ac11afecf3
- issue-done/plan-issue-ready: env FORGEJO_API_TOKEN (GITHUB_TOKEN 403 em Issues) + fork guard (checkout de fork roda script do fork com o PAT — RCE) - forgejo-issue-transition: falha de flip vira exit 1 (job vermelho, nunca skip silencioso) - waitForChecks: exige o rollup CI (PR) / checks presente+verde (raça PR #52: snapshot com jobs não-agendados parecia verde); mergeable=false só conta como conflito após a cascata assentar; timeouts 30→45min (CLI) e 40→55min (workflow) - configure-branch-protection: contexto real CI (PR) / checks* (Forgejo casa por glob contra 'CI (PR) / checks (pull_request)'; literal 'checks' nunca casaria), idempotente GET→POST/PATCH, verificação pós-aplicação; decisão pura em scripts/lib/branch-protection.mjs - docs honestas (AGENT-OPS, agent-pr-workflow.mdc, CUTOVER-MAIN-ONLY, README) - testes: raça do rollup/rollup failure/mergeable pré-settle + branchProtection create/update/noop + glob real
80 lines
2.7 KiB
JavaScript
80 lines
2.7 KiB
JavaScript
/**
|
|
* Plain-Node CLI (no pnpm) — on merge to main, flip Issues cited as
|
|
* `Closes #N` / `Fixes #N` in the PR body to `done` + `in-prod` and comment.
|
|
* Replacement for the `gh issue edit/comment` loop of issue-done-on-main-merge.
|
|
* The PR body comes from the API (Forgejo's PR webhook payload is not relied
|
|
* on), so the workflow only needs the PR number.
|
|
*
|
|
* OPS61: a failed flip exits 1 — the flip is the whole purpose of this
|
|
* workflow, and the 403 era proved that a swallowed error ends the job
|
|
* "success" while the status labels lie. Sibling issues are still attempted
|
|
* (the loop does not abort), but the job goes red so the breakage is visible.
|
|
*
|
|
* node scripts/forgejo-issue-transition.mjs --pr <N>
|
|
*/
|
|
|
|
import { createApi } from './lib/forgejo-api.mjs'
|
|
|
|
const parseArgs = (argv) => {
|
|
const flags = {}
|
|
for (let index = 2; index < argv.length; index += 1) {
|
|
const arg = argv[index]
|
|
if (arg.startsWith('--')) {
|
|
const name = arg.slice(2)
|
|
const next = argv[index + 1]
|
|
flags[name] = typeof next === 'string' && !next.startsWith('--') ? next : true
|
|
if (typeof next === 'string' && !next.startsWith('--')) index += 1
|
|
}
|
|
}
|
|
return flags
|
|
}
|
|
|
|
const flags = parseArgs(process.argv)
|
|
const prNumber = Number(flags.pr)
|
|
if (!Number.isInteger(prNumber) || prNumber <= 0) {
|
|
console.error('Usage: node scripts/forgejo-issue-transition.mjs --pr <N>')
|
|
process.exit(1)
|
|
}
|
|
|
|
const api = createApi({})
|
|
const pr = await api.getPullRequest(prNumber)
|
|
if (!pr) {
|
|
console.error(`[forgejo-issue-transition] PR #${prNumber} não encontrada`)
|
|
process.exit(1)
|
|
}
|
|
if (!pr.merged) {
|
|
console.log(`[forgejo-issue-transition] PR #${prNumber} não mergeada — skip`)
|
|
process.exit(0)
|
|
}
|
|
|
|
const numbers = [
|
|
...new Set([...pr.body.matchAll(/(?:closes|fixes)\s+#(\d+)/gi)].map((match) => Number(match[1]))),
|
|
]
|
|
|
|
if (numbers.length === 0) {
|
|
console.log(`[forgejo-issue-transition] PR #${prNumber}: nenhum Closes/Fixes #N — nada a fazer`)
|
|
process.exit(0)
|
|
}
|
|
|
|
let flipFailed = false
|
|
for (const number of numbers) {
|
|
try {
|
|
await api.setLabels(number, { add: ['done', 'in-prod'], remove: ['in-progress'] })
|
|
await api.addComment(
|
|
number,
|
|
`Merged em main via PR #${prNumber} — \`done\` + \`in-prod\`. Deploy de produção segue o verificador \`ci.yml\` (gated).`,
|
|
)
|
|
console.log(`[forgejo-issue-transition] #${number}: done + in-prod`)
|
|
} catch (error) {
|
|
flipFailed = true
|
|
console.error(
|
|
`[forgejo-issue-transition] #${number}: FLIP FALHOU — ${error instanceof Error ? error.message : error}`,
|
|
)
|
|
}
|
|
}
|
|
if (flipFailed) {
|
|
console.error(
|
|
`[forgejo-issue-transition] PR #${prNumber}: ${numbers.length} Issue(s) citada(s), pelo menos 1 flip falhou — os labels de status podem estar mentindo.`,
|
|
)
|
|
process.exit(1)
|
|
}
|