mirror of
https://github.com/fsolla/teqo.git
synced 2026-11-13 15:13:07 +00:00
63 lines
3 KiB
JavaScript
63 lines
3 KiB
JavaScript
/**
|
|
* Pure decision logic for the GitHub PR auto-merge safety net
|
|
* (scripts/github-pr-automerge.mjs). Unit-tested in
|
|
* tests/unit/githubPrFlow.unit.spec.ts — the OPS57 (draft veto) / OPS64
|
|
* (never merge on red CI) pins ported to the GitHub mechanism.
|
|
*
|
|
* GitHub's native auto-merge only fires with the required checks green, so
|
|
* the safety net's only real decisions are: skip (non-main base, draft veto,
|
|
* already merged, audit/* veto) or mark-ready (cursor/* draft) before arming
|
|
* auto-merge.
|
|
*/
|
|
|
|
export const CURSOR_HEAD_PREFIX = 'cursor/'
|
|
|
|
/** OPS57: only `cursor/*` drafts get force-marked ready — any other draft is the actor's veto. */
|
|
export const isCursorHead = (ref) => typeof ref === 'string' && ref.startsWith(CURSOR_HEAD_PREFIX)
|
|
|
|
/**
|
|
* OPS98: branches `audit/*` belong to the engineering-audit overnight run —
|
|
* its single PR must stay Ready WITHOUT auto-merge (the human is the final
|
|
* gate). The veto is dominant: it applies to ready and draft states alike.
|
|
*/
|
|
export const AUDIT_HEAD_PREFIX = 'audit/'
|
|
|
|
export const isAuditHead = (ref) => typeof ref === 'string' && ref.startsWith(AUDIT_HEAD_PREFIX)
|
|
|
|
/**
|
|
* OPS71-FLIP: the auto-merge MUST be armed with a real user PAT. Arming with
|
|
* the built-in GITHUB_TOKEN makes the merge happen as `github-actions[bot]`,
|
|
* and GitHub's anti-recursion never creates workflow runs for events
|
|
* triggered by GITHUB_TOKEN actions — the post-merge `closed` flips would
|
|
* silently never run (live finding PR #746). Fail-closed: no token → ok:false;
|
|
* the CLI exits 1 instead of falling back to the run token.
|
|
*
|
|
* @param {{ AUTOMERGE_PAT?: string }} [env]
|
|
* @returns {{ ok: true, token: string } | { ok: false, reason: string }}
|
|
*/
|
|
export const automergeArmingToken = (env = process.env) => {
|
|
const token = env.AUTOMERGE_PAT
|
|
if (typeof token === 'string' && token.length > 0) return { ok: true, token }
|
|
return {
|
|
ok: false,
|
|
reason:
|
|
'AUTOMERGE_PAT ausente — sem ele o merge aconteceria como github-actions[bot] e o evento closed não criaria runs (flips pós-merge silenciosos). Defina o secret AUTOMERGE_PAT no GitHub (PAT do fsolla, escopos pull-requests: write + contents: write no repo) — ver docs/AGENT-OPS.md.',
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param {object|null} pr - normalized PR from github-api (or null)
|
|
* @returns {{ action: 'skip' | 'mark-ready' | 'enable-auto-merge', reason: string }}
|
|
*/
|
|
export const decideAutomergeAction = (pr) => {
|
|
if (!pr) return { action: 'skip', reason: 'pr-inexistente' }
|
|
if (isAuditHead(pr.head?.ref)) return { action: 'skip', reason: 'audit-veto' }
|
|
if (pr.merged) return { action: 'skip', reason: 'ja-mergeada' }
|
|
if (pr.state !== 'OPEN') return { action: 'skip', reason: 'pr-nao-aberta' }
|
|
if (pr.base?.ref !== 'main') return { action: 'skip', reason: 'base-nao-main' }
|
|
if (pr.draft) {
|
|
if (isCursorHead(pr.head?.ref)) return { action: 'mark-ready', reason: 'draft-cursor' }
|
|
return { action: 'skip', reason: 'draft-veto' }
|
|
}
|
|
return { action: 'enable-auto-merge', reason: 'ready' }
|
|
}
|