@kungfu-tech/buildchain 2.0.16-alpha.0 → 2.0.16

package/packages/core/buildchain-config.js

@@ -10,6 +10,9 @@ const SUPPORTED_VERSION_FILE_TYPES = new Set(["json", "toml", "regex"]);
 const SUPPORTED_VERSION_STRATEGIES = new Set(["semver", "anchored"]);
 const SUPPORTED_VERSION_NEXT = new Set(["auto", "manual"]);
 const SUPPORTED_PROJECT_TYPES = new Set(["package", "web-surface"]);
+const SUPPORTED_PUBLISH_MODES = new Set(["publish-final-version", "promote-existing-version"]);
+const SUPPORTED_PUBLISH_AUTH = new Set(["trusted-publishing", "npm-token"]);
+const SUPPORTED_PACKAGE_SET_ORDER = new Set(["as-provided", "platforms-first-main-last"]);
 const WEB_SURFACE_CHANNELS = ["preview", "staging", "production"];
 const SUPPORTED_CHANNEL_VISIBILITY = new Set(["ephemeral", "protected", "public", "internal"]);
 const SUPPORTED_ACCESS_CONTROL = new Set(["none", "managed-network", "edge-basic-auth", "oidc", "app-auth"]);
@@ -104,6 +107,9 @@ export function normalizeBuildchainConfig(config) {
   if (normalized.lifecycle !== undefined) {
     normalized.lifecycle = normalizeLifecycleSection(normalized.lifecycle);
   }
+  if (normalized.publish !== undefined) {
+    normalized.publish = normalizePublishSection(normalized.publish);
+  }
   if (normalized.channels !== undefined) {
     normalized.channels = normalizeChannelsSection(normalized.channels, normalized.project);
   }
@@ -120,6 +126,42 @@ export function normalizeBuildchainConfig(config) {
   return normalized;
 }
 
+function normalizePublishSection(publish) {
+  assertPlainObject(publish, "publish");
+  const mode = publish.mode === undefined
+    ? "publish-final-version"
+    : assertString(publish.mode, "publish.mode");
+  if (!SUPPORTED_PUBLISH_MODES.has(mode)) {
+    throw new Error("publish.mode must be one of publish-final-version or promote-existing-version");
+  }
+  const auth = publish.auth === undefined
+    ? "trusted-publishing"
+    : assertString(publish.auth, "publish.auth");
+  if (!SUPPORTED_PUBLISH_AUTH.has(auth)) {
+    throw new Error("publish.auth must be one of trusted-publishing or npm-token");
+  }
+  if (mode === "promote-existing-version" && auth !== "npm-token") {
+    throw new Error('publish.mode = "promote-existing-version" requires publish.auth = "npm-token"');
+  }
+  const packageSetOrder = publish.package_set_order === undefined
+    ? "as-provided"
+    : assertString(publish.package_set_order, "publish.package_set_order");
+  if (!SUPPORTED_PACKAGE_SET_ORDER.has(packageSetOrder)) {
+    throw new Error("publish.package_set_order must be one of as-provided or platforms-first-main-last");
+  }
+  return {
+    mode,
+    auth,
+    distTag: publish.dist_tag === undefined
+      ? undefined
+      : assertString(publish.dist_tag, "publish.dist_tag"),
+    packageSetOrder,
+    mainPackage: publish.main_package === undefined
+      ? ""
+      : assertString(publish.main_package, "publish.main_package"),
+  };
+}
+
 function normalizeProjectSection(project) {
   assertPlainObject(project, "project");
   const type = assertString(project.type, "project.type");
@@ -473,6 +515,10 @@ export function getLifecycleStage(loadedConfig, name) {
   return loadedConfig?.config?.lifecycle?.[name];
 }
 
+export function getPublishContract(loadedConfig) {
+  return loadedConfig?.config?.publish;
+}
+
 export function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv }) {
   const lifecycle = loadedConfig?.config?.lifecycle || {};
   const selected = stage || getLifecycleStage(loadedConfig, name);
@@ -706,6 +752,7 @@ export function validateBuildchainConfig(
       pattern: file.pattern?.source,
     })),
     lifecycleStages,
+    publish: loadedConfig.config.publish,
   };
 }
 

package/packages/core/index.js

@@ -1,6 +1,7 @@
 export {
   discoverConfiguredVersionStateFiles,
   getLifecycleStage,
+  getPublishContract,
   getVersionStrategy,
   loadBuildchainConfig,
   loadConfiguredAnchorManifest,

package/packages/core/publish-transaction.js

@@ -216,12 +216,17 @@ export function normalizePublishArtifact(artifact, label = "artifact") {
   if (!artifact || typeof artifact !== "object" || Array.isArray(artifact)) {
     throw new Error(`${label} must be an object`);
   }
+  const role = optionalString(artifact.role);
+  if (role && !["main", "platform"].includes(role)) {
+    throw new Error(`${label}.role must be one of main or platform`);
+  }
   return {
     group: optionalString(artifact.group),
     kind: assertNonEmptyString(artifact.kind, `${label}.kind`),
     name: assertNonEmptyString(artifact.name, `${label}.name`),
     ref: optionalString(artifact.ref),
     digest: assertNonEmptyString(artifact.digest, `${label}.digest`),
+    role,
     required: artifact.required === undefined ? true : Boolean(artifact.required),
   };
 }

package/scripts/check-inventory.mjs

@@ -5,8 +5,16 @@ const root = process.cwd();
 const sharedActionTsupConfig = fs.readFileSync(path.join(root, "scripts/tsup-action.config.mjs"), "utf8");
 const commonJsSourcePattern = /\b(require\s*\(|module\.exports|exports\.|require\.main|createRequire)\b/;
 const requiredPaths = [
+  "AGENTS.md",
+  "CONTRIBUTING.md",
+  "LICENSE",
+  "LICENSE-POLICY.md",
   "README.md",
+  "SECURITY.md",
+  ".github/ISSUE_TEMPLATE/config.yml",
+  ".github/pull_request_template.md",
   "bin/buildchain.mjs",
+  "docs/MAP.md",
   "docs/cli.md",
   "scripts/release-line-dry-run.mjs",
   "scripts/npm-publish-dry-run.mjs",
@@ -53,7 +61,7 @@ if (rootPackage.publishConfig?.access !== "public") {
 if (rootPackage.publishConfig?.registry !== "https://registry.npmjs.org/") {
   throw new Error("root package publishConfig.registry must be npmjs");
 }
-for (const expectedFile of ["bin/", "scripts/*.mjs", "packages/core/", "docs/cli.md"]) {
+for (const expectedFile of ["bin/", "scripts/*.mjs", "packages/core/", "docs/MAP.md", "docs/cli.md"]) {
   if (!rootPackage.files?.includes(expectedFile)) {
     throw new Error(`root package files must include ${expectedFile}`);
   }

package/scripts/npm-publish-transaction.mjs

@@ -152,7 +152,7 @@ export function npmPublishTransaction({
   const pkg = readPackageJson(resolvedCwd);
   const expectedVersion = readEnv("BUILDCHAIN_VERSION");
   const exactTag = assertPackageVersion({ pkg, expectedVersion });
-  const distTag = pkg.version.includes("-") ? "alpha" : "latest";
+  const distTag = readEnv("BUILDCHAIN_NPM_DIST_TAG", pkg.version.includes("-") ? "alpha" : "latest");
 
   const pack = parsePackResult(runNpm({
     cwd: resolvedCwd,