@kungfu-tech/buildchain 3.0.5-alpha.6 → 3.0.5-alpha.7

package/scripts/release-propagation.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import fs from "node:fs";
 import path from "node:path";
+import { execFileSync } from "node:child_process";
 import { pathToFileURL } from "node:url";
 import {
   claimReleasePropagationWork,
@@ -15,6 +16,10 @@ import {
   resumeReleasePropagationWork,
   verifyReleasePropagationWork,
   writeReleasePropagationLock,
+  createManualUpstreamPickupCapture,
+  createManualUpstreamPickupPlan,
+  normalizeManualUpstreamPickupConfig,
+  resolveNpmRegistryRelease,
 } from "../packages/core/release-propagation.js";
 
 function usage() {
@@ -61,6 +66,15 @@ function usage() {
                                               --completion-decision <json-or-path>
                                               --expected-work-root <sha256:...>
                                               [--output <file>] [--json]
+  buildchain release-propagation pickup plan --config <json-or-path>
+                                            --source-id <id> --channel <alpha|release>
+                                            --current-version <version>
+                                            [--output <file>] [--json]
+  buildchain release-propagation pickup create --config <json-or-path>
+                                              --source-id <id> --channel <alpha|release>
+                                              --current-version <version>
+                                              --expected-downstream-base-sha <git-sha>
+                                              [--output <file>] [--json]
 `;
 }
 
@@ -171,7 +185,61 @@ function runWorkCli(args) {
   throw new Error(`unsupported release-propagation work command: ${mode}`);
 }
 
-export function runReleasePropagationCli(argv = process.argv.slice(2)) {
+async function resolvePickupPlan(args) {
+  const config = normalizeManualUpstreamPickupConfig(readJsonFlag(args, "config"));
+  const sourceId = readFlag(args, "source-id");
+  const channel = readFlag(args, "channel");
+  const source = config.sources.find((entry) => entry.id === sourceId);
+  if (!source) throw new Error(`manual pickup source is not configured: ${sourceId}`);
+  const distTag = source.distTags[channel];
+  if (!distTag) throw new Error("manual pickup channel must be alpha or release");
+  const packageMetadata = args.includes("--package-metadata")
+    ? readJsonFlag(args, "package-metadata")
+    : JSON.parse(execFileSync("npm", ["view", `${source.package}@${distTag}`, "--json", "--registry=https://registry.npmjs.org/"], {
+        encoding: "utf8",
+        maxBuffer: 16 * 1024 * 1024,
+      }));
+  const attestationUrl = packageMetadata.dist?.attestations?.url;
+  if (!attestationUrl) throw new Error("published npm package does not expose an attestation URL");
+  let attestations;
+  if (args.includes("--attestations")) {
+    attestations = readJsonFlag(args, "attestations");
+  } else {
+    const response = await fetch(attestationUrl, { headers: { accept: "application/json" } });
+    if (!response.ok) throw new Error(`npm attestation lookup failed: HTTP ${response.status}`);
+    attestations = await response.json();
+  }
+  const upstreamRelease = resolveNpmRegistryRelease({ source, channel, packageMetadata, attestations });
+  return createManualUpstreamPickupPlan({
+    config,
+    sourceId,
+    channel,
+    currentVersion: readFlag(args, "current-version"),
+    upstreamRelease,
+  });
+}
+
+async function runPickupCli(args) {
+  const [mode = "", ...pickupArgs] = args;
+  if (!mode || mode === "--help" || mode === "-h") {
+    process.stdout.write(usage());
+    return;
+  }
+  if (mode !== "plan" && mode !== "create") throw new Error(`unsupported release-propagation pickup command: ${mode}`);
+  const plan = await resolvePickupPlan(pickupArgs);
+  const result = mode === "create"
+    ? createManualUpstreamPickupCapture({
+        plan,
+        expectedDownstreamBaseSha: readFlag(pickupArgs, "expected-downstream-base-sha"),
+      })
+    : plan;
+  writeOutput(readFlag(pickupArgs, "output", ""), result);
+  if (hasFlag(pickupArgs, "json")) printJson(result);
+  else if (mode === "plan") process.stdout.write(`manual upstream pickup: ${plan.source.id} ${plan.currentVersion} -> ${plan.resolvedVersion} (${plan.status})\n`);
+  else process.stdout.write(`manual upstream pickup next action: ${result.nextAction}\n`);
+}
+
+export async function runReleasePropagationCli(argv = process.argv.slice(2)) {
   const [mode = "", ...args] = argv;
   if (!mode || mode === "--help" || mode === "-h") {
     process.stdout.write(usage());
@@ -206,6 +274,10 @@ export function runReleasePropagationCli(argv = process.argv.slice(2)) {
     runWorkCli(args);
     return;
   }
+  if (mode === "pickup") {
+    await runPickupCli(args);
+    return;
+  }
   if (mode === "write-lock") {
     const plan = readReleasePropagationJson(readFlag(args, "plan"), {
       label: "--plan",
@@ -259,5 +331,8 @@ export function runReleasePropagationCli(argv = process.argv.slice(2)) {
 }
 
 if (!process.env.BUILDCHAIN_EMBEDDED_ENTRYPOINT && process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  runReleasePropagationCli();
+  runReleasePropagationCli().catch((error) => {
+    console.error(`buildchain release-propagation: ${error.message}`);
+    process.exitCode = 1;
+  });
 }