@aviaratech/ai-delivery 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CONTRIBUTING.md +47 -0
- package/LICENSE +21 -0
- package/README.md +84 -0
- package/dist/agent.d.ts +17 -0
- package/dist/agent.js +16 -0
- package/dist/agent.js.map +1 -0
- package/dist/cli.d.ts +2 -0
- package/dist/cli.js +314 -0
- package/dist/cli.js.map +1 -0
- package/dist/cliResult.d.ts +2 -0
- package/dist/cliResult.js +12 -0
- package/dist/cliResult.js.map +1 -0
- package/dist/cliResult.test.d.ts +1 -0
- package/dist/cliResult.test.js +30 -0
- package/dist/cliResult.test.js.map +1 -0
- package/dist/config/deliveryConfig.d.ts +113 -0
- package/dist/config/deliveryConfig.js +261 -0
- package/dist/config/deliveryConfig.js.map +1 -0
- package/dist/config/deliveryConfig.test.d.ts +1 -0
- package/dist/config/deliveryConfig.test.js +355 -0
- package/dist/config/deliveryConfig.test.js.map +1 -0
- package/dist/delivery/common.d.ts +28 -0
- package/dist/delivery/common.js +117 -0
- package/dist/delivery/common.js.map +1 -0
- package/dist/delivery/delivery.test.d.ts +1 -0
- package/dist/delivery/delivery.test.js +234 -0
- package/dist/delivery/delivery.test.js.map +1 -0
- package/dist/delivery/evidence.d.ts +92 -0
- package/dist/delivery/evidence.js +126 -0
- package/dist/delivery/evidence.js.map +1 -0
- package/dist/delivery/index.d.ts +8 -0
- package/dist/delivery/index.js +5 -0
- package/dist/delivery/index.js.map +1 -0
- package/dist/delivery/policy.d.ts +237 -0
- package/dist/delivery/policy.js +246 -0
- package/dist/delivery/policy.js.map +1 -0
- package/dist/delivery/stage.d.ts +125 -0
- package/dist/delivery/stage.js +218 -0
- package/dist/delivery/stage.js.map +1 -0
- package/dist/dispatch.d.ts +15 -0
- package/dist/dispatch.js +397 -0
- package/dist/dispatch.js.map +1 -0
- package/dist/errors.d.ts +4 -0
- package/dist/errors.js +9 -0
- package/dist/errors.js.map +1 -0
- package/dist/genericCompatibility.test.d.ts +1 -0
- package/dist/genericCompatibility.test.js +92 -0
- package/dist/genericCompatibility.test.js.map +1 -0
- package/dist/git.d.ts +13 -0
- package/dist/git.js +65 -0
- package/dist/git.js.map +1 -0
- package/dist/github/client.d.ts +34 -0
- package/dist/github/client.js +143 -0
- package/dist/github/client.js.map +1 -0
- package/dist/github/commandIdentityPolicy.d.ts +13 -0
- package/dist/github/commandIdentityPolicy.js +46 -0
- package/dist/github/commandIdentityPolicy.js.map +1 -0
- package/dist/github/nativeIssueMetadata.d.ts +78 -0
- package/dist/github/nativeIssueMetadata.js +249 -0
- package/dist/github/nativeIssueMetadata.js.map +1 -0
- package/dist/github/projectDelivery.d.ts +68 -0
- package/dist/github/projectDelivery.js +540 -0
- package/dist/github/projectDelivery.js.map +1 -0
- package/dist/github/relationships.d.ts +69 -0
- package/dist/github/relationships.js +395 -0
- package/dist/github/relationships.js.map +1 -0
- package/dist/github/repo.d.ts +8 -0
- package/dist/github/repo.js +34 -0
- package/dist/github/repo.js.map +1 -0
- package/dist/index.d.ts +2 -0
- package/dist/index.js +3 -0
- package/dist/index.js.map +1 -0
- package/dist/issue.d.ts +86 -0
- package/dist/issue.js +347 -0
- package/dist/issue.js.map +1 -0
- package/dist/lifecycle.test.d.ts +1 -0
- package/dist/lifecycle.test.js +1118 -0
- package/dist/lifecycle.test.js.map +1 -0
- package/dist/logger.d.ts +21 -0
- package/dist/logger.js +86 -0
- package/dist/logger.js.map +1 -0
- package/dist/mcp/index.d.ts +5 -0
- package/dist/mcp/index.js +46 -0
- package/dist/mcp/index.js.map +1 -0
- package/dist/mcp/tools.d.ts +162 -0
- package/dist/mcp/tools.js +154 -0
- package/dist/mcp/tools.js.map +1 -0
- package/dist/pr.d.ts +146 -0
- package/dist/pr.js +972 -0
- package/dist/pr.js.map +1 -0
- package/dist/pr.test.d.ts +1 -0
- package/dist/pr.test.js +252 -0
- package/dist/pr.test.js.map +1 -0
- package/dist/review.d.ts +104 -0
- package/dist/review.js +228 -0
- package/dist/review.js.map +1 -0
- package/dist/review.test.d.ts +1 -0
- package/dist/review.test.js +327 -0
- package/dist/review.test.js.map +1 -0
- package/dist/services/agentReadinessService.d.ts +17 -0
- package/dist/services/agentReadinessService.js +225 -0
- package/dist/services/agentReadinessService.js.map +1 -0
- package/dist/services/deliveryAdmission.d.ts +33 -0
- package/dist/services/deliveryAdmission.js +122 -0
- package/dist/services/deliveryAdmission.js.map +1 -0
- package/dist/services/deliveryRecordService.d.ts +47 -0
- package/dist/services/deliveryRecordService.js +199 -0
- package/dist/services/deliveryRecordService.js.map +1 -0
- package/dist/services/legacyIssueMigration.d.ts +46 -0
- package/dist/services/legacyIssueMigration.js +313 -0
- package/dist/services/legacyIssueMigration.js.map +1 -0
- package/dist/services/worktreeRegistry.d.ts +67 -0
- package/dist/services/worktreeRegistry.js +545 -0
- package/dist/services/worktreeRegistry.js.map +1 -0
- package/dist/terminalMessages.d.ts +13 -0
- package/dist/terminalMessages.js +43 -0
- package/dist/terminalMessages.js.map +1 -0
- package/dist/utils/atomicJson.d.ts +6 -0
- package/dist/utils/atomicJson.js +78 -0
- package/dist/utils/atomicJson.js.map +1 -0
- package/dist/utils/filesystem.d.ts +9 -0
- package/dist/utils/filesystem.js +19 -0
- package/dist/utils/filesystem.js.map +1 -0
- package/dist/utils/lockfile.d.ts +12 -0
- package/dist/utils/lockfile.js +78 -0
- package/dist/utils/lockfile.js.map +1 -0
- package/dist/verification.d.ts +24 -0
- package/dist/verification.js +227 -0
- package/dist/verification.js.map +1 -0
- package/dist/worktree.d.ts +44 -0
- package/dist/worktree.js +255 -0
- package/dist/worktree.js.map +1 -0
- package/package.json +82 -0
- package/plugins/ai-delivery/.claude-plugin/plugin.json +6 -0
- package/plugins/ai-delivery/.mcp.json +8 -0
- package/plugins/ai-delivery/README.md +5 -0
- package/plugins/ai-delivery/dist/mcp-launcher.js +22 -0
- package/plugins/ai-delivery/skills/intake-create/SKILL.md +26 -0
- package/plugins/ai-delivery/skills/pr-handoff/SKILL.md +28 -0
- package/plugins/ai-delivery/skills/worktree-lifecycle/SKILL.md +24 -0
|
@@ -0,0 +1,355 @@
|
|
|
1
|
+
import assert from 'node:assert/strict';
|
|
2
|
+
import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
|
|
3
|
+
import { spawnSync } from 'node:child_process';
|
|
4
|
+
import { tmpdir } from 'node:os';
|
|
5
|
+
import { join } from 'node:path';
|
|
6
|
+
import { describe, it } from 'vitest';
|
|
7
|
+
import { assertDeliveryRolePermissions, createDeliveryGitHubClients } from '../github/client.js';
|
|
8
|
+
import { evaluateCommandIdentityPolicy } from '../github/commandIdentityPolicy.js';
|
|
9
|
+
import { clearConfiguredNativeIssuePoints, nativeIssueSettingsFromDeliveryConfig, parseConfiguredNativeIssueMetadata, resolveNativeIssueFieldCatalog, setConfiguredNativeIssueMetadata, validateConfiguredNativeTracking, } from '../github/nativeIssueMetadata.js';
|
|
10
|
+
import { PROJECT_DELIVERY_STATUSES, projectSettingsFromDeliveryConfig, resolveProjectDeliveryConfiguration, syncIssueProjectStatus, } from '../github/projectDelivery.js';
|
|
11
|
+
import { resolveDeliveryRepo } from '../github/repo.js';
|
|
12
|
+
import { loadDeliveryConfig, parseDeliveryConfig, resolveDeliveryRoleCredentials } from './deliveryConfig.js';
|
|
13
|
+
function git(args, options = {}) {
|
|
14
|
+
const result = spawnSync('git', args, { ...options, encoding: 'utf8' });
|
|
15
|
+
assert.equal(result.status, 0, result.stderr);
|
|
16
|
+
}
|
|
17
|
+
function syntheticConfig(input) {
|
|
18
|
+
const { owner, projectNumber, repo } = input;
|
|
19
|
+
const second = repo === 'service';
|
|
20
|
+
return {
|
|
21
|
+
commandPolicy: {
|
|
22
|
+
checks: { format: 'REQUIRED', gitClean: 'REQUIRED', lint: 'REQUIRED', test: 'REQUIRED', typecheck: 'REQUIRED' },
|
|
23
|
+
timeoutsMs: { lint: 60_000, test: 60_000, typecheck: 60_000 },
|
|
24
|
+
},
|
|
25
|
+
native: {
|
|
26
|
+
issueTypes: ['Task', 'Defect'],
|
|
27
|
+
milestones: 'repository',
|
|
28
|
+
organization: owner,
|
|
29
|
+
points: second
|
|
30
|
+
? { databaseId: '201', name: 'Complexity', values: ['1', '3', '6'] }
|
|
31
|
+
: { databaseId: '101', name: 'Estimate', values: ['1', '2', '4'] },
|
|
32
|
+
priority: second
|
|
33
|
+
? { databaseId: '202', name: 'Severity', values: ['Critical', 'Normal'] }
|
|
34
|
+
: { databaseId: '102', name: 'Urgency', values: ['High', 'Low'] },
|
|
35
|
+
project: {
|
|
36
|
+
number: projectNumber,
|
|
37
|
+
statuses: second
|
|
38
|
+
? { blocked: 'Held', done: 'Complete', inProgress: 'Doing', todo: 'Backlog' }
|
|
39
|
+
: { blocked: 'Waiting', done: 'Shipped', inProgress: 'Active', todo: 'Queued' },
|
|
40
|
+
statusField: second ? 'Stage' : 'Flow',
|
|
41
|
+
title: 'Delivery',
|
|
42
|
+
},
|
|
43
|
+
relationships: { blockedBy: 'native', parent: 'native' },
|
|
44
|
+
},
|
|
45
|
+
policy: { contract: 'RepositoryDeliveryPolicy@1', module: './policy.mjs' },
|
|
46
|
+
repository: `${owner}/${repo}`,
|
|
47
|
+
roles: {
|
|
48
|
+
author: {
|
|
49
|
+
credentialEnv: {
|
|
50
|
+
appId: 'AUTHOR_APP_ID',
|
|
51
|
+
installationId: 'AUTHOR_INSTALLATION_ID',
|
|
52
|
+
privateKeyPath: 'AUTHOR_KEY_PATH',
|
|
53
|
+
},
|
|
54
|
+
identity: 'synthetic-author',
|
|
55
|
+
},
|
|
56
|
+
reviewer: {
|
|
57
|
+
credentialEnv: {
|
|
58
|
+
appId: 'REVIEWER_APP_ID',
|
|
59
|
+
installationId: 'REVIEWER_INSTALLATION_ID',
|
|
60
|
+
privateKeyPath: 'REVIEWER_KEY_PATH',
|
|
61
|
+
},
|
|
62
|
+
identity: 'synthetic-reviewer',
|
|
63
|
+
},
|
|
64
|
+
},
|
|
65
|
+
schemaVersion: 'ai-delivery.config@1',
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
function syntheticProject(config) {
|
|
69
|
+
const settings = projectSettingsFromDeliveryConfig(config);
|
|
70
|
+
const field = (input) => ({
|
|
71
|
+
__typename: 'ProjectV2SingleSelectField',
|
|
72
|
+
id: `${input.name}-field`,
|
|
73
|
+
isIssueField: true,
|
|
74
|
+
issueField: {
|
|
75
|
+
__typename: 'IssueFieldSingleSelect',
|
|
76
|
+
fullDatabaseId: input.databaseId,
|
|
77
|
+
name: input.name,
|
|
78
|
+
options: input.values.map((value, index) => ({ id: String(index + 1), name: value })),
|
|
79
|
+
},
|
|
80
|
+
name: input.name,
|
|
81
|
+
options: [],
|
|
82
|
+
});
|
|
83
|
+
return {
|
|
84
|
+
fields: {
|
|
85
|
+
nodes: [
|
|
86
|
+
{
|
|
87
|
+
__typename: 'ProjectV2SingleSelectField',
|
|
88
|
+
id: 'flow-field',
|
|
89
|
+
isIssueField: false,
|
|
90
|
+
name: settings.statusField,
|
|
91
|
+
options: PROJECT_DELIVERY_STATUSES.map((status, index) => ({
|
|
92
|
+
id: `S${String(index)}`,
|
|
93
|
+
name: settings.statuses[status],
|
|
94
|
+
})),
|
|
95
|
+
},
|
|
96
|
+
field(settings.points),
|
|
97
|
+
field(settings.priority),
|
|
98
|
+
],
|
|
99
|
+
},
|
|
100
|
+
id: 'project-node',
|
|
101
|
+
number: settings.number,
|
|
102
|
+
title: settings.title,
|
|
103
|
+
viewerCanUpdate: true,
|
|
104
|
+
};
|
|
105
|
+
}
|
|
106
|
+
describe('portable delivery configuration', () => {
|
|
107
|
+
it('loads two independent repository roots and binds native metadata to each configuration', async () => {
|
|
108
|
+
const temp = mkdtempSync(join(tmpdir(), 'delivery-config-'));
|
|
109
|
+
try {
|
|
110
|
+
for (const [owner, repo, projectNumber] of [
|
|
111
|
+
['sample-one', 'widget', 7],
|
|
112
|
+
['sample-two', 'service', 12],
|
|
113
|
+
]) {
|
|
114
|
+
const root = join(temp, repo);
|
|
115
|
+
mkdirSync(root);
|
|
116
|
+
git(['init', '--quiet', root]);
|
|
117
|
+
git(['remote', 'add', 'origin', `https://github.com/${owner}/${repo}.git`], { cwd: root });
|
|
118
|
+
writeFileSync(join(root, 'policy.mjs'), 'export const contract = "RepositoryDeliveryPolicy@1";\n');
|
|
119
|
+
writeFileSync(join(root, 'ai-delivery.config.json'), JSON.stringify(syntheticConfig({ owner, projectNumber, repo })));
|
|
120
|
+
git(['add', 'policy.mjs', 'ai-delivery.config.json'], { cwd: root });
|
|
121
|
+
const loaded = loadDeliveryConfig(root);
|
|
122
|
+
assert.match(loaded.configDigest, /^sha256:[a-f0-9]{64}$/u);
|
|
123
|
+
assert.deepEqual(resolveDeliveryRepo(loaded.config, root), { owner, repo });
|
|
124
|
+
assert.throws(() => resolveDeliveryRepo({ ...loaded.config, repository: `${owner}/foreign` }, root), /does not match remote/u);
|
|
125
|
+
const project = resolveProjectDeliveryConfiguration(syntheticProject(loaded.config), {
|
|
126
|
+
requireWritable: true,
|
|
127
|
+
settings: projectSettingsFromDeliveryConfig(loaded.config),
|
|
128
|
+
});
|
|
129
|
+
assert.equal(project.projectNumber, projectNumber);
|
|
130
|
+
assert.equal(project.statusOptionIds['In Progress'], 'S1');
|
|
131
|
+
const statusField = loaded.config.native.project.statusField;
|
|
132
|
+
const inProgressName = loaded.config.native.project.statuses.inProgress;
|
|
133
|
+
const graphql = (query, variables) => {
|
|
134
|
+
if (query.includes('ProjectDeliveryItems')) {
|
|
135
|
+
assert.equal(variables.number, projectNumber);
|
|
136
|
+
assert.equal(variables.statusField, statusField);
|
|
137
|
+
return Promise.resolve({
|
|
138
|
+
organization: { projectV2: { items: { nodes: [], pageInfo: { endCursor: null, hasNextPage: false } } } },
|
|
139
|
+
});
|
|
140
|
+
}
|
|
141
|
+
if (query.includes('AddProjectDeliveryItem')) {
|
|
142
|
+
return Promise.resolve({ addProjectV2ItemById: { item: { id: 'ITEM' } } });
|
|
143
|
+
}
|
|
144
|
+
if (query.includes('UpdateProjectDeliveryStatus')) {
|
|
145
|
+
assert.equal(variables.optionId, 'S1');
|
|
146
|
+
return Promise.resolve({ updateProjectV2ItemFieldValue: { projectV2Item: { id: 'ITEM' } } });
|
|
147
|
+
}
|
|
148
|
+
if (query.includes('ProjectDeliveryItemReadback')) {
|
|
149
|
+
assert.equal(variables.statusField, statusField);
|
|
150
|
+
return Promise.resolve({
|
|
151
|
+
node: {
|
|
152
|
+
content: { id: 'ISSUE' },
|
|
153
|
+
fieldValueByName: { name: inProgressName, optionId: 'S1' },
|
|
154
|
+
id: 'ITEM',
|
|
155
|
+
isArchived: false,
|
|
156
|
+
project: { id: 'project-node', number: projectNumber },
|
|
157
|
+
},
|
|
158
|
+
});
|
|
159
|
+
}
|
|
160
|
+
return Promise.reject(new Error('Unexpected synthetic GraphQL operation.'));
|
|
161
|
+
};
|
|
162
|
+
assert.deepEqual(await syncIssueProjectStatus({
|
|
163
|
+
configuration: project,
|
|
164
|
+
graphql: graphql,
|
|
165
|
+
issueNodeId: 'ISSUE',
|
|
166
|
+
org: owner,
|
|
167
|
+
status: 'In Progress',
|
|
168
|
+
}), { itemId: 'ITEM', status: 'In Progress' });
|
|
169
|
+
const settings = nativeIssueSettingsFromDeliveryConfig(loaded.config);
|
|
170
|
+
const selectedPoints = settings.points.values.at(-1);
|
|
171
|
+
const selectedPriority = settings.priority.values[0];
|
|
172
|
+
assert.ok(selectedPoints !== undefined);
|
|
173
|
+
assert.ok(selectedPriority !== undefined);
|
|
174
|
+
const catalog = resolveNativeIssueFieldCatalog([
|
|
175
|
+
{
|
|
176
|
+
data_type: 'single_select',
|
|
177
|
+
id: Number(settings.points.databaseId),
|
|
178
|
+
name: settings.points.name,
|
|
179
|
+
options: [...settings.points.values].reverse().map((value) => ({ name: String(value) })),
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
data_type: 'single_select',
|
|
183
|
+
id: Number(settings.priority.databaseId),
|
|
184
|
+
name: settings.priority.name,
|
|
185
|
+
options: [...settings.priority.values].reverse().map((name) => ({ name })),
|
|
186
|
+
},
|
|
187
|
+
], settings);
|
|
188
|
+
assert.equal(catalog.points.name, settings.points.name);
|
|
189
|
+
assert.deepEqual(parseConfiguredNativeIssueMetadata([
|
|
190
|
+
{
|
|
191
|
+
data_type: 'single_select',
|
|
192
|
+
issue_field_id: Number(settings.points.databaseId),
|
|
193
|
+
issue_field_name: settings.points.name,
|
|
194
|
+
single_select_option: { name: String(selectedPoints) },
|
|
195
|
+
},
|
|
196
|
+
{
|
|
197
|
+
data_type: 'single_select',
|
|
198
|
+
issue_field_id: Number(settings.priority.databaseId),
|
|
199
|
+
issue_field_name: settings.priority.name,
|
|
200
|
+
single_select_option: { name: selectedPriority },
|
|
201
|
+
},
|
|
202
|
+
], settings), { points: selectedPoints, priority: selectedPriority });
|
|
203
|
+
assert.doesNotThrow(() => {
|
|
204
|
+
validateConfiguredNativeTracking({
|
|
205
|
+
blockedBy: [17],
|
|
206
|
+
config: loaded.config,
|
|
207
|
+
issueNumber: 20,
|
|
208
|
+
issueType: 'Defect',
|
|
209
|
+
milestone: 3,
|
|
210
|
+
parentIssueNumber: 15,
|
|
211
|
+
points: selectedPoints,
|
|
212
|
+
priority: selectedPriority,
|
|
213
|
+
});
|
|
214
|
+
});
|
|
215
|
+
}
|
|
216
|
+
}
|
|
217
|
+
finally {
|
|
218
|
+
rmSync(temp, { force: true, recursive: true });
|
|
219
|
+
}
|
|
220
|
+
});
|
|
221
|
+
it('rejects missing configuration, unsupported policy and role collisions without printing secrets', async () => {
|
|
222
|
+
const base = syntheticConfig({ owner: 'sample', projectNumber: 7, repo: 'widget' });
|
|
223
|
+
const temp = mkdtempSync(join(tmpdir(), 'delivery-invalid-'));
|
|
224
|
+
try {
|
|
225
|
+
assert.throws(() => loadDeliveryConfig(temp), /Missing repository-root ai-delivery.config.json/u);
|
|
226
|
+
assert.throws(() => parseDeliveryConfig({ ...base, policy: { ...base.policy, contract: 'wrong' } }), /policy.contract/u);
|
|
227
|
+
assert.throws(() => parseDeliveryConfig({
|
|
228
|
+
...base,
|
|
229
|
+
roles: { ...base.roles, reviewer: { ...base.roles.reviewer, identity: base.roles.author.identity } },
|
|
230
|
+
}), /distinct/u);
|
|
231
|
+
assert.throws(() => parseDeliveryConfig({
|
|
232
|
+
...base,
|
|
233
|
+
roles: {
|
|
234
|
+
...base.roles,
|
|
235
|
+
reviewer: { ...base.roles.reviewer, credentialEnv: base.roles.author.credentialEnv },
|
|
236
|
+
},
|
|
237
|
+
}), /environment names must be distinct/u);
|
|
238
|
+
assert.throws(() => parseDeliveryConfig({
|
|
239
|
+
...base,
|
|
240
|
+
native: {
|
|
241
|
+
...base.native,
|
|
242
|
+
priority: { ...base.native.priority, databaseId: base.native.points.databaseId },
|
|
243
|
+
},
|
|
244
|
+
}), /field IDs must be distinct/u);
|
|
245
|
+
assert.throws(() => parseDeliveryConfig({ ...base, privateKey: 'synthetic-secret' }), (error) => {
|
|
246
|
+
assert.doesNotMatch(String(error), /synthetic-secret/u);
|
|
247
|
+
return true;
|
|
248
|
+
});
|
|
249
|
+
const config = parseDeliveryConfig(base);
|
|
250
|
+
assert.throws(() => resolveProjectDeliveryConfiguration({ ...syntheticProject(config), viewerCanUpdate: false }, { requireWritable: true, settings: projectSettingsFromDeliveryConfig(config) }), /not writable/u);
|
|
251
|
+
git(['init', '--quiet', temp]);
|
|
252
|
+
writeFileSync(join(temp, 'policy.mjs'), 'export const contract = "RepositoryDeliveryPolicy@1";\n');
|
|
253
|
+
writeFileSync(join(temp, 'ai-delivery.config.json'), JSON.stringify(base));
|
|
254
|
+
git(['add', 'ai-delivery.config.json'], { cwd: temp });
|
|
255
|
+
assert.throws(() => loadDeliveryConfig(temp), /must be source-controlled/u);
|
|
256
|
+
assert.throws(() => resolveDeliveryRoleCredentials({ config, env: {}, role: 'author' }), /Missing GitHub App credentials for author/u);
|
|
257
|
+
await assert.rejects(createDeliveryGitHubClients({ config, env: {}, identity: 'synthetic-reviewer', role: 'author' }), /requires the configured author identity/u);
|
|
258
|
+
await assert.rejects(createDeliveryGitHubClients({ config, env: {}, identity: 'personal', role: 'reviewer' }), /configured reviewer identity/u);
|
|
259
|
+
await assert.rejects(createDeliveryGitHubClients({ config, env: { GH_TOKEN: 'inert-token' }, identity: 'personal', role: 'author' }), /configured author identity/u);
|
|
260
|
+
await assert.rejects(createDeliveryGitHubClients({
|
|
261
|
+
config,
|
|
262
|
+
env: { GH_TOKEN: 'inert-token' },
|
|
263
|
+
identity: 'synthetic-author',
|
|
264
|
+
role: 'author',
|
|
265
|
+
}), /Missing GitHub App credentials/u);
|
|
266
|
+
const personal = await createDeliveryGitHubClients({
|
|
267
|
+
config,
|
|
268
|
+
env: {},
|
|
269
|
+
identity: 'personal',
|
|
270
|
+
personalAuth: { enabled: true, token: 'inert-token' },
|
|
271
|
+
role: 'author',
|
|
272
|
+
});
|
|
273
|
+
assert.equal(personal.authSource, 'personal');
|
|
274
|
+
await assert.rejects(createDeliveryGitHubClients({
|
|
275
|
+
config,
|
|
276
|
+
env: { GH_TOKEN: 'inert-token' },
|
|
277
|
+
identity: 'personal',
|
|
278
|
+
personalAuth: { enabled: true },
|
|
279
|
+
role: 'reviewer',
|
|
280
|
+
}), /explicit personal author identity/u);
|
|
281
|
+
assert.throws(() => assertDeliveryRolePermissions({
|
|
282
|
+
permissions: { contents: 'read', issues: 'write', pull_requests: 'write' },
|
|
283
|
+
role: 'author',
|
|
284
|
+
}), /contents:write/u);
|
|
285
|
+
assert.throws(() => assertDeliveryRolePermissions({
|
|
286
|
+
permissions: { contents: 'write', issues: 'write', pull_requests: 'write' },
|
|
287
|
+
role: 'author',
|
|
288
|
+
}), /organization_projects:write/u);
|
|
289
|
+
const sameAppEnv = {
|
|
290
|
+
AUTHOR_APP_ID: '101',
|
|
291
|
+
AUTHOR_INSTALLATION_ID: '201',
|
|
292
|
+
AUTHOR_KEY_PATH: join(temp, 'inert-author.pem'),
|
|
293
|
+
REVIEWER_APP_ID: '101',
|
|
294
|
+
REVIEWER_INSTALLATION_ID: '202',
|
|
295
|
+
REVIEWER_KEY_PATH: join(temp, 'inert-reviewer.pem'),
|
|
296
|
+
};
|
|
297
|
+
await assert.rejects(createDeliveryGitHubClients({ config, env: sameAppEnv, identity: 'synthetic-author', role: 'author' }), /distinct GitHub App credentials/u);
|
|
298
|
+
assert.equal(evaluateCommandIdentityPolicy({
|
|
299
|
+
commandName: 'pr:create',
|
|
300
|
+
deliveryConfig: config,
|
|
301
|
+
identity: 'synthetic-author',
|
|
302
|
+
}).error, null);
|
|
303
|
+
assert.equal(evaluateCommandIdentityPolicy({
|
|
304
|
+
commandName: 'pr:review',
|
|
305
|
+
deliveryConfig: config,
|
|
306
|
+
identity: 'synthetic-reviewer',
|
|
307
|
+
}).error, null);
|
|
308
|
+
assert.match(evaluateCommandIdentityPolicy({
|
|
309
|
+
commandName: 'pr:review',
|
|
310
|
+
deliveryConfig: config,
|
|
311
|
+
identity: 'synthetic-author',
|
|
312
|
+
}).error ?? '', /configured reviewer identity/u);
|
|
313
|
+
assert.match(evaluateCommandIdentityPolicy({ commandName: 'pr:create', deliveryConfig: config, identity: 'personal' })
|
|
314
|
+
.error ?? '', /personal-token fallback/u);
|
|
315
|
+
assert.throws(() => {
|
|
316
|
+
validateConfiguredNativeTracking({ config, issueType: 'Task', points: 3, priority: 'High' });
|
|
317
|
+
}, /Unsupported native Estimate/u);
|
|
318
|
+
}
|
|
319
|
+
finally {
|
|
320
|
+
rmSync(temp, { force: true, recursive: true });
|
|
321
|
+
}
|
|
322
|
+
});
|
|
323
|
+
it('rejects a foreign cached field catalog before either configured native mutation', async () => {
|
|
324
|
+
const config = parseDeliveryConfig(syntheticConfig({ owner: 'sample', projectNumber: 7, repo: 'widget' }));
|
|
325
|
+
const settings = nativeIssueSettingsFromDeliveryConfig(config);
|
|
326
|
+
const catalog = {
|
|
327
|
+
points: { dataType: 'single_select', id: 201, name: settings.points.name },
|
|
328
|
+
priority: { dataType: 'single_select', id: 102, name: settings.priority.name },
|
|
329
|
+
};
|
|
330
|
+
let mutations = 0;
|
|
331
|
+
const rest = {
|
|
332
|
+
request: (route) => {
|
|
333
|
+
if (route.startsWith('GET ')) {
|
|
334
|
+
return Promise.resolve({
|
|
335
|
+
data: [
|
|
336
|
+
{
|
|
337
|
+
data_type: 'single_select',
|
|
338
|
+
issue_field_id: 101,
|
|
339
|
+
issue_field_name: settings.points.name,
|
|
340
|
+
single_select_option: { name: '1' },
|
|
341
|
+
},
|
|
342
|
+
],
|
|
343
|
+
});
|
|
344
|
+
}
|
|
345
|
+
mutations += 1;
|
|
346
|
+
return Promise.resolve({ data: [] });
|
|
347
|
+
},
|
|
348
|
+
};
|
|
349
|
+
const input = { catalog, issueNumber: 17, org: 'sample', owner: 'sample', repo: 'widget', rest, settings };
|
|
350
|
+
await assert.rejects(setConfiguredNativeIssueMetadata({ ...input, metadata: { points: 1 } }), /catalog does not match/u);
|
|
351
|
+
await assert.rejects(clearConfiguredNativeIssuePoints(input), /catalog does not match/u);
|
|
352
|
+
assert.equal(mutations, 0);
|
|
353
|
+
});
|
|
354
|
+
});
|
|
355
|
+
//# sourceMappingURL=deliveryConfig.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deliveryConfig.test.js","sourceRoot":"","sources":["../../src/config/deliveryConfig.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,gCAAgC,EAChC,qCAAqC,EACrC,kCAAkC,EAClC,8BAA8B,EAC9B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAE9G,SAAS,GAAG,CAAC,IAAc,EAAE,UAA4B,EAAE;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,KAA6D;IACpF,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC;IAClC,OAAO;QACL,aAAa,EAAE;YACb,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE;YAC/G,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;SAC9D;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC9B,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;gBACpE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACzE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACnE,OAAO,EAAE;gBACP,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,MAAM;oBACd,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC7E,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjF,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACtC,KAAK,EAAE,UAAU;aAClB;YACD,aAAa,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SACzD;QACD,MAAM,EAAE,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,cAAc,EAAE;QAC1E,UAAU,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE;QAC9B,KAAK,EAAE;YACL,MAAM,EAAE;gBACN,aAAa,EAAE;oBACb,KAAK,EAAE,eAAe;oBACtB,cAAc,EAAE,wBAAwB;oBACxC,cAAc,EAAE,iBAAiB;iBAClC;gBACD,QAAQ,EAAE,kBAAkB;aAC7B;YACD,QAAQ,EAAE;gBACR,aAAa,EAAE;oBACb,KAAK,EAAE,iBAAiB;oBACxB,cAAc,EAAE,0BAA0B;oBAC1C,cAAc,EAAE,mBAAmB;iBACpC;gBACD,QAAQ,EAAE,oBAAoB;aAC/B;SACF;QACD,aAAa,EAAE,sBAAsB;KAC7B,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA8C;IACtE,MAAM,QAAQ,GAAG,iCAAiC,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,KAAsE,EAAE,EAAE,CAAC,CAAC;QACzF,UAAU,EAAE,4BAA4B;QACxC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,QAAQ;QACzB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE;YACV,UAAU,EAAE,wBAAwB;YACpC,cAAc,EAAE,KAAK,CAAC,UAAU;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACtF;QACD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,EAAE;KACZ,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE;gBACL;oBACE,UAAU,EAAE,4BAA4B;oBACxC,EAAE,EAAE,YAAY;oBAChB,YAAY,EAAE,KAAK;oBACnB,IAAI,EAAE,QAAQ,CAAC,WAAW;oBAC1B,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;wBACzD,EAAE,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE;wBACvB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;qBAChC,CAAC,CAAC;iBACJ;gBACD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACtB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACzB;SACF;QACD,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI;gBACzC,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3B,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC;aACrB,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC/B,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBACnG,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAChE,CAAC;gBACF,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,yBAAyB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;gBAC5D,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,UAAU,EAAE,EAAE,IAAI,CAAC,EACrF,wBAAwB,CACzB,CAAC;gBACF,MAAM,OAAO,GAAG,mCAAmC,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBACnF,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,iCAAiC,CAAC,MAAM,CAAC,MAAM,CAAC;iBAC3D,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBACnD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC7D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACxE,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,SAAkC,EAAE,EAAE;oBACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;wBAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;wBAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;wBACjD,OAAO,OAAO,CAAC,OAAO,CAAC;4BACrB,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;yBACzG,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;wBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC7E,CAAC;oBACD,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;wBAClD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,6BAA6B,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC/F,CAAC;oBACD,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;wBAClD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;wBACjD,OAAO,OAAO,CAAC,OAAO,CAAC;4BACrB,IAAI,EAAE;gCACJ,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;gCACxB,gBAAgB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;gCAC1D,EAAE,EAAE,MAAM;gCACV,UAAU,EAAE,KAAK;gCACjB,OAAO,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE;6BACvD;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;gBAC9E,CAAC,CAAC;gBACF,MAAM,CAAC,SAAS,CACd,MAAM,sBAAsB,CAAC;oBAC3B,aAAa,EAAE,OAAO;oBACtB,OAAO,EAAE,OAAgB;oBACzB,WAAW,EAAE,OAAO;oBACpB,GAAG,EAAE,KAAK;oBACV,MAAM,EAAE,aAAa;iBACtB,CAAC,EACF,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1C,CAAC;gBACF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtE,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrD,MAAM,CAAC,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC;gBACxC,MAAM,CAAC,EAAE,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,8BAA8B,CAC5C;oBACE;wBACE,SAAS,EAAE,eAAe;wBAC1B,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;wBACtC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;wBAC1B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;qBACzF;oBACD;wBACE,SAAS,EAAE,eAAe;wBAC1B,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;wBACxC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;wBAC5B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3E;iBACF,EACD,QAAQ,CACT,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,CACd,kCAAkC,CAChC;oBACE;wBACE,SAAS,EAAE,eAAe;wBAC1B,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;wBAClD,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;wBACtC,oBAAoB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE;qBACvD;oBACD;wBACE,SAAS,EAAE,eAAe;wBAC1B,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;wBACpD,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;wBACxC,oBAAoB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;qBACjD;iBACF,EACD,QAAQ,CACT,EACD,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CACvD,CAAC;gBACF,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;oBACvB,gCAAgC,CAAC;wBAC/B,SAAS,EAAE,CAAC,EAAE,CAAC;wBACf,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,WAAW,EAAE,EAAE;wBACf,SAAS,EAAE,QAAQ;wBACnB,SAAS,EAAE,CAAC;wBACZ,iBAAiB,EAAE,EAAE;wBACrB,MAAM,EAAE,cAAc;wBACtB,QAAQ,EAAE,gBAAgB;qBAC3B,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,kDAAkD,CAAC,CAAC;YAClG,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,EACrF,kBAAkB,CACnB,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,mBAAmB,CAAC;gBAClB,GAAG,IAAI;gBACP,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;aACrG,CAAC,EACJ,WAAW,CACZ,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,mBAAmB,CAAC;gBAClB,GAAG,IAAI;gBACP,KAAK,EAAE;oBACL,GAAG,IAAI,CAAC,KAAK;oBACb,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;iBACrF;aACF,CAAC,EACJ,qCAAqC,CACtC,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,mBAAmB,CAAC;gBAClB,GAAG,IAAI;gBACP,MAAM,EAAE;oBACN,GAAG,IAAI,CAAC,MAAM;oBACd,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;iBACjF;aACF,CAAC,EACJ,6BAA6B,CAC9B,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,mCAAmC,CACjC,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,EACvD,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,iCAAiC,CAAC,MAAM,CAAC,EAAE,CAC/E,EACH,eAAe,CAChB,CAAC;YACF,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,yDAAyD,CAAC,CAAC;YACnG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,GAAG,CAAC,CAAC,KAAK,EAAE,yBAAyB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,8BAA8B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EACzE,4CAA4C,CAC7C,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAChG,0CAA0C,CAC3C,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EACxF,+BAA+B,CAChC,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAC/G,6BAA6B,CAC9B,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC;gBAC1B,MAAM;gBACN,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;gBAChC,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,QAAQ;aACf,CAAC,EACF,iCAAiC,CAClC,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;gBACjD,MAAM;gBACN,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE;gBACrD,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC9C,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC;gBAC1B,MAAM;gBACN,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;gBAChC,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC/B,IAAI,EAAE,UAAU;aACjB,CAAC,EACF,oCAAoC,CACrC,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,6BAA6B,CAAC;gBAC5B,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE;gBAC1E,IAAI,EAAE,QAAQ;aACf,CAAC,EACJ,iBAAiB,CAClB,CAAC;YACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,6BAA6B,CAAC;gBAC5B,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE;gBAC3E,IAAI,EAAE,QAAQ;aACf,CAAC,EACJ,8BAA8B,CAC/B,CAAC;YACF,MAAM,UAAU,GAAG;gBACjB,aAAa,EAAE,KAAK;gBACpB,sBAAsB,EAAE,KAAK;gBAC7B,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAC/C,eAAe,EAAE,KAAK;gBACtB,wBAAwB,EAAE,KAAK;gBAC/B,iBAAiB,EAAE,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC;aACpD,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,2BAA2B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EACtG,kCAAkC,CACnC,CAAC;YACF,MAAM,CAAC,KAAK,CACV,6BAA6B,CAAC;gBAC5B,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,MAAM;gBACtB,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC,KAAK,EACR,IAAI,CACL,CAAC;YACF,MAAM,CAAC,KAAK,CACV,6BAA6B,CAAC;gBAC5B,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,MAAM;gBACtB,QAAQ,EAAE,oBAAoB;aAC/B,CAAC,CAAC,KAAK,EACR,IAAI,CACL,CAAC;YACF,MAAM,CAAC,KAAK,CACV,6BAA6B,CAAC;gBAC5B,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,MAAM;gBACtB,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC,KAAK,IAAI,EAAE,EACd,+BAA+B,CAChC,CAAC;YACF,MAAM,CAAC,KAAK,CACV,6BAA6B,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;iBACtG,KAAK,IAAI,EAAE,EACd,0BAA0B,CAC3B,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;gBACjB,gCAAgC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/F,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,QAAQ,GAAG,qCAAqC,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAwB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;YACnF,QAAQ,EAAE,EAAE,QAAQ,EAAE,eAAwB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;SACxF,CAAC;QACF,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzB,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,OAAO,OAAO,CAAC,OAAO,CAAC;wBACrB,IAAI,EAAE;4BACJ;gCACE,SAAS,EAAE,eAAe;gCAC1B,cAAc,EAAE,GAAG;gCACnB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;gCACtC,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;6BACpC;yBACF;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;SACF,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3G,MAAM,MAAM,CAAC,OAAO,CAClB,gCAAgC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EACvE,yBAAyB,CAC1B,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
export declare const DigestSchema: z.ZodString;
|
|
3
|
+
export declare const ShaSchema: z.ZodString;
|
|
4
|
+
export declare const RepositorySchema: z.ZodString;
|
|
5
|
+
export declare const StageIdSchema: z.ZodString;
|
|
6
|
+
export declare const CoordinateSchema: z.ZodObject<{
|
|
7
|
+
sha: z.ZodString;
|
|
8
|
+
tree: z.ZodString;
|
|
9
|
+
}, z.core.$strict>;
|
|
10
|
+
export type Coordinate = z.infer<typeof CoordinateSchema>;
|
|
11
|
+
export declare function stableJson(value: unknown): string;
|
|
12
|
+
export declare function digestValue(value: unknown): `sha256:${string}`;
|
|
13
|
+
export declare function digestBytes(bytes: Uint8Array): `sha256:${string}`;
|
|
14
|
+
export declare function isUniqueSorted(values: readonly string[]): boolean;
|
|
15
|
+
export declare function git(repoRoot: string, args: readonly string[]): string;
|
|
16
|
+
export declare function assertExactRange(input: {
|
|
17
|
+
repoRoot: string;
|
|
18
|
+
base: Coordinate;
|
|
19
|
+
head: Coordinate;
|
|
20
|
+
changedPaths: readonly string[];
|
|
21
|
+
}): void;
|
|
22
|
+
export declare function resolveRepositoryFile(repoRoot: string, sourcePath: string): string;
|
|
23
|
+
export declare function assertArtifact(repoRoot: string, artifact: {
|
|
24
|
+
digest: string;
|
|
25
|
+
path: string;
|
|
26
|
+
}): void;
|
|
27
|
+
export declare function assertPrivateFile(path: string): Buffer;
|
|
28
|
+
export declare function writeCreateOnly(path: string, bytes: Buffer): string;
|
|
@@ -0,0 +1,117 @@
|
|
|
1
|
+
import { createHash, randomUUID } from 'node:crypto';
|
|
2
|
+
import { execFileSync } from 'node:child_process';
|
|
3
|
+
import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
|
|
4
|
+
import { closeSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, unlinkSync, writeFileSync, } from 'node:fs';
|
|
5
|
+
import { z } from 'zod';
|
|
6
|
+
export const DigestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/u);
|
|
7
|
+
export const ShaSchema = z.string().regex(/^[a-f0-9]{40}$/u);
|
|
8
|
+
export const RepositorySchema = z.string().regex(/^[^/\s]+\/[^/\s]+$/u);
|
|
9
|
+
export const StageIdSchema = z.string().regex(/^[a-z][a-z0-9-]*$/u);
|
|
10
|
+
export const CoordinateSchema = z.object({ sha: ShaSchema, tree: ShaSchema }).strict();
|
|
11
|
+
export function stableJson(value) {
|
|
12
|
+
if (Array.isArray(value))
|
|
13
|
+
return `[${value.map(stableJson).join(',')}]`;
|
|
14
|
+
if (value !== null && typeof value === 'object') {
|
|
15
|
+
const record = value;
|
|
16
|
+
return `{${Object.keys(record)
|
|
17
|
+
.sort()
|
|
18
|
+
.map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`)
|
|
19
|
+
.join(',')}}`;
|
|
20
|
+
}
|
|
21
|
+
const encoded = JSON.stringify(value);
|
|
22
|
+
if (encoded === undefined)
|
|
23
|
+
throw new Error('Delivery evidence contains an unsupported value.');
|
|
24
|
+
return encoded;
|
|
25
|
+
}
|
|
26
|
+
export function digestValue(value) {
|
|
27
|
+
return digestBytes(Buffer.from(stableJson(value), 'utf8'));
|
|
28
|
+
}
|
|
29
|
+
export function digestBytes(bytes) {
|
|
30
|
+
return `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
|
|
31
|
+
}
|
|
32
|
+
export function isUniqueSorted(values) {
|
|
33
|
+
return values.every((value, index) => index === 0 || values[index - 1] < value);
|
|
34
|
+
}
|
|
35
|
+
export function git(repoRoot, args) {
|
|
36
|
+
return execFileSync('git', [...args], {
|
|
37
|
+
cwd: repoRoot,
|
|
38
|
+
encoding: 'utf8',
|
|
39
|
+
maxBuffer: 4 * 1024 * 1024,
|
|
40
|
+
stdio: ['ignore', 'pipe', 'pipe'],
|
|
41
|
+
}).trim();
|
|
42
|
+
}
|
|
43
|
+
export function assertExactRange(input) {
|
|
44
|
+
const { repoRoot, base, head, changedPaths } = input;
|
|
45
|
+
CoordinateSchema.parse(base);
|
|
46
|
+
CoordinateSchema.parse(head);
|
|
47
|
+
if (!isUniqueSorted(changedPaths) || (base.sha !== head.sha && changedPaths.length === 0))
|
|
48
|
+
throw new Error('Exact Git range requires complete sorted changed paths.');
|
|
49
|
+
if (git(repoRoot, ['rev-parse', 'HEAD']) !== head.sha ||
|
|
50
|
+
git(repoRoot, ['rev-parse', `${base.sha}^{tree}`]) !== base.tree ||
|
|
51
|
+
git(repoRoot, ['rev-parse', `${head.sha}^{tree}`]) !== head.tree ||
|
|
52
|
+
git(repoRoot, ['status', '--porcelain', '--untracked-files=all']) !== '')
|
|
53
|
+
throw new Error('Repository delivery requires exact clean Git source coordinates.');
|
|
54
|
+
const actual = git(repoRoot, ['diff', '--name-only', '-z', base.sha, head.sha]).split('\0').filter(Boolean).sort();
|
|
55
|
+
if (stableJson(actual) !== stableJson(changedPaths))
|
|
56
|
+
throw new Error('Changed paths do not match the exact Git range.');
|
|
57
|
+
}
|
|
58
|
+
export function resolveRepositoryFile(repoRoot, sourcePath) {
|
|
59
|
+
const root = realpathSync(repoRoot);
|
|
60
|
+
if (isAbsolute(sourcePath) || sourcePath === '' || sourcePath.includes('\0'))
|
|
61
|
+
throw new Error('Repository file path must be relative.');
|
|
62
|
+
const path = resolve(root, sourcePath);
|
|
63
|
+
const relativePath = relative(root, path);
|
|
64
|
+
if (relativePath === '..' || relativePath.startsWith(`..${sep}`) || relativePath === '')
|
|
65
|
+
throw new Error('Repository file escapes its root.');
|
|
66
|
+
const metadata = lstatSync(path);
|
|
67
|
+
if (!metadata.isFile() || metadata.isSymbolicLink() || realpathSync(path) !== path)
|
|
68
|
+
throw new Error('Repository file must be one regular file beneath the root.');
|
|
69
|
+
return path;
|
|
70
|
+
}
|
|
71
|
+
export function assertArtifact(repoRoot, artifact) {
|
|
72
|
+
DigestSchema.parse(artifact.digest);
|
|
73
|
+
const path = resolveRepositoryFile(repoRoot, artifact.path);
|
|
74
|
+
if (digestBytes(readFileSync(path)) !== artifact.digest)
|
|
75
|
+
throw new Error(`Repository artifact is corrupt: ${artifact.path}`);
|
|
76
|
+
}
|
|
77
|
+
export function assertPrivateFile(path) {
|
|
78
|
+
const metadata = lstatSync(path);
|
|
79
|
+
if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1 || (metadata.mode & 0o777) !== 0o600)
|
|
80
|
+
throw new Error('Delivery evidence must be a private regular file.');
|
|
81
|
+
return readFileSync(path);
|
|
82
|
+
}
|
|
83
|
+
export function writeCreateOnly(path, bytes) {
|
|
84
|
+
try {
|
|
85
|
+
if (!assertPrivateFile(path).equals(bytes))
|
|
86
|
+
throw new Error('Content addressed evidence path collision.');
|
|
87
|
+
return path;
|
|
88
|
+
}
|
|
89
|
+
catch (error) {
|
|
90
|
+
if (error.code !== 'ENOENT')
|
|
91
|
+
throw error;
|
|
92
|
+
}
|
|
93
|
+
mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
|
|
94
|
+
const temporary = join(dirname(path), `.${basename(path)}.${randomUUID()}.tmp`);
|
|
95
|
+
const fd = openSync(temporary, 'wx', 0o600);
|
|
96
|
+
try {
|
|
97
|
+
writeFileSync(fd, bytes);
|
|
98
|
+
fsyncSync(fd);
|
|
99
|
+
}
|
|
100
|
+
finally {
|
|
101
|
+
closeSync(fd);
|
|
102
|
+
}
|
|
103
|
+
try {
|
|
104
|
+
linkSync(temporary, path);
|
|
105
|
+
}
|
|
106
|
+
catch (error) {
|
|
107
|
+
if (error.code !== 'EEXIST' || !assertPrivateFile(path).equals(bytes))
|
|
108
|
+
throw error;
|
|
109
|
+
}
|
|
110
|
+
finally {
|
|
111
|
+
unlinkSync(temporary);
|
|
112
|
+
}
|
|
113
|
+
if (!assertPrivateFile(path).equals(bytes))
|
|
114
|
+
throw new Error('Content addressed evidence write failed.');
|
|
115
|
+
return path;
|
|
116
|
+
}
|
|
117
|
+
//# sourceMappingURL=common.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/delivery/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGvF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAA0C,CAAC;QAC1D,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,IAAuB;IAC3D,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACpC,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACrD,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,IACE,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;QACjD,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI;QAChE,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI;QAChE,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC,KAAK,EAAE;QAExE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnH,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,UAAkB;IACxE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,YAAY,KAAK,EAAE;QACrF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAChF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,QAA0C;IACzF,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM;QACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAC9G,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,IAAI,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAChH,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACxG,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|