@tutti-os/app-release-tools 0.0.10 → 0.0.12

package/README.md

@@ -8,16 +8,12 @@ Command-line tools for publishing Tutti workspace apps into App Center release m
 build-tutti-app-release --app-id vibe-design --package-dir dist/tutti-app/vibe-design --base-url https://cdn.example.test/tutti-app-releases
 build-tutti-app-catalog --release-file ./apps/vibe-design/latest.json --output ./catalog.json
 build-tutti-app-catalog --existing-catalog ./catalog.json --release-file ./apps/vibe-design/latest.json --output ./catalog.json
-bump-tutti-app-version --app-id vibe-design --manifest ./tutti.app.json --bump patch
 verify-tutti-app-release-artifacts --release-file ./apps/vibe-design/latest.json
 verify-tutti-app-release-artifacts --catalog-file ./catalog.json --release-file ./apps/vibe-design/latest.json
 ```
 
 The release command validates a complete Tutti app package, creates a zip, writes immutable `release.json`, and writes mutable `latest.json`.
 
-The version bump command updates an app manifest from one stable semver version
-to the next major, minor, or patch version.
-
 The catalog command merges one or more release files into `tutti.app.catalog.v1`.
 Pass `--existing-catalog` to preserve existing catalog apps and update only the
 apps represented by the release files. With `--existing-catalog`, release files

package/bin/build-tutti-app-release.mjs

@@ -150,6 +150,7 @@ export function validateManifest(manifest, sourceLabel = "manifest") {
     throw new Error(`${sourceLabel} runtime.healthcheckPath must start with /`);
   }
   validateManifestCLI(manifest.cli, sourceLabel);
+  validateManifestReferences(manifest.references, sourceLabel);
   validateLocalizationInfo(manifest.localizationInfo, sourceLabel);
 }
 
@@ -171,6 +172,36 @@ function validateManifestCLI(cli, sourceLabel) {
   }
 }
 
+function validateManifestReferences(references, sourceLabel) {
+  if (references === undefined) {
+    return;
+  }
+  if (
+    !references ||
+    typeof references !== "object" ||
+    Array.isArray(references)
+  ) {
+    throw new Error(`${sourceLabel} references must be an object`);
+  }
+  const unsupportedKey = Object.keys(references).find(
+    (key) => key !== "listEndpoint"
+  );
+  if (unsupportedKey) {
+    throw new Error(
+      `${sourceLabel}.references.${unsupportedKey} is unsupported`
+    );
+  }
+  const listEndpoint = requireNonEmpty(
+    references.listEndpoint,
+    `${sourceLabel}.references.listEndpoint`
+  );
+  if (!isRelativeURLPath(listEndpoint)) {
+    throw new Error(
+      `${sourceLabel}.references.listEndpoint must be a relative URL path without query or fragment`
+    );
+  }
+}
+
 export function validateCLIManifest(manifest, sourceLabel = "cli manifest") {
   if (!manifest || typeof manifest !== "object") {
     throw new Error(`${sourceLabel} must be an object`);
@@ -495,6 +526,29 @@ function isRelativePackagePath(value) {
   return !text.split(/[\\/]+/).includes("..");
 }
 
+function isRelativeURLPath(value) {
+  const text = String(value ?? "").trim();
+  if (
+    text === "" ||
+    !text.startsWith("/") ||
+    text.startsWith("//") ||
+    text.includes("\0")
+  ) {
+    return false;
+  }
+  try {
+    const parsed = new URL(text, "http://tutti.local");
+    return (
+      parsed.origin === "http://tutti.local" &&
+      parsed.pathname === text &&
+      parsed.search === "" &&
+      parsed.hash === ""
+    );
+  } catch {
+    return false;
+  }
+}
+
 function normalizeBaseUrl(value) {
   return String(value).trim().replace(/\/+$/, "");
 }

package/package.json

@@ -1,18 +1,16 @@
 {
   "name": "@tutti-os/app-release-tools",
-  "version": "0.0.10",
+  "version": "0.0.12",
   "private": false,
   "type": "module",
   "bin": {
     "build-tutti-app-release": "./bin/build-tutti-app-release.mjs",
     "build-tutti-app-catalog": "./bin/build-tutti-app-catalog.mjs",
-    "bump-tutti-app-version": "./bin/bump-tutti-app-version.mjs",
     "verify-tutti-app-release-artifacts": "./bin/verify-tutti-app-release-artifacts.mjs"
   },
   "exports": {
     "./build-tutti-app-release": "./bin/build-tutti-app-release.mjs",
     "./build-tutti-app-catalog": "./bin/build-tutti-app-catalog.mjs",
-    "./bump-tutti-app-version": "./bin/bump-tutti-app-version.mjs",
     "./verify-tutti-app-release-artifacts": "./bin/verify-tutti-app-release-artifacts.mjs"
   },
   "files": [

package/bin/bump-tutti-app-version.mjs

@@ -1,119 +0,0 @@
-#!/usr/bin/env node
-import { readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-
-import { validateManifest } from "./build-tutti-app-release.mjs";
-
-const allowedBumps = new Set(["major", "minor", "patch"]);
-
-export async function bumpTuttiAppVersion(options) {
-  const manifestPath = path.resolve(
-    requireNonEmpty(options.manifestPath, "manifestPath")
-  );
-  const bump = String(options.bump ?? "patch").trim();
-  if (!allowedBumps.has(bump)) {
-    throw new Error("bump must be one of major, minor, or patch");
-  }
-
-  const manifest = JSON.parse(await readFile(manifestPath, "utf8"));
-  validateManifest(manifest, manifestPath);
-  if (options.appId && manifest.appId !== options.appId) {
-    throw new Error(
-      `appId mismatch: input ${options.appId} does not match manifest ${manifest.appId}`
-    );
-  }
-
-  const previousVersion = manifest.version;
-  const version = bumpStableVersion(previousVersion, bump);
-  manifest.version = version;
-  validateManifest(manifest, manifestPath);
-  await writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
-
-  return {
-    appId: manifest.appId,
-    manifestPath,
-    previousVersion,
-    version
-  };
-}
-
-function bumpStableVersion(version, bump) {
-  const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(String(version ?? "").trim());
-  if (!match) {
-    throw new Error(
-      `manifest version must be stable semver x.y.z for automatic bump, got ${JSON.stringify(version)}`
-    );
-  }
-
-  let major = Number(match[1]);
-  let minor = Number(match[2]);
-  let patch = Number(match[3]);
-  if (bump === "major") {
-    major += 1;
-    minor = 0;
-    patch = 0;
-  } else if (bump === "minor") {
-    minor += 1;
-    patch = 0;
-  } else {
-    patch += 1;
-  }
-
-  return `${major}.${minor}.${patch}`;
-}
-
-function requireNonEmpty(value, label) {
-  const text = String(value ?? "").trim();
-  if (text === "") {
-    throw new Error(`${label} is required`);
-  }
-  return text;
-}
-
-function parseArgs(argv) {
-  const result = {};
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === "--app-id") {
-      result.appId = readArgValue(argv, index, arg);
-      index += 1;
-      continue;
-    }
-    if (arg === "--bump") {
-      result.bump = readArgValue(argv, index, arg);
-      index += 1;
-      continue;
-    }
-    if (arg === "--manifest") {
-      result.manifestPath = readArgValue(argv, index, arg);
-      index += 1;
-      continue;
-    }
-    throw new Error(`unexpected argument: ${arg}`);
-  }
-  return result;
-}
-
-function readArgValue(argv, index, arg) {
-  const value = argv[index + 1];
-  if (!value || value.startsWith("--")) {
-    throw new Error(`missing value for ${arg}`);
-  }
-  return value;
-}
-
-export async function main() {
-  const result = await bumpTuttiAppVersion(parseArgs(process.argv.slice(2)));
-  process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-}
-
-if (
-  process.argv[1] &&
-  import.meta.url === pathToFileURL(process.argv[1]).href
-) {
-  main().catch((error) => {
-    console.error(error.message);
-    process.exitCode = 1;
-  });
-}