@intentius/chant-lexicon-forgejo 0.101.0 → 0.104.0

package/dist/components/generate-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-pipeline.d.ts","sourceRoot":"","sources":["../../src/components/generate-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA2B,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOjF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,eAAe,EAAE,EAC7B,OAAO,GAAE,wBAA6B,EACtC,cAAc,GAAE,qBAA0B,GACzC,uBAAuB,CAkBzB"}
+{"version":3,"file":"generate-pipeline.d.ts","sourceRoot":"","sources":["../../src/components/generate-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA2B,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOjF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,eAAe,EAAE,EAC7B,OAAO,GAAE,wBAA6B,EACtC,cAAc,GAAE,qBAA0B,GACzC,uBAAuB,CAsBzB"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "7c31485e8dbdcedf338a32ab7b85f6da04d8cbf6ec3fca4e33be333918a4f8d1",
+    "manifest.json": "0ff4ad3e4d215c562d715001533530cdfb1cde428d3bde2cbc147bbf5ae29d89",
     "meta.json": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
     "types/index.d.ts": "66204549b2a864ab5489e3f02c1878e73ab4b3c9d938cfb480b66f71543a43de",
     "rules/delegate-to-github.ts": "1060cda40f4b73d6cca3ba3fa13b80b4886147d4034c88584c2d80c5510dbe5e",
@@ -9,5 +9,5 @@
     "rules/wfj011.ts": "fcb8bf6685d744af20ad804ce929488257995c74b9a3353b2eacae3768d1c83e",
     "skills/chant-forgejo.md": "a1a560429db736c187e0b34cf8dd9efc6ad771afefcbf6f802d160d3d5274257"
   },
-  "composite": "a78709b8b52c94f8d222b493957b9496b87ab3b22db51d018c4bf53f8db03d59"
+  "composite": "988eb432f002d2f7dfe3a822cf0d8a6377e82a5a89fad9534447953844169331"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "forgejo",
-  "version": "0.101.0",
+  "version": "0.104.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Forgejo",
   "intrinsics": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-forgejo",
-  "version": "0.101.0",
+  "version": "0.104.0",
   "description": "Forgejo / Codeberg / Gitea Actions lexicon for chant — a thin GitHub Actions dialect",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -54,14 +54,14 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.101.0",
-    "@intentius/chant-lexicon-github": "^0.101.0"
+    "@intentius/chant": "^0.104.0",
+    "@intentius/chant-lexicon-github": "^0.104.0"
   },
   "scripts": {
     "generate": "tsx src/codegen/generate-cli.ts",
     "bundle": "tsx src/codegen/package-cli.ts",
     "docs": "tsx src/codegen/docs-cli.ts",
     "prepack": "npm run generate && npm run bundle && npm run build",
-    "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete"
+    "build": "../../scripts/tsc7.sh -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete"
   }
 }

package/src/components/__fixtures__/pr-loop.forgejo.golden.yml

@@ -0,0 +1,60 @@
+name: chant-pr-prod
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+env:
+  CHANT_ENV: prod
+
+jobs:
+  plan:
+    if: github.event_name == 'pull_request'
+    runs-on: docker
+    container: node:22-slim
+    steps:
+      - uses: https://code.forgejo.org/actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - name: Plan the members this pull request reaches
+        env:
+          BASE_SHA: '${{ github.event.pull_request.base.sha }}'
+          PR_NUMBER: '${{ github.event.pull_request.number }}'
+          GITHUB_TOKEN: '${{ github.token }}'
+        run: chant components pr-plan --base "$BASE_SHA" --pr "$PR_NUMBER" --env prod --gate pr-apply --output .chant/pr --forge forgejo
+      - name: Keep the plan report
+        if: always()
+        uses: https://code.forgejo.org/actions/upload-artifact@v4
+        with:
+          name: chant-pr-plan
+          path: .chant/pr
+          if-no-files-found: ignore
+          include-hidden-files: true
+  apply:
+    if: github.event_name == 'push'
+    runs-on: docker
+    container: node:22-slim
+    concurrency:
+      group: chant-apply-prod
+      cancel-in-progress: false
+    steps:
+      - uses: https://code.forgejo.org/actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - name: Apply the plan a reviewer approved
+        env:
+          BASE_SHA: '${{ github.event.before }}'
+          GITHUB_TOKEN: '${{ github.token }}'
+        run: chant components pr-apply --base "$BASE_SHA" --env prod --gate pr-apply --output .chant/pr --forge forgejo --require-review
+      - name: Keep the apply report
+        if: always()
+        uses: https://code.forgejo.org/actions/upload-artifact@v4
+        with:
+          name: chant-pr-apply
+          path: .chant/pr
+          if-no-files-found: ignore
+          include-hidden-files: true

package/src/components/generate-op-pipeline.test.ts

@@ -202,7 +202,7 @@ describe("generateForgejoOpPipeline: setup steps and additive permissions (#2242
     const steps = doc.jobs!["app-apply"].steps;
     // The checkout is rewritten to the Forgejo mirror; an action with no
     // mapping in ../actions.ts passes through verbatim.
-    expect(steps[0].uses).toContain("actions/checkout@v4");
+    expect(steps[0].uses).toContain("actions/checkout@v7");
     expect(steps[1].uses).toBe("aws-actions/configure-aws-credentials@v6");
     expect((steps[1] as { with?: Record<string, string> }).with).toEqual({
       "role-to-assume": "${{ vars.AWS_ROLE_ARN }}",
@@ -320,7 +320,7 @@ describe("generateForgejoOpPipeline: a dropped deployment environment (#2257)",
       "    runs-on: docker",
       "    container: node:22-slim",
       "    steps:",
-      "      - uses: https://code.forgejo.org/actions/checkout@v4",
+      "      - uses: https://code.forgejo.org/actions/checkout@v7",
       "      - run: chant run actions-audit",
       "        env:",
       "          GITHUB_TOKEN: '${{ github.token }}'",

package/src/components/generate-pipeline.test.ts

@@ -110,7 +110,7 @@ describe("generateForgejoPipeline: dialect applied", () => {
       expect(ref).toContain("code.forgejo.org/actions/");
     }
     // checkout is present and mirrored.
-    expect(all.some((r) => r === "https://code.forgejo.org/actions/checkout@v4")).toBe(true);
+    expect(all.some((r) => r === "https://code.forgejo.org/actions/checkout@v7")).toBe(true);
   });
 });
 

package/src/components/generate-pipeline.ts

@@ -53,7 +53,11 @@ export function generateForgejoPipeline(
   options: ComponentPipelineOptions = {},
   dialectOptions: ForgejoDialectOptions = {},
 ): ComponentPipelineResult {
-  const doc = buildGithubPipelineDoc(components, options);
+  // The pull-request loop (#3183) talks to the forge, so its commands name Forgejo.
+  const doc = buildGithubPipelineDoc(
+    components,
+    options.prLoop ? { ...options, prLoop: { ...options.prLoop, forge: "forgejo" } } : options,
+  );
 
   const forgejoDoc: GithubPipelineDoc = {
     // The environment identity (#2046) is dialect-neutral: name, environment,

package/src/components/generate-pr-pipeline.test.ts

@@ -0,0 +1,61 @@
+/**
+ * The generated pull-request workflow for Forgejo Actions (#3183): github's
+ * workflow with the Forgejo dialect applied and its commands talking to
+ * Forgejo. The whole file has a golden, and actionlint checks it when it is
+ * installed, less the two things it cannot know about Forgejo: the runner
+ * label and actions referenced by URL.
+ */
+
+import { execFileSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, test } from "vitest";
+import type { DriverComponent } from "@intentius/chant/components/driver";
+import { generateForgejoPipeline } from "./generate-pipeline";
+
+const ESTATE: DriverComponent[] = [
+  { name: "net", dependsOn: [], deploy: [{ phase: "Apply", steps: [{ kind: "terraform-apply", root: "net" }] }] },
+  { name: "app", dependsOn: ["net"], deploy: [{ phase: "Apply", steps: [{ kind: "terraform-apply", root: "app" }] }] },
+];
+
+const GOLDEN = join(import.meta.dirname, "__fixtures__", "pr-loop.forgejo.golden.yml");
+
+function hasActionlint(): boolean {
+  try {
+    execFileSync("actionlint", ["-version"], { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+describe("the Forgejo pull-request workflow", () => {
+  const result = generateForgejoPipeline(ESTATE, { env: "prod", prLoop: {} });
+
+  test("matches its golden", () => {
+    if (process.env.UPDATE_GOLDEN) writeFileSync(GOLDEN, result.yaml);
+    expect(result.yaml).toBe(readFileSync(GOLDEN, "utf-8"));
+  });
+
+  test("its commands talk to Forgejo, on Forgejo's runner, with no permissions block", () => {
+    expect(result.yaml).toContain("--forge forgejo");
+    expect(result.yaml).not.toContain("--forge github");
+    expect(result.yaml).toContain("runs-on: docker");
+    expect(result.yaml).not.toMatch(/^\s+permissions:/m);
+  });
+
+  test.skipIf(!hasActionlint())("passes actionlint, less the runner label and actions by URL", () => {
+    const dir = mkdtempSync(join(tmpdir(), "chant-actionlint-"));
+    try {
+      mkdirSync(join(dir, ".github", "workflows"), { recursive: true });
+      writeFileSync(join(dir, ".github", "workflows", "chant-pr.yml"), result.yaml);
+      const ignore = ['label "docker" is unknown', "invalid format because owner and repo and ref should not be empty"];
+      expect(() =>
+        execFileSync("actionlint", [...ignore.flatMap((p) => ["-ignore", p]), ".github/workflows/chant-pr.yml"], { cwd: dir, encoding: "utf8" }),
+      ).not.toThrow();
+    } finally {
+      rmSync(dir, { recursive: true, force: true });
+    }
+  });
+});

package/src/mcp/context-tools.test.ts

@@ -80,7 +80,7 @@ describe("forgejo context tools", () => {
   test("forgejo:references reports the rewritten + unmapped refs", async () => {
     const refs = (await tool("forgejo:references").handler({ path: join(dir, "src") })) as Array<{ source: string }>;
     const sources = refs.map((r) => r.source);
-    expect(sources).toContain("https://code.forgejo.org/actions/checkout@v4");
+    expect(sources).toContain("https://code.forgejo.org/actions/checkout@v7");
     expect(sources).toContain("some-org/custom-action@v1");
   });
 

package/src/serializer.test.ts

@@ -88,15 +88,15 @@ describe("forgejoSerializer — uses: action resolution", () => {
     const { primary } = asResult(
       forgejoSerializer.serialize(withSteps(Checkout({}).step, SetupNode({ nodeVersion: "22" }).step)),
     );
-    expect(primary).toContain(`uses: ${DEFAULT_ACTIONS_ROOT}/actions/checkout@v4`);
-    expect(primary).toContain(`uses: ${DEFAULT_ACTIONS_ROOT}/actions/setup-node@v4`);
+    expect(primary).toContain(`uses: ${DEFAULT_ACTIONS_ROOT}/actions/checkout@v7`);
+    expect(primary).toContain(`uses: ${DEFAULT_ACTIONS_ROOT}/actions/setup-node@v7`);
   });
 
   test("forgejo.actionsRoot override changes the rewritten base", () => {
     const out = forgejoSerializer.serialize(withSteps(Checkout({}).step), undefined, {
       config: { forgejo: { actionsRoot: "https://codeberg.org" } },
     });
-    expect(asResult(out).primary).toContain("uses: https://codeberg.org/actions/checkout@v4");
+    expect(asResult(out).primary).toContain("uses: https://codeberg.org/actions/checkout@v7");
   });
 
   test("an unmapped action ref is passed through (WFJ010 reports it post-synth)", () => {