@rightkit/release 0.6.4 → 0.6.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/README.md +109 -7
  2. package/admission-files.mjs +279 -0
  3. package/admission-host.mjs +403 -0
  4. package/admission.mjs +146 -0
  5. package/android-play-upload.mjs +4 -4
  6. package/app-check.mjs +1326 -0
  7. package/apple-profile-create.mjs +4 -3
  8. package/apple-profile-renew.mjs +5 -4
  9. package/bin/darwin/rightkit-swap +0 -0
  10. package/bin/rightkit-gate.mjs +495 -69
  11. package/binary-license-notices.mjs +2 -1
  12. package/build-release.mjs +87 -26
  13. package/cache-command.mjs +4 -3
  14. package/cargo-license-notices.mjs +2 -1
  15. package/cargo-manifest-text.mjs +25 -0
  16. package/cargo-profile-contract.mjs +26 -13
  17. package/cli/right-release.mjs +45 -5
  18. package/command-spec.mjs +4 -5
  19. package/deps.mjs +5 -4
  20. package/deterministic-scans.mjs +301 -37
  21. package/development.mjs +5 -5
  22. package/github-release.mjs +5 -3
  23. package/github-upload-gate.mjs +6 -6
  24. package/init-command.mjs +134 -8
  25. package/inventory-check.mjs +12 -1
  26. package/ios-upload.mjs +4 -4
  27. package/mirror-root-artifact.mjs +3 -4
  28. package/npm-license-notices.mjs +2 -1
  29. package/outdated-command.mjs +91 -0
  30. package/ownership-dependency-allowlist.json +2 -0
  31. package/package.json +41 -3
  32. package/pipeline-admission.mjs +12 -0
  33. package/prebuild-gates.mjs +7 -3
  34. package/publish-cargo.mjs +215 -3
  35. package/publish-update.mjs +5 -3
  36. package/release-config.mjs +36 -5
  37. package/release-dependencies-command.mjs +4 -3
  38. package/release-qa-audit.mjs +12 -10
  39. package/release-qa-command.mjs +42 -7
  40. package/release-qa-hardening.mjs +10 -3
  41. package/release-qa-policy.mjs +214 -47
  42. package/release.mjs +117 -62
  43. package/rightkit-registry-resolver.mjs +5 -2
  44. package/rightkit-versions.json +18 -13
  45. package/stage-sidecar-command.mjs +5 -5
  46. package/test-command.mjs +3 -2
  47. package/upload-release.mjs +3 -2
  48. package/web-build.mjs +2 -1
@@ -2,8 +2,9 @@ import { createHash, generateKeyPairSync, randomUUID, sign, X509Certificate } fr
2
2
  import { chmodSync, copyFileSync, constants, existsSync, mkdirSync, mkdtempSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
3
3
  import os from "node:os";
4
4
  import path from "node:path";
5
- import { fileURLToPath, pathToFileURL } from "node:url";
5
+ import { fileURLToPath } from "node:url";
6
6
  import { spawnSync } from "./background-process.mjs";
7
+ import { defaultReleaseConfigFile, importReleaseConfig } from "./release-config.mjs";
7
8
  import { appleProfileAuth, decodeAppleProfile, findAppleSigningCertificate, signAppleApiJwt } from "./apple-profile-renew.mjs";
8
9
 
9
10
  // right-release apple-profile-create: issue a Mac Development provisioning profile
@@ -452,10 +453,10 @@ export async function main(args = process.argv.slice(2), options = {}) {
452
453
  return;
453
454
  }
454
455
  const parsed = parseCreateArgs(args);
455
- const configPath = parsed.configPath ?? "right-release.config.mjs";
456
+ const configPath = parsed.configPath ?? defaultReleaseConfigFile();
456
457
  const absolute = path.resolve(configPath);
457
458
  let config = {};
458
- if (existsSync(absolute)) { const loaded = await import(pathToFileURL(absolute)); config = loaded.default ?? loaded.config ?? loaded; }
459
+ if (existsSync(absolute)) config = await importReleaseConfig(absolute, { lenient: true });
459
460
  else if (parsed.configPath) fail("APPLE_PROFILE_USAGE", `Config file not found: ${parsed.configPath}`);
460
461
  return createAppleProfile({ ...options, root: path.dirname(absolute), config, ...parsed });
461
462
  }
@@ -1,8 +1,9 @@
1
1
  import { createHash, createPrivateKey, randomUUID, sign, X509Certificate } from "node:crypto";
2
2
  import { constants, copyFileSync, existsSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, realpathSync } from "node:fs";
3
3
  import path from "node:path";
4
- import { fileURLToPath, pathToFileURL } from "node:url";
4
+ import { fileURLToPath } from "node:url";
5
5
  import { spawnSync } from "./background-process.mjs";
6
+ import { defaultReleaseConfigFile, importReleaseConfig } from "./release-config.mjs";
6
7
  import { isManagedHost, refuseManagedEnvSecret } from "./managed-host-secrets.mjs";
7
8
  import os from "node:os";
8
9
 
@@ -226,7 +227,7 @@ export async function main(args = process.argv.slice(2), options = {}) {
226
227
  return;
227
228
  }
228
229
  if (args[0] !== "profile" || args[1] !== "renew") fail("APPLE_PROFILE_USAGE", "Expected: right-release apple profile renew");
229
- let configPath = "right-release.config.mjs", profilePath, dryRun = false;
230
+ let configPath = defaultReleaseConfigFile(), profilePath, dryRun = false;
230
231
  for (let i = 2; i < args.length; i++) {
231
232
  if (args[i] === "--dry-run") dryRun = true;
232
233
  else if (["--config", "--profile"].includes(args[i])) {
@@ -236,8 +237,8 @@ export async function main(args = process.argv.slice(2), options = {}) {
236
237
  } else fail("APPLE_PROFILE_USAGE", `Unknown option: ${args[i]}`);
237
238
  }
238
239
  const absolute = path.resolve(configPath);
239
- const loaded = await import(pathToFileURL(absolute));
240
- return renewAppleProfile({ ...options, root: path.dirname(absolute), config: loaded.default ?? loaded.config ?? loaded, profilePath, dryRun });
240
+ const config = await importReleaseConfig(absolute, { lenient: true });
241
+ return renewAppleProfile({ ...options, root: path.dirname(absolute), config, profilePath, dryRun });
241
242
  }
242
243
 
243
244
  const realOrSelf = (file) => { try { return realpathSync(file); } catch { return path.resolve(file); } };
Binary file