gowalk-cicd 1.0.142 → 1.0.143

package/action/.daemux-version

@@ -1 +1 @@
-1.0.142
+1.0.143

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.142
+1.0.143

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.142
+1.0.143

package/docs/CONFIGURATION.md

@@ -62,7 +62,7 @@ in the same repository; unrelated repositories can continue upgrading.
 
 # Organization rollout
 
-Use the script from the exact released package being installed:
+Use a released organization script and the reviewed installer package:
 
 ```sh
 node /path/to/package/scripts/upgrade-org.mjs \
@@ -75,8 +75,10 @@ It paginates the organization, discovers actual installed actions, and uses one
 independent repositories concurrently. Existing CI remains authoritative; each
 successful candidate merges independently, and any resulting push workflows are
 followed before branch/checkout cleanup. No factory task or Mac reservation is
-created. API throttling and queued CI limit new migration PR publication while
-other local preparation and completed candidates continue.
+created. API throttling and `--max-active` bound publication. One repository’s queued CI
+never stops unrelated PRs; GitHub schedules each platform against its available runners.
+Existing checks must finish successfully, and GitHub enforces its required checks and reviews
+for the exact candidate. A repository without candidate checks gains no new CI requirement.
 
 The state file records repository heads, PR/run URLs, failures and cleanup.
 Restart with the same file and package to resume. `--retry-unresolved` retries
@@ -84,3 +86,8 @@ recorded exceptions after their cause is repaired; `--dry-run` prepares local
 changes without pushing, opening PRs or merging. Use a separate state file for a
 new target version. The final status counts distinguish updated, already-current,
 not-installed and unresolved repositories; an unresolved result exits nonzero.
+
+`--installer-dir /path/to/reviewed/package` selects a retained installer independently of
+the organization script release. Its package version owns the existing state, branches and
+installed files. This lets an orchestration-only repair resume a rollout without reinstalling
+another package version or replacing its PRs. Omitting it installs the script’s own package.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.142",
+  "version": "1.0.143",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/scripts/lib/checks.mjs

@@ -22,13 +22,13 @@ export async function checkCandidate(github, repo, options) {
     repo.nextAt = Date.now() + 30000;
     return;
   }
-  if (!current.length) throw new RolloutError('candidate_ci_missing');
   if (current.some(run => !['success', 'skipped'].includes(run.conclusion))) {
     throw new RolloutError('candidate_ci_failed');
   }
   // GitHub enforces existing required checks and reviews; no admin bypass or new gate is installed.
   await (github.command || command)('gh', ['pr', 'merge', String(repo.pr), '--repo', repo.name, '--squash',
     '--match-head-commit', repo.head]);
+  repo.validation = current.length ? 'existing_ci' : 'github_merge_policy';
   repo.status = 'deploy';
 }
 

package/scripts/lib/coordination.mjs

@@ -0,0 +1,39 @@
+import { readFileSync } from 'node:fs';
+import { resolve, dirname, join } from 'node:path';
+import { RolloutError } from './github.mjs';
+
+export function options(args, packageDir) {
+  const result = { packageDir, org: 'gowalk-public', workers: 8, maxActive: 8, ciTimeout: 3600000 };
+  const names = { '--org': 'org', '--state': 'statePath', '--workers': 'workers',
+    '--max-active': 'maxActive', '--installer-dir': 'packageDir' };
+  for (let index = 0; index < args.length; index++) {
+    if (args[index] === '--dry-run') { result.dryRun = true; continue; }
+    if (args[index] === '--retry-unresolved') { result.retryUnresolved = true; continue; }
+    const name = names[args[index]];
+    if (!name || !args[index + 1]) throw new RolloutError('invalid_rollout_arguments');
+    result[name] = ['workers', 'maxActive'].includes(name) ? Number(args[++index]) : args[++index];
+  }
+  if (!result.statePath || !/^[\w-]+$/.test(result.org)
+      || ![result.workers, result.maxActive].every(value => Number.isInteger(value) && value > 0 && value <= 32)) {
+    throw new RolloutError('invalid_rollout_arguments');
+  }
+  result.packageDir = resolve(result.packageDir);
+  const target = JSON.parse(readFileSync(join(result.packageDir, 'package.json'), 'utf8'));
+  if (target.name !== 'gowalk-cicd' || !/^\d+\.\d+\.\d+$/.test(target.version)) {
+    throw new RolloutError('invalid_installer_package');
+  }
+  result.version = target.version;
+  result.statePath = resolve(result.statePath);
+  result.workDir = join(dirname(result.statePath), 'checkouts');
+  return result;
+}
+
+export function eligible(repo, repositories, opts) {
+  if ((repo.nextAt || 0) > Date.now()) return false;
+  if (repo.status === 'publish') {
+    const active = repositories.filter(row => ['ci', 'deploy', 'cleanup'].includes(row.status));
+    return active.length + (opts.publishing || 0) < opts.maxActive;
+  }
+  return ['inspect', 'prepare', 'ci', 'deploy', 'cleanup', 'update-base'].includes(repo.status);
+}
+

package/scripts/upgrade-org.mjs

@@ -1,44 +1,14 @@
 #!/usr/bin/env node
-// Run from one exact published package. Local workers never claim or reserve factory Macs.
-import { readFileSync } from 'node:fs';
-import { resolve, dirname, join } from 'node:path';
+// Use a released coordinator and reviewed installer. Workers never claim or reserve factory Macs.
+import { resolve, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { GitHub, RolloutError, delay } from './lib/github.mjs';
 import { openState, summary } from './lib/state.mjs';
+import { options, eligible } from './lib/coordination.mjs';
 import { discover, inspect } from './lib/discovery.mjs';
 import { prepare, publish, incorporateBase } from './lib/repository.mjs';
 import { checkCandidate, checkDeploy, cleanup } from './lib/checks.mjs';
 
-function options(args) {
-  const packageDir = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-  const version = JSON.parse(readFileSync(join(packageDir, 'package.json'), 'utf8')).version;
-  const result = { packageDir, version, org: 'gowalk-public', workers: 8, maxActive: 8, ciTimeout: 3600000 };
-  const names = { '--org': 'org', '--state': 'statePath', '--workers': 'workers', '--max-active': 'maxActive' };
-  for (let index = 0; index < args.length; index++) {
-    if (args[index] === '--dry-run') { result.dryRun = true; continue; }
-    if (args[index] === '--retry-unresolved') { result.retryUnresolved = true; continue; }
-    const name = names[args[index]];
-    if (!name || !args[index + 1]) throw new RolloutError('invalid_rollout_arguments');
-    result[name] = ['workers', 'maxActive'].includes(name) ? Number(args[++index]) : args[++index];
-  }
-  if (!result.statePath || !/^[\w-]+$/.test(result.org)
-      || ![result.workers, result.maxActive].every(value => Number.isInteger(value) && value > 0 && value <= 32)) {
-    throw new RolloutError('invalid_rollout_arguments');
-  }
-  result.statePath = resolve(result.statePath);
-  result.workDir = join(dirname(result.statePath), 'checkouts');
-  return result;
-}
-
-function eligible(repo, repositories, opts) {
-  if ((repo.nextAt || 0) > Date.now()) return false;
-  if (repo.status === 'publish') {
-    const active = repositories.filter(row => ['ci', 'deploy', 'cleanup'].includes(row.status));
-    return active.length + (opts.publishing || 0) < opts.maxActive && !active.some(row => row.queued > 0);
-  }
-  return ['inspect', 'prepare', 'ci', 'deploy', 'cleanup', 'update-base'].includes(repo.status);
-}
-
 async function advance(github, repo, opts) {
   const handlers = { inspect, prepare, publish, ci: checkCandidate, deploy: checkDeploy, cleanup };
   if (repo.status === 'update-base') return incorporateBase(repo);
@@ -99,7 +69,7 @@ async function run(opts, state) {
 
 let state;
 try {
-  const opts = options(process.argv.slice(2));
+  const opts = options(process.argv.slice(2), resolve(dirname(fileURLToPath(import.meta.url)), '..'));
   state = openState(opts.statePath, opts.org, opts.version);
   await run(opts, state);
   state.save();