mirror of
https://github.com/sotashimozono/obsidian-remote-ssh.git
synced 2026-07-22 06:52:07 +00:00
de3d0d6c32
Security check turned up three places where the maintainer's
personal info had ended up in tracked source:
- plugin/tests/AdapterPatcher.test.ts:15
`target.greet('souta')` → `target.greet('alice')`
- plugin/tests/pathUtils.test.ts:15
`/home/souta/work/VaultDev/` → `/home/alice/vault/`
- plugin/scripts/dev-install.mjs
Default fallback for the dev vault path was hard-coded to
`../../SelfArchive-dev` (the maintainer's own dev vault folder
name). Renamed to the generic `../../dev-vault`. The
`REMOTE_SSH_DEV_VAULT` env var still wins, and the script accepts
a positional argv override too — the maintainer's actual
`SelfArchive-dev` keeps working with
`REMOTE_SSH_DEV_VAULT=/path/to/SelfArchive-dev npm run build:full`.
What stays:
- `github.com/sotashimozono/...` in every Go file's import path —
Go module canonical URL; this matches the repo URL on GitHub
and isn't replaceable.
- `work/VaultDev` mentions in README / docs / a couple of test
fixtures — generic enough not to identify the maintainer
(anyone could name a folder that), kept as-is.
No private keys / tokens / IPs / emails / hostnames were in the
tree to begin with — those live only in the user's local
`data.json` and ssh agent, not in the repo.
Bumps to 0.3.2.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
77 lines
2.9 KiB
JavaScript
77 lines
2.9 KiB
JavaScript
#!/usr/bin/env node
|
|
/*
|
|
* dev-install — copy build artifacts (main.js, manifest.json, styles.css)
|
|
* into the dev vault's plugins folder.
|
|
*
|
|
* Usage:
|
|
* node scripts/dev-install.mjs
|
|
* node scripts/dev-install.mjs <vault-root>
|
|
*
|
|
* The default vault root is read from the `REMOTE_SSH_DEV_VAULT` env var
|
|
* or falls back to `../../dev-vault` relative to this script (i.e. a
|
|
* sibling of the repo root, since the plugin lives under
|
|
* `<repo>/plugin/`). Set the env var in your shell rc to point at
|
|
* whatever vault you actually use for development.
|
|
*/
|
|
|
|
import * as fs from 'node:fs';
|
|
import * as path from 'node:path';
|
|
import { fileURLToPath } from 'node:url';
|
|
|
|
const __dirname = path.dirname(fileURLToPath(import.meta.url));
|
|
const pluginRoot = path.resolve(__dirname, '..'); // <repo>/plugin
|
|
const repoRoot = path.resolve(pluginRoot, '..'); // <repo>
|
|
|
|
const vaultRoot = process.argv[2]
|
|
?? process.env.REMOTE_SSH_DEV_VAULT
|
|
?? path.resolve(repoRoot, '..', 'dev-vault');
|
|
|
|
const manifestPath = path.join(pluginRoot, 'manifest.json');
|
|
if (!fs.existsSync(manifestPath)) {
|
|
console.error(`manifest.json not found at ${manifestPath}`);
|
|
process.exit(1);
|
|
}
|
|
const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
|
|
|
|
const targetDir = path.join(vaultRoot, '.obsidian', 'plugins', manifest.id);
|
|
if (!fs.existsSync(path.join(vaultRoot, '.obsidian'))) {
|
|
console.error(`Vault root does not look like an Obsidian vault: ${vaultRoot}`);
|
|
console.error(`(no .obsidian directory found)`);
|
|
process.exit(1);
|
|
}
|
|
|
|
fs.mkdirSync(targetDir, { recursive: true });
|
|
|
|
const files = ['main.js', 'manifest.json', 'styles.css'];
|
|
for (const f of files) {
|
|
const src = path.join(pluginRoot, f);
|
|
if (!fs.existsSync(src)) {
|
|
console.error(`missing build artifact: ${src} (run npm run build first)`);
|
|
process.exit(1);
|
|
}
|
|
const dst = path.join(targetDir, f);
|
|
fs.copyFileSync(src, dst);
|
|
console.log(`copied ${f} -> ${dst}`);
|
|
}
|
|
|
|
// Stage the obsidian-remote-server binaries (if any) so the plugin
|
|
// can ship one to the remote at connect time. Built by
|
|
// `npm run build:server`; missing means "no auto-deploy this run",
|
|
// not an error.
|
|
const serverBinDir = path.join(pluginRoot, 'server-bin');
|
|
if (fs.existsSync(serverBinDir)) {
|
|
const binTarget = path.join(targetDir, 'server-bin');
|
|
fs.mkdirSync(binTarget, { recursive: true });
|
|
for (const f of fs.readdirSync(serverBinDir)) {
|
|
const src = path.join(serverBinDir, f);
|
|
if (!fs.statSync(src).isFile()) continue;
|
|
const dst = path.join(binTarget, f);
|
|
fs.copyFileSync(src, dst);
|
|
console.log(`copied server-bin/${f} -> ${dst}`);
|
|
}
|
|
} else {
|
|
console.log('server-bin/ not present — skipping daemon staging (run `npm run build:server` to build it)');
|
|
}
|
|
|
|
console.log(`\nplugin '${manifest.id}' v${manifest.version} installed to ${targetDir}`);
|
|
console.log('Reload the plugin in Obsidian (Settings → Community plugins → toggle off/on).');
|