@kungfu-tech/buildchain 3.0.1-alpha.2 → 3.0.1-alpha.3

package/scripts/check-inventory.mjs

@@ -19,6 +19,28 @@ import {
 const root = process.cwd();
 const sharedActionTsupConfig = fs.readFileSync(path.join(root, "scripts/tsup-action.config.mjs"), "utf8");
 const commonJsSourcePattern = /\b(require\s*\(|module\.exports|exports\.|require\.main|createRequire)\b/;
+
+function assertSelfReleaseImpactContract(impact, { expectedVersion = "" } = {}) {
+  if (!impact || typeof impact !== "object" || Array.isArray(impact)) {
+    throw new Error("Buildchain self release impact must be a JSON object");
+  }
+  const version = String(impact.release?.version || "").trim();
+  const versionMatch = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/);
+  if (!versionMatch) throw new Error("Buildchain self release impact release.version must be a semantic version");
+  if (expectedVersion && version !== expectedVersion) {
+    throw new Error("Buildchain self release impact version must match package.json version");
+  }
+  const expectedLine = `v${versionMatch[1]}.${versionMatch[2]}`;
+  const line = String(impact.release?.line || "").trim();
+  if (line !== expectedLine) {
+    throw new Error(`Buildchain self release impact line must be ${expectedLine} for release.version ${version}`);
+  }
+  const summary = String(impact.summary || "").trim();
+  if (!summary.startsWith(`Buildchain ${line} `)) {
+    throw new Error(`Buildchain self release impact summary must describe the current ${line} line`);
+  }
+}
+
 const requiredPaths = [
   "AGENTS.md",
   "CONTRIBUTING.md",
@@ -844,19 +866,16 @@ const selfHostedRunnerSmokeWorkflow = fs.readFileSync(path.join(root, ".github/w
 const npmDryRunScript = fs.readFileSync(path.join(root, "scripts/npm-publish-dry-run.mjs"), "utf8");
 const npmPublishTransactionScript = fs.readFileSync(path.join(root, "scripts/npm-publish-transaction.mjs"), "utf8");
 const rootPackageJson = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
-const selfReleaseImpact = JSON.parse(fs.readFileSync(path.join(root, ".buildchain/release-impact.json"), "utf8"));
-const selfReleaseLineMatch = String(rootPackageJson.version || "").match(/^(\d+)\.(\d+)\./);
-const expectedSelfReleaseLine = selfReleaseLineMatch ? `v${selfReleaseLineMatch[1]}.${selfReleaseLineMatch[2]}` : "";
-if (selfReleaseImpact.release?.version !== rootPackageJson.version) {
-  throw new Error("Buildchain self release impact version must match package.json version");
-}
-if (!expectedSelfReleaseLine || selfReleaseImpact.release?.line !== expectedSelfReleaseLine) {
-  throw new Error("Buildchain self release impact line must match package.json major/minor line");
-}
+const selfReleaseImpactPath = path.resolve(
+  root,
+  process.env.BUILDCHAIN_SELF_RELEASE_IMPACT_PATH || ".buildchain/release-impact.json",
+);
+const selfReleaseImpact = JSON.parse(fs.readFileSync(selfReleaseImpactPath, "utf8"));
+assertSelfReleaseImpactContract(selfReleaseImpact, { expectedVersion: rootPackageJson.version });
 if (!["patch", "minor", "major"].includes(selfReleaseImpact.classification)) {
   throw new Error("Buildchain self release impact classification must be patch, minor, or major");
 }
-if (!String(selfReleaseImpact.summary || "").trim() || !Array.isArray(selfReleaseImpact.surfaceImpacts) || selfReleaseImpact.surfaceImpacts.length === 0) {
+if (!Array.isArray(selfReleaseImpact.surfaceImpacts) || selfReleaseImpact.surfaceImpacts.length === 0) {
   throw new Error("Buildchain self release impact requires a summary and surfaceImpacts[]");
 }
 for (const requiredSnippet of [

package/scripts/web-surface-production-release-pr.mjs

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import fs from "node:fs";
 import path from "node:path";
+import {
+  defaultBuildchainLogPath,
+  recordBuildchainControlPlaneOutcome,
+} from "../packages/core/logging.js";
 
 function requiredString(value, name) {
   const normalized = String(value || "").trim();
@@ -70,6 +74,34 @@ function runUrl({ serverUrl = "", repository = "", runId = "" } = {}) {
   return `${serverUrl.replace(/\/$/, "")}/${repository}/actions/runs/${runId}`;
 }
 
+export function recordProductionReleasePrOutcome(result, env = process.env) {
+  const outcome = result.action === "created"
+    ? "created"
+    : result.action === "updated"
+      ? "reused"
+      : result.action === "suppressed-merged-release-pr"
+        ? "suppressed"
+        : ["permission-denied", "app-token-unavailable", "failed"].includes(result.action)
+          ? "failed"
+          : "skipped";
+  return recordBuildchainControlPlaneOutcome({
+    domain: "release-intent",
+    action: result.action,
+    outcome,
+    reason: result.suppressionReason || result.status,
+    attributes: {
+      repository: result.repository,
+      channel: result.productionReleaseChannel,
+      pullNumber: result.pullNumber,
+      sourceSha: result.sourceSha,
+    },
+  }, {
+    path: optionalString(env.BUILDCHAIN_LOG_PATH) ||
+      (env.GITHUB_ACTIONS === "true" ? defaultBuildchainLogPath() : false),
+    console: false,
+  });
+}
+
 function urlsFromResult(result = {}) {
   const urls = result.urls && typeof result.urls === "object" ? result.urls : {};
   if (Object.keys(urls).length > 0) return urls;
@@ -374,6 +406,33 @@ async function createOrUpdateBranch({ apiUrl, token, owner, repo, branchName, so
   return createdCommit.sha;
 }
 
+function findMergedProductionReleasePr({
+  pullRequests = [],
+  repository,
+  productionReleaseLabel = "buildchain-release",
+  productionReleaseHeadPrefix = "release/",
+  base = "main",
+} = {}) {
+  const fullName = requiredString(repository, "repository");
+  const label = requiredString(productionReleaseLabel, "productionReleaseLabel");
+  const headPrefix = optionalString(productionReleaseHeadPrefix);
+  const candidates = (Array.isArray(pullRequests) ? pullRequests : []).filter((pull) => {
+    const labels = Array.isArray(pull?.labels) ? pull.labels.map((entry) => entry?.name || entry) : [];
+    const headRef = optionalString(pull?.head?.ref);
+    return Boolean(pull?.merged_at) &&
+      pull?.base?.ref === base &&
+      pull?.head?.repo?.full_name === fullName &&
+      labels.includes(label) &&
+      (!headPrefix || headRef.startsWith(headPrefix));
+  });
+  if (candidates.length > 1) {
+    throw new Error(
+      `multiple merged production release PRs matched the source commit: ${candidates.map((pull) => `#${pull.number}`).join(", ")}`,
+    );
+  }
+  return candidates[0];
+}
+
 export async function openProductionReleasePr({
   apiUrl = "https://api.github.com",
   token,
@@ -400,6 +459,43 @@ export async function openProductionReleasePr({
   });
   const { owner, repo, branchName, title, body, head } = handoff;
   const normalizedToken = requiredString(token, "token");
+  const associated = await githubJson({
+    apiUrl,
+    token: normalizedToken,
+    path: `/repos/${owner}/${repo}/commits/${encodeURIComponent(handoff.sourceSha)}/pulls?per_page=100`,
+  });
+  let mergedReleasePull = findMergedProductionReleasePr({
+    pullRequests: associated,
+    repository,
+    productionReleaseLabel,
+    productionReleaseHeadPrefix,
+    base: handoff.base,
+  });
+  if (!mergedReleasePull) {
+    const closedByDeterministicHead = await githubJson({
+      apiUrl,
+      token: normalizedToken,
+      path: `/repos/${owner}/${repo}/pulls?state=closed&base=${encodeURIComponent(handoff.base)}&head=${encodeURIComponent(head)}&per_page=100`,
+    });
+    mergedReleasePull = findMergedProductionReleasePr({
+      pullRequests: closedByDeterministicHead,
+      repository,
+      productionReleaseLabel,
+      productionReleaseHeadPrefix,
+      base: handoff.base,
+    });
+  }
+  if (mergedReleasePull) {
+    return {
+      action: "suppressed-merged-release-pr",
+      status: "suppressed-merged-release-pr",
+      ...handoff,
+      branchName,
+      pullNumber: mergedReleasePull.number,
+      pullUrl: mergedReleasePull.html_url || mergedReleasePull.url || "",
+      suppressionReason: "source-commit-already-has-qualifying-merged-release-pr",
+    };
+  }
   const existing = await githubJson({
     apiUrl,
     token: normalizedToken,
@@ -524,6 +620,7 @@ export async function webSurfaceProductionReleasePrCli(env = process.env) {
       if (failOnReleasePrError) {
         writeJsonFile(summaryPath, result);
         if (env.GITHUB_STEP_SUMMARY) fs.appendFileSync(env.GITHUB_STEP_SUMMARY, renderStepSummary(result));
+        recordProductionReleasePrOutcome(result, env);
         throw new Error(result.error.message);
       }
     } else {
@@ -562,12 +659,14 @@ export async function webSurfaceProductionReleasePrCli(env = process.env) {
         if (status !== "permission-denied" || failOnReleasePrError) {
           writeJsonFile(summaryPath, result);
           if (env.GITHUB_STEP_SUMMARY) fs.appendFileSync(env.GITHUB_STEP_SUMMARY, renderStepSummary(result));
+          recordProductionReleasePrOutcome(result, env);
           throw error;
         }
       }
     }
   }
 
+  recordProductionReleasePrOutcome(result, env);
   writeJsonFile(summaryPath, result);
   if (env.GITHUB_STEP_SUMMARY) {
     fs.appendFileSync(env.GITHUB_STEP_SUMMARY, renderStepSummary(result));

package/scripts/workflow-friction-report.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import fs from "node:fs";
 import path from "node:path";
+import { recordBuildchainControlPlaneOutcome } from "../packages/core/logging.js";
 import { pathToFileURL } from "node:url";
 import { writeGitHubOutputs } from "./build-contract-core.mjs";
 
@@ -346,6 +347,15 @@ export async function workflowFrictionReportCli() {
     })}\n`);
     console.error(`::warning::${diagnosis.replace(/\r?\n/g, "%0A")}`);
   }
+  recordBuildchainControlPlaneOutcome({
+    domain: "workflow-friction",
+    action: "classified",
+    outcome: "classified",
+    attributes: {
+      frictionClass: result.frictionClass,
+      pullRequest: result.pullRequest,
+    },
+  });
   writeGitHubOutputs({
     "friction-class": result.frictionClass,
     summary: result.summary,