@kungfu-tech/buildchain 4.0.1-alpha.5 → 4.0.1-alpha.55

package/scripts/release-line-policy.mjs

@@ -47,16 +47,27 @@ export function parseVersionStateRef(ref) {
 
 export function parseReleaseLineRecoveryRef(ref) {
   const normalizedRef = normalizeRef(ref);
-  const match = normalizedRef.match(/^fix\/release-line-v(\d+)-v(\d+\.\d+)-[0-9A-Za-z._-]+$/);
+  const match = normalizedRef.match(/^fix\/(alpha|release)-line-v(\d+)-v(\d+\.\d+)-[0-9A-Za-z._-]+$/);
   if (!match) return undefined;
   return {
-    major: Number(match[1]),
-    loose: Number(match[2]),
-    normalizedRef: `release/v${match[1]}/v${match[2]}`,
-    lineSuffix: `/v${match[1]}/v${match[2]}`,
+    channel: match[1],
+    major: Number(match[2]),
+    loose: Number(match[3]),
+    normalizedRef: `${match[1]}/v${match[2]}/v${match[3]}`,
   };
 }
 
+function getRecoveryBumpKeyword({ target, baseRef, baseChannel, version, looseVersionNumber, headRef }) {
+  if (!target) return "";
+  if (baseChannel !== target.channel || target.normalizedRef !== normalizeRef(baseRef)) {
+    throw new Error(`Versions not match for head/base refs: ${headRef} -> ${baseRef}`);
+  }
+  if (target.major !== version.major || target.loose !== looseVersionNumber) {
+    throw new Error(`The version of head ref ${headRef} does not match current ${version.version}`);
+  }
+  return baseChannel === "release" ? "patch" : "prerelease";
+}
+
 export function parsePublishGateChannelRef(ref) {
   const normalizedRef = normalizeRef(ref);
   const match = normalizedRef.match(/^publish-gate\/(alpha|release)\/(v(\d+)\/v(\d+\.\d+))\/[^/]+$/);
@@ -131,6 +142,14 @@ export function getBumpKeyword({ cwd = process.cwd(), headRef, baseRef, loose =
   const authorityTarget = parseAuthorityRef(baseRef);
   const headChannel = getChannel(headRef);
   const baseChannel = getChannel(baseRef);
+  const recoveryKeyword = getRecoveryBumpKeyword({
+    target: releaseLineRecoveryTarget,
+    baseRef,
+    baseChannel,
+    version,
+    looseVersionNumber,
+    headRef,
+  });
   const key = `${headChannel}->${baseChannel}`;
   const keywords = {
     "dev->alpha": "prerelease",
@@ -157,16 +176,7 @@ export function getBumpKeyword({ cwd = process.cwd(), headRef, baseRef, loose =
     return "none";
   }
 
-  if (releaseLineRecoveryTarget) {
-    if (baseChannel !== "release" || releaseLineRecoveryTarget.normalizedRef !== normalizeRef(baseRef)) {
-      throw new Error(`Versions not match for head/base refs: ${headRef} -> ${baseRef}`);
-    }
-    const mismatchMsg = `The version of head ref ${headRef} does not match current ${version.version}`;
-    if (releaseLineRecoveryTarget.major !== version.major || releaseLineRecoveryTarget.loose !== looseVersionNumber) {
-      throw new Error(mismatchMsg);
-    }
-    return "patch";
-  }
+  if (recoveryKeyword) return recoveryKeyword;
 
   if (publishGateTarget) {
     if (publishGateTarget.channel !== baseChannel || publishGateTarget.normalizedRef !== normalizeRef(baseRef)) {

package/scripts/release-tail.mjs

@@ -11,6 +11,10 @@ import {
   writeReleaseTailTransaction,
 } from "../packages/core/release-tail-provider-plane.js";
 import { diagnoseLegacyReleaseTailHooks } from "../packages/core/release-tail-compatibility.js";
+import {
+  V4_PUBLICATION_REHEARSAL_EVIDENCE_CONTRACT,
+  executeV4PublicationRehearsal,
+} from "../packages/core/v4-publication-rehearsal.js";
 
 function flag(args, name, fallback = "") {
   const index = args.indexOf(`--${name}`);
@@ -34,8 +38,69 @@ function output(value, filePath = "") {
   process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
 }
 
-export function runReleaseTailCli(args = process.argv.slice(2)) {
+export async function runReleaseTailCli(args = process.argv.slice(2)) {
   const [mode = "status", ...options] = args;
+  if (mode === "rehearse") {
+    const capsulePath = flag(options, "capsule");
+    const candidateRoot =
+      flag(options, "candidate-root") || flag(options, "capsule-root");
+    const statePath = flag(options, "state");
+    const evidencePath = flag(options, "evidence");
+    for (const [name, value] of Object.entries({
+      "--capsule": capsulePath,
+      "--candidate-root": candidateRoot,
+      "--state": statePath,
+      "--evidence": evidencePath,
+    }))
+      if (!value || !path.isAbsolute(value))
+        throw new Error(`${name} must be an explicit absolute path`);
+    const rehearsalMode = flag(options, "mode", "simulate");
+    if (!new Set(["simulate", "replay"]).has(rehearsalMode))
+      throw new Error(
+        "local rehearsal --mode must be simulate or replay; authorized provider rehearsal uses the reusable workflow",
+      );
+    try {
+      const environmentInput = flag(options, "environment-json");
+      const environment = environmentInput
+        ? readJson(environmentInput, "--environment-json")
+        : {};
+      if (
+        !environment ||
+        typeof environment !== "object" ||
+        Array.isArray(environment) ||
+        Object.keys(environment).length > 0
+      ) {
+        const error = new Error(
+          "--environment-json must be an empty object; v4 binds every semantic input into the source-bound capsule",
+        );
+        error.code = "ambient-environment-forbidden";
+        throw error;
+      }
+      const result = await executeV4PublicationRehearsal({
+        capsule: readJson(capsulePath, "--capsule"),
+        candidateRoot,
+        mode: rehearsalMode,
+        checkpoint: (transaction) =>
+          writeReleaseTailTransaction(statePath, transaction),
+      });
+      writeReleaseTailTransaction(statePath, result.transaction);
+      output(result.evidence, evidencePath);
+      return result;
+    } catch (error) {
+      output(
+        {
+          schema: V4_PUBLICATION_REHEARSAL_EVIDENCE_CONTRACT,
+          status: "rejected",
+          code: error.code || "publication-rehearsal-runtime-error",
+          message: error.message,
+          productionAuthority: false,
+          releasePassport: null,
+        },
+        evidencePath,
+      );
+      throw error;
+    }
+  }
   if (mode === "plan") {
     const plan = compileReleaseTailDeclaration(
       readJson(flag(options, "declaration"), "--declaration"),
@@ -95,7 +160,7 @@ export function runReleaseTailCli(args = process.argv.slice(2)) {
     return report;
   }
   throw new Error(
-    "usage: buildchain release-tail <plan|init|status|verify|compat> [--declaration <json-or-path>] [--state <path>] [--hooks-json <json-or-path>] [--output <path>]",
+    "usage: buildchain release-tail <plan|init|status|verify|compat|rehearse> [--declaration <json-or-path>] [--capsule <absolute-path>] [--candidate-root <absolute-path>|--capsule-root <absolute-path>] [--environment-json <empty-json-or-path>] [--mode <simulate|replay>] [--state <absolute-path>] [--evidence <absolute-path>] [--hooks-json <json-or-path>] [--output <path>]",
   );
 }
 
@@ -105,7 +170,7 @@ if (
   import.meta.url === pathToFileURL(process.argv[1]).href
 ) {
   try {
-    runReleaseTailCli();
+    await runReleaseTailCli();
   } catch (error) {
     console.error(`release-tail: ${error.message}`);
     process.exitCode = 1;