@moda-ai/cli 1.22.1 → 1.23.0

package/dist/harness-github-actions-7t3cncnt.js

@@ -0,0 +1,95 @@
+import {
+  buildSourceSnapshot
+} from "./cli-y55bgg14.js";
+import"./cli-mnqa4rp6.js";
+
+// src/harness-github-actions.ts
+var DEFAULT_MODA_GITHUB_URL = "https://moda-github.modas.workers.dev";
+var DEFAULT_GHA_AUDIENCE = "https://moda.dev/github-actions";
+
+class GithubActionsAnalyzeError extends Error {
+}
+async function requestOidcToken(env, audience, fetchImpl) {
+  const requestUrl = env.ACTIONS_ID_TOKEN_REQUEST_URL;
+  const requestToken = env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+  if (!requestUrl || !requestToken) {
+    throw new GithubActionsAnalyzeError("GitHub Actions OIDC is unavailable. Ensure the workflow sets `permissions: id-token: write`.");
+  }
+  const url = `${requestUrl}${requestUrl.includes("?") ? "&" : "?"}audience=${encodeURIComponent(audience)}`;
+  const response = await fetchImpl(url, { headers: { Authorization: `Bearer ${requestToken}` } });
+  if (!response.ok) {
+    throw new GithubActionsAnalyzeError(`Failed to obtain GitHub OIDC token (${response.status}).`);
+  }
+  const body = await response.json();
+  if (!body.value)
+    throw new GithubActionsAnalyzeError("GitHub OIDC token response was empty.");
+  return body.value;
+}
+async function runGithubActionsAnalyze(rootDir, deps = {}) {
+  const env = deps.env ?? process.env;
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  const buildSnapshot = deps.buildSnapshot ?? buildSourceSnapshot;
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const base = (env.MODA_GITHUB_URL || DEFAULT_MODA_GITHUB_URL).replace(/\/+$/, "");
+  const audience = env.MODA_GHA_AUDIENCE || DEFAULT_GHA_AUDIENCE;
+  const oidcToken = await requestOidcToken(env, audience, fetchImpl);
+  const exchangeRes = await fetchImpl(`${base}/gha/exchange`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ oidcToken })
+  });
+  if (!exchangeRes.ok) {
+    throw new GithubActionsAnalyzeError(`Moda OIDC exchange failed (${exchangeRes.status}).`);
+  }
+  const exchange = await exchangeRes.json();
+  const authHeader = { Authorization: `Bearer ${exchange.token}`, "Content-Type": "application/json" };
+  const snapshot = buildSnapshot(rootDir);
+  const analyzeRes = await fetchImpl(`${base}/gha/analyze`, {
+    method: "POST",
+    headers: authHeader,
+    body: JSON.stringify({ snapshot })
+  });
+  if (!analyzeRes.ok) {
+    throw new GithubActionsAnalyzeError(`Hosted analysis submission failed (${analyzeRes.status}).`);
+  }
+  const { analysisRunId } = await analyzeRes.json();
+  const maxAttempts = deps.maxPollAttempts ?? 60;
+  const intervalMs = deps.pollIntervalMs ?? 15000;
+  let status = "running";
+  let report;
+  let validation;
+  for (let attempt = 0;attempt < maxAttempts; attempt += 1) {
+    const pollRes = await fetchImpl(`${base}/gha/analyze/${encodeURIComponent(analysisRunId)}`, { headers: { Authorization: authHeader.Authorization } });
+    if (!pollRes.ok)
+      throw new GithubActionsAnalyzeError(`Hosted analysis poll failed (${pollRes.status}).`);
+    const polled = await pollRes.json();
+    status = polled.status;
+    report = polled.report;
+    validation = polled.validation;
+    if (status === "completed" || status === "failed")
+      break;
+    await sleep(intervalMs);
+  }
+  const validationPassed = Boolean(report?.graph) && (validation?.valid === true || validation?.status === "pass");
+  if (status === "completed" && report && deps.writeReport) {
+    await deps.writeReport(report);
+  }
+  let synced = false;
+  if (status === "completed" && validationPassed && exchange.capabilities.includes("sync") && report) {
+    const syncRes = await fetchImpl(`${base}/gha/sync`, {
+      method: "POST",
+      headers: authHeader,
+      body: JSON.stringify({ analysisRunId })
+    });
+    if (!syncRes.ok)
+      throw new GithubActionsAnalyzeError(`Harness sync failed (${syncRes.status}).`);
+    synced = true;
+  }
+  return { analysisRunId, status, synced, capabilities: exchange.capabilities, validationPassed };
+}
+export {
+  runGithubActionsAnalyze,
+  GithubActionsAnalyzeError,
+  DEFAULT_MODA_GITHUB_URL,
+  DEFAULT_GHA_AUDIENCE
+};