@sebastienrousseau/dotfiles 0.2.520 → 0.2.522

package/scripts/verify-release-versions

@@ -1,156 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-#
-# verify-release-versions — assert every human-visible version surface
-# matches the canonical version in defaults/.chezmoidata.toml.
-#
-# This is the CI-checked "no stale install snippets" gate: install
-# one-liners, badges, the CLI banner, the man page, the agent/MCP
-# discovery cards, llms.txt and the CHANGELOG heading all have to
-# agree with the manifest BEFORE a release ships.
-#
-# Formerly scripts/qa/check-version-consistency.sh; that path remains
-# as a thin wrapper so existing callers keep working.
-#
-# Historical references (CHANGELOG entries, audit-doc closed-cycle
-# tables, roadmap docs that mention previous versions) are NOT
-# checked — they are intentionally pinned to the version they
-# describe.
-#
-# Usage:
-#   scripts/verify-release-versions           # verify
-#   scripts/verify-release-versions --fix     # auto-fix
-#   scripts/verify-release-versions --quiet   # rc-only
-#
-# Exit codes:
-#   0  every live reference matches
-#   1  drift detected (with diff printed unless --quiet)
-#   2  bad usage / missing canonical version
-
-set -euo pipefail
-
-# Honour a caller-supplied REPO_ROOT, matching scorecard-snapshot.sh,
-# a2a-conformance.sh and the other repo-scoped QA scripts. Lets the
-# checker run against a fixture tree without being copied into it.
-REPO_ROOT="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
-cd "$REPO_ROOT"
-
-# ── Parse flags ─────────────────────────────────────────────────────────
-fix=0
-quiet=0
-for arg in "$@"; do
-  case "$arg" in
-    --fix) fix=1 ;;
-    --quiet | -q) quiet=1 ;;
-    -h | --help)
-      sed -n '5,29p' "$0" | sed 's/^# \{0,1\}//'
-      exit 0
-      ;;
-    *)
-      echo "unknown flag: $arg" >&2
-      exit 2
-      ;;
-  esac
-done
-
-_log() { ((quiet)) || printf '%s\n' "$*"; }
-_err() { printf 'verify-release-versions: %s\n' "$*" >&2; }
-
-# ── Canonical version ──────────────────────────────────────────────────
-# `|| true`: when the key is absent grep exits 1, and under
-# `set -euo pipefail` that aborted the script right here — rc 1 with no
-# message, indistinguishable from "drift detected", and the documented
-# rc 2 below was unreachable. Let the emptiness check do the reporting.
-canonical="$(grep -E '^dotfiles_version[[:space:]]*=' defaults/.chezmoidata.toml 2>/dev/null |
-  head -1 | sed -E 's/.*"([^"]+)".*/\1/' || true)"
-
-if [[ -z "$canonical" ]]; then
-  _err 'failed to read dotfiles_version from defaults/.chezmoidata.toml'
-  exit 2
-fi
-_log "canonical: $canonical (defaults/.chezmoidata.toml)"
-
-# ── Per-file expected-substring map ────────────────────────────────────
-# Each entry: PATH|MATCH_PATTERN|EXPECTED_STRING
-# MATCH_PATTERN is a fixed substring to grep for on the file to
-# locate the version-bearing line; we then verify it contains the
-# expected substring rendered with $canonical. version-sync.sh
-# already handles many files (it reads package.json as source);
-# this list captures the surfaces version-sync.sh historically
-# missed — bento.sh banner, man-page header, dispatcher header.
-specs=(
-  "package.json|\"version\"|\"version\": \"${canonical}\""
-  "bin/dot|^VERSION=|VERSION=\"${canonical}\""
-  "bin/dot|^# Dotfiles CLI Entry Point - v|# Dotfiles CLI Entry Point - v${canonical}"
-  "share/man/man1/dot.1|^.TH DOT 1|dotfiles v${canonical}"
-  "lib/dot/bento.sh|D O T F I L E S|[v${canonical}]"
-  "README.md|img.shields.io/badge/Version|Version-v${canonical}-blue"
-  "CLAUDE.md|^Chezmoi-managed dotfiles|Version \`${canonical}\`"
-  "AGENTS.md|^Chezmoi-managed dotfiles|Version \`${canonical}\`"
-  # Install snippet pinned to a tag — the "no stale install one-liner"
-  # rule from the repo standard. `main` snippets are deliberately
-  # unpinned and are not checked.
-  "README.md|raw.githubusercontent.com/sebastienrousseau/dotfiles/v|/dotfiles/v${canonical}/install.sh"
-  "install.sh|local version=\"v|local version=\"v${canonical}\""
-  "install.sh|\\(default: v|(default: v${canonical})"
-  # Machine-readable discovery surfaces: agents fetch these, so a stale
-  # version here misroutes tooling rather than merely reading wrong.
-  ".well-known/agent-card.json|\"version\"|\"version\": \"${canonical}\""
-  ".well-known/mcp/server-card.json|\"version\"|\"version\": \"${canonical}\""
-  # serverInfo.version returned by the MCP `initialize` handshake. A client
-  # reads the card and the handshake; they must agree.
-  "defaults/dot_local/share/dot-mcp/main.go|^const version =|const version = \"${canonical}\""
-  # LLM-facing repo index.
-  "llms.txt|Current version:|Current version: v${canonical}."
-  # Citation metadata: a stale version here is cited in papers.
-  "CITATION.cff|^version:|version: ${canonical}"
-  # Keep-a-Changelog: the top heading must be the version being shipped.
-  "CHANGELOG.md|^## v|## v${canonical}"
-)
-
-drift=0
-for spec in "${specs[@]}"; do
-  IFS='|' read -r path pattern expected <<<"$spec"
-  if [[ ! -f "$path" ]]; then
-    _err "MISSING: $path (declared in spec list)"
-    drift=$((drift + 1))
-    continue
-  fi
-  line="$(grep -E "$pattern" "$path" | head -1 || true)"
-  if [[ -z "$line" ]]; then
-    _err "PATTERN NOT FOUND: '$pattern' in $path"
-    drift=$((drift + 1))
-    continue
-  fi
-  if [[ "$line" != *"$expected"* ]]; then
-    _err "DRIFT in $path"
-    _err "  found:    $line"
-    _err "  expected: contains '$expected'"
-    drift=$((drift + 1))
-    if ((fix)); then
-      # Auto-fix: only safe when the file contains a previous v0.X.YYY
-      # we can sed-replace. Skip otherwise.
-      old="$(printf '%s' "$line" | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' | head -1)"
-      if [[ -n "$old" ]] && [[ "$old" != "v${canonical}" ]]; then
-        sed -i.bak "s|${old}|v${canonical}|g" "$path" && rm -f "$path.bak"
-        _log "  fixed:  $path  ($old → v${canonical})"
-      fi
-    fi
-  fi
-done
-
-if ((drift > 0)); then
-  if ((fix)); then
-    _log ""
-    _log "Auto-fixed where safe. Re-run without --fix to verify."
-  else
-    _log ""
-    _log "Tip: rerun with --fix to auto-correct (only safe substitutions)."
-    _log "     For non-trivial drift, edit the file manually then re-run."
-  fi
-  exit 1
-fi
-
-_log "all $((${#specs[@]})) live version surfaces match $canonical"
-exit 0