imccyu
787443b13f
The harness packages declare the vendored framework as a peer, so installing only the dsh tarballs left npm resolving @deepseek-ai/cordis from a private registry the credential-free pack job cannot reach. The verification now takes several pack directories and installs every tarball in them, and the dsh workflow packs the vendored family for that purpose while still publishing only its own set. The verification also reads what each tarball declares instead of what the checkout says, which is what let the process and tarball helpers become one home each - the three copies of a spawn wrapper were a duplication finding.
54 lines
1.9 KiB
TypeScript
54 lines
1.9 KiB
TypeScript
/**
|
|
* Reading packed npm tarballs and the order file that accompanies them.
|
|
*
|
|
* The release steps after pack treat a directory of tarballs as the unit of
|
|
* work, so they read what a tarball declares rather than what the checkout
|
|
* currently says.
|
|
*/
|
|
|
|
import { readFileSync } from 'node:fs'
|
|
import { join } from 'node:path'
|
|
import { capture } from './process.ts'
|
|
|
|
/** Name of the file recording the order in which a packed family uploads. */
|
|
export const PUBLISH_ORDER_FILE = 'publish-order.txt'
|
|
|
|
/** What a packed tarball calls itself. */
|
|
export interface PackedIdentity {
|
|
/** Package name from the packed manifest. */
|
|
readonly name: string
|
|
/** Package version from the packed manifest. */
|
|
readonly version: string
|
|
}
|
|
|
|
/**
|
|
* List a tarball's members.
|
|
* @param tarball - absolute tarball path.
|
|
* @returns Every path inside the archive.
|
|
*/
|
|
export function tarballFiles(tarball: string): string[] {
|
|
return capture('tar', ['-tzf', tarball]).split('\n').filter(line => line !== '')
|
|
}
|
|
|
|
/**
|
|
* Read a packed tarball's own manifest.
|
|
* @param tarball - absolute tarball path.
|
|
* @returns The name and version the tarball declares.
|
|
*/
|
|
export function packedIdentity(tarball: string): PackedIdentity {
|
|
const manifest: unknown = JSON.parse(capture('tar', ['-xOzf', tarball, 'package/package.json']))
|
|
if (manifest === null || typeof manifest !== 'object') throw new Error(`${tarball} has no manifest`)
|
|
const { name, version } = manifest as Record<string, unknown>
|
|
if (typeof name !== 'string' || typeof version !== 'string') throw new Error(`${tarball} manifest lacks name/version`)
|
|
return { name, version }
|
|
}
|
|
|
|
/**
|
|
* Read a packed directory's upload order.
|
|
* @param directory - absolute path of a pack output directory.
|
|
* @returns Tarball filenames in upload order.
|
|
*/
|
|
export function readPublishOrder(directory: string): string[] {
|
|
return readFileSync(join(directory, PUBLISH_ORDER_FILE), 'utf8').split('\n').filter(line => line !== '')
|
|
}
|