Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
127 lines
4.1 KiB
TypeScript
127 lines
4.1 KiB
TypeScript
// Release preflight tests keep generated-artifact checks fail-closed for operators.
|
|
import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
|
import { delimiter, join } from "node:path";
|
|
import { spawnSync } from "node:child_process";
|
|
import { afterEach, describe, expect, it } from "vitest";
|
|
import { cleanupTempDirs, makeTempDir } from "../helpers/temp-dir.js";
|
|
|
|
const SCRIPT = "scripts/release-preflight.mjs";
|
|
const CHECK_COMMANDS = [
|
|
"deps:root-ownership:check",
|
|
"deps:shrinkwrap:check",
|
|
"plugins:sync:check",
|
|
"plugins:inventory:check",
|
|
"config:schema:check",
|
|
"config:channels:check",
|
|
"config:docs:check",
|
|
"plugin-sdk:check-exports",
|
|
"plugin-sdk:api:check",
|
|
"plugin-sdk:surface:check",
|
|
];
|
|
const FIX_COMMANDS = [
|
|
"plugins:sync",
|
|
"deps:shrinkwrap:changed:generate",
|
|
"plugins:inventory:gen",
|
|
"config:schema:gen",
|
|
"config:channels:gen",
|
|
"config:docs:gen",
|
|
"plugin-sdk:sync-exports",
|
|
"plugin-sdk:api:gen",
|
|
];
|
|
|
|
const tempDirs = new Set<string>();
|
|
|
|
afterEach(() => {
|
|
cleanupTempDirs(tempDirs);
|
|
});
|
|
|
|
function makeFakePnpm(): { binDir: string; logPath: string } {
|
|
const root = makeTempDir(tempDirs, "openclaw-release-preflight-");
|
|
const binDir = join(root, "bin");
|
|
const logPath = join(root, "pnpm.log");
|
|
mkdirSync(binDir);
|
|
const pnpmPath = join(binDir, "pnpm");
|
|
writeFileSync(
|
|
pnpmPath,
|
|
`#!/usr/bin/env node
|
|
import { appendFileSync } from "node:fs";
|
|
|
|
const command = process.argv.slice(2).join(" ");
|
|
appendFileSync(process.env.OPENCLAW_RELEASE_PREFLIGHT_PNPM_LOG, command + "\\n");
|
|
const failures = new Set((process.env.OPENCLAW_RELEASE_PREFLIGHT_FAIL_COMMANDS ?? "").split(";").filter(Boolean));
|
|
process.exit(failures.has(command) ? 7 : 0);
|
|
`,
|
|
{ mode: 0o755 },
|
|
);
|
|
chmodSync(pnpmPath, 0o755);
|
|
return { binDir, logPath };
|
|
}
|
|
|
|
function runPreflight(
|
|
args: string[],
|
|
fakePnpm?: ReturnType<typeof makeFakePnpm>,
|
|
extraEnv: NodeJS.ProcessEnv = {},
|
|
) {
|
|
return spawnSync(process.execPath, [SCRIPT, ...args], {
|
|
cwd: process.cwd(),
|
|
encoding: "utf8",
|
|
env: {
|
|
...process.env,
|
|
...extraEnv,
|
|
...(fakePnpm
|
|
? {
|
|
OPENCLAW_RELEASE_PREFLIGHT_PNPM_LOG: fakePnpm.logPath,
|
|
PATH: `${fakePnpm.binDir}${delimiter}${process.env.PATH ?? ""}`,
|
|
}
|
|
: {}),
|
|
},
|
|
});
|
|
}
|
|
|
|
function readPnpmLog(logPath: string): string[] {
|
|
return readFileSync(logPath, "utf8").trimEnd().split("\n").filter(Boolean);
|
|
}
|
|
|
|
describe("scripts/release-preflight.mjs", () => {
|
|
it("rejects unknown arguments before running release checks", () => {
|
|
const result = runPreflight(["--fiix"]);
|
|
|
|
expect(result.status).toBe(1);
|
|
expect(result.stderr).toContain("Unknown release preflight argument: --fiix");
|
|
expect(result.stderr).toContain("Usage: node scripts/release-preflight.mjs [--check|--fix]");
|
|
expect(result.stdout).toBe("");
|
|
});
|
|
|
|
it("runs every check command and reports all failed release artifact checks", () => {
|
|
const fakePnpm = makeFakePnpm();
|
|
const result = runPreflight(["--check"], fakePnpm, {
|
|
OPENCLAW_RELEASE_PREFLIGHT_FAIL_COMMANDS: "plugins:sync:check;config:docs:check",
|
|
});
|
|
|
|
expect(result.status).toBe(1);
|
|
expect(readPnpmLog(fakePnpm.logPath)).toEqual(CHECK_COMMANDS);
|
|
expect(result.stderr).toContain("- plugin versions: exit 7 (pnpm plugins:sync:check)");
|
|
expect(result.stderr).toContain("- config docs baseline: exit 7 (pnpm config:docs:check)");
|
|
});
|
|
|
|
it("stops refresh mode at the first failed generator before running checks", () => {
|
|
const fakePnpm = makeFakePnpm();
|
|
const result = spawnSync(process.execPath, [SCRIPT, "--fix"], {
|
|
cwd: process.cwd(),
|
|
encoding: "utf8",
|
|
env: {
|
|
...process.env,
|
|
OPENCLAW_RELEASE_PREFLIGHT_FAIL_COMMANDS: "deps:shrinkwrap:changed:generate",
|
|
OPENCLAW_RELEASE_PREFLIGHT_PNPM_LOG: fakePnpm.logPath,
|
|
PATH: `${fakePnpm.binDir}${delimiter}${process.env.PATH ?? ""}`,
|
|
},
|
|
});
|
|
|
|
expect(result.status).toBe(1);
|
|
expect(readPnpmLog(fakePnpm.logPath)).toEqual(FIX_COMMANDS.slice(0, 2));
|
|
expect(result.stderr).toContain(
|
|
"- npm shrinkwraps: exit 7 (pnpm deps:shrinkwrap:changed:generate)",
|
|
);
|
|
});
|
|
});
|