@kungfu-tech/buildchain 4.1.3-alpha.0 → 4.1.3-alpha.2

package/templates/minimal-consumer/binary/src/build.mjs

@@ -0,0 +1,5 @@
+import fs from "node:fs";
+fs.mkdirSync("dist", { recursive: true });
+import { execFileSync } from "node:child_process";
+execFileSync("cc", ["src/hello.c", "-o", "dist/hello"], { stdio: "inherit" });
+execFileSync("tar", ["-czf", "dist/hello.tar.gz", "-C", "dist", "hello"], { stdio: "inherit" });

package/templates/minimal-consumer/binary/src/hello.c

@@ -0,0 +1,2 @@
+#include <stdio.h>
+int main(void) { puts("hello"); return 0; }

package/templates/minimal-consumer/binary/src/verify.mjs

@@ -0,0 +1,3 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+assert.ok(fs.statSync("dist/hello.tar.gz").size > 0);

package/templates/minimal-consumer/npm/.buildchain/buildchain.toml

@@ -0,0 +1,46 @@
+schema = 2
+
+[[products]]
+id = "main"
+type = "npm"
+platforms = ["linux-x64"]
+build = ["node src/build.mjs"]
+verify = ["node src/verify.mjs"]
+
+[[products.artifacts]]
+id = "main"
+path = "dist/package"
+kind = "npm-package"
+
+[[products.targets]]
+provider = "npm"
+artifacts = ["main"]
+access = "public"
+
+[version]
+strategy = "semver"
+
+[[version.files]]
+path = "package.json"
+format = "json"
+key = "version"
+
+[[channels]]
+from = "feature/*"
+to = "dev/v1/v1.0"
+operation = "develop"
+
+[[channels]]
+from = "dev/v1/v1.0"
+to = "alpha/v1/v1.0"
+operation = "alpha"
+
+[[channels]]
+from = "alpha/v1/v1.0"
+to = "release/v1/v1.0"
+operation = "stable"
+
+[review]
+minimum_approvals = 1
+code_owners = true
+merge_queue = true

package/templates/minimal-consumer/npm/.github/workflows/buildchain-recover.yml

@@ -0,0 +1,30 @@
+name: Buildchain recovery
+on:
+  workflow_dispatch:
+    inputs:
+      attempt:
+        description: Exact Buildchain attempt to recover
+        required: true
+        type: string
+      runtime-ref:
+        description: Optional repaired runtime
+        required: false
+        type: string
+permissions:
+  contents: read
+jobs:
+  buildchain:
+    uses: kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4
+    with:
+      attempt: ${{ inputs.attempt }}
+      runtime-ref: ${{ inputs.runtime-ref }}
+    secrets: inherit
+    permissions:
+      actions: write
+      attestations: write
+      checks: write
+      contents: write
+      discussions: write
+      id-token: write
+      pull-requests: write
+      statuses: write

package/templates/minimal-consumer/npm/.github/workflows/buildchain.yml

@@ -0,0 +1,28 @@
+name: Buildchain pipeline
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review, converted_to_draft, closed, labeled, unlabeled, edited, enqueued, dequeued]
+  pull_request_review:
+    types: [submitted, dismissed]
+  pull_request_target:
+    types: [closed]
+  merge_group:
+    types: [checks_requested]
+  push:
+  repository_dispatch:
+    types: [buildchain-attempt-wake]
+permissions:
+  contents: read
+jobs:
+  buildchain:
+    uses: kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4
+    secrets: inherit
+    permissions:
+      actions: write
+      attestations: write
+      checks: write
+      contents: write
+      discussions: write
+      id-token: write
+      pull-requests: write
+      statuses: write

package/templates/minimal-consumer/npm/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "minimal-npm",
+  "private": true,
+  "version": "1.0.0-alpha.1",
+  "type": "module"
+}

package/templates/minimal-consumer/npm/src/build.mjs

@@ -0,0 +1,5 @@
+import fs from "node:fs";
+fs.mkdirSync("dist", { recursive: true });
+fs.mkdirSync("dist/package", { recursive: true });
+fs.writeFileSync("dist/package/index.js", 'export const hello = "hello";\n');
+fs.writeFileSync("dist/package/package.json", JSON.stringify({ name: "@example/minimal", version: JSON.parse(fs.readFileSync("package.json")).version, type: "module", exports: "./index.js" }));

package/templates/minimal-consumer/npm/src/verify.mjs

@@ -0,0 +1,3 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+assert.ok(fs.statSync("dist/package").isDirectory());

package/templates/minimal-consumer/paper/.buildchain/buildchain.toml

@@ -0,0 +1,45 @@
+schema = 2
+
+[[products]]
+id = "main"
+type = "paper"
+platforms = ["linux-x64"]
+build = ["node src/build.mjs"]
+verify = ["node src/verify.mjs"]
+
+[[products.artifacts]]
+id = "main"
+path = "dist/paper.pdf"
+kind = "pdf"
+
+[[products.targets]]
+provider = "github-release"
+artifacts = ["main"]
+
+[version]
+strategy = "semver"
+
+[[version.files]]
+path = "package.json"
+format = "json"
+key = "version"
+
+[[channels]]
+from = "feature/*"
+to = "dev/v1/v1.0"
+operation = "develop"
+
+[[channels]]
+from = "dev/v1/v1.0"
+to = "alpha/v1/v1.0"
+operation = "alpha"
+
+[[channels]]
+from = "alpha/v1/v1.0"
+to = "release/v1/v1.0"
+operation = "stable"
+
+[review]
+minimum_approvals = 1
+code_owners = true
+merge_queue = true

package/templates/minimal-consumer/paper/.github/workflows/buildchain-recover.yml

@@ -0,0 +1,30 @@
+name: Buildchain recovery
+on:
+  workflow_dispatch:
+    inputs:
+      attempt:
+        description: Exact Buildchain attempt to recover
+        required: true
+        type: string
+      runtime-ref:
+        description: Optional repaired runtime
+        required: false
+        type: string
+permissions:
+  contents: read
+jobs:
+  buildchain:
+    uses: kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4
+    with:
+      attempt: ${{ inputs.attempt }}
+      runtime-ref: ${{ inputs.runtime-ref }}
+    secrets: inherit
+    permissions:
+      actions: write
+      attestations: write
+      checks: write
+      contents: write
+      discussions: write
+      id-token: write
+      pull-requests: write
+      statuses: write

package/templates/minimal-consumer/paper/.github/workflows/buildchain.yml

@@ -0,0 +1,28 @@
+name: Buildchain pipeline
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review, converted_to_draft, closed, labeled, unlabeled, edited, enqueued, dequeued]
+  pull_request_review:
+    types: [submitted, dismissed]
+  pull_request_target:
+    types: [closed]
+  merge_group:
+    types: [checks_requested]
+  push:
+  repository_dispatch:
+    types: [buildchain-attempt-wake]
+permissions:
+  contents: read
+jobs:
+  buildchain:
+    uses: kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4
+    secrets: inherit
+    permissions:
+      actions: write
+      attestations: write
+      checks: write
+      contents: write
+      discussions: write
+      id-token: write
+      pull-requests: write
+      statuses: write

package/templates/minimal-consumer/paper/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "minimal-paper",
+  "private": true,
+  "version": "1.0.0-alpha.1",
+  "type": "module"
+}

package/templates/minimal-consumer/paper/src/build.mjs

@@ -0,0 +1,12 @@
+import fs from "node:fs";
+fs.mkdirSync("dist", { recursive: true });
+const stream = "BT /F1 24 Tf 50 700 Td (Minimal Paper) Tj ET";
+const objects = ["<< /Type /Catalog /Pages 2 0 R >>", "<< /Type /Pages /Kids [3 0 R] /Count 1 >>", "<< /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] /Resources << /Font << /F1 4 0 R >> >> /Contents 5 0 R >>", "<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>", `<< /Length ${stream.length} >>\nstream\n${stream}\nendstream`];
+let pdf = "%PDF-1.4\n";
+const offsets = [0];
+for (const [index, object] of objects.entries()) { offsets.push(Buffer.byteLength(pdf)); pdf += `${index + 1} 0 obj\n${object}\nendobj\n`; }
+const xref = Buffer.byteLength(pdf);
+pdf += `xref\n0 ${offsets.length}\n0000000000 65535 f \n`;
+for (const offset of offsets.slice(1)) pdf += `${String(offset).padStart(10, "0")} 00000 n \n`;
+pdf += `trailer\n<< /Size ${offsets.length} /Root 1 0 R >>\nstartxref\n${xref}\n%%EOF\n`;
+fs.writeFileSync("dist/paper.pdf", pdf);

package/templates/minimal-consumer/paper/src/verify.mjs

@@ -0,0 +1,3 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+assert.ok(fs.statSync("dist/paper.pdf").size > 0);