@norskvideo/ctl-dev-kit 0.1.61 → 0.1.63

package/conventions/checks.yml

@@ -78,6 +78,31 @@ jobs:
             bun run docs:check
           '
 
+      # Does this repo's licence template still describe this repo? A template
+      # naming the wrong product, or an imageRef the build never produces, mints
+      # a licence that entitles nothing -- and the first sign of that is a
+      # 60-second readiness timeout at launch, indistinguishable from a product
+      # that failed to start. Cheap, no secrets, every PR.
+      #
+      # The image name is CI's own rule: PUBLISH_IMAGE when set, else the build
+      # script's IMAGE_TAG default, tag stripped -- a licence matches the repo
+      # part alone, never the tag.
+      - name: Check the licence template matches this repo
+        run: |
+          set -euo pipefail
+          product="$(sed -nE 's/.*PRODUCT_NAME[[:space:]]*=[[:space:]]*"([^"]+)".*/\1/p' shared/src/version.ts | head -1)"
+          [ -n "$product" ] || { echo "::error::could not read PRODUCT_NAME from shared/src/version.ts"; exit 1; }
+          pub="$(sed -nE 's/^[[:space:]]*PUBLISH_IMAGE:[[:space:]]*"?([^" ]*)"?[[:space:]]*$/\1/p' .github/workflows/build-image.yml | head -1)"
+          def="$(sed -nE 's/.*IMAGE_TAG:-([^}]+)\}.*/\1/p' deployment/build-image.sh | head -1)"
+          ref="${pub:-$def}"
+          # A colon is a tag only after the last slash (a registry host may carry a port).
+          image="${ref%:*}"
+          case "${ref##*/}" in *:*) ;; *) image="$ref" ;; esac
+          [ -n "$image" ] || { echo "::error::could not determine the image this repo builds"; exit 1; }
+          nix develop .#build --command bun \
+            node_modules/@norskvideo/ctl-dev-kit/licence/check-template.ts \
+            licenseTemplate.json "$product" "$image"
+
   # Report this pipeline's result to the aggregated product CI dashboard
   # (id3as/ci-workflows) instead of posting its own pony — the dashboard renders
   # the pony/emoji from the dispatched result. !cancelled() so a real pass/fail

package/conventions/smoke.yml

@@ -72,6 +72,13 @@ jobs:
       # ports via the host-gateway alias and can join norsk-net for direct reach;
       # a bare-metal host runner (the GPU box) must stay on localhost + publish.
       # Detect rather than hardcode, so one byte-identical file serves both.
+      # NORSK_CTL_PRODUCT_REACH rides along because this step has already
+      # established the fact the daemon would otherwise sniff from its own
+      # cgroup: `product add --image` loopback-publishes the control plane and
+      # polls it for readiness, and on a DooD runner that loopback is the docker
+      # HOST's, so registration times out at 60s with nothing in the log saying
+      # why. The daemon's own detection stays the default; here the probe that
+      # already knows simply says so.
       - name: Probe runner docker topology and set NORSK_TEST_HOST + NORSK_NET_REACH
         run: |
           set -uo pipefail
@@ -80,10 +87,12 @@ jobs:
             echo "TOPO: hostname resolves to a container -> runner is containerized (DooD)"
             echo "NORSK_TEST_HOST=host.docker.internal" >> "$GITHUB_ENV"
             echo "NORSK_NET_REACH=direct" >> "$GITHUB_ENV"
+            echo "NORSK_CTL_PRODUCT_REACH=container-address" >> "$GITHUB_ENV"
           else
             echo "TOPO: hostname is not a container -> runner is host-based"
             echo "NORSK_TEST_HOST=localhost" >> "$GITHUB_ENV"
             echo "NORSK_NET_REACH=publish" >> "$GITHUB_ENV"
+            echo "NORSK_CTL_PRODUCT_REACH=host" >> "$GITHUB_ENV"
           fi
 
       - name: Write the Norsk license (from the org secret)

package/package.json

@@ -1,21 +1,22 @@
 {
   "name": "@norskvideo/ctl-dev-kit",
-  "version": "0.1.61",
+  "version": "0.1.63",
   "type": "module",
   "exports": {
-    "./package.json": "./package.json",
-    "./testing/invariants": "./testing/invariants.ts",
-    "./testing/byte-snapshot": "./testing/byte-snapshot.ts",
     "./create-product": "./create-product/create-product.ts",
-    "./docs/path-existence": "./docs/path-existence.ts",
-    "./docs/splice-generated": "./docs/splice-generated.ts",
     "./doc-guide": "./doc-guide/doc-guide.js",
     "./doc-guide/build-manual": "./doc-guide/build-manual.js",
     "./doc-guide/bundle": "./doc-guide/bundle.js",
-    "./doc-guide/prose-bundle": "./doc-guide/prose-bundle.js",
     "./doc-guide/guides-config": "./doc-guide/guides-config.js",
     "./doc-guide/instance-proxy": "./doc-guide/instance-proxy.js",
-    "./doc-guide/live-browser": "./doc-guide/live-browser.js"
+    "./doc-guide/live-browser": "./doc-guide/live-browser.js",
+    "./doc-guide/prose-bundle": "./doc-guide/prose-bundle.js",
+    "./docs/path-existence": "./docs/path-existence.ts",
+    "./docs/splice-generated": "./docs/splice-generated.ts",
+    "./licence/check-template": "./licence/check-template.ts",
+    "./package.json": "./package.json",
+    "./testing/byte-snapshot": "./testing/byte-snapshot.ts",
+    "./testing/invariants": "./testing/invariants.ts"
   },
   "bin": {
     "ctl-dev-kit": "./create-product/cli.ts"