Improve IWSDK Linux dev-server build robustness

Summary:
- Make xr-input profile generation proxy-aware with curl fallback, explicit offline/refresh modes, and actionable network diagnostics.
- Add Linux dev-server preflight script and package script aliases for dev tarball builds that skip reference-assets.
- Make build-tgz fail fast, show package build errors, and validate package/tarball entrypoints.
- Add pnpm build-script approvals needed for non-interactive Linux dev-server installs while keeping onnxruntime-node disabled for dev flows that skip reference-assets.

Reviewed By: cabanier

Differential Revision: D108167257

fbshipit-source-id: 64bf4f9e0338b71c0bac9cf9a04c64b9fa6f4748

Author: felixtrz

package.json

@@ -7,6 +7,8 @@
     "build": "pnpm --filter '@iwsdk/core' run build",
     "build:all": "pnpm -r run build",
     "build:tgz": "bash ./scripts/build-tgz.sh",
+    "build:tgz:dev": "npm_config_confirmModulesPurge=false bash ./scripts/build-tgz.sh --skip-reference-assets",
+    "build:tgz:skip-reference-assets": "npm_config_confirmModulesPurge=false bash ./scripts/build-tgz.sh --skip-reference-assets",
     "bundle:sdk": "bash ./scripts/build-sdk-bundle.sh",
     "docs:api": "typedoc && node scripts/postprocess-typedoc.cjs",
     "docs:dev": "vitepress dev docs",
@@ -22,6 +24,7 @@
     "prepare": "node scripts/setup-git-hooks.cjs",
     "setup-hooks": "node scripts/setup-git-hooks.cjs",
     "engines:audit": "node scripts/check-engines.mjs",
+    "doctor:linux-dev-server": "bash ./scripts/dev/doctor-linux-dev-server.sh",
     "headers:check": "node scripts/check-headers.mjs --dry-run",
     "headers:fix": "node scripts/check-headers.mjs --fix",
     "three:check": "node scripts/check-three-version.mjs",

packages/xr-input/package.json

@@ -10,6 +10,9 @@
   ],
   "scripts": {
     "prebuild": "node -p \"'export const VERSION = ' + JSON.stringify(require('./package.json').version) + ';'\" > src/version.ts && node scripts/generate-input-profiles.js",
+    "generate:profiles": "node scripts/generate-input-profiles.js",
+    "generate:profiles:force": "node scripts/generate-input-profiles.js --force",
+    "generate:profiles:offline": "node scripts/generate-input-profiles.js --offline",
     "build": "rollup -c",
     "format": "prettier --write ./src/**/*",
     "test": "vitest run"

packages/xr-input/scripts/generate-input-profiles.js

@@ -6,10 +6,14 @@
  * LICENSE file in the root directory of this source tree.
  */
 
+import { execFile } from 'child_process';
 import { fileURLToPath } from 'url';
 import fs from 'fs';
 import https from 'https';
 import path from 'path';
+import { promisify } from 'util';
+
+const execFileAsync = promisify(execFile);
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -21,20 +25,102 @@ const OUTPUT_FILE = path.join(
   '../src/gamepad/generated-profiles.ts',
 );
 
-// Check if we should skip fetching (file exists and --force not passed)
-const forceRefresh = process.argv.includes('--force');
+function readFlagValue(flag) {
+  const prefix = `${flag}=`;
+  const inline = process.argv.find((arg) => arg.startsWith(prefix));
+  if (inline) {
+    return inline.slice(prefix.length);
+  }
+
+  const index = process.argv.indexOf(flag);
+  if (index !== -1) {
+    return process.argv[index + 1];
+  }
+
+  return undefined;
+}
+
+const forceRefresh =
+  process.argv.includes('--force') || process.argv.includes('--refresh');
+const offline = process.argv.includes('--offline');
+const proxyUrl =
+  readFlagValue('--proxy') ??
+  process.env.HTTPS_PROXY ??
+  process.env.https_proxy ??
+  process.env.HTTP_PROXY ??
+  process.env.http_proxy;
+
+function redactUrlForLogs(value) {
+  try {
+    const parsed = new URL(value);
+    if (parsed.username || parsed.password) {
+      parsed.username = '***';
+      parsed.password = '***';
+    }
+    return parsed.toString();
+  } catch {
+    return '<configured>';
+  }
+}
+
+function explainNetworkMode() {
+  if (offline) {
+    console.log(
+      '🌐 Network mode: offline; using existing generated profiles only.',
+    );
+  } else if (proxyUrl) {
+    console.log(
+      `🌐 Network mode: fetching input profiles through proxy ${redactUrlForLogs(proxyUrl)}`,
+    );
+  } else {
+    console.log('🌐 Network mode: direct HTTPS fetch.');
+  }
+}
+
+// Check if we should skip fetching (file exists and --force/--refresh not passed)
 if (!forceRefresh && fs.existsSync(OUTPUT_FILE)) {
   console.log(
     `✅ Input profiles already exist at ${OUTPUT_FILE}, skipping CDN fetch.`,
   );
-  console.log('   Use --force to refresh from CDN.');
+  console.log('   Use --force or --refresh to refresh from CDN.');
   process.exit(0);
 }
 
-function fetchJson(url) {
+if (offline) {
+  console.error(
+    `❌ Offline profile generation requested, but ${OUTPUT_FILE} does not exist.`,
+  );
+  console.error('   Run this command once with network access to create it.');
+  process.exit(1);
+}
+
+function fetchJsonDirect(url, redirectsRemaining = 5) {
   return new Promise((resolve, reject) => {
     https
       .get(url, (res) => {
+        if (
+          res.statusCode &&
+          res.statusCode >= 300 &&
+          res.statusCode < 400 &&
+          res.headers.location &&
+          redirectsRemaining > 0
+        ) {
+          res.resume();
+          const redirectedUrl = new URL(res.headers.location, url).toString();
+          fetchJsonDirect(redirectedUrl, redirectsRemaining - 1)
+            .then(resolve)
+            .catch(reject);
+          return;
+        }
+
+        if (res.statusCode !== 200) {
+          res.resume();
+          reject(
+            new Error(`Request failed for ${url}: HTTP ${res.statusCode}`),
+          );
+          return;
+        }
+
         let data = '';
 
         res.on('data', (chunk) => {
@@ -59,22 +145,39 @@ function fetchJson(url) {
   });
 }
 
-function toCamelCase(str) {
-  return str
-    .replace(/[-\/]/g, ' ')
-    .replace(/\.json$/, '')
-    .split(' ')
-    .map((word, index) => {
-      if (index === 0) {
-        return word.toLowerCase();
-      }
-      return word.charAt(0).toUpperCase() + word.slice(1).toLowerCase();
-    })
-    .join('');
+async function fetchJsonWithCurl(url) {
+  const { stdout } = await execFileAsync(
+    'curl',
+    [
+      '--fail',
+      '--silent',
+      '--show-error',
+      '--location',
+      '--proxy',
+      proxyUrl,
+      url,
+    ],
+    {
+      maxBuffer: 20 * 1024 * 1024,
+    },
+  );
+  return JSON.parse(stdout);
+}
+
+async function fetchJson(url) {
+  try {
+    return proxyUrl ? await fetchJsonWithCurl(url) : await fetchJsonDirect(url);
+  } catch (error) {
+    const hint = proxyUrl
+      ? 'Check that the proxy is reachable and that curl is available.'
+      : 'If you are on a Linux dev server that requires a proxy, set HTTPS_PROXY/HTTP_PROXY or pass --proxy <url>.';
+    throw new Error(`Failed to fetch ${url}. ${hint}`, { cause: error });
+  }
 }
 
 async function generateInputProfiles() {
   try {
+    explainNetworkMode();
     console.log('Fetching profiles list...');
     const profilesList = await fetchJson(`${CDN_BASE_URL}/profilesList.json`);
 
@@ -150,6 +253,9 @@ export function getProfilesList(): ProfilesList {
     console.log(`✅ Generated ${OUTPUT_FILE} with ${profiles.length} profiles`);
   } catch (error) {
     console.error('❌ Error generating input profiles:', error);
+    if (error?.cause) {
+      console.error('Caused by:', error.cause);
+    }
     process.exit(1);
   }
 }

pnpm-workspace.yaml

@@ -1,2 +1,15 @@
 packages:
   - 'packages/*'
+overrides:
+  three: 'npm:super-three@0.181.0'
+  '@types/three': '0.181.0'
+  three-mesh-bvh: '^0.9.1'
+  axios: '^1.12.0'
+  preact: '^10.27.3'
+  '@pmndrs/uikit': '^1.0.62'
+  vite: '7.3.1'
+allowBuilds:
+  esbuild: true
+  onnxruntime-node: false
+  protobufjs: true
+  sharp: true