vouchington-tooling 0.1.6 → 0.1.8

package/README.md

@@ -50,7 +50,8 @@ vouchington stage-review-payload optional|required <source> <destination>
 `download-optional-run-artifacts` uses the current Actions run and host. Pattern mode discovers
 non-expired artifacts across the run, keeps the first result for each name (matching `gh run
 download`), and extracts each selected name into its own directory. Ordinary absence is reported as
-`availability=unavailable`; invalid names and cancellation remain hard failures.
+`availability=unavailable`. Artifact listing retries up to three times with bounded backoff;
+exhausted transport errors, invalid names, and cancellation remain hard failures.
 
 `retrospective-transcript` discovers Codex and Claude transcripts by default. It also reads a
 Claude-compatible transcript when `CURSOR_SESSION_ID` is set, and Grok's `updates.jsonl` session

package/dist/gha-dependabot-automerge-action/index.test-helpers.d.mts

@@ -0,0 +1,22 @@
+export type DependencyUpdate = Record<'dependencyName' | 'directory' | 'newVersion' | 'packageEcosystem' | 'prevVersion' | 'updateType', string>;
+export interface ScriptResult {
+    failures: string[];
+    infos: string[];
+    mutationRequests: Array<{
+        body: string;
+        headers: Record<string, string>;
+        method: string;
+        url: string;
+    }>;
+    restGetCalls: Array<Record<string, unknown>>;
+    warnings: string[];
+}
+export declare function update(prevVersion: string, newVersion: string, updateType: string, dependencyName?: string): DependencyUpdate;
+export declare function runPolicy(metadata: DependencyUpdate[] | string | undefined, pullRequestOverrides?: Record<string, unknown>, freshPullRequestOverrides?: Record<string, unknown>, mergeToken?: string | undefined, mutationResult?: {
+    jsonError?: Error;
+    payload?: unknown;
+    status?: number;
+}, dependabot?: {
+    directory: string;
+    ecosystem: string;
+}, expectedBase?: string, expectedHead?: string, manualRules?: string, confirmedPullRequestOverrides?: Error | Record<string, unknown>, initialRefreshError?: Error): Promise<ScriptResult>;

package/dist/gha-dependabot-automerge-action/index.test-helpers.mjs

@@ -0,0 +1,113 @@
+import { readFileSync } from 'node:fs';
+import { parse as load } from 'yaml';
+const source = readFileSync('.github/actions/dependabot-automerge/action.yml', 'utf8');
+const action = load(source);
+const script = action.runs.steps.find((step) => step.uses?.startsWith('actions/github-script@'))
+    ?.with?.script;
+export function update(prevVersion, newVersion, updateType, dependencyName = 'example') {
+    return {
+        dependencyName,
+        directory: '/',
+        newVersion,
+        packageEcosystem: 'npm',
+        prevVersion,
+        updateType,
+    };
+}
+export async function runPolicy(metadata, pullRequestOverrides = {}, freshPullRequestOverrides = {}, mergeToken = 'merge-token', mutationResult = {}, dependabot = { directory: '/', ecosystem: 'npm' }, expectedBase, expectedHead, manualRules = '[]', confirmedPullRequestOverrides = freshPullRequestOverrides, initialRefreshError) {
+    if (!script)
+        throw new Error('Dependabot auto-merge script is missing');
+    const failures = [];
+    const infos = [];
+    const mutationRequests = [];
+    const restGetCalls = [];
+    const warnings = [];
+    const eventPullRequest = {
+        auto_merge: null,
+        base: { ref: 'main', sha: 'a'.repeat(40) },
+        draft: false,
+        head: {
+            ref: 'dependabot/npm_and_yarn/example-1.5.0',
+            repo: { full_name: 'example-owner/example-repo' },
+            sha: 'b'.repeat(40),
+        },
+        node_id: 'PR_node_id',
+        number: 123,
+        merged: false,
+        state: 'open',
+        title: 'Bump dependencies',
+        user: { login: 'dependabot[bot]' },
+        ...pullRequestOverrides,
+    };
+    const github = {
+        rest: {
+            pulls: {
+                async get(args) {
+                    restGetCalls.push(args);
+                    if (restGetCalls.length === 1 && initialRefreshError)
+                        throw initialRefreshError;
+                    if (restGetCalls.length > 1 && confirmedPullRequestOverrides instanceof Error)
+                        throw confirmedPullRequestOverrides;
+                    const overrides = restGetCalls.length === 1 || confirmedPullRequestOverrides instanceof Error
+                        ? freshPullRequestOverrides
+                        : confirmedPullRequestOverrides;
+                    return { data: { ...eventPullRequest, ...overrides } };
+                },
+            },
+        },
+    };
+    const context = {
+        payload: { pull_request: eventPullRequest, repository: { default_branch: 'main' } },
+        repo: { owner: 'example-owner', repo: 'example-repo' },
+    };
+    const core = {
+        setFailed(message) {
+            failures.push(message);
+        },
+        info(message) {
+            infos.push(message);
+        },
+        warning(message) {
+            warnings.push(message);
+        },
+    };
+    const environment = {
+        DEPENDABOT_DIRECTORY: dependabot.directory,
+        DEPENDABOT_ECOSYSTEM: dependabot.ecosystem,
+        EXPECTED_BASE_SHA: expectedBase ?? String(eventPullRequest.base.sha),
+        EXPECTED_HEAD_SHA: expectedHead ?? String(eventPullRequest.head.sha),
+        GRAPHQL_URL: 'https://github.example.test/api/graphql',
+        MANUAL_UPDATE_RULES: manualRules,
+    };
+    if (metadata !== undefined)
+        environment.UPDATED_DEPENDENCIES_JSON =
+            typeof metadata === 'string' ? metadata : JSON.stringify(metadata);
+    if (mergeToken !== undefined)
+        environment.AUTOMERGE_TOKEN = mergeToken;
+    const fetch = async (url, init) => {
+        if (typeof init.body !== 'string')
+            throw new TypeError('Dependabot auto-merge mutation body must be a string');
+        const body = init.body;
+        mutationRequests.push({
+            body,
+            headers: init.headers,
+            method: String(init.method),
+            url,
+        });
+        return {
+            async json() {
+                if (mutationResult.jsonError)
+                    throw mutationResult.jsonError;
+                return (mutationResult.payload ??
+                    (body.includes('disablePullRequestAutoMerge')
+                        ? { data: { disablePullRequestAutoMerge: { clientMutationId: null } } }
+                        : { data: { enablePullRequestAutoMerge: { clientMutationId: null } } }));
+            },
+            ok: (mutationResult.status ?? 200) < 400,
+            status: mutationResult.status ?? 200,
+        };
+    };
+    const AsyncFunction = Object.getPrototypeOf(async () => undefined).constructor;
+    await new AsyncFunction('github', 'context', 'core', 'process', 'fetch', script)(github, context, core, { env: environment }, fetch);
+    return { failures, infos, mutationRequests, restGetCalls, warnings };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vouchington-tooling",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Vouchington CLI and extractable tooling libraries.",
   "homepage": "https://github.com/vouchington/vouchington-tooling/tree/main/packages/vouchington-tooling#readme",
   "bugs": {

package/scripts/gha/download-optional-run-artifacts.sh

@@ -71,15 +71,39 @@ download_exact() {
   GH_HOST="$github_host" gh run download "$GITHUB_RUN_ID" --repo "$repository" --name "$artifact" --dir "$directory"
 }
 
-list_artifact_names() {
+list_artifact_names_once() {
   GH_HOST="$github_host" gh api \
     --paginate \
     "repos/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID/artifacts?per_page=100" \
     --jq '.artifacts[] | select(.expired | not) | .name'
 }
 
+list_artifact_names() {
+  local attempt status=0 delay artifact_names
+  for attempt in 1 2 3; do
+    if artifact_names=$(list_artifact_names_once); then
+      [ -z "$artifact_names" ] || printf '%s\n' "$artifact_names"
+      return 0
+    else
+      status=$?
+    fi
+    case "$status" in 130|143) return "$status" ;; esac
+    if [ "$attempt" -lt 3 ]; then
+      delay=2
+      [ "$attempt" -eq 2 ] && delay=5
+      echo "::warning::Optional same-run artifact listing failed (attempt $attempt/3 exit=$status); retrying in ${delay}s" >&2
+      if sleep "$delay"; then :; else return $?; fi
+    fi
+  done
+  echo "[optional-run-artifacts] listing exhausted attempts=3 exit=$status" >&2
+  return "$status"
+}
+
 download_pattern() {
-  artifacts=$(list_artifact_names | awk '!seen[$0]++') || return $?
+  artifacts=$(list_artifact_names) || return $?
+  if [ -n "$artifacts" ]; then
+    artifacts=$(printf '%s\n' "$artifacts" | awk '!seen[$0]++')
+  fi
   selected_artifacts=()
   while IFS= read -r artifact; do
     [ -n "$artifact" ] || continue