@mindexec/cli 0.2.478 → 0.2.480

package/scripts/publish-mindexec-desktop-updates.mjs

@@ -1,224 +1,224 @@
-import { createHash } from 'node:crypto';
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { basename, isAbsolute, join, resolve, sep } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { spawnSync } from 'node:child_process';
-import { createRequire } from 'node:module';
-
-const BUCKET = 'mindexec-desktop-updates';
-const PUBLIC_BASE_URL = 'https://mindexec.lovecrdm.workers.dev';
-const ALLOWED_CHANNELS = new Set(['stable', 'dev']);
-const PLATFORM_CONFIG = {
-  'windows-x64': { path: 'windows/x64', manifest: 'latest.yml' }
-};
-const packageRoot = resolve(import.meta.dirname, '..');
-const repositoryRoot = resolve(packageRoot, '..');
-const require = createRequire(import.meta.url);
-
-function resolveWranglerEntry() {
-  const explicit = String(process.env.MINDEXEC_WRANGLER_ENTRY || '').trim();
-  if (explicit) return resolve(explicit);
-  return require.resolve('wrangler', { paths: [resolve(repositoryRoot, 'r2-auth-proxy')] });
-}
-
-function unquote(value) {
-  const text = String(value || '').trim();
-  if ((text.startsWith('"') && text.endsWith('"')) || (text.startsWith("'") && text.endsWith("'"))) {
-    return text.slice(1, -1);
-  }
-  return text;
-}
-
-export function parseUpdateManifest(source) {
-  const version = String(source).match(/^version:\s*([^\r\n]+)$/m)?.[1]?.trim() || '';
-  const files = [];
-  const pattern = /^\s*-\s+url:\s*([^\r\n]+)\r?\n\s+sha512:\s*([^\s#]+)(?:\r?\n\s+size:\s*(\d+))?/gm;
-  for (const match of String(source).matchAll(pattern)) {
-    files.push({
-      name: unquote(match[1]),
-      sha512: unquote(match[2]),
-      size: Number(match[3] || 0)
-    });
-  }
-  if (!version || files.length === 0) throw new Error('desktop-update-manifest-invalid');
-  return { version: unquote(version), files };
-}
-
-function sha512Base64(filePath) {
-  return createHash('sha512').update(readFileSync(filePath)).digest('base64');
-}
-
-function contentType(fileName) {
-  if (/\.ya?ml$/i.test(fileName)) return 'text/yaml; charset=utf-8';
-  if (/\.json$/i.test(fileName)) return 'application/json; charset=utf-8';
-  return 'application/octet-stream';
-}
-
-function isReleaseArtifact(fileName, version, channel) {
-  const prefix = channel === 'dev'
-    ? `MindExec-${version}-dev-`
-    : `MindExec-Setup-${version}-`;
-  return fileName.startsWith(prefix) && /(?:\.exe|\.exe\.blockmap)$/i.test(fileName);
-}
-
-export function readReleasePlan({
-  platform,
-  directory,
-  packageVersion,
-  channel = 'dev',
-  allowUnsigned = false
-}) {
-  const target = PLATFORM_CONFIG[platform];
-  if (!target) throw new Error(`desktop-update-platform-invalid:${platform}`);
-  const normalizedChannel = String(channel || '').trim().toLowerCase();
-  if (!ALLOWED_CHANNELS.has(normalizedChannel)) throw new Error(`desktop-update-channel-invalid:${channel}`);
-  if (normalizedChannel === 'dev' && !allowUnsigned) throw new Error('desktop-update-dev-unsigned-ack-required');
-  if (normalizedChannel === 'stable' && allowUnsigned) throw new Error('desktop-update-stable-unsigned-forbidden');
-
-  const releaseDir = resolve(directory);
-  if (!existsSync(releaseDir) || !statSync(releaseDir).isDirectory()) {
-    throw new Error(`desktop-update-directory-missing:${releaseDir}`);
-  }
-  const manifestPath = join(releaseDir, target.manifest);
-  if (!existsSync(manifestPath)) throw new Error(`desktop-update-manifest-missing:${manifestPath}`);
-  const manifest = parseUpdateManifest(readFileSync(manifestPath, 'utf8'));
-  if (manifest.version !== packageVersion) {
-    throw new Error(`desktop-update-version-mismatch:package=${packageVersion}:manifest=${manifest.version}`);
-  }
-
-  for (const item of manifest.files) {
-    if (!item.name || basename(item.name) !== item.name) {
-      throw new Error(`desktop-update-artifact-name-invalid:${item.name}`);
-    }
-    const filePath = resolve(releaseDir, item.name);
-    if (!filePath.startsWith(`${releaseDir}${sep}`) || !existsSync(filePath)) {
-      throw new Error(`desktop-update-artifact-missing:${item.name}`);
-    }
-    if (item.size && statSync(filePath).size !== item.size) {
-      throw new Error(`desktop-update-artifact-size-mismatch:${item.name}`);
-    }
-    if (sha512Base64(filePath) !== item.sha512) {
-      throw new Error(`desktop-update-artifact-hash-mismatch:${item.name}`);
-    }
-  }
-
-  const artifacts = readdirSync(releaseDir)
-    .filter(fileName => isReleaseArtifact(fileName, packageVersion, normalizedChannel))
-    .sort()
-    .map(fileName => ({ fileName, filePath: join(releaseDir, fileName) }));
-  if (artifacts.length === 0) throw new Error('desktop-update-artifacts-missing');
-  for (const item of manifest.files) {
-    if (!artifacts.some(artifact => artifact.fileName === item.name)) {
-      throw new Error(`desktop-update-manifest-artifact-not-publishable:${item.name}`);
-    }
-  }
-
-  return {
-    platform,
-    channel: normalizedChannel,
-    version: packageVersion,
-    prefix: `${normalizedChannel}/${target.path}`,
-    manifest: { ...manifest, fileName: target.manifest, filePath: manifestPath },
-    artifacts
-  };
-}
-
-function readArgument(name) {
-  const index = process.argv.indexOf(name);
-  if (index >= 0) return process.argv[index + 1] || '';
-  return String(process.env[`npm_config_${name.slice(2).replaceAll('-', '_')}`] || '');
-}
-
-function hasFlag(name) {
-  if (process.argv.includes(name)) return true;
-  return String(process.env[`npm_config_${name.slice(2).replaceAll('-', '_')}`] || '').toLowerCase() === 'true';
-}
-
-export function createWranglerPutCommand({ key, filePath, immutable }) {
-  const args = [
-    resolveWranglerEntry(),
-    'r2', 'object', 'put', `${BUCKET}/${key}`,
-    `--file=${filePath}`,
-    `--content-type=${contentType(filePath)}`,
-    `--cache-control=${immutable ? 'public, max-age=31536000, immutable' : 'no-store, max-age=0'}`,
-    '--remote'
-  ];
-  return { executable: process.execPath, args };
-}
-
-function runWranglerPut(options) {
-  const { executable, args } = createWranglerPutCommand(options);
-  const result = spawnSync(executable, args, { cwd: repositoryRoot, stdio: 'inherit' });
-  if (result.status !== 0) {
-    throw new Error(`desktop-update-upload-failed:${options.key}:${result.error?.code || result.status || 'unknown'}`);
-  }
-}
-
-async function verifyPublished(plan) {
-  const manifestUrl = `${PUBLIC_BASE_URL}/${plan.prefix}/${plan.manifest.fileName}`;
-  const response = await fetch(manifestUrl, { cache: 'no-store' });
-  if (!response.ok) throw new Error(`desktop-update-public-verify-http-${response.status}`);
-  const published = parseUpdateManifest(await response.text());
-  if (published.version !== plan.version) throw new Error('desktop-update-public-version-mismatch');
-  if (JSON.stringify(published.files) !== JSON.stringify(plan.manifest.files)) {
-    throw new Error('desktop-update-public-manifest-mismatch');
-  }
-
-  for (const item of plan.manifest.files) {
-    const artifactResponse = await fetch(`${PUBLIC_BASE_URL}/${plan.prefix}/${encodeURIComponent(item.name)}`, {
-      method: 'HEAD',
-      cache: 'no-store'
-    });
-    if (!artifactResponse.ok) throw new Error(`desktop-update-public-artifact-http-${artifactResponse.status}:${item.name}`);
-    const expectedSize = item.size || statSync(resolve(plan.manifest.filePath, '..', item.name)).size;
-    if (Number(artifactResponse.headers.get('content-length') || 0) !== expectedSize) {
-      throw new Error(`desktop-update-public-artifact-size-mismatch:${item.name}`);
-    }
-  }
-}
-
-async function main() {
-  const positional = process.argv.slice(2).filter(argument =>
-    argument !== '--publish' && argument !== '--allow-unsigned' && !argument.startsWith('--'));
-  const platform = readArgument('--platform') || positional[0] || '';
-  const directory = readArgument('--dir') || positional[1] || '';
-  const channel = readArgument('--channel') || 'dev';
-  const allowUnsigned = hasFlag('--allow-unsigned');
-  if (!platform || !directory || isAbsolute(platform)) {
-    throw new Error(
-      'usage: --channel dev|stable --platform windows-x64 --dir <electron-builder-output> [--allow-unsigned] [--publish]'
-    );
-  }
-
-  const packageInfo = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'));
-  const plan = readReleasePlan({ platform, directory, packageVersion: packageInfo.version, channel, allowUnsigned });
-  const publish = hasFlag('--publish');
-  console.log(JSON.stringify({
-    platform: plan.platform,
-    channel: plan.channel,
-    version: plan.version,
-    prefix: plan.prefix,
-    manifest: plan.manifest.fileName,
-    artifacts: plan.artifacts.map(item => item.fileName),
-    publish
-  }, null, 2));
-  if (!publish) return;
-
-  for (const artifact of plan.artifacts) {
-    runWranglerPut({ key: `${plan.prefix}/${artifact.fileName}`, filePath: artifact.filePath, immutable: true });
-  }
-  runWranglerPut({
-    key: `${plan.prefix}/${plan.manifest.fileName}`,
-    filePath: plan.manifest.filePath,
-    immutable: false
-  });
-  await verifyPublished(plan);
-  console.log(`Published and verified ${plan.platform} ${plan.version} on the ${plan.channel} channel.`);
-}
-
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  main().catch(error => {
-    console.error(error?.stack || error);
-    process.exitCode = 1;
-  });
-}
+import { createHash } from 'node:crypto';
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { basename, isAbsolute, join, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { spawnSync } from 'node:child_process';
+import { createRequire } from 'node:module';
+
+const BUCKET = 'mindexec-desktop-updates';
+const PUBLIC_BASE_URL = 'https://mindexec.lovecrdm.workers.dev';
+const ALLOWED_CHANNELS = new Set(['stable', 'dev']);
+const PLATFORM_CONFIG = {
+  'windows-x64': { path: 'windows/x64', manifest: 'latest.yml' }
+};
+const packageRoot = resolve(import.meta.dirname, '..');
+const repositoryRoot = resolve(packageRoot, '..');
+const require = createRequire(import.meta.url);
+
+function resolveWranglerEntry() {
+  const explicit = String(process.env.MINDEXEC_WRANGLER_ENTRY || '').trim();
+  if (explicit) return resolve(explicit);
+  return require.resolve('wrangler', { paths: [resolve(repositoryRoot, 'r2-auth-proxy')] });
+}
+
+function unquote(value) {
+  const text = String(value || '').trim();
+  if ((text.startsWith('"') && text.endsWith('"')) || (text.startsWith("'") && text.endsWith("'"))) {
+    return text.slice(1, -1);
+  }
+  return text;
+}
+
+export function parseUpdateManifest(source) {
+  const version = String(source).match(/^version:\s*([^\r\n]+)$/m)?.[1]?.trim() || '';
+  const files = [];
+  const pattern = /^\s*-\s+url:\s*([^\r\n]+)\r?\n\s+sha512:\s*([^\s#]+)(?:\r?\n\s+size:\s*(\d+))?/gm;
+  for (const match of String(source).matchAll(pattern)) {
+    files.push({
+      name: unquote(match[1]),
+      sha512: unquote(match[2]),
+      size: Number(match[3] || 0)
+    });
+  }
+  if (!version || files.length === 0) throw new Error('desktop-update-manifest-invalid');
+  return { version: unquote(version), files };
+}
+
+function sha512Base64(filePath) {
+  return createHash('sha512').update(readFileSync(filePath)).digest('base64');
+}
+
+function contentType(fileName) {
+  if (/\.ya?ml$/i.test(fileName)) return 'text/yaml; charset=utf-8';
+  if (/\.json$/i.test(fileName)) return 'application/json; charset=utf-8';
+  return 'application/octet-stream';
+}
+
+function isReleaseArtifact(fileName, version, channel) {
+  const prefix = channel === 'dev'
+    ? `MindExec-${version}-dev-`
+    : `MindExec-Setup-${version}-`;
+  return fileName.startsWith(prefix) && /(?:\.exe|\.exe\.blockmap)$/i.test(fileName);
+}
+
+export function readReleasePlan({
+  platform,
+  directory,
+  packageVersion,
+  channel = 'dev',
+  allowUnsigned = false
+}) {
+  const target = PLATFORM_CONFIG[platform];
+  if (!target) throw new Error(`desktop-update-platform-invalid:${platform}`);
+  const normalizedChannel = String(channel || '').trim().toLowerCase();
+  if (!ALLOWED_CHANNELS.has(normalizedChannel)) throw new Error(`desktop-update-channel-invalid:${channel}`);
+  if (normalizedChannel === 'dev' && !allowUnsigned) throw new Error('desktop-update-dev-unsigned-ack-required');
+  if (normalizedChannel === 'stable' && allowUnsigned) throw new Error('desktop-update-stable-unsigned-forbidden');
+
+  const releaseDir = resolve(directory);
+  if (!existsSync(releaseDir) || !statSync(releaseDir).isDirectory()) {
+    throw new Error(`desktop-update-directory-missing:${releaseDir}`);
+  }
+  const manifestPath = join(releaseDir, target.manifest);
+  if (!existsSync(manifestPath)) throw new Error(`desktop-update-manifest-missing:${manifestPath}`);
+  const manifest = parseUpdateManifest(readFileSync(manifestPath, 'utf8'));
+  if (manifest.version !== packageVersion) {
+    throw new Error(`desktop-update-version-mismatch:package=${packageVersion}:manifest=${manifest.version}`);
+  }
+
+  for (const item of manifest.files) {
+    if (!item.name || basename(item.name) !== item.name) {
+      throw new Error(`desktop-update-artifact-name-invalid:${item.name}`);
+    }
+    const filePath = resolve(releaseDir, item.name);
+    if (!filePath.startsWith(`${releaseDir}${sep}`) || !existsSync(filePath)) {
+      throw new Error(`desktop-update-artifact-missing:${item.name}`);
+    }
+    if (item.size && statSync(filePath).size !== item.size) {
+      throw new Error(`desktop-update-artifact-size-mismatch:${item.name}`);
+    }
+    if (sha512Base64(filePath) !== item.sha512) {
+      throw new Error(`desktop-update-artifact-hash-mismatch:${item.name}`);
+    }
+  }
+
+  const artifacts = readdirSync(releaseDir)
+    .filter(fileName => isReleaseArtifact(fileName, packageVersion, normalizedChannel))
+    .sort()
+    .map(fileName => ({ fileName, filePath: join(releaseDir, fileName) }));
+  if (artifacts.length === 0) throw new Error('desktop-update-artifacts-missing');
+  for (const item of manifest.files) {
+    if (!artifacts.some(artifact => artifact.fileName === item.name)) {
+      throw new Error(`desktop-update-manifest-artifact-not-publishable:${item.name}`);
+    }
+  }
+
+  return {
+    platform,
+    channel: normalizedChannel,
+    version: packageVersion,
+    prefix: `${normalizedChannel}/${target.path}`,
+    manifest: { ...manifest, fileName: target.manifest, filePath: manifestPath },
+    artifacts
+  };
+}
+
+function readArgument(name) {
+  const index = process.argv.indexOf(name);
+  if (index >= 0) return process.argv[index + 1] || '';
+  return String(process.env[`npm_config_${name.slice(2).replaceAll('-', '_')}`] || '');
+}
+
+function hasFlag(name) {
+  if (process.argv.includes(name)) return true;
+  return String(process.env[`npm_config_${name.slice(2).replaceAll('-', '_')}`] || '').toLowerCase() === 'true';
+}
+
+export function createWranglerPutCommand({ key, filePath, immutable }) {
+  const args = [
+    resolveWranglerEntry(),
+    'r2', 'object', 'put', `${BUCKET}/${key}`,
+    `--file=${filePath}`,
+    `--content-type=${contentType(filePath)}`,
+    `--cache-control=${immutable ? 'public, max-age=31536000, immutable' : 'no-store, max-age=0'}`,
+    '--remote'
+  ];
+  return { executable: process.execPath, args };
+}
+
+function runWranglerPut(options) {
+  const { executable, args } = createWranglerPutCommand(options);
+  const result = spawnSync(executable, args, { cwd: repositoryRoot, stdio: 'inherit' });
+  if (result.status !== 0) {
+    throw new Error(`desktop-update-upload-failed:${options.key}:${result.error?.code || result.status || 'unknown'}`);
+  }
+}
+
+async function verifyPublished(plan) {
+  const manifestUrl = `${PUBLIC_BASE_URL}/${plan.prefix}/${plan.manifest.fileName}`;
+  const response = await fetch(manifestUrl, { cache: 'no-store' });
+  if (!response.ok) throw new Error(`desktop-update-public-verify-http-${response.status}`);
+  const published = parseUpdateManifest(await response.text());
+  if (published.version !== plan.version) throw new Error('desktop-update-public-version-mismatch');
+  if (JSON.stringify(published.files) !== JSON.stringify(plan.manifest.files)) {
+    throw new Error('desktop-update-public-manifest-mismatch');
+  }
+
+  for (const item of plan.manifest.files) {
+    const artifactResponse = await fetch(`${PUBLIC_BASE_URL}/${plan.prefix}/${encodeURIComponent(item.name)}`, {
+      method: 'HEAD',
+      cache: 'no-store'
+    });
+    if (!artifactResponse.ok) throw new Error(`desktop-update-public-artifact-http-${artifactResponse.status}:${item.name}`);
+    const expectedSize = item.size || statSync(resolve(plan.manifest.filePath, '..', item.name)).size;
+    if (Number(artifactResponse.headers.get('content-length') || 0) !== expectedSize) {
+      throw new Error(`desktop-update-public-artifact-size-mismatch:${item.name}`);
+    }
+  }
+}
+
+async function main() {
+  const positional = process.argv.slice(2).filter(argument =>
+    argument !== '--publish' && argument !== '--allow-unsigned' && !argument.startsWith('--'));
+  const platform = readArgument('--platform') || positional[0] || '';
+  const directory = readArgument('--dir') || positional[1] || '';
+  const channel = readArgument('--channel') || 'dev';
+  const allowUnsigned = hasFlag('--allow-unsigned');
+  if (!platform || !directory || isAbsolute(platform)) {
+    throw new Error(
+      'usage: --channel dev|stable --platform windows-x64 --dir <electron-builder-output> [--allow-unsigned] [--publish]'
+    );
+  }
+
+  const packageInfo = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'));
+  const plan = readReleasePlan({ platform, directory, packageVersion: packageInfo.version, channel, allowUnsigned });
+  const publish = hasFlag('--publish');
+  console.log(JSON.stringify({
+    platform: plan.platform,
+    channel: plan.channel,
+    version: plan.version,
+    prefix: plan.prefix,
+    manifest: plan.manifest.fileName,
+    artifacts: plan.artifacts.map(item => item.fileName),
+    publish
+  }, null, 2));
+  if (!publish) return;
+
+  for (const artifact of plan.artifacts) {
+    runWranglerPut({ key: `${plan.prefix}/${artifact.fileName}`, filePath: artifact.filePath, immutable: true });
+  }
+  runWranglerPut({
+    key: `${plan.prefix}/${plan.manifest.fileName}`,
+    filePath: plan.manifest.filePath,
+    immutable: false
+  });
+  await verifyPublished(plan);
+  console.log(`Published and verified ${plan.platform} ${plan.version} on the ${plan.channel} channel.`);
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  main().catch(error => {
+    console.error(error?.stack || error);
+    process.exitCode = 1;
+  });
+}