@norskvideo/ctl-dev-kit 0.1.13 → 0.1.15

package/conventions/upgrade-latest.yml

@@ -1,12 +1,14 @@
 # Keep the product fresh against the Norsk "nightly" channel (RFC 0001 —
-# product version freshness). The media + studio engine versions are pinned in
-# two coupled places that MUST move together: the npm `overrides` in the root
-# package.json (build-time libraries) and manifest.seed.json (the launched
-# container image tags). Both use the identical version string, so a bump is a
-# global string-replace of old->new across every tracked file — which also
-# updates the version-pin guard test in lockstep, no drift. Also rebumps the
-# dev flake's pinned norsk-ctl daemon to the `latest` channel (dev-only; CI
-# downloads ctl directly, so a stale pin never affects CI or customers).
+# product version freshness). Version discovery anchors on manifest.seed.json
+# (the machine-writable source of truth for the launched {media, studio} image
+# pair — every product repo has one). Any npm pins on the same version string
+# (media build libraries, the @norskvideo/norsk-studio* family in whichever
+# tracked package.json actually depends on them) move in lockstep via a global
+# string-replace of old->new across every tracked file — which also updates the
+# version-pin guard test, no drift. A repo with no studio npm deps needs no
+# package.json `overrides` block at all. Also rebumps the dev flake's pinned
+# norsk-ctl daemon to the `latest` channel (dev-only; CI downloads ctl
+# directly, so a stale pin never affects CI or customers).
 #
 # Commits the bump straight to main (nightly cron + on demand). Note: a
 # GITHUB_TOKEN push does not retrigger build-image/integration (Actions'
@@ -75,10 +77,21 @@ jobs:
           # THE SAME version line (so it's pullable AND matches the libs'
           # major.minor.patch). Rewrite the image ref FIRST, then the bare library
           # version — so even when the two happen to coincide, the image ref is
-          # already moved and the bare-version rewrite only touches the npm overrides
+          # already moved and the bare-version rewrite only touches the npm pins
           # (no dependence on which files hold each — some products have no
           # version-pin test).
-          old_studio_lib="$(jq -r '.overrides["@norskvideo/norsk-studio"]' package.json)"
+          #
+          # The old npm pin is discovered from the repo's REAL studio deps: any
+          # exact nightly on a @norskvideo/norsk-studio* package in a tracked
+          # package.json (deps, devDeps, or overrides — wherever it lives). A
+          # repo with none skips the lib rewrite; nothing forces phantom
+          # `overrides` entries just to give this script an anchor. Distinct
+          # pins disagreeing across files abort rather than half-rewrite.
+          old_studio_lib="$(git grep -hoE '"@norskvideo/norsk-studio[^"]*"[[:space:]]*:[[:space:]]*"[0-9]+\.[0-9]+\.[0-9]+-[0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9a-f]+"' -- '*package.json' \
+            | sed -E 's/.*"([^"]+)"$/\1/' | sort -u || true)"
+          if [ "$(printf '%s' "$old_studio_lib" | grep -c .)" -gt 1 ]; then
+            echo "studio npm pins disagree across package.json files:"; echo "$old_studio_lib"; exit 1
+          fi
           new_studio_lib="$(curl -fsSL "$reg/@norskvideo%2Fnorsk-studio" | jq -r '."dist-tags".nightly')"
           [ -n "$new_studio_lib" ] && [ "$new_studio_lib" != "null" ] || { echo "could not resolve norsk-studio npm nightly"; exit 1; }
           studio_line="${new_studio_lib%%-*}"   # e.g. 1.28.0 — keep the image on this line
@@ -87,14 +100,14 @@ jobs:
             | jq -r '.results[].name' \
             | grep -E "^${studio_line}-[0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9a-f]+$" | head -1 || true)"
           [ -n "$new_studio_img" ] || { echo "no published norsk-studio image on the $studio_line line — npm/docker version lines have diverged"; exit 1; }
-          echo "studio lib:   $old_studio_lib -> $new_studio_lib"
+          echo "studio lib:   ${old_studio_lib:-<no npm pins>} -> $new_studio_lib"
           echo "studio image: $old_studio_img -> $new_studio_img"
           if [ "$old_studio_img" != "$new_studio_img" ]; then
             git grep -lF "norskvideo/norsk-studio:$old_studio_img" -- . ':!bun.lock' \
               | xargs -r sed -i "s|norskvideo/norsk-studio:$old_studio_img|norskvideo/norsk-studio:$new_studio_img|g"
             changed=1
           fi
-          if [ "$old_studio_lib" != "$new_studio_lib" ]; then
+          if [ -n "$old_studio_lib" ] && [ "$old_studio_lib" != "$new_studio_lib" ]; then
             git grep -lF "$old_studio_lib" -- . ':!bun.lock' | xargs -r sed -i "s|$old_studio_lib|$new_studio_lib|g"
             changed=1
           fi
@@ -103,7 +116,7 @@ jobs:
           # library advanced (npm nightly moved with no new image on the line yet).
           if [ "$old_studio_img" != "$new_studio_img" ]; then
             parts+=("studio \`$new_studio_img\`")
-          elif [ "$old_studio_lib" != "$new_studio_lib" ]; then
+          elif [ -n "$old_studio_lib" ] && [ "$old_studio_lib" != "$new_studio_lib" ]; then
             parts+=("studio-lib \`$new_studio_lib\`")
           fi
 

package/create-product/assets/ci-status-dispatch.yml

@@ -0,0 +1,70 @@
+# Report this pipeline's result to id3as/ci-workflows for the aggregated product
+# CI dashboard (one live Discord message showing the whole product x pipeline
+# grid). Replaces the old per-run pony post: the dashboard renders the pony now,
+# from the payload this action dispatches.
+#
+# GITHUB_TOKEN can't repository_dispatch another repo, so the caller passes a
+# CI_DISPATCH_TOKEN (a fine-grained PAT scoped to id3as/ci-workflows, Contents:
+# write — what the dispatch API requires). If it's absent the step no-ops with a
+# warning rather than failing the build, so a repo can adopt this before the
+# token is provisioned.
+name: CI status dispatch
+description: Dispatch this pipeline's result to the id3as/ci-workflows product dashboard.
+
+inputs:
+  token:
+    description: "PAT with Contents:write on id3as/ci-workflows. Pass secrets.CI_DISPATCH_TOKEN."
+    required: true
+  product:
+    description: "Product key: commentary | playout | probe | studio | funke | reuters."
+    required: true
+  pipeline:
+    description: "Pipeline key: build-image | integration | drift | nightly."
+    required: true
+  status:
+    description: "success or failure."
+    required: true
+  detail:
+    description: "Optional extra line shown under the cell (e.g. a nightly bump summary)."
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+    - name: Dispatch ci-status to id3as/ci-workflows
+      shell: bash
+      env:
+        TOKEN: ${{ inputs.token }}
+        PRODUCT: ${{ inputs.product }}
+        PIPELINE: ${{ inputs.pipeline }}
+        STATUS: ${{ inputs.status }}
+        DETAIL: ${{ inputs.detail }}
+        SHA: ${{ github.sha }}
+        RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+      run: |
+        set -euo pipefail
+        if [ -z "$TOKEN" ]; then
+          echo "::warning::CI_DISPATCH_TOKEN not set — skipping product-dashboard dispatch"
+          exit 0
+        fi
+        ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+        # jq assembles the payload so a bump summary with quotes/newlines can't
+        # break the JSON; detail is included only when non-empty.
+        payload="$(jq -cn \
+          --arg product "$PRODUCT" --arg pipeline "$PIPELINE" --arg conclusion "$STATUS" \
+          --arg sha "$SHA" --arg runUrl "$RUN_URL" --arg ts "$ts" --arg detail "$DETAIL" \
+          '{event_type: "ci-status", client_payload: (
+             {product: $product, pipeline: $pipeline, conclusion: $conclusion, sha: $sha, runUrl: $runUrl, ts: $ts}
+             + (if $detail == "" then {} else {detail: $detail} end)
+           )}')"
+        code="$(curl -sS -o /tmp/dispatch-resp -w '%{http_code}' -X POST \
+          -H "authorization: Bearer $TOKEN" \
+          -H "accept: application/vnd.github+json" \
+          -H "x-github-api-version: 2022-11-28" \
+          "https://api.github.com/repos/id3as/ci-workflows/dispatches" \
+          -d "$payload")"
+        echo "dashboard dispatch: HTTP $code ($PRODUCT/$PIPELINE=$STATUS)"
+        if [ "$code" != "204" ]; then
+          echo "::error::dashboard dispatch failed (HTTP $code)"; cat /tmp/dispatch-resp || true; exit 1
+        fi