pgserve 1.0.8 → 1.0.9-rc.6

package/.gitguardian.yaml

@@ -0,0 +1,29 @@
+# GitGuardian Configuration
+# https://docs.gitguardian.com/ggshield-docs/reference/gitguardian-yaml
+
+version: 2
+
+secret:
+  # Don't show actual secret values in output
+  show_secrets: false
+  # Ignore files containing default development passwords
+  # These are well-known defaults for local PostgreSQL testing, not real secrets
+  ignored_paths:
+    - tests/**
+    - "**/*.test.js"
+    - "**/*.spec.js"
+    - "**/*.bench.js"
+    - src/sync.js
+    - src/pg-wire.js
+    - src/postgres.js
+    - src/restore.js
+
+  # Ignore "postgres" as a password - this is a well-known default for local dev
+  ignored_matches:
+    - name: "Default postgres password"
+      match: postgres
+
+  # Ignore generic password detector (too many false positives for default creds)
+  ignored_detectors:
+    - Generic Password
+    - Generic High Entropy Secret

package/.gitguardianignore

@@ -0,0 +1,16 @@
+# GitGuardian Ignore File
+# Files containing default development passwords (not real secrets)
+
+# PostgreSQL wire protocol client with example code containing default password
+src/pg-wire.js
+
+# All test files use default postgres password
+tests/**
+**/*.test.js
+**/*.spec.js
+**/*.bench.js
+
+# Other source files with default connection settings
+src/sync.js
+src/postgres.js
+src/restore.js

package/.github/release.yml

@@ -0,0 +1,30 @@
+# GitHub Release Notes Configuration
+# Automatically generates release notes from merged PRs
+# See: https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes
+
+changelog:
+  exclude:
+    labels:
+      - ignore-for-changelog
+      - internal
+      - bot
+    authors:
+      - github-actions[bot]
+  categories:
+    - title: "Features"
+      labels:
+        - feature
+        - enhancement
+    - title: "Bug Fixes"
+      labels:
+        - bug
+        - fix
+    - title: "Breaking Changes"
+      labels:
+        - breaking
+    - title: "Dependencies"
+      labels:
+        - dependencies
+    - title: "Other Changes"
+      labels:
+        - "*"

package/.github/workflows/build-all-platforms.yml

@@ -0,0 +1,182 @@
+name: Build All Platforms
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'Version to publish'
+        required: true
+        type: string
+      npm_tag:
+        description: 'npm dist-tag (next or latest)'
+        required: false
+        type: string
+        default: 'next'
+      ref:
+        description: 'Git ref to checkout (tag or commit)'
+        required: false
+        type: string
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version (leave empty for build-only)'
+        required: false
+        type: string
+      npm_tag:
+        description: 'npm dist-tag'
+        required: false
+        type: choice
+        options:
+          - next
+          - latest
+        default: 'next'
+
+concurrency:
+  group: build-all-platforms-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    name: Build ${{ matrix.platform }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: bun-linux-x64
+            platform: linux-x64
+            output: pgserve-linux-x64
+          - target: bun-linux-arm64
+            platform: linux-arm64
+            output: pgserve-linux-arm64
+          - target: bun-darwin-x64
+            platform: darwin-x64
+            output: pgserve-darwin-x64
+          - target: bun-darwin-arm64
+            platform: darwin-arm64
+            output: pgserve-darwin-arm64
+          - target: bun-windows-x64
+            platform: windows-x64
+            output: pgserve-windows-x64.exe
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build for ${{ matrix.platform }}
+        run: |
+          mkdir -p dist
+          bun build --compile --target=${{ matrix.target }} bin/pglite-server.js --outfile dist/${{ matrix.output }}
+          ls -lh dist/
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: binaries-${{ matrix.platform }}
+          path: dist/${{ matrix.output }}*
+          retention-days: 7
+
+  publish:
+    name: Publish to npm
+    needs: build
+    runs-on: ubuntu-latest
+    if: inputs.version != ''
+    environment: npm-publish
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+          pattern: binaries-*
+          merge-multiple: true
+
+      - name: Verify binaries
+        run: |
+          echo "Downloaded binaries:"
+          ls -la dist/
+
+          MISSING=""
+          for platform in linux-x64 linux-arm64 darwin-x64 darwin-arm64; do
+            if [ ! -f "dist/pgserve-$platform" ]; then
+              MISSING="$MISSING pgserve-$platform"
+            fi
+          done
+          if [ ! -f "dist/pgserve-windows-x64.exe" ]; then
+            MISSING="$MISSING pgserve-windows-x64.exe"
+          fi
+
+          if [ -n "$MISSING" ]; then
+            echo "Missing binaries:$MISSING"
+            exit 1
+          fi
+
+          echo "All binaries present!"
+
+      - name: Check if version already published
+        id: check
+        run: |
+          VERSION="${{ inputs.version }}"
+          if npm view pgserve@$VERSION version >/dev/null 2>&1; then
+            echo "Version $VERSION already published"
+            echo "published=true" >> $GITHUB_OUTPUT
+          else
+            echo "Version $VERSION not yet published"
+            echo "published=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Publish to npm
+        if: steps.check.outputs.published == 'false'
+        run: |
+          echo "Publishing version ${{ inputs.version }} with tag ${{ inputs.npm_tag }}"
+          npm publish --access public --tag ${{ inputs.npm_tag }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Verify publish
+        if: steps.check.outputs.published == 'false'
+        run: |
+          # npm registry can take up to 30s to propagate
+          for i in 1 2 3 4 5; do
+            echo "Attempt $i: Checking npm for pgserve@${{ inputs.version }}..."
+            if npm view pgserve@${{ inputs.version }} version 2>/dev/null; then
+              echo "Successfully published pgserve@${{ inputs.version }} with tag @${{ inputs.npm_tag }}"
+              exit 0
+            fi
+            echo "Not found yet, waiting 10s..."
+            sleep 10
+          done
+          echo "Warning: Version not found after 50s, but publish command succeeded"
+          exit 0

package/.github/workflows/ci.yml

@@ -0,0 +1,84 @@
+name: CI
+
+on:
+  push:
+    branches: [main, dev]
+  pull_request:
+    branches: [main, dev]
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run linter
+        run: bun run lint
+
+      - name: Run dead code check
+        run: bun run deadcode
+
+      - name: Run tests
+        run: bun test
+
+  # Optional: Run on multiple platforms
+  test-matrix:
+    name: Test (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+      fail-fast: false
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: bun test
+
+  # Validate build works
+  build-check:
+    name: Build Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build executable
+        run: |
+          mkdir -p dist
+          bun build --compile bin/pglite-server.js --outfile dist/pgserve
+
+      - name: Verify executable
+        run: |
+          ./dist/pgserve --help
+          echo "Build successful!"

package/.github/workflows/release.yml

@@ -0,0 +1,209 @@
+name: Unified Release
+
+on:
+  pull_request:
+    types: [closed]
+    branches: [main]
+  workflow_dispatch:
+    inputs:
+      action:
+        description: 'Release action'
+        required: true
+        type: choice
+        options:
+          - bump-rc
+          - promote
+
+concurrency:
+  group: unified-release
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  pull-requests: read
+  id-token: write
+
+jobs:
+  # Gate: Skip bot commits, detect action from PR labels
+  gate:
+    name: Release Gate
+    runs-on: ubuntu-latest
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.pull_request.merged == true &&
+       (contains(github.event.pull_request.labels.*.name, 'rc') ||
+        contains(github.event.pull_request.labels.*.name, 'stable')))
+    outputs:
+      should_run: ${{ steps.check.outputs.should_run }}
+      action: ${{ steps.detect.outputs.action }}
+
+    steps:
+      - name: Check for bot commits
+        id: check
+        run: |
+          # Skip if this is a bot commit (prevents infinite loops)
+          if [[ "${{ github.actor }}" == "github-actions[bot]" ]]; then
+            echo "Skipping: bot commit detected"
+            echo "should_run=false" >> $GITHUB_OUTPUT
+          else
+            echo "should_run=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Detect action
+        id: detect
+        if: steps.check.outputs.should_run == 'true'
+        run: |
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            echo "action=${{ inputs.action }}" >> $GITHUB_OUTPUT
+            echo "Action from dispatch: ${{ inputs.action }}"
+          elif [[ "${{ contains(github.event.pull_request.labels.*.name, 'stable') }}" == "true" ]]; then
+            echo "action=promote" >> $GITHUB_OUTPUT
+            echo "Action from label: promote (stable)"
+          elif [[ "${{ contains(github.event.pull_request.labels.*.name, 'rc') }}" == "true" ]]; then
+            echo "action=bump-rc" >> $GITHUB_OUTPUT
+            echo "Action from label: bump-rc"
+          else
+            echo "No release label found"
+            echo "action=" >> $GITHUB_OUTPUT
+          fi
+
+  # Version: Bump version and create tag
+  version:
+    name: Bump Version
+    needs: gate
+    if: needs.gate.outputs.should_run == 'true' && needs.gate.outputs.action != ''
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.bump.outputs.version }}
+      tag: ${{ steps.bump.outputs.tag }}
+      npm_tag: ${{ steps.bump.outputs.npm_tag }}
+      is_promote: ${{ steps.bump.outputs.is_promote }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Configure Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Run release script
+        id: bump
+        run: node scripts/release.cjs --action ${{ needs.gate.outputs.action }}
+
+      - name: Push changes
+        run: |
+          git push origin HEAD:${{ github.ref_name }}
+          git push origin --tags
+
+  # Build: Build all platforms (skip for promote)
+  build:
+    name: Build & Publish
+    needs: version
+    if: needs.version.outputs.is_promote != 'true'
+    uses: ./.github/workflows/build-all-platforms.yml
+    with:
+      version: ${{ needs.version.outputs.version }}
+      npm_tag: ${{ needs.version.outputs.npm_tag }}
+      ref: ${{ needs.version.outputs.tag }}
+    secrets: inherit
+
+  # Promote: Just update npm tags (no rebuild)
+  promote:
+    name: Promote to Latest
+    needs: version
+    if: needs.version.outputs.is_promote == 'true'
+    runs-on: ubuntu-latest
+    environment: npm-publish
+
+    steps:
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Get RC version from @next tag
+        id: get-rc
+        run: |
+          RC_VERSION=$(npm view pgserve@next version 2>/dev/null || echo "")
+          if [ -z "$RC_VERSION" ]; then
+            echo "No RC version found at @next tag"
+            exit 1
+          fi
+          echo "rc_version=$RC_VERSION" >> $GITHUB_OUTPUT
+          echo "Found RC version: $RC_VERSION"
+
+      - name: Promote @next to @latest
+        run: |
+          echo "Promoting pgserve@${{ steps.get-rc.outputs.rc_version }} to @latest"
+          npm dist-tag add pgserve@${{ steps.get-rc.outputs.rc_version }} latest
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Verify promotion
+        run: |
+          LATEST=$(npm view pgserve@latest version)
+          echo "Latest version is now: $LATEST"
+          if [ "$LATEST" != "${{ steps.get-rc.outputs.rc_version }}" ]; then
+            echo "Warning: Version mismatch after promotion"
+          fi
+
+  # GitHub Release: Create release with changelog
+  github-release:
+    name: Create GitHub Release
+    needs: [version, build]
+    if: always() && needs.version.result == 'success' && (needs.build.result == 'success' || needs.build.result == 'skipped')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.version.outputs.tag }}
+
+      - name: Download artifacts
+        if: needs.build.result == 'success'
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+          pattern: binaries-*
+          merge-multiple: true
+
+      - name: List artifacts
+        run: |
+          if [ -d "dist" ]; then
+            echo "Release artifacts:"
+            ls -la dist/
+          else
+            echo "No artifacts (promote release)"
+          fi
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ needs.version.outputs.tag }}
+          name: ${{ needs.version.outputs.tag }}
+          generate_release_notes: true
+          body: |
+            ## Install
+
+            ```bash
+            npm install pgserve@${{ needs.version.outputs.npm_tag }}
+            bunx pgserve@${{ needs.version.outputs.npm_tag }}
+            ```
+          prerelease: ${{ contains(needs.version.outputs.version, '-rc.') }}
+          files: |
+            dist/*
+          fail_on_unmatched_files: false