@git.zone/cli 6.9.0 → 6.10.0

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@git.zone/cli',
-  version: '6.9.0',
+  version: '6.10.0',
   description: 'A comprehensive CLI tool for enhancing and managing local development workflows with gitzone utilities, focusing on project setup, version control, code formatting, and template management.'
 }

package/ts/helpers.workflow.ts

@@ -5,7 +5,7 @@ export type TConfirmationMode = "prompt" | "auto" | "plan";
 export type TCommitStep =
   "format" | "analyze" | "test" | "build" | "changelog" | "commit" | "push";
 
-export type TReleaseTarget = "git" | "npm" | "docker";
+export type TReleaseTarget = "git" | "giteaAssets" | "npm" | "docker";
 
 export interface ICommitWorkflowConfig {
   confirmation?: TConfirmationMode;
@@ -45,6 +45,96 @@ export interface IReleaseNpmTargetConfig {
   alreadyPublished?: "success" | "error";
 }
 
+export interface IReleaseGiteaAssetsTargetConfig {
+  enabled?: boolean;
+  apiOrigin?: string;
+  owner?: string;
+  repository?: string;
+  tokenEnv?: string;
+  manifestPath?: string;
+}
+
+export interface IResolvedReleaseGiteaAssetsConfiguration {
+  apiOrigin: string;
+  owner: string;
+  repository: string;
+  tokenEnv: string;
+  manifestPath: string;
+}
+
+export const resolveGiteaAssetsConfiguration = (
+  configArg: IReleaseGiteaAssetsTargetConfig,
+): IResolvedReleaseGiteaAssetsConfiguration => {
+  const { apiOrigin, owner, repository, tokenEnv, manifestPath } = configArg;
+  let url: URL;
+  try {
+    url = new URL(apiOrigin!);
+  } catch {
+    throw new Error("Gitea assets require a canonical HTTPS API origin.");
+  }
+  if (url.protocol !== "https:" || url.origin !== apiOrigin) {
+    throw new Error(
+      "Gitea assets require a credential-free canonical HTTPS API origin.",
+    );
+  }
+  if (
+    typeof owner !== "string" ||
+    !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(owner) ||
+    typeof repository !== "string" ||
+    !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(repository)
+  )
+    throw new Error(
+      "Gitea assets require canonical owner and repository names.",
+    );
+  if (typeof tokenEnv !== "string" || !/^[A-Z_][A-Z0-9_]*$/.test(tokenEnv)) {
+    throw new Error("Gitea assets require a token environment-variable name.");
+  }
+  if (
+    typeof manifestPath !== "string" ||
+    !/^[A-Za-z0-9_-][A-Za-z0-9._/-]*\.json$/.test(manifestPath) ||
+    manifestPath
+      .split("/")
+      .some(
+        (part) =>
+          !part || part === "." || part === ".." || part.startsWith("."),
+      )
+  )
+    throw new Error(
+      "Gitea asset manifestPath must be a canonical repository-relative JSON path.",
+    );
+  return { apiOrigin, owner, repository, tokenEnv, manifestPath };
+};
+
+/** Match the resolved destination, without guessing SSH aliases or URL rewrites. */
+export const assertGiteaAssetsGitDestination = (
+  configArg: IResolvedReleaseGiteaAssetsConfiguration,
+  destinationArg: string,
+): void => {
+  let destination: URL;
+  try {
+    const scp = destinationArg.match(/^(?:[^@/:]+@)?([^/:]+):([^/].*)$/);
+    destination = new URL(scp ? `ssh://${scp[1]}/${scp[2]}` : destinationArg);
+  } catch {
+    throw new Error(
+      "Gitea assets require a provable SSH or HTTPS Git destination.",
+    );
+  }
+  if (
+    !["ssh:", "https:"].includes(destination.protocol) ||
+    destination.password ||
+    destination.search ||
+    destination.hash ||
+    destination.hostname !== new URL(configArg.apiOrigin).hostname ||
+    (destination.protocol === "https:" &&
+      destination.origin !== configArg.apiOrigin) ||
+    destination.pathname.replace(/\.git$/, "") !==
+      `/${configArg.owner}/${configArg.repository}`
+  )
+    throw new Error(
+      "Gitea assets and Git must select the same host and exact repository.",
+    );
+};
+
 export interface IReleaseDockerTargetConfig {
   enabled?: boolean;
   engine?: "tsdocker";
@@ -73,6 +163,7 @@ export interface IReleaseWorkflowConfig {
   targets?: {
     git?: IReleaseGitTargetConfig;
     npm?: IReleaseNpmTargetConfig;
+    giteaAssets?: IReleaseGiteaAssetsTargetConfig;
     docker?: IReleaseDockerTargetConfig;
   };
 }
@@ -111,6 +202,7 @@ export interface IResolvedReleaseWorkflow {
   npmPackageSource: "root" | "tspublish";
   npmAccessLevel: "public" | "private";
   npmAlreadyPublished: "success" | "error";
+  giteaAssets?: IResolvedReleaseGiteaAssetsConfiguration;
   dockerEnabled: boolean;
   dockerEngine: "tsdocker";
   dockerRegistry?: string;
@@ -129,6 +221,7 @@ export interface IResolvedReleaseResumeConfiguration {
   npmRegistries: string[];
   npmAccessLevel: "public" | "private";
   npmAlreadyPublished: "success" | "error";
+  giteaAssets?: IResolvedReleaseGiteaAssetsConfiguration;
 }
 
 export type TResolvedReleaseDockerConfiguration = Pick<
@@ -460,7 +553,12 @@ const normalizeCommitSteps = (rawSteps: TCommitStep[]): TCommitStep[] => {
 };
 
 const getTargetOverride = (argvArg: any): TReleaseTarget[] | undefined => {
-  const validTargets: TReleaseTarget[] = ["git", "npm", "docker"];
+  const validTargets: TReleaseTarget[] = [
+    "git",
+    "giteaAssets",
+    "npm",
+    "docker",
+  ];
   const targetKey = ["target", "targets"].find((keyArg) =>
     Object.prototype.hasOwnProperty.call(argvArg, keyArg),
   );
@@ -495,7 +593,12 @@ const getTargetOverride = (argvArg: any): TReleaseTarget[] | undefined => {
   return targets.length > 0 ? targets : undefined;
 };
 
-const releaseTargetOrder: TReleaseTarget[] = ["git", "npm", "docker"];
+const releaseTargetOrder: TReleaseTarget[] = [
+  "git",
+  "giteaAssets",
+  "npm",
+  "docker",
+];
 
 const buildReleasePlan = (options: {
   mergeRequested: boolean;
@@ -511,6 +614,8 @@ const buildReleasePlan = (options: {
   plan.push("core.version", "core.changelog", "core.commit", "core.tag");
   if (options.runBuild) plan.push("core.build");
   if (options.targets.includes("npm")) plan.push("core.packNpmArtifact");
+  if (options.targets.includes("giteaAssets"))
+    plan.push("core.freezeGiteaAssets");
   plan.push("core.writeReleaseJournal");
   if (options.targets.includes("docker")) {
     plan.push("target.docker.qualify");
@@ -608,6 +713,14 @@ export const resolveReleaseWorkflow = async (
   const npmEnabled = npmConfig.enabled ?? npmRegistryConfigurationPresent;
   const gitEnabled = gitConfig.enabled ?? true;
   const dockerEnabled = dockerConfig.enabled ?? false;
+  if (
+    targetConfig.giteaAssets?.enabled !== undefined &&
+    typeof targetConfig.giteaAssets.enabled !== "boolean"
+  ) {
+    throw new Error(
+      "release.targets.giteaAssets.enabled must be true or false.",
+    );
+  }
   const pushBranch = resolveGitPushSetting(
     gitConfig.pushBranch,
     "pushBranch",
@@ -638,6 +751,8 @@ export const resolveReleaseWorkflow = async (
 
   const configuredTargets: TReleaseTarget[] = [];
   if (gitEnabled) configuredTargets.push("git");
+  if (targetConfig.giteaAssets?.enabled === true)
+    configuredTargets.push("giteaAssets");
   if (npmEnabled) configuredTargets.push("npm");
   if (dockerEnabled) configuredTargets.push("docker");
   let targets = getTargetOverride(argvArg) || configuredTargets;
@@ -651,6 +766,28 @@ export const resolveReleaseWorkflow = async (
   targets = releaseTargetOrder.filter((target) =>
     selectedTargets.includes(target),
   );
+  if (
+    targetConfig.giteaAssets?.enabled === true &&
+    targets.includes("npm") &&
+    !targets.includes("giteaAssets")
+  ) {
+    throw new Error(
+      "npm publication cannot bypass the configured Gitea asset target.",
+    );
+  }
+  const giteaAssets = targets.includes("giteaAssets")
+    ? resolveGiteaAssetsConfiguration(targetConfig.giteaAssets || {})
+    : undefined;
+  if (giteaAssets && (!targets.includes("git") || !pushBranch || !pushTags)) {
+    throw new Error(
+      "Gitea assets require the active Git branch and tag target.",
+    );
+  }
+  if (giteaAssets && (targets.includes("docker") || argvArg.merge === true)) {
+    throw new Error(
+      "Gitea asset releases cannot combine Docker or --merge; integrate main before release.",
+    );
+  }
   let npmRegistries: string[] = [];
   if (targets.includes("npm")) {
     if (
@@ -706,6 +843,7 @@ export const resolveReleaseWorkflow = async (
       : "root",
     npmAccessLevel: npmConfig.accessLevel || "public",
     npmAlreadyPublished: npmConfig.alreadyPublished || "success",
+    ...(giteaAssets ? { giteaAssets } : {}),
     dockerEnabled,
     dockerEngine: "tsdocker",
     ...dockerConfiguration,
@@ -715,12 +853,18 @@ export const resolveReleaseWorkflow = async (
 export const resolveReleaseResumeConfiguration = async (optionsArg: {
   git: boolean;
   npm: boolean;
+  giteaAssets?: boolean;
 }): Promise<IResolvedReleaseResumeConfiguration> => {
   const cliConfig = await readCliWorkflowConfig();
   const releaseConfig = cliConfig.release || {};
   const targetConfig = releaseConfig.targets || {};
   const gitConfig = targetConfig.git || {};
   const npmConfig = targetConfig.npm || {};
+  if (optionsArg.giteaAssets && targetConfig.giteaAssets?.enabled !== true) {
+    throw new Error(
+      "The journaled Gitea asset target must remain enabled for resume.",
+    );
+  }
 
   const gitRemote = optionsArg.git ? gitConfig.remote || "origin" : "origin";
   if (typeof gitRemote !== "string" || !gitRemote.trim()) {
@@ -778,6 +922,13 @@ export const resolveReleaseResumeConfiguration = async (optionsArg: {
       : "root",
     npmAccessLevel,
     npmAlreadyPublished,
+    ...(optionsArg.giteaAssets
+      ? {
+          giteaAssets: resolveGiteaAssetsConfiguration(
+            targetConfig.giteaAssets || {},
+          ),
+        }
+      : {}),
   };
 };
 

package/ts/mod_config/index.ts

@@ -19,7 +19,10 @@ import {
   CURRENT_GITZONE_CLI_SCHEMA_VERSION,
   migrateSmartconfigData,
 } from "../helpers.smartconfigmigrations.js";
-import { getDeclaredTsdockerRange } from "../helpers.workflow.js";
+import {
+  getDeclaredTsdockerRange,
+  resolveGiteaAssetsConfiguration,
+} from "../helpers.workflow.js";
 import { hasInstalledProjectTsdockerBinary } from "../helpers.tsdocker.js";
 import { TsdockerReleaseClient } from "../mod_release/helpers.tsdockerprotocol.js";
 import { getSealedReleaseConfigError } from "../helpers.sealedrelease.js";
@@ -304,6 +307,10 @@ async function handleShow(mode: ICliMode): Promise<void> {
 
   printConfigSection("Release Targets", [
     ["git", formatTarget(targets.git?.enabled, targets.git)],
+    [
+      "giteaAssets",
+      formatTarget(targets.giteaAssets?.enabled, targets.giteaAssets),
+    ],
     ["npm", formatTarget(targets.npm?.enabled, targets.npm)],
     ["docker", formatTarget(targets.docker?.enabled, targets.docker)],
   ]);
@@ -1800,6 +1807,37 @@ async function validateReleaseConfig(
 
   const targets = releaseConfig.targets || {};
   await validateGitTarget(targets.git || {}, findings);
+  if (
+    targets.giteaAssets?.enabled !== undefined &&
+    typeof targets.giteaAssets.enabled !== "boolean"
+  ) {
+    findings.push({
+      level: "error",
+      message: "Gitea assets enabled must be true or false",
+    });
+  }
+  if (targets.giteaAssets?.enabled === true) {
+    try {
+      resolveGiteaAssetsConfiguration(targets.giteaAssets);
+      if (targets.git?.enabled === false || targets.docker?.enabled === true)
+        throw new Error(
+          "Gitea assets require Git publication and cannot combine Docker.",
+        );
+      findings.push({
+        level: "ok",
+        message:
+          "Gitea assets configured; release verifies Git destination and publisher capability before publication",
+      });
+    } catch (error) {
+      findings.push({
+        level: "error",
+        message:
+          error instanceof Error
+            ? error.message
+            : "Invalid Gitea asset configuration",
+      });
+    }
+  }
   await validateNpmTarget(targets.npm || {}, findings);
   await validateDockerTarget(targets.docker || {}, smartconfigData, findings);
 }
@@ -1830,9 +1868,19 @@ async function validateAssetsConfig(
   }
   if (rawAssetsConfig.kind === "tspackRelease") {
     const error = getSealedReleaseConfigError(rawAssetsConfig.sealedRelease);
-    findings.push(error ? {
-      level: "error", message: error, fix: "Set @git.zone/cli.assets.sealedRelease using the documented TsPack release configuration.",
-    } : { level: "ok", message: "Managed tspackRelease assets have valid component commands and retention output" });
+    findings.push(
+      error
+        ? {
+            level: "error",
+            message: error,
+            fix: "Set @git.zone/cli.assets.sealedRelease using the documented TsPack release configuration.",
+          }
+        : {
+            level: "ok",
+            message:
+              "Managed tspackRelease assets have valid component commands and retention output",
+          },
+    );
     return;
   }
   if (rawAssetsConfig.kind !== "denoBinaryCli") {
@@ -2001,8 +2049,15 @@ async function validateNpmTarget(
       fix: "Use success or error.",
     });
   }
-  if (npmTarget.packageSource !== undefined && !["root", "tspublish"].includes(npmTarget.packageSource)) {
-    findings.push({ level: "error", message: `Invalid npm package source: ${npmTarget.packageSource}`, fix: "Use root or tspublish." });
+  if (
+    npmTarget.packageSource !== undefined &&
+    !["root", "tspublish"].includes(npmTarget.packageSource)
+  ) {
+    findings.push({
+      level: "error",
+      message: `Invalid npm package source: ${npmTarget.packageSource}`,
+      fix: "Use root or tspublish.",
+    });
   }
 
   const smartNetwork = new plugins.smartnetwork.SmartNetwork();