Initial AspireBuild tools implementation based on nix

.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 4
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{nix,yml,yaml}]
+indent_size = 2

.gitignore

@@ -0,0 +1,15 @@
+# ignore all dotfiles and dotdirs by default, with exceptions below
+.*
+!.gitignore
+!.editorconfig
+
+builders/
+node_modules/
+tmp/
+vendor/
+
+*.log
+*.tmp
+
+# default output file for 'nix build'
+result

README.md

@@ -1 +1,13 @@
 # aspirebuild
+
+## Requirements
+
+* Nix, with flakes support.  I _highly_ recommend the [Determinate Systems installer](https://docs.determinate.systems/)
+* Recommended: `direnv` (should be available on apt/brew/dnf/pacman/etc)
+
+## Quick Start
+
+```
+echo "use flake" > .envrc && direnv allow   # if using direnv
+nix develop
+```

flake.nix

@@ -0,0 +1,164 @@
+{
+  # This flake, which I'm now calling The One Flake, describes the entire AspireBuild monorepo including all its tools.
+  # The eventual goal is to make each tool its own flake, as well as each builder, with each tool and builder depending
+  # on the AspireBuild flake.  However we're not there yet, so currently we manage everything through The One Flake.
+
+  description = "AspireBuild";
+
+  inputs = {
+    flake-parts.url = "github:hercules-ci/flake-parts";
+    flake-root.url = "github:srid/flake-root";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+  };
+
+  outputs =
+    inputs@{ self, flake-parts, ... }:
+    flake-parts.lib.mkFlake { inherit inputs; } {
+      imports = [ inputs.flake-root.flakeModule ];
+
+      systems = [
+        "x86_64-linux"
+        "aarch64-linux"
+        "aarch64-darwin"
+        "x86_64-darwin"
+      ];
+
+      # most of the flake should go in here
+      perSystem =
+        {
+          config,
+          self',
+          inputs',
+          pkgs,
+          system,
+          lib,
+          ...
+        }:
+        let
+          buildInputs = with pkgs; [
+            bashInteractive
+            coreutils
+            curl
+            git
+            gnutar
+            jq
+            just
+            lrzip
+            perl
+            php
+            php84Packages.composer
+            subversion
+            sqlite
+            systemfd
+            tzdata
+            watchexec
+            zip
+            zstd
+          ];
+
+          extensions = with pkgs.php84Extensions; [
+            bcmath
+            curl
+            ffi
+            filter
+            gettext
+            gmp
+            intl
+            mbstring
+            pdo
+            pdo_sqlite
+            readline
+            sockets
+            sodium
+            sqlite3
+
+            # full list in /nix/store/nsybw5k5jcqwccbgslfq5psmqh3x3svs-php-with-extensions-8.4.14/lib/php.ini
+
+            # future consideration
+            #ctype
+            #dom
+            #fileinfo
+            #iconv
+            #mysqli
+            #mysqlnd
+            #openssl
+            #pcntl
+            #pdo_mysql
+            #pdo_pgsql
+            #pgsql
+            #posix
+            #session
+            #simplexml
+            #sockets
+            #tokenizer
+            #xmlreader
+            #xmlwriter
+            #zip
+            #zlib
+          ];
+
+          zend-extensions = with pkgs.php84Extensions; [
+            opcache
+            xdebug
+          ];
+
+        in
+        {
+          devShells.default = pkgs.mkShell {
+            inherit buildInputs;
+
+            inputsFrom = [ config.flake-root.devShell ]; # sets $FLAKE_ROOT
+
+            shellHook = ''
+              export ASPIREBUILD=$FLAKE_ROOT
+              export SELF_DIR=${self'.packages.default}
+              export PHP_INI_SCAN_DIR=:${self'.packages.default}
+            '';
+
+            # in case $FLAKE_ROOT isn't available, this should also work.
+            #
+            #     export ASPIREBUILD=$(${lib.getExe config.flake-root.package})
+            #
+            # Note that the flake root is impure state, and thus should never be set in an attribute or in a file,
+            # so technically this makes our flake impure because of all of the dependencies on $ASPIREBUILD.  But since
+            # $ASPIREBUILD in the package always points into the nix store for this flake, we can get away with it
+            # while still allowing local dev to point to the working copy.
+          };
+
+          packages.default = pkgs.stdenv.mkDerivation {
+            inherit buildInputs;
+
+            name = "aspirebuild";
+
+            src = ./.;
+
+            php-ini =
+              let
+                get-extension-name = name: builtins.elemAt (builtins.split "-" name) 2; # "php-intl-8.4.13" -> "intl"
+                ext-line = ext: "extension = ${ext}/lib/php/extensions/${get-extension-name ext.name}.so";
+                zend-ext-line = ext: "zend_extension = ${ext}/lib/php/extensions/${get-extension-name ext.name}.so";
+              in
+              (map ext-line extensions) ++ (map zend-ext-line zend-extensions);
+
+            buildPhase = ''
+              mkdir -p $out
+
+              cat << EOF > $out/php.ini
+              ; PHP extensions for AspireBuild
+
+              ${lib.concatStringsSep "\n" config.packages.default.php-ini}
+              EOF
+            '';
+
+            dontInstall = true;
+          };
+
+          # invoke with `nix fmt flake.nix`
+          formatter = pkgs.nixfmt-rfc-style;
+        };
+
+      flake = {
+        # system-agnostic flake attributes go here.  we don't have any yet.
+      };
+    };
+}

tools/_common/lib/bash/prelude.bash

@@ -0,0 +1,33 @@
+# This file should be sourced, not run
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+# These are not exported, but will be visible in the tool's script if they need them
+__ORIG_PWD=$PWD
+__HERE=$(dirname "$0")
+__HERE=$(realpath -s "$__HERE")   # canonicalize only, don't resolve symlinks
+
+function warn  { echo "$@" >&2; }
+function die   { warn "$@"; exit 1; }
+
+# This is set in flake.nix, so this will only be blank if not in a nix environment.
+[[ -n $ASPIREBUILD ]] || die "ASPIREBUILD environment variable not set.  Please set it to the absolute path of an AspireBuild git repo."
+
+# We bail out early if our working directory contains spaces, rather than risk stepping on this mine later.
+# We make reasonable efforts to quote bash arguments, but 'bash' and 'reasonable' do not belong in the same sentence.
+[[ "$ASPIREBUILD" =~ [[:space:]] ]] && die "Refusing to deal with aspirebuild directory containing whitespace.  Aborted."
+
+cd "$ASPIREBUILD"
+
+# Run all prelude files under the current tool's lib (usually symlinked to tools/_common/lib)
+preludes=$(
+    shopt -s nullglob
+    echo "$__HERE"/../lib/bash/prelude.d/*.bash "$__HERE"/../local/lib/bash/prelude.d/*.bash
+);
+
+for file in $preludes; do
+    # shellcheck source=/dev/null
+    [[ -f $file ]] && source "$file"
+done

tools/_common/lib/bash/prelude.d/nix-only-path.bash

@@ -0,0 +1,10 @@
+# This file should be sourced, not run
+#
+# Sets PATH to include only directories under /nix
+#
+#   By no means does this script create a fully hermetic environment.
+#   It's meant to help make builds more reproducible, but does not guarantee it.
+
+__ORIG_PATH=$PATH
+
+PATH=$(awk -v RS=: -v ORS=: '$0 ~ /^\/nix\/.*/' <<<"$PATH")

tools/builder/bin/init-builder

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+# shellcheck disable=SC2086
+source "$(dirname $0)"/../lib/bash/prelude.bash
+
+[[ -n "$*" ]] || die "usage: $0 <cmdline ...>"
+
+builder=$1
+shift
+
+cd $builder
+
+# TODO: make this an option --template=foo (I'm not doing option parsing in bash)
+template=${BUILDER_TEMPLATE:-default}
+
+# A template containing a hash, e.g. .#foo is assumed to be a nix expression
+if [[ $template =~ [#] ]]; then
+    nix flake init -t $template
+    exit 0
+fi
+
+[[ $template =~ ^/ ]] || template=$(realpath -s "$__HERE/../templates/$template")
+
+[[ -d $template ]] || die "No such directory: $template "
+
+[[ -f $template/_meta/install ]] || die "Template $template does not contain a _meta/install script"
+
+$template/_meta/install "$template" "$builder"

tools/builder/bin/make-builder

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+# shellcheck disable=SC2086
+source "$(dirname $0)"/../lib/bash/prelude.bash
+
+builders=${ASPIREBUILD_BUILDER_DIR:-$ASPIREBUILD/builders}
+mkdir -p "$builders"
+
+builder=${1:-$(mktemp -d $builders/builder.XXXXXXXXXX)}
+
+[[ $builder =~ ^/ ]] || builder=$builders/$builder
+
+$__HERE/init-builder $builder >/dev/null
+
+echo $builder

tools/builder/bin/with-temp-builder

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+here=$(dirname "$0")
+source "$here/../lib/bash/prelude.bash"
+
+[[ -n "$*" ]] || die "usage: $0 <cmdline ...>"
+
+builder=$("$__HERE/make-builder")
+[[ -z ${KEEP_BUILDER:-} ]] && trap "rm -rf $builder" EXIT
+
+cd "$builder"
+"$@"

tools/builder/lib

@@ -0,0 +1 @@
+../_common/lib