@aws-cdk-testing/cli-integ 0.0.0

package/lib/staging/codeartifact.ts

@@ -0,0 +1,387 @@
+import {
+  AssociateExternalConnectionCommand,
+  CodeartifactClient,
+  CreateDomainCommand,
+  CreateRepositoryCommand,
+  DeleteRepositoryCommand,
+  DescribeDomainCommand,
+  DescribeRepositoryCommand,
+  GetAuthorizationTokenCommand,
+  GetRepositoryEndpointCommand,
+  ListPackagesCommand,
+  ListPackagesRequest,
+  ListRepositoriesCommand,
+  ListTagsForResourceCommand,
+  PutPackageOriginConfigurationCommand,
+} from '@aws-sdk/client-codeartifact';
+import { sleep } from '../aws';
+
+const COLLECT_BY_TAG = 'collect-by';
+const REPO_LIFETIME_MS = 24 * 3600 * 1000; // One day
+
+export class TestRepository {
+  public static readonly DEFAULT_DOMAIN = 'test-cdk';
+
+  public static async newRandom() {
+    const qualifier = Math.random()
+      .toString(36)
+      .replace(/[^a-z0-9]+/g, '');
+
+    const repo = new TestRepository(`test-${qualifier}`);
+    await repo.prepare();
+    return repo;
+  }
+
+  public static async newWithName(name: string) {
+    const repo = new TestRepository(name);
+    await repo.prepare();
+    return repo;
+  }
+
+  public static existing(repositoryName: string) {
+    return new TestRepository(repositoryName);
+  }
+
+  /**
+   * Garbage collect repositories
+   */
+  public static async gc() {
+    if (!(await TestRepository.existing('*dummy*').domainExists())) {
+      return;
+    }
+
+    const codeArtifact = new CodeartifactClient();
+
+    let nextToken: string | undefined;
+    do {
+      const page = await codeArtifact.send(
+        new ListRepositoriesCommand({
+          nextToken: nextToken,
+        }),
+      );
+
+      for (const repo of page.repositories ?? []) {
+        const tags = await codeArtifact.send(
+          new ListTagsForResourceCommand({
+            resourceArn: repo.arn!,
+          }),
+        );
+        const collectable = tags?.tags?.find((t) => t.key === COLLECT_BY_TAG && Number(t.value) < Date.now());
+        if (collectable) {
+          // eslint-disable-next-line no-console
+          console.log('Deleting', repo.name);
+          await codeArtifact.send(
+            new DeleteRepositoryCommand({
+              domain: repo.domainName!,
+              repository: repo.name!,
+            }),
+          );
+        }
+      }
+
+      nextToken = page.nextToken;
+    } while (nextToken);
+  }
+
+  public readonly npmUpstream = 'npm-upstream';
+  public readonly pypiUpstream = 'pypi-upstream';
+  public readonly nugetUpstream = 'nuget-upstream';
+  public readonly mavenUpstream = 'maven-upstream';
+  public readonly domain = TestRepository.DEFAULT_DOMAIN;
+
+  private readonly codeArtifact = new CodeartifactClient();
+
+  private _loginInformation: LoginInformation | undefined;
+
+  private constructor(public readonly repositoryName: string) {}
+
+  public async prepare() {
+    await this.ensureDomain();
+    await this.ensureUpstreams();
+
+    await this.ensureRepository(this.repositoryName, {
+      description: 'Testing repository',
+      upstreams: [this.npmUpstream, this.pypiUpstream, this.nugetUpstream, this.mavenUpstream],
+      tags: {
+        [COLLECT_BY_TAG]: `${Date.now() + REPO_LIFETIME_MS}`,
+      },
+    });
+  }
+
+  public async loginInformation(): Promise<LoginInformation> {
+    if (this._loginInformation) {
+      return this._loginInformation;
+    }
+
+    this._loginInformation = {
+      authToken: (
+        await this.codeArtifact.send(
+          new GetAuthorizationTokenCommand({
+            domain: this.domain,
+            durationSeconds: 12 * 3600,
+          }),
+        )
+      ).authorizationToken!,
+      repositoryName: this.repositoryName,
+
+      npmEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'npm',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      mavenEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'maven',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      nugetEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'nuget',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      pypiEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'pypi',
+          }),
+        )
+      ).repositoryEndpoint!,
+    };
+    return this._loginInformation;
+  }
+
+  public async delete() {
+    try {
+      await this.codeArtifact.send(
+        new DeleteRepositoryCommand({
+          domain: this.domain,
+          repository: this.repositoryName,
+        }),
+      );
+
+      // eslint-disable-next-line no-console
+      console.log('Deleted', this.repositoryName);
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      // Okay
+    }
+  }
+
+  /**
+   * List all packages and mark them as "allow upstream versions".
+   *
+   * If we don't do this and we publish `foo@2.3.4-rc.0`, then we can't
+   * download `foo@2.3.0` anymore because by default CodeArtifact will
+   * block different versions from the same package.
+   */
+  public async markAllUpstreamAllow() {
+    for await (const pkg of this.listPackages({ upstream: 'BLOCK' })) {
+      await retryThrottled(() =>
+        this.codeArtifact.send(
+          new PutPackageOriginConfigurationCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+
+            format: pkg.format!,
+            package: pkg.package!,
+            namespace: pkg.namespace!,
+            restrictions: {
+              publish: 'ALLOW',
+              upstream: 'ALLOW',
+            },
+          }),
+        ),
+      );
+    }
+  }
+
+  private async ensureDomain() {
+    if (await this.domainExists()) {
+      return;
+    }
+    await this.codeArtifact.send(
+      new CreateDomainCommand({
+        domain: this.domain,
+        tags: [{ key: 'testing', value: 'true' }],
+      }),
+    );
+  }
+
+  private async ensureUpstreams() {
+    await this.ensureRepository(this.npmUpstream, {
+      description: 'The upstream repository for NPM',
+      external: 'public:npmjs',
+    });
+    await this.ensureRepository(this.mavenUpstream, {
+      description: 'The upstream repository for Maven',
+      external: 'public:maven-central',
+    });
+    await this.ensureRepository(this.nugetUpstream, {
+      description: 'The upstream repository for NuGet',
+      external: 'public:nuget-org',
+    });
+    await this.ensureRepository(this.pypiUpstream, {
+      description: 'The upstream repository for PyPI',
+      external: 'public:pypi',
+    });
+  }
+
+  private async ensureRepository(
+    name: string,
+    options?: {
+      readonly description?: string;
+      readonly external?: string;
+      readonly upstreams?: string[];
+      readonly tags?: Record<string, string>;
+    },
+  ) {
+    if (await this.repositoryExists(name)) {
+      return;
+    }
+
+    await this.codeArtifact.send(
+      new CreateRepositoryCommand({
+        domain: this.domain,
+        repository: name,
+        description: options?.description,
+        upstreams: options?.upstreams?.map((repositoryName) => ({ repositoryName })),
+        tags: options?.tags ? Object.entries(options.tags).map(([key, value]) => ({ key, value })) : undefined,
+      }),
+    );
+
+    if (options?.external) {
+      const externalConnection = options.external;
+      await retry(() =>
+        this.codeArtifact.send(
+          new AssociateExternalConnectionCommand({
+            domain: this.domain,
+            repository: name,
+            externalConnection,
+          }),
+        ),
+      );
+    }
+  }
+
+  private async domainExists() {
+    try {
+      await this.codeArtifact.send(new DescribeDomainCommand({ domain: this.domain }));
+      return true;
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      return false;
+    }
+  }
+
+  private async repositoryExists(name: string) {
+    try {
+      await this.codeArtifact.send(new DescribeRepositoryCommand({ domain: this.domain, repository: name }));
+      return true;
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      return false;
+    }
+  }
+
+  private async *listPackages(filter: Pick<ListPackagesRequest, 'upstream' | 'publish' | 'format'> = {}) {
+    let response = await retryThrottled(() =>
+      this.codeArtifact.send(
+        new ListPackagesCommand({
+          domain: this.domain,
+          repository: this.repositoryName,
+          ...filter,
+        }),
+      ),
+    );
+
+    while (true) {
+      for (const p of response.packages ?? []) {
+        yield p;
+      }
+
+      if (!response.nextToken) {
+        break;
+      }
+
+      response = await retryThrottled(() =>
+        this.codeArtifact.send(
+          new ListPackagesCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            ...filter,
+            nextToken: response.nextToken,
+          }),
+        ),
+      );
+    }
+  }
+}
+
+async function retry<A>(block: () => Promise<A>) {
+  let attempts = 3;
+  while (true) {
+    try {
+      return await block();
+    } catch (e: any) {
+      if (attempts-- === 0) {
+        throw e;
+      }
+      // eslint-disable-next-line no-console
+      console.debug(e.message);
+      await sleep(500);
+    }
+  }
+}
+
+async function retryThrottled<A>(block: () => Promise<A>) {
+  let time = 100;
+  let attempts = 15;
+  while (true) {
+    try {
+      return await block();
+    } catch (e: any) {
+      // eslint-disable-next-line no-console
+      console.debug(e.message);
+      if (e.name !== 'ThrottlingException') {
+        throw e;
+      }
+      if (attempts-- === 0) {
+        throw e;
+      }
+      await sleep(Math.floor(Math.random() * time));
+      time *= 2;
+    }
+  }
+}
+
+export interface LoginInformation {
+  readonly authToken: string;
+  readonly repositoryName: string;
+  readonly npmEndpoint: string;
+  readonly mavenEndpoint: string;
+  readonly nugetEndpoint: string;
+  readonly pypiEndpoint: string;
+}

package/lib/staging/maven.d.ts

@@ -0,0 +1,5 @@
+import { LoginInformation } from './codeartifact';
+import { UsageDir } from './usage-dir';
+export declare function mavenLogin(login: LoginInformation, usageDir: UsageDir): Promise<void>;
+export declare function uploadJavaPackages(packages: string[], login: LoginInformation, usageDir: UsageDir): Promise<void>;
+export declare function writeMavenSettingsFile(filename: string, login: LoginInformation): Promise<void>;

package/lib/staging/maven.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mavenLogin = mavenLogin;
+exports.uploadJavaPackages = uploadJavaPackages;
+exports.writeMavenSettingsFile = writeMavenSettingsFile;
+/* eslint-disable no-console */
+const path = require("path");
+const fs_extra_1 = require("fs-extra");
+const parallel_shell_1 = require("./parallel-shell");
+const files_1 = require("../files");
+const shell_1 = require("../shell");
+// Do not try to JIT the Maven binary
+const NO_JIT = '-XX:+TieredCompilation -XX:TieredStopAtLevel=1';
+async function mavenLogin(login, usageDir) {
+    var _a;
+    await writeMavenSettingsFile(settingsFile(usageDir), login);
+    // Write env var
+    // Twiddle JVM settings a bit to make Maven survive running on a CodeBuild box.
+    await usageDir.addToEnv({
+        MAVEN_OPTS: `-Duser.home=${usageDir.directory} ${NO_JIT} ${(_a = process.env.MAVEN_OPTS) !== null && _a !== void 0 ? _a : ''}`.trim(),
+    });
+}
+function settingsFile(usageDir) {
+    // If we configure usageDir as a fake home directory Maven will find this file.
+    // (No other way to configure the settings file as part of the environment).
+    return path.join(usageDir.directory, '.m2', 'settings.xml');
+}
+async function uploadJavaPackages(packages, login, usageDir) {
+    await (0, parallel_shell_1.parallelShell)(packages, async (pkg, output) => {
+        var _a;
+        console.log(`⏳ ${pkg}`);
+        const sourcesFile = pkg.replace(/.pom$/, '-sources.jar');
+        const javadocFile = pkg.replace(/.pom$/, '-javadoc.jar');
+        await (0, shell_1.shell)(['mvn',
+            `--settings=${settingsFile(usageDir)}`,
+            'org.apache.maven.plugins:maven-deploy-plugin:3.0.0:deploy-file',
+            `-Durl=${login.mavenEndpoint}`,
+            '-DrepositoryId=codeartifact',
+            `-DpomFile=${pkg}`,
+            `-Dfile=${pkg.replace(/.pom$/, '.jar')}`,
+            ...await (0, fs_extra_1.pathExists)(sourcesFile) ? [`-Dsources=${sourcesFile}`] : [],
+            ...await (0, fs_extra_1.pathExists)(javadocFile) ? [`-Djavadoc=${javadocFile}`] : []], {
+            outputs: [output],
+            modEnv: {
+                // Do not try to JIT the Maven binary
+                MAVEN_OPTS: `${NO_JIT} ${(_a = process.env.MAVEN_OPTS) !== null && _a !== void 0 ? _a : ''}`.trim(),
+            },
+        });
+        console.log(`✅ ${pkg}`);
+    }, (pkg, output) => {
+        if (output.toString().includes('409 Conflict')) {
+            console.log(`❌ ${pkg}: already exists. Skipped.`);
+            return 'skip';
+        }
+        if (output.toString().includes('Too Many Requests')) {
+            console.log(`♻️ ${pkg}: Too many requests. Retrying.`);
+            return 'retry';
+        }
+        return 'fail';
+    });
+}
+async function writeMavenSettingsFile(filename, login) {
+    await (0, files_1.writeFile)(filename, `<?xml version="1.0" encoding="UTF-8" ?>
+  <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
+            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+            xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
+                                http://maven.apache.org/xsd/settings-1.0.0.xsd">
+    <servers>
+      <server>
+        <id>codeartifact</id>
+        <username>aws</username>
+        <password>${login.authToken}</password>
+      </server>
+    </servers>
+    <profiles>
+      <profile>
+        <id>default</id>
+        <repositories>
+          <repository>
+            <id>codeartifact</id>
+            <url>${login.mavenEndpoint}</url>
+          </repository>
+        </repositories>
+      </profile>
+    </profiles>
+    <activeProfiles>
+      <activeProfile>default</activeProfile>
+    </activeProfiles>
+  </settings>`);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/staging/maven.ts

@@ -0,0 +1,95 @@
+/* eslint-disable no-console */
+import * as path from 'path';
+import { pathExists } from 'fs-extra';
+import { LoginInformation } from './codeartifact';
+import { parallelShell } from './parallel-shell';
+import { UsageDir } from './usage-dir';
+import { writeFile } from '../files';
+import { shell } from '../shell';
+
+// Do not try to JIT the Maven binary
+const NO_JIT = '-XX:+TieredCompilation -XX:TieredStopAtLevel=1';
+
+export async function mavenLogin(login: LoginInformation, usageDir: UsageDir) {
+  await writeMavenSettingsFile(settingsFile(usageDir), login);
+
+  // Write env var
+  // Twiddle JVM settings a bit to make Maven survive running on a CodeBuild box.
+  await usageDir.addToEnv({
+    MAVEN_OPTS: `-Duser.home=${usageDir.directory} ${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+  });
+}
+
+function settingsFile(usageDir: UsageDir) {
+  // If we configure usageDir as a fake home directory Maven will find this file.
+  // (No other way to configure the settings file as part of the environment).
+  return path.join(usageDir.directory, '.m2', 'settings.xml');
+}
+
+export async function uploadJavaPackages(packages: string[], login: LoginInformation, usageDir: UsageDir) {
+  await parallelShell(packages, async (pkg, output) => {
+    console.log(`⏳ ${pkg}`);
+
+    const sourcesFile = pkg.replace(/.pom$/, '-sources.jar');
+    const javadocFile = pkg.replace(/.pom$/, '-javadoc.jar');
+
+    await shell(['mvn',
+      `--settings=${settingsFile(usageDir)}`,
+      'org.apache.maven.plugins:maven-deploy-plugin:3.0.0:deploy-file',
+      `-Durl=${login.mavenEndpoint}`,
+      '-DrepositoryId=codeartifact',
+      `-DpomFile=${pkg}`,
+      `-Dfile=${pkg.replace(/.pom$/, '.jar')}`,
+      ...await pathExists(sourcesFile) ? [`-Dsources=${sourcesFile}`] : [],
+      ...await pathExists(javadocFile) ? [`-Djavadoc=${javadocFile}`] : []], {
+      outputs: [output],
+      modEnv: {
+        // Do not try to JIT the Maven binary
+        MAVEN_OPTS: `${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+      },
+    });
+
+    console.log(`✅ ${pkg}`);
+  },
+  (pkg, output) => {
+    if (output.toString().includes('409 Conflict')) {
+      console.log(`❌ ${pkg}: already exists. Skipped.`);
+      return 'skip';
+    }
+    if (output.toString().includes('Too Many Requests')) {
+      console.log(`♻️ ${pkg}: Too many requests. Retrying.`);
+      return 'retry';
+    }
+    return 'fail';
+  });
+}
+
+export async function writeMavenSettingsFile(filename: string, login: LoginInformation) {
+  await writeFile(filename, `<?xml version="1.0" encoding="UTF-8" ?>
+  <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
+            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+            xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
+                                http://maven.apache.org/xsd/settings-1.0.0.xsd">
+    <servers>
+      <server>
+        <id>codeartifact</id>
+        <username>aws</username>
+        <password>${login.authToken}</password>
+      </server>
+    </servers>
+    <profiles>
+      <profile>
+        <id>default</id>
+        <repositories>
+          <repository>
+            <id>codeartifact</id>
+            <url>${login.mavenEndpoint}</url>
+          </repository>
+        </repositories>
+      </profile>
+    </profiles>
+    <activeProfiles>
+      <activeProfile>default</activeProfile>
+    </activeProfiles>
+  </settings>`);
+}

package/lib/staging/npm.d.ts

@@ -0,0 +1,4 @@
+import { LoginInformation } from './codeartifact';
+import { UsageDir } from './usage-dir';
+export declare function npmLogin(login: LoginInformation, usageDir: UsageDir): Promise<void>;
+export declare function uploadNpmPackages(packages: string[], login: LoginInformation, usageDir: UsageDir): Promise<void>;

package/lib/staging/npm.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.npmLogin = npmLogin;
+exports.uploadNpmPackages = uploadNpmPackages;
+/* eslint-disable no-console */
+const path = require("path");
+const parallel_shell_1 = require("./parallel-shell");
+const files_1 = require("../files");
+const shell_1 = require("../shell");
+async function npmLogin(login, usageDir) {
+    // Creating an ~/.npmrc that references an envvar is what you're supposed to do. (https://docs.npmjs.com/private-modules/ci-server-config)
+    await writeNpmLoginToken(usageDir, login.npmEndpoint, '${NPM_TOKEN}');
+    // Add variables to env file
+    await usageDir.addToEnv(npmEnv(usageDir, login));
+}
+function npmEnv(usageDir, login) {
+    return {
+        npm_config_userconfig: path.join(usageDir.directory, '.npmrc'),
+        npm_config_registry: login.npmEndpoint,
+        npm_config_always_auth: 'true', // Necessary for NPM 6, otherwise it will sometimes not pass the token
+        NPM_TOKEN: login.authToken,
+    };
+}
+async function uploadNpmPackages(packages, login, usageDir) {
+    await (0, parallel_shell_1.parallelShell)(packages, async (pkg, output) => {
+        console.log(`⏳ ${pkg}`);
+        // path.resolve() is required -- if the filename ends up looking like `js/bla.tgz` then NPM thinks it's a short form GitHub name.
+        await (0, shell_1.shell)(['node', require.resolve('npm'), 'publish', path.resolve(pkg)], {
+            modEnv: npmEnv(usageDir, login),
+            show: 'error',
+            outputs: [output],
+        });
+        console.log(`✅ ${pkg}`);
+    }, (pkg, output) => {
+        if (output.toString().includes('code EPUBLISHCONFLICT')) {
+            console.log(`❌ ${pkg}: already exists. Skipped.`);
+            return 'skip';
+        }
+        if (output.toString().includes('code EPRIVATE')) {
+            console.log(`❌ ${pkg}: is private. Skipped.`);
+            return 'skip';
+        }
+        return 'fail';
+    });
+}
+async function writeNpmLoginToken(usageDir, endpoint, token) {
+    const rcFile = path.join(usageDir.directory, '.npmrc');
+    const lines = await (0, files_1.loadLines)(rcFile);
+    const key = `${endpoint.replace(/^https:/, '')}:_authToken`;
+    (0, files_1.updateIniKey)(lines, key, token);
+    await (0, files_1.writeLines)(rcFile, lines);
+    return rcFile;
+}
+// Environment variable, .npmrc in same directory as package.json or in home dir
+//# sourceMappingURL=data:application/json;base64,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