@ticatec/omniflow-nexus 1.0.0

package/src/raw/NexusRawPublisher.ts

@@ -0,0 +1,217 @@
+import { promises as fs } from 'fs'
+import path from 'path'
+import crypto from 'crypto'
+import { BasePublisher } from '@ticatec/omniflow-artifact'
+import type { ArtifactPayload, DownloadOptions, DownloadResult, PublishOptions, RegistryConfig } from '@ticatec/omniflow-artifact'
+import { NexusClient } from '../client/NexusClient.js'
+
+/**
+ * Sonatype Nexus 3 Raw (Generic) Package Repository Publisher.
+ *
+ * Publishes arbitrary binary artifacts, tarballs (.tar.gz), or zip files
+ * to Nexus "raw (hosted)" repositories.
+ * Endpoint format: PUT {server}/repository/{repoName}/{path}/{filename}
+ */
+export class NexusRawPublisher extends BasePublisher {
+  readonly id = 'nexus-raw'
+  readonly name = 'Nexus 3 Raw Repository'
+  readonly platform = 'nexus'
+  readonly artifactType = 'generic'
+  override readonly priority = 20
+
+  override detect(registry: RegistryConfig): boolean {
+    if (registry.type !== 'generic' && registry.type !== 'raw' && registry.type !== 'archive') {
+      return false
+    }
+
+    const regName = (registry.name || '').toLowerCase()
+    if (regName === 'nexus' || regName.startsWith('nexus-') || regName === 'nexus-raw') {
+      return true
+    }
+
+    const server = (registry.server || '').toLowerCase()
+    try {
+      const parsed = new URL(server.includes('://') ? server : `https://${server}`)
+      const host = parsed.hostname.toLowerCase()
+
+      // Exclude other known platforms
+      if (
+        host === 'aliyun.com' ||
+        host.endsWith('.aliyun.com') ||
+        host.endsWith('.aliyuncs.com') ||
+        host === 'gitlab.com' ||
+        host.endsWith('.gitlab.com') ||
+        host === 'github.com' ||
+        host.endsWith('.github.com')
+      ) {
+        return false
+      }
+
+      return host.includes('nexus') || parsed.pathname.includes('/repository/raw')
+    } catch {
+      return false
+    }
+  }
+
+  override buildTargetRef(artifact: ArtifactPayload, registry: RegistryConfig): string {
+    const repoName =
+      registry.namespace?.trim() ||
+      (registry.options?.repository as string | undefined)?.trim() ||
+      ((registry as any).metadata?.repository as string | undefined)?.trim() ||
+      'raw-hosted'
+    const version = artifact.tags && artifact.tags.length > 0 ? artifact.tags[0] : 'latest'
+    const filename = artifact.source ? path.basename(artifact.source) : artifact.name
+    return `${repoName}/${artifact.name}/${version}/${filename}`
+  }
+
+  async login(registry: RegistryConfig, _options?: PublishOptions): Promise<void> {
+    const creds = this.resolveCredentials(registry)
+    if (!creds.token && (!creds.username || !creds.password)) {
+      this.log(`  ℹ No auth credentials configured for Nexus Raw repository ${registry.server}`)
+    }
+  }
+
+  override async exists(
+    artifact: ArtifactPayload,
+    registry: RegistryConfig,
+    options?: PublishOptions
+  ): Promise<boolean> {
+    const creds = this.resolveCredentials(registry)
+    const client = new NexusClient({
+      baseUrl: registry.server,
+      username: creds.username,
+      password: creds.password,
+      token: creds.token,
+      timeoutMs: options?.timeoutMs
+    })
+
+    const repoName = registry.namespace || 'raw-hosted'
+    const version = artifact.tags && artifact.tags.length > 0 ? artifact.tags[0] : 'latest'
+    const packageName = artifact.name
+
+    const filename = artifact.source ? path.basename(artifact.source) : artifact.name
+    const subpath = `${packageName}/${version}`
+    const targetUrl = client.getRawArtifactUrl(repoName, subpath, filename)
+
+    try {
+      const res = await client.request(targetUrl, { method: 'HEAD' })
+      if (res.ok || res.status === 200 || res.status === 204) {
+        return true
+      }
+      if (res.status === 404) {
+        return false
+      }
+      const err = await client.extractErrorMessage(res)
+      throw new Error(`Failed to check Raw package existence (${res.status}): ${err}`)
+    } catch (err: any) {
+      if (err?.message?.includes('Failed to check Raw package existence')) {
+        throw err
+      }
+      throw new Error(`Failed to check Raw package existence: ${client.maskSecrets(err?.message || String(err))}`)
+    }
+  }
+
+  override async download(
+    artifact: ArtifactPayload,
+    registry: RegistryConfig,
+    dest: string,
+    options?: DownloadOptions
+  ): Promise<DownloadResult> {
+    const creds = this.resolveCredentials(registry)
+    const client = new NexusClient({
+      baseUrl: registry.server,
+      username: creds.username,
+      password: creds.password,
+      token: creds.token,
+      timeoutMs: options?.timeoutMs
+    })
+
+    const repoName = registry.namespace || 'raw-hosted'
+    const version = artifact.tags?.[0] || 'latest'
+    const filename = artifact.source ? path.basename(artifact.source) : artifact.name
+    const targetUrl = client.getRawArtifactUrl(repoName, `${artifact.name}/${version}`, filename)
+    const masked = client.maskSecrets(targetUrl)
+
+    this.log(`  📥 Downloading ${artifact.name} ${version} from Nexus: ${masked}`)
+    const res = await client.request(targetUrl, { method: 'GET' })
+    if (!res.ok) {
+      throw await this.downloadError(res, `${artifact.name} ${version} (${filename})`, masked)
+    }
+    return this.saveResponse(res, dest, masked)
+  }
+
+  protected async doPublish(
+    artifact: ArtifactPayload,
+    registry: RegistryConfig,
+    options?: PublishOptions
+  ): Promise<{
+    ref: string
+    digest?: string
+    metadata?: Record<string, unknown>
+  }> {
+    const creds = this.resolveCredentials(registry)
+    const client = new NexusClient({
+      baseUrl: registry.server,
+      username: creds.username,
+      password: creds.password,
+      token: creds.token,
+      timeoutMs: options?.timeoutMs
+    })
+
+    const repoName = registry.namespace || 'raw-hosted'
+    const version = artifact.tags && artifact.tags.length > 0 ? artifact.tags[0] : 'latest'
+    const packageName = artifact.name
+
+    let filePath = artifact.source
+    const stat = await fs.stat(filePath).catch(() => null)
+    if (!stat || !stat.isFile()) {
+      throw new Error(`Nexus Raw artifact source must be an existing file: ${filePath}`)
+    }
+
+    const filename = path.basename(filePath)
+    const fileBuffer = await fs.readFile(filePath)
+    const digest = `sha256:${crypto.createHash('sha256').update(fileBuffer).digest('hex')}`
+
+    const subpath = `${packageName}/${version}`
+    const targetUrl = client.getRawArtifactUrl(repoName, subpath, filename)
+    this.log(`  📤 Uploading Raw package file to Nexus: ${client.maskSecrets(targetUrl)}`)
+
+    if (options?.dryRun) {
+      this.log(`  [dryRun] Would PUT ${filename} (${fileBuffer.length} bytes) to ${client.maskSecrets(targetUrl)}`)
+      return {
+        ref: `${repoName}/${subpath}/${filename}`,
+        digest,
+        metadata: { repoName, subpath, filename, targetUrl, size: fileBuffer.length }
+      }
+    }
+
+    const res = await client.request(targetUrl, {
+      method: 'PUT',
+      headers: {
+        'Content-Type': 'application/octet-stream'
+      },
+      body: fileBuffer as unknown as BodyInit
+    })
+
+    if (!res.ok && res.status !== 201 && res.status !== 200) {
+      const errText = await client.extractErrorMessage(res)
+      throw new Error(`Failed to upload Raw package to Nexus (${res.status}): ${errText}`)
+    }
+
+    return {
+      ref: `${repoName}/${subpath}/${filename}`,
+      digest,
+      metadata: {
+        repoName,
+        packageName,
+        version,
+        filename,
+        targetUrl,
+        size: fileBuffer.length
+      }
+    }
+  }
+}
+
+// Convenient alias
+export { NexusRawPublisher as NexusGenericPublisher }