@kungfu-tech/buildchain 4.0.1 → 4.0.2-alpha.10

package/scripts/v4-product-publication-intent.mjs

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+
+import fs from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+import { spawnSyncCommand } from "../packages/core/spawn-command.js";
+import { selectV4ProductPublicationIntent } from "../packages/core/v4-product-publication.js";
+import { v4ContentRoot } from "../packages/core/v4-canonical-contracts.js";
+
+function env(name, required = false) {
+  const value = String(process.env[name] || "").trim();
+  if (required && !value) throw new Error(`${name} is required`);
+  return value;
+}
+
+function readJson(file) {
+  return JSON.parse(fs.readFileSync(path.resolve(file), "utf8"));
+}
+
+function packageName() {
+  const declared = env("BUILDCHAIN_PUBLISH_PACKAGE_MAIN");
+  if (declared) return declared;
+  const manifestPath = env("BUILDCHAIN_SEALED_BUNDLE_MANIFEST", true);
+  const manifest = readJson(manifestPath);
+  const selected = String(manifest?.npm?.name || "").trim();
+  if (!selected)
+    throw new Error("sealed bundle manifest does not declare npm.name");
+  return selected;
+}
+
+function observedVersions(name) {
+  const result = spawnSyncCommand(
+    "npm",
+    [
+      "view",
+      name,
+      "versions",
+      "--json",
+      "--registry=https://registry.npmjs.org/",
+    ],
+    { encoding: "utf8" },
+  );
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    const output = `${result.stdout || ""}\n${result.stderr || ""}`;
+    if (/\bE404\b|404 Not Found|is not in this registry/iu.test(output))
+      return [];
+    throw new Error(`npm version discovery failed: ${output.trim()}`);
+  }
+  const parsed = JSON.parse(String(result.stdout || "[]"));
+  return Array.isArray(parsed) ? parsed : [parsed].filter(Boolean);
+}
+
+function writeOutput(name, value) {
+  const output = env("GITHUB_OUTPUT");
+  if (!output) return;
+  fs.appendFileSync(output, `${name}=${String(value)}\n`);
+}
+
+export function resolveV4ProductPublicationIntent() {
+  const name = packageName();
+  const sourceSha = env("BUILDCHAIN_SOURCE_SHA", true);
+  const manifest = readJson(env("BUILDCHAIN_SEALED_BUNDLE_MANIFEST", true));
+  const requiredArtifacts = readJson(
+    env("BUILDCHAIN_REQUIRED_ARTIFACTS_PATH", true),
+  );
+  const channel = env("BUILDCHAIN_CHANNEL", true);
+  const intent = selectV4ProductPublicationIntent({
+    channel,
+    targetRef: env("BUILDCHAIN_TARGET_REF", true),
+    sourceSha,
+    sourceTimestamp: env("BUILDCHAIN_SOURCE_TIMESTAMP", true),
+    repository: env("BUILDCHAIN_REPOSITORY", true),
+    packageName: name,
+    distTag:
+      env("BUILDCHAIN_PUBLISH_DIST_TAG") ||
+      (channel === "alpha" ? "alpha" : "latest"),
+    sealedBundleRoot: manifest.root,
+    requiredArtifactsRoot: v4ContentRoot(
+      "v4-product-required-artifacts",
+      requiredArtifacts,
+    ),
+    candidateVersion: env("BUILDCHAIN_CANDIDATE_VERSION", true),
+    recoveredVersion: env("BUILDCHAIN_RECOVERED_PUBLICATION_VERSION"),
+    observedVersions: observedVersions(name),
+  });
+  const outputPath = path.resolve(
+    env("BUILDCHAIN_PRODUCT_PUBLICATION_INTENT_PATH") ||
+      ".buildchain/release-candidate/v4-product-publication-intent.json",
+  );
+  fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+  fs.writeFileSync(outputPath, `${JSON.stringify(intent, null, 2)}\n`);
+  writeOutput("version", intent.version);
+  writeOutput("exact-tag", intent.exactTag);
+  writeOutput("intent-path", outputPath);
+  writeOutput("intent-root", intent.intentRoot);
+  return { name, intent, outputPath };
+}
+
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+  try {
+    const result = resolveV4ProductPublicationIntent();
+    process.stdout.write(
+      `v4 product publication intent: ${result.name}@${result.intent.version} (${result.intent.mode})\n`,
+    );
+  } catch (error) {
+    console.error(`v4-product-publication-intent: ${error.message}`);
+    process.exitCode = 1;
+  }
+}

package/scripts/v4-release-candidate-adapter.mjs

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+
+import { execFileSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+
+export function resolveV4ReleaseCandidateAdapter({
+  resumeCandidateRunId = "",
+} = {}) {
+  const mode = String(resumeCandidateRunId || "").trim() ? "recovery" : "fresh";
+  return Object.freeze({
+    mode,
+    script:
+      mode === "recovery"
+        ? "scripts/resume-from-candidate-run.mjs"
+        : "scripts/release-candidate-resolver.mjs",
+  });
+}
+
+export function runV4ReleaseCandidateAdapter({
+  env = process.env,
+  exec = execFileSync,
+} = {}) {
+  const route = resolveV4ReleaseCandidateAdapter({
+    resumeCandidateRunId: env.BUILDCHAIN_RESUME_CANDIDATE_RUN_ID,
+  });
+  exec(process.execPath, [path.join(root, route.script)], {
+    env,
+    stdio: "inherit",
+  });
+  return route;
+}
+
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+  runV4ReleaseCandidateAdapter();
+}

package/scripts/capture-package-release-propagation.mjs

@@ -1,263 +0,0 @@
-#!/usr/bin/env node
-
-import crypto from "node:crypto";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { execFileSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import {
-  createPackageReleasePropagationCapture,
-  normalizePackageReleasePropagationConfig,
-} from "../packages/core/release-propagation-capture.js";
-import { stableJson } from "../packages/core/release-propagation-common.js";
-
-function parseArgs(argv) {
-  const args = {};
-  for (let index = 0; index < argv.length; index += 1) {
-    const token = argv[index];
-    if (!token.startsWith("--")) throw new Error(`unexpected argument: ${token}`);
-    const key = token.slice(2);
-    const value = argv[index + 1];
-    if (!value || value.startsWith("--")) throw new Error(`${token} requires a value`);
-    args[key] = value;
-    index += 1;
-  }
-  return args;
-}
-
-function required(args, key) {
-  const value = String(args[key] || "").trim();
-  if (!value) throw new Error(`--${key} is required`);
-  return value;
-}
-
-function sha256(bytes) {
-  return crypto.createHash("sha256").update(bytes).digest("hex");
-}
-
-function commandJson(command, args, options = {}) {
-  const text = execFileSync(command, args, { encoding: "utf8", ...options });
-  return JSON.parse(text);
-}
-
-function assertSourcePath(value) {
-  const sourcePath = String(value || "").trim();
-  if (!sourcePath || path.isAbsolute(sourcePath) || sourcePath.split("/").includes("..") || /[\r\n]/.test(sourcePath)) {
-    throw new Error("release propagation config path must be a safe repository-relative path");
-  }
-  return sourcePath;
-}
-
-function hasCommit(sourceSha, cwd) {
-  try {
-    execFileSync("git", ["cat-file", "-e", `${sourceSha}^{commit}`], {
-      cwd,
-      stdio: "ignore",
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export function readConfigAtSource(sourceSha, configPath, cwd) {
-  if (!hasCommit(sourceSha, cwd)) {
-    try {
-      execFileSync("git", ["fetch", "--no-tags", "--depth=1", "origin", sourceSha], {
-        cwd,
-        stdio: ["ignore", "pipe", "pipe"],
-      });
-    } catch (error) {
-      const detail = String(error.stderr || error.message || "unknown git fetch failure").trim();
-      throw new Error(`exact release source ${sourceSha} is unavailable from origin: ${detail}`);
-    }
-  }
-  const bytes = execFileSync("git", ["show", `${sourceSha}:${configPath}`], {
-    cwd,
-    encoding: "utf8",
-  });
-  const parsed = JSON.parse(bytes);
-  return { bytes, parsed, normalized: normalizePackageReleasePropagationConfig(parsed) };
-}
-
-function resolveTagTarget(repository, tag) {
-  let object = commandJson("gh", ["api", `repos/${repository}/git/ref/tags/${tag}`]).object;
-  for (let depth = 0; depth < 8 && object?.type === "tag"; depth += 1) {
-    object = commandJson("gh", ["api", `repos/${repository}/git/tags/${object.sha}`]).object;
-  }
-  if (object?.type !== "commit" || !/^[0-9a-f]{40}$/i.test(object.sha || "")) {
-    throw new Error(`release tag ${tag} does not resolve to one exact commit`);
-  }
-  return object.sha.toLowerCase();
-}
-
-function resolvePackageFact(packageName, version) {
-  const fact = commandJson("npm", [
-    "view",
-    `${packageName}@${version}`,
-    "version",
-    "dist.integrity",
-    "gitHead",
-    "--json",
-    "--registry=https://registry.npmjs.org/",
-  ]);
-  return {
-    name: packageName,
-    version: String(fact.version || ""),
-    integrity: String(fact.dist?.integrity || fact["dist.integrity"] || ""),
-    gitHead: String(fact.gitHead || "").toLowerCase(),
-  };
-}
-
-function verifyPublicReleasePassport({ repository, tag, localPath }) {
-  const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "buildchain-release-passport-"));
-  try {
-    execFileSync("gh", [
-      "release", "download", tag,
-      "--repo", repository,
-      "--pattern", "buildchain.release.json",
-      "--dir", temporary,
-    ], { stdio: ["ignore", "pipe", "pipe"] });
-    const localBytes = fs.readFileSync(localPath);
-    const remotePath = path.join(temporary, "buildchain.release.json");
-    const remoteBytes = fs.readFileSync(remotePath);
-    const localDigest = sha256(localBytes);
-    const remoteDigest = sha256(remoteBytes);
-    if (localDigest !== remoteDigest) {
-      throw new Error("public release passport bytes disagree with finalized local passport");
-    }
-    return {
-      url: `https://github.com/${repository}/releases/download/${tag}/buildchain.release.json`,
-      sha256: remoteDigest,
-    };
-  } finally {
-    fs.rmSync(temporary, { recursive: true, force: true });
-  }
-}
-
-function resolveBaseShas(config) {
-  return Object.fromEntries(config.targets.map((targetId) => {
-    const node = config.graph.nodes.find((entry) => entry.id === targetId);
-    if (!node?.baseRef) throw new Error(`configured propagation target ${targetId} has no baseRef`);
-    const response = commandJson("gh", ["api", `repos/${node.repository}/commits/${node.baseRef}`]);
-    const sha = String(response.sha || "").toLowerCase();
-    if (!/^[0-9a-f]{40}$/.test(sha)) {
-      throw new Error(`configured propagation target ${targetId} baseRef did not resolve exactly`);
-    }
-    return [targetId, sha];
-  }));
-}
-
-function writeOutput(name, value) {
-  if (!process.env.GITHUB_OUTPUT) return;
-  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
-}
-
-export function capturePackageReleasePropagation({
-  config,
-  upstreamRelease,
-  expectedBaseShas,
-  outputDir,
-  configBytes = "",
-} = {}) {
-  const captured = createPackageReleasePropagationCapture({
-    config,
-    upstreamRelease,
-    expectedBaseShas,
-  });
-  fs.mkdirSync(outputDir, { recursive: true });
-  fs.writeFileSync(
-    path.join(outputDir, "config.json"),
-    configBytes || stableJson(captured.config),
-  );
-  fs.writeFileSync(path.join(outputDir, "upstream-release.json"), stableJson(captured.upstreamRelease));
-  fs.writeFileSync(path.join(outputDir, "plan.json"), stableJson(captured.plan));
-  for (const item of captured.works) {
-    const targetDir = path.join(outputDir, "work", item.propagationKey);
-    fs.mkdirSync(targetDir, { recursive: true });
-    fs.writeFileSync(path.join(targetDir, "work.json"), stableJson(item.work));
-    fs.writeFileSync(path.join(targetDir, "status.json"), stableJson(item.status));
-  }
-  return captured;
-}
-
-export function main(argv = process.argv.slice(2)) {
-  const args = parseArgs(argv);
-  const repository = required(args, "repository");
-  const channel = required(args, "channel");
-  const sourceSha = required(args, "source-sha").toLowerCase();
-  const tag = required(args, "tag");
-  const configPath = assertSourcePath(required(args, "config-path"));
-  const releasePassportPath = path.resolve(required(args, "release-passport-path"));
-  const outputDir = path.resolve(required(args, "output-dir"));
-  if (!/^[0-9a-f]{40}$/.test(sourceSha)) throw new Error("--source-sha must be an exact commit SHA");
-  if (tag !== `v${tag.replace(/^v/, "")}`) throw new Error("--tag must be an exact v-prefixed release tag");
-  const version = tag.slice(1);
-  const configSource = readConfigAtSource(sourceSha, configPath, process.cwd());
-  const sourceNode = configSource.normalized.graph.nodes.find(
-    (node) => node.id === configSource.normalized.sourceNode,
-  );
-  const packageFact = resolvePackageFact(sourceNode.package, version);
-  const tagTargetSha = resolveTagTarget(repository, tag);
-  const releasePassport = verifyPublicReleasePassport({
-    repository,
-    tag,
-    localPath: releasePassportPath,
-  });
-  const upstreamRelease = {
-    repository,
-    channel,
-    tag,
-    sourceSha,
-    tagTargetSha,
-    package: packageFact,
-    releasePassport,
-  };
-  const expectedBaseShas = resolveBaseShas(configSource.normalized);
-  const captured = capturePackageReleasePropagation({
-    config: configSource.parsed,
-    configBytes: configSource.bytes,
-    upstreamRelease,
-    expectedBaseShas,
-    outputDir,
-  });
-  const artifactName = `package-propagation-work-${version}-${sourceSha}`;
-  const workRoots = captured.works.map((item) => item.work.contentRoot);
-  writeOutput("configured", "true");
-  writeOutput("artifact-name", artifactName);
-  writeOutput("work-roots-json", JSON.stringify(workRoots));
-  process.stdout.write(stableJson({
-    schemaVersion: 1,
-    contract: "kungfu-buildchain-package-release-propagation-capture-result",
-    artifactName,
-    release: {
-      repository,
-      channel,
-      tag,
-      sourceSha,
-      tagTargetSha,
-      package: packageFact,
-      releasePassport,
-    },
-    workCount: captured.works.length,
-    works: captured.works.map((item) => ({
-      target: item.target,
-      repository: item.repository,
-      propagationKey: item.propagationKey,
-      workId: item.work.workId,
-      workRoot: item.work.contentRoot,
-      nextAction: item.status.nextAction,
-    })),
-  }));
-}
-
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
-if (isMain) {
-  try {
-    main();
-  } catch (error) {
-    console.error(error.message);
-    process.exitCode = 1;
-  }
-}