@multipliers-dev/renovate-workflow 0.3.0 → 0.3.1

package/scripts/lib/renovate-policy-facts.ts

@@ -1,189 +0,0 @@
-import { readFileSync } from "node:fs";
-
-import yaml from "yaml";
-
-import { loadRenovatePolicy, type RenovatePolicy } from "./renovate-guardrails.js";
-
-export type PackageCategory = "high_touch" | "low_risk_tooling" | "runtime" | "unlisted";
-
-export type SensitivePathRule = {
-  patterns: string[];
-  risk_class: string;
-};
-
-export type ConsumerRepoFacts = {
-  workspace_roots?: string[];
-  sensitive_paths?: string[];
-  sensitive_path_rules?: SensitivePathRule[];
-  analytics_paths?: string[];
-  auth_paths?: string[];
-  renovate_branch_prefix?: string;
-};
-
-export type ConsumerPackageFacts = {
-  high_touch?: string[];
-  low_risk_tooling?: string[];
-};
-
-export type LockfileThresholdFacts = {
-  line_delta_limit_default: number;
-  line_delta_limit_lockfile_maintenance: number;
-  pr_file_count_single_package_max: number;
-};
-
-export type PrCiCheckFacts = {
-  workflow?: string;
-  job?: string;
-};
-
-export type ConsumerPolicyFacts = RenovatePolicy & {
-  packages?: ConsumerPackageFacts;
-  repo?: ConsumerRepoFacts;
-};
-
-export type ClassifyPackageInput = {
-  name: string;
-  isDevDependency: boolean;
-};
-
-function normalizePath(value: string): string {
-  return value.replace(/\\/g, "/");
-}
-
-export function packageMatchesPattern(name: string, pattern: string): boolean {
-  const normalizedPattern = pattern.trim();
-  if (normalizedPattern.endsWith("/*")) {
-    const prefix = normalizedPattern.slice(0, -1);
-    return name.startsWith(prefix);
-  }
-  if (normalizedPattern.includes("*")) {
-    const escaped = normalizedPattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-    return new RegExp(`^${escaped}$`).test(name);
-  }
-  return name === normalizedPattern;
-}
-
-export function packageMatchesAnyPattern(name: string, patterns: string[] | undefined): boolean {
-  if (!patterns || patterns.length === 0) {
-    return false;
-  }
-  return patterns.some((pattern) => packageMatchesPattern(name, pattern));
-}
-
-export function loadConsumerPolicyFacts(path: string): ConsumerPolicyFacts {
-  loadRenovatePolicy(path);
-  const raw = readFileSync(path, "utf8");
-  return yaml.parse(raw) as ConsumerPolicyFacts;
-}
-
-export function classifyPackage(
-  input: ClassifyPackageInput,
-  policy: ConsumerPolicyFacts
-): PackageCategory {
-  const { name, isDevDependency } = input;
-  const packages = policy.packages ?? {};
-
-  if (packageMatchesAnyPattern(name, packages.high_touch)) {
-    return "high_touch";
-  }
-
-  if (packageMatchesAnyPattern(name, packages.low_risk_tooling)) {
-    return "low_risk_tooling";
-  }
-
-  if (!isDevDependency) {
-    return "runtime";
-  }
-
-  return "unlisted";
-}
-
-export function riskClassForPackageCategory(category: PackageCategory): string {
-  switch (category) {
-    case "high_touch":
-      return "high_touch_tooling";
-    case "low_risk_tooling":
-      return "low_risk_tooling_patch";
-    case "runtime":
-      return "runtime_dependency";
-    case "unlisted":
-      return "unlisted_package";
-  }
-}
-
-function pathMatchesPattern(file: string, pattern: string): boolean {
-  const normalizedFile = normalizePath(file);
-  const normalizedPattern = normalizePath(pattern.trim());
-
-  if (normalizedPattern.endsWith("/**")) {
-    const prefix = normalizedPattern.slice(0, -3);
-    return normalizedFile === prefix || normalizedFile.startsWith(`${prefix}/`);
-  }
-
-  if (normalizedPattern.includes("*")) {
-    const escaped = normalizedPattern
-      .replace(/[.+?^${}()|[\]\\]/g, "\\$&")
-      .replace(/\*\*/g, ".*")
-      .replace(/\*/g, "[^/]*");
-    return new RegExp(`^${escaped}$`).test(normalizedFile);
-  }
-
-  return normalizedFile === normalizedPattern;
-}
-
-export function resolveSensitivePathRiskClass(
-  file: string,
-  policy: ConsumerPolicyFacts
-): string | null {
-  const repo = policy.repo;
-  if (!repo) {
-    return null;
-  }
-
-  for (const rule of repo.sensitive_path_rules ?? []) {
-    if (rule.patterns.some((pattern) => pathMatchesPattern(file, pattern))) {
-      return rule.risk_class;
-    }
-  }
-
-  if (repo.analytics_paths?.some((pattern) => pathMatchesPattern(file, pattern))) {
-    return "analytics_or_telemetry";
-  }
-
-  if (repo.auth_paths?.some((pattern) => pathMatchesPattern(file, pattern))) {
-    return "auth_or_security";
-  }
-
-  if (repo.sensitive_paths?.some((pattern) => pathMatchesPattern(file, pattern))) {
-    return "sensitive_path_change";
-  }
-
-  return null;
-}
-
-export function getLockfileThresholds(policy: ConsumerPolicyFacts): LockfileThresholdFacts {
-  const thresholds = (
-    policy.checks?.lockfile_within_threshold as { thresholds?: Partial<LockfileThresholdFacts> }
-  )?.thresholds;
-
-  return {
-    line_delta_limit_default: thresholds?.line_delta_limit_default ?? 800,
-    line_delta_limit_lockfile_maintenance: thresholds?.line_delta_limit_lockfile_maintenance ?? 2000,
-    pr_file_count_single_package_max: thresholds?.pr_file_count_single_package_max ?? 30,
-  };
-}
-
-export function getPrCiCheck(policy: ConsumerPolicyFacts): PrCiCheckFacts {
-  const check = policy.checks?.pr_ci_green as { workflow?: string; job?: string } | undefined;
-  return {
-    workflow: check?.workflow,
-    job: check?.job,
-  };
-}
-
-export function lineDeltaLimit(lockfileMaintenance: boolean, policy: ConsumerPolicyFacts): number {
-  const thresholds = getLockfileThresholds(policy);
-  return lockfileMaintenance
-    ? thresholds.line_delta_limit_lockfile_maintenance
-    : thresholds.line_delta_limit_default;
-}

package/scripts/renovate-freshness-poll.ts

@@ -1,210 +0,0 @@
-#!/usr/bin/env node
-import { execFile } from "node:child_process";
-import { realpathSync } from "node:fs";
-import { promisify } from "node:util";
-import { fileURLToPath } from "node:url";
-
-import {
-  normalizeGhCheckRunsForExpectedHead,
-  normalizeGhCommitStatusesForExpectedHead,
-  runRenovateBabysit,
-  type CiObservation,
-  type GhCheckRunsResponse,
-  type GhCommitStatusResponse,
-  type MergeObservation,
-  type RenovateBabysitConfig,
-} from "./lib/renovate-freshness-poll.js";
-
-const execFileAsync = promisify(execFile);
-
-type CliOptions = {
-  repo: string;
-  pr: string;
-  expectedHeadSha: string;
-  config: RenovateBabysitConfig;
-};
-
-type GhPrViewResponse = {
-  headRefOid?: string;
-  baseRefOid?: string;
-  mergeStateStatus?: string;
-};
-
-function printUsage(): void {
-  console.error(`Usage: npm exec -- tsx scripts/renovate-freshness-poll.ts --repo <owner/repo> --pr <number> --expected-head <sha>
-
-Runs the Renovate post-update babysit helper and prints one JSON result.
-
-Required:
-  --repo <owner/repo>
-  --pr <number>
-  --expected-head <sha>
-
-Debug-only overrides (do not use from renovate-classifier skill prose):
-  --debug-poll-interval-ms <ms>
-  --debug-ci-budget-ms <ms>
-  --debug-unknown-max <count>
-`);
-}
-
-function readFlagValue(args: string[], index: number, flag: string): string {
-  const value = args[index + 1];
-  if (value === undefined || value.startsWith("--")) {
-    throw new Error(`${flag} requires a value`);
-  }
-  return value;
-}
-
-function parsePositiveInteger(value: string, flag: string): number {
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed <= 0) {
-    throw new Error(`${flag} must be a positive integer`);
-  }
-  return parsed;
-}
-
-export function parseRenovateFreshnessPollArgs(args: string[]): CliOptions {
-  const options: Partial<CliOptions> & { config: RenovateBabysitConfig } = { config: {} };
-
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-    switch (arg) {
-      case "--repo":
-        options.repo = readFlagValue(args, index, arg);
-        index += 1;
-        break;
-      case "--pr":
-        options.pr = readFlagValue(args, index, arg);
-        index += 1;
-        break;
-      case "--expected-head":
-        options.expectedHeadSha = readFlagValue(args, index, arg);
-        index += 1;
-        break;
-      case "--debug-poll-interval-ms":
-        options.config.pollIntervalMs = parsePositiveInteger(readFlagValue(args, index, arg), arg);
-        index += 1;
-        break;
-      case "--debug-ci-budget-ms":
-        options.config.ciBudgetMs = parsePositiveInteger(readFlagValue(args, index, arg), arg);
-        index += 1;
-        break;
-      case "--debug-unknown-max":
-        options.config.unknownMax = parsePositiveInteger(readFlagValue(args, index, arg), arg);
-        index += 1;
-        break;
-      case "--help":
-      case "-h":
-        printUsage();
-        process.exit(0);
-      default:
-        throw new Error(`unknown argument: ${arg}`);
-    }
-  }
-
-  if (!options.repo || !/^[^/\s]+\/[^/\s]+$/.test(options.repo)) {
-    throw new Error("--repo must be in owner/repo form");
-  }
-  if (!options.pr || !/^\d+$/.test(options.pr)) {
-    throw new Error("--pr must be a PR number");
-  }
-  if (!options.expectedHeadSha || options.expectedHeadSha.trim() === "") {
-    throw new Error("--expected-head is required");
-  }
-
-  return {
-    repo: options.repo,
-    pr: options.pr,
-    expectedHeadSha: options.expectedHeadSha,
-    config: options.config,
-  };
-}
-
-async function ghJson<T>(args: string[]): Promise<T> {
-  const { stdout } = await execFileAsync("gh", args, { maxBuffer: 10 * 1024 * 1024 });
-  return JSON.parse(stdout) as T;
-}
-
-async function fetchMergeState(options: CliOptions): Promise<MergeObservation> {
-  const response = await ghJson<GhPrViewResponse>([
-    "pr",
-    "view",
-    options.pr,
-    "--repo",
-    options.repo,
-    "--json",
-    "headRefOid,baseRefOid,mergeStateStatus",
-  ]);
-
-  if (!response.mergeStateStatus) {
-    throw new Error("gh pr view did not return mergeStateStatus");
-  }
-
-  return {
-    mergeState: response.mergeStateStatus,
-    headSha: response.headRefOid ?? "",
-    baseSha: response.baseRefOid,
-  };
-}
-
-async function fetchCiState(options: CliOptions, expectedHeadSha: string): Promise<CiObservation> {
-  const checkRuns = await ghJson<GhCheckRunsResponse>([
-    "api",
-    `repos/${options.repo}/commits/${expectedHeadSha}/check-runs`,
-  ]);
-  const normalizedCheckRuns = normalizeGhCheckRunsForExpectedHead(checkRuns, expectedHeadSha);
-  if (normalizedCheckRuns.ciState !== "not_found") {
-    return normalizedCheckRuns;
-  }
-
-  const statuses = await ghJson<GhCommitStatusResponse>([
-    "api",
-    `repos/${options.repo}/commits/${expectedHeadSha}/status`,
-  ]);
-  return normalizeGhCommitStatusesForExpectedHead(statuses, expectedHeadSha);
-}
-
-export async function runRenovateFreshnessPollCli(args: string[]): Promise<void> {
-  let options: CliOptions;
-  try {
-    options = parseRenovateFreshnessPollArgs(args);
-  } catch (error) {
-    printUsage();
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exit(2);
-  }
-
-  const result = await runRenovateBabysit(
-    { expectedHeadSha: options.expectedHeadSha, config: options.config },
-    {
-      now: () => Date.now(),
-      sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
-      fetchMergeState: () => fetchMergeState(options),
-      fetchCiState: (expectedHeadSha) => fetchCiState(options, expectedHeadSha),
-    }
-  );
-
-  console.log(JSON.stringify(result, null, 2));
-}
-
-function isDirectRun(): boolean {
-  const entry = process.argv[1];
-  if (entry === undefined) {
-    return false;
-  }
-  const modulePath = fileURLToPath(import.meta.url);
-  try {
-    return realpathSync(modulePath) === realpathSync(entry);
-  } catch {
-    return modulePath === entry;
-  }
-}
-
-const isDirectRunEntry = isDirectRun();
-
-if (isDirectRunEntry) {
-  runRenovateFreshnessPollCli(process.argv.slice(2)).catch((error: unknown) => {
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exit(1);
-  });
-}