGitUri :: Text -> Maybe URI
914−parseGitUri x = parseAbsoluteURI x <|> parseSshShorthand x
1169+parseFileURI :: Text -> Maybe URI.URI
1170+parseFileURI uri = if "/" `T.isPrefixOf` uri then parseAbsoluteURI ("file://" <> uri) else Nothing
9151171
916−parseAbsoluteURI :: Text -> Maybe URI
1172+parseAbsoluteURI :: Text -> Maybe URI.URI
9171173parseAbsoluteURI uri = do
918− parsedUri <- mkURI uri
919− guard $ isPathAbsolute parsedUri
920− pure $ parsedUri
1174+ parsedUri <- URI.mkURI uri
1175+ guard $ URI.isPathAbsolute parsedUri
1176+ pure parsedUri
9211177
922−parseSshShorthand :: Text -> Maybe URI
1178+parseSshShorthand :: Text -> Maybe URI.URI
9231179parseSshShorthand uri = do
9241180 -- This is what git does to check that the remote
9251181 -- is not a local file path when parsing shorthand.
@@ -932,4 +1188,4 @@ parseSshShorthand uri = do
9321188 -- This check is used to disambiguate a filepath containing a colon from shorthand
9331189 guard $ isNothing (T.findIndex (=='/') authAndHostname)
9341190 && not (T.null colonAndPath)
935− mkURI properUri
1191+ URI.mkURI properUri
lib/command/src/Obelisk/Command/Upgrade/Hash.hsdeleted−114
@@ -1,114 +0,0 @@
1−{-# LANGUAGE FlexibleContexts #-}
2−{-# LANGUAGE LambdaCase #-}
3−{-# LANGUAGE OverloadedStrings #-}
4−{-# LANGUAGE ScopedTypeVariables #-}
5−{-# LANGUAGE TupleSections #-}
6−-- | Hash a git repo or arbitrary directory using nix-hash.
7−module Obelisk.Command.Upgrade.Hash
8− ( getDirectoryHash
9− , getHashAtGitRevision
10− ) where
11−
12−import Control.Monad (forM, forM_)
13−import Control.Monad.IO.Class (liftIO)
14−import Data.Bool (bool)
15−import Data.Maybe (catMaybes)
16−import Data.Semigroup ((<>))
17−import Data.Text (Text)
18−import qualified Data.Text as T
19−import System.Directory
20−import System.FilePath
21−import System.IO.Temp
22−import System.Process (cwd, proc)
23−
24−import Obelisk.App (MonadObelisk)
25−import Obelisk.CliApp
26−import Obelisk.Command.Utils
27−
28−import Obelisk.Migration
29−
30−-- | Get the unique hash of the given directory
31−--
32−-- Excludes the following before computing the hash:
33−-- * the specified top-level files/ directories.
34−-- * .git directory
35−-- * untracked Git files
36−-- * ignored Git files
37−-- * empty directories
38−--
39−-- Uses the same predictive algorithm as that of Nix (`nix-hash`).
40−--
41−-- This function will do a full copy of the directory to a temporary location before
42−-- computing the hash. Because it will be deleting the files in exclude list, and
43−-- other files if the directory is a git repo, which needs to be done as `nix-hash`
44−-- doesn't support taking an excludes list.
45−getDirectoryHash :: MonadObelisk m => [FilePath] -> FilePath -> m Hash
46−getDirectoryHash excludes dir = withSystemTempDirectory "obelisk-hash-" $ \tmpDir -> do
47− withSpinnerNoTrail (T.pack $ "Copying " <> dir <> " to " <> tmpDir) $ do
48− runProc $ copyDir dir tmpDir
49− getDirectoryHashDestructive excludes tmpDir
50−
51−getDirectoryHashDestructive :: MonadObelisk m => [FilePath] -> FilePath -> m Hash
52−getDirectoryHashDestructive excludes dir = do
53− liftIO (doesDirectoryExist $ dir </> ".git") >>= \case
54− True -> do
55− tidyUpGitWorkingCopy dir
56− withSpinnerNoTrail "Removing .git directory" $
57− liftIO $ removePathForcibly $ dir </> ".git"
58− False -> pure ()
59− withSpinnerNoTrail "Removing excluded paths" $ do
60− forM_ (fmap (dir </>) excludes) $
61− liftIO . removePathForcibly
62− nixHash dir
63−
64−getHashAtGitRevision :: MonadObelisk m => [Text] -> [FilePath] -> FilePath -> m [Hash]
65−getHashAtGitRevision revs excludes dir = withSystemTempDirectory "obelisk-hashrev-" $ \tmpDir -> do
66− withSpinnerNoTrail (T.pack $ "Copying " <> dir <> " to " <> tmpDir) $ do
67− runProc $ copyDir dir tmpDir
68− tidyUpGitWorkingCopy tmpDir
69− -- Discard changes to tracked files
70− runProcSilently $ gitProc tmpDir ["reset", "--hard"]
71− forM revs $ \rev -> do
72− runProcSilently $ gitProc tmpDir ["checkout", T.unpack rev]
73− -- Checking out an arbitrary revision can leave untracked files (from
74− -- previous revison) around, so tidy them up.
75− tidyUpGitWorkingCopy tmpDir
76− withFilesStashed tmpDir (excludes <> [".git"]) $
77− nixHash tmpDir
78− where
79− withFilesStashed base fs m = withSystemTempDirectory "obelisk-hashrev-stash-" $ \stashDir -> do
80− existingPaths <- fmap catMaybes $ forM fs $ \p -> do
81− liftIO (doesPathExist $ base </> p) >>= pure . bool Nothing (Just p)
82− forM_ existingPaths $ \p ->
83− liftIO $ renamePath (base </> p) (stashDir </> p)
84− result <- m
85− forM_ existingPaths $ \p ->
86− liftIO $ renamePath (stashDir </> p) (base </> p)
87− return result
88−
89−nixHash :: MonadObelisk m => FilePath -> m Hash
90−nixHash dir = withSpinnerNoTrail "Running `nix-hash`" $
91− readProc $ proc "nix-hash" [dir]
92−
93−-- | Clean up the following files in the git working copy
94−--
95−-- * Paths ignored by .gitignore, and still present
96−-- * Untracked files (not added to git index)
97−-- * Any empty directories (these are not tracked by git)
98−--
99−-- Note that this leaves modified (staged or unstaged) files as they are.
100−tidyUpGitWorkingCopy :: MonadObelisk m => FilePath -> m ()
101−tidyUpGitWorkingCopy dir = withSpinnerNoTrail "Tidying up git working copy" $ do
102− ignored <- gitLsFiles dir ["--ignored", "--exclude-standard", "--others"]
103− untracked <- gitLsFiles dir ["--exclude-standard", "--others"]
104− putLog Debug $ "Ignored: " <> T.pack (show $ length ignored) <> " files."
105− putLog Debug $ "Untracked files:\n" <> T.unlines untracked
106− withSpinnerNoTrail "Removing untracked and ignored files" $ do
107− forM_ (fmap ((dir </>) . T.unpack) $ ignored <> untracked) $
108− liftIO . removePathForcibly
109− -- Empty directories won't be included in these lists. Git doesn't track them
110− -- So we must delete these separately.
111− runProc $ proc "find" [dir, "-depth", "-empty", "-type", "d", "-delete"]
112− where
113− gitLsFiles pwd opts = fmap T.lines $ readProc $
114− (proc "git" $ ["ls-files", "."] <> opts) { cwd = Just pwd }
lib/command/src/Obelisk/Command/Utils.hs+91−19
@@ -4,34 +4,95 @@
44{-# LANGUAGE ScopedTypeVariables #-}
55{-# LANGUAGE OverloadedStrings #-}
66{-# LANGUAGE PatternGuards #-}
7+{-# LANGUAGE TemplateHaskell #-}
78module Obelisk.Command.Utils where
89
910import Control.Applicative hiding (many)
1011import Control.Monad.Except
1112import Data.Bool (bool)
12−import qualified Text.Megaparsec.Char.Lexer as ML
1313import Data.Bifunctor
1414import Data.Char
1515import Data.Either
16−import Data.Semigroup ((<>))
16+import Data.List (isInfixOf)
1717import Data.Map (Map)
1818import qualified Data.Map as M
1919import Data.Maybe (maybeToList)
20+import Data.Semigroup ((<>))
2021import Data.Text (Text)
2122import qualified Data.Text as T
2223import Data.Void (Void)
23−import System.Directory (canonicalizePath)
24−import System.Environment (getExecutablePath)
2524import System.Exit (ExitCode)
26−import qualified System.Process as P
25+import System.Which (staticWhich)
26+import qualified Text.Megaparsec.Char.Lexer as ML
2727import Text.Megaparsec as MP
2828import Text.Megaparsec.Char as MP
2929
3030import Obelisk.App (MonadObelisk)
3131import Obelisk.CliApp
3232
33−getObeliskExe :: IO FilePath
34−getObeliskExe = getExecutablePath >>= canonicalizePath
33+cp :: FilePath
34+cp = $(staticWhich "cp")
35+
36+mvPath :: FilePath
37+mvPath = $(staticWhich "mv")
38+
39+rmPath :: FilePath
40+rmPath = $(staticWhich "rm")
41+
42+ghcidExePath :: FilePath
43+ghcidExePath = $(staticWhich "ghcid")
44+
45+findExePath :: FilePath
46+findExePath = $(staticWhich "find")
47+
48+nixExePath :: FilePath
49+nixExePath = $(staticWhich "nix")
50+
51+nixBuildExePath :: FilePath
52+nixBuildExePath = $(staticWhich "nix-build")
53+
54+jreKeyToolPath :: FilePath
55+jreKeyToolPath = $(staticWhich "keytool")
56+
57+nixPrefetchGitPath :: FilePath
58+nixPrefetchGitPath = $(staticWhich "nix-prefetch-git")
59+
60+nixPrefetchUrlPath :: FilePath
61+nixPrefetchUrlPath = $(staticWhich "nix-prefetch-url")
62+
63+nixShellPath :: FilePath
64+nixShellPath = $(staticWhich "nix-shell")
65+
66+rsyncPath :: FilePath
67+rsyncPath = $(staticWhich "rsync")
68+
69+sshPath :: FilePath
70+sshPath = $(staticWhich "ssh")
71+
72+gitPath :: FilePath
73+gitPath = $(staticWhich "git")
74+
75+whichPath :: FilePath
76+whichPath = $(staticWhich "which")
77+
78+sshKeygenPath :: FilePath
79+sshKeygenPath = $(staticWhich "ssh-keygen")
80+
81+-- $(staticWhich "docker") was intentionally omitted, at least for now
82+-- One concern is that I don't know how particular docker is about having the
83+-- CLI exe match the version of the docker daemon, which is largely outside of
84+-- the control of obelisk-command.
85+-- TODO: Investigate the tradeoffs associated with this choice
86+dockerPath :: FilePath
87+dockerPath = "docker"
88+
89+-- | Nix syntax requires relative paths to be prefixed by @./@ or
90+-- @../@. This will make a 'FilePath' that can be embedded in a Nix
91+-- expression.
92+toNixPath :: FilePath -> FilePath
93+toNixPath root | "/" `isInfixOf` root = root
94+ | otherwise = "./" <> root
95+
3596
3697-- Check whether the working directory is clean
3798checkGitCleanStatus :: MonadObelisk m => FilePath -> Bool -> m Bool
@@ -61,20 +122,31 @@ initGit repo = do
61122 git ["add", "."]
62123 git ["commit", "-m", "Initial commit."]
63124
64−gitProcNoRepo :: [String] -> P.CreateProcess
65−gitProcNoRepo = P.proc "git"
125+gitProcNoRepo :: [String] -> ProcessSpec
126+gitProcNoRepo args = setEnvOverride (M.singleton "GIT_TERMINAL_PROMPT" "0" <>) $ proc gitPath args
66127
67−gitProc :: FilePath -> [String] -> P.CreateProcess
128+gitProc :: FilePath -> [String] -> ProcessSpec
68129gitProc repo = gitProcNoRepo . runGitInDir
69130 where
70131 runGitInDir args' = case filter (not . null) args' of
71132 args@("clone":_) -> args <> [repo]
72133 args -> ["-C", repo] <> args
73134
74−-- | Recursively copy a directory using `cp -a`
75−copyDir :: FilePath -> FilePath -> P.CreateProcess
135+isolateGitProc :: ProcessSpec -> ProcessSpec
136+isolateGitProc = setEnvOverride (overrides <>)
137+ where
138+ overrides = M.fromList
139+ [ ("HOME", "/dev/null")
140+ , ("GIT_CONFIG_NOSYSTEM", "1")
141+ , ("GIT_TERMINAL_PROMPT", "0") -- git 2.3+
142+ , ("GIT_ASKPASS", "echo") -- pre git 2.3 to just use empty password
143+ , ("GIT_SSH_COMMAND", "ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no -o GSSAPIAuthentication=no")
144+ ]
145+
146+-- | Recursively copy a directory using `cp -a` -- TODO: Should use -rT instead of -a
147+copyDir :: FilePath -> FilePath -> ProcessSpec
76148copyDir src dest =
77− (P.proc "cp" ["-a", ".", dest]) { P.cwd = Just src }
149+ setCwd (Just src) $ proc cp ["-a", ".", dest] -- TODO: This will break if dest is relative since we change cwd
78150
79151readGitProcess :: MonadObelisk m => FilePath -> [String] -> m Text
80152readGitProcess repo = readProcessAndLogOutput (Debug, Notice) . gitProc repo
@@ -87,15 +159,15 @@ processToShellString cmd args = unwords $ map quoteAndEscape (cmd : args)
87159 where quoteAndEscape x = T.unpack $ "'" <> T.replace "'" "'\''" (T.pack x) <> "'"
88160
89161-- | A simpler wrapper for CliApp's most used process function with sensible defaults.
90−runProc :: MonadObelisk m => P.CreateProcess -> m ()
162+runProc :: MonadObelisk m => ProcessSpec -> m ()
91163runProc = callProcessAndLogOutput (Notice, Error)
92164
93165-- | Like runProc, but all output goes to Debug logging level
94−runProcSilently :: MonadObelisk m => P.CreateProcess -> m ()
166+runProcSilently :: MonadObelisk m => ProcessSpec -> m ()
95167runProcSilently = callProcessAndLogOutput (Debug, Debug)
96168
97169-- | A simpler wrapper for CliApp's readProcessAndLogStderr with sensible defaults.
98−readProc :: MonadObelisk m => P.CreateProcess -> m Text
170+readProc :: MonadObelisk m => ProcessSpec -> m Text
99171readProc = readProcessAndLogOutput (Debug, Error)
100172
101173tshow :: Show a => a -> Text
@@ -129,13 +201,13 @@ gitLsRemote repository mRef mBranch = do
129201 (exitCode, out, _err) <- case mBranch of
130202 Nothing -> readCreateProcessWithExitCode $ gitProcNoRepo $
131203 ["ls-remote", "--exit-code", "--symref", repository]
132− ++ (maybeToList $ T.unpack . showGitRef <$> mRef)
133− Just branchName -> readCreateProcessWithExitCode $ gitProcNoRepo $
204+ ++ maybeToList (T.unpack . showGitRef <$> mRef)
205+ Just branchName -> readCreateProcessWithExitCode $ gitProcNoRepo
134206 ["ls-remote", "--exit-code", repository, branchName]
135207 let t = T.pack out
136208 maps <- case MP.runParser parseLsRemote "" t of
137209 Left err -> failWith $ T.pack $ MP.errorBundlePretty err
138− Right table -> pure $ bimap M.fromList M.fromList $ partitionEithers $ table
210+ Right table -> pure $ bimap M.fromList M.fromList $ partitionEithers table
139211 putLog Debug $ "git ls-remote maps: " <> T.pack (show maps)
140212 pure (exitCode, maps)
141213
lib/command/src/Obelisk/Command/VmBuilder.hs+9−9
@@ -18,10 +18,10 @@ import System.Directory (createDirectoryIfMissing)
1818import System.Exit (ExitCode(..))
1919import System.FilePath ((<.>), (</>))
2020import qualified System.Info
21−import System.Process (proc)
2221
2322import Obelisk.App (MonadObelisk, getObeliskUserStateDir)
2423import Obelisk.CliApp
24+import Obelisk.Command.Utils (rmPath, whichPath, sshKeygenPath, nixBuildExePath, dockerPath)
2525
2626-- | Generate the `--builders` argument string to enable the VM builder after ensuring it is available.
2727getNixBuildersArg :: MonadObelisk m => m String
@@ -35,7 +35,7 @@ getNixBuildersArg = do
3535
3636checkForNixDarwin :: MonadObelisk m => String -> m ()
3737checkForNixDarwin sshIdFile = do
38− (exitCode, _, _) <- readCreateProcessWithExitCode $ proc "which" ["darwin-rebuild"]
38+ (exitCode, _, _) <- readCreateProcessWithExitCode $ proc whichPath ["darwin-rebuild"]
3939 unless (exitCode == ExitSuccess) $ failWith $ T.intercalate "\n"
4040 [ "Deployments from macOS require nix-darwin to be installed."
4141 , "Follow the installation instructions here: https://github.com/LnL7/nix-darwin"
@@ -67,7 +67,7 @@ containerExists :: MonadObelisk m => FilePath -> m Bool
6767containerExists stateDir = handle (\(_ :: IOError) -> failWith needDockerMsg) $ do
6868 containerNames <- fmap (map T.strip . T.lines) $
6969 readProcessAndLogStderr Error $
70− proc "docker" ["container", "list", "--all", "--format", "{{.Names}}"]
70+ proc dockerPath ["container", "list", "--all", "--format", "{{.Names}}"]
7171 let exists = containerName `elem` containerNames
7272 when exists $ testLinuxBuild stateDir
7373 pure exists
@@ -85,7 +85,7 @@ containerSshPort = 2222
8585startContainer :: MonadObelisk m => m ()
8686startContainer = withSpinner "Starting VM builder" $
8787 callProcessAndLogOutput (Debug, Debug) $
88− proc "docker" ["start", containerName]
88+ proc dockerPath ["start", containerName]
8989
9090-- | Creates the Docker container; assumes it does not exist.
9191setupNixDocker :: MonadObelisk m => FilePath -> m ()
@@ -96,14 +96,14 @@ setupNixDocker stateDir = withSpinner ("Creating Docker container named " <> con
9696
9797 -- Create new SSH keys for this container
9898 callProcessAndLogOutput (Debug, Error) $
99− proc "rm" ["-f", stateDir </> sshKeyFileName, stateDir </> sshKeyFileName <.> "pub"]
99+ proc rmPath ["-f", stateDir </> sshKeyFileName, stateDir </> sshKeyFileName <.> "pub"]
100100 callProcessAndLogOutput (Debug, Error) $
101− proc "ssh-keygen" ["-t", "ed25519", "-f", stateDir </> sshKeyFileName, "-P", ""]
101+ proc sshKeygenPath ["-t", "ed25519", "-f", stateDir </> sshKeyFileName, "-P", ""]
102102
103103 -- Build the docker container (which uses the SSH keys in the 'ssh' folder)
104104 containerId <- fmap T.strip $ readProcessAndLogStderr Error $
105− proc "docker" ["build", stateDir, "--quiet"]
106− callProcessAndLogOutput (Debug, Error) $ proc "docker"
105+ proc dockerPath ["build", stateDir, "--quiet"]
106+ callProcessAndLogOutput (Debug, Error) $ proc dockerPath
107107 [ "run"
108108 , "--restart", "always"
109109 , "--detach"
@@ -155,7 +155,7 @@ testLinuxBuild :: MonadObelisk m => FilePath -> m ()
155155testLinuxBuild stateDir
156156 | System.Info.os == "linux" = failWith "Using the docker builder is not necessary on linux."
157157 | otherwise = do
158− (exitCode, _stdout, stderr) <- readCreateProcessWithExitCode $ proc "nix-build"
158+ (exitCode, _stdout, stderr) <- readCreateProcessWithExitCode $ proc nixBuildExePath
159159 [ "--no-out-link"
160160 , "-E", "(import <nixpkgs> { system = \"x86_64-linux\"; }).writeText \"test\" builtins.currentTime"
161161 , "--builders", nixBuildersArgString stateDir
lib/executable-config/default.nix+37−19
@@ -2,26 +2,44 @@
22# configuration information into a canonical location. It also provides a haskell
33# package that can be used to retrieve the injected configuration on each supported
44# platform.
5−{ nixpkgs
6−, filterGitSource # TODO define this in obelisk
5+{ lib
6+, runCommand
7+, obeliskCleanSource
78}:
8−let injectConfig = config: assets: nixpkgs.runCommand "inject-config" {} (''
9− set -x
10− mkdir -p $out
11− cp --no-preserve=mode -Lr "${assets}" $out/static
12− chmod +w "$out"
13− '' + nixpkgs.lib.optionalString (!(builtins.isNull config)) ''
14− if ! mkdir $out/config; then
15− 2>&1 echo config directory already exists or could not be created
16− exit 1
17− fi
18− cp -a "${config}"/* "$out/config"
19− find "$out/config" -type f -printf '%P\0' >"$out/config.files"
20− '');
21−in with nixpkgs.haskell.lib; {
22− haskellOverlay = self: super: {
23− obelisk-executable-config-lookup = self.callCabal2nix "obelisk-executable-config-lookup" (filterGitSource ./lookup) {};
9+
10+let
11+ injectConfig = config: assets: runCommand "inject-config" {} (''
12+ set -x
13+ mkdir -p $out
14+ cp --no-preserve=mode -Lr "${assets}" $out/static
15+ chmod +w "$out"
16+ '' + lib.optionalString (!(builtins.isNull config)) ''
17+ if ! mkdir $out/config; then
18+ 2>&1 echo config directory already exists or could not be created
19+ exit 1
20+ fi
21+ cp -a "${config}"/* "$out/config"
22+ # Needed for android deployments
23+ find "$out/config" -type f -printf '%P\0' > "$out/config.files"
24+ '');
25+in
26+
27+{
28+ haskellOverlay = self: super:
29+ let
30+ pkgs = self.callPackage ({pkgs}: pkgs) {};
31+ in {
32+ obelisk-executable-config-lookup = pkgs.haskell.lib.overrideCabal
33+ (self.callCabal2nix "obelisk-executable-config-lookup" (obeliskCleanSource ./lookup) {})
34+ (drv: {
35+ # Hack until https://github.com/NixOS/cabal2nix/pull/432 lands
36+ libraryHaskellDepends = (drv.libraryHaskellDepends or [])
37+ ++ pkgs.stdenv.lib.optionals (with pkgs.stdenv.hostPlatform; isAndroid && is32bit) [
38+ self.android-activity
39+ ];
40+ });
2441 };
42+
2543 platforms = {
2644 android = {
2745 # Inject the given config directory into an android assets folder
@@ -32,7 +50,7 @@ in with nixpkgs.haskell.lib; {
3250 inject = injectConfig;
3351 };
3452 web = {
35− inject = self: self.callCabal2nix "obelisk-executable-config-inject" (filterGitSource ./inject) {};
53+ inject = self: self.callCabal2nix "obelisk-executable-config-inject" (obeliskCleanSource ./inject) {};
3654 };
3755 };
3856}
lib/executable-config/inject/obelisk-executable-config-inject.cabal+1−1
@@ -15,4 +15,4 @@ library
1515 text
1616
1717 exposed-modules: Obelisk.ExecutableConfig.Inject
18− ghc-options: -Wall
18+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/executable-config/lookup/obelisk-executable-config-lookup.cabal+11−8
@@ -27,19 +27,22 @@ library
2727 build-depends: directory
2828
2929 build-depends:
30− base,
30+ base,
3131 base64-bytestring,
3232 bytestring,
3333 containers,
34+ exceptions,
3435 filepath,
35− text,
36− transformers,
37− transformers-base,
38− ref-tf,
39− primitive,
36+ jsaddle,
37+ mmorph,
4038 monad-control,
39+ mtl,
40+ primitive,
41+ ref-tf,
42+ reflex-dom-core,
4143 reflex,
42− reflex-dom,
43− jsaddle
44+ text,
45+ transformers-base,
46+ transformers
4447
4548 ghc-options: -Wall
lib/executable-config/lookup/src-other/Obelisk/ExecutableConfig/Lookup.hs+1−8
@@ -1,18 +1,11 @@
1−{-# LANGUAGE LambdaCase #-}
21{-# LANGUAGE OverloadedStrings #-}
32module Obelisk.ExecutableConfig.Lookup where
43
54import Data.Map (Map)
6−import qualified Data.Map as Map
75import Data.Text (Text)
8−import qualified Data.Text as T
96import Data.ByteString (ByteString)
10−import qualified Data.ByteString as BS
11−import System.Directory
12−import System.FilePath
13−import Control.Monad
147
15−import Obelisk.Configs.Internal.Directory
8+import Obelisk.Configs.Internal.Directory (getConfigsFromDirectory)
169
1710getConfigs :: IO (Map Text ByteString)
1811getConfigs = getConfigsFromDirectory "config"
lib/executable-config/lookup/src/Obelisk/Configs.hs+31−12
@@ -18,24 +18,38 @@ module Obelisk.Configs
1818 , getTextConfig
1919 ) where
2020
21−import Control.Applicative
22−import Control.Monad
23−import Control.Monad.Base
24−import Control.Monad.Fix
25−import Control.Monad.Primitive
26−import Control.Monad.Ref
27−import Control.Monad.IO.Class
28−import Control.Monad.Trans.Class
29−import Control.Monad.Trans.Control
30−import Control.Monad.Trans.Reader
21+import Control.Applicative (Alternative)
22+import Control.Monad (MonadPlus)
23+import Control.Monad.Base (MonadBase)
24+import Control.Monad.Catch (MonadThrow)
25+import Control.Monad.Fail (MonadFail)
26+import Control.Monad.Fix (MonadFix)
27+import Control.Monad.IO.Class (MonadIO)
28+import Control.Monad.Morph (MFunctor)
29+import Control.Monad.Primitive (PrimMonad, PrimState, primitive)
30+import Control.Monad.Ref (MonadRef)
31+import Control.Monad.Trans (MonadTrans, lift)
32+import Control.Monad.Trans.Control (MonadBaseControl)
33+import Control.Monad.Trans.Reader (ReaderT (..), ask, mapReaderT)
34+import Control.Monad.Trans.State (StateT)
35+import qualified Control.Monad.Trans.State.Strict as Strict
3136import Data.ByteString (ByteString)
3237import Data.Map (Map)
3338import qualified Data.Map as Map
3439import Data.Text (Text)
3540import qualified Data.Text.Encoding as T
3641import Reflex
37−import Reflex.Host.Class
38−import Reflex.Dom
42+import Reflex.Host.Class (MonadReflexCreateTrigger)
43+import Reflex.Dom.Core
44+ ( DomBuilder
45+ , DomRenderHook
46+ , HasDocument
47+ , HasJS
48+ , HasJSContext
49+ , Prerender (Client)
50+ , StaticDomBuilderT
51+ , prerender
52+ )
3953#ifndef ghcjs_HOST_OS
4054import Language.Javascript.JSaddle (MonadJSM)
4155#endif
@@ -62,6 +76,8 @@ instance HasConfigs m => HasConfigs (PostBuildT t m)
6276instance HasConfigs m => HasConfigs (QueryT t q m)
6377instance HasConfigs m => HasConfigs (ReaderT r m)
6478instance HasConfigs m => HasConfigs (RequesterT t request response m)
79+instance HasConfigs m => HasConfigs (StateT w m)
80+instance HasConfigs m => HasConfigs (Strict.StateT w m)
6581instance HasConfigs m => HasConfigs (StaticDomBuilderT t m)
6682instance HasConfigs m => HasConfigs (TriggerEventT t m)
6783
@@ -72,12 +88,15 @@ newtype ConfigsT m a = ConfigsT { unConfigsT :: ReaderT (Map Text ByteString) m
7288 , Monad
7389 , MonadPlus
7490 , Alternative
91+ , MonadFail
7592 , MonadFix
93+ , MonadThrow
7694 , MonadIO
7795 , MonadBase m'
7896 , MonadBaseControl m'
7997 , MonadRef
8098 , MonadTrans
99+ , MFunctor
81100 , DomBuilder t
82101 , MonadHold t
83102 , MonadReflexCreateTrigger t
lib/frontend/obelisk-frontend.cabal+1−1
@@ -26,4 +26,4 @@ library
2626 exposed-modules:
2727 Obelisk.Frontend
2828 Obelisk.Frontend.Cookie
29− ghc-options: -Wall
29+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/frontend/src/Obelisk/Frontend.hs+9−9
@@ -5,6 +5,7 @@
55{-# LANGUAGE LambdaCase #-}
66{-# LANGUAGE MultiParamTypeClasses #-}
77{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE PackageImports #-}
89{-# LANGUAGE RankNTypes #-}
910{-# LANGUAGE RecursiveDo #-}
1011{-# LANGUAGE ScopedTypeVariables #-}
@@ -19,6 +20,7 @@ module Obelisk.Frontend
1920 , renderFrontendHtml
2021 , removeHTMLConfigs
2122 , FrontendMode (..)
23+ , FrontendWidgetT
2224 , module Obelisk.Frontend.Cookie
2325 ) where
2426
@@ -45,7 +47,7 @@ import qualified GHCJS.DOM.History as DOM
4547import qualified GHCJS.DOM.Window as DOM
4648import Language.Javascript.JSaddle (MonadJSM, JSM, jsNull)
4749import GHCJS.DOM (currentDocument)
48−import GHCJS.DOM.Document (getHead)
50+import "ghcjs-dom" GHCJS.DOM.Document (getHead)
4951import GHCJS.DOM.Node (Node, removeChild_)
5052import GHCJS.DOM.NodeList (IsNodeList, item, getLength)
5153import GHCJS.DOM.ParentNode (querySelectorAll)
@@ -180,7 +182,7 @@ runFrontendWithConfigsAndCurrentRoute
180182 -> Frontend (R frontendRoute)
181183 -> JSM ()
182184runFrontendWithConfigsAndCurrentRoute mode configs validFullEncoder frontend = do
183− let ve = validFullEncoder . hoistParse errorLeft (prismEncoder (rPrism $ _FullRoute_Frontend . _ObeliskRoute_App))
185+ let ve = validFullEncoder . hoistParse errorLeft (reviewEncoder (rPrism $ _FullRoute_Frontend . _ObeliskRoute_App))
184186 errorLeft = \case
185187 Left _ -> error "runFrontend: Unexpected non-app ObeliskRoute reached the frontend. This shouldn't happen."
186188 Right x -> Identity x
@@ -197,7 +199,6 @@ runFrontendWithConfigsAndCurrentRoute mode configs validFullEncoder frontend = d
197199 , PrimMonad m
198200 , MonadSample DomTimeline (Performable m)
199201 , DOM.MonadJSM m
200− , Monad (Performable (Client (HydrationDomBuilderT s DomTimeline m)))
201202 , MonadFix (Client (HydrationDomBuilderT s DomTimeline m))
202203 , MonadFix (Performable m)
203204 , MonadFix m
@@ -226,18 +227,17 @@ runFrontendWithConfigsAndCurrentRoute mode configs validFullEncoder frontend = d
226227 then runHydrationWidgetWithHeadAndBody (pure ()) w
227228 else runImmediateWidgetWithHeadAndBody w
228229
230+type FrontendWidgetT r = RoutedT DomTimeline r (SetRouteT DomTimeline r (RouteToUrlT r (ConfigsT (CookiesT (HydratableT (PostBuildT DomTimeline (StaticDomBuilderT DomTimeline (PerformEventT DomTimeline DomHost))))))))
231+
229232renderFrontendHtml
230− :: ( t ~ DomTimeline
231− , MonadIO m
232− , widget ~ RoutedT t r (SetRouteT t r (RouteToUrlT r (ConfigsT (CookiesT (HydratableT (PostBuildT t (StaticDomBuilderT t (PerformEventT t DomHost))))))))
233− )
233+ :: MonadIO m
234234 => Map Text ByteString
235235 -> Cookies
236236 -> (r -> Text)
237237 -> r
238238 -> Frontend r
239− -> widget ()
240− -> widget ()
239+ -> FrontendWidgetT r ()
240+ -> FrontendWidgetT r ()
241241 -> m ByteString
242242renderFrontendHtml configs cookies urlEnc route frontend headExtra bodyExtra = do
243243 --TODO: We should probably have a "NullEventWriterT" or a frozen reflex timeline
lib/frontend/src/Obelisk/Frontend/Cookie.hs+2−1
@@ -6,6 +6,7 @@
66{-# LANGUAGE FlexibleInstances #-}
77{-# LANGUAGE GeneralizedNewtypeDeriving #-}
88{-# LANGUAGE MultiParamTypeClasses #-}
9+{-# LANGUAGE PackageImports #-}
910{-# LANGUAGE RankNTypes #-}
1011{-# LANGUAGE TypeFamilies #-}
1112{-# LANGUAGE UndecidableInstances #-}
@@ -22,7 +23,7 @@ import Data.Text.Encoding (encodeUtf8)
2223import Reflex
2324import Reflex.Host.Class
2425import Reflex.Dom.Core
25−import GHCJS.DOM.Document (getCookie, Document)
26+import "ghcjs-dom" GHCJS.DOM.Document (getCookie, Document)
2627import GHCJS.DOM.Types (MonadJSM)
2728import Web.Cookie
2829
lib/route/README.mdnew file+6
@@ -0,0 +1,6 @@
1+# obelisk-route
2+
3+[![Haskell Programming Language](https://img.shields.io/badge/language-Haskell-blue.svg)](http://www.haskell.org)
4+[![BSD3 License](http://img.shields.io/badge/license-BSD3-brightgreen.svg)](https://github.com/obsidiansystems/obelisk/blob/master/LICENSE)
5+
6+Robust URL management for single-page apps.
lib/route/obelisk-route.cabal+2−1
@@ -20,6 +20,7 @@ library
2020 http-types,
2121 jsaddle,
2222 lens,
23+ mmorph,
2324 monad-control,
2425 mtl,
2526 network-uri,
@@ -38,4 +39,4 @@ library
3839 exposed-modules: Obelisk.Route
3940 Obelisk.Route.TH
4041 Obelisk.Route.Frontend
41− ghc-options: -Wall -fwarn-redundant-constraints
42+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/route/src/Obelisk/Route.hs+110−57
@@ -1,3 +1,4 @@
1+{-# LANGUAGE CPP #-}
12{-# LANGUAGE ApplicativeDo #-}
23{-# LANGUAGE ConstraintKinds #-}
34{-# LANGUAGE EmptyCase #-}
@@ -5,7 +6,6 @@
56{-# LANGUAGE FlexibleContexts #-}
67{-# LANGUAGE FlexibleInstances #-}
78{-# LANGUAGE GADTs #-}
8−{-# LANGUAGE KindSignatures #-}
99{-# LANGUAGE LambdaCase #-}
1010{-# LANGUAGE MultiParamTypeClasses #-}
1111{-# LANGUAGE OverloadedStrings #-}
@@ -20,10 +20,11 @@
2020{-# LANGUAGE ViewPatterns #-}
2121module Obelisk.Route
2222 ( R
23− , pattern (:/)
2423 , (:.)
25− , pattern (:.)
24+ , (?/)
2625 , hoistR
26+ , pattern (:.)
27+ , pattern (:/)
2728 , PageName
2829 , PathQuery
2930 , Encoder
@@ -49,6 +50,7 @@ module Obelisk.Route
4950 , pathParamEncoder
5051 , pathLiteralEncoder
5152 , singletonListEncoder
53+ , packTextEncoder
5254 , unpackTextEncoder
5355 , prefixTextEncoder
5456 , unsafeTshowEncoder
@@ -59,6 +61,7 @@ module Obelisk.Route
5961 , justEncoder
6062 , nothingEncoder
6163 , isoEncoder
64+ , viewEncoder
6265 , wrappedEncoder
6366 , unwrappedEncoder
6467 , listToNonEmptyEncoder
@@ -67,6 +70,7 @@ module Obelisk.Route
6770 , toListMapEncoder
6871 , shadowEncoder
6972 , prismEncoder
73+ , reviewEncoder
7074 , rPrism
7175 , _R
7276 , obeliskRouteEncoder
@@ -131,20 +135,24 @@ import Control.Lens
131135 , Prism'
132136 , prism'
133137 , re
138+ , review
134139 , view
135140 , Wrapped (..)
136141 )
137142import Control.Monad.Except
138−import Control.Monad.Writer (execWriter, tell)
139143import qualified Control.Monad.State.Strict as State
140144import Control.Monad.Trans (lift)
145+import Control.Monad.Writer (execWriter, tell)
146+import Data.Aeson (FromJSON, ToJSON)
147+import qualified Data.Aeson as Aeson
141148import qualified Data.ByteString as BS
142149import qualified Data.ByteString.Lazy as BSL
143−import Data.Dependent.Sum (DSum (..))
144150import Data.Dependent.Map (DMap)
145151import qualified Data.Dependent.Map as DMap
152+import Data.Dependent.Sum (DSum (..))
146153import Data.Either.Validation (Validation (..))
147154import Data.Foldable
155+import Data.Functor (($>))
148156import Data.Functor.Sum
149157import Data.GADT.Compare
150158import Data.GADT.Compare.TH
@@ -157,18 +165,18 @@ import Data.Monoid ((<>))
157165import Data.Set (Set)
158166import qualified Data.Set as Set
159167import Data.Some (Some(Some))
168+import Data.Tabulation
160169import Data.Text (Text)
161170import qualified Data.Text as T
162171import qualified Data.Text.Encoding as T
172+import Data.Text.Lens (IsText, packed, unpacked)
173+import Data.Type.Equality
163174import Data.Universe
164175import Data.Universe.Some
165176import Network.HTTP.Types.URI
166177import qualified Numeric.Lens
167178import Obelisk.Route.TH
168179import Text.Read (readMaybe)
169−import Data.Tabulation
170−import qualified Data.Aeson as Aeson
171−import Data.Aeson (FromJSON, ToJSON)
172180
173181-- Design goals:
174182-- No start-up time on the frontend (not yet met)
@@ -194,10 +202,16 @@ import Data.Aeson (FromJSON, ToJSON)
194202
195203type R f = DSum f Identity --TODO: Better name
196204
197−{-# COMPLETE (:/) #-}
198−infixr 5 :/
205+-- | Convenience builder for an 'R' using 'Identity' for the functor.
199206pattern (:/) :: f a -> a -> R f
200207pattern a :/ b = a :=> Identity b
208+{-# COMPLETE (:/) #-}
209+infixr 5 :/
210+
211+-- | Like '(:/)' but adds a 'Just' wrapper around the right-hand side.
212+(?/) :: f (Maybe a) -> a -> R f
213+r ?/ a = r :/ Just a
214+infixr 5 ?/
201215
202216mapSome :: (forall a. f a -> g a) -> Some f -> Some g
203217mapSome f (Some a) = Some $ f a
@@ -212,7 +226,19 @@ hoistR f (x :=> Identity y) = f x :/ y
212226infixr 5 :.
213227type (:.) = (,)
214228
229+#ifdef __GLASGOW_HASKELL__
230+#if __GLASGOW_HASKELL__ >= 810
215231{-# COMPLETE (:.) #-}
232+#else
233+{-# WARNING (:.)
234+ [ "Use of this pattern in GHC < 8.10 will result in spurious non-exhaustive warnings at every use site."
235+ , "We cannot provide a COMPLETE pragma to silence these due to a GHC bug: https://gitlab.haskell.org/ghc/ghc/issues/17729."
236+ , "The bug hides incompleteness warnings for all two tuples when the COMPLETE pattern is in scope."
237+ , "Instead, you should use (,) directly until you can switch to GHC >= 8.10, where the COMPLETE pragma is reinstated."
238+ ]
239+ #-}
240+#endif
241+#endif
216242pattern (:.) :: a -> b -> a :. b
217243pattern a :. b = (a, b)
218244
@@ -278,13 +304,13 @@ decode e x = runIdentity (tryDecode e x)
278304-- | Once an 'Encoder' has been checked, so that its check monad has become 'Identity', even if the same is not true of the
279305-- parse monad, we may still attempt to decode with it in its parse monad.
280306tryDecode :: Encoder Identity parse decoded encoded -> encoded -> parse decoded
281−tryDecode (Encoder (Identity impl)) x = _encoderImpl_decode impl x
307+tryDecode (Encoder (Identity impl)) = _encoderImpl_decode impl
282308
283309-- | Similar to 'decode', once an encoder has been checked so that its check monad is Identity, it
284310-- can be used to actually encode by using this. Note that while there's no constraint on the parse monad here,
285311-- one should usually be applying decode and encode to the same 'Encoder'
286312encode :: Encoder Identity parse decoded encoded -> decoded -> encoded
287−encode (Encoder (Identity impl)) x = _encoderImpl_encode impl x
313+encode (Encoder (Identity impl)) = _encoderImpl_encode impl
288314
289315-- | This is a primitive used to build encoders which can't fail to check. It should not be used unless one is
290316-- reasonably certain that the law given for 'EncoderImpl' above holds.
@@ -331,7 +357,7 @@ instance Monad parse => Bifunctor (,) (EncoderImpl parse) (EncoderImpl parse) (E
331357 }
332358
333359instance (Monad parse, Applicative check) => Braided (Encoder check parse) (,) where
334− braid = isoEncoder (iso swap swap)
360+ braid = viewEncoder (iso swap swap)
335361
336362
337363instance (Applicative check, Monad parse) => PFunctor (,) (Encoder check parse) (Encoder check parse) where
@@ -367,11 +393,11 @@ instance (Monad parse, Applicative check) => Bifunctor Either (Encoder check par
367393 bimap f g = Encoder $ liftA2 bimap (unEncoder f) (unEncoder g)
368394
369395instance (Applicative check, Monad parse) => Associative (Encoder check parse) Either where
370− associate = isoEncoder (iso (associate @(->) @Either) disassociate)
371− disassociate = isoEncoder (iso disassociate associate)
396+ associate = viewEncoder (iso (associate @(->) @Either) disassociate)
397+ disassociate = viewEncoder (iso disassociate associate)
372398
373399instance (Monad parse, Applicative check) => Braided (Encoder check parse) Either where
374− braid = isoEncoder (iso swap swap)
400+ braid = viewEncoder (iso swap swap)
375401
376402
377403
@@ -425,17 +451,17 @@ instance (Applicative check, Monad parse) => Monoidal (Encoder check parse) (,)
425451--------------------------------------------------------------------------------
426452
427453-- | Given a valid 'Iso' from lens, construct an 'Encoder'
428−isoEncoder :: (Applicative check, Applicative parse) => Iso' a b -> Encoder check parse a b
429−isoEncoder f = unsafeMkEncoder $ EncoderImpl
454+viewEncoder :: (Applicative check, Applicative parse) => Iso' a b -> Encoder check parse a b
455+viewEncoder f = unsafeMkEncoder $ EncoderImpl
430456 { _encoderImpl_encode = view f
431457 , _encoderImpl_decode = pure . view (from f)
432458 }
433459
434460wrappedEncoder :: (Wrapped a, Applicative check, Applicative parse) => Encoder check parse (Unwrapped a) a
435−wrappedEncoder = isoEncoder $ from _Wrapped'
461+wrappedEncoder = viewEncoder $ from _Wrapped'
436462
437463unwrappedEncoder :: (Wrapped a, Applicative check, Applicative parse) => Encoder check parse a (Unwrapped a)
438−unwrappedEncoder = isoEncoder _Wrapped'
464+unwrappedEncoder = viewEncoder $ _Wrapped'
439465
440466maybeToEitherEncoder :: (Applicative check, Applicative parse) => Encoder check parse (Maybe a) (Either () a)
441467maybeToEitherEncoder = unsafeMkEncoder $ EncoderImpl
@@ -460,11 +486,11 @@ maybeEncoder f g = shadowEncoder f g . maybeToEitherEncoder
460486
461487-- | Encode a value by simply applying 'Just'
462488justEncoder :: (Applicative check, MonadError Text parse) => Encoder check parse a (Maybe a)
463−justEncoder = prismEncoder _Just
489+justEncoder = reviewEncoder _Just
464490
465491-- | Encode () to 'Nothing'.
466492nothingEncoder :: (Applicative check, MonadError Text parse) => Encoder check parse () (Maybe a)
467−nothingEncoder = prismEncoder _Nothing
493+nothingEncoder = reviewEncoder _Nothing
468494
469495someConstEncoder :: (Applicative check, Applicative parse) => Encoder check parse (Some (Const a)) a
470496someConstEncoder = unsafeMkEncoder $ EncoderImpl
@@ -529,11 +555,11 @@ pathComponentEncoder f = Encoder $ do
529555 unEncoder (pathComponentEncoderImpl (enum1Encoder (extractPathSegment . f)) f')
530556
531557pathComponentEncoderImpl :: forall check parse p. (Monad check, Monad parse)
532− => (Encoder check parse (Some p) (Maybe Text))
558+ => Encoder check parse (Some p) (Maybe Text)
533559 -> (forall a. p a -> Encoder Identity parse a PageName)
534560 -> Encoder check parse (R p) PageName
535−pathComponentEncoderImpl this rest =
536− chainEncoder (lensEncoder (\(_, b) a -> (a, b)) Prelude.fst consEncoder) this rest
561+pathComponentEncoderImpl =
562+ chainEncoder (lensEncoder (\(_, b) a -> (a, b)) Prelude.fst consEncoder)
537563
538564--NOTE: Naming convention in this module is to always talk about things in the *encoding* direction, never in the *decoding* direction
539565
@@ -749,11 +775,11 @@ prefixNonemptyTextEncoder p = Encoder $ pure $ EncoderImpl
749775 Just stripped -> pure stripped
750776 }
751777
752−unpackTextEncoder :: (Applicative check, Applicative parse) => Encoder check parse Text String
753−unpackTextEncoder = Encoder $ pure $ EncoderImpl
754− { _encoderImpl_encode = T.unpack
755− , _encoderImpl_decode = pure . T.pack
756− }
778+packTextEncoder :: (Applicative check, Applicative parse, IsText text) => Encoder check parse String text
779+packTextEncoder = isoEncoder packed
780+
781+unpackTextEncoder :: (Applicative check, Applicative parse, IsText text) => Encoder check parse text String
782+unpackTextEncoder = isoEncoder unpacked
757783
758784toListMapEncoder :: (Applicative check, Applicative parse, Ord k) => Encoder check parse (Map k v) [(k, v)]
759785toListMapEncoder = Encoder $ pure $ EncoderImpl
@@ -789,7 +815,7 @@ rPrism
789815 :: forall f f'
790816 . (forall a. Prism' (f a) (f' a))
791817 -> Prism' (R f) (R f')
792−rPrism p = dSumPrism p
818+rPrism = dSumPrism
793819
794820dSumPrism'
795821 :: forall f g a
@@ -801,7 +827,7 @@ dSumGEqPrism
801827 :: GEq f
802828 => f a
803829 -> Prism' (DSum f g) (g a)
804−dSumGEqPrism variant = dSumPrism' $ prism' (\Refl -> variant) (\x -> geq variant x)
830+dSumGEqPrism variant = dSumPrism' $ prism' (\Refl -> variant) (geq variant)
805831
806832-- | Given a 'tag :: f a', make a prism for 'R f'. This generalizes the usual
807833-- prisms for a sum type (the ones that 'mkPrisms' would make), just as 'R'
@@ -818,12 +844,19 @@ _R variant = dSumGEqPrism variant . iso runIdentity Identity
818844
819845-- | An encoder that only works on the items available via the prism. An error will be thrown in the parse monad
820846-- if the prism doesn't match.
821−prismEncoder :: (Applicative check, MonadError Text parse) => Prism' b a -> Encoder check parse a b
822−prismEncoder p = unsafeMkEncoder $ EncoderImpl
823− { _encoderImpl_encode = (^. re p)
847+--
848+-- Note that a 'Prism' from @a@ to @b@ will produce an 'Encoder' from @b@ to @a@
849+-- (i.e. 'reviewEncoder' is a contravariant functor from the category of prisms to the category of encoders),
850+-- just like 'review' produces a function @b -> a@. This is because 'Prism's extract values, in a way that might
851+-- fail, in their forward direction and inject values, in a way that cannot fail, in their reverse direction;
852+-- whereas 'Encoder's encode, which cannot fail, in their forward direction, and decode, which can fail, in their
853+-- reverse direction. In short @reviewEncoder (f . g) = reviewEncoder g . reviewEncoder f@.
854+reviewEncoder :: (Applicative check, MonadError Text parse) => Prism' b a -> Encoder check parse a b
855+reviewEncoder p = unsafeMkEncoder $ EncoderImpl
856+ { _encoderImpl_encode = review p
824857 , _encoderImpl_decode = \r -> case r ^? p of
825858 Just a -> pure a
826− Nothing -> throwError "prismEncoder: value is not present in the prism"
859+ Nothing -> throwError "reviewEncoder: value is not present in the prism"
827860 }
828861
829862-- | A URL path and query string, in which trailing slashes don't matter in the path
@@ -881,7 +914,7 @@ instance (GCompare br, GCompare fr) => GCompare (FullRoute br fr) where
881914 gcompare (FullRoute_Frontend x) (FullRoute_Frontend y) = gcompare x y
882915
883916instance (UniverseSome br, UniverseSome fr) => UniverseSome (FullRoute br fr) where
884− universeSome = [Some (FullRoute_Backend x) | Some x <- universeSome]
917+ universeSome = [Some (FullRoute_Backend x) | Some x <- universeSome]
885918 ++ [Some (FullRoute_Frontend x) | Some x <- universeSome]
886919
887920-- | Build the typical top level application route encoder from a route for handling 404's,
@@ -961,9 +994,9 @@ obeliskRouteSegment r appRouteSegment = case r of
961994-- be combined with other such segment encoders before 'pathComponentEncoder' turns it into a proper 'Encoder'.
962995resourceRouteSegment :: (MonadError Text check, MonadError Text parse) => ResourceRoute a -> SegmentResult check parse a
963996resourceRouteSegment = \case
964− ResourceRoute_Static -> PathSegment "static" $ pathOnlyEncoderIgnoringQuery
965− ResourceRoute_Ghcjs -> PathSegment "ghcjs" $ pathOnlyEncoder
966− ResourceRoute_JSaddleWarp -> PathSegment "jsaddle" $ jsaddleWarpRouteEncoder
997+ ResourceRoute_Static -> PathSegment "static" pathOnlyEncoderIgnoringQuery
998+ ResourceRoute_Ghcjs -> PathSegment "ghcjs" pathOnlyEncoder
999+ ResourceRoute_JSaddleWarp -> PathSegment "jsaddle" jsaddleWarpRouteEncoder
9671000 ResourceRoute_Version -> PathSegment "version" $ unitEncoder mempty
9681001
9691002data JSaddleWarpRoute :: * -> * where
@@ -975,7 +1008,7 @@ jsaddleWarpRouteEncoder :: (MonadError Text check, MonadError Text parse) => Enc
9751008jsaddleWarpRouteEncoder = pathComponentEncoder $ \case
9761009 JSaddleWarpRoute_JavaScript -> PathSegment "jsaddle.js" $ unitEncoder mempty
9771010 JSaddleWarpRoute_WebSocket -> PathEnd $ unitEncoder mempty
978− JSaddleWarpRoute_Sync -> PathSegment "sync" $ pathOnlyEncoder
1011+ JSaddleWarpRoute_Sync -> PathSegment "sync" pathOnlyEncoder
9791012
9801013instance GShow appRoute => GShow (ObeliskRoute appRoute) where
9811014 gshowsPrec prec = \case
@@ -1006,8 +1039,8 @@ someSumEncoder = Encoder $ pure $ EncoderImpl
10061039
10071040data Void1 :: * -> * where {}
10081041
1009−instance Universe (Some Void1) where
1010− universe = []
1042+instance UniverseSome Void1 where
1043+ universeSome = []
10111044
10121045void1Encoder :: (Applicative check, MonadError Text parse) => Encoder check parse (Some Void1) a
10131046void1Encoder = Encoder $ pure $ EncoderImpl
@@ -1019,17 +1052,6 @@ void1Encoder = Encoder $ pure $ EncoderImpl
10191052instance GShow Void1 where
10201053 gshowsPrec _ = \case {}
10211054
1022−concat <$> mapM deriveRouteComponent
1023− [ ''ResourceRoute
1024− , ''JSaddleWarpRoute
1025− , ''IndexOnlyRoute
1026− ]
1027−
1028−makePrisms ''ObeliskRoute
1029−makePrisms ''FullRoute
1030−deriveGEq ''Void1
1031−deriveGCompare ''Void1
1032−
10331055-- | Given a backend route and a checked route encoder, render the route (path
10341056-- and query string). See 'checkEncoder' for how to produce a checked encoder.
10351057renderBackendRoute
@@ -1062,11 +1084,11 @@ readShowEncoder :: (MonadError Text parse, Read a, Show a, Applicative check) =>
10621084readShowEncoder = singlePathSegmentEncoder . unsafeTshowEncoder
10631085
10641086integralEncoder :: (MonadError Text parse, Applicative check, Integral a) => Encoder check parse a Integer
1065−integralEncoder = prismEncoder (Numeric.Lens.integral)
1087+integralEncoder = reviewEncoder Numeric.Lens.integral
10661088
10671089pathSegmentEncoder :: (MonadError Text parse, Applicative check, Cons as as a a) =>
10681090 Encoder check parse (a, (as, b)) (as, b)
1069−pathSegmentEncoder = first (prismEncoder _Cons) . disassociate
1091+pathSegmentEncoder = first (reviewEncoder _Cons) . disassociate
10701092
10711093newtype Decoder check parse b a = Decoder { toEncoder :: Encoder check parse a b }
10721094
@@ -1137,7 +1159,7 @@ pathFieldEncoder fieldEncoder = unsafeEncoder $ do
11371159 fieldEncoderPure f = toEncoder (DMap.findWithDefault (error "bad") f fieldEncoderPureMap)
11381160 pure $ EncoderImpl
11391161 { _encoderImpl_encode = \(x, rest) -> execWriter $ do
1140− _ <- traverseWithField (\f x_i -> tell (pure $ encode (fieldEncoderPure f) x_i) *> pure x_i) x
1162+ _ <- traverseWithField (\f x_i -> tell (pure $ encode (fieldEncoderPure f) x_i) $> x_i) x
11411163 tell rest
11421164 , _encoderImpl_decode = State.runStateT $ tabulateFieldsA $ \f -> State.get >>= \case
11431165 [] -> throwError $ T.pack "not enough path components"
@@ -1173,3 +1195,34 @@ byteStringsToPageName p q =
11731195 in decode pageNameEncoder' (T.unpack (T.decodeUtf8 p), T.unpack (T.decodeUtf8 q))
11741196
11751197--TODO: decodeURIComponent as appropriate
1198+
1199+
1200+{-# DEPRECATED isoEncoder "Instead of 'isoEncoder f', use 'viewEncoder f'" #-}
1201+-- | Given a valid 'Iso' from lens, construct an 'Encoder'
1202+isoEncoder :: (Applicative check, Applicative parse) => Iso' a b -> Encoder check parse a b
1203+isoEncoder = viewEncoder
1204+
1205+{-# DEPRECATED prismEncoder "Instead of 'prismEncoder f', use 'reviewEncoder f'" #-}
1206+-- | An encoder that only works on the items available via the prism. An error will be thrown in the parse monad
1207+-- if the prism doesn't match.
1208+--
1209+-- Note that a 'Prism' from @a@ to @b@ will produce an 'Encoder' from @b@ to @a@
1210+-- (i.e. 'prismEncoder' is a contravariant functor from the category of prisms to the category of encoders),
1211+-- just like 'review' produces a function @b -> a@. This is because 'Prism's extract values, in a way that might
1212+-- fail, in their forward direction and inject values, in a way that cannot fail, in their reverse direction;
1213+-- whereas 'Encoder's encode, which cannot fail, in their forward direction, and decode, which can fail, in their
1214+-- reverse direction. In short @prismEncoder (f . g) = prismEncoder g . prismEncoder f@.
1215+prismEncoder :: (Applicative check, MonadError Text parse) => Prism' b a -> Encoder check parse a b
1216+prismEncoder = reviewEncoder
1217+
1218+
1219+concat <$> mapM deriveRouteComponent
1220+ [ ''ResourceRoute
1221+ , ''JSaddleWarpRoute
1222+ , ''IndexOnlyRoute
1223+ ]
1224+
1225+makePrisms ''ObeliskRoute
1226+makePrisms ''FullRoute
1227+deriveGEq ''Void1
1228+deriveGCompare ''Void1
lib/route/src/Obelisk/Route/Frontend.hs+121−44
@@ -1,28 +1,24 @@
1−{-# LANGUAGE ApplicativeDo #-}
21{-# LANGUAGE CPP #-}
3−{-# LANGUAGE RecursiveDo #-}
4−{-# LANGUAGE StandaloneDeriving #-}
2+{-# LANGUAGE ApplicativeDo #-}
53{-# LANGUAGE ConstraintKinds #-}
4+{-# LANGUAGE DataKinds #-}
65{-# LANGUAGE DefaultSignatures #-}
76{-# LANGUAGE FlexibleContexts #-}
87{-# LANGUAGE FlexibleInstances #-}
8+{-# LANGUAGE FunctionalDependencies #-}
99{-# LANGUAGE GADTs #-}
10−{-# LANGUAGE KindSignatures #-}
10+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
1111{-# LANGUAGE LambdaCase #-}
12−{-# LANGUAGE MultiParamTypeClasses #-}
1312{-# LANGUAGE OverloadedStrings #-}
1413{-# LANGUAGE PatternSynonyms #-}
1514{-# LANGUAGE RankNTypes #-}
15+{-# LANGUAGE RecursiveDo #-}
1616{-# LANGUAGE ScopedTypeVariables #-}
17−{-# LANGUAGE TemplateHaskell #-}
18−{-# LANGUAGE TupleSections #-}
17+{-# LANGUAGE StandaloneDeriving #-}
1918{-# LANGUAGE TypeFamilies #-}
2019{-# LANGUAGE TypeOperators #-}
21−{-# LANGUAGE ViewPatterns #-}
22−{-# LANGUAGE GeneralizedNewtypeDeriving #-}
2320{-# LANGUAGE UndecidableInstances #-}
24−{-# LANGUAGE DataKinds #-}
25−{-# LANGUAGE FunctionalDependencies #-}
21+{-# LANGUAGE ViewPatterns #-}
2622
2723module Obelisk.Route.Frontend
2824 ( module Obelisk.Route
@@ -61,47 +57,42 @@ module Obelisk.Route.Frontend
6157
6258import Prelude hiding ((.), id)
6359
64−import Obelisk.Route
65−
6660import Control.Category (Category (..), (.))
67−import Control.Category.Cartesian
61+import Control.Category.Cartesian ((&&&))
6862import Control.Lens hiding (Bifunctor, bimap, universe, element)
6963import Control.Monad ((<=<))
7064import Control.Monad.Fix
65+import Control.Monad.Morph
7166import Control.Monad.Primitive
7267import Control.Monad.Reader
7368import Control.Monad.Ref
7469import Control.Monad.Trans.Control
7570import Data.Coerce
7671import Data.Dependent.Sum (DSum (..))
72+import Data.Functor.Compose
73+import Data.Functor.Misc
7774import Data.GADT.Compare
75+import qualified Data.List as L
7876import Data.Map (Map)
77+import Data.Maybe (fromMaybe)
7978import Data.Monoid
8079import Data.Proxy
8180import Data.Text (Text)
8281import qualified Data.Text as T
83−import Data.Functor.Compose
84−import Data.Functor.Misc
85−import Reflex.Class
86−import Reflex.Host.Class
87−import Reflex.PostBuild.Class
88−import Reflex.TriggerEvent.Class
89−import Reflex.PerformEvent.Class
90−import Reflex.EventWriter.Class
91−import Reflex.EventWriter.Base
92−import Reflex.Dynamic
93−import Reflex.Dom.Builder.Class
9482import Data.Type.Coercion
95−import Language.Javascript.JSaddle --TODO: Get rid of this - other platforms can also be routed
96−import Reflex.Dom.Core
83+import qualified GHCJS.DOM as DOM
9784import qualified GHCJS.DOM.Types as DOM
85+import qualified GHCJS.DOM.Window as Window
86+import Language.Javascript.JSaddle (MonadJSM, jsNull, liftJSM) --TODO: Get rid of this - other platforms can also be routed
9887import Network.URI
99−import Data.Maybe (fromMaybe)
100−import qualified Data.List as L
101−
88+import Reflex.Class
89+import Reflex.Dom.Builder.Class
90+import Reflex.Dom.Core
91+import Reflex.Host.Class
10292import Unsafe.Coerce
10393
10494import Obelisk.Configs
95+import Obelisk.Route
10596
10697infixr 5 :~
10798pattern (:~) :: Reflex t => f a -> Dynamic t a -> DSum f (Compose (Dynamic t) Identity)
@@ -118,7 +109,23 @@ instance Monad m => Routed t r (RoutedT t r m) where
118109instance (Monad m, Routed t r m) => Routed t r (ReaderT r' m)
119110
120111newtype RoutedT t r m a = RoutedT { unRoutedT :: ReaderT (Dynamic t r) m a }
121− deriving (Functor, Applicative, Monad, MonadFix, MonadTrans, NotReady t, MonadHold t, MonadSample t, PostBuild t, TriggerEvent t, MonadIO, MonadReflexCreateTrigger t, HasDocument, DomRenderHook t)
112+ deriving
113+ ( Functor
114+ , Applicative
115+ , Monad
116+ , MonadFix
117+ , MonadTrans
118+ , MFunctor
119+ , NotReady t
120+ , MonadHold t
121+ , MonadSample t
122+ , PostBuild t
123+ , TriggerEvent t
124+ , MonadIO
125+ , MonadReflexCreateTrigger t
126+ , HasDocument
127+ , DomRenderHook t
128+ )
122129
123130instance MonadReader r' m => MonadReader r' (RoutedT t r m) where
124131 ask = lift ask
@@ -194,6 +201,10 @@ instance (Monad m, RouteToUrl r m) => RouteToUrl r (EventWriterT t w m)
194201
195202instance (Monad m, SetRoute t r m) => SetRoute t r (EventWriterT t w m)
196203
204+instance (Monad m, RouteToUrl r m) => RouteToUrl r (DynamicWriterT t w m)
205+
206+instance (Monad m, SetRoute t r m) => SetRoute t r (DynamicWriterT t w m)
207+
197208runRoutedT :: RoutedT t r m a -> Dynamic t r -> m a
198209runRoutedT = runReaderT . unRoutedT
199210
@@ -258,7 +269,7 @@ dynamicIdentityCoercion = unsafeCoerce (Coercion :: Coercion (Identity ()) ()) -
258269factorRouted :: (Reflex t, MonadFix m, MonadHold t m, GEq f) => RoutedT t (DSum f (Dynamic t)) m a -> RoutedT t (DSum f Identity) m a
259270factorRouted r = RoutedT $ ReaderT $ \d -> do
260271 d' <- factorDyn d
261− runRoutedT r $ (coerceWith (dynamicCoercion $ dsumValueCoercion dynamicIdentityCoercion) d')
272+ runRoutedT r $ coerceWith (dynamicCoercion $ dsumValueCoercion dynamicIdentityCoercion) d'
262273
263274maybeRouted :: (Reflex t, MonadFix m, MonadHold t m) => RoutedT t (Maybe (Dynamic t a)) m b -> RoutedT t (Maybe a) m b
264275maybeRouted r = RoutedT $ ReaderT $ \d -> do
@@ -466,7 +477,7 @@ runRouteViewT
466477 , MonadJSM (Performable m)
467478 , MonadFix m
468479 )
469− => (Encoder Identity Identity r PageName)
480+ => Encoder Identity Identity r PageName
470481 --TODO: Get rid of the switchover and useHash arguments
471482 -- useHash can probably be baked into the encoder
472483 -> Event t () -- ^ Switchover event, nothing is done until this event fires. Used to prevent incorrect DOM expectations at hydration switchover time
@@ -511,59 +522,125 @@ runRouteViewT routeEncoder switchover useHash a = do
511522-- | A link widget that, when clicked, sets the route to the provided route. In non-javascript
512523-- contexts, this widget falls back to using @href@s to control navigation
513524routeLink
514− :: forall t m a route.
525+ :: forall t m a route js.
515526 ( DomBuilder t m
516527 , RouteToUrl route m
517528 , SetRoute t route m
529+ , Prerender js t m
518530 )
519531 => route -- ^ Target route
520532 -> m a -- ^ Child widget
521533 -> m a
522534routeLink r w = do
535+ (e, a) <- routeLinkImpl r w
536+ scrollToTop e
537+ return a
538+
539+-- | Raw implementation of 'routeLink'. Does not scroll to the top of the page on clicks.
540+routeLinkImpl
541+ :: forall t m a route.
542+ ( DomBuilder t m
543+ , RouteToUrl route m
544+ , SetRoute t route m
545+ )
546+ => route -- ^ Target route
547+ -> m a -- ^ Child widget
548+ -> m (Event t (), a)
549+routeLinkImpl r w = do
523550 enc <- askRouteToUrl
524551 let cfg = (def :: ElementConfig EventResult t (DomBuilderSpace m))
525552 & elementConfig_eventSpec %~ addEventSpecFlags (Proxy :: Proxy (DomBuilderSpace m)) Click (\_ -> preventDefault)
526553 & elementConfig_initialAttributes .~ "href" =: enc r
527554 (e, a) <- element "a" cfg w
528555 setRoute $ r <$ domEvent Click e
529− return a
556+ return (domEvent Click e, a)
557+
558+scrollToTop :: forall m t js. (Prerender js t m, Monad m) => Event t () -> m ()
559+scrollToTop e = prerender_ blank $ performEvent_ $ ffor e $ \_ -> liftJSM $ DOM.currentWindow >>= \case
560+ Nothing -> pure ()
561+ Just win -> Window.scrollTo win 0 0
530562
531563-- | Like 'routeLinkDynAttr' but without custom attributes.
532564dynRouteLink
533− :: forall t m a route.
565+ :: forall t m a route js.
534566 ( DomBuilder t m
535567 , PostBuild t m
536− , RouteToUrl (R route) m
537− , SetRoute t (R route) m
568+ , RouteToUrl route m
569+ , SetRoute t route m
570+ , Prerender js t m
538571 )
539− => Dynamic t (R route) -- ^ Target route
540− -> m a -- ^ Child widget of the @a@ element
572+ => Dynamic t route -- ^ Target route
573+ -> m a -- ^ Child widget
541574 -> m a
542−dynRouteLink = routeLinkDynAttr mempty
575+dynRouteLink r w = do
576+ (e, a) <- dynRouteLinkImpl r w
577+ scrollToTop e
578+ return a
579+
580+-- | Raw implementation of 'dynRouteLink'. Does not scroll to the top of the page on clicks.
581+dynRouteLinkImpl
582+ :: forall t m a route.
583+ ( DomBuilder t m
584+ , PostBuild t m
585+ , RouteToUrl route m
586+ , SetRoute t route m
587+ )
588+ => Dynamic t route -- ^ Target route
589+ -> m a -- ^ Child widget
590+ -> m (Event t (), a)
591+dynRouteLinkImpl dr w = do
592+ enc <- askRouteToUrl
593+ er <- dynamicAttributesToModifyAttributes $ ("href" =:) . enc <$> dr
594+ let cfg = (def :: ElementConfig EventResult t (DomBuilderSpace m))
595+ & elementConfig_eventSpec %~ addEventSpecFlags (Proxy :: Proxy (DomBuilderSpace m)) Click (\_ -> preventDefault)
596+ & elementConfig_modifyAttributes .~ er
597+ (e, a) <- element "a" cfg w
598+ let clk = domEvent Click e
599+ setRoute $ tag (current dr) clk
600+ return (clk, a)
543601
544602-- | An @a@-tag link widget that, when clicked, sets the route to current value of the
545603-- provided dynamic route. In non-JavaScript contexts the value of the dynamic post
546604-- build is used so the link still works like 'routeLink'.
547605routeLinkDynAttr
548− :: forall t m a route.
606+ :: forall t m a route js.
549607 ( DomBuilder t m
550608 , PostBuild t m
551609 , RouteToUrl (R route) m
552610 , SetRoute t (R route) m
611+ , Prerender js t m
553612 )
554613 => Dynamic t (Map AttributeName Text) -- ^ Attributes for @a@ element. Note that if @href@ is present it will be ignored
555614 -> Dynamic t (R route) -- ^ Target route
556615 -> m a -- ^ Child widget of the @a@ element
557616 -> m a
558617routeLinkDynAttr dAttr dr w = do
618+ (e, a) <- routeLinkDynAttrImpl dAttr dr w
619+ scrollToTop e
620+ return a
621+
622+-- | Raw implementation of 'routeLinkDynAttr'. Does not scroll to the top of the page on clicks.
623+routeLinkDynAttrImpl
624+ :: forall t m a route.
625+ ( DomBuilder t m
626+ , PostBuild t m
627+ , RouteToUrl (R route) m
628+ , SetRoute t (R route) m
629+ )
630+ => Dynamic t (Map AttributeName Text) -- ^ Attributes for @a@ element. Note that if @href@ is present it will be ignored
631+ -> Dynamic t (R route) -- ^ Target route
632+ -> m a -- ^ Child widget of the @a@ element
633+ -> m (Event t (), a)
634+routeLinkDynAttrImpl dAttr dr w = do
559635 enc <- askRouteToUrl
560636 er <- dynamicAttributesToModifyAttributes $ zipDynWith (<>) (("href" =:) . enc <$> dr) dAttr
561637 let cfg = (def :: ElementConfig EventResult t (DomBuilderSpace m))
562638 & elementConfig_eventSpec %~ addEventSpecFlags (Proxy :: Proxy (DomBuilderSpace m)) Click (\_ -> preventDefault)
563639 & elementConfig_modifyAttributes .~ er
564640 (e, a) <- element "a" cfg w
565− setRoute $ tag (current dr) $ domEvent Click e
566− return a
641+ let clk = domEvent Click e
642+ setRoute $ tag (current dr) clk
643+ return (clk, a)
567644
568645-- On ios due to sandboxing when loading the page from a file adapt the
569646-- path to be based on the hash.
lib/run/obelisk-run.cabal+2−2
@@ -33,7 +33,7 @@ library
3333 , process
3434 , ref-tf
3535 , reflex
36− , reflex-dom
36+ , reflex-dom-core
3737 , snap-core
3838 , streaming-commons
3939 , text
@@ -47,7 +47,7 @@ library
4747 , websockets
4848 exposed-modules:
4949 Obelisk.Run
50− ghc-options: -Wall -fwarn-redundant-constraints
50+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
5151 if os(linux)
5252 cpp-options: -DIPROUTE_SUPPORTED
5353 build-depends: which
lib/run/src/Obelisk/Run.hs+15−10
@@ -79,7 +79,7 @@ import qualified System.Which
7979run
8080 :: Int -- ^ Port to run the backend
8181 -> ([Text] -> Snap ()) -- ^ Static asset handler
82− -> Backend fullRoute frontendRoute -- ^ Backend
82+ -> Backend backendRoute frontendRoute -- ^ Backend
8383 -> Frontend (R frontendRoute) -- ^ Frontend
8484 -> IO ()
8585run port serveStaticAsset backend frontend = do
@@ -90,14 +90,18 @@ run port serveStaticAsset backend frontend = do
9090 Left e -> hPutStrLn stderr $ "backend error:\n" <> T.unpack e
9191 Right validFullEncoder -> do
9292 publicConfigs <- getPublicConfigs
93− backendTid <- forkIO $ handle handleBackendErr $ withArgs ["--quiet", "--port", show port] $ do
94− _backend_run backend $ \serveRoute -> do
95− runSnapWithCommandLineArgs $ do
93+ backendTid <- forkIO $ handle handleBackendErr $ withArgs ["--quiet", "--port", show port] $
94+ _backend_run backend $ \serveRoute ->
95+ runSnapWithCommandLineArgs $
9696 getRouteWith validFullEncoder >>= \case
9797 Identity r -> case r of
9898 FullRoute_Backend backendRoute :/ a -> serveRoute $ backendRoute :/ a
9999 FullRoute_Frontend obeliskRoute :/ a ->
100− serveDefaultObeliskApp (mkRouteToUrl validFullEncoder) serveStaticAsset frontend publicConfigs $ obeliskRoute :/ a
100+ serveDefaultObeliskApp appRouteToUrl (($ allJsUrl) <$> defaultGhcjsWidgets) serveStaticAsset frontend publicConfigs $ obeliskRoute :/ a
101+ where
102+ appRouteToUrl (k :/ v) = renderObeliskRoute validFullEncoder (FullRoute_Frontend (ObeliskRoute_App k) :/ v)
103+ allJsUrl = renderAllJsPath validFullEncoder
104+
101105 let conf = defRunConfig { _runConfig_redirectPort = port }
102106 runWidget conf publicConfigs frontend validFullEncoder `finally` killThread backendTid
103107
@@ -129,7 +133,7 @@ runWidget conf configs frontend validFullEncoder = do
129133 putStrLn $ "Frontend running on " <> T.unpack (URI.render uri)
130134 settings = setBeforeMainLoop beforeMainLoop (setPort port (setTimeout 3600 defaultSettings))
131135 -- Providing TLS here will also incidentally provide it to proxied requests to the backend.
132− prepareRunner = case (uri ^? uriScheme . _Just . unRText) of
136+ prepareRunner = case uri ^? uriScheme . _Just . unRText of
133137 Just "https" -> do
134138 -- Generate a private key and self-signed certificate for TLS
135139 privateKey <- RSA.generateRSAKey' 2048 3
@@ -140,9 +144,9 @@ runWidget conf configs frontend validFullEncoder = do
140144
141145 cert <- X509.newX509 >>= X509Request.makeX509FromReq certRequest
142146 _ <- X509.setPublicKey cert privateKey
143− now <- getCurrentTime
144− _ <- X509.setNotBefore cert $ addUTCTime (-1) now
145− _ <- X509.setNotAfter cert $ addUTCTime (365 * 24 * 60 * 60) now
147+ timenow <- getCurrentTime
148+ _ <- X509.setNotBefore cert $ addUTCTime (-1) timenow
149+ _ <- X509.setNotAfter cert $ addUTCTime (365 * 24 * 60 * 60) timenow
146150 _ <- X509.signX509 cert privateKey Nothing
147151
148152 certByteString <- BSUTF8.fromString <$> PEM.writeX509 cert
@@ -189,7 +193,8 @@ obeliskApp configs opts frontend validFullEncoder uri backend = do
189193 }
190194 FullRoute_Frontend (ObeliskRoute_App appRouteComponent) :/ appRouteRest -> do
191195 let cookies = maybe [] parseCookies $ lookup (fromString "Cookie") (W.requestHeaders req)
192− html <- renderJsaddleFrontend configs cookies (mkRouteToUrl validFullEncoder) (appRouteComponent :/ appRouteRest) frontend
196+ routeToUrl (k :/ v) = renderObeliskRoute validFullEncoder $ FullRoute_Frontend (ObeliskRoute_App k) :/ v
197+ html <- renderJsaddleFrontend configs cookies routeToUrl (appRouteComponent :/ appRouteRest) frontend
193198 sendResponse $ W.responseLBS H.status200 [("Content-Type", staticRenderContentType)] $ BSLC.fromStrict html
194199 _ -> backend req sendResponse
195200
lib/selftest/obelisk-selftest.cabal+6−3
@@ -9,18 +9,21 @@ library
99 hs-source-dirs: src
1010 build-depends:
1111 base
12+ , bytestring
13+ , aeson
1214 , containers
1315 , directory
16+ , filepath
1417 , hspec
1518 , http-client
1619 , http-types
1720 , HUnit
18− , obelisk-cliapp
21+ , network
1922 , obelisk-executable-config-lookup
2023 , obelisk-run
24+ , which
2125 , process
22− , network
23− , shelly
26+ , shelly >= 1.9.0
2427 , temporary
2528 , text
2629 exposed-modules:
lib/selftest/src/Obelisk/SelfTest.hs+497−197
@@ -1,38 +1,49 @@
1+{-# LANGUAGE DoAndIfThenElse #-}
12{-# LANGUAGE EmptyCase #-}
23{-# LANGUAGE LambdaCase #-}
34{-# LANGUAGE OverloadedStrings #-}
45{-# LANGUAGE PatternGuards #-}
56{-# LANGUAGE ScopedTypeVariables #-}
7+{-# LANGUAGE TemplateHaskell #-}
8+{-# LANGUAGE TypeApplications #-}
9+{-# LANGUAGE ViewPatterns #-}
610module Obelisk.SelfTest where
711
8−import Control.Exception (bracket, throw)
12+import Control.Concurrent (threadDelay)
13+import Control.Exception (bracket, throw, try)
914import Control.Monad
1015import Control.Monad.IO.Class
16+import qualified Data.Aeson as Aeson
17+import qualified Data.Aeson.Types as Aeson
1118import Data.Bool (bool)
19+import qualified Data.ByteString.Lazy as LBS
20+import Data.Foldable (for_)
1221import Data.Function (fix)
13−import Data.Semigroup (Semigroup, (<>))
22+import Data.List (isInfixOf)
23+import qualified Data.Map as Map
24+import Data.Semigroup ((<>))
1425import qualified Data.Set as Set
1526import Data.String
1627import Data.Text (Text)
17−import Data.Void
1828import qualified Data.Text as T
29+import qualified Data.Text.Encoding as T
1930import qualified Data.Text.IO as T
2031import qualified Network.HTTP.Client as HTTP
2132import qualified Network.HTTP.Types as HTTP
2233import qualified Network.Socket as Socket
2334import Shelly
24−import System.Directory (withCurrentDirectory, getDirectoryContents)
35+import System.Directory (getCurrentDirectory, withCurrentDirectory, getDirectoryContents)
2536import System.Environment
2637import System.Exit (ExitCode (..))
27−import System.Info
28−import System.IO (Handle, hClose)
38+import System.FilePath (addTrailingPathSeparator)
39+import qualified System.Info
40+import System.IO (Handle, hClose, hIsEOF, hGetContents)
2941import System.IO.Temp
30−import System.Process (readProcessWithExitCode, CreateProcess(cwd), readCreateProcessWithExitCode, proc)
42+import System.Process (readProcessWithExitCode)
43+import System.Which (staticWhich)
3144import Test.Hspec
3245import Test.HUnit.Base
3346
34−import Obelisk.CliApp hiding (runCli, readCreateProcessWithExitCode)
35−import qualified Obelisk.CliApp as CliApp
3647import Obelisk.ExecutableConfig.Lookup (getConfigs)
3748import Obelisk.Run (getConfigRoute)
3849
@@ -42,24 +53,53 @@ data ObRunState
4253 | ObRunState_BackendStarted
4354 deriving (Eq, Show)
4455
45−doubleQuotes :: (IsString a, Semigroup a) => a -> a
46−doubleQuotes s = "\"" <> s <> "\""
56+cpPath :: FilePath
57+cpPath = $(staticWhich "cp")
58+
59+cabalPath :: FilePath
60+cabalPath = $(staticWhich "cabal")
61+
62+gitPath :: FilePath
63+gitPath = $(staticWhich "git")
64+
65+chownPath :: FilePath
66+chownPath = $(staticWhich "chown")
67+
68+chmodPath :: FilePath
69+chmodPath = $(staticWhich "chmod")
70+
71+whoamiPath :: FilePath
72+whoamiPath = $(staticWhich "whoami")
73+
74+nixInstantiatePath :: FilePath
75+nixInstantiatePath = $(staticWhich "nix-instantiate")
76+
77+nixBuildPath :: FilePath
78+nixBuildPath = $(staticWhich "nix-build")
79+
80+nixPrefetchGitPath :: FilePath
81+nixPrefetchGitPath = $(staticWhich "nix-prefetch-git")
82+
83+lnPath :: FilePath
84+lnPath = $(staticWhich "ln")
85+
86+rmPath :: FilePath
87+rmPath = $(staticWhich "rm")
88+
89+rsyncPath :: FilePath
90+rsyncPath = $(staticWhich "rsync")
91+
92+gitUserConfig :: [Text]
93+gitUserConfig = ["-c", "user.name=Obelisk Selftest", "-c", "user.email=noreply@example.com"]
4794
4895commit :: Text -> Sh ()
49−commit msg = void $ run "git"
50− [ "commit"
96+commit msg = void $ run gitPath $ gitUserConfig <> [ "commit"
5197 , "--no-gpg-sign"
5298 , "--allow-empty"
5399 , "-m"
54− , doubleQuotes msg
100+ , msg
55101 ]
56102
57−-- TODO replace Void and stop using loosely typed synchronous exceptions
58−runCli :: MonadIO m => CliT Void IO a -> m a
59−runCli f = liftIO $ do
60− c <- newCliConfig Notice False False (\case {})
61− CliApp.runCli c f
62−
63103tshow :: Show a => a -> Text
64104tshow = T.pack . show
65105
@@ -67,210 +107,345 @@ tshow = T.pack . show
67107shellyOb :: MonadIO m => (Sh a -> Sh a) -> Sh a -> m a
68108shellyOb f obTest = shelly $ f obTest
69109
110+-- Set "ob" in a single place so it can be replaced with a
111+-- link to obelisk in the nix store in the future,
112+-- and avoid PATH hacking before calling this script.
113+ob :: FilePath
114+ob = "ob"
115+
116+augmentWithVerbosity :: (String -> [Text] -> a) -> String -> Bool -> [Text] -> a
117+augmentWithVerbosity runner executable isVerbose args = runner executable $ (if isVerbose then ("-v" :) else id) args
118+
119+isolatedGitShell :: Bool -> FilePath -> (([Text] -> Sh Text) -> Sh a) -> IO a
120+isolatedGitShell isVerbose dir f = shelly $ bool silently verbosely isVerbose $ do
121+ setenv "HOME" "/dev/null"
122+ setenv "GIT_CONFIG_NOSYSTEM" "1"
123+ _ <- git ["init"]
124+ _ <- git ["config", "user.name", "SelfTest"]
125+ _ <- git ["config", "user.email", "self@test"]
126+ f git
127+ where
128+ git args = run gitPath $ ["-C", toTextIgnore dir] <> args
129+
130+-- | Copies a git repo to a new location and "resets" the git history to include
131+-- exactly one commit with all files added. It then restricts writing and reading
132+-- for group and user to make the repo ideal for being a valid git remote for thunks.
133+--
134+-- Using this allows dirty repos to be used as git remotes during the test since 'git clone'ing
135+-- a dirty repo will not include the uncommitted changes.
136+copyForGitRemote :: Bool -> FilePath -> FilePath -> IO ()
137+copyForGitRemote isVerbose origDir copyDir = isolatedGitShell isVerbose copyDir $ \git -> do
138+ run_ rsyncPath
139+ [ "-r", "--no-perms", "--no-owner", "--no-group", "--exclude", ".git"
140+ , toTextIgnore (addTrailingPathSeparator origDir), toTextIgnore copyDir
141+ ]
142+ _ <- git ["add", "--all"]
143+ _ <- git ["commit", "-m", "Copy repo"]
144+ run_ chmodPath ["-R", "u-w,g-rw,o-rw", toTextIgnore copyDir] -- Freeze this state
145+
70146main :: IO ()
71147main = do
72148 -- Note: you can pass hspec arguments as well, eg: `-m <pattern>`
73149 isVerbose <- elem "-v" <$> getArgs
74150 unless isVerbose $
75151 putStrLn "Tests may take longer to run if there are unbuilt derivations: use -v for verbose output"
76− let verbosity = bool silently verbosely isVerbose
77− nixBuild args = run "nix-build" ("--no-out-link" : args)
78− obeliskImpl <- fromString <$> getEnv "OBELISK_IMPL"
152+
153+ obeliskImplDirtyReadOnly <- getCurrentDirectory
79154 httpManager <- HTTP.newManager HTTP.defaultManagerSettings
80− [p0, p1, p2, p3] <- liftIO $ getFreePorts 4
81− withSystemTempDirectory "initCache" $ \initCache -> do
82− -- Setup the ob init cache
83− void . shellyOb verbosity $ chdir (fromString initCache) $ do
84− run_ "ob" ["init"]
85− run_ "git" ["init"]
86− hspec $ parallel $ do
87− let shelly_ = void . shellyOb verbosity
88−
89− inTmp :: (Shelly.FilePath -> Sh a) -> IO ()
90− inTmp f = withTmp (chdir <*> f)
91−
92− withTmp f = shelly_ . withSystemTempDirectory "test" $ f . fromString
93−
94− inTmpObInit f = inTmp $ \dir -> do
95− run_ "cp" ["-a", fromString $ initCache <> "/.", toTextIgnore dir]
96− f dir
97−
98− assertRevEQ a b = liftIO . assertEqual "" "" =<< diff a b
99− assertRevNE a b = liftIO . assertBool "" . (/= "") =<< diff a b
100−
101− revParseHead = T.strip <$> run "git" ["rev-parse", "HEAD"]
102−
103− commitAll = do
104− run_ "git" ["add", "."]
105− commit "checkpoint"
106− revParseHead
107−
108− thunk = ".obelisk/impl"
109− update = run "ob" ["thunk", "update", thunk] >> commitAll
110− pack = run "ob" ["thunk", "pack", thunk] >> commitAll
111− unpack = run "ob" ["thunk", "unpack", thunk] >> commitAll
112−
113− diff a b = run "git" ["diff", a, b]
114−
115− describe "ob init" $ parallel $ do
116− it "works with default impl" $ inTmp $ \_ -> run "ob" ["init"]
117− it "works with master branch impl" $ inTmp $ \_ -> run "ob" ["init", "--branch", "master"]
118− it "works with symlink" $ inTmp $ \_ -> run "ob" ["init", "--symlink", obeliskImpl]
119− it "doesn't silently overwrite existing files" $ withSystemTempDirectory "ob-init" $ \dir -> do
120− let p force = (proc "ob" $ "--no-handoff" : "init" : ["--force"|force]) { cwd = Just dir }
121− (ExitSuccess, _, _) <- readCreateProcessWithExitCode (p False) ""
122− (ExitFailure _, _, _) <- readCreateProcessWithExitCode (p False) ""
123− (ExitSuccess, _, _) <- readCreateProcessWithExitCode (p True) ""
124− pure ()
125−
126− it "doesn't create anything when given an invalid impl" $ inTmp $ \tmp -> do
127− void $ errExit False $ run "ob" ["init", "--symlink", "/dev/null"]
128− ls tmp >>= liftIO . assertEqual "" []
129−
130− it "produces a valid route config" $ inTmpObInit $ \tmp -> liftIO $
131− withCurrentDirectory (T.unpack $ toTextIgnore tmp) $ do
132− configs <- getConfigs
133− return (either (const Nothing) Just $ getConfigRoute configs) `shouldNotReturn` Nothing
134−
135− -- These tests fail with "Could not find module 'Obelisk.Generated.Static'"
136− -- when not run by 'nix-build --attr selftest'
137− describe "ob run" $ parallel $ do
138− it "works in root directory" $ inTmpObInit $ \_ -> testObRunInDir p0 p1 Nothing httpManager
139− it "works in sub directory" $ inTmpObInit $ \_ -> testObRunInDir p2 p3 (Just "frontend") httpManager
140−
141− describe "obelisk project" $ parallel $ do
142− it "can build obelisk command" $ inTmpObInit $ \_ -> nixBuild ["-A", "command" , obeliskImpl]
143− it "can build obelisk skeleton" $ inTmpObInit $ \_ -> nixBuild ["-A", "skeleton", obeliskImpl]
144− it "can build obelisk shell" $ inTmpObInit $ \_ -> nixBuild ["-A", "shell", obeliskImpl]
145− it "can build everything" $ inTmpObInit $ \_ -> nixBuild [obeliskImpl]
146−
147− describe "blank initialized project" $ parallel $ do
148−
149− it "can build ghc.backend" $ inTmpObInit $ \_ -> nixBuild ["-A", "ghc.backend"]
150− it "can build ghcjs.frontend" $ inTmpObInit $ \_ -> nixBuild ["-A", "ghcjs.frontend"]
151−
152− if os == "darwin"
153− then it "can build ios" $ inTmpObInit $ \_ -> nixBuild ["-A", "ios.frontend"]
154− else it "can build android after accepting license" $ inTmpObInit $ \dir -> do
155− let defaultNixPath = dir </> ("default.nix" :: Shelly.FilePath)
156− writefile defaultNixPath
157− =<< T.replace
158− "# config.android_sdk.accept_license = false;"
159− "config.android_sdk.accept_license = true;"
160− <$> readfile defaultNixPath
161− nixBuild ["-A", "android.frontend"]
162−
163− forM_ ["ghc", "ghcjs"] $ \compiler -> do
164− let
165− shell = "shells." <> compiler
166− inShell cmd' = run "nix-shell" ["default.nix", "-A", fromString shell, "--run", cmd']
167− it ("can enter " <> shell) $ inTmpObInit $ \_ -> inShell "exit"
168− it ("can build in " <> shell) $ inTmpObInit $ \_ -> inShell $ "cabal new-build --" <> fromString compiler <> " all"
169−
170− it "has idempotent thunk update" $ inTmpObInit $ \_ -> do
171− u <- update
172− uu <- update
173− assertRevEQ u uu
174−
175− describe "ob thunk pack/unpack" $ parallel $ do
176− it "has thunk pack and unpack inverses" $ inTmpObInit $ \_ -> do
177−
178− e <- commitAll
179− eu <- unpack
180− eup <- pack
181− eupu <- unpack
182− _ <- pack
183−
184− assertRevEQ e eup
185− assertRevEQ eu eupu
186− assertRevNE e eu
187−
188− it "unpacks the correct branch" $ withTmp $ \dir -> do
189− let branch = "master"
190− run_ "git" ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", branch]
191− run_ "ob" ["thunk", "pack", toTextIgnore dir]
192− run_ "ob" ["thunk", "unpack", toTextIgnore dir]
193− branch' <- chdir dir $ run "git" ["rev-parse", "--abbrev-ref", "HEAD"]
194− liftIO $ assertEqual "" branch (T.strip branch')
195−
196− it "can pack and unpack plain git repos" $
197− shelly_ $ withSystemTempDirectory "git-repo" $ \dir -> do
198− let repo = toTextIgnore $ dir </> ("repo" :: String)
199− run_ "git" ["clone", "https://github.com/haskell/process.git", repo]
200− origHash <- chdir (fromText repo) revParseHead
201−
202− run_ "ob" ["thunk", "pack", repo]
203− packedFiles <- Set.fromList <$> ls (fromText repo)
204− liftIO $ assertEqual "" packedFiles $ Set.fromList $ (repo </>) <$>
205− ["default.nix", "github.json", ".attr-cache" :: String]
206−
207− run_ "ob" ["thunk", "unpack", repo]
208− chdir (fromText repo) $ do
209− unpackHash <- revParseHead
210− assertRevEQ origHash unpackHash
211−
212− testThunkPack $ fromText repo
213−
214− it "aborts thunk pack when there are uncommitted files" $ inTmpObInit $ \dir -> do
215− void unpack
216− testThunkPack (dir </> thunk)
217−
218− describe "ob thunk update --branch" $ parallel $ do
219− it "can change a thunk to the latest version of a desired branch" $ withTmp $ \dir -> do
220− let branch1 = "master"
221− branch2 = "develop"
222− run_ "git" ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", branch1]
223− run_ "ob" ["thunk" , "pack", toTextIgnore dir]
224− run_ "ob" ["thunk", "update", toTextIgnore dir, "--branch", branch2]
225−
226− it "doesn't create anything when given an invalid branch" $ withTmp $ \dir -> do
227− let checkDir dir' = liftIO $ getDirectoryContents $ T.unpack $ toTextIgnore dir'
228− run_ "git" ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", "master"]
229− run_ "ob" ["thunk" , "pack", toTextIgnore dir]
230− startingContents <- checkDir dir
231− void $ errExit False $ run "ob" ["thunk", "update", toTextIgnore dir, "--branch", "dumble-palooza"]
232− checkDir dir >>= liftIO . assertEqual "" startingContents
233155
156+ withSystemTempDirectory "obelisk-repo-git-remote" $ \copyDir -> do
157+ copyForGitRemote isVerbose obeliskImplDirtyReadOnly copyDir
158+ main' isVerbose httpManager copyDir
159+
160+main' :: Bool -> HTTP.Manager -> FilePath -> IO ()
161+main' isVerbose httpManager obeliskRepoReadOnly = withInitCache $ \initCache -> hspec $ parallel $ do
162+ let
163+ inTmpObInit' dirname f = inTmp' dirname $ \dir -> do
164+ run_ cpPath ["-rT", fromString initCache, toTextIgnore dir]
165+ f dir
166+ inTmpObInit = inTmpObInit' defaultTmpDirName
167+
168+ -- To be used in tests that change the obelisk impl directory
169+ inTmpObInitWithImplCopy f = inTmpObInit $ \dir ->
170+ withObeliskImplClean $ \(fromString -> implClean) -> do
171+ run_ rmPath [thunk]
172+ run_ lnPath ["-s", implClean, thunk]
173+ f dir
174+
175+ describe "ob init" $ parallel $ do
176+ it "works with default impl" $ inTmp $ \_ -> runOb ["init"]
177+ it "works with master branch impl" $ inTmp $ \_ -> runOb ["init", "--branch", "master"]
178+ it "works with symlink" $ inTmp $ \_ -> runOb ["init", "--symlink", toTextIgnore obeliskRepoReadOnly]
179+ it "doesn't silently overwrite existing files" $ inTmp $ \_ -> do
180+ let p force = errExit False $ do
181+ run_ ob $ "--no-handoff" : "-v" : "init" : ["--force"|force]
182+ (== 0) <$> lastExitCode
183+
184+ True <- p False
185+ False <- p False
186+ True <- p True
187+ pure ()
188+
189+ it "doesn't create anything when given an invalid impl" $ inTmp $ \tmp -> do
190+ void $ errExit False $ runOb ["init", "--symlink", "/dev/null"]
191+ ls tmp >>= liftIO . assertEqual "" []
192+
193+ it "produces a valid route config" $ inTmpObInit $ \tmp -> liftIO $
194+ withCurrentDirectory (T.unpack $ toTextIgnore tmp) $ do
195+ configs <- getConfigs
196+ return (either (const Nothing) Just $ getConfigRoute configs) `shouldNotReturn` Nothing
197+
198+ it "can unpack and repack .obelisk/impl after init with master branch impl" $ inTmp $ \_ -> do
199+ runOb_ ["init", "--branch", "master"]
200+ runOb_ ["thunk", "unpack", ".obelisk/impl"]
201+ runOb_ ["thunk", "pack", ".obelisk/impl"]
202+
203+ -- These tests fail with "Could not find module 'Obelisk.Generated.Static'"
204+ -- when not run by 'nix-build --attr selftest'
205+ describe "ob run" $ {- NOT parallel $ -} do
206+ it "works in root directory" $ inTmpObInit $ \_ -> testObRunInDir' Nothing httpManager
207+ it "works in sub directory" $ inTmpObInit $ \_ -> testObRunInDir' (Just "frontend") httpManager
208+
209+ describe "ob repl" $ do
210+ it "accepts stdin commands" $ inTmpObInit $ \_ -> do
211+ setStdin "print 3\n:q"
212+ output <- runOb ["repl"]
213+ liftIO $ assertBool "" $
214+ [ "*Obelisk.Run Obelisk.Run Frontend Backend> 3"
215+ , "*Obelisk.Run Obelisk.Run Frontend Backend> Leaving GHCi."
216+ ] `isInfixOf` T.lines (T.strip output)
217+ it "works with custom Prelude" $ inTmpObInit $ \_ -> do
218+ writefile "common/src/Prelude.hs"
219+ "{-# LANGUAGE PackageImports #-} module Prelude (module X) where import \"base\" Prelude as X"
220+ setStdin ":q"
221+ output <- runOb ["repl"]
222+ liftIO $ assertBool "" $
223+ "*Obelisk.Run Obelisk.Run Frontend Backend> Leaving GHCi." `T.isInfixOf` output
224+
225+ describe "obelisk project" $ parallel $ do
226+ it "can build obelisk command" $ inTmpObInit $ \_ -> nixBuild ["-A", "command" , toTextIgnore obeliskRepoReadOnly]
227+ it "can build obelisk skeleton" $ inTmpObInit $ \_ -> nixBuild ["-A", "skeleton", toTextIgnore obeliskRepoReadOnly]
228+ it "can build obelisk shell" $ inTmpObInit $ \_ -> nixBuild ["-A", "shell", toTextIgnore obeliskRepoReadOnly]
229+ it "can build everything" $ inTmpObInit $ \_ -> nixBuild [toTextIgnore obeliskRepoReadOnly]
230+
231+ describe "blank initialized project" $ parallel $ do
232+
233+ it "can build ghc.backend" $ inTmpObInit $ \_ -> nixBuild ["-A", "ghc.backend"]
234+ it "can build ghcjs.frontend" $ inTmpObInit $ \_ -> nixBuild ["-A", "ghcjs.frontend"]
235+
236+ if System.Info.os == "darwin"
237+ then it "can build ios" $ inTmpObInit $ \_ -> nixBuild ["-A", "ios.frontend"]
238+ else it "can build android after accepting license" $ inTmpObInit $ \dir -> do
239+ let defaultNixPath = dir </> ("default.nix" :: FilePath)
240+ writefile defaultNixPath
241+ =<< T.replace
242+ "# config.android_sdk.accept_license = false;"
243+ "config.android_sdk.accept_license = true;"
244+ <$> readfile defaultNixPath
245+ nixBuild ["-A", "android.frontend"]
246+
247+ forM_ ["ghc", "ghcjs"] $ \compiler -> do
248+ let
249+ shellName = "shells." <> compiler
250+ inShell cmd' = run_ "nix-shell" ["default.nix", "-A", fromString shellName, "--run", cmd']
251+ it ("can enter " <> shellName) $ inTmpObInit $ \_ -> inShell "exit"
252+ -- NOTE: We override the temporary directory name because cabal has a bug preventing new-build from working
253+ -- in a path that has unicode characters.
254+ it ("can build in " <> shellName) $ inTmpObInit' "test" $ \_ -> inShell $
255+ T.pack cabalPath <> " --version; " <> T.pack cabalPath <> " new-build --" <> T.pack compiler <> " all"
256+
257+ it "has idempotent thunk update" $ inTmpObInitWithImplCopy $ \_ -> do
258+ _ <- pack
259+ u <- update
260+ uu <- update
261+ assertRevEQ u uu
262+
263+ it "can run 'ob doc'" $ inTmpObInit $ \_ -> runOb_ ["doc", "reflex"]
264+
265+ describe "ob thunk pack/unpack" $ parallel $ do
266+ it "has thunk pack and unpack inverses" $ inTmpObInitWithImplCopy $ \_ -> do
267+
268+ _ <- pack
269+ e <- commitAll
270+ eu <- unpack
271+ eup <- pack
272+ eupu <- unpack
273+ _ <- pack
274+
275+ assertRevEQ e eup
276+ assertRevEQ eu eupu
277+ assertRevNE e eu
278+
279+ it "unpacks the correct branch" $ withTmp $ \dir -> do
280+ let branch = "master"
281+ run_ gitPath ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", branch]
282+ runOb_ ["thunk", "pack", toTextIgnore dir]
283+ runOb_ ["thunk", "unpack", toTextIgnore dir]
284+ branch' <- run gitPath ["-C", toTextIgnore $ dir </> unpackedDirName, "rev-parse", "--abbrev-ref", "HEAD"]
285+ liftIO $ assertEqual "" branch (T.strip branch')
286+
287+ it "can pack and unpack plain git repos" $
288+ shelly_ $ withSystemTempDirectory "git-repo" $ \dir -> do
289+ let repo = toTextIgnore $ dir </> ("repo" :: FilePath)
290+ run_ gitPath ["clone", "https://github.com/haskell/process.git", repo]
291+ origHash <- chdir (fromText repo) revParseHead
292+
293+ runOb_ ["thunk", "pack", repo]
294+ packedFiles <- Set.fromList <$> ls (fromText repo)
295+ liftIO $ assertEqual "" packedFiles $ Set.fromList $ (repo </>) <$>
296+ ["default.nix", "thunk.nix", "github.json" :: FilePath]
297+
298+ runOb_ ["thunk", "unpack", repo]
299+ chdir (fromText repo </> unpackedDirName) $ do
300+ unpackHash <- revParseHead
301+ assertRevEQ origHash unpackHash
302+
303+ testThunkPack' $ fromText repo
304+
305+ it "aborts thunk pack when there are uncommitted files" $ inTmpObInitWithImplCopy $ \dir -> do
306+ testThunkPack' (dir </> thunk)
307+
308+ it "works on legacy git thunks" $ testLegacyGitThunks isVerbose
309+
310+ describe "ob thunk update --branch" $ parallel $ do
311+ it "can change a thunk to the latest version of a desired branch" $ withTmp $ \dir -> do
312+ let branch1 = "master"
313+ branch2 = "develop"
314+ run_ gitPath ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", branch1]
315+ runOb_ ["thunk" , "pack", toTextIgnore dir]
316+ runOb_ ["thunk", "update", toTextIgnore dir, "--branch", branch2]
317+
318+ it "doesn't create anything when given an invalid branch" $ withTmp $ \dir -> do
319+ let checkDir dir' = liftIO $ getDirectoryContents $ T.unpack $ toTextIgnore dir'
320+ run_ gitPath ["clone", "https://github.com/reflex-frp/reflex.git", toTextIgnore dir, "--branch", "master"]
321+ runOb_ ["thunk" , "pack", toTextIgnore dir]
322+ startingContents <- checkDir dir
323+ void $ errExit False $ runOb ["thunk", "update", toTextIgnore dir, "--branch", "dumble-palooza"]
324+ checkDir dir >>= liftIO . assertEqual "" startingContents
325+
326+ describe "ob shell" $ parallel $ do
327+ it "works with --" $ inTmpObInit $ \_ -> do
328+ output <- runOb ["shell", "--", "ghc-pkg", "list"]
329+ liftIO $ assertBool "Unexpected output from ob shell" $ ("Cabal-" `T.isInfixOf` output) && ("ghc-" `T.isInfixOf` output)
330+
331+ describe "ob hoogle" $ {- NOT parallel -} do
332+ it "starts a hoogle server on the given port" $ inTmpObInit $ \_ -> do
333+ [p0] <- liftIO $ getFreePorts 1
334+ maskExitSuccess $ runHandle "ob" ["hoogle", "--port", T.pack (show p0)] $ \stdout -> flip fix Nothing $ \loop -> \case
335+ Nothing -> do -- Still waiting for initial signal that the server has started
336+ ln <- liftIO $ T.hGetLine stdout
337+ let search = "Server starting on port " <> T.pack (show p0)
338+ case search `T.isInfixOf` ln of
339+ False -> loop Nothing -- keep waiting
340+ True -> loop $ Just 10
341+ Just (n :: Int) -> do -- Server has started and we have n attempts left
342+ let req uri = liftIO $ try @HTTP.HttpException $ HTTP.parseRequest uri >>= flip HTTP.httpLbs httpManager
343+ req ("http://127.0.0.1:" <> show p0) >>= \case
344+ Right r | HTTP.responseStatus r == HTTP.ok200 -> exit 0
345+ e -> if n <= 0
346+ then errorExit $ "Request to hoogle server failed: " <> T.pack (show e)
347+ else liftIO (threadDelay (1*10^(6 :: Int))) *> loop (Just $ n - 1)
348+ where
349+ verbosity = bool silently verbosely isVerbose
350+ nixBuild args = run nixBuildPath ("--no-out-link" : args)
351+
352+ runOb_ = augmentWithVerbosity run_ ob isVerbose
353+ runOb = augmentWithVerbosity run ob isVerbose
354+ testObRunInDir' = augmentWithVerbosity testObRunInDir ob isVerbose ["run"]
355+ testThunkPack' = augmentWithVerbosity testThunkPack ob isVerbose []
356+
357+ withObeliskImplClean f =
358+ withSystemTempDirectory "obelisk-impl-clean" $ \obeliskImpl -> do
359+ void . shellyOb verbosity $ do
360+ dirtyFiles <- T.strip <$> run gitPath ["-C", toTextIgnore obeliskRepoReadOnly, "diff", "--stat"]
361+ () <- when (dirtyFiles /= "") $ error "SelfTest does not work correctly with dirty obelisk repos as remote"
362+ run_ gitPath ["clone", "file://" <> toTextIgnore obeliskRepoReadOnly, toTextIgnore obeliskImpl]
363+ f obeliskImpl
364+
365+ withInitCache f =
366+ withSystemTempDirectory "init Cache λ" $ \initCache -> do
367+ -- Setup the ob init cache
368+ void . shellyOb verbosity $ chdir initCache $ do
369+ runOb_ ["init", "--symlink", toTextIgnore obeliskRepoReadOnly]
370+ run_ gitPath ["init"]
371+
372+ f initCache
373+
374+ shelly_ = void . shellyOb verbosity
375+
376+ defaultTmpDirName = "test λ"
377+
378+ inTmp' :: FilePath -> (FilePath -> Sh a) -> IO ()
379+ inTmp' dirname f = withTmp' dirname (chdir <*> f)
380+ inTmp = inTmp' defaultTmpDirName
381+
382+ withTmp' dirname f = shelly_ . withSystemTempDirectory dirname $ f . fromString
383+ withTmp = withTmp' defaultTmpDirName
384+
385+ assertRevEQ a b = liftIO . assertEqual "" "" =<< diff a b
386+ assertRevNE a b = liftIO . assertBool "" . (/= "") =<< diff a b
387+
388+ revParseHead = T.strip <$> run gitPath ["rev-parse", "HEAD"]
389+
390+ commitAll = do
391+ run_ gitPath ["add", "."]
392+ commit "checkpoint"
393+ revParseHead
394+
395+ thunk = ".obelisk/impl"
396+ update = runOb ["thunk", "update", thunk] *> commitAll
397+ pack = runOb ["thunk", "pack", thunk] *> commitAll
398+ unpack = runOb ["thunk", "unpack", thunk] *> commitAll
399+
400+ diff a b = run gitPath ["diff", a, b]
401+
402+
403+maskExitSuccess :: Sh () -> Sh ()
404+maskExitSuccess = handle_sh (\case ExitSuccess -> pure (); e -> throw e)
234405
235406-- | Run `ob run` in the given directory (maximum of one level deep)
236−testObRunInDir :: Socket.PortNumber -> Socket.PortNumber -> Maybe Shelly.FilePath -> HTTP.Manager -> Sh ()
237−testObRunInDir p0 p1 mdir httpManager = handle_sh (\case ExitSuccess -> pure (); e -> throw e) $ do
407+testObRunInDir :: String -> [Text] -> Maybe FilePath -> HTTP.Manager -> Sh ()
408+testObRunInDir executable extraArgs mdir httpManager = maskExitSuccess $ do
409+ [p0, p1] <- liftIO $ getFreePorts 2
238410 let uri p = "http://localhost:" <> T.pack (show p) <> "/" -- trailing slash required for comparison
239411 writefile "config/common/route" $ uri p0
240− maybe id chdir mdir $ runHandle "ob" ["run"] $ \stdout -> do
241− firstUri <- handleObRunStdout httpManager stdout
412+ maybe id chdir mdir $ runHandles executable extraArgs [] $ \_stdin stdout stderr -> do
413+ firstUri <- handleObRunStdout httpManager stdout stderr
242414 let newUri = uri p1
243415 when (firstUri == newUri) $ errorExit $
244416 "Startup URI (" <> firstUri <> ") is the same as test URI (" <> newUri <> ")"
245417 maybe id (\_ -> chdir "..") mdir $ alterRouteTo newUri stdout
246− runningUri <- handleObRunStdout httpManager stdout
418+ runningUri <- handleObRunStdout httpManager stdout stderr
247419 if runningUri /= newUri
248420 then errorExit $ "Reloading failed: expected " <> newUri <> " but got " <> runningUri
249421 else exit 0
250422
251−testThunkPack :: Shelly.FilePath -> Sh ()
252−testThunkPack path' = withTempFile (T.unpack $ toTextIgnore path') "test-file" $ \file handle -> do
253− let pack' = readProcessWithExitCode "ob" ["thunk", "pack", T.unpack $ toTextIgnore path'] ""
254− ensureThunkPackFails q = liftIO $ pack' >>= \case
255− (code, out, err)
256− | code == ExitSuccess -> fail "ob thunk pack succeeded when it should have failed"
257− | q `T.isInfixOf` T.pack (out <> err) -> pure ()
258− | otherwise -> fail $ "ob thunk pack failed for an unexpected reason: " <> show out <> "\nstderr: " <> err
259− git = chdir path' . run "git"
423+testThunkPack :: String -> [Text] -> FilePath -> Sh ()
424+testThunkPack executable args path' = withTempFile repoDir "test-file" $ \file handle -> do
425+ let
426+ pack' = readProcessWithExitCode executable (["thunk", "pack", path'] ++ map T.unpack args) ""
427+ ensureThunkPackFails q = liftIO $ pack' >>= \case
428+ (code, out, err)
429+ | code == ExitSuccess -> fail $ "ob thunk pack succeeded when it should have failed with error '" <> show q <> "'"
430+ | q `T.isInfixOf` T.pack (out <> err) -> pure ()
431+ | otherwise -> fail $ "ob thunk pack failed for an unexpected reason, expecting '" <> show q <> "', received: " <> show out <> "\nstderr: " <> err
432+ git = chdir repoDir . run_ gitPath
260433 -- Untracked files
261434 ensureThunkPackFails "Untracked files"
262− void $ git ["add", T.pack file]
435+ git ["add", T.pack file]
263436 -- Uncommitted files (staged)
264437 ensureThunkPackFails "unsaved"
265− chdir path' $ commit "test commit"
438+ chdir repoDir $ commit "test commit"
266439 -- Non-pushed commits in any branch
267440 ensureThunkPackFails "not yet pushed"
268441 -- Uncommitted files (unstaged)
269442 liftIO $ T.hPutStrLn handle "test file" >> hClose handle
270443 ensureThunkPackFails "modified"
271444 -- Existing stashes
272− void $ git ["stash"]
445+ git $ gitUserConfig <> [ "stash" ]
273446 ensureThunkPackFails "has stashes"
447+ where
448+ repoDir = path' </> unpackedDirName
274449
275450-- | Blocks until a non-empty line is available
276451hGetLineSkipBlanks :: MonadIO m => Handle -> m Text
@@ -290,9 +465,12 @@ alterRouteTo uri stdout = do
290465 "Reloading failed: " <> T.pack (show t)
291466
292467-- | Handle stdout of `ob run`: check that the frontend and backend servers are started correctly
293−handleObRunStdout :: HTTP.Manager -> Handle -> Sh Text
294−handleObRunStdout httpManager stdout = flip fix (ObRunState_Init, []) $ \loop (state, msgs) ->
295− liftIO (T.hGetLine stdout) >>= \t -> case state of
468+handleObRunStdout :: HTTP.Manager -> Handle -> Handle -> Sh Text
469+handleObRunStdout httpManager stdout stderr = flip fix (ObRunState_Init, []) $ \loop (state, msgs) -> do
470+ isEOF <- liftIO $ hIsEOF stdout
471+ if isEOF
472+ then handleObRunError msgs
473+ else liftIO (T.hGetLine stdout) >>= \t -> case state of
296474 ObRunState_Init
297475 | "Running test..." `T.isPrefixOf` t -> loop (ObRunState_BackendStarted, msgs)
298476 ObRunState_Startup
@@ -304,8 +482,12 @@ handleObRunStdout httpManager stdout = flip fix (ObRunState_Init, []) $ \loop (s
304482 obRunCheck httpManager stdout uri
305483 pure uri
306484 | not (T.null t) -> errorExit $ "Started: " <> t -- If theres any other output here, startup failed
307− _ | "Failed" `T.isPrefixOf` t -> errorExit $ "ob run failed: " <> T.unlines (reverse $ t : msgs)
485+ _ | "Failed" `T.isPrefixOf` t -> handleObRunError (t : msgs)
308486 | otherwise -> loop (state, t : msgs)
487+ where
488+ handleObRunError msgs = do
489+ stderrContent <- liftIO $ hGetContents stderr
490+ errorExit $ "ob run failed: " <> T.unlines (reverse msgs) <> " stderr: " <> T.pack stderrContent
309491
310492-- | Make requests to frontend/backend servers to check they are working properly
311493obRunCheck :: HTTP.Manager -> Handle -> Text -> Sh ()
@@ -324,3 +506,121 @@ getFreePorts n = Socket.withSocketsDo $ do
324506 sock <- Socket.socket (Socket.addrFamily addr) (Socket.addrSocketType addr) (Socket.addrProtocol addr)
325507 Socket.bind sock (Socket.addrAddress addr)
326508 pure sock
509+
510+testLegacyGitThunks :: Bool -> IO ()
511+testLegacyGitThunks isVerbose = withSystemTempDirectory "test-git-repo" $ \gitDir -> do
512+ isolatedGitShell isVerbose gitDir $ \git -> do
513+ writefile (gitDir </> ("default.nix" :: FilePath)) "{}: \"hello\""
514+ _ <- git ["add", "--all"]
515+ _ <- git ["commit", "-m", "Initial commit"]
516+ rev <- T.strip <$> git ["rev-parse", "HEAD"]
517+ sha256 :: Text
518+ <- either error pure
519+ =<< (Aeson.parseEither (Aeson..: "sha256") <=< Aeson.eitherDecodeStrict . T.encodeUtf8)
520+ <$> run nixPrefetchGitPath [toTextIgnore gitDir]
521+
522+ for_ (legacyGitThunks (GitThunkParams gitDir rev sha256)) $ \mkFiles ->
523+ withSystemTempDirectory "test-thunks" $ \thunkDir -> do
524+ liftIO $ mkFiles thunkDir
525+ run_ "ob" ["thunk", "unpack", toTextIgnore thunkDir]
526+ run_ "ob" ["thunk", "pack", toTextIgnore thunkDir]
527+
528+data GitThunkParams = GitThunkParams
529+ { _gitThunkParams_repo :: !FilePath
530+ , _gitThunkParams_rev :: !Text
531+ , _gitThunkParams_sha256 :: !Text
532+ } deriving Show
533+
534+legacyGitThunks :: GitThunkParams -> [FilePath -> IO ()]
535+legacyGitThunks (GitThunkParams repo' rev sha256) =
536+ [ mkLegacyIO
537+ (T.unlines
538+ [ "# DO NOT HAND-EDIT THIS FILE"
539+ , "let fetchGit = {url, rev, ref ? null, branch ? null, sha256 ? null, fetchSubmodules ? null}:"
540+ , " assert !fetchSubmodules; (import <nixpkgs> {}).fetchgit { inherit url rev sha256; };"
541+ , "in import (fetchGit (builtins.fromJSON (builtins.readFile ./git.json)))"
542+ ]
543+ )
544+ (Map.fromList
545+ [ ("url", repo)
546+ , ("rev", rev)
547+ , ("branch", "master")
548+ , ("sha256", sha256)
549+ ]
550+ )
551+ , mkLegacyIO
552+ (T.unlines
553+ [ "# DO NOT HAND-EDIT THIS FILE"
554+ , "let fetchGit = {url, rev, ref ? null, branch ? null, sha256 ? null, fetchSubmodules ? null}:"
555+ , " if builtins.hasAttr \"fetchGit\" builtins"
556+ , " then builtins.fetchGit ({ inherit url rev; } // (if branch == null then {} else { ref = branch; }))"
557+ , " else abort \"Plain Git repositories are only supported on nix 2.0 or higher.\";"
558+ , "in import (fetchGit (builtins.fromJSON (builtins.readFile ./git.json)))"
559+ ]
560+ )
561+ (Map.fromList
562+ [ ("url", repo)
563+ , ("rev", rev)
564+ , ("branch", "master")
565+ , ("sha256", sha256)
566+ ]
567+ )
568+ , mkLegacyIO
569+ (T.unlines
570+ [ "# DO NOT HAND-EDIT THIS FILE"
571+ , "let fetch = {url, rev, ref ? null, sha256 ? null, fetchSubmodules ? false, private ? false, ...}:"
572+ , " let realUrl = let firstChar = builtins.substring 0 1 url; in"
573+ , " if firstChar == \"/\" then /. + url"
574+ , " else if firstChar == \".\" then ./. + url"
575+ , " else url;"
576+ , " in if !fetchSubmodules && private then builtins.fetchGit {"
577+ , " url = realUrl; inherit rev;"
578+ , " } else (import <nixpkgs> {}).fetchgit {"
579+ , " url = realUrl; inherit rev sha256;"
580+ , " };"
581+ , "in import (fetch (builtins.fromJSON (builtins.readFile ./git.json)))"
582+ ]
583+ )
584+ (Map.fromList
585+ [ ("url", Aeson.String repo)
586+ , ("rev", Aeson.String rev)
587+ , ("branch", Aeson.String "master")
588+ , ("sha256", Aeson.String sha256)
589+ , ("private", Aeson.Bool False)
590+ ]
591+ )
592+ , mkLegacyIO
593+ (T.unlines
594+ [ "# DO NOT HAND-EDIT THIS FILE"
595+ , "let fetch = {url, rev, branch ? null, sha256 ? null, fetchSubmodules ? false, private ? false, ...}:"
596+ , " let realUrl = let firstChar = builtins.substring 0 1 url; in"
597+ , " if firstChar == \"/\" then /. + url"
598+ , " else if firstChar == \".\" then ./. + url"
599+ , " else url;"
600+ , " in if !fetchSubmodules && private then builtins.fetchGit {"
601+ , " url = realUrl; inherit rev;"
602+ , " ${if branch == null then null else \"ref\"} = branch;"
603+ , " } else (import <nixpkgs> {}).fetchgit {"
604+ , " url = realUrl; inherit rev sha256;"
605+ , " };"
606+ , "in import (fetch (builtins.fromJSON (builtins.readFile ./git.json)))"
607+ ]
608+ )
609+ (Map.fromList
610+ [ ("url", Aeson.String repo)
611+ , ("rev", Aeson.String rev)
612+ , ("branch", Aeson.String "master")
613+ , ("sha256", Aeson.String sha256)
614+ , ("private", Aeson.Bool False)
615+ ]
616+ )
617+ ]
618+ where
619+ repo = T.pack repo'
620+ mkLegacyIO :: Aeson.ToJSON v => Text -> Map.Map Text v -> FilePath -> IO ()
621+ mkLegacyIO defaultNix gitJson dir = do
622+ T.writeFile (dir </> ("default.nix" :: FilePath)) defaultNix
623+ LBS.writeFile (dir </> ("git.json" :: FilePath)) (Aeson.encode gitJson)
624+
625+unpackedDirName :: FilePath
626+unpackedDirName = "."
lib/snap-extras/obelisk-snap-extras.cabal+2−3
@@ -1,6 +1,6 @@
11name: obelisk-snap-extras
22version: 0.1
3−synopsys: Extra functionality for Snap that should be considered for upstreaming
3+synopsis: Extra functionality for Snap that should be considered for upstreaming
44license: BSD3
55build-type: Simple
66cabal-version: >=1.2
@@ -12,10 +12,9 @@ library
1212 , base
1313 , bytestring
1414 , snap-core
15− , unix
1615 , directory
1716 , filepath
1817 , text
1918 exposed-modules:
2019 Obelisk.Snap.Extras
21− ghc-options: -Wall
20+ ghc-options: -Wall -Werror -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O
lib/snap-extras/src/Obelisk/Snap/Extras.hs+2−2
@@ -2,13 +2,13 @@
22module Obelisk.Snap.Extras
33 ( cachePermanently
44 , doNotCache
5+ , ensureSecure
56 , serveFileIfExists
67 , serveFileIfExistsAs
78 ) where
89
910import Control.Monad.IO.Class
1011import Data.ByteString (ByteString)
11−import Data.Monoid
1212import Data.String
1313import Snap.Core
1414import Snap.Util.FileServe
@@ -17,7 +17,7 @@ import System.Directory
1717-- | Set response header for "permanent" caching
1818cachePermanently :: MonadSnap m => m ()
1919cachePermanently = do
20− modifyResponse $ setHeader "Cache-Control" "public, max-age=315360000"
20+ modifyResponse $ setHeader "Cache-Control" "public, max-age=315360000, immutable"
2121 modifyResponse $ setHeader "Expires" "Tue, 01 Feb 2050 00:00:00 GMT" --TODO: This should be set to "approximately one year from the time the response is sent"
2222
2323-- | Set response header to not cache
lib/tabulation/src/Data/Tabulation.hs+1−1
@@ -8,7 +8,7 @@ import Control.Lens
88-- | This is a class for record types whose fields can be enumerated by an associated GADT. It's closely related to the concept of a representable functor, except without the functor part, and the fields are not all the same type.
99class HasFields a where
1010 type Field a :: * -> *
11−
11+
1212 fieldLens :: Field a x -> Lens' a x
1313 tabulateFieldsA :: Applicative f => (forall x. Field a x -> f x) -> f a
1414
nixpkgs-overlays/default.nixnew file+15
@@ -0,0 +1,15 @@
1+self: super:
2+
3+let
4+ inherit (self) lib;
5+ inherit (import ../dep/gitignore.nix { inherit lib; }) gitignoreSource;
6+in {
7+ obeliskCleanSource = src:
8+ # WARNING: The order of application here seems to matter a great deal to
9+ # how quickly `ghcid` is able to reload changes. As a rule of thumb,
10+ # always apply `gitignoreSource` first.
11+ # See https://github.com/obsidiansystems/obelisk/pull/666 and related.
12+ lib.cleanSource (gitignoreSource src);
13+
14+ obeliskExecutableConfig = self.callPackage ../lib/executable-config {};
15+}
release.nix+8−95
@@ -1,97 +1,10 @@
1−{ self-args ? {
2− config.android_sdk.accept_license = true;
3− iosSdkVersion = "10.2";
4− }
5−, local-self ? import ./. self-args
1+{
2+ supportedSystems ? [ "x86_64-linux" "x86_64-darwin" ]
63}:
4+rec {
5+ recurseForDerivations = true;
6+ build = import ./all-builds.nix { inherit supportedSystems; };
7+ test = import ./all-tests.nix { inherit supportedSystems; };
78
8−let
9− inherit (local-self.nixpkgs) lib runCommand nix;
10−
11− cacheBuildSystems = [ "x86_64-linux" "x86_64-darwin" ];
12−
13− obeliskPackagesCommon = [
14− "obelisk-frontend"
15− "obelisk-route"
16− "obelisk-executable-config-lookup"
17− ];
18−
19− obeliskPackagesBackend = obeliskPackagesCommon ++ [
20− "obelisk-asset-manifest"
21− "obelisk-asset-serve-snap"
22− "obelisk-backend"
23− "obelisk-cliapp"
24− "obelisk-command"
25− "obelisk-executable-config-inject"
26− "obelisk-frontend"
27− "obelisk-run"
28− "obelisk-route"
29− "obelisk-selftest"
30− "obelisk-snap-extras"
31− ];
32−
33− pnameToAttrs = pkgsSet: pnames:
34− lib.listToAttrs (map
35− (name: { inherit name; value = pkgsSet.${name}; })
36− pnames);
37−
38− concatDepends = let
39− extractDeps = x: (x.override {
40− mkDerivation = drv: {
41− out = builtins.concatLists [
42− (drv.buildDepends or [])
43− (drv.libraryHaskellDepends or [])
44− (drv.executableHaskellDepends or [])
45− ];
46− };
47− }).out;
48− in pkgAttrs: builtins.concatLists (map extractDeps (builtins.attrValues pkgAttrs));
49−
50− perPlatform = lib.genAttrs cacheBuildSystems (system: let
51− obelisk = import ./. (self-args // { inherit system; });
52− reflex-platform = obelisk.reflex-platform;
53− ghc = pnameToAttrs
54− obelisk.haskellPackageSets.ghc
55− obeliskPackagesBackend;
56− ghcjs = pnameToAttrs
57− obelisk.haskellPackageSets.ghcjs
58− obeliskPackagesCommon;
59− cachePackages = builtins.concatLists [
60− (builtins.attrValues ghc)
61− (builtins.attrValues ghcjs)
62− (concatDepends ghc)
63− (concatDepends ghcjs)
64− (lib.optional reflex-platform.androidSupport androidSkeleton)
65− (lib.optional reflex-platform.iosSupport iosSkeleton)
66− [ command serverSkeletonExe serverSkeletonShell ]
67− ];
68− command = obelisk.command;
69− skeleton = import ./skeleton { inherit obelisk; };
70− serverSkeletonExe = skeleton.exe;
71− # TODO fix nixpkgs so it doesn't try to run the result of haskell shells as setup hooks.
72− serverSkeletonShell = local-self.nixpkgs.runCommand "shell-safe-for-dep" {} ''
73− touch "$out"
74− echo "return" >> "$out"
75− cat "${skeleton.shells.ghc}" >> "$out"
76− '';
77− androidSkeleton = (import ./skeleton { inherit obelisk; }).android.frontend;
78− iosSkeleton = (import ./skeleton { inherit obelisk; }).ios.frontend;
79− in {
80− inherit
81− command
82− ghc ghcjs
83− serverSkeletonExe
84− serverSkeletonShell
85− ;
86− cache = reflex-platform.pinBuildInputs "obelisk-${system}" cachePackages;
87− } // lib.optionalAttrs reflex-platform.androidSupport {
88− inherit androidSkeleton;
89− } // lib.optionalAttrs reflex-platform.iosSupport {
90− inherit iosSkeleton;
91− });
92−
93− metaCache = local-self.reflex-platform.pinBuildInputs
94− "obelisk-everywhere"
95− (map (a: a.cache) (builtins.attrValues perPlatform));
96−
97−in perPlatform // { inherit metaCache; }
9+ inherit (build) metaCache;
10+}
scripts/ghcid-this-libdeleted−4
@@ -1,4 +0,0 @@
1−#!/usr/bin/env bash
2−set -euo pipefail
3−
4−nix-shell -E "with (import ../.. {}); reflex-platform.workOn haskellPackageSets.ghc haskellPackageSets.ghc.obelisk-$(basename $PWD)" --run "ghcid -c 'cabal new-repl'"
skeleton/.gitignore+13−5
@@ -1,7 +1,15 @@
1−dist-newstyle
2−result
3−result-android
4−result-ios
5−result-exe
61.attr-cache
2+.cabal-sandbox
3+*.hi
4+*.o
5+cabal.project.local
6+cabal.sandbox.config
7+ctags
8+dist-newstyle/
9+dist/
710ghcid-output.txt
11+profile/
12+result
13+result-*
14+tags
15+TAGS
skeleton/backend/backend.cabal+2−1
@@ -14,11 +14,12 @@ library
1414 , obelisk-route
1515 exposed-modules:
1616 Backend
17− ghc-options: -Wall
17+ ghc-options: -Wall -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O -fno-show-valid-hole-fits
1818
1919executable backend
2020 main-is: main.hs
2121 hs-source-dirs: src-bin
22+ ghc-options: -Wall -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O -threaded -fno-show-valid-hole-fits
2223 if impl(ghcjs)
2324 buildable: False
2425 build-depends: base
skeleton/backend/src/Backend.hs−3
@@ -1,6 +1,3 @@
1−{-# LANGUAGE FlexibleContexts #-}
2−{-# LANGUAGE RankNTypes #-}
3−{-# LANGUAGE TypeFamilies #-}
41module Backend where
52
63import Common.Route
skeleton/cabal.project+1
@@ -1,2 +1,3 @@
11optional-packages:
22 *
3+write-ghc-environment-files: never
skeleton/common/common.cabal+1−3
@@ -9,9 +9,7 @@ library
99 , obelisk-route
1010 , mtl
1111 , text
12− default-extensions:
13− TypeFamilies
14− PolyKinds
1512 exposed-modules:
1613 Common.Api
1714 Common.Route
15+ ghc-options: -Wall -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O -fno-show-valid-hole-fits
skeleton/common/src/Common/Route.hs+1
@@ -8,6 +8,7 @@
88{-# LANGUAGE OverloadedStrings #-}
99{-# LANGUAGE RankNTypes #-}
1010{-# LANGUAGE TemplateHaskell #-}
11+{-# LANGUAGE TypeFamilies #-}
1112module Common.Route where
1213
1314{- -- You will probably want these imports for composing Encoders.
skeleton/default.nix+10−3
@@ -1,10 +1,17 @@
1−{ obelisk ? import ./.obelisk/impl {
2− system = builtins.currentSystem;
3− iosSdkVersion = "10.2";
1+{ system ? builtins.currentSystem
2+, obelisk ? import ./.obelisk/impl {
3+ inherit system;
4+ iosSdkVersion = "13.2";
5+
46 # You must accept the Android Software Development Kit License Agreement at
57 # https://developer.android.com/studio/terms in order to build Android apps.
68 # Uncomment and set this to `true` to indicate your acceptance:
79 # config.android_sdk.accept_license = false;
10+
11+ # In order to use Let's Encrypt for HTTPS deployments you must accept
12+ # their terms of service at https://letsencrypt.org/repository/.
13+ # Uncomment and set this to `true` to indicate your acceptance:
14+ # terms.security.acme.acceptTerms = false;
815 }
916}:
1017with obelisk;
skeleton/frontend/frontend.cabal+7−4
@@ -9,13 +9,14 @@ library
99 , common
1010 , obelisk-frontend
1111 , obelisk-route
12+ , jsaddle
1213 , reflex-dom
1314 , obelisk-executable-config-lookup
1415 , obelisk-generated-static
1516 , text
1617 exposed-modules:
1718 Frontend
18− ghc-options: -Wall
19+ ghc-options: -Wall -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -O -fno-show-valid-hole-fits
1920
2021executable frontend
2122 main-is: main.hs
@@ -27,7 +28,9 @@ executable frontend
2728 , reflex-dom
2829 , obelisk-generated-static
2930 , frontend
30− --TODO: Make these ghc-options optional
31− ghc-options: -threaded
31+ ghc-options: -threaded -O -Wall -Wredundant-constraints -Wincomplete-uni-patterns -Wincomplete-record-updates -fno-show-valid-hole-fits
32+ if impl(ghcjs)
33+ ghc-options: -dedupe
34+ cpp-options: -DGHCJS_BROWSER
3235 if os(darwin)
33− ghc-options: -dynamic
36+ ghc-options: -dynamic
skeleton/frontend/src/Frontend.hs+21−3
@@ -1,25 +1,43 @@
11{-# LANGUAGE DataKinds #-}
22{-# LANGUAGE OverloadedStrings #-}
33{-# LANGUAGE TypeApplications #-}
4+
45module Frontend where
56
7+import Control.Monad
68import qualified Data.Text as T
79import qualified Data.Text.Encoding as T
10+import Language.Javascript.JSaddle (eval, liftJSM)
11+
812import Obelisk.Frontend
913import Obelisk.Configs
1014import Obelisk.Route
15+import Obelisk.Generated.Static
16+
1117import Reflex.Dom.Core
1218
1319import Common.Api
1420import Common.Route
15−import Obelisk.Generated.Static
1621
22+
23+-- This runs in a monad that can be run on the client or the server.
24+-- To run code in a pure client or pure server context, use one of the
25+-- `prerender` functions.
1726frontend :: Frontend (R FrontendRoute)
1827frontend = Frontend
19− { _frontend_head = el "title" $ text "Obelisk Minimal Example"
28+ { _frontend_head = do
29+ el "title" $ text "Obelisk Minimal Example"
30+ elAttr "link" ("href" =: static @"main.css" <> "type" =: "text/css" <> "rel" =: "stylesheet") blank
2031 , _frontend_body = do
21− text "Welcome to Obelisk!"
32+ el "h1" $ text "Welcome to Obelisk!"
2233 el "p" $ text $ T.pack commonStuff
34+
35+ -- `prerender` and `prerender_` let you choose a widget to run on the server
36+ -- during prerendering and a different widget to run on the client with
37+ -- JavaScript. The following will generate a `blank` widget on the server and
38+ -- print "Hello, World!" on the client.
39+ prerender_ blank $ liftJSM $ void $ eval ("console.log('Hello, World!')" :: T.Text)
40+
2341 elAttr "img" ("src" =: static @"obelisk.jpg") blank
2442 el "div" $ do
2543 exampleConfig <- getConfig "common/example"
skeleton/shell.nixdeleted−1
@@ -1 +0,0 @@
1−(import ./. {}).shells.ghc
skeleton/static/main.cssnew file+3
@@ -0,0 +1,3 @@
1+p {
2+ color: red;
3+}